From 3aaac6493e2a1e2d7ecf99d6db6613e13fc8f396 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Wed, 28 Oct 2026 17:01:44 +0100
Subject: [PATCH 001/169] chore(deps): Bump @sentry/conventions to 0.30.0
 (#25837)

Bump `@sentry/conventions` to `0.30.0` across the SDK packages and test
applications, preserving existing exact and caret pins.

The release adds attributes and operations without removing exports or
changing existing constant values, so no SDK code changes are required.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../browser-integration-tests/package.json    |   2 +-
 .../cloudflare-integration-tests/package.json |   2 +-
 .../deno-integration-tests/package.json       |   2 +-
 .../test-applications/angular-19/package.json |   2 +-
 .../cloudflare-pi-durable/package.json        |   2 +-
 .../package.json                              |   2 +-
 .../nextjs-16-tunnel/package.json             |   2 +-
 .../test-applications/nitro-3/package.json    |   2 +-
 .../test-applications/node-eve/package.json   |   2 +-
 .../test-applications/node-hapi/package.json  |   2 +-
 .../node-mastra/package.json                  |   2 +-
 .../package.json                              |   2 +-
 .../node-pi-durable/package.json              |   2 +-
 .../nuxt-4-static/package.json                |   2 +-
 .../solidstart-static/package.json            |   2 +-
 .../node-integration-tests/package.json       |   2 +-
 packages/angular/package.json                 |   2 +-
 packages/astro/package.json                   |   2 +-
 packages/aws-serverless/package.json          |   2 +-
 packages/browser-utils/package.json           |   2 +-
 packages/browser/package.json                 |   2 +-
 packages/bun/package.json                     |   2 +-
 packages/cloudflare/package.json              |   2 +-
 packages/core/package.json                    |   2 +-
 packages/deno/package.json                    |   2 +-
 packages/effect/package.json                  |   2 +-
 packages/elysia/package.json                  |   2 +-
 packages/ember/package.json                   |   2 +-
 packages/google-cloud-serverless/package.json |   2 +-
 packages/hono/package.json                    |   2 +-
 packages/nestjs/package.json                  |   2 +-
 packages/nextjs/package.json                  |   2 +-
 packages/nitro/package.json                   |   2 +-
 packages/node/package.json                    |   2 +-
 packages/nuxt/package.json                    |   2 +-
 packages/opentelemetry/package.json           |   2 +-
 packages/react-router/package.json            |   2 +-
 packages/react/package.json                   |   2 +-
 packages/remix/package.json                   |   2 +-
 packages/replay-internal/package.json         |   2 +-
 packages/server-utils/package.json            |   2 +-
 packages/solid/package.json                   |   2 +-
 packages/solidstart/package.json              |   2 +-
 packages/svelte/package.json                  |   2 +-
 packages/sveltekit/package.json               |   2 +-
 packages/tanstackstart-react/package.json     |   2 +-
 packages/vue/package.json                     |   2 +-
 pnpm-lock.yaml                                | 146 +++++++++---------
 pnpm-workspace.yaml                           |   2 +-
 49 files changed, 121 insertions(+), 121 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index c42609533af1..f2c5860f3141 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -63,7 +63,7 @@
     "@sentry/browser": "11.9.0",
     "@sentry/replay": "11.9.0",
     "@sentry/opentelemetry": "11.9.0",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@supabase/supabase-js": "2.109.0",
     "axios": "1.20.0",
     "babel-loader": "^10.1.1",
diff --git a/dev-packages/cloudflare-integration-tests/package.json b/dev-packages/cloudflare-integration-tests/package.json
index a81c60d026ff..298581f561fd 100644
--- a/dev-packages/cloudflare-integration-tests/package.json
+++ b/dev-packages/cloudflare-integration-tests/package.json
@@ -36,7 +36,7 @@
     "@cloudflare/workers-types-v5": "npm:@cloudflare/workers-types@5.20260710.1",
     "@opentelemetry/api": "^1.9.1",
     "@sentry-internal/test-utils": "11.9.0",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "eslint-plugin-regexp": "^3.1.0",
     "prisma": "6.15.0",
     "vite": "^8.3.1",
diff --git a/dev-packages/deno-integration-tests/package.json b/dev-packages/deno-integration-tests/package.json
index 58809ae6896c..646eb680721e 100644
--- a/dev-packages/deno-integration-tests/package.json
+++ b/dev-packages/deno-integration-tests/package.json
@@ -23,7 +23,7 @@
   },
   "devDependencies": {
     "@sentry-internal/node-integration-tests": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "vitest": "^4.1.11"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/angular-19/package.json b/dev-packages/e2e-tests/test-applications/angular-19/package.json
index c4d95a31e2cf..1c0a004af2fe 100644
--- a/dev-packages/e2e-tests/test-applications/angular-19/package.json
+++ b/dev-packages/e2e-tests/test-applications/angular-19/package.json
@@ -36,7 +36,7 @@
     "@angular/cli": "^19.0.0",
     "@angular/compiler-cli": "^19.0.0",
     "@playwright/test": "1.64.1",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "@types/jasmine": "~5.1.0",
diff --git a/dev-packages/e2e-tests/test-applications/cloudflare-pi-durable/package.json b/dev-packages/e2e-tests/test-applications/cloudflare-pi-durable/package.json
index 4d537a600017..5989cce49a5f 100644
--- a/dev-packages/e2e-tests/test-applications/cloudflare-pi-durable/package.json
+++ b/dev-packages/e2e-tests/test-applications/cloudflare-pi-durable/package.json
@@ -22,7 +22,7 @@
     "@cloudflare/workers-types": "^4.20260426.0",
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "typescript": "^5.5.2",
     "vite": "7.3.5",
     "wrangler": "^4.136.2"
diff --git a/dev-packages/e2e-tests/test-applications/cloudflare-workers-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/cloudflare-workers-send-to-sentry/package.json
index f32066af21d8..78012b914707 100644
--- a/dev-packages/e2e-tests/test-applications/cloudflare-workers-send-to-sentry/package.json
+++ b/dev-packages/e2e-tests/test-applications/cloudflare-workers-send-to-sentry/package.json
@@ -19,7 +19,7 @@
     "@cloudflare/workers-types": "^5.20260727.1",
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@types/node": "^26.1.2",
     "sentry": "~0.44.1",
     "typescript": "~6.0.3",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
index 49fab7eb7fe7..4e887a8425ec 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
@@ -41,7 +41,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
diff --git a/dev-packages/e2e-tests/test-applications/nitro-3/package.json b/dev-packages/e2e-tests/test-applications/nitro-3/package.json
index 05907e35b114..3bfee836718a 100644
--- a/dev-packages/e2e-tests/test-applications/nitro-3/package.json
+++ b/dev-packages/e2e-tests/test-applications/nitro-3/package.json
@@ -21,7 +21,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry/core": "latest || *",
     "nitro": "^3.0.260522-beta",
     "rolldown": "latest",
diff --git a/dev-packages/e2e-tests/test-applications/node-eve/package.json b/dev-packages/e2e-tests/test-applications/node-eve/package.json
index bf4389573a07..3b45ee182d4e 100644
--- a/dev-packages/e2e-tests/test-applications/node-eve/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-eve/package.json
@@ -32,7 +32,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "@types/node": "24.x",
     "typescript": "~5.9.0"
diff --git a/dev-packages/e2e-tests/test-applications/node-hapi/package.json b/dev-packages/e2e-tests/test-applications/node-hapi/package.json
index 2b0a3b370e22..8a7725dad0b5 100644
--- a/dev-packages/e2e-tests/test-applications/node-hapi/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-hapi/package.json
@@ -17,7 +17,7 @@
   },
   "devDependencies": {
     "@playwright/test": "1.64.1",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/node-mastra/package.json b/dev-packages/e2e-tests/test-applications/node-mastra/package.json
index e17539bcbe70..b24a01edc9be 100644
--- a/dev-packages/e2e-tests/test-applications/node-mastra/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-mastra/package.json
@@ -29,7 +29,7 @@
     "@mastra/deployer": "~1.74.0",
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@types/node": "24.x",
     "mastra": "~1.28.0",
     "typescript": "~5.9.0"
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json
index 5f2855dd6dc1..7785dcfc5b72 100644
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json
@@ -24,7 +24,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@types/express": "^4.17.21",
     "@types/node": "^24.0.0",
     "sentry": "~0.44.1",
diff --git a/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json b/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
index 423983c0ca7b..12bd7ae0b2cd 100644
--- a/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
@@ -19,7 +19,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "@types/node": "24.x"
   },
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
index e21627e76f08..63fd1d8c01e9 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
@@ -26,7 +26,7 @@
   },
   "devDependencies": {
     "@playwright/test": "1.64.1",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   },
   "sentryTest": {
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-static/package.json b/dev-packages/e2e-tests/test-applications/solidstart-static/package.json
index 38ddeac40f07..1952ea19d33a 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/solidstart-static/package.json
@@ -18,7 +18,7 @@
   },
   "devDependencies": {
     "@playwright/test": "1.64.1",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
     "@solidjs/meta": "^0.29.4",
     "@solidjs/router": "^1.0.0",
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 33358dd59fc2..fb4e2a5c2075 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -118,7 +118,7 @@
     "@neondatabase/serverless": "1.2.0",
     "@opentelemetry/instrumentation-http": "0.220.0",
     "@sentry-internal/rollup-utils": "11.9.0",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "11.9.0",
     "@sentry/node-native": "11.9.0",
     "@types/amqplib": "^0.10.5",
diff --git a/packages/angular/package.json b/packages/angular/package.json
index eeb70cb12cf1..dd9cedba286d 100644
--- a/packages/angular/package.json
+++ b/packages/angular/package.json
@@ -23,7 +23,7 @@
   "dependencies": {
     "@sentry/browser": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "tslib": "^2.4.1"
   },
   "devDependencies": {
diff --git a/packages/astro/package.json b/packages/astro/package.json
index bf1ef9a81cad..f6111dc2aa5e 100644
--- a/packages/astro/package.json
+++ b/packages/astro/package.json
@@ -53,7 +53,7 @@
   "dependencies": {
     "@sentry/browser": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
     "@sentry/server-utils": "11.9.0",
diff --git a/packages/aws-serverless/package.json b/packages/aws-serverless/package.json
index ee96999c0236..35fd2cc288ad 100644
--- a/packages/aws-serverless/package.json
+++ b/packages/aws-serverless/package.json
@@ -66,7 +66,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
diff --git a/packages/browser-utils/package.json b/packages/browser-utils/package.json
index bad56e53adf6..eee3838458f2 100644
--- a/packages/browser-utils/package.json
+++ b/packages/browser-utils/package.json
@@ -34,7 +34,7 @@
   },
   "dependencies": {
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "web-vitals": "^6.2.3"
   },
   "devDependencies": {
diff --git a/packages/browser/package.json b/packages/browser/package.json
index 786778dc9ae0..050cb70e27ed 100644
--- a/packages/browser/package.json
+++ b/packages/browser/package.json
@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "@sentry/browser-utils": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/feedback": "11.9.0",
     "@sentry/replay": "11.9.0",
     "@sentry/replay-canvas": "11.9.0",
diff --git a/packages/bun/package.json b/packages/bun/package.json
index 11d630c9eb77..8e6ae1f0d2b2 100644
--- a/packages/bun/package.json
+++ b/packages/bun/package.json
@@ -45,7 +45,7 @@
   "dependencies": {
     "@sentry/bundler-plugins": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-utils": "11.9.0"
   },
diff --git a/packages/cloudflare/package.json b/packages/cloudflare/package.json
index 579acff8f018..bc725a0198df 100644
--- a/packages/cloudflare/package.json
+++ b/packages/cloudflare/package.json
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/opentelemetry": "11.9.0",
     "@sentry/server-utils": "11.9.0",
diff --git a/packages/core/package.json b/packages/core/package.json
index cefeae6d9a5f..610a479a9e0e 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -92,6 +92,6 @@
     "zod": "^4.6.7"
   },
   "dependencies": {
-    "@sentry/conventions": "^0.29.0"
+    "@sentry/conventions": "^0.30.0"
   }
 }
diff --git a/packages/deno/package.json b/packages/deno/package.json
index 80192978281f..07f1c597210a 100644
--- a/packages/deno/package.json
+++ b/packages/deno/package.json
@@ -28,7 +28,7 @@
   ],
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
     "@sentry/server-utils": "11.9.0"
diff --git a/packages/effect/package.json b/packages/effect/package.json
index 18c630ac3927..3263afd87819 100644
--- a/packages/effect/package.json
+++ b/packages/effect/package.json
@@ -45,7 +45,7 @@
   },
   "dependencies": {
     "@sentry/browser": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0"
   },
diff --git a/packages/elysia/package.json b/packages/elysia/package.json
index 4a8d96ed5226..60aeba82d343 100644
--- a/packages/elysia/package.json
+++ b/packages/elysia/package.json
@@ -34,7 +34,7 @@
   "dependencies": {
     "@sentry/bun": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0"
+    "@sentry/conventions": "^0.30.0"
   },
   "peerDependencies": {
     "elysia": "^1.4.0"
diff --git a/packages/ember/package.json b/packages/ember/package.json
index a7be16636789..456d590218ce 100644
--- a/packages/ember/package.json
+++ b/packages/ember/package.json
@@ -45,7 +45,7 @@
     "@embroider/addon-shim": "^1.10.2",
     "@embroider/macros": "^1.20.2",
     "@sentry/browser": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "decorator-transforms": "^2.3.2"
   },
diff --git a/packages/google-cloud-serverless/package.json b/packages/google-cloud-serverless/package.json
index 48fc86974e89..3c993a16495c 100644
--- a/packages/google-cloud-serverless/package.json
+++ b/packages/google-cloud-serverless/package.json
@@ -36,7 +36,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
diff --git a/packages/hono/package.json b/packages/hono/package.json
index 13efe1db2f62..0bc0e11d7cfd 100644
--- a/packages/hono/package.json
+++ b/packages/hono/package.json
@@ -74,7 +74,7 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/server-utils": "11.9.0"
   },
   "peerDependencies": {
diff --git a/packages/nestjs/package.json b/packages/nestjs/package.json
index 7ed973221f41..37d41ed61f44 100644
--- a/packages/nestjs/package.json
+++ b/packages/nestjs/package.json
@@ -54,7 +54,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-utils": "11.9.0"
diff --git a/packages/nextjs/package.json b/packages/nextjs/package.json
index df4689b0b218..3ffcde165c1f 100644
--- a/packages/nextjs/package.json
+++ b/packages/nextjs/package.json
@@ -87,7 +87,7 @@
     "@sentry/browser-utils": "11.9.0",
     "@sentry/bundler-plugins": "11.9.0",
     "@sentry/cloudflare": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/opentelemetry": "11.9.0",
diff --git a/packages/nitro/package.json b/packages/nitro/package.json
index 7870033a75cb..debf94113cde 100644
--- a/packages/nitro/package.json
+++ b/packages/nitro/package.json
@@ -36,7 +36,7 @@
   },
   "dependencies": {
     "@sentry/bundler-plugins": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
diff --git a/packages/node/package.json b/packages/node/package.json
index 35ad65e7cb29..53e031a730b6 100644
--- a/packages/node/package.json
+++ b/packages/node/package.json
@@ -78,7 +78,7 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/opentelemetry": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
index a270d2044bc3..c7b12da1ad78 100644
--- a/packages/nuxt/package.json
+++ b/packages/nuxt/package.json
@@ -56,7 +56,7 @@
     "@nuxt/kit": "^4.6.0",
     "@sentry/browser": "11.9.0",
     "@sentry/cloudflare": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/bundler-plugins": "11.9.0",
diff --git a/packages/opentelemetry/package.json b/packages/opentelemetry/package.json
index e9fb730e6f1e..bd0c6cbc5d04 100644
--- a/packages/opentelemetry/package.json
+++ b/packages/opentelemetry/package.json
@@ -27,7 +27,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0"
   },
   "peerDependencies": {
diff --git a/packages/react-router/package.json b/packages/react-router/package.json
index 097e965abe48..657fe794c837 100644
--- a/packages/react-router/package.json
+++ b/packages/react-router/package.json
@@ -57,7 +57,7 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
     "@sentry/browser": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/react": "11.9.0",
diff --git a/packages/react/package.json b/packages/react/package.json
index 9ce7f6289594..197f37323307 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -59,7 +59,7 @@
   "dependencies": {
     "@sentry/browser": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0"
+    "@sentry/conventions": "^0.30.0"
   },
   "peerDependencies": {
     "react": "17.x || 18.x || 19.x",
diff --git a/packages/remix/package.json b/packages/remix/package.json
index 9ba20c92c624..0bfc05081f82 100644
--- a/packages/remix/package.json
+++ b/packages/remix/package.json
@@ -78,7 +78,7 @@
     "@remix-run/router": "^1.23.4",
     "@sentry/browser": "11.9.0",
     "@sentry/bundler-plugins": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/react": "11.9.0",
diff --git a/packages/replay-internal/package.json b/packages/replay-internal/package.json
index b5f133420845..a07da40c610d 100644
--- a/packages/replay-internal/package.json
+++ b/packages/replay-internal/package.json
@@ -74,7 +74,7 @@
     "@babel/core": "^7.29.6",
     "@sentry-internal/replay-worker": "11.9.0",
     "@sentry-internal/rollup-utils": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/rrweb": "2.45.0",
     "@sentry/rrweb-snapshot": "2.45.0",
     "fflate": "0.8.3",
diff --git a/packages/server-utils/package.json b/packages/server-utils/package.json
index 5ac7402840b8..d12ca1b31756 100644
--- a/packages/server-utils/package.json
+++ b/packages/server-utils/package.json
@@ -97,7 +97,7 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0"
   },
   "devDependencies": {
diff --git a/packages/solid/package.json b/packages/solid/package.json
index 65642c9199bf..c563e7c1e1c5 100644
--- a/packages/solid/package.json
+++ b/packages/solid/package.json
@@ -56,7 +56,7 @@
   "dependencies": {
     "@sentry/browser": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0"
+    "@sentry/conventions": "^0.30.0"
   },
   "peerDependencies": {
     "@solidjs/router": ">=0.13.4 <2.0.0-0",
diff --git a/packages/solidstart/package.json b/packages/solidstart/package.json
index bd3bf459cb15..65e8bdca018d 100644
--- a/packages/solidstart/package.json
+++ b/packages/solidstart/package.json
@@ -87,7 +87,7 @@
     "@sentry/server-utils": "11.9.0",
     "@sentry/solid": "11.9.0",
     "@sentry/bundler-plugins": "11.9.0",
-    "@sentry/conventions": "0.29.0",
+    "@sentry/conventions": "0.30.0",
     "h3": "^1.15.10"
   },
   "devDependencies": {
diff --git a/packages/svelte/package.json b/packages/svelte/package.json
index f9f59c288044..b09e17909c9f 100644
--- a/packages/svelte/package.json
+++ b/packages/svelte/package.json
@@ -33,7 +33,7 @@
   },
   "dependencies": {
     "@sentry/browser": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "magic-string": "~0.30.0"
   },
diff --git a/packages/sveltekit/package.json b/packages/sveltekit/package.json
index f5bf6beae848..d54565d6293b 100644
--- a/packages/sveltekit/package.json
+++ b/packages/sveltekit/package.json
@@ -73,7 +73,7 @@
     "@opentelemetry/api": "^1.9.1",
     "@sentry/cloudflare": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/node": "11.9.0",
     "@sentry/server-runtime-injection": "11.9.0",
     "@sentry/server-utils": "11.9.0",
diff --git a/packages/tanstackstart-react/package.json b/packages/tanstackstart-react/package.json
index 7f8e27ab2ebe..32416e62acdb 100644
--- a/packages/tanstackstart-react/package.json
+++ b/packages/tanstackstart-react/package.json
@@ -53,7 +53,7 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
     "@sentry/browser-utils": "11.9.0",
-    "@sentry/conventions": "^0.29.0",
+    "@sentry/conventions": "^0.30.0",
     "@sentry/core": "11.9.0",
     "@sentry/node": "11.9.0",
     "@sentry/react": "11.9.0",
diff --git a/packages/vue/package.json b/packages/vue/package.json
index 260253be913d..44d591596bcc 100644
--- a/packages/vue/package.json
+++ b/packages/vue/package.json
@@ -46,7 +46,7 @@
   "dependencies": {
     "@sentry/browser": "11.9.0",
     "@sentry/core": "11.9.0",
-    "@sentry/conventions": "^0.29.0"
+    "@sentry/conventions": "^0.30.0"
   },
   "peerDependencies": {
     "@tanstack/vue-router": "^1.64.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1fb1417361a2..ada7519afbd4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -298,8 +298,8 @@ importers:
         specifier: 11.9.0
         version: link:../../packages/browser
       '@sentry/conventions':
-        specifier: 0.29.0
-        version: 0.29.0
+        specifier: 0.30.0
+        version: 0.30.0
       '@sentry/opentelemetry':
         specifier: 11.9.0
         version: link:../../packages/opentelemetry
@@ -510,8 +510,8 @@ importers:
         specifier: 11.9.0
         version: link:../test-utils
       '@sentry/conventions':
-        specifier: 0.29.0
-        version: 0.29.0
+        specifier: 0.30.0
+        version: 0.30.0
       eslint-plugin-regexp:
         specifier: ^3.1.0
         version: 3.1.0
@@ -547,8 +547,8 @@ importers:
         specifier: 11.9.0
         version: link:../node-integration-tests
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
@@ -852,8 +852,8 @@ importers:
         specifier: 11.9.0
         version: link:../test-utils
       '@sentry/conventions':
-        specifier: 0.29.0
-        version: 0.29.0
+        specifier: 0.30.0
+        version: 0.30.0
       '@sentry/node-native':
         specifier: 11.9.0
         version: link:../../packages/node-native
@@ -974,8 +974,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1035,8 +1035,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1063,8 +1063,8 @@ importers:
   packages/aws-serverless:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1097,8 +1097,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser-utils
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1125,8 +1125,8 @@ importers:
   packages/browser-utils:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1144,8 +1144,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1227,8 +1227,8 @@ importers:
         specifier: ^1.9.1
         version: 1.10.0
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1264,8 +1264,8 @@ importers:
   packages/core:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
     devDependencies:
       '@sentry-internal/rollup-utils':
         specifier: 11.9.0
@@ -1280,8 +1280,8 @@ importers:
         specifier: ^1.9.1
         version: 1.10.0
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1302,8 +1302,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1327,8 +1327,8 @@ importers:
         specifier: 11.9.0
         version: link:../bun
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1355,8 +1355,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1504,8 +1504,8 @@ importers:
   packages/google-cloud-serverless:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1544,8 +1544,8 @@ importers:
         specifier: ^1.9.1
         version: 1.10.0
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1597,8 +1597,8 @@ importers:
   packages/nestjs:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1643,8 +1643,8 @@ importers:
         specifier: 11.9.0
         version: link:../cloudflare
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1695,8 +1695,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1735,8 +1735,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1791,8 +1791,8 @@ importers:
         specifier: 11.9.0
         version: link:../cloudflare
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1852,8 +1852,8 @@ importers:
   packages/opentelemetry:
     dependencies:
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1890,8 +1890,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -1966,8 +1966,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2030,8 +2030,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2126,8 +2126,8 @@ importers:
         specifier: 11.9.0
         version: link:../../dev-packages/rollup-utils
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/rrweb':
         specifier: 2.45.0
         version: 2.45.0
@@ -2197,8 +2197,8 @@ importers:
         specifier: ^1.9.1
         version: 1.10.0
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2231,8 +2231,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2274,8 +2274,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: 0.29.0
-        version: 0.29.0
+        specifier: 0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2347,8 +2347,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2384,8 +2384,8 @@ importers:
         specifier: 11.9.0
         version: link:../cloudflare
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2448,8 +2448,8 @@ importers:
         specifier: 11.9.0
         version: link:../bundler-plugins
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -2516,8 +2516,8 @@ importers:
         specifier: 11.9.0
         version: link:../browser
       '@sentry/conventions':
-        specifier: ^0.29.0
-        version: 0.29.0
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.9.0
         version: link:../core
@@ -8178,8 +8178,8 @@ packages:
     resolution: {integrity: sha512-MLxTpTU3E8QACQ/5c0sENMR2gRiMXpGaKeD5IHY+3wyU2fUSJVB0QPU/l1WhoyZbX8N9ospBgf5UEG7taVF9rg==}
     engines: {node: ^14.15.0 || >=16.10.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
 
-  '@sentry/conventions@0.29.0':
-    resolution: {integrity: sha512-kYq9/HJ/l6MYP/srIc20dy1W4mWyJfCF0OWFF+RhBGZwyr/wCmtabRFKyw7kqM+DTwZXQOjSTSZUcJhDowcInQ==}
+  '@sentry/conventions@0.30.0':
+    resolution: {integrity: sha512-WTumd5A2iFmHTRubi6mc6gLHU8LswPQqoNaZu6T1cxiTUmy3WdEw0i8FAnVbcgxTlsumX5oh63/b4B9lY5wAPQ==}
     engines: {node: '>=14'}
 
   '@sentry/node-cpu-profiler@2.4.4':
@@ -26135,7 +26135,7 @@ snapshots:
     transitivePeerDependencies:
       - chokidar
 
-  '@sentry/conventions@0.29.0': {}
+  '@sentry/conventions@0.30.0': {}
 
   '@sentry/node-cpu-profiler@2.4.4':
     dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 6a1a161a3dd0..4a08da54755f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -116,7 +116,7 @@ allowBuilds:
   workerd: true
 minimumReleaseAgeExclude:
   - '@opentelemetry/api@1.10.0'
-  - '@sentry/conventions@0.29.0'
+  - '@sentry/conventions@0.30.0'
   - '@sentry/rrdom@2.45.0'
   - '@sentry/rrweb-snapshot@2.45.0'
   - '@sentry/rrweb-types@2.45.0'

From b382e301e24b3d905ecb208dc96bd233bce2a3e9 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Wed, 28 Oct 2026 17:03:22 +0100
Subject: [PATCH 002/169] fix(server-utils): Require a parent span for Tedious
 queries (#25822)

**Why:** Skip automatic Tedious DB spans outside an instrumented
operation because they lack the application context needed to identify
their origin, aligning with other DB integrations.

**How to review:** Fix is to early return in case there is no active
span. The rest of the PR is just adding regression coverage.

Closes #25797

---------

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../tracing/tedious/scenario-no-parent.mjs    | 51 +++++++++++++++++++
 .../suites/tracing/tedious/test.ts            | 39 ++++++++++++++
 .../server-utils/src/integrations/tedious.ts  |  5 ++
 3 files changed, 95 insertions(+)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs

diff --git a/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs b/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs
new file mode 100644
index 000000000000..a9ec1c51be16
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs
@@ -0,0 +1,51 @@
+import * as Sentry from '@sentry/node';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+import { Connection, Request } from 'tedious';
+
+function connect() {
+  return new Promise((resolve, reject) => {
+    const connection = new Connection({
+      server: '127.0.0.1',
+      authentication: {
+        type: 'default',
+        options: { userName: 'sa', password: 'TESTing123' },
+      },
+      options: { port: 1433, encrypt: false },
+    });
+
+    connection.on('connect', err => {
+      if (err) {
+        connection.close();
+        reject(err);
+      } else {
+        resolve(connection);
+      }
+    });
+    connection.connect();
+  });
+}
+
+function query(connection, sql) {
+  return new Promise((resolve, reject) => {
+    connection.execSql(new Request(sql, err => (err ? reject(err) : resolve())));
+  });
+}
+
+async function run() {
+  const connection = await waitForConnection(connect);
+
+  await query(connection, 'SELECT 1 AS before_parent');
+
+  const parent = Sentry.startInactiveSpan({ name: 'parent operation' });
+  await Sentry.withActiveSpan(parent, () => query(connection, 'SELECT 2 AS inside_parent'));
+
+  await query(connection, 'SELECT 3 AS after_parent');
+  connection.close();
+
+  // Flush every query before the parent signals that span collection is complete.
+  await Sentry.flush();
+  parent.end();
+  await Sentry.flush();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts b/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
index 31dd20a0c712..e6cd9de30da0 100644
--- a/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
@@ -1,3 +1,4 @@
+import type { SerializedStreamedSpan } from '@sentry/core';
 import {
   DB_NAMESPACE,
   DB_QUERY_SUMMARY,
@@ -122,6 +123,44 @@ describeWithDockerCompose('tedious auto instrumentation', { workingDirectory: [_
     });
   });
 
+  createEsmAndCjsTests(__dirname, 'scenario-no-parent.mjs', 'instrument.mjs', (createTestRunner, test) => {
+    test('only instruments queries with an active parent span', async () => {
+      const runner = createTestRunner();
+      const dbSpans = new Map<string, SerializedStreamedSpan>();
+      const spansPromise = runner.collectStreamedSpans(spans => {
+        for (const span of spans) {
+          if (span.attributes[SENTRY_ORIGIN]?.value === ORIGIN) {
+            dbSpans.set(span.span_id, span);
+          }
+        }
+        return spans.some(span => span.is_segment && span.name === 'parent operation');
+      });
+
+      await runner.unordered().start().completed();
+
+      const spans = await spansPromise;
+      const parent = spans.find(span => span.is_segment && span.name === 'parent operation');
+      expect(parent).toBeDefined();
+      expect(
+        Array.from(dbSpans.values(), span => ({
+          query: span.attributes[DB_QUERY_TEXT]?.value,
+          database: span.attributes[DB_NAMESPACE]?.value,
+          parentSpanId: span.parent_span_id,
+          traceId: span.trace_id,
+          isSegment: span.is_segment,
+        })),
+      ).toEqual([
+        {
+          query: 'SELECT ? AS inside_parent',
+          database: 'master',
+          parentSpanId: parent?.span_id,
+          traceId: parent?.trace_id,
+          isSegment: false,
+        },
+      ]);
+    });
+  });
+
   // tedious 20 requires Node >= 22.
   describe.runIf(supports({ min: 22 }))('tedious v20', () => {
     createEsmAndCjsTests(
diff --git a/packages/server-utils/src/integrations/tedious.ts b/packages/server-utils/src/integrations/tedious.ts
index 0878dc5e3118..42c3f1654c06 100644
--- a/packages/server-utils/src/integrations/tedious.ts
+++ b/packages/server-utils/src/integrations/tedious.ts
@@ -7,6 +7,7 @@ import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import type { IntegrationFn, SpanAttributes } from '@sentry/core';
 import {
   defineIntegration,
+  getActiveSpan,
   getClient,
   hasSpanStreamingEnabled,
   SPAN_STATUS_ERROR,
@@ -110,6 +111,10 @@ function subscribeConnect(): void {
 
 function subscribeQuery(channelName: string, operation: string): void {
   diagnosticsChannel.tracingChannel(channelName).start.subscribe(message => {
+    if (!getActiveSpan()) {
+      return;
+    }
+
     const data = message as TediousQueryChannelContext;
     const connection = data.self;
     const request = data.arguments[0];

From a33cba8fb05ef0ad2cc0a403aaeb1752005a5ece Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Wed, 28 Oct 2026 12:47:48 -0400
Subject: [PATCH 003/169] ref(core): Deprecate the released
 `handleTunnelRequest` form and reword the `serveTunnelIntegration` docs
 (#25844)

Lukas pointed out after #25783 merged that the `serveTunnelIntegration`
docs did not say when to add it and that the released
`handleTunnelRequest({ request })` form was not marked deprecated, fixed
by rewording the JSDoc and tagging that overload `@deprecated`, plus an
oxlint allow entry since `no-deprecated` otherwise flags every SDK
re-export of it.
---
 .oxlintrc.base.json                           |  6 +++++-
 packages/core/src/integrations/serveTunnel.ts | 20 ++++++++++++++-----
 packages/core/src/utils/tunnelForward.ts      |  4 +++-
 3 files changed, 23 insertions(+), 7 deletions(-)

diff --git a/.oxlintrc.base.json b/.oxlintrc.base.json
index 41be2844716d..3c42d69b4bb4 100644
--- a/.oxlintrc.base.json
+++ b/.oxlintrc.base.json
@@ -61,10 +61,14 @@
     "typescript/no-duplicate-type-constituents": "off",
     // @types/node 20 still marks `channel.subscribe()` and `channel.unsubscribe()` as deprecated,
     // but Node revoked this deprecation (DEP0163) in v22.20.0 and v24.8.0.
+    // `handleTunnelRequest` has only one deprecated overload, but the rule flags every re-export of it.
     "typescript/no-deprecated": [
       "error",
       {
-        "allow": [{ "from": "package", "package": "diagnostics_channel", "name": ["subscribe", "unsubscribe"] }]
+        "allow": [
+          { "from": "package", "package": "diagnostics_channel", "name": ["subscribe", "unsubscribe"] },
+          "handleTunnelRequest"
+        ]
       }
     ]
   },
diff --git a/packages/core/src/integrations/serveTunnel.ts b/packages/core/src/integrations/serveTunnel.ts
index 9ee2d81334c1..3994b35a252d 100644
--- a/packages/core/src/integrations/serveTunnel.ts
+++ b/packages/core/src/integrations/serveTunnel.ts
@@ -16,19 +16,29 @@ const _serveTunnelIntegration = ((options: ServerTunnelOptions = {}) => {
 }) satisfies IntegrationFn;
 
 /**
- * Serves the managed tunnel, so a browser `init` with `tunnel: true` sends its envelopes through the app's own origin
- * instead of the Sentry ingest URL, where ad-blockers can't drop them. The meta-framework SDKs answer the tunnel
- * requests from their request hooks.
+ * Lets your server forward the events of a browser SDK set up with `tunnel: true` to Sentry.
  *
- * By default the tunnel path is derived from the DSN, under the app's base path, and only envelopes for the server's
- * own DSN are forwarded. A `path` is served as written.
+ * With this integration on the server and `tunnel: true` in the browser `init`, the browser sends its events to your
+ * own server instead of Sentry, where ad-blockers can't drop them, and your server forwards them to Sentry.
+ *
+ * Meta-framework SDKs (e.g. Next.js, Nuxt or SvelteKit) answer the tunnel requests for you. On a standalone server
+ * (e.g. Express or Fastify), also call `handleTunnelRequestIfMatched` in your request handling.
+ *
+ * By default only envelopes for the server's own DSN are forwarded.
  *
  * @example
  * ```js
+ * // Server
  * Sentry.init({
  *   dsn: '__DSN__',
  *   integrations: [Sentry.serveTunnelIntegration()],
  * });
+ *
+ * // Browser
+ * Sentry.init({
+ *   dsn: '__DSN__',
+ *   tunnel: true,
+ * });
  * ```
  */
 export const serveTunnelIntegration = defineIntegration(_serveTunnelIntegration);
diff --git a/packages/core/src/utils/tunnelForward.ts b/packages/core/src/utils/tunnelForward.ts
index e30d7e21bfe4..01f2af0947bd 100644
--- a/packages/core/src/utils/tunnelForward.ts
+++ b/packages/core/src/utils/tunnelForward.ts
@@ -62,7 +62,9 @@ export function handleTunnelRequest(
   options?: TunnelForwardOptions,
 ): Promise<void>;
 /**
- * The released form, kept until v12. Its `request` option is deprecated: pass the request as the first argument.
+ * The released form, kept until v12.
+ *
+ * @deprecated Pass the request as the first argument instead: `handleTunnelRequest(request, options)`.
  */
 export function handleTunnelRequest(options: HandleTunnelRequestOptions): Promise<Response>;
 export function handleTunnelRequest(

From de10e521332b93b27669164e75a756726b5ab807 Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Wed, 28 Oct 2026 13:45:31 -0400
Subject: [PATCH 004/169] fix(replay): Skip buffered replays for captureMessage
 stacks from the attachStacktrace default (#25846)

Defaulting `attachStacktrace` to true gave `captureMessage` events a
synthetic exception so they started flushing buffered replays, fixed by
flagging those events in core and skipping them in Replay's buffer
sampling.

I think a decision to be made later to get rid of this later for when
both APIs merge is: **should message level captures trigger a replay or
not.**
---
 .../replay/errors/captureMessage/test.ts      | 33 ++++++++++++++++
 .../captureMessageAttachStacktrace/init.js    | 18 +++++++++
 .../captureMessageAttachStacktrace/test.ts    | 36 +++++++++++++++++
 packages/core/src/client.ts                   | 13 ++++++-
 packages/core/src/scope.ts                    |  5 +++
 packages/core/test/lib/client.test.ts         | 39 +++++++++++++++++++
 .../util/shouldSampleForBufferEvent.ts        |  4 ++
 .../coreHandlers/handleGlobalEvent.test.ts    | 12 ++++++
 8 files changed, 159 insertions(+), 1 deletion(-)
 create mode 100644 dev-packages/browser-integration-tests/suites/replay/errors/captureMessage/test.ts
 create mode 100644 dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/init.js
 create mode 100644 dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/test.ts

diff --git a/dev-packages/browser-integration-tests/suites/replay/errors/captureMessage/test.ts b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessage/test.ts
new file mode 100644
index 000000000000..90b867c117e3
--- /dev/null
+++ b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessage/test.ts
@@ -0,0 +1,33 @@
+import { expect } from '@playwright/test';
+import { sentryTest } from '../../../../utils/fixtures';
+import { envelopeRequestParser, waitForErrorRequest } from '../../../../utils/helpers';
+import { getReplaySnapshot, shouldSkipReplayTest, waitForReplayRunning } from '../../../../utils/replayHelpers';
+
+sentryTest(
+  '[error-mode] should not flush for captureMessage when attachStacktrace is left at its default',
+  async ({ getLocalTestUrl, page, forceFlushReplay }) => {
+    if (shouldSkipReplayTest()) {
+      sentryTest.skip();
+    }
+
+    const url = await getLocalTestUrl({ testDir: __dirname });
+
+    await page.goto(url);
+    await waitForReplayRunning(page);
+
+    const errorRequestPromise = waitForErrorRequest(page);
+    await page.evaluate(() => (window as any).Sentry.captureMessage('Some message'));
+    const event = envelopeRequestParser(await errorRequestPromise);
+    await forceFlushReplay();
+
+    expect(event.exception?.values?.[0]?.stacktrace?.frames?.length).toBeGreaterThan(0);
+    expect(event.tags?.replayId).toBeUndefined();
+    expect(await getReplaySnapshot(page)).toEqual(
+      expect.objectContaining({
+        _isEnabled: true,
+        _isPaused: false,
+        recordingMode: 'buffer',
+      }),
+    );
+  },
+);
diff --git a/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/init.js b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/init.js
new file mode 100644
index 000000000000..76d3c2afd889
--- /dev/null
+++ b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/init.js
@@ -0,0 +1,18 @@
+import * as Sentry from '@sentry/browser';
+
+window.Sentry = Sentry;
+window.Replay = Sentry.replayIntegration({
+  flushMinDelay: 200,
+  flushMaxDelay: 200,
+  minReplayDuration: 0,
+});
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  sampleRate: 1,
+  replaysSessionSampleRate: 0.0,
+  replaysOnErrorSampleRate: 1.0,
+  attachStacktrace: true,
+
+  integrations: [window.Replay],
+});
diff --git a/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/test.ts b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/test.ts
new file mode 100644
index 000000000000..d89371695436
--- /dev/null
+++ b/dev-packages/browser-integration-tests/suites/replay/errors/captureMessageAttachStacktrace/test.ts
@@ -0,0 +1,36 @@
+import { expect } from '@playwright/test';
+import { sentryTest } from '../../../../utils/fixtures';
+import { envelopeRequestParser, waitForErrorRequest } from '../../../../utils/helpers';
+import {
+  getReplaySnapshot,
+  shouldSkipReplayTest,
+  waitForReplayRequest,
+  waitForReplayRunning,
+} from '../../../../utils/replayHelpers';
+
+sentryTest(
+  '[error-mode] should flush for captureMessage when attachStacktrace is explicitly enabled',
+  async ({ getLocalTestUrl, page }) => {
+    if (shouldSkipReplayTest()) {
+      sentryTest.skip();
+    }
+
+    const url = await getLocalTestUrl({ testDir: __dirname });
+
+    await page.goto(url);
+    await waitForReplayRunning(page);
+
+    const errorRequestPromise = waitForErrorRequest(page);
+    const replayRequestPromise = waitForReplayRequest(page, 0);
+    await page.evaluate(() => (window as any).Sentry.captureMessage('Some message'));
+    const event = envelopeRequestParser(await errorRequestPromise);
+    await replayRequestPromise;
+
+    expect(event.tags?.replayId).toEqual(expect.any(String));
+    expect(await getReplaySnapshot(page)).toEqual(
+      expect.objectContaining({
+        recordingMode: 'session',
+      }),
+    );
+  },
+);
diff --git a/packages/core/src/client.ts b/packages/core/src/client.ts
index 761a2519d6d3..54f0c2dae0d2 100644
--- a/packages/core/src/client.ts
+++ b/packages/core/src/client.ts
@@ -250,6 +250,9 @@ export abstract class Client<O extends ClientOptions = ClientOptions> {
    */
   protected _unhandledSessionStatus: SessionStatus;
 
+  /** Whether `attachStacktrace` came from the SDK default rather than the user's options. */
+  protected readonly _attachStacktraceIsDefault: boolean;
+
   /**
    * Initializes this client instance.
    *
@@ -271,6 +274,7 @@ export abstract class Client<O extends ClientOptions = ClientOptions> {
     this._promiseBuffer = makePromiseBuffer(options.transportOptions?.bufferSize ?? DEFAULT_TRANSPORT_BUFFER_SIZE);
     this._dataCollection = resolveDataCollectionOptions(options);
     this._unhandledSessionStatus = 'crashed';
+    this._attachStacktraceIsDefault = options.attachStacktrace === undefined;
 
     if (options.dsn) {
       this._dsn = makeDsn(options.dsn);
@@ -372,7 +376,14 @@ export abstract class Client<O extends ClientOptions = ClientOptions> {
     const eventMessage = isParameterizedString(message) ? message : String(message);
     const isMessage = isPrimitive(message);
     const promisedEvent = isMessage
-      ? this.eventFromMessage(eventMessage, level, hintWithEventId)
+      ? this.eventFromMessage(eventMessage, level, hintWithEventId).then(event => {
+          // Lets Replay keep treating messages as non-errors unless the user opted into stack traces
+          if (event.exception && this._attachStacktraceIsDefault) {
+            event.sdkProcessingMetadata = { ...event.sdkProcessingMetadata, hasDefaultSyntheticStacktrace: true };
+          }
+
+          return event;
+        })
       : this.eventFromException(message, hintWithEventId);
 
     this._process(
diff --git a/packages/core/src/scope.ts b/packages/core/src/scope.ts
index 1a2a1761854a..7130bc5eb0d2 100644
--- a/packages/core/src/scope.ts
+++ b/packages/core/src/scope.ts
@@ -67,6 +67,11 @@ export interface SdkProcessingMetadata {
    */
   spanCountBeforeProcessing?: number;
   ipAddress?: string;
+  /**
+   * Set on `captureMessage` events whose stack trace exists only because `attachStacktrace`
+   * defaults to `true`, so Replay does not treat them as errors in buffer mode.
+   */
+  hasDefaultSyntheticStacktrace?: boolean;
 }
 
 /**
diff --git a/packages/core/test/lib/client.test.ts b/packages/core/test/lib/client.test.ts
index fce65f946b89..0d3117f7ac4a 100644
--- a/packages/core/test/lib/client.test.ts
+++ b/packages/core/test/lib/client.test.ts
@@ -9,6 +9,7 @@ import {
   lastEventId,
   linkedErrorsIntegration,
   makeSession,
+  resolvedSyncPromise,
   Scope,
   setCurrentClient,
   SyncPromise,
@@ -664,6 +665,44 @@ describe('Client', () => {
       );
     });
 
+    test.each([
+      ['left at its default', {}, expect.objectContaining({ hasDefaultSyntheticStacktrace: true })],
+      [
+        'explicitly enabled',
+        { attachStacktrace: true },
+        expect.not.objectContaining({ hasDefaultSyntheticStacktrace: true }),
+      ],
+    ])('marks message stack traces only when attachStacktrace is %s', (_, attachStacktraceOptions, metadataMatcher) => {
+      const client = new TestClient(getDefaultTestClientOptions({ dsn: PUBLIC_DSN, ...attachStacktraceOptions }));
+      vi.spyOn(client, 'eventFromMessage').mockReturnValue(
+        resolvedSyncPromise({ message: 'test message', exception: { values: [{ value: 'test message' }] } }),
+      );
+      const processor = vi.fn((event: Event) => event);
+      client.addEventProcessor(processor);
+
+      client.captureMessage('test message');
+
+      expect(processor).toHaveBeenCalledWith(
+        expect.objectContaining({ sdkProcessingMetadata: metadataMatcher }),
+        expect.anything(),
+      );
+    });
+
+    test('does not mark message events without a stack trace', () => {
+      const client = new TestClient(getDefaultTestClientOptions({ dsn: PUBLIC_DSN }));
+      const processor = vi.fn((event: Event) => event);
+      client.addEventProcessor(processor);
+
+      client.captureMessage('test message');
+
+      expect(processor).toHaveBeenCalledWith(
+        expect.objectContaining({
+          sdkProcessingMetadata: expect.not.objectContaining({ hasDefaultSyntheticStacktrace: true }),
+        }),
+        expect.anything(),
+      );
+    });
+
     test('sets the correct lastEventId', () => {
       const options = getDefaultTestClientOptions({ dsn: PUBLIC_DSN });
       const client = new TestClient(options);
diff --git a/packages/replay-internal/src/coreHandlers/util/shouldSampleForBufferEvent.ts b/packages/replay-internal/src/coreHandlers/util/shouldSampleForBufferEvent.ts
index 3a7a8f423dba..c73303f794c7 100644
--- a/packages/replay-internal/src/coreHandlers/util/shouldSampleForBufferEvent.ts
+++ b/packages/replay-internal/src/coreHandlers/util/shouldSampleForBufferEvent.ts
@@ -24,5 +24,9 @@ export function shouldSampleForBufferEvent(replay: ReplayContainer, event: Event
     return false;
   }
 
+  if (event.sdkProcessingMetadata?.hasDefaultSyntheticStacktrace) {
+    return false;
+  }
+
   return isSampled(replay.getOptions().errorSampleRate);
 }
diff --git a/packages/replay-internal/test/integration/coreHandlers/handleGlobalEvent.test.ts b/packages/replay-internal/test/integration/coreHandlers/handleGlobalEvent.test.ts
index 6c7230e2c680..95df766bb69f 100644
--- a/packages/replay-internal/test/integration/coreHandlers/handleGlobalEvent.test.ts
+++ b/packages/replay-internal/test/integration/coreHandlers/handleGlobalEvent.test.ts
@@ -209,6 +209,18 @@ describe('Integration | coreHandlers | handleGlobalEvent', () => {
     expect(replay.recordingMode).toBe('buffer');
   });
 
+  it('does not sample events whose stack trace only comes from the attachStacktrace default in buffer mode', () => {
+    const messageEvent: Event = {
+      message: 'Some message',
+      exception: { values: [{ value: 'Some message', stacktrace: { frames: [{ filename: 'app.js' }] } }] },
+      sdkProcessingMetadata: { hasDefaultSyntheticStacktrace: true },
+    };
+
+    expect(replay.recordingMode).toBe('buffer');
+    expect(handleGlobalEventListener(replay)(messageEvent, {})?.tags?.replayId).toBeUndefined();
+    expect(replay.session?.dirty).toBe(false);
+  });
+
   it('does not skip non-rrweb errors', () => {
     const errorEvent: Event = {
       exception: {

From 2b1607d59fd2478ff0d5ee6bdb1f98ce04155fca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Peer=20St=C3=B6cklmair?= <jan.peer@sentry.io>
Date: Wed, 28 Oct 2026 15:40:59 -0600
Subject: [PATCH 005/169] fix(server-utils): Read the pi-durable session id in
 every phase outside a run (#25838)

follow up to #25792

This makes every pi-durable phase outside a run read the stored session
id, not only an idle compaction.

## Why

An extension task that calls the model while its conversation has no run
in progress kept the `<harnessId>:<n>` id. The runs of the same
conversation report the session id, so Sentry showed the task as a
separate conversation.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../server-utils/src/ai/pi-durable/index.ts   |  4 +--
 .../test/ai/lib/tracing/pi-durable.test.ts    | 29 +++++++++++++++++++
 2 files changed, 31 insertions(+), 2 deletions(-)

diff --git a/packages/server-utils/src/ai/pi-durable/index.ts b/packages/server-utils/src/ai/pi-durable/index.ts
index b7ee007e6a02..d2187aae394e 100644
--- a/packages/server-utils/src/ai/pi-durable/index.ts
+++ b/packages/server-utils/src/ai/pi-durable/index.ts
@@ -220,9 +220,9 @@ function runPhase(
 
   const runInScope = async (scope: Scope): Promise<unknown> => {
     // Read at the first phase of a run, which is a `pi.tool` phase when a restarted Harness reruns a
-    // tool call.
+    // tool call, and at each phase outside a run, such as an idle compaction or a task of an extension.
     let sessionId = run?.sessionId;
-    if (!sessionId && (run || kind === PI_TASK.COMPACTION)) {
+    if (!sessionId) {
       sessionId = await readProviderSessionId(runtime, context);
       if (run && sessionId) {
         run.sessionId = sessionId;
diff --git a/packages/server-utils/test/ai/lib/tracing/pi-durable.test.ts b/packages/server-utils/test/ai/lib/tracing/pi-durable.test.ts
index 5c35581138cf..e7bd701485cf 100644
--- a/packages/server-utils/test/ai/lib/tracing/pi-durable.test.ts
+++ b/packages/server-utils/test/ai/lib/tracing/pi-durable.test.ts
@@ -1049,6 +1049,35 @@ describe('instrumentPiDurableHarnessOptions', () => {
       );
     });
 
+    it('uses the provider session id for a task of an extension on an idle conversation', async () => {
+      const sessionId = '019a2b3c-4d5e-7f60-8172-93a4b5c6d7e8';
+      const task: PiTask = {
+        definition: {
+          name: 'app.title',
+          phases: {
+            request: async () => {
+              await harness.models!.completeSimple!(MODEL, { messages: [] });
+            },
+          },
+        },
+      };
+      const harness: PiHarnessOptions = instrumentPiDurableHarnessOptions({
+        models: { completeSimple: async () => ANSWER },
+        registry: { snapshot: () => ({ task: () => task, tasks: () => [task] }), subscribe: () => () => undefined },
+      });
+      const runtime: PiTaskRuntime = {
+        taskId: 7,
+        conversationId: 1,
+        agent: async () => ({}),
+        commit: async () => undefined,
+        snapshot: async () => ({ sessionId }),
+      };
+
+      await harness.registry!.snapshot().task('app.title')!.definition.phases.request!(undefined, runtime, undefined);
+
+      expect(spanToJSON(endedSpans[0]!).attributes[GEN_AI_CONVERSATION_ID]).toBe(sessionId);
+    });
+
     it('ends the open runs when the Harness closes', async () => {
       const harness = harnessFor(generationPhase([{ run: { inputs: [5] } }]));
       let onClose: (() => void) | undefined;

From b722d3cfde2f4484ff8928bdd166f7afc3cadb25 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Peer=20St=C3=B6cklmair?= <jan.peer@sentry.io>
Date: Wed, 28 Oct 2026 15:46:23 -0600
Subject: [PATCH 006/169] feat(node): Add BullMQ integration (#21777)

closes #12956
closes
[JS-89](https://linear.app/getsentry/issue/JS-89/insights-auto-instrument-bullmq-for-queue-insights)

## Description

This adds telemetry for [BullMQ](https://bullmq.io/). It only piggybacks
on the `telemetry` option. It has metrics, tracing with span links
between producer and consumer

It can be used as following:

```js
import * as Sentry from '@sentry/node';
import { Queue, Worker } from 'bullmq';

const telemetry = new Sentry.BullMQTelemetry();

const queue = new Queue('myQueue', {
  connection: { host: '127.0.0.1', port: 6379 },
  telemetry,
});
```

It is the same usage as the BullMQ OTel package:
https://docs.bullmq.io/guide/telemetry/getting-started

To make this an integration the types were vendored in and based on that
the integration was done.

## OP decisions

The consumer spans generate `queue.task` where the producer emits
`queue.submit`, this should be reflecting our [span
operations](https://develop.sentry.dev/sdk/telemetry/traces/span-operations/#messagesqueues).
I didn't use `queue.task.bullmq`, like it is for Celery - but this can
be changed if wanted.

## Sentry traces / metrics

Example metrics:
https://sentry-sdks.sentry.io/explore/metrics/?end=2026-10-05T07%3A25%3A00&metric=%7B%22metric%22%3A%7B%22name%22%3A%22bullmq.jobs.completed%22%2C%22type%22%3A%22counter%22%2C%22unit%22%3A%22none%22%7D%2C%22query%22%3A%22%22%2C%22aggregateFields%22%3A%5B%7B%22yAxes%22%3A%5B%22sum%28value%2Cbullmq.jobs.completed%2Ccounter%2Cnone%29%22%5D%7D%5D%2C%22aggregateSortBys%22%3A%5B%7B%22field%22%3A%22sum%28value%2Cbullmq.jobs.completed%2Ccounter%2Cnone%29%22%2C%22kind%22%3A%22desc%22%7D%5D%2C%22sortBys%22%3A%5B%7B%22field%22%3A%22timestamp%22%2C%22kind%22%3A%22desc%22%7D%5D%2C%22mode%22%3A%22samples%22%7D&project=4510555608449024&start=2026-10-05T07%3A15%3A00

Consumer trace (queue.task span with a link to the producer):
https://sentry-sdks.sentry.io/explore/traces/trace/1a21906f0d8d4db7bbf80bf9cf7d32f3/?node=span-9b305b00fd106329&project=4510555608449024&source=traces&targetId=9b305b00fd106329&timestamp=1791184722
Producer trace (GET /enqueue with a queue.submit span):
https://sentry-sdks.sentry.io/explore/traces/trace/f135329fd15a440091a2ee445a8df4fc/?node=span-9db4d2c0668abe46&project=4510555608449024&source=traces&targetId=9db4d2c0668abe46&timestamp=1791184722
---
 .../node-bullmq/docker-compose.yml            |   7 +
 .../node-bullmq/global-setup.mjs              |  13 +
 .../node-bullmq/global-teardown.mjs           |  13 +
 .../node-bullmq/package.json                  |  25 +
 .../node-bullmq/playwright.config.mjs         |  11 +
 .../node-bullmq/pnpm-workspace.yaml           |   3 +
 .../test-applications/node-bullmq/src/app.mjs |  49 ++
 .../node-bullmq/src/instrument.mjs            |  12 +
 .../node-bullmq/start-event-proxy.mjs         |   6 +
 .../node-bullmq/tests/bullmq.test.ts          | 229 +++++
 .../node-integration-tests/package.json       |   1 +
 .../suites/tracing/bullmq/docker-compose.yml  |  12 +
 .../suites/tracing/bullmq/instrument.mjs      |  12 +
 .../tracing/bullmq/scenario-attributes.mjs    |  68 ++
 .../tracing/bullmq/scenario-failed-job.mjs    |  30 +
 .../suites/tracing/bullmq/scenario.mjs        |  39 +
 .../suites/tracing/bullmq/test.ts             | 781 ++++++++++++++++++
 packages/astro/src/index.server.ts            |   1 +
 packages/aws-serverless/src/index.ts          |   1 +
 packages/bun/src/index.ts                     |   1 +
 packages/google-cloud-serverless/src/index.ts |   1 +
 packages/node/src/index.ts                    |   1 +
 .../tracing/bullmq/contextManager.ts          |  62 ++
 .../src/integrations/tracing/bullmq/index.ts  |  56 ++
 .../src/integrations/tracing/bullmq/meter.ts  | 121 +++
 .../src/integrations/tracing/bullmq/span.ts   | 205 +++++
 .../src/integrations/tracing/bullmq/tracer.ts |  80 ++
 .../src/integrations/tracing/bullmq/types.ts  |  81 ++
 .../test/integrations/tracing/bullmq.test.ts  | 688 +++++++++++++++
 pnpm-lock.yaml                                | 204 +++--
 pnpm-workspace.yaml                           |   1 +
 31 files changed, 2767 insertions(+), 47 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/docker-compose.yml
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/global-setup.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/global-teardown.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/package.json
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/playwright.config.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/pnpm-workspace.yaml
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/src/app.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/src/instrument.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/start-event-proxy.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-bullmq/tests/bullmq.test.ts
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/docker-compose.yml
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-attributes.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-failed-job.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/bullmq/test.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/contextManager.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/index.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/meter.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/span.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/tracer.ts
 create mode 100644 packages/node/src/integrations/tracing/bullmq/types.ts
 create mode 100644 packages/node/test/integrations/tracing/bullmq.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/docker-compose.yml b/dev-packages/e2e-tests/test-applications/node-bullmq/docker-compose.yml
new file mode 100644
index 000000000000..15a423ffbc07
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/docker-compose.yml
@@ -0,0 +1,7 @@
+services:
+  redis:
+    image: redis:8
+    restart: always
+    container_name: e2e-tests-node-bullmq-redis
+    ports:
+      - '6379:6379'
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/global-setup.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/global-setup.mjs
new file mode 100644
index 000000000000..438b88b61794
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/global-setup.mjs
@@ -0,0 +1,13 @@
+import { execSync } from 'child_process';
+import { dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+export default async function globalSetup() {
+  // Start Redis via Docker Compose
+  execSync('docker compose up -d --wait', {
+    cwd: __dirname,
+    stdio: 'inherit',
+  });
+}
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/global-teardown.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/global-teardown.mjs
new file mode 100644
index 000000000000..35ce41179193
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/global-teardown.mjs
@@ -0,0 +1,13 @@
+import { execSync } from 'child_process';
+import { dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+export default async function globalTeardown() {
+  // Stop Redis and remove containers
+  execSync('docker compose down --volumes', {
+    cwd: __dirname,
+    stdio: 'inherit',
+  });
+}
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/package.json b/dev-packages/e2e-tests/test-applications/node-bullmq/package.json
new file mode 100644
index 000000000000..b86c4b846925
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/package.json
@@ -0,0 +1,25 @@
+{
+  "name": "node-bullmq",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "node src/app.mjs",
+    "clean": "npx rimraf node_modules pnpm-lock.yaml",
+    "test": "playwright test",
+    "test:build": "pnpm install",
+    "test:assert": "pnpm test"
+  },
+  "dependencies": {
+    "@sentry/node": "file:../../packed/sentry-node-packed.tgz",
+    "bullmq": "^5.0.0",
+    "express": "^4.21.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "1.64.1",
+    "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
+  },
+  "volta": {
+    "extends": "../../package.json"
+  }
+}
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/playwright.config.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/playwright.config.mjs
new file mode 100644
index 000000000000..d5fd0b394f15
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/playwright.config.mjs
@@ -0,0 +1,11 @@
+import { getPlaywrightConfig } from '@sentry-internal/test-utils';
+
+const config = getPlaywrightConfig({
+  startCommand: `pnpm start`,
+});
+
+export default {
+  ...config,
+  globalSetup: './global-setup.mjs',
+  globalTeardown: './global-teardown.mjs',
+};
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/node-bullmq/pnpm-workspace.yaml
new file mode 100644
index 000000000000..0f973fea7a88
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/pnpm-workspace.yaml
@@ -0,0 +1,3 @@
+allowBuilds:
+  msgpackr-extract: true
+minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/src/app.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/src/app.mjs
new file mode 100644
index 000000000000..4b51a6f775f5
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/src/app.mjs
@@ -0,0 +1,49 @@
+import './instrument.mjs';
+
+import * as Sentry from '@sentry/node';
+import { Queue, Worker } from 'bullmq';
+import express from 'express';
+
+const app = express();
+const port = 3030;
+
+const connection = { host: '127.0.0.1', port: 6379 };
+const telemetry = new Sentry.BullMQTelemetry({ enableMetrics: true });
+
+const testQueue = new Queue('test-queue', { connection, telemetry });
+
+const worker = new Worker(
+  'test-queue',
+  async job => {
+    if (job.name === 'fail-job') {
+      throw new Error('Test error from BullMQ processor');
+    }
+
+    if (job.name === 'breadcrumb-job') {
+      Sentry.addBreadcrumb({ message: 'breadcrumb-from-bullmq-processor' });
+    }
+
+    return { success: true };
+  },
+  { connection, telemetry },
+);
+
+worker.on('error', err => {
+  console.error('Worker error:', err);
+});
+
+app.get('/enqueue/:jobName', async (req, res) => {
+  await testQueue.add(req.params.jobName, { data: 'test' });
+  res.send('Job enqueued');
+});
+
+app.get('/check-isolation', async (req, res) => {
+  Sentry.captureException(new Error('Isolation check'));
+  res.send('Isolation check');
+});
+
+Sentry.setupExpressErrorHandler(app);
+
+app.listen(port, () => {
+  console.log(`App listening on port ${port}`);
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/src/instrument.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/src/instrument.mjs
new file mode 100644
index 000000000000..5644b907f3f1
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/src/instrument.mjs
@@ -0,0 +1,12 @@
+import * as Sentry from '@sentry/node';
+
+Sentry.init({
+  dsn: process.env.E2E_TEST_DSN,
+  tunnel: 'http://localhost:3031/',
+  tracesSampleRate: 1.0,
+  // A fixed release, so that a release from the CI environment does not change the span attributes.
+  release: '1.0',
+  // The Context integration adds machine-specific attributes to segment spans, and adds the `os.*` ones only after an
+  // async lookup. Without it, the tests can compare all span attributes.
+  integrations: integrations => integrations.filter(integration => integration.name !== 'Context'),
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/start-event-proxy.mjs b/dev-packages/e2e-tests/test-applications/node-bullmq/start-event-proxy.mjs
new file mode 100644
index 000000000000..2426471fe487
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/start-event-proxy.mjs
@@ -0,0 +1,6 @@
+import { startEventProxyServer } from '@sentry-internal/test-utils';
+
+startEventProxyServer({
+  port: 3031,
+  proxyServerName: 'node-bullmq',
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-bullmq/tests/bullmq.test.ts b/dev-packages/e2e-tests/test-applications/node-bullmq/tests/bullmq.test.ts
new file mode 100644
index 000000000000..2508bdb5b2b9
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-bullmq/tests/bullmq.test.ts
@@ -0,0 +1,229 @@
+import { expect, test } from '@playwright/test';
+import { getSpanOp, waitForError, waitForMetric, waitForStreamedSpan } from '@sentry-internal/test-utils';
+
+test('Creates a queue.publish span when adding a job', async ({ baseURL }) => {
+  const publishSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return getSpanOp(span) === 'queue.publish' && span.attributes['messaging.bullmq.job.name']?.value === 'publish-job';
+  });
+
+  await fetch(`${baseURL}/enqueue/publish-job`);
+
+  const publishSpan = await publishSpanPromise;
+
+  expect(publishSpan.name).toBe('add test-queue.publish-job');
+  expect(publishSpan.is_segment).toBe(false);
+  expect(publishSpan.status).toBe('ok');
+  expect(publishSpan.attributes).toEqual({
+    'sentry.op': { type: 'string', value: 'queue.publish' },
+    'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+    'messaging.system': { type: 'string', value: 'bullmq' },
+    'messaging.destination.name': { type: 'string', value: 'test-queue' },
+    'messaging.operation.name': { type: 'string', value: 'add' },
+    'messaging.message.id': { type: 'string', value: expect.any(String) },
+    'messaging.bullmq.job.name': { type: 'string', value: 'publish-job' },
+    'sentry.environment': { type: 'string', value: 'production' },
+    'sentry.is_localhost': { type: 'boolean', value: true },
+    'sentry.release': { type: 'string', value: '1.0' },
+    'sentry.sdk.name': { type: 'string', value: 'sentry.javascript.node' },
+    'sentry.sdk.version': { type: 'string', value: expect.any(String) },
+    'sentry.segment.id': { type: 'string', value: expect.stringMatching(/^[\da-f]{16}$/) },
+    'sentry.segment.name': { type: 'string', value: 'GET /enqueue/:jobName' },
+    'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+  });
+});
+
+test('Creates a segment span for queue.process when processing a job', async ({ baseURL }) => {
+  const processSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return (
+      span.is_segment &&
+      getSpanOp(span) === 'queue.process' &&
+      span.attributes['messaging.bullmq.job.name']?.value === 'process-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/process-job`);
+
+  const processSpan = await processSpanPromise;
+
+  expect(processSpan.name).toBe('process test-queue');
+  expect(processSpan.status).toBe('ok');
+  expect(processSpan.attributes).toEqual({
+    'sentry.op': { type: 'string', value: 'queue.process' },
+    'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.consumer' },
+    'messaging.system': { type: 'string', value: 'bullmq' },
+    'messaging.destination.name': { type: 'string', value: 'test-queue' },
+    'messaging.operation.name': { type: 'string', value: 'process' },
+    'messaging.message.id': { type: 'string', value: expect.any(String) },
+    'messaging.message.retry.count': { type: 'integer', value: 0 },
+    'messaging.client.id': { type: 'string', value: expect.any(String) },
+    'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+    'messaging.bullmq.job.processed_timestamp': { type: 'integer', value: expect.any(Number) },
+    'messaging.bullmq.job.attempt_finished_timestamp': { type: 'integer', value: expect.any(Number) },
+    'sentry.environment': { type: 'string', value: 'production' },
+    'sentry.is_localhost': { type: 'boolean', value: false },
+    'sentry.release': { type: 'string', value: '1.0' },
+    'sentry.sample_rate': { type: 'integer', value: 1 },
+    'sentry.sdk.integrations': { type: 'array', value: expect.any(Array) },
+    'sentry.sdk.name': { type: 'string', value: 'sentry.javascript.node' },
+    'sentry.sdk.version': { type: 'string', value: expect.any(String) },
+    'sentry.segment.id': { type: 'string', value: processSpan.span_id },
+    'sentry.segment.name': { type: 'string', value: 'process test-queue' },
+    'sentry.segment.name.source': { type: 'string', value: 'custom' },
+    'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+  });
+});
+
+test('Sends exception to Sentry on error in job processor', async ({ baseURL }) => {
+  const errorEventPromise = waitForError('node-bullmq', event => {
+    return !event.type && event.exception?.values?.[0]?.value === 'Test error from BullMQ processor';
+  });
+  const processSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return (
+      span.is_segment &&
+      getSpanOp(span) === 'queue.process' &&
+      span.attributes['messaging.bullmq.job.name']?.value === 'fail-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/fail-job`);
+
+  const errorEvent = await errorEventPromise;
+  const processSpan = await processSpanPromise;
+
+  expect(errorEvent.exception?.values).toHaveLength(1);
+  expect(errorEvent.exception?.values?.[0]?.mechanism).toEqual({
+    handled: false,
+    type: 'auto.queue.bullmq',
+  });
+  expect(processSpan.status).toBe('error');
+  expect(errorEvent.contexts?.trace?.trace_id).toBe(processSpan.trace_id);
+  expect(errorEvent.contexts?.trace?.span_id).toBe(processSpan.span_id);
+});
+
+test('BullMQ processor breadcrumbs do not leak into subsequent HTTP requests', async ({ baseURL }) => {
+  const processSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return (
+      span.is_segment &&
+      getSpanOp(span) === 'queue.process' &&
+      span.attributes['messaging.bullmq.job.name']?.value === 'breadcrumb-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/breadcrumb-job`);
+
+  await processSpanPromise;
+
+  const errorEventPromise = waitForError('node-bullmq', event => {
+    return event.exception?.values?.[0]?.value === 'Isolation check';
+  });
+
+  await fetch(`${baseURL}/check-isolation`);
+
+  const errorEvent = await errorEventPromise;
+
+  const leakedBreadcrumb = (errorEvent.breadcrumbs || []).find(
+    (b: { message?: string }) => b.message === 'breadcrumb-from-bullmq-processor',
+  );
+  expect(leakedBreadcrumb).toBeUndefined();
+});
+
+test('Links the queue.process segment span to its producer span', async ({ baseURL }) => {
+  const producerSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return getSpanOp(span) === 'queue.publish' && span.attributes['messaging.bullmq.job.name']?.value === 'link-job';
+  });
+
+  const consumerSpanPromise = waitForStreamedSpan('node-bullmq', span => {
+    return (
+      span.is_segment &&
+      getSpanOp(span) === 'queue.process' &&
+      span.attributes['messaging.bullmq.job.name']?.value === 'link-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/link-job`);
+
+  const producerSpan = await producerSpanPromise;
+  const consumerSpan = await consumerSpanPromise;
+
+  expect(producerSpan.name).toBe('add test-queue.link-job');
+  expect(consumerSpan.name).toBe('process test-queue');
+  expect(consumerSpan.trace_id).not.toBe(producerSpan.trace_id);
+  expect(consumerSpan.links).toEqual([
+    {
+      trace_id: producerSpan.trace_id,
+      span_id: producerSpan.span_id,
+      sampled: true,
+      attributes: { 'sentry.link.type': { type: 'string', value: 'message_origin' } },
+    },
+  ]);
+});
+
+test('Emits messaging.bullmq.jobs.completed counter metric on successful job', async ({ baseURL }) => {
+  const metricPromise = waitForMetric('node-bullmq', metric => {
+    return (
+      metric.name === 'messaging.bullmq.jobs.completed' &&
+      metric.attributes?.['messaging.bullmq.job.name']?.value === 'counter-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/counter-job`);
+
+  const metric = await metricPromise;
+
+  expect({
+    type: metric.type,
+    unit: metric.unit,
+    value: metric.value,
+    attributes: metric.attributes,
+  }).toEqual({
+    type: 'counter',
+    unit: 'none',
+    value: 1,
+    attributes: {
+      'messaging.destination.name': { type: 'string', value: 'test-queue' },
+      'messaging.bullmq.job.name': { type: 'string', value: 'counter-job' },
+      'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+      'sentry.release': { type: 'string', value: '1.0' },
+      'sentry.sdk.name': { type: 'string', value: 'sentry.javascript.node' },
+      'sentry.sdk.version': { type: 'string', value: expect.any(String) },
+      'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+      'server.address': { type: 'string', value: expect.any(String) },
+    },
+  });
+});
+
+test('Emits messaging.process.duration histogram metric on job completion', async ({ baseURL }) => {
+  const metricPromise = waitForMetric('node-bullmq', metric => {
+    return (
+      metric.name === 'messaging.process.duration' &&
+      metric.attributes?.['messaging.bullmq.job.name']?.value === 'duration-job'
+    );
+  });
+
+  await fetch(`${baseURL}/enqueue/duration-job`);
+
+  const metric = await metricPromise;
+
+  expect({
+    type: metric.type,
+    unit: metric.unit,
+    value: metric.value,
+    attributes: metric.attributes,
+  }).toEqual({
+    type: 'distribution',
+    unit: 'second',
+    value: expect.any(Number),
+    attributes: {
+      'messaging.system': { type: 'string', value: 'bullmq' },
+      'messaging.operation.name': { type: 'string', value: 'process' },
+      'messaging.destination.name': { type: 'string', value: 'test-queue' },
+      'messaging.bullmq.job.name': { type: 'string', value: 'duration-job' },
+      'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+      'sentry.release': { type: 'string', value: '1.0' },
+      'sentry.sdk.name': { type: 'string', value: 'sentry.javascript.node' },
+      'sentry.sdk.version': { type: 'string', value: expect.any(String) },
+      'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+      'server.address': { type: 'string', value: expect.any(String) },
+    },
+  });
+});
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 61f0e050b408..27187e843dfb 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -65,6 +65,7 @@
     "ai": "^4.3.16",
     "amqplib": "^0.10.9",
     "body-parser": "^2.3.0",
+    "bullmq": "^5.79.1",
     "consola": "^3.2.3",
     "cors": "^2.8.5",
     "cron": "^3.1.6",
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/docker-compose.yml b/dev-packages/node-integration-tests/suites/tracing/bullmq/docker-compose.yml
new file mode 100644
index 000000000000..deac6f3496a4
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/docker-compose.yml
@@ -0,0 +1,12 @@
+services:
+  db:
+    image: redis:latest
+    restart: always
+    ports:
+      - '6384:6379'
+    healthcheck:
+      test: ['CMD-SHELL', 'redis-cli ping | grep -q PONG']
+      interval: 2s
+      timeout: 3s
+      retries: 30
+      start_period: 5s
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/instrument.mjs b/dev-packages/node-integration-tests/suites/tracing/bullmq/instrument.mjs
new file mode 100644
index 000000000000..039b3bdb5104
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/instrument.mjs
@@ -0,0 +1,12 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  tracesSampleRate: 1.0,
+  transport: loggingTransport,
+  // The Context integration adds machine-specific attributes to segment spans, and adds the `os.*` ones only after an
+  // async lookup. Without it, the tests can compare all span attributes.
+  integrations: integrations => integrations.filter(integration => integration.name !== 'Context'),
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-attributes.mjs b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-attributes.mjs
new file mode 100644
index 000000000000..1d3b1e445320
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-attributes.mjs
@@ -0,0 +1,68 @@
+import * as Sentry from '@sentry/node';
+import { FlowProducer, Queue, Worker } from 'bullmq';
+
+const telemetry = new Sentry.BullMQTelemetry({ enableMetrics: true });
+const connection = { host: '127.0.0.1', port: 6384 };
+
+async function run() {
+  const opsQueue = new Queue('attributes-ops-queue', { connection, telemetry });
+  const opsWorker = new Worker('attributes-ops-queue', null, { connection, telemetry, name: 'attributes-ops-worker' });
+  const flowProducer = new FlowProducer({ connection, telemetry });
+  const processQueue = new Queue('attributes-process-queue', { connection, telemetry });
+  const processWorker = new Worker('attributes-process-queue', async () => {}, {
+    connection,
+    telemetry,
+    name: 'attributes-worker',
+  });
+
+  const jobProcessed = new Promise(resolve => {
+    processWorker.once('completed', () => resolve());
+  });
+
+  await Sentry.startSpan({ name: 'bullmq attributes' }, async () => {
+    await processQueue.add('process-job', { data: 'test-data' });
+
+    await opsQueue.addBulk([
+      { name: 'bulk-job-1', data: {} },
+      { name: 'bulk-job-2', data: {} },
+    ]);
+    await flowProducer.add({
+      name: 'flow-root',
+      queueName: 'attributes-ops-queue',
+      children: [{ name: 'flow-child', queueName: 'attributes-ops-queue' }],
+    });
+    await opsQueue.upsertJobScheduler('attributes-scheduler', { every: 60_000 }, { name: 'scheduled-job' });
+
+    const progressJob = await opsQueue.add('progress-job', {});
+    await opsQueue.updateJobProgress(progressJob.id, { percentage: 50 });
+    await opsQueue.remove(progressJob.id, { removeChildren: true });
+    await opsQueue.removeDeduplicationKey('attributes-deduplication-id');
+    await opsQueue.removeDebounceKey('attributes-debounce-id');
+    await opsQueue.retryJobs({ count: 10 });
+    await opsQueue.promoteJobs({ count: 10 });
+    await opsQueue.trimEvents(100);
+    await opsQueue.clean(0, 100, 'completed');
+
+    await opsWorker.getNextJob('attributes-token', { block: false });
+    // BullMQ runs these two on timers. Calling them directly runs them once, inside this span.
+    await opsWorker['moveStalledJobsToWait']();
+    await opsWorker['lockManager'].extendLocks([]);
+    await opsWorker.rateLimit(1);
+    await opsWorker.pause(true);
+    await opsWorker.close(true);
+
+    await opsQueue.rateLimit(1);
+    await opsQueue.drain(true);
+  });
+
+  await jobProcessed;
+  await processQueue.recordJobCountsMetric('waiting', 'completed');
+  await processWorker.close();
+
+  await opsQueue.obliterate({ force: true });
+  await processQueue.obliterate({ force: true });
+  await Promise.all([flowProducer.close(), opsQueue.close(), processQueue.close()]);
+  await Sentry.flush();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-failed-job.mjs b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-failed-job.mjs
new file mode 100644
index 000000000000..90eea3bb176e
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario-failed-job.mjs
@@ -0,0 +1,30 @@
+import * as Sentry from '@sentry/node';
+import { Queue, Worker } from 'bullmq';
+
+const telemetry = new Sentry.BullMQTelemetry();
+const connection = { host: '127.0.0.1', port: 6384 };
+
+async function run() {
+  const queue = new Queue('test-failed-queue', { connection, telemetry });
+
+  const worker = new Worker(
+    'test-failed-queue',
+    async () => {
+      throw new Error('Job failed on purpose');
+    },
+    { connection, telemetry },
+  );
+
+  const jobFailed = new Promise(resolve => {
+    worker.on('failed', () => resolve());
+  });
+
+  await queue.add('failing-job', { data: 'test-data' });
+
+  await jobFailed;
+  await worker.close();
+  await queue.close();
+  await Sentry.flush();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario.mjs b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario.mjs
new file mode 100644
index 000000000000..ffdcead133e6
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/scenario.mjs
@@ -0,0 +1,39 @@
+import * as Sentry from '@sentry/node';
+import { Queue, Worker } from 'bullmq';
+
+const telemetry = new Sentry.BullMQTelemetry({ enableMetrics: true });
+const connection = { host: '127.0.0.1', port: 6384 };
+
+async function run() {
+  const queue = new Queue('test-queue', { connection, telemetry });
+
+  const worker = new Worker(
+    'test-queue',
+    async () => {
+      // job processed
+    },
+    { connection, telemetry },
+  );
+
+  const jobsProcessed = new Promise(resolve => {
+    let completed = 0;
+    worker.on('completed', () => {
+      completed++;
+      if (completed === 2) {
+        resolve();
+      }
+    });
+  });
+
+  await Sentry.startSpan({ name: 'enqueue test-jobs' }, async () => {
+    await queue.add('test-job-1', { data: 'test-data' });
+    await queue.add('test-job-2', { data: 'test-data' });
+  });
+
+  await jobsProcessed;
+  await worker.close();
+  await queue.close();
+  await Sentry.flush();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/bullmq/test.ts b/dev-packages/node-integration-tests/suites/tracing/bullmq/test.ts
new file mode 100644
index 000000000000..49871dcc9786
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/bullmq/test.ts
@@ -0,0 +1,781 @@
+import type { Event, SerializedMetric } from '@sentry/core';
+import { SDK_VERSION } from '@sentry/core';
+import { afterAll, expect } from 'vitest';
+import { EXPECTED_SDK_NAME } from '../../../utils';
+import { cleanupChildProcesses, createEsmAndCjsTests, describeWithDockerCompose } from '../../../utils/runner';
+
+describeWithDockerCompose('bullmq', { workingDirectory: [__dirname] }, () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('traces producer and consumer operations with queue attributes', { timeout: 90_000 }, async () => {
+      const runner = createRunner().ignore('trace_metric');
+      const producerSpansPromise = runner.collectStreamedSpansUntilSegment('enqueue test-jobs');
+      const consumer1SpansPromise = runner.collectStreamedSpansUntilSegment(
+        span => span.attributes['messaging.bullmq.job.name']?.value === 'test-job-1',
+      );
+      const consumer2SpansPromise = runner.collectStreamedSpansUntilSegment(
+        span => span.attributes['messaging.bullmq.job.name']?.value === 'test-job-2',
+      );
+
+      await runner.start().completed();
+
+      const producerSpans = await producerSpansPromise;
+      const consumerSpans = [await consumer1SpansPromise, await consumer2SpansPromise];
+      const producerSegment = producerSpans.find(span => span.is_segment && span.name === 'enqueue test-jobs')!;
+      const publishSpans = producerSpans
+        .filter(span => span.attributes['messaging.system']?.value === 'bullmq')
+        .sort((a, b) => a.start_timestamp - b.start_timestamp);
+      const consumerSegments = consumerSpans.map(spans =>
+        spans.find(span => span.is_segment && span.name === 'process test-queue')!,
+      );
+
+      expect(
+        publishSpans.map(span => ({
+          name: span.name,
+          parent_span_id: span.parent_span_id,
+          status: span.status,
+          attributes: span.attributes,
+        })),
+      ).toEqual(
+        ['test-job-1', 'test-job-2'].map(jobName => ({
+          name: `add test-queue.${jobName}`,
+          parent_span_id: producerSegment.span_id,
+          status: 'ok',
+          attributes: {
+            'sentry.op': { type: 'string', value: 'queue.publish' },
+            'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+            'messaging.system': { type: 'string', value: 'bullmq' },
+            'messaging.destination.name': { type: 'string', value: 'test-queue' },
+            'messaging.operation.name': { type: 'string', value: 'add' },
+            'messaging.message.id': { type: 'string', value: expect.any(String) },
+            'messaging.bullmq.job.name': { type: 'string', value: jobName },
+            'sentry.environment': { type: 'string', value: 'production' },
+            'sentry.is_localhost': { type: 'boolean', value: false },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.segment.id': { type: 'string', value: producerSegment.span_id },
+            'sentry.segment.name': { type: 'string', value: 'enqueue test-jobs' },
+            'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+          },
+        })),
+      );
+
+      expect(
+        consumerSpans.map(spans =>
+          spans
+            .filter(span => span.attributes['messaging.system']?.value === 'bullmq')
+            .sort((a, b) => a.start_timestamp - b.start_timestamp)
+            .map(span => ({
+              name: span.name,
+              is_segment: span.is_segment,
+              status: span.status,
+              attributes: span.attributes,
+            })),
+        ),
+      ).toEqual(
+        ['test-job-1', 'test-job-2'].map((jobName, index) => [
+          {
+            name: 'process test-queue',
+            is_segment: true,
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.process' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.consumer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'test-queue' },
+              'messaging.operation.name': { type: 'string', value: 'process' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.message.retry.count': { type: 'integer', value: 0 },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: jobName },
+              'messaging.bullmq.job.processed_timestamp': { type: 'integer', value: expect.any(Number) },
+              'messaging.bullmq.job.attempt_finished_timestamp': { type: 'integer', value: expect.any(Number) },
+              'sentry.environment': { type: 'string', value: 'production' },
+              'sentry.is_localhost': { type: 'boolean', value: false },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.segment.id': { type: 'string', value: consumerSegments[index]!.span_id },
+              'sentry.segment.name': { type: 'string', value: 'process test-queue' },
+              'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+              'sentry.sample_rate': { type: 'integer', value: 1 },
+              'sentry.sdk.integrations': { type: 'array', value: expect.any(Array) },
+              'sentry.segment.name.source': { type: 'string', value: 'custom' },
+            },
+          },
+          {
+            name: 'complete test-queue',
+            is_segment: false,
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'test-queue' },
+              'messaging.operation.name': { type: 'string', value: 'complete' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: jobName },
+              'sentry.environment': { type: 'string', value: 'production' },
+              'sentry.is_localhost': { type: 'boolean', value: false },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.segment.id': { type: 'string', value: consumerSegments[index]!.span_id },
+              'sentry.segment.name': { type: 'string', value: 'process test-queue' },
+              'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+            },
+          },
+        ]),
+      );
+
+      expect(consumerSegments.map(segment => segment.attributes['messaging.message.id'])).toEqual(
+        publishSpans.map(span => span.attributes['messaging.message.id']),
+      );
+      expect(consumerSegments.map(segment => segment.links)).toEqual(
+        publishSpans.map(span => [
+          {
+            trace_id: span.trace_id,
+            span_id: span.span_id,
+            sampled: true,
+            attributes: { 'sentry.link.type': { type: 'string', value: 'message_origin' } },
+          },
+        ]),
+      );
+      expect(new Set([producerSegment.trace_id, ...consumerSegments.map(segment => segment.trace_id)]).size).toBe(3);
+    });
+
+    test('emits completion counter and duration histogram for processed jobs', { timeout: 90_000 }, async () => {
+      let metrics: SerializedMetric[] = [];
+
+      await createRunner()
+        .ignore('span')
+        .expect({
+          trace_metric: container => {
+            metrics = container.items;
+          },
+        })
+        .start()
+        .completed();
+
+      expect(
+        metrics.map(metric => ({
+          name: metric.name,
+          type: metric.type,
+          unit: metric.unit,
+          value: metric.value,
+          attributes: metric.attributes,
+        })),
+      ).toEqual(
+        ['test-job-1', 'test-job-2'].flatMap(jobName => [
+          {
+            name: 'messaging.bullmq.jobs.completed',
+            type: 'counter',
+            unit: 'none',
+            value: 1,
+            attributes: {
+              'messaging.destination.name': { type: 'string', value: 'test-queue' },
+              'messaging.bullmq.job.name': { type: 'string', value: jobName },
+              'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+              'server.address': { type: 'string', value: expect.any(String) },
+            },
+          },
+          {
+            name: 'messaging.process.duration',
+            type: 'distribution',
+            unit: 'second',
+            value: expect.any(Number),
+            attributes: {
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.operation.name': { type: 'string', value: 'process' },
+              'messaging.destination.name': { type: 'string', value: 'test-queue' },
+              'messaging.bullmq.job.name': { type: 'string', value: jobName },
+              'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+              'server.address': { type: 'string', value: expect.any(String) },
+            },
+          },
+        ]),
+      );
+    });
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario-failed-job.mjs', 'instrument.mjs', (createRunner, test) => {
+    test(
+      'captures an error for a failed job and sets the error status on its process span',
+      { timeout: 90_000 },
+      async () => {
+        let errorEvent: Event | undefined;
+        const runner = createRunner().ignore('trace_metric');
+        const consumerSpansPromise = runner.collectStreamedSpansUntilSegment('process test-failed-queue');
+
+        await runner
+          .expect({
+            event: event => {
+              errorEvent = event;
+            },
+          })
+          .start()
+          .completed();
+
+        const consumerSpans = await consumerSpansPromise;
+        const processSpan = consumerSpans.find(span => span.is_segment && span.name === 'process test-failed-queue')!;
+
+        expect(
+          consumerSpans
+            .filter(span => span.attributes['messaging.system']?.value === 'bullmq')
+            .sort((a, b) => a.start_timestamp - b.start_timestamp)
+            .map(span => ({
+              name: span.name,
+              status: span.status,
+              attributes: span.attributes,
+            })),
+        ).toEqual([
+          {
+            name: 'process test-failed-queue',
+            status: 'error',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.process' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.consumer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'test-failed-queue' },
+              'messaging.operation.name': { type: 'string', value: 'process' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.message.retry.count': { type: 'integer', value: 0 },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'failing-job' },
+              'messaging.bullmq.job.processed_timestamp': { type: 'integer', value: expect.any(Number) },
+              'messaging.bullmq.job.attempt_finished_timestamp': { type: 'integer', value: expect.any(Number) },
+              'sentry.environment': { type: 'string', value: 'production' },
+              'sentry.is_localhost': { type: 'boolean', value: false },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.segment.id': { type: 'string', value: processSpan.span_id },
+              'sentry.segment.name': { type: 'string', value: 'process test-failed-queue' },
+              'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+              'sentry.sample_rate': { type: 'integer', value: 1 },
+              'sentry.sdk.integrations': { type: 'array', value: expect.any(Array) },
+              'sentry.segment.name.source': { type: 'string', value: 'custom' },
+              'sentry.status.message': { type: 'string', value: 'internal_error' },
+            },
+          },
+          {
+            name: 'fail test-failed-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'test-failed-queue' },
+              'messaging.operation.name': { type: 'string', value: 'fail' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'failing-job' },
+              'sentry.environment': { type: 'string', value: 'production' },
+              'sentry.is_localhost': { type: 'boolean', value: false },
+              'sentry.release': { type: 'string', value: '1.0' },
+              'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+              'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+              'sentry.segment.id': { type: 'string', value: processSpan.span_id },
+              'sentry.segment.name': { type: 'string', value: 'process test-failed-queue' },
+              'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+            },
+          },
+        ]);
+        expect(errorEvent?.exception?.values).toHaveLength(1);
+        expect(errorEvent?.exception?.values?.[0]?.type).toBe('Error');
+        expect(errorEvent?.exception?.values?.[0]?.value).toBe('Job failed on purpose');
+        expect(errorEvent?.exception?.values?.[0]?.mechanism).toEqual({ type: 'auto.queue.bullmq', handled: false });
+        expect(errorEvent?.exception?.values?.[0]?.stacktrace).toBeUndefined();
+        expect(errorEvent?.contexts?.trace?.trace_id).toBe(processSpan.trace_id);
+        expect(errorEvent?.contexts?.trace?.span_id).toBe(processSpan.span_id);
+      },
+    );
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario-attributes.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('sends the attributes and metrics of all BullMQ operations', { timeout: 90_000 }, async () => {
+      let metrics: SerializedMetric[] = [];
+      const runner = createRunner();
+      const opsSpansPromise = runner.collectStreamedSpansUntilSegment('bullmq attributes');
+      const processSpansPromise = runner.collectStreamedSpansUntilSegment('process attributes-process-queue');
+
+      await runner
+        .expect({
+          trace_metric: container => {
+            metrics = container.items;
+          },
+        })
+        .start()
+        .completed();
+
+      const opsSpans = await opsSpansPromise;
+      const processSpans = await processSpansPromise;
+      const opsSegment = opsSpans.find(span => span.is_segment && span.name === 'bullmq attributes')!;
+      const processSegment = processSpans.find(
+        span => span.is_segment && span.name === 'process attributes-process-queue',
+      )!;
+
+      expect(
+        opsSpans
+          .filter(span => span.attributes['messaging.system']?.value === 'bullmq')
+          .sort((a, b) => a.start_timestamp - b.start_timestamp)
+          .map(span => ({
+            name: span.name,
+            status: span.status,
+            attributes: span.attributes,
+          })),
+      ).toEqual(
+        [
+          {
+            name: 'add attributes-process-queue.process-job',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.publish' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+              'messaging.operation.name': { type: 'string', value: 'add' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+            },
+          },
+          {
+            name: 'addBulk attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.publish' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'addBulk' },
+              'messaging.batch.message_count': { type: 'integer', value: 2 },
+              'messaging.bullmq.job.bulk.names': { type: 'array', value: ['bulk-job-1', 'bulk-job-2'] },
+            },
+          },
+          {
+            name: 'addFlow attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.publish' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'addFlow' },
+              'messaging.bullmq.flow.name': { type: 'string', value: 'flow-root' },
+            },
+          },
+          {
+            name: 'addNode attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'addNode' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'flow-root' },
+            },
+          },
+          {
+            name: 'addNode attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'addNode' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'flow-child' },
+            },
+          },
+          {
+            name: 'add attributes-ops-queue.scheduled-job',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.publish' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'add' },
+              'messaging.message.id': {
+                type: 'string',
+                value: expect.stringMatching(/^repeat:attributes-scheduler:\d+$/),
+              },
+              'messaging.bullmq.job.scheduler.id': { type: 'string', value: 'attributes-scheduler' },
+            },
+          },
+          {
+            name: 'add attributes-ops-queue.progress-job',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue.publish' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.producer' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'add' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.job.name': { type: 'string', value: 'progress-job' },
+            },
+          },
+          {
+            name: 'updateJobProgress attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'updateJobProgress' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+            },
+          },
+          {
+            name: 'remove attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'remove' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+            },
+          },
+          {
+            name: 'removeDeduplicationKey attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'removeDeduplicationKey' },
+              'messaging.bullmq.job.deduplication.key': { type: 'string', value: 'attributes-deduplication-id' },
+            },
+          },
+          {
+            name: 'removeDebounceKey attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'removeDebounceKey' },
+              'messaging.bullmq.job.key': { type: 'string', value: 'attributes-debounce-id' },
+            },
+          },
+          {
+            name: 'retryJobs attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'retryJobs' },
+            },
+          },
+          {
+            name: 'promoteJobs attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'promoteJobs' },
+            },
+          },
+          {
+            name: 'trimEvents attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'trimEvents' },
+              'messaging.bullmq.queue.event.max_length': { type: 'integer', value: 100 },
+            },
+          },
+          {
+            // `messaging.bullmq.queue.clean.count` replaces `messaging.bullmq.job.ids` in BullMQ 6.
+            name: 'clean attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'clean' },
+              'messaging.bullmq.job.type': { type: 'string', value: 'completed' },
+              'messaging.bullmq.job.ids': { type: 'array', value: [] },
+              'messaging.bullmq.queue.clean.limit': { type: 'integer', value: 100 },
+              'messaging.bullmq.queue.grace': { type: 'integer', value: 0 },
+            },
+          },
+          {
+            name: 'getNextJob attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'getNextJob' },
+              'messaging.message.id': { type: 'string', value: expect.any(String) },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-ops-worker' },
+            },
+          },
+          {
+            name: 'moveStalledJobsToWait attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'moveStalledJobsToWait' },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-ops-worker' },
+              'messaging.bullmq.worker.stalled_jobs': { type: 'array', value: [] },
+            },
+          },
+          {
+            name: 'extendLocks attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'extendLocks' },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-ops-worker' },
+              'messaging.bullmq.worker.jobs_to_extend_locks': { type: 'array', value: [] },
+            },
+          },
+          {
+            name: 'rateLimit attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'rateLimit' },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.rate_limit': { type: 'integer', value: 1 },
+            },
+          },
+          {
+            name: 'pause attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'pause' },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-ops-worker' },
+              'messaging.bullmq.worker.do_not_wait_active': { type: 'boolean', value: true },
+            },
+          },
+          {
+            name: 'close attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'close' },
+              'messaging.client.id': { type: 'string', value: expect.any(String) },
+              'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-ops-worker' },
+              'messaging.bullmq.worker.force_close': { type: 'boolean', value: true },
+            },
+          },
+          {
+            name: 'rateLimit attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'rateLimit' },
+              'messaging.bullmq.queue.rate_limit': { type: 'integer', value: 1 },
+            },
+          },
+          {
+            name: 'drain attributes-ops-queue',
+            status: 'ok',
+            attributes: {
+              'sentry.op': { type: 'string', value: 'queue' },
+              'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+              'messaging.system': { type: 'string', value: 'bullmq' },
+              'messaging.destination.name': { type: 'string', value: 'attributes-ops-queue' },
+              'messaging.operation.name': { type: 'string', value: 'drain' },
+              'messaging.bullmq.queue.drain.delay': { type: 'boolean', value: true },
+            },
+          },
+        ].map(span => ({
+          ...span,
+          attributes: {
+            ...span.attributes,
+            'sentry.environment': { type: 'string', value: 'production' },
+            'sentry.is_localhost': { type: 'boolean', value: false },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.segment.id': { type: 'string', value: opsSegment.span_id },
+            'sentry.segment.name': { type: 'string', value: 'bullmq attributes' },
+            'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+          },
+        })),
+      );
+
+      expect(
+        processSpans
+          .filter(span => span.attributes['messaging.system']?.value === 'bullmq')
+          .sort((a, b) => a.start_timestamp - b.start_timestamp)
+          .map(span => ({
+            name: span.name,
+            status: span.status,
+            attributes: span.attributes,
+          })),
+      ).toEqual([
+        {
+          name: 'process attributes-process-queue',
+          status: 'ok',
+          attributes: {
+            'sentry.op': { type: 'string', value: 'queue.process' },
+            'sentry.origin': { type: 'string', value: 'auto.queue.bullmq.consumer' },
+            'messaging.system': { type: 'string', value: 'bullmq' },
+            'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+            'messaging.operation.name': { type: 'string', value: 'process' },
+            'messaging.message.id': { type: 'string', value: expect.any(String) },
+            'messaging.message.retry.count': { type: 'integer', value: 0 },
+            'messaging.client.id': { type: 'string', value: expect.any(String) },
+            'messaging.bullmq.worker.name': { type: 'string', value: 'attributes-worker' },
+            'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+            'messaging.bullmq.job.processed_timestamp': { type: 'integer', value: expect.any(Number) },
+            'messaging.bullmq.job.attempt_finished_timestamp': { type: 'integer', value: expect.any(Number) },
+            'sentry.environment': { type: 'string', value: 'production' },
+            'sentry.is_localhost': { type: 'boolean', value: false },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.segment.id': { type: 'string', value: processSegment.span_id },
+            'sentry.segment.name': { type: 'string', value: 'process attributes-process-queue' },
+            'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+            'sentry.sample_rate': { type: 'integer', value: 1 },
+            'sentry.sdk.integrations': { type: 'array', value: expect.any(Array) },
+            'sentry.segment.name.source': { type: 'string', value: 'custom' },
+          },
+        },
+        {
+          name: 'complete attributes-process-queue',
+          status: 'ok',
+          attributes: {
+            'sentry.op': { type: 'string', value: 'queue' },
+            'sentry.origin': { type: 'string', value: 'auto.queue.bullmq' },
+            'messaging.system': { type: 'string', value: 'bullmq' },
+            'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+            'messaging.operation.name': { type: 'string', value: 'complete' },
+            'messaging.message.id': { type: 'string', value: expect.any(String) },
+            'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+            'sentry.environment': { type: 'string', value: 'production' },
+            'sentry.is_localhost': { type: 'boolean', value: false },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.segment.id': { type: 'string', value: processSegment.span_id },
+            'sentry.segment.name': { type: 'string', value: 'process attributes-process-queue' },
+            'sentry.trace_lifecycle': { type: 'string', value: 'stream' },
+          },
+        },
+      ]);
+
+      expect(
+        metrics.map(metric => ({
+          name: metric.name,
+          type: metric.type,
+          unit: metric.unit,
+          value: metric.value,
+          attributes: metric.attributes,
+        })),
+      ).toEqual([
+        {
+          name: 'messaging.bullmq.jobs.completed',
+          type: 'counter',
+          unit: 'none',
+          value: 1,
+          attributes: {
+            'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+            'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+            'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+            'server.address': { type: 'string', value: expect.any(String) },
+          },
+        },
+        {
+          name: 'messaging.process.duration',
+          type: 'distribution',
+          unit: 'second',
+          value: expect.any(Number),
+          attributes: {
+            'messaging.system': { type: 'string', value: 'bullmq' },
+            'messaging.operation.name': { type: 'string', value: 'process' },
+            'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+            'messaging.bullmq.job.name': { type: 'string', value: 'process-job' },
+            'messaging.bullmq.job.state': { type: 'string', value: 'completed' },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+            'server.address': { type: 'string', value: expect.any(String) },
+          },
+        },
+        ...[
+          { state: 'waiting', value: 0 },
+          { state: 'completed', value: 1 },
+          { state: 'paused', value: 0 },
+        ].map(({ state, value }) => ({
+          name: 'messaging.bullmq.queue.jobs',
+          type: 'gauge',
+          unit: 'none',
+          value,
+          attributes: {
+            'messaging.destination.name': { type: 'string', value: 'attributes-process-queue' },
+            'messaging.bullmq.queue.jobs.state': { type: 'string', value: state },
+            'sentry.release': { type: 'string', value: '1.0' },
+            'sentry.sdk.name': { type: 'string', value: EXPECTED_SDK_NAME },
+            'sentry.sdk.version': { type: 'string', value: SDK_VERSION },
+            'sentry.timestamp.sequence': { type: 'integer', value: expect.any(Number) },
+            'server.address': { type: 'string', value: expect.any(String) },
+          },
+        })),
+      ]);
+    });
+  });
+});
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index 69a5899ae619..58bcd049c076 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -19,6 +19,7 @@ export {
   googleGenAIIntegration,
   // eslint-disable-next-line typescript/no-deprecated
   disableAnrDetectionForCallback,
+  BullMQTelemetry,
   captureCheckIn,
   captureConsoleIntegration,
   captureEvent,
diff --git a/packages/aws-serverless/src/index.ts b/packages/aws-serverless/src/index.ts
index 095858178815..41c0d0131184 100644
--- a/packages/aws-serverless/src/index.ts
+++ b/packages/aws-serverless/src/index.ts
@@ -170,6 +170,7 @@ export {
   zodErrorsIntegration,
   profiler,
   amqplibIntegration,
+  BullMQTelemetry,
   anthropicAIIntegration,
   googleGenAIIntegration,
   vercelAIIntegration,
diff --git a/packages/bun/src/index.ts b/packages/bun/src/index.ts
index 763082aba7cd..5ff613985c91 100644
--- a/packages/bun/src/index.ts
+++ b/packages/bun/src/index.ts
@@ -191,6 +191,7 @@ export {
   zodErrorsIntegration,
   profiler,
   amqplibIntegration,
+  BullMQTelemetry,
   anthropicAIIntegration,
   googleGenAIIntegration,
   vercelAIIntegration,
diff --git a/packages/google-cloud-serverless/src/index.ts b/packages/google-cloud-serverless/src/index.ts
index cd588df14aae..f6abbb875256 100644
--- a/packages/google-cloud-serverless/src/index.ts
+++ b/packages/google-cloud-serverless/src/index.ts
@@ -168,6 +168,7 @@ export {
   zodErrorsIntegration,
   profiler,
   amqplibIntegration,
+  BullMQTelemetry,
   anthropicAIIntegration,
   googleGenAIIntegration,
   childProcessIntegration,
diff --git a/packages/node/src/index.ts b/packages/node/src/index.ts
index 53f1b781d45c..183069ccbadf 100644
--- a/packages/node/src/index.ts
+++ b/packages/node/src/index.ts
@@ -68,6 +68,7 @@ export {
 export { setupHapiErrorHandler } from './integrations/tracing/hapi';
 // oxlint-disable-next-line typescript/no-deprecated -- deprecated but still re-exported for backwards compatibility
 export { setupKoaErrorHandler } from './integrations/tracing/koa';
+export { BullMQTelemetry } from './integrations/tracing/bullmq';
 export {
   launchDarklyIntegration,
   buildLaunchDarklyFlagUsedHandler,
diff --git a/packages/node/src/integrations/tracing/bullmq/contextManager.ts b/packages/node/src/integrations/tracing/bullmq/contextManager.ts
new file mode 100644
index 000000000000..ad32e5689cdb
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/contextManager.ts
@@ -0,0 +1,62 @@
+import type { Span } from '@opentelemetry/api';
+import {
+  extractTraceparentData,
+  getActiveSpan,
+  getCurrentScope,
+  spanToTraceHeader,
+  withActiveSpan,
+  withIsolationScope,
+} from '@sentry/core';
+import type { ContextManager, SentryContext } from './types';
+
+export class SentryBullMQContextManager implements ContextManager<SentryContext> {
+  public active(): SentryContext {
+    return {
+      span: getActiveSpan(),
+      scope: getCurrentScope(),
+    };
+  }
+
+  public with<A extends (...args: unknown[]) => unknown>(context: SentryContext, fn: A): ReturnType<A> {
+    if (context.span) {
+      return withIsolationScope(() => {
+        return withActiveSpan(context.span as Span, fn) as ReturnType<A>;
+      });
+    }
+    return withIsolationScope(() => withActiveSpan(null, fn)) as ReturnType<A>;
+  }
+
+  /**
+   * Returns a context without a span. BullMQ 6.3.11+ runs the stalled jobs checker in it, so the
+   * checker does not stay attached to the span that was active when the worker started.
+   */
+  public root(): SentryContext {
+    return {
+      span: undefined,
+      scope: getCurrentScope(),
+    };
+  }
+
+  public getMetadata(context: SentryContext): string {
+    if (context.span) {
+      return spanToTraceHeader(context.span);
+    }
+    return '';
+  }
+
+  public fromMetadata(activeContext: SentryContext, metadata: string): SentryContext {
+    const traceparent = extractTraceparentData(metadata);
+    if (!traceparent?.traceId || !traceparent?.parentSpanId) {
+      return activeContext;
+    }
+
+    return {
+      ...activeContext,
+      producerSpanContext: {
+        traceId: traceparent.traceId,
+        spanId: traceparent.parentSpanId,
+        sampled: traceparent.parentSampled === true,
+      },
+    };
+  }
+}
diff --git a/packages/node/src/integrations/tracing/bullmq/index.ts b/packages/node/src/integrations/tracing/bullmq/index.ts
new file mode 100644
index 000000000000..984b1af13591
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/index.ts
@@ -0,0 +1,56 @@
+import { SentryBullMQContextManager } from './contextManager';
+import { SentryBullMQMeter } from './meter';
+import { SentryBullMQTracer } from './tracer';
+import type { ContextManager, Meter, Telemetry, Tracer, SentryContext } from './types';
+
+/**
+ * A Sentry-specific telemetry implementation for BullMQ.
+ *
+ * This implements BullMQ's Telemetry interface to provide automatic tracing
+ * for queue operations with proper Queue Insights attributes.
+ *
+ * @example
+ * ```javascript
+ * import * as Sentry from '@sentry/node';
+ * import { Queue, Worker } from 'bullmq';
+ *
+ * const telemetry = new Sentry.BullMQTelemetry();
+ *
+ * const queue = new Queue('myQueue', {
+ *   connection: { host: '127.0.0.1', port: 6379 },
+ *   telemetry,
+ * });
+ *
+ * const worker = new Worker('myQueue', async (job) => {
+ *   // Process job
+ * }, {
+ *   connection: { host: '127.0.0.1', port: 6379 },
+ *   telemetry,
+ * });
+ * ```
+ *
+ * To also send BullMQ's job metrics to Sentry, use `new Sentry.BullMQTelemetry({ enableMetrics: true })`.
+ *
+ * @see https://docs.bullmq.io/guide/telemetry
+ */
+export class BullMQTelemetry implements Telemetry<SentryContext> {
+  public tracer: Tracer<SentryContext>;
+  public contextManager: ContextManager<SentryContext>;
+  public meter?: Meter;
+
+  public constructor(
+    options: {
+      /**
+       * Sends BullMQ's job metrics, such as `messaging.bullmq.jobs.completed` and `messaging.process.duration`, to Sentry. Defaults to `false`.
+       */
+      enableMetrics?: boolean;
+    } = {},
+  ) {
+    this.tracer = new SentryBullMQTracer();
+    this.contextManager = new SentryBullMQContextManager();
+
+    if (options.enableMetrics) {
+      this.meter = new SentryBullMQMeter();
+    }
+  }
+}
diff --git a/packages/node/src/integrations/tracing/bullmq/meter.ts b/packages/node/src/integrations/tracing/bullmq/meter.ts
new file mode 100644
index 000000000000..bfae7aa342f8
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/meter.ts
@@ -0,0 +1,121 @@
+import { MESSAGING_OPERATION_NAME, MESSAGING_SYSTEM } from '@sentry/conventions/attributes';
+import { metrics } from '@sentry/core';
+import { toMessagingKey, toSentryAttributes } from './span';
+import type { AttributeValue, Counter, Gauge, Histogram, Meter, MetricOptions } from './types';
+
+function toMetricAttributes(
+  attributes?: Record<string, AttributeValue>,
+): Record<string, string | number | boolean> | undefined {
+  if (!attributes) {
+    return undefined;
+  }
+  const result: Record<string, string | number | boolean> = {};
+  for (const [key, value] of Object.entries(toSentryAttributes(attributes))) {
+    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+
+/**
+ * Converts the OpenTelemetry (UCUM) unit that BullMQ passes to the matching Sentry unit.
+ */
+function toSentryUnit(unit?: string): string | undefined {
+  if (unit === 'ms') {
+    return 'millisecond';
+  }
+
+  // In UCUM, `1` and annotations such as `{jobs}` mark a value without a unit.
+  if (unit === '1' || unit?.startsWith('{')) {
+    return 'none';
+  }
+
+  return unit;
+}
+
+class SentryBullMQCounter implements Counter {
+  private _name: string;
+  private _unit?: string;
+
+  public constructor(name: string, unit?: string) {
+    this._name = name;
+    this._unit = unit;
+  }
+
+  public add(value: number, attributes?: Record<string, AttributeValue>): void {
+    metrics.count(this._name, value, {
+      unit: this._unit,
+      attributes: toMetricAttributes(attributes),
+    });
+  }
+}
+
+class SentryBullMQHistogram implements Histogram {
+  private _name: string;
+  private _unit?: string;
+
+  public constructor(name: string, unit?: string) {
+    this._name = name;
+    this._unit = unit;
+  }
+
+  public record(value: number, attributes?: Record<string, AttributeValue>): void {
+    metrics.distribution(this._name, value, {
+      unit: this._unit,
+      attributes: toMetricAttributes(attributes),
+    });
+  }
+}
+
+class SentryBullMQGauge implements Gauge {
+  private _name: string;
+  private _unit?: string;
+
+  public constructor(name: string, unit?: string) {
+    this._name = name;
+    this._unit = unit;
+  }
+
+  public record(value: number, attributes?: Record<string, AttributeValue>): void {
+    metrics.gauge(this._name, value, {
+      unit: this._unit,
+      attributes: toMetricAttributes(attributes),
+    });
+  }
+}
+
+/**
+ * Records BullMQ's `bullmq.job.duration` histogram, which is in milliseconds, as the OTel
+ * `messaging.process.duration` metric in seconds.
+ */
+class SentryBullMQProcessDuration implements Histogram {
+  public record(value: number, attributes?: Record<string, AttributeValue>): void {
+    metrics.distribution('messaging.process.duration', value / 1000, {
+      unit: 'second',
+      attributes: {
+        ...toMetricAttributes(attributes),
+        [MESSAGING_SYSTEM]: 'bullmq',
+        [MESSAGING_OPERATION_NAME]: 'process',
+      },
+    });
+  }
+}
+
+export class SentryBullMQMeter implements Meter {
+  public createCounter(name: string, options?: MetricOptions): Counter {
+    return new SentryBullMQCounter(toMessagingKey(name), toSentryUnit(options?.unit));
+  }
+
+  public createHistogram(name: string, options?: MetricOptions): Histogram {
+    if (name === 'bullmq.job.duration') {
+      return new SentryBullMQProcessDuration();
+    }
+
+    return new SentryBullMQHistogram(toMessagingKey(name), toSentryUnit(options?.unit));
+  }
+
+  public createGauge(name: string, options?: MetricOptions): Gauge {
+    return new SentryBullMQGauge(toMessagingKey(name), toSentryUnit(options?.unit));
+  }
+}
diff --git a/packages/node/src/integrations/tracing/bullmq/span.ts b/packages/node/src/integrations/tracing/bullmq/span.ts
new file mode 100644
index 000000000000..10ec13bee4c2
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/span.ts
@@ -0,0 +1,205 @@
+import type { Attributes, Span } from '@opentelemetry/api';
+import {
+  MESSAGING_BATCH_MESSAGE_COUNT,
+  MESSAGING_BULLMQ_FLOW_NAME,
+  MESSAGING_BULLMQ_JOB_ATTEMPT_FINISHED_TIMESTAMP,
+  MESSAGING_BULLMQ_JOB_BULK_NAMES,
+  MESSAGING_BULLMQ_JOB_DEDUPLICATION_KEY,
+  MESSAGING_BULLMQ_JOB_IDS,
+  MESSAGING_BULLMQ_JOB_KEY,
+  MESSAGING_BULLMQ_JOB_NAME,
+  MESSAGING_BULLMQ_JOB_PROCESSED_TIMESTAMP,
+  MESSAGING_BULLMQ_JOB_SCHEDULER_ID,
+  MESSAGING_BULLMQ_JOB_STATE,
+  MESSAGING_BULLMQ_JOB_TYPE,
+  MESSAGING_BULLMQ_QUEUE_CLEAN_COUNT,
+  MESSAGING_BULLMQ_QUEUE_CLEAN_LIMIT,
+  MESSAGING_BULLMQ_QUEUE_DRAIN_DELAY,
+  MESSAGING_BULLMQ_QUEUE_EVENT_MAX_LENGTH,
+  MESSAGING_BULLMQ_QUEUE_GRACE,
+  MESSAGING_BULLMQ_QUEUE_JOBS_STATE,
+  MESSAGING_BULLMQ_QUEUE_RATE_LIMIT,
+  MESSAGING_BULLMQ_WORKER_DO_NOT_WAIT_ACTIVE,
+  MESSAGING_BULLMQ_WORKER_FORCE_CLOSE,
+  MESSAGING_BULLMQ_WORKER_JOBS_TO_EXTEND_LOCKS,
+  MESSAGING_BULLMQ_WORKER_NAME,
+  MESSAGING_BULLMQ_WORKER_RATE_LIMIT,
+  MESSAGING_BULLMQ_WORKER_STALLED_JOBS,
+  MESSAGING_CLIENT_ID,
+  MESSAGING_DESTINATION_NAME,
+  MESSAGING_MESSAGE_ID,
+  MESSAGING_MESSAGE_RETRY_COUNT,
+  MESSAGING_OPERATION_NAME,
+} from '@sentry/conventions/attributes';
+import type { Scope } from '@sentry/core';
+import { captureException, SPAN_STATUS_ERROR } from '@sentry/core';
+import type { AttributeValue, TelemetrySpan } from './types';
+
+const DROPPED_ATTRIBUTES = new Set([
+  // BullMQ sets these to `JSON.stringify()` output. They are left out until Sentry attributes support objects.
+  'bullmq.job.options',
+  'bullmq.job.progress',
+  'bullmq.queue.options',
+  'bullmq.worker.options',
+  // BullMQ deprecated this for `bullmq.job.attempt_finished_timestamp`, which it sets on the same spans.
+  'bullmq.job.finished.timestamp',
+]);
+
+// The BullMQ attribute keys and their `messaging.bullmq.*` keys in the Sentry conventions. Where BullMQ separates
+// the words of a key with dots, the Sentry key uses snake_case.
+const MESSAGING_BULLMQ_KEYS = new Map([
+  ['bullmq.flow.name', MESSAGING_BULLMQ_FLOW_NAME],
+  ['bullmq.job.attempt_finished_timestamp', MESSAGING_BULLMQ_JOB_ATTEMPT_FINISHED_TIMESTAMP],
+  ['bullmq.job.bulk.names', MESSAGING_BULLMQ_JOB_BULK_NAMES],
+  ['bullmq.job.deduplication.key', MESSAGING_BULLMQ_JOB_DEDUPLICATION_KEY],
+  ['bullmq.job.ids', MESSAGING_BULLMQ_JOB_IDS],
+  ['bullmq.job.key', MESSAGING_BULLMQ_JOB_KEY],
+  ['bullmq.job.name', MESSAGING_BULLMQ_JOB_NAME],
+  ['bullmq.job.processed.timestamp', MESSAGING_BULLMQ_JOB_PROCESSED_TIMESTAMP],
+  ['bullmq.job.scheduler.id', MESSAGING_BULLMQ_JOB_SCHEDULER_ID],
+  ['bullmq.job.type', MESSAGING_BULLMQ_JOB_TYPE],
+  ['bullmq.queue.clean.count', MESSAGING_BULLMQ_QUEUE_CLEAN_COUNT],
+  ['bullmq.queue.clean.limit', MESSAGING_BULLMQ_QUEUE_CLEAN_LIMIT],
+  ['bullmq.queue.drain.delay', MESSAGING_BULLMQ_QUEUE_DRAIN_DELAY],
+  ['bullmq.queue.event.max.length', MESSAGING_BULLMQ_QUEUE_EVENT_MAX_LENGTH],
+  ['bullmq.queue.grace', MESSAGING_BULLMQ_QUEUE_GRACE],
+  ['bullmq.queue.jobs.state', MESSAGING_BULLMQ_QUEUE_JOBS_STATE],
+  ['bullmq.queue.rate.limit', MESSAGING_BULLMQ_QUEUE_RATE_LIMIT],
+  ['bullmq.worker.do.not.wait.active', MESSAGING_BULLMQ_WORKER_DO_NOT_WAIT_ACTIVE],
+  ['bullmq.worker.force.close', MESSAGING_BULLMQ_WORKER_FORCE_CLOSE],
+  ['bullmq.worker.jobs.to.extend.locks', MESSAGING_BULLMQ_WORKER_JOBS_TO_EXTEND_LOCKS],
+  ['bullmq.worker.name', MESSAGING_BULLMQ_WORKER_NAME],
+  ['bullmq.worker.rate.limit', MESSAGING_BULLMQ_WORKER_RATE_LIMIT],
+  ['bullmq.worker.stalled.jobs', MESSAGING_BULLMQ_WORKER_STALLED_JOBS],
+]);
+
+/**
+ * Returns the Sentry key for a `bullmq.*` attribute key or metric name: the key from `MESSAGING_BULLMQ_KEYS`, or
+ * `messaging.<key>` for the keys that are not in it, such as the metric names. Returns all other keys unchanged.
+ */
+export function toMessagingKey(key: string): string {
+  return MESSAGING_BULLMQ_KEYS.get(key) ?? (key.startsWith('bullmq.') ? `messaging.${key}` : key);
+}
+
+/**
+ * Returns the BullMQ attributes with Sentry keys: the `messaging.*` convention where one exists, and the
+ * `messaging.bullmq.*` key for all others. The attributes that hold JSON strings and the deprecated ones are left out.
+ */
+export function toSentryAttributes(attributes: Record<string, AttributeValue>): Attributes {
+  const {
+    'bullmq.queue.name': queueName,
+    'bullmq.queue.operation': operation,
+    'bullmq.job.id': jobId,
+    'bullmq.job.attempts.made': attemptsMade,
+    'bullmq.job.bulk.count': bulkCount,
+    'bullmq.worker.id': workerId,
+    'bullmq.job.state': jobState,
+    'bullmq.job.status': jobStatus,
+    ...rest
+  } = attributes;
+  const result: Attributes = {};
+
+  for (const [key, value] of Object.entries(rest)) {
+    if (!DROPPED_ATTRIBUTES.has(key)) {
+      result[toMessagingKey(key)] = value;
+    }
+  }
+
+  if (typeof queueName === 'string') {
+    result[MESSAGING_DESTINATION_NAME] = queueName;
+  }
+
+  if (typeof operation === 'string') {
+    result[MESSAGING_OPERATION_NAME] = operation;
+  }
+
+  if (jobId !== undefined) {
+    result[MESSAGING_MESSAGE_ID] = String(jobId);
+  }
+
+  // BullMQ counts the attempt that just finished in `attemptsMade`.
+  if (typeof attemptsMade === 'number') {
+    result[MESSAGING_MESSAGE_RETRY_COUNT] = Math.max(attemptsMade - 1, 0);
+  }
+
+  if (typeof bulkCount === 'number') {
+    result[MESSAGING_BATCH_MESSAGE_COUNT] = bulkCount;
+  }
+
+  if (typeof workerId === 'string') {
+    result[MESSAGING_CLIENT_ID] = workerId;
+  }
+
+  // BullMQ before 5.81.2 sets `bullmq.job.status` instead of `bullmq.job.state`.
+  const state = jobState ?? jobStatus;
+  if (typeof state === 'string') {
+    result[MESSAGING_BULLMQ_JOB_STATE] = state;
+  }
+
+  return result;
+}
+
+export class SentryBullMQSpan implements TelemetrySpan {
+  private _span: Span;
+  private _scope: Scope;
+
+  public constructor(span: Span, scope: Scope) {
+    this._span = span;
+    this._scope = scope;
+  }
+
+  public setAttribute(key: string, value: AttributeValue): void {
+    this.setAttributes({ [key]: value });
+  }
+
+  public setAttributes(attributes: Record<string, AttributeValue>): void {
+    this._span.setAttributes(toSentryAttributes(attributes));
+  }
+
+  public addEvent(name: string, attributes?: Record<string, AttributeValue>): void {
+    this._span.addEvent(name, attributes);
+
+    // BullMQ sends this event from `Worker.handleFailed`, and the event name is not an exported constant:
+    // https://github.com/taskforcesh/bullmq/blob/01b8b14a973984845dc0bbcefccf35b3ed30782d/src/classes/worker.ts#L1223-L1225
+    if (name === 'job failed') {
+      this._span.setStatus({ code: SPAN_STATUS_ERROR, message: 'internal_error' });
+
+      const reason = attributes?.['bullmq.job.failed.reason'];
+      const error = new Error(String(reason || 'Unknown error'));
+      // BullMQ passes only the error message (https://github.com/taskforcesh/bullmq/issues/4902), so this stack has only
+      // BullMQ and SDK frames, the same for every job. Without it, Sentry groups the errors by their message.
+      error.stack = undefined;
+      captureException(error, {
+        mechanism: {
+          handled: false,
+          type: 'auto.queue.bullmq',
+        },
+      });
+    }
+  }
+
+  /**
+   * Does not capture to Sentry. BullMQ calls this for Redis, lock and serialization errors that it
+   * retries itself, often several times for one fault. Job failures are captured in `addEvent`.
+   */
+  public recordException(exception: Error | string | { code?: number; message?: string; name?: string }): void {
+    const error =
+      exception instanceof Error
+        ? exception
+        : new Error(typeof exception === 'string' ? exception : exception.message || 'Unknown error');
+
+    this._span.recordException(error);
+  }
+
+  public setSpanOnContext(context: unknown): unknown {
+    return {
+      ...(context as object),
+      span: this._span,
+      scope: this._scope,
+    };
+  }
+
+  public end(): void {
+    this._span.end();
+  }
+}
diff --git a/packages/node/src/integrations/tracing/bullmq/tracer.ts b/packages/node/src/integrations/tracing/bullmq/tracer.ts
new file mode 100644
index 000000000000..5722b013e451
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/tracer.ts
@@ -0,0 +1,80 @@
+import { MESSAGING_SYSTEM, SENTRY_LINK_TYPE, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import { QUEUE, QUEUE_PROCESS, QUEUE_PUBLISH } from '@sentry/conventions/op';
+import type { SpanAttributes } from '@sentry/core';
+import { getCurrentScope, startInactiveSpan, startNewTrace } from '@sentry/core';
+import { SentryBullMQSpan, toSentryAttributes } from './span';
+import type { SpanOptions, TelemetrySpan, Tracer, SentryContext } from './types';
+
+// BullMQ span names follow OTel messaging semconv: "{operation} {destination}"
+// e.g. "add myQueue", "addBulk myQueue", "process myQueue", "addFlow myQueue"
+const PRODUCER_OPERATIONS = new Set(['add', 'addbulk', 'addflow', 'addbulkflows']);
+const CONSUMER_OPERATIONS = new Set(['process']);
+
+function getOperation(name: string): string {
+  return name.split(' ')[0]!.toLowerCase();
+}
+
+function getOpFromSpanName(name: string): string {
+  const operation = getOperation(name);
+
+  if (CONSUMER_OPERATIONS.has(operation)) {
+    return QUEUE_PROCESS;
+  }
+
+  if (PRODUCER_OPERATIONS.has(operation)) {
+    return QUEUE_PUBLISH;
+  }
+
+  return QUEUE;
+}
+
+function getOriginFromSpanName(name: string): string {
+  const operation = getOperation(name);
+
+  if (CONSUMER_OPERATIONS.has(operation)) {
+    return 'auto.queue.bullmq.consumer';
+  }
+
+  if (PRODUCER_OPERATIONS.has(operation)) {
+    return 'auto.queue.bullmq.producer';
+  }
+
+  return 'auto.queue.bullmq';
+}
+
+export class SentryBullMQTracer implements Tracer<SentryContext> {
+  public startSpan(name: string, options?: SpanOptions, context?: SentryContext): TelemetrySpan {
+    const op = getOpFromSpanName(name);
+    const origin = getOriginFromSpanName(name);
+
+    const attributes: SpanAttributes = {
+      [SENTRY_OP]: op,
+      [SENTRY_ORIGIN]: origin,
+      [MESSAGING_SYSTEM]: 'bullmq',
+      ...(options?.attributes && toSentryAttributes(options.attributes)),
+    };
+
+    // Internal operations such as `moveStalledJobsToWait` run on timers. Without a parent, each tick would start a new root span.
+    const span =
+      op === QUEUE_PROCESS
+        ? startNewTrace(() => startInactiveSpan({ name, attributes }))
+        : startInactiveSpan({ name, attributes, onlyIfParent: op === QUEUE });
+
+    if (context?.producerSpanContext) {
+      const producerSpanCtx = {
+        traceId: context.producerSpanContext.traceId,
+        spanId: context.producerSpanContext.spanId,
+        traceFlags: context.producerSpanContext.sampled ? 1 : 0,
+      };
+
+      span.addLink({
+        context: producerSpanCtx,
+        attributes: {
+          [SENTRY_LINK_TYPE]: 'message_origin',
+        },
+      });
+    }
+
+    return new SentryBullMQSpan(span, getCurrentScope());
+  }
+}
diff --git a/packages/node/src/integrations/tracing/bullmq/types.ts b/packages/node/src/integrations/tracing/bullmq/types.ts
new file mode 100644
index 000000000000..81d2e96696ce
--- /dev/null
+++ b/packages/node/src/integrations/tracing/bullmq/types.ts
@@ -0,0 +1,81 @@
+import type { Span } from '@opentelemetry/api';
+import type { Scope } from '@sentry/core';
+
+/**
+ * Vendored from bullmq@5.79.1 — src/interfaces/telemetry.ts
+ * https://github.com/taskforcesh/bullmq/blob/master/src/interfaces/telemetry.ts
+ *
+ * Minimal subset of BullMQ's Telemetry interface so we don't depend on bullmq at runtime.
+ *
+ * SPDX-License-Identifier: MIT
+ * Copyright (c) 2018 BullForce Labs AB and contributors
+ */
+
+export type AttributeValue = string | number | boolean | Array<string | number | boolean>;
+
+export interface SpanOptions {
+  kind?: number;
+  attributes?: Record<string, AttributeValue>;
+  parent?: unknown;
+}
+
+export interface TelemetrySpan {
+  setAttribute(key: string, value: AttributeValue): void;
+  setAttributes(attributes: Record<string, AttributeValue>): void;
+  addEvent(name: string, attributes?: Record<string, AttributeValue>): void;
+  recordException(exception: Error | string | { code?: number; message?: string; name?: string }): void;
+  setSpanOnContext(context: unknown): unknown;
+  end(): void;
+}
+
+export interface Tracer<Context> {
+  startSpan(name: string, options?: SpanOptions, context?: Context): TelemetrySpan;
+}
+
+export interface ContextManager<Context> {
+  active(): Context;
+  with<A extends (...args: unknown[]) => unknown>(context: Context, fn: A): ReturnType<A>;
+  // Added in bullmq@6.3.11
+  root?(): Context;
+  getMetadata(context: Context): string;
+  fromMetadata(activeContext: Context, metadata: string): Context;
+}
+
+export interface MetricOptions {
+  description?: string;
+  unit?: string;
+}
+
+export interface Counter {
+  add(value: number, attributes?: Record<string, AttributeValue>): void;
+}
+
+export interface Histogram {
+  record(value: number, attributes?: Record<string, AttributeValue>): void;
+}
+
+export interface Gauge {
+  record(value: number, attributes?: Record<string, AttributeValue>): void;
+}
+
+export interface Meter {
+  createCounter(name: string, options?: MetricOptions): Counter;
+  createHistogram(name: string, options?: MetricOptions): Histogram;
+  createGauge?(name: string, options?: MetricOptions): Gauge;
+}
+
+export interface Telemetry<Context> {
+  tracer: Tracer<Context>;
+  contextManager: ContextManager<Context>;
+  meter?: Meter;
+}
+
+export interface SentryContext {
+  span: Span | undefined;
+  scope: Scope;
+  producerSpanContext?: {
+    traceId: string;
+    spanId: string;
+    sampled: boolean;
+  };
+}
diff --git a/packages/node/test/integrations/tracing/bullmq.test.ts b/packages/node/test/integrations/tracing/bullmq.test.ts
new file mode 100644
index 000000000000..a4fec420645f
--- /dev/null
+++ b/packages/node/test/integrations/tracing/bullmq.test.ts
@@ -0,0 +1,688 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import * as SentryCore from '@sentry/core';
+import { BullMQTelemetry } from '../../../src/integrations/tracing/bullmq';
+
+vi.mock('@sentry/core', async importOriginal => {
+  const actual = await importOriginal<typeof SentryCore>();
+  return {
+    ...actual,
+    startInactiveSpan: vi.fn(() => mockOtelSpan()),
+    getActiveSpan: vi.fn(() => undefined),
+    getCurrentScope: vi.fn(() => mockScope()),
+    withActiveSpan: vi.fn((_span, fn) => fn()),
+    startNewTrace: vi.fn(fn => fn()),
+    withIsolationScope: vi.fn(fn => fn()),
+    spanToTraceHeader: vi.fn(() => '00-traceid-spanid-01'),
+    captureException: vi.fn(),
+    metrics: {
+      count: vi.fn(),
+      distribution: vi.fn(),
+      gauge: vi.fn(),
+    },
+  };
+});
+
+function mockOtelSpan() {
+  return {
+    setAttribute: vi.fn(),
+    setAttributes: vi.fn(),
+    addEvent: vi.fn(),
+    addLink: vi.fn(),
+    recordException: vi.fn(),
+    setStatus: vi.fn(),
+    end: vi.fn(),
+    spanContext: () => ({ spanId: 'abc123', traceId: 'def456', traceFlags: 1 }),
+  };
+}
+
+function mockScope() {
+  return {
+    setTag: vi.fn(),
+    setContext: vi.fn(),
+  };
+}
+
+beforeEach(() => {
+  vi.clearAllMocks();
+});
+
+describe('BullMQTelemetry', () => {
+  it('does not create a meter by default', () => {
+    const telemetry = new BullMQTelemetry();
+
+    expect(telemetry.meter).toBeUndefined();
+  });
+
+  it('creates a meter when enableMetrics is true', () => {
+    const telemetry = new BullMQTelemetry({ enableMetrics: true });
+
+    expect(telemetry.meter).toBeDefined();
+  });
+});
+
+describe('SentryBullMQTracer', () => {
+  describe('startSpan', () => {
+    it.each([
+      { name: 'add myQueue', expectedOp: 'queue.publish', expectedOrigin: 'auto.queue.bullmq.producer' },
+      { name: 'addBulk myQueue', expectedOp: 'queue.publish', expectedOrigin: 'auto.queue.bullmq.producer' },
+      { name: 'addFlow myQueue', expectedOp: 'queue.publish', expectedOrigin: 'auto.queue.bullmq.producer' },
+      { name: 'addBulkFlows myQueue', expectedOp: 'queue.publish', expectedOrigin: 'auto.queue.bullmq.producer' },
+      { name: 'pause myQueue', expectedOp: 'queue', expectedOrigin: 'auto.queue.bullmq' },
+      { name: 'close myQueue', expectedOp: 'queue', expectedOrigin: 'auto.queue.bullmq' },
+      { name: 'drain myQueue', expectedOp: 'queue', expectedOrigin: 'auto.queue.bullmq' },
+      { name: 'getNextJob myQueue', expectedOp: 'queue', expectedOrigin: 'auto.queue.bullmq' },
+      { name: 'moveStalledJobsToWait myQueue', expectedOp: 'queue', expectedOrigin: 'auto.queue.bullmq' },
+    ])('maps "$name" to op=$expectedOp and origin=$expectedOrigin', ({ name, expectedOp, expectedOrigin }) => {
+      const telemetry = new BullMQTelemetry();
+
+      telemetry.tracer.startSpan(name);
+
+      expect(SentryCore.startInactiveSpan).toHaveBeenCalledWith({
+        name,
+        attributes: {
+          'sentry.op': expectedOp,
+          'sentry.origin': expectedOrigin,
+          'messaging.system': 'bullmq',
+        },
+        onlyIfParent: expectedOp === 'queue',
+      });
+      expect(SentryCore.startNewTrace).not.toHaveBeenCalled();
+    });
+
+    it('maps "process myQueue" to op=queue.process and origin=auto.queue.bullmq.consumer', () => {
+      const telemetry = new BullMQTelemetry();
+
+      telemetry.tracer.startSpan('process myQueue');
+
+      expect(SentryCore.startInactiveSpan).toHaveBeenCalledWith({
+        name: 'process myQueue',
+        attributes: {
+          'sentry.op': 'queue.process',
+          'sentry.origin': 'auto.queue.bullmq.consumer',
+          'messaging.system': 'bullmq',
+        },
+      });
+    });
+
+    it('merges attributes from SpanOptions and gives them messaging keys', () => {
+      const telemetry = new BullMQTelemetry();
+
+      telemetry.tracer.startSpan('add emails', {
+        attributes: { 'bullmq.queue.name': 'emails', 'bullmq.job.name': 'welcome-email' },
+      });
+
+      expect(SentryCore.startInactiveSpan).toHaveBeenCalledWith({
+        name: 'add emails',
+        attributes: {
+          'sentry.op': 'queue.publish',
+          'sentry.origin': 'auto.queue.bullmq.producer',
+          'messaging.system': 'bullmq',
+          'messaging.destination.name': 'emails',
+          'messaging.bullmq.job.name': 'welcome-email',
+        },
+        onlyIfParent: false,
+      });
+    });
+
+    it('starts each queue.process span in a new trace', () => {
+      const telemetry = new BullMQTelemetry();
+
+      telemetry.tracer.startSpan('process notifications');
+
+      expect(SentryCore.startNewTrace).toHaveBeenCalledOnce();
+    });
+
+    it('adds span link to producer when context has producerSpanContext', () => {
+      const telemetry = new BullMQTelemetry();
+      const otelSpan = mockOtelSpan();
+      vi.mocked(SentryCore.startInactiveSpan).mockReturnValueOnce(otelSpan as any);
+
+      telemetry.tracer.startSpan('process myQueue', undefined, {
+        span: undefined,
+        scope: mockScope() as any,
+        producerSpanContext: {
+          traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+          spanId: '1122334455667788',
+          sampled: true,
+        },
+      });
+
+      expect(otelSpan.addLink).toHaveBeenCalledWith({
+        context: {
+          traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+          spanId: '1122334455667788',
+          traceFlags: 1,
+        },
+        attributes: {
+          'sentry.link.type': 'message_origin',
+        },
+      });
+    });
+
+    it('adds the span link with traceFlags 0 when the producer span was not sampled', () => {
+      const telemetry = new BullMQTelemetry();
+      const otelSpan = mockOtelSpan();
+      vi.mocked(SentryCore.startInactiveSpan).mockReturnValueOnce(otelSpan as any);
+
+      telemetry.tracer.startSpan('process myQueue', undefined, {
+        span: undefined,
+        scope: mockScope() as any,
+        producerSpanContext: {
+          traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+          spanId: '1122334455667788',
+          sampled: false,
+        },
+      });
+
+      expect(otelSpan.addLink).toHaveBeenCalledWith({
+        context: {
+          traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+          spanId: '1122334455667788',
+          traceFlags: 0,
+        },
+        attributes: {
+          'sentry.link.type': 'message_origin',
+        },
+      });
+    });
+
+    it('does not add span link when context has no producerSpanContext', () => {
+      const telemetry = new BullMQTelemetry();
+      const otelSpan = mockOtelSpan();
+      vi.mocked(SentryCore.startInactiveSpan).mockReturnValueOnce(otelSpan as any);
+
+      telemetry.tracer.startSpan('process myQueue', undefined, {
+        span: undefined,
+        scope: mockScope() as any,
+      });
+
+      expect(otelSpan.addLink).not.toHaveBeenCalled();
+    });
+  });
+});
+
+describe('SentryBullMQSpan', () => {
+  function createSpan() {
+    const telemetry = new BullMQTelemetry();
+    const otelSpan = mockOtelSpan();
+    const scope = mockScope();
+    vi.mocked(SentryCore.startInactiveSpan).mockReturnValueOnce(otelSpan as any);
+    vi.mocked(SentryCore.getCurrentScope).mockReturnValueOnce(scope as any);
+    const span = telemetry.tracer.startSpan('process emails');
+    return { span, otelSpan, scope };
+  }
+
+  it('replaces the BullMQ attributes that have a messaging convention and prefixes the others', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({
+      'bullmq.queue.name': 'emails',
+      'bullmq.queue.operation': 'process',
+      'bullmq.job.id': '42',
+      'bullmq.job.attempts.made': 3,
+      'bullmq.job.bulk.count': 5,
+      'bullmq.worker.id': '03327d57-05cc-4528-9d24-c59bf6520039',
+      'bullmq.job.name': 'welcome-email',
+      'bullmq.worker.name': 'mailer',
+    });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.bullmq.job.name': 'welcome-email',
+      'messaging.bullmq.worker.name': 'mailer',
+      'messaging.destination.name': 'emails',
+      'messaging.operation.name': 'process',
+      'messaging.message.id': '42',
+      'messaging.message.retry.count': 2,
+      'messaging.batch.message_count': 5,
+      'messaging.client.id': '03327d57-05cc-4528-9d24-c59bf6520039',
+    });
+  });
+
+  it('replaces the queue name when BullMQ sets it with setAttribute', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttribute('bullmq.queue.name', 'emails');
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.destination.name': 'emails',
+    });
+  });
+
+  it('sets a retry count of 0 for the first attempt', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({ 'bullmq.job.attempts.made': 1 });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.message.retry.count': 0,
+    });
+  });
+
+  it('leaves out the BullMQ attributes that hold JSON strings', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({
+      'bullmq.job.id': '42',
+      'bullmq.job.options': '{"removeChildren":true}',
+      'bullmq.job.progress': '{"percentage":50}',
+      'bullmq.queue.options': '{"count":10}',
+      'bullmq.worker.options': '{"block":false}',
+    });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.message.id': '42',
+    });
+  });
+
+  it('uses snake_case for the words of multi-word BullMQ keys', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({
+      'bullmq.job.processed.timestamp': 1,
+      'bullmq.queue.event.max.length': 2,
+      'bullmq.queue.rate.limit': 3,
+      'bullmq.worker.do.not.wait.active': 4,
+      'bullmq.worker.force.close': 5,
+      'bullmq.worker.jobs.to.extend.locks': 6,
+      'bullmq.worker.rate.limit': 7,
+      'bullmq.worker.stalled.jobs': 8,
+    });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.bullmq.job.processed_timestamp': 1,
+      'messaging.bullmq.queue.event.max_length': 2,
+      'messaging.bullmq.queue.rate_limit': 3,
+      'messaging.bullmq.worker.do_not_wait_active': 4,
+      'messaging.bullmq.worker.force_close': 5,
+      'messaging.bullmq.worker.jobs_to_extend_locks': 6,
+      'messaging.bullmq.worker.rate_limit': 7,
+      'messaging.bullmq.worker.stalled_jobs': 8,
+    });
+  });
+
+  it('leaves out the deprecated bullmq.job.finished.timestamp', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({
+      'bullmq.job.finished.timestamp': 1791184722000,
+      'bullmq.job.attempt_finished_timestamp': 1791184722000,
+    });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.bullmq.job.attempt_finished_timestamp': 1791184722000,
+    });
+  });
+
+  it('sends bullmq.job.status as messaging.bullmq.job.state', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({ 'bullmq.job.status': 'completed' });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.bullmq.job.state': 'completed',
+    });
+  });
+
+  it('prefers bullmq.job.state when BullMQ sets it together with bullmq.job.status', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.setAttributes({ 'bullmq.job.state': 'failed', 'bullmq.job.status': 'completed' });
+
+    expect(otelSpan.setAttributes).toHaveBeenCalledWith({
+      'messaging.bullmq.job.state': 'failed',
+    });
+  });
+
+  it('passes events to the OTel span without renaming their attributes', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.addEvent('job completed', { 'bullmq.job.result': '{"sent":true}' });
+
+    expect(otelSpan.addEvent).toHaveBeenCalledWith('job completed', { 'bullmq.job.result': '{"sent":true}' });
+  });
+
+  describe('recordException', () => {
+    it('records Error instances on the OTel span without capturing them', () => {
+      const { span, otelSpan } = createSpan();
+      const error = new Error('Redis connection refused');
+
+      span.recordException(error);
+
+      expect(otelSpan.recordException).toHaveBeenCalledWith(error);
+      expect(SentryCore.captureException).not.toHaveBeenCalled();
+    });
+
+    it('wraps non-Error exception objects in an Error', () => {
+      const { span, otelSpan } = createSpan();
+
+      span.recordException({ code: 503, message: 'Service unavailable' });
+
+      expect(otelSpan.recordException).toHaveBeenCalledWith(new Error('Service unavailable'));
+      expect(SentryCore.captureException).not.toHaveBeenCalled();
+    });
+
+    it('wraps string exceptions in an Error', () => {
+      const { span, otelSpan } = createSpan();
+
+      (span as any).recordException('Connection timed out');
+
+      expect(otelSpan.recordException).toHaveBeenCalledWith(new Error('Connection timed out'));
+      expect(SentryCore.captureException).not.toHaveBeenCalled();
+    });
+
+    it('uses fallback message when non-Error exception has no message', () => {
+      const { span, otelSpan } = createSpan();
+
+      span.recordException({ code: 500 });
+
+      expect(otelSpan.recordException).toHaveBeenCalledWith(new Error('Unknown error'));
+      expect(SentryCore.captureException).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('addEvent', () => {
+    it('captures exception when event name is "job failed"', () => {
+      const { span } = createSpan();
+
+      span.addEvent('job failed', { 'bullmq.job.failed.reason': 'Connection refused' });
+
+      expect(SentryCore.captureException).toHaveBeenCalledWith(new Error('Connection refused'), {
+        mechanism: { handled: false, type: 'auto.queue.bullmq' },
+      });
+    });
+
+    it('sets the error status on the span when the event name is "job failed"', () => {
+      const { span, otelSpan } = createSpan();
+
+      span.addEvent('job failed', { 'bullmq.job.failed.reason': 'Connection refused' });
+
+      expect(otelSpan.setStatus).toHaveBeenCalledWith({
+        code: SentryCore.SPAN_STATUS_ERROR,
+        message: 'internal_error',
+      });
+    });
+
+    it('does not capture an exception or set an error status for other event names', () => {
+      const { span, otelSpan } = createSpan();
+
+      span.addEvent('job completed', { 'bullmq.job.result': '{"ok":true}' });
+
+      expect(SentryCore.captureException).not.toHaveBeenCalled();
+      expect(otelSpan.setStatus).not.toHaveBeenCalled();
+    });
+  });
+
+  it('returns context with span and scope from setSpanOnContext', () => {
+    const { span, otelSpan, scope } = createSpan();
+    const inputContext = { existingKey: 'value' };
+
+    const result = span.setSpanOnContext(inputContext);
+
+    expect(result).toEqual({ existingKey: 'value', span: otelSpan, scope });
+  });
+
+  it('delegates end to the underlying OTel span', () => {
+    const { span, otelSpan } = createSpan();
+
+    span.end();
+
+    expect(otelSpan.end).toHaveBeenCalledOnce();
+  });
+});
+
+describe('SentryBullMQContextManager', () => {
+  it('returns current active span and scope from active()', () => {
+    const telemetry = new BullMQTelemetry();
+    const activeSpan = mockOtelSpan();
+    const scope = mockScope();
+    vi.mocked(SentryCore.getActiveSpan).mockReturnValueOnce(activeSpan as any);
+    vi.mocked(SentryCore.getCurrentScope).mockReturnValueOnce(scope as any);
+
+    const context = telemetry.contextManager.active();
+
+    expect(context).toEqual({ span: activeSpan, scope });
+  });
+
+  describe('with', () => {
+    it('calls withActiveSpan inside withIsolationScope when context has a span', () => {
+      const telemetry = new BullMQTelemetry();
+      const fakeSpan = mockOtelSpan();
+      const context = { span: fakeSpan, scope: mockScope() };
+      const fn = vi.fn(() => 'result');
+
+      const result = telemetry.contextManager.with(context as any, fn);
+
+      expect(result).toBe('result');
+      expect(SentryCore.withIsolationScope).toHaveBeenCalledOnce();
+      expect(SentryCore.withActiveSpan).toHaveBeenCalledWith(fakeSpan, fn);
+    });
+
+    it('clears the active span inside withIsolationScope when context has no span', () => {
+      const telemetry = new BullMQTelemetry();
+      const context = { span: undefined, scope: mockScope() };
+      const fn = vi.fn(() => 'result');
+
+      const result = telemetry.contextManager.with(context as any, fn);
+
+      expect(result).toBe('result');
+      expect(SentryCore.withIsolationScope).toHaveBeenCalledOnce();
+      expect(SentryCore.withActiveSpan).toHaveBeenCalledWith(null, fn);
+    });
+  });
+
+  describe('root', () => {
+    it('returns a context without a span that runs callbacks without an active span', () => {
+      const telemetry = new BullMQTelemetry();
+      const fn = vi.fn(() => 'result');
+
+      const context = telemetry.contextManager.root!();
+      const result = telemetry.contextManager.with(context, fn);
+
+      expect(context.span).toBeUndefined();
+      expect(result).toBe('result');
+      expect(SentryCore.withActiveSpan).toHaveBeenCalledWith(null, fn);
+    });
+  });
+
+  describe('getMetadata', () => {
+    it('returns sentry-trace header when context has a span', () => {
+      const telemetry = new BullMQTelemetry();
+      const fakeSpan = mockOtelSpan();
+      const context = { span: fakeSpan, scope: mockScope() };
+
+      const metadata = telemetry.contextManager.getMetadata(context as any);
+
+      expect(SentryCore.spanToTraceHeader).toHaveBeenCalledWith(fakeSpan);
+      expect(metadata).toBe('00-traceid-spanid-01');
+    });
+
+    it('returns empty string when context has no span', () => {
+      const telemetry = new BullMQTelemetry();
+      const context = { span: undefined, scope: mockScope() };
+
+      const metadata = telemetry.contextManager.getMetadata(context as any);
+
+      expect(metadata).toBe('');
+      expect(SentryCore.spanToTraceHeader).not.toHaveBeenCalled();
+    });
+  });
+
+  describe('fromMetadata', () => {
+    it('parses sentry-trace header and attaches producerSpanContext', () => {
+      const telemetry = new BullMQTelemetry();
+      const fakeSpan = mockOtelSpan();
+      const context = { span: fakeSpan, scope: mockScope() };
+
+      const result = telemetry.contextManager.fromMetadata(
+        context as any,
+        'aabbccddaabbccddaabbccddaabbccdd-1122334455667788-1',
+      );
+
+      expect(result).toEqual({
+        span: fakeSpan,
+        scope: context.scope,
+        producerSpanContext: {
+          traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+          spanId: '1122334455667788',
+          sampled: true,
+        },
+      });
+    });
+
+    it('marks the producer span context as not sampled when the sentry-trace header has no sampled flag', () => {
+      const telemetry = new BullMQTelemetry();
+      const context = { span: undefined, scope: mockScope() };
+
+      const result = telemetry.contextManager.fromMetadata(
+        context as any,
+        'aabbccddaabbccddaabbccddaabbccdd-1122334455667788',
+      );
+
+      expect(result.producerSpanContext).toEqual({
+        traceId: 'aabbccddaabbccddaabbccddaabbccdd',
+        spanId: '1122334455667788',
+        sampled: false,
+      });
+    });
+
+    it('returns the active context unchanged when metadata is empty', () => {
+      const telemetry = new BullMQTelemetry();
+      const context = { span: undefined, scope: mockScope() };
+
+      const result = telemetry.contextManager.fromMetadata(context as any, '');
+
+      expect(result).toBe(context);
+    });
+
+    it('returns the active context unchanged when metadata is invalid', () => {
+      const telemetry = new BullMQTelemetry();
+      const context = { span: undefined, scope: mockScope() };
+
+      const result = telemetry.contextManager.fromMetadata(context as any, 'not-a-valid-header');
+
+      expect(result).toBe(context);
+    });
+  });
+});
+
+describe('SentryBullMQMeter', () => {
+  describe('counter', () => {
+    it('delegates add to metrics.count with name and unit', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const counter = telemetry.meter!.createCounter('bullmq.jobs.completed', { unit: '1' });
+
+      counter.add(5, { 'queue.name': 'emails' });
+
+      expect(SentryCore.metrics.count).toHaveBeenCalledWith('messaging.bullmq.jobs.completed', 5, {
+        unit: 'none',
+        attributes: { 'queue.name': 'emails' },
+      });
+    });
+
+    it('passes undefined attributes when none provided', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const counter = telemetry.meter!.createCounter('bullmq.jobs.failed');
+
+      counter.add(1);
+
+      expect(SentryCore.metrics.count).toHaveBeenCalledWith('messaging.bullmq.jobs.failed', 1, {
+        unit: undefined,
+        attributes: undefined,
+      });
+    });
+  });
+
+  describe('histogram', () => {
+    it('records bullmq.job.duration as messaging.process.duration in seconds', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const histogram = telemetry.meter!.createHistogram('bullmq.job.duration', { unit: 'ms' });
+
+      histogram.record(1500, { 'bullmq.queue.name': 'notifications' });
+
+      expect(SentryCore.metrics.distribution).toHaveBeenCalledWith('messaging.process.duration', 1.5, {
+        unit: 'second',
+        attributes: {
+          'messaging.destination.name': 'notifications',
+          'messaging.system': 'bullmq',
+          'messaging.operation.name': 'process',
+        },
+      });
+    });
+
+    it('keeps a unit that is already a Sentry unit', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const histogram = telemetry.meter!.createHistogram('bullmq.job.payload', { unit: 'byte' });
+
+      histogram.record(512);
+
+      expect(SentryCore.metrics.distribution).toHaveBeenCalledWith('messaging.bullmq.job.payload', 512, {
+        unit: 'byte',
+        attributes: undefined,
+      });
+    });
+  });
+
+  describe('gauge', () => {
+    it('delegates record to metrics.gauge', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const gauge = telemetry.meter!.createGauge!('bullmq.queue.jobs', { unit: '{jobs}' });
+
+      gauge.record(37, { 'queue.name': 'reports' });
+
+      expect(SentryCore.metrics.gauge).toHaveBeenCalledWith('messaging.bullmq.queue.jobs', 37, {
+        unit: 'none',
+        attributes: { 'queue.name': 'reports' },
+      });
+    });
+  });
+
+  describe('attribute filtering', () => {
+    it('replaces the BullMQ queue name with the messaging destination', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const counter = telemetry.meter!.createCounter('bullmq.jobs.completed');
+
+      counter.add(1, { 'bullmq.queue.name': 'emails', 'bullmq.job.name': 'welcome-email' });
+
+      expect(SentryCore.metrics.count).toHaveBeenCalledWith('messaging.bullmq.jobs.completed', 1, {
+        unit: undefined,
+        attributes: {
+          'messaging.bullmq.job.name': 'welcome-email',
+          'messaging.destination.name': 'emails',
+        },
+      });
+    });
+
+    it('filters out array attribute values', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const counter = telemetry.meter!.createCounter('bullmq.jobs.completed');
+
+      counter.add(1, {
+        'queue.name': 'emails',
+        tags: ['urgent', 'retry'],
+        priority: 5,
+        enabled: true,
+      });
+
+      expect(SentryCore.metrics.count).toHaveBeenCalledWith('messaging.bullmq.jobs.completed', 1, {
+        unit: undefined,
+        attributes: {
+          'queue.name': 'emails',
+          priority: 5,
+          enabled: true,
+        },
+      });
+    });
+
+    it('returns empty object when all attributes are arrays', () => {
+      const telemetry = new BullMQTelemetry({ enableMetrics: true });
+      const counter = telemetry.meter!.createCounter('bullmq.jobs.completed');
+
+      counter.add(1, { tags: ['a', 'b'] });
+
+      expect(SentryCore.metrics.count).toHaveBeenCalledWith('messaging.bullmq.jobs.completed', 1, {
+        unit: undefined,
+        attributes: {},
+      });
+    });
+  });
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0bb67d140bf1..7d319b2ae320 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -694,6 +694,9 @@ importers:
       body-parser:
         specifier: ^2.3.0
         version: 2.3.0(supports-color@10.0.0)
+      bullmq:
+        specifier: ^5.79.1
+        version: 5.81.5(redis@5.12.1(@opentelemetry/api@1.9.0))(supports-color@10.0.0)
       consola:
         specifier: ^3.2.3
         version: 3.4.2
@@ -738,7 +741,7 @@ importers:
         version: 5.10.1(supports-color@10.0.0)
       ioredis-5:
         specifier: npm:ioredis@^5.11.0
-        version: ioredis@5.11.0(supports-color@10.0.0)
+        version: ioredis@5.11.1(supports-color@10.0.0)
       ioredis-6:
         specifier: npm:ioredis@^6.0.0
         version: ioredis@6.0.0(supports-color@10.0.0)
@@ -1718,13 +1721,13 @@ importers:
         version: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
       nitro:
         specifier: ^3.0.260415-beta
-        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
       srvx:
         specifier: ^0.11.22
         version: 0.11.22
       unstorage:
         specifier: ^2.0.0-alpha.7
-        version: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@1.5.1)
+        version: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@1.5.1)
 
   packages/node:
     dependencies:
@@ -1814,7 +1817,7 @@ importers:
         version: 4.20260519.1
       '@nuxt/nitro-server':
         specifier: ^3.21.11
-        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.0(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
       '@nuxt/schema':
         specifier: ^3.21.11
         version: 3.21.11
@@ -1829,7 +1832,7 @@ importers:
         version: 1.15.11
       nitro:
         specifier: ^3.0.260311-beta
-        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
       nitropack:
         specifier: ^2.13.4
         version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
@@ -1838,10 +1841,10 @@ importers:
         version: 3.25.1
       nuxt:
         specifier: 3.21.11
-        version: 3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c)
+        version: 3.21.11(955174819940f662d7743f134f0d89c6)
       unstorage:
         specifier: ^1.17.5
-        version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))
+        version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite:
         specifier: ^8.3.1
         version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
@@ -2309,7 +2312,7 @@ importers:
         version: 1.0.0(solid-js@1.9.11)
       '@solidjs/start':
         specifier: ^1.3.2
-        version: 1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
       '@solidjs/testing-library':
         specifier: 0.8.5
         version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
@@ -2333,7 +2336,7 @@ importers:
         version: 1.9.11
       vinxi:
         specifier: ^0.5.11
-        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
       vite:
         specifier: ^8.3.1
         version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
@@ -6118,6 +6121,36 @@ packages:
   '@mongodb-js/saslprep@1.4.6':
     resolution: {integrity: sha512-y+x3H1xBZd38n10NZF/rEBlvDOOMQ6LKUTHqr8R9VkJ+mmQOYtJFxIlkkK8fZrtOiL6VixbOBWMbZGBdal3Z1g==}
 
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    resolution: {integrity: sha512-LCkGo6JDfaBhgST7UpPWgNgLINpcpabaHfyz5OBx75nUYxBsaEPxjnyNjWpeb/xBup/682QnBfRBy2/LvPutZQ==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    resolution: {integrity: sha512-zExlW9zUJKZH/tOtVMttwjKa4Xm/3KcNjnE3dPN92uCktwavMxpgCA3MoJK/DOnTWsQgo224OaST27/mPNAf+w==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    resolution: {integrity: sha512-dgX0P/9wGPJeHFBG+ZmhgE6bmtMt7NP5CRBGyyktpopdk/mW4POnrpQsSLtKI1dwpc+pPLuXHDh6vvskyQE/sw==}
+    cpu: [arm64]
+    os: [linux]
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    resolution: {integrity: sha512-Tg3yX65f5GbtXLkrYEHE5oibZG9epyYWas7FogTTEJeDEF9JlXJzKgXaNhT3UXlTOeA+AfZpYZYZ0uPj7Cfquw==}
+    cpu: [arm]
+    os: [linux]
+
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+    resolution: {integrity: sha512-8TNXMEjJc3QEy7R/x1INhgiU+XakDAFUzBhaz7+Rbrs8NH5UQeHQxxmzsSBJGyV6I1jW79undiQm8tOI+D+8FQ==}
+    cpu: [x64]
+    os: [linux]
+
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
+    resolution: {integrity: sha512-CmCXPQrkbwExx3j946/PtHWHbYJiCRBRDl4BlkRQcJB/YOwQxJRTpoo7aTsortjgoJ1x7opzTSxn7C+ASSLVjQ==}
+    cpu: [x64]
+    os: [win32]
+
   '@mswjs/interceptors@0.41.9':
     resolution: {integrity: sha512-VVPPgHyQ6ShqnrmDWuxjmUIsO9gWyOZFmuOfLd9LfBGQJwZfy0gvv9pbHSJuoFNIYC7ZDX9aoFwowjcdSC4E8w==}
     engines: {node: '>=18'}
@@ -10355,6 +10388,15 @@ packages:
   builtins@5.0.1:
     resolution: {integrity: sha512-qwVpFEHNfhYJIzNRBvd2C1kyo6jz3ZSMPyyuR47OPdiKWlbYnZNyDWuyR175qDnAJLiCo5fBBqPb3RiXgWlkOQ==}
 
+  bullmq@5.81.5:
+    resolution: {integrity: sha512-pW7pFc/X+9AEIx91TWTdIpZ1icfbJnA0unsyzD7VICjCUw8a3qedSjej5dxxn6LjfM1kr2jvalOCGbCmoA5Kxg==}
+    engines: {node: '>=12.22.0'}
+    peerDependencies:
+      redis: '>=5.0.0'
+    peerDependenciesMeta:
+      redis:
+        optional: true
+
   bun-types@1.2.9:
     resolution: {integrity: sha512-dk/kOEfQbajENN/D6FyiSgOKEuUi9PWfqKQJEgwKrCMWbjS/S6tEXp178mWvWAcUSYm9ArDlWHZKO3T/4cLXiw==}
 
@@ -13172,8 +13214,8 @@ packages:
     resolution: {integrity: sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==}
     engines: {node: '>=12.22.0'}
 
-  ioredis@5.11.0:
-    resolution: {integrity: sha512-EZBErytyVovD8f6pDfG3Kb37N6Y3lmDA9NNj+4+IP13CzzHGeX+OyeRM2Um13khRzoBSzzL+5lVnCX8V2RLeMg==}
+  ioredis@5.11.1:
+    resolution: {integrity: sha512-ehuGcf94bQXhfagULNXrJdfnWO38v070jxSx/qE87Kjzmu2fU7ro5EFAb+OPituLqgfyuQaym5DlrNydW2sJ9A==}
     engines: {node: '>=12.22.0'}
 
   ioredis@6.0.0:
@@ -14716,6 +14758,13 @@ packages:
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
+  msgpackr-extract@3.0.4:
+    resolution: {integrity: sha512-4kmO/MdyUIkLIvTPr8VHLil4AtoKIoniWPIEk5+CDy0xnWC84azhSFmuJ7PxZdsYtiP5kEeQsORAVIeMgxT+Hw==}
+    hasBin: true
+
+  msgpackr@2.0.5:
+    resolution: {integrity: sha512-cef05H/dSYpLpqp3sj/qyZh5vhUYCalnaLO7j1yOmpsR0y/XwLVtK7r5gn+U/F7CTEfMowcGhlUQJDLcLf7jcA==}
+
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
@@ -14925,6 +14974,9 @@ packages:
     resolution: {integrity: sha512-6u9UwL0HlAl21+agMN3YAMXcKByMqwGx+pq+P76vii5f7hTPtKDp08/H9py6DY+cfDw7kQNTGEj/rly3IgbNQA==}
     engines: {node: '>=10'}
 
+  node-abort-controller@3.1.1:
+    resolution: {integrity: sha512-AGK2yQKIjRuqnc6VkX2Xj5d+QW8xZ87pa1UK6yA6ouUyuxfHuMP6umE5QK7UmTeOAymo+Zx1Fxiuw9rVx8taHQ==}
+
   node-addon-api@3.2.1:
     resolution: {integrity: sha512-mmcei9JghVNDYydghQmeDX8KoAm0FAiYyIcUt/N4nhyAipB17pllZQDOJD2fotxABnt4Mdz+dKTO7eftLg4d0A==}
 
@@ -14952,6 +15004,10 @@ packages:
     resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
 
+  node-gyp-build-optional-packages@5.2.2:
+    resolution: {integrity: sha512-s+w+rBWnpTMwSFbaE0UXsRlg7hU4FjekKU4eyAih5T8nJuNZT1nNsskXpxmeqSK9UzkBl6UgRlnKc8hz8IEqOw==}
+    hasBin: true
+
   node-gyp-build@4.6.0:
     resolution: {integrity: sha512-NTZVKn9IylLwUzaKjkas1e4u2DLNcV4rdYagA4PWdPwW87Bi7z+BznyKSRwS/761tV/lzCGXplWsiaMjLqP2zQ==}
     hasBin: true
@@ -24216,6 +24272,24 @@ snapshots:
     dependencies:
       sparse-bitfield: 3.0.3
 
+  '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-darwin-x64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-arm@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-linux-x64@3.0.4':
+    optional: true
+
+  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.4':
+    optional: true
+
   '@mswjs/interceptors@0.41.9':
     dependencies:
       '@open-draft/deferred-promise': 2.2.0
@@ -24460,7 +24534,7 @@ snapshots:
       pkg-types: 2.3.1
       semver: 7.8.5
 
-  '@nuxt/devtools@3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@nuxt/devtools@3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
       '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
       '@nuxt/devtools-wizard': 3.4.1
@@ -24490,7 +24564,7 @@ snapshots:
       sirv: 3.0.2
       structured-clone-es: 2.0.1
       tinyglobby: 0.2.17
-      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))
+      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
       vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
       vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
@@ -24656,7 +24730,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.0(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -24674,7 +24748,7 @@ snapshots:
       klona: 2.0.6
       mocked-exports: 0.1.1
       nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      nuxt: 3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c)
+      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -24682,7 +24756,7 @@ snapshots:
       std-env: 4.3.0
       ufo: 1.6.4
       unctx: 2.5.0
-      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))
+      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vue: 3.5.44(typescript@7.0.2)
       vue-bundle-renderer: 2.3.2
       vue-devtools-stub: 0.1.0
@@ -24730,7 +24804,7 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.0(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -24748,7 +24822,7 @@ snapshots:
       klona: 2.0.6
       mocked-exports: 0.1.1
       nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      nuxt: 3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c)
+      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -24756,7 +24830,7 @@ snapshots:
       std-env: 4.3.0
       ufo: 1.6.4
       unctx: 2.5.0
-      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))
+      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vue: 3.5.44(typescript@7.0.2)
       vue-bundle-renderer: 2.3.2
       vue-devtools-stub: 0.1.0
@@ -24825,7 +24899,7 @@ snapshots:
       rc9: 3.1.0
       std-env: 4.3.0
 
-  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
+  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
     dependencies:
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
@@ -24845,7 +24919,7 @@ snapshots:
       magic-string: 0.30.21
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c)
+      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
       nypm: 0.6.9
       ohash: 2.0.11
       pathe: 2.0.3
@@ -26633,11 +26707,11 @@ snapshots:
     dependencies:
       solid-js: 1.9.11
 
-  '@solidjs/start@1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@solidjs/start@1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
-      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
       cookie-es: 2.0.1
       defu: 6.1.7
       error-stack-parser: 2.1.4
@@ -26649,7 +26723,7 @@ snapshots:
       source-map-js: 1.2.2
       terracotta: 1.0.5(solid-js@1.9.11)
       tinyglobby: 0.2.17
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
       vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
@@ -27590,7 +27664,7 @@ snapshots:
       untun: 0.1.3
       uqr: 0.1.3
 
-  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
       '@babel/parser': 7.29.9
       acorn: 8.18.0
@@ -27601,18 +27675,18 @@ snapshots:
       magicast: 0.2.11
       recast: 0.23.11
       tslib: 2.8.1
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
       acorn: 8.18.0
       acorn-loose: 8.4.0
       acorn-typescript: 1.4.13(acorn@8.18.0)
       astring: 1.9.0
       magicast: 0.2.11
       recast: 0.23.11
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
 
   '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
@@ -29082,6 +29156,19 @@ snapshots:
     dependencies:
       semver: 7.8.5
 
+  bullmq@5.81.5(redis@5.12.1(@opentelemetry/api@1.9.0))(supports-color@10.0.0):
+    dependencies:
+      cron-parser: 4.9.0
+      ioredis: 5.11.1(supports-color@10.0.0)
+      msgpackr: 2.0.5
+      node-abort-controller: 3.1.1
+      semver: 7.8.5
+      tslib: 2.8.1
+    optionalDependencies:
+      redis: 5.12.1(@opentelemetry/api@1.9.0)
+    transitivePeerDependencies:
+      - supports-color
+
   bun-types@1.2.9:
     dependencies:
       '@types/node': 20.19.43
@@ -32557,7 +32644,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  ioredis@5.11.0(supports-color@10.0.0):
+  ioredis@5.11.1(supports-color@10.0.0):
     dependencies:
       '@ioredis/commands': 1.10.0
       cluster-key-slot: 1.1.1
@@ -34350,6 +34437,22 @@ snapshots:
 
   ms@2.1.3: {}
 
+  msgpackr-extract@3.0.4:
+    dependencies:
+      node-gyp-build-optional-packages: 5.2.2
+    optionalDependencies:
+      '@msgpackr-extract/msgpackr-extract-darwin-arm64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-darwin-x64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-arm': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-arm64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-linux-x64': 3.0.4
+      '@msgpackr-extract/msgpackr-extract-win32-x64': 3.0.4
+    optional: true
+
+  msgpackr@2.0.5:
+    optionalDependencies:
+      msgpackr-extract: 3.0.4
+
   muggle-string@0.4.1: {}
 
   multer@2.1.1:
@@ -34513,7 +34616,7 @@ snapshots:
       node-gyp-build: 4.6.0
     optional: true
 
-  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -34528,7 +34631,7 @@ snapshots:
       rolldown: 1.2.11
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
-      unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
+      unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
     optionalDependencies:
       dotenv: 17.4.2
       giget: 3.3.1
@@ -34566,7 +34669,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -34581,7 +34684,7 @@ snapshots:
       rolldown: 1.2.11
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
-      unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
+      unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
     optionalDependencies:
       dotenv: 17.4.2
       giget: 3.3.1
@@ -34965,6 +35068,8 @@ snapshots:
     dependencies:
       semver: 7.8.5
 
+  node-abort-controller@3.1.1: {}
+
   node-addon-api@3.2.1:
     optional: true
 
@@ -34982,6 +35087,11 @@ snapshots:
 
   node-forge@1.4.0: {}
 
+  node-gyp-build-optional-packages@5.2.2:
+    dependencies:
+      detect-libc: 2.1.2
+    optional: true
+
   node-gyp-build@4.6.0: {}
 
   node-gyp@9.3.0(supports-color@10.0.0):
@@ -35147,16 +35257,16 @@ snapshots:
 
   nuxi@3.25.1: {}
 
-  nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c):
+  nuxt@3.21.11(955174819940f662d7743f134f0d89c6):
     dependencies:
       '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
       '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)
-      '@nuxt/devtools': 3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@nuxt/devtools': 3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
-      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.0(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
       '@nuxt/schema': 3.21.11
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))
-      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(0dc0d2df1a20b551c0e4dd687b74c07c))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
+      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       c12: 3.3.4(magicast@0.5.4)
@@ -39486,7 +39596,7 @@ snapshots:
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
       ioredis: 5.10.1(supports-color@10.0.0)
 
-  unstorage@1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0)):
+  unstorage@1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0)):
     dependencies:
       anymatch: 3.1.3
       chokidar: 5.0.0
@@ -39499,7 +39609,7 @@ snapshots:
     optionalDependencies:
       '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
-      ioredis: 5.11.0(supports-color@10.0.0)
+      ioredis: 5.11.1(supports-color@10.0.0)
 
   unstorage@2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@3.7.4)(ofetch@1.5.1):
     optionalDependencies:
@@ -39511,22 +39621,22 @@ snapshots:
       mongodb: 3.7.4
       ofetch: 1.5.1
 
-  unstorage@2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@1.5.1):
+  unstorage@2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@1.5.1):
     optionalDependencies:
       '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       chokidar: 5.0.0
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
-      ioredis: 5.11.0(supports-color@10.0.0)
+      ioredis: 5.11.1(supports-color@10.0.0)
       lru-cache: 11.4.0
       mongodb: 7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7)
       ofetch: 1.5.1
 
-  unstorage@2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3):
+  unstorage@2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3):
     optionalDependencies:
       '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       chokidar: 5.0.0
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
-      ioredis: 5.11.0(supports-color@10.0.0)
+      ioredis: 5.11.1(supports-color@10.0.0)
       lru-cache: 11.4.0
       mongodb: 7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7)
       ofetch: 2.0.0-alpha.3
@@ -39647,7 +39757,7 @@ snapshots:
       '@types/unist': 3.0.0
       vfile-message: 4.0.3
 
-  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.0(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0):
+  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
@@ -39680,7 +39790,7 @@ snapshots:
       ufo: 1.6.4
       unctx: 2.5.0
       unenv: 1.10.0
-      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.0(supports-color@10.0.0))
+      unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
       zod: 4.6.7
     transitivePeerDependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 4a08da54755f..f0da0985135e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -108,6 +108,7 @@ allowBuilds:
   core-js-pure: false
   esbuild: true
   mongodb-memory-server-global: true
+  msgpackr-extract: true
   nice-napi: true
   nx: true
   prisma: true

From fa13bed62c7f40913f0cdb412a1d36d6bd0c79af Mon Sep 17 00:00:00 2001
From: Lazizbek Ergashev <lazerg2@gmail.com>
Date: Thu, 29 Oct 2026 12:47:30 +0500
Subject: [PATCH 007/169] ci: Drop dead matrix reference in Deno unit tests job
 (#25852)

**Why:** The Deno unit tests job has no `strategy.matrix`, so
`matrix.deno-version` is always empty and the step always falls back to
`v2.8.3`. This pins the version directly, the same way the Deno
integration tests job already does. The orchestrion-mysql TODO from the
issue is already gone on `develop`.

Closes #23898

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f6d386c40b43..8766de594d0c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -553,7 +553,7 @@ jobs:
       - name: Set up Deno
         uses: denoland/setup-deno@v2.0.5
         with:
-          deno-version: ${{ matrix.deno-version || 'v2.8.3' }}
+          deno-version: 'v2.8.3'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
       - name: Run tests

From eaa99976c5262da2f243162dc68c703e16daa0d8 Mon Sep 17 00:00:00 2001
From: "javascript-sdk-gitflow[bot]"
 <255134079+javascript-sdk-gitflow[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 08:51:57 +0100
Subject: [PATCH 008/169] chore: Add external contributor to CHANGELOG.md
 (#25862)

This PR adds the external contributor to the CHANGELOG.md file, so that
they are credited for their contribution. See #25852

Co-authored-by: nicohrubec <29484629+nicohrubec@users.noreply.github.com>
---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a0d0150cd82..964bb5cd0f8b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,8 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+Work in this release was contributed by @lazerg. Thank you for your contribution!
+
 ## 11.10.0
 
 ### Important Changes

From fddeafcbe234c79d2bc53c4a416f4c66a55aba0b Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Thu, 29 Oct 2026 09:13:04 +0100
Subject: [PATCH 009/169] test(e2e): Remove node-flue-send-to-sentry (#25839)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** `node-flue` already runs the same Flue turns against real
OpenRouter and checks a superset of what this app checks (6 tests vs 4,
plus dev mode and the same `(latest)` variant), just through the event
proxy. Whether the spans land in Sentry isn't something we need to test
for each AI integration, so this app only adds CI time and a slow, flaky
poll against the Sentry API.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../node-flue-send-to-sentry/.gitignore       |   7 --
 .../node-flue-send-to-sentry/flue.config.ts   |   5 -
 .../node-flue-send-to-sentry/package.json     |  49 --------
 .../playwright.config.ts                      |  24 ----
 .../pnpm-workspace.yaml                       |   6 -
 .../node-flue-send-to-sentry/sentry-init.ts   |  11 --
 .../src/agents/hello.ts                       |  50 ---------
 .../node-flue-send-to-sentry/src/app.ts       |  10 --
 .../tests/dataloader.test.ts                  |  25 -----
 .../tests/errors.test.ts                      |  36 ------
 .../tests/flue.test.ts                        | 105 ------------------
 .../node-flue-send-to-sentry/tests/utils.ts   |  60 ----------
 .../node-flue-send-to-sentry/tsconfig.json    |  14 ---
 .../node-flue-send-to-sentry/vite.config.ts   |   7 --
 14 files changed, 409 deletions(-)
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/.gitignore
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/flue.config.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/package.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/playwright.config.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/pnpm-workspace.yaml
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/sentry-init.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/agents/hello.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/app.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/dataloader.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/errors.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/flue.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/utils.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tsconfig.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/vite.config.ts

diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/.gitignore b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/.gitignore
deleted file mode 100644
index 2685f6ec088a..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/.gitignore
+++ /dev/null
@@ -1,7 +0,0 @@
-node_modules
-dist
-.flue
-*.tsbuildinfo
-results.junit.xml
-test-results
-playwright-report
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/flue.config.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/flue.config.ts
deleted file mode 100644
index a31c8523a9a7..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/flue.config.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { defineConfig } from '@flue/runtime/config';
-
-export default defineConfig({
-  target: 'node',
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/package.json
deleted file mode 100644
index 409652d5c19e..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/package.json
+++ /dev/null
@@ -1,49 +0,0 @@
-{
-  "name": "node-flue-send-to-sentry",
-  "description": "The Flue integration as a user runs it: a built Flue agent server, real tool-calling turns through OpenRouter, and the gen_ai spans read back from a real Sentry project",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "build": "vite build",
-    "start": "NODE_OPTIONS='--import=@sentry/node/import' PORT=3030 node dist/server.mjs",
-    "test": "OPENROUTER_API_KEY=$E2E_OPENROUTER_API_KEY playwright test",
-    "clean": "npx rimraf node_modules dist pnpm-lock.yaml",
-    "test:build": "pnpm install && pnpm build",
-    "test:build-latest": "pnpm install && pnpm add @flue/runtime@latest @flue/vite@latest @flue/cli@latest && pnpm build",
-    "test:assert": "pnpm test"
-  },
-  "dependencies": {
-    "@flue/runtime": "2.0.5",
-    "@sentry/node": "file:../../packed/sentry-node-packed.tgz",
-    "dataloader": "^2.2.3",
-    "hono": "^4.7.0",
-    "valibot": "^1.5.0"
-  },
-  "devDependencies": {
-    "@flue/cli": "2.0.5",
-    "@flue/vite": "2.0.5",
-    "@playwright/test": "1.64.1",
-    "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@sentry/conventions": "0.27.0",
-    "@types/node": "24.x",
-    "sentry": "~0.44.1",
-    "typescript": "~5.9.0",
-    "vite": "^8.0.14"
-  },
-  "engines": {
-    "node": "24.x"
-  },
-  "volta": {
-    "extends": "../../package.json"
-  },
-  "sentryTest": {
-    "optional": true,
-    "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-latest",
-        "label": "node-flue-send-to-sentry (latest)"
-      }
-    ]
-  }
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/playwright.config.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/playwright.config.ts
deleted file mode 100644
index 161e4b1c5d72..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/playwright.config.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { defineConfig } from '@playwright/test';
-
-const port = 3030;
-
-export default defineConfig({
-  testDir: './tests',
-  // A model turn, then Sentry polls of up to 180s each. Spans become queryable within the first one.
-  timeout: 400_000,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: 0,
-  // Every test spends most of its time polling Sentry, so run them all at once.
-  workers: '100%',
-  reporter: process.env.CI ? [['list'], ['junit', { outputFile: 'results.junit.xml' }]] : 'list',
-  use: {
-    baseURL: `http://localhost:${port}`,
-  },
-  webServer: {
-    command: 'pnpm start',
-    port,
-    stdout: 'pipe',
-    stderr: 'pipe',
-  },
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/pnpm-workspace.yaml
deleted file mode 100644
index 0e523a16e6f0..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/pnpm-workspace.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-allowBuilds:
-  '@google/genai': false
-  core-js-pure: false
-  esbuild: true
-  protobufjs: false
-minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/sentry-init.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/sentry-init.ts
deleted file mode 100644
index 30f0b4c8cd49..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/sentry-init.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-import { instrument } from '@flue/runtime';
-import * as Sentry from '@sentry/node';
-
-// No tunnel: the spans go to the Sentry project behind `E2E_TEST_DSN`, where the tests read them back.
-Sentry.init({
-  environment: 'qa', // dynamic sampling bias to keep transactions
-  dsn: process.env.E2E_TEST_DSN,
-  tracesSampleRate: 1.0,
-});
-
-instrument(Sentry.createFlueInstrumentation());
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/agents/hello.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/agents/hello.ts
deleted file mode 100644
index 9d218454a86e..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/agents/hello.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-'use agent';
-import { useModel, useTool } from '@flue/runtime';
-import * as Sentry from '@sentry/node';
-import * as v from 'valibot';
-import DataLoader from 'dataloader';
-
-export function Hello() {
-  useModel('openrouter/anthropic/claude-haiku-4.5');
-
-  useTool({
-    name: 'get_weather',
-    description: 'Get the current weather for a city.',
-    input: v.object({ city: v.string() }),
-    // Wrapped in a manual span: Flue runs the tool while the SDK's `execute_tool` span is active,
-    // so this should nest directly under it rather than landing beside it.
-    run: ({ data }) =>
-      Sentry.startSpan(
-        { name: 'resolve-weather', attributes: { 'weather.source': 'static-table', 'weather.city': data.city } },
-        () => {
-          return `It is 21 degrees and sunny in ${data.city}.`;
-        },
-      ),
-  });
-
-  // Called from inside a tool on purpose: the dataloader span then lands under `execute_tool` in
-  // the agent's trace, which is what "captured alongside the AI spans" has to mean.
-  useTool({
-    name: 'count_items',
-    description: 'Count items by loading them. Call this when the user asks to count items.',
-    input: v.object({}),
-    // Constructed per execution, like node-eve does: a module-level loader caches its keys, so a
-    // second call would skip the batch function and emit no span.
-    run: async () => {
-      const loader = new DataLoader<number, number>(async keys => keys.map(key => key * 2));
-      const doubled = await Promise.all([loader.load(1), loader.load(2), loader.load(3)]);
-      return `Loaded ${doubled.length} items: ${doubled.join(', ')}.`;
-    },
-  });
-
-  useTool({
-    name: 'fail_now',
-    description: 'Always throws an error. Call this when the user asks to trigger a failure.',
-    input: v.object({}),
-    run: () => {
-      throw new Error('Intentional flue tool failure');
-    },
-  });
-
-  return 'You are a helpful assistant. Use get_weather when asked about weather, count_items when asked to count items, and fail_now when asked to fail.';
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/app.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/app.ts
deleted file mode 100644
index b54a3357e4ca..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/src/app.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import '../sentry-init.ts';
-import { createAgentRouter } from '@flue/runtime/routing';
-import { Hono } from 'hono';
-import { Hello } from './agents/hello.ts';
-
-const app = new Hono();
-
-app.route('/agents/hello', createAgentRouter(Hello));
-
-export default app;
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/dataloader.test.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/dataloader.test.ts
deleted file mode 100644
index ba6a62fc8f7d..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/dataloader.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { expect, test } from '@playwright/test';
-import { SEARCH_ORIGIN } from '@sentry/conventions/attributes/search';
-import { CACHE_GET } from '@sentry/conventions/op';
-import { EVENT_POLLING_OPTIONS, fetchSpanAttributes } from '@sentry-internal/test-utils/cli';
-import { newInstanceId, runAgentTurn, waitForConversationTrace } from './utils';
-
-// Orchestrion only hooks `dataloader` with the loader preloaded (`--import` in the start script).
-test('sends orchestrion-instrumented dataloader spans in the same trace as the AI spans', async ({ baseURL }) => {
-  const conversationId = await runAgentTurn(
-    baseURL!,
-    newInstanceId('dataloader'),
-    'Please call count_items to count the items.',
-  );
-
-  const { traceId, spans } = await waitForConversationTrace(
-    conversationId,
-    spans =>
-      spans.some(span => span.description === 'execute_tool count_items') && spans.some(span => span.op === CACHE_GET),
-  );
-
-  const dataloaderSpan = spans.find(span => span.op === CACHE_GET);
-  await expect
-    .poll(() => fetchSpanAttributes(traceId, dataloaderSpan!.event_id!), EVENT_POLLING_OPTIONS)
-    .toMatchObject({ [SEARCH_ORIGIN]: 'auto.db.dataloader' });
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/errors.test.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/errors.test.ts
deleted file mode 100644
index aa4666c1a3bf..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/errors.test.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import { expect, test } from '@playwright/test';
-import { SEARCH_GEN_AI__TOOL__NAME, SEARCH_SPAN__STATUS } from '@sentry/conventions/attributes/search';
-import {
-  EVENT_POLLING_OPTIONS,
-  fetchEvent,
-  fetchSpanAttributes,
-  findErrorInTrace,
-} from '@sentry-internal/test-utils/cli';
-import type { TraceItem } from '@sentry-internal/test-utils/cli';
-import { newInstanceId, runAgentTurn, waitForConversationTrace } from './utils';
-
-test('sends an error thrown inside a Flue tool and marks its span errored', async ({ baseURL }) => {
-  const conversationId = await runAgentTurn(
-    baseURL!,
-    newInstanceId('failure'),
-    'Please call fail_now to trigger a failure.',
-  );
-
-  const { traceId, spans } = await waitForConversationTrace(conversationId, spans =>
-    spans.some(span => span.description === 'execute_tool fail_now'),
-  );
-
-  let error: TraceItem | undefined;
-  await expect.poll(() => (error = findErrorInTrace(traceId)), EVENT_POLLING_OPTIONS).toBeDefined();
-  await expect
-    .poll(
-      () => fetchEvent(error!.event_id!)?.entries.find(entry => entry.type === 'exception')?.data.values?.[0],
-      EVENT_POLLING_OPTIONS,
-    )
-    .toMatchObject({ value: 'Intentional flue tool failure', mechanism: { type: 'auto.ai.flue' } });
-
-  const executeTool = spans.find(span => span.description === 'execute_tool fail_now');
-  await expect
-    .poll(() => fetchSpanAttributes(traceId, executeTool!.event_id!), EVENT_POLLING_OPTIONS)
-    .toMatchObject({ [SEARCH_GEN_AI__TOOL__NAME]: 'fail_now', [SEARCH_SPAN__STATUS]: 'error' });
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/flue.test.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/flue.test.ts
deleted file mode 100644
index 6610ad009546..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/flue.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import { expect, test } from '@playwright/test';
-import {
-  SEARCH_GEN_AI__AGENT__NAME,
-  SEARCH_GEN_AI__CONVERSATION__ID,
-  SEARCH_GEN_AI__COST__TOTAL_TOKENS,
-  SEARCH_GEN_AI__INPUT__MESSAGES,
-  SEARCH_GEN_AI__OPERATION__NAME,
-  SEARCH_GEN_AI__PROVIDER__NAME,
-  SEARCH_GEN_AI__TOOL__CALL__ARGUMENTS,
-  SEARCH_GEN_AI__TOOL__CALL__RESULT,
-  SEARCH_GEN_AI__TOOL__NAME,
-  SEARCH_GEN_AI__USAGE__INPUT_TOKENS,
-  SEARCH_GEN_AI__USAGE__OUTPUT_TOKENS,
-  SEARCH_ORIGIN,
-  SEARCH_SPAN__STATUS,
-} from '@sentry/conventions/attributes/search';
-import {
-  GEN_AI_CHAT,
-  GEN_AI_EXECUTE_TOOL,
-  GEN_AI_INVOKE_AGENT,
-  HTTP_CLIENT,
-  HTTP_SERVER,
-} from '@sentry/conventions/op';
-import type { TraceItem } from '@sentry-internal/test-utils/cli';
-import { EVENT_POLLING_OPTIONS, fetchSpanAttributes } from '@sentry-internal/test-utils/cli';
-import { newInstanceId, runAgentTurn, waitForConversationTrace } from './utils';
-
-test('sends the request / invoke_agent / chat / execute_tool hierarchy of a Flue turn', async ({ baseURL }) => {
-  const conversationId = await runAgentTurn(baseURL!, newInstanceId('weather'), 'What is the weather in Paris?');
-
-  // Spans land at different times, so wait for the relationships checked below, not just the ops.
-  const isProviderCall = (span: TraceItem, spans: TraceItem[]) =>
-    span.op === HTTP_CLIENT && spans.some(chat => chat.op === GEN_AI_CHAT && chat.event_id === span.parent_span_id);
-  const { traceId, spans } = await waitForConversationTrace(
-    conversationId,
-    spans =>
-      [HTTP_SERVER, GEN_AI_INVOKE_AGENT, GEN_AI_EXECUTE_TOOL].every(op => spans.some(span => span.op === op)) &&
-      spans.some(span => isProviderCall(span, spans)),
-  );
-
-  const request = spans.find(span => span.op === HTTP_SERVER);
-  const agents = spans.filter(span => span.op === GEN_AI_INVOKE_AGENT);
-  const invokeAgent = agents[0];
-  const chats = spans.filter(span => span.op === GEN_AI_CHAT);
-  const executeTool = spans.find(span => span.description === 'execute_tool get_weather');
-
-  // More than one means other conversations leaked into this trace (withastro/flue#813).
-  expect(agents).toHaveLength(1);
-  expect(invokeAgent?.parent_span_id).toBe(request?.event_id);
-  // A chat span anywhere else would be a provider SDK reporting the same call a second time.
-  expect(chats.map(chat => chat.parent_span_id)).toEqual(chats.map(() => invokeAgent?.event_id));
-  expect(executeTool?.parent_span_id).toBe(invokeAgent?.event_id);
-
-  await expect
-    .poll(() => fetchSpanAttributes(traceId, invokeAgent!.event_id!), EVENT_POLLING_OPTIONS)
-    .toMatchObject({
-      [SEARCH_ORIGIN]: 'auto.ai.flue',
-      [SEARCH_GEN_AI__OPERATION__NAME]: 'invoke_agent',
-      [SEARCH_GEN_AI__AGENT__NAME]: 'Hello',
-      [SEARCH_GEN_AI__CONVERSATION__ID]: conversationId,
-    });
-
-  let chatAttributes: Record<string, unknown> | undefined;
-  await expect
-    .poll(() => (chatAttributes = fetchSpanAttributes(traceId, chats[0]!.event_id!)), EVENT_POLLING_OPTIONS)
-    .toMatchObject({
-      [SEARCH_ORIGIN]: 'auto.ai.flue',
-      [SEARCH_SPAN__STATUS]: 'ok',
-      [SEARCH_GEN_AI__PROVIDER__NAME]: 'openrouter',
-      [SEARCH_GEN_AI__INPUT__MESSAGES]: expect.stringContaining('What is the weather in Paris?'),
-    });
-  // The trace-items API returns integer attributes as strings.
-  expect(Number(chatAttributes![SEARCH_GEN_AI__USAGE__INPUT_TOKENS])).toBeGreaterThan(0);
-  expect(Number(chatAttributes![SEARCH_GEN_AI__USAGE__OUTPUT_TOKENS])).toBeGreaterThan(0);
-  // Flue computes cost itself; no provider SDK reports it.
-  expect(chatAttributes![SEARCH_GEN_AI__COST__TOTAL_TOKENS]).toBeGreaterThan(0);
-
-  await expect
-    .poll(() => fetchSpanAttributes(traceId, executeTool!.event_id!), EVENT_POLLING_OPTIONS)
-    .toMatchObject({
-      [SEARCH_ORIGIN]: 'auto.ai.flue',
-      [SEARCH_GEN_AI__TOOL__NAME]: 'get_weather',
-      // The model picks the argument (`Paris`, `Paris, France`, ...).
-      [SEARCH_GEN_AI__TOOL__CALL__ARGUMENTS]: expect.stringContaining('Paris'),
-      [SEARCH_GEN_AI__TOOL__CALL__RESULT]: expect.stringMatching(/^It is 21 degrees and sunny in Paris/),
-    });
-});
-
-test('nests a manual span raised inside a tool under that tool span', async ({ baseURL }) => {
-  const conversationId = await runAgentTurn(baseURL!, newInstanceId('manual-span'), 'What is the weather in Berlin?');
-
-  const { traceId, spans } = await waitForConversationTrace(conversationId, spans =>
-    spans.some(
-      span => span.description === 'resolve-weather' && spans.some(parent => parent.event_id === span.parent_span_id),
-    ),
-  );
-
-  const manualSpan = spans.find(span => span.description === 'resolve-weather');
-  const parent = spans.find(span => span.event_id === manualSpan?.parent_span_id);
-  expect(parent?.description).toBe('execute_tool get_weather');
-
-  await expect
-    .poll(() => fetchSpanAttributes(traceId, manualSpan!.event_id!), EVENT_POLLING_OPTIONS)
-    .toMatchObject({ 'weather.source': 'static-table', 'weather.city': expect.stringContaining('Berlin') });
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/utils.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/utils.ts
deleted file mode 100644
index 7b3f2814266f..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tests/utils.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { expect } from '@playwright/test';
-import { SEARCH_GEN_AI__CONVERSATION__ID } from '@sentry/conventions/attributes/search';
-import type { TraceItem } from '@sentry-internal/test-utils/cli';
-import {
-  EVENT_POLLING_OPTIONS,
-  fetchTrace,
-  findTraceIdOfSpan,
-  flattenTrace,
-  traceTarget,
-} from '@sentry-internal/test-utils/cli';
-
-/** A fresh instance id, so an earlier settlement cannot end the wait early. */
-export function newInstanceId(prefix: string): string {
-  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-}
-
-/** Send one message and wait for the turn to settle. Returns the conversation id. */
-export async function runAgentTurn(baseURL: string, instanceId: string, message: string): Promise<string> {
-  const url = `${baseURL}/agents/hello/${instanceId}`;
-
-  const res = await fetch(url, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ kind: 'user', body: message }),
-  });
-  const body = await res.text();
-  expect(res.status, body).toBe(202);
-
-  const deadline = Date.now() + 90_000;
-  while (Date.now() < deadline) {
-    const conversation = (await (await fetch(url)).json()) as { conversationId: string; settlements?: unknown[] };
-    if (conversation.settlements?.length) {
-      return conversation.conversationId;
-    }
-    await new Promise(resolve => setTimeout(resolve, 1_000));
-  }
-
-  throw new Error(`Flue turn for "${instanceId}" did not settle within 90s`);
-}
-
-/** The router answers `202` before the turn runs, so the trace is found by conversation id. */
-export async function waitForConversationTrace(
-  conversationId: string,
-  isComplete: (spans: TraceItem[]) => boolean,
-): Promise<{ traceId: string; spans: TraceItem[] }> {
-  let traceId: string | undefined;
-  await expect
-    .poll(
-      () => (traceId = findTraceIdOfSpan(`${SEARCH_GEN_AI__CONVERSATION__ID}:${conversationId}`)),
-      EVENT_POLLING_OPTIONS,
-    )
-    .toBeDefined();
-
-  console.log(`Polling for the agent spans: sentry trace view ${traceTarget(traceId!)}`);
-
-  let spans: TraceItem[] = [];
-  await expect.poll(() => isComplete((spans = flattenTrace(fetchTrace(traceId!)))), EVENT_POLLING_OPTIONS).toBe(true);
-
-  return { traceId: traceId!, spans };
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tsconfig.json b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tsconfig.json
deleted file mode 100644
index 2cb98b13c9f8..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/tsconfig.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "types": ["node"],
-    "strict": true,
-    "allowImportingTsExtensions": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "noEmit": true
-  },
-  "include": ["src/**/*.ts", "sentry-init.ts", "flue.config.ts", "vite.config.ts"]
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/vite.config.ts b/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/vite.config.ts
deleted file mode 100644
index a77574b64290..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-flue-send-to-sentry/vite.config.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { flue } from '@flue/vite';
-import { defineConfig } from 'vite';
-
-// As `flue init` scaffolds it. Flue keeps dependencies as bare imports, so orchestrion can still hook them.
-export default defineConfig({
-  plugins: [flue()],
-});

From 61d2b2688f09e23470f5f696008bfaff7dbb3c6b Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Thu, 29 Oct 2026 09:55:18 +0100
Subject: [PATCH 010/169] ref(cloudflare): Simplify shared SDK initialization
 (#25864)

**Why:** The main SDK and `/request` already use the same default
integrations, so passing a callback to select the default integrations
is no longer necessary. This PR simplifies the setup.

**How to review:** Both entry points now share `initBaseSdk()` and the
same default integrations. Check that `sdk.ts` still handles optional
OpenTelemetry setup, while `/request` imports only the base initializer
and never reaches `sdk.ts`. Existing module-graph and OpenTelemetry
tests cover this boundary.

supersedes #25853
closes https://github.com/getsentry/sentry-javascript/issues/24039

Co-authored-by: Codex <codex@openai.com>
---
 packages/cloudflare/src/baseSdk.ts            | 34 +++++--------------
 packages/cloudflare/src/request.ts            |  7 ++--
 packages/cloudflare/src/sdk.ts                | 17 +++-------
 .../src/wrapRequestHandlerWithInit.ts         |  2 +-
 .../test/requestModuleGraph.test.ts           |  2 +-
 5 files changed, 18 insertions(+), 44 deletions(-)

diff --git a/packages/cloudflare/src/baseSdk.ts b/packages/cloudflare/src/baseSdk.ts
index af1d2d681f66..43b5b9604fcd 100644
--- a/packages/cloudflare/src/baseSdk.ts
+++ b/packages/cloudflare/src/baseSdk.ts
@@ -41,14 +41,10 @@ function getRegisteredChannelIntegrations(): Integration[] {
 }
 
 /**
- * Get the default integrations that run on any Workers-compatible runtime, i.e. without the
- * `nodejs_compat` compatibility flag.
- *
- * `getDefaultIntegrations` in `sdk.ts` extends this set with the integrations that do depend on
- * Node.js APIs. Keeping the two apart is what allows `wrapRequestHandler` to stay usable on runtimes
- * that cannot enable `nodejs_compat`, such as Shopify Oxygen.
+ * Get the default integrations for the Cloudflare SDK.
+ * These also work on Workers-compatible runtimes without the `nodejs_compat` compatibility flag.
  */
-export function getBaseDefaultIntegrations(options: CloudflareOptions): Integration[] {
+export function getDefaultIntegrations(options: CloudflareOptions): Integration[] {
   return [
     // The Dedupe integration should not be used in workflows because we want to
     // capture all step failures, even if they are the same error.
@@ -72,12 +68,10 @@ export function getBaseDefaultIntegrations(options: CloudflareOptions): Integrat
 }
 
 /**
- * Initializes the Cloudflare SDK with the passed default integrations.
+ * Initializes the Cloudflare SDK without setting up an OpenTelemetry tracer provider.
  *
- * The default integrations are injected rather than imported so that this module stays free of
- * Node.js-only code. `request.ts` — which backs both `wrapRequestHandler` and the
- * `@sentry/cloudflare/request` entry point, and therefore has to work on runtimes without the
- * `nodejs_compat` compatibility flag — creates its client from here instead of from `sdk.ts`.
+ * Kept separate from `sdk.ts` so `@sentry/cloudflare/request` can load without Node.js-only
+ * dependencies on runtimes such as Shopify Oxygen.
  *
  * The client is cached and reused across invocations within the same isolate,
  * unless `cacheClient: false` is passed. This avoids the
@@ -87,10 +81,7 @@ export function getBaseDefaultIntegrations(options: CloudflareOptions): Integrat
  * boundary that reliably extends execution, so spans/events that end after
  * disposal would otherwise be lost.
  */
-export function initWithDefaultIntegrations(
-  options: CloudflareOptions,
-  getDefaultIntegrationsImpl: (options: CloudflareOptions) => Integration[],
-): CloudflareClient | undefined {
+export function initBaseSdk(options: CloudflareOptions): CloudflareClient | undefined {
   const cached = getCachedClient();
   const cacheEnabled = options.cacheClient !== false;
 
@@ -111,7 +102,7 @@ export function initWithDefaultIntegrations(
   // included, unless an SDK built the list from the defaults.
   const usesSdkDefaults = options.defaultIntegrations === undefined || !!options._extendsDefaultIntegrations;
   if (options.defaultIntegrations === undefined) {
-    options.defaultIntegrations = getDefaultIntegrationsImpl(options);
+    options.defaultIntegrations = getDefaultIntegrations(options);
   }
 
   // A cached client outlives any single invocation, so binding it to one
@@ -191,12 +182,3 @@ export function initWithDefaultIntegrations(
 
   return client;
 }
-
-/**
- * Initializes the Cloudflare SDK with only the default integrations from
- * {@link getBaseDefaultIntegrations}, i.e. those that work without the `nodejs_compat`
- * compatibility flag.
- */
-export function initBaseSdk(options: CloudflareOptions): CloudflareClient | undefined {
-  return initWithDefaultIntegrations(options, getBaseDefaultIntegrations);
-}
diff --git a/packages/cloudflare/src/request.ts b/packages/cloudflare/src/request.ts
index 760398c38b73..7f504dedcdef 100644
--- a/packages/cloudflare/src/request.ts
+++ b/packages/cloudflare/src/request.ts
@@ -5,10 +5,9 @@ import { type RequestHandlerWrapperOptions, wrapRequestHandlerWithInit } from '.
 /**
  * Wraps a cloudflare request handler in Sentry instrumentation.
  *
- * The client is set up with the default integrations that work without the `nodejs_compat`
- * compatibility flag, so that this also works on runtimes that cannot enable it (e.g. Shopify
- * Oxygen). On a runtime that has `nodejs_compat`, pass `defaultIntegrations:
- * getDefaultIntegrations(options)` in `options` to get the full set instead.
+ * The client uses the same default integrations as `init`, without setting up an OpenTelemetry
+ * tracer provider. This entry point also works on runtimes that cannot enable the `nodejs_compat`
+ * compatibility flag, such as Shopify Oxygen.
  */
 export function wrapRequestHandler(
   wrapperOptions: Omit<RequestHandlerWrapperOptions, 'options'> & {
diff --git a/packages/cloudflare/src/sdk.ts b/packages/cloudflare/src/sdk.ts
index 4f4148396040..649bd589794e 100644
--- a/packages/cloudflare/src/sdk.ts
+++ b/packages/cloudflare/src/sdk.ts
@@ -1,5 +1,4 @@
-import type { Integration } from '@sentry/core';
-import { getBaseDefaultIntegrations, initWithDefaultIntegrations } from './baseSdk';
+import { initBaseSdk } from './baseSdk';
 import type { CloudflareClient, CloudflareOptions } from './client';
 import { setupOpenTelemetryTracer } from './opentelemetry/tracer';
 import { type RequestHandlerWrapperOptions, wrapRequestHandlerWithInit } from './wrapRequestHandlerWithInit';
@@ -7,12 +6,7 @@ import { type RequestHandlerWrapperOptions, wrapRequestHandlerWithInit } from '.
 // Test-only helper, re-exported here so tests can reset the global client cache.
 export { _clearGlobalClientCache } from './clientCache';
 
-/**
- * Get the default integrations for the Cloudflare SDK.
- */
-export function getDefaultIntegrations(options: CloudflareOptions): Integration[] {
-  return getBaseDefaultIntegrations(options);
-}
+export { getDefaultIntegrations } from './baseSdk';
 
 /**
  * Initializes the cloudflare SDK.
@@ -28,13 +22,12 @@ export function init(options: CloudflareOptions): CloudflareClient | undefined {
     setupOpenTelemetryTracer();
   }
 
-  return initWithDefaultIntegrations(options, getDefaultIntegrations);
+  return initBaseSdk(options);
 }
 
 /**
- * `wrapRequestHandler` backed by `init`, so the request gets the full default integrations and
- * honors `enableOpenTelemetrySetup`. The `@sentry/cloudflare/request` variant deliberately skips
- * both to stay usable without `nodejs_compat`.
+ * `wrapRequestHandler` backed by `init`, so the request honors `enableOpenTelemetrySetup`. The
+ * `@sentry/cloudflare/request` variant deliberately skips it to stay usable without `nodejs_compat`.
  *
  * For framework SDKs building on the main entry point, e.g. SvelteKit, whose OpenTelemetry spans
  * need the tracer provider.
diff --git a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
index e852ad1cf661..fbc5262c3e55 100644
--- a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
+++ b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
@@ -63,7 +63,7 @@ type InitSdk = (options: CloudflareOptions) => CloudflareClient | undefined;
  * Same as {@link wrapRequestHandler}, but with the SDK initialization injected.
  *
  * Wrappers that are only reachable from the main entry point — where `nodejs_compat` is a
- * requirement anyway — pass `init` from `sdk.ts` to get the full default integrations.
+ * requirement anyway — pass `init` from `sdk.ts` so `enableOpenTelemetrySetup` is honored.
  *
  * @internal
  */
diff --git a/packages/cloudflare/test/requestModuleGraph.test.ts b/packages/cloudflare/test/requestModuleGraph.test.ts
index 2100f4a47311..64827ebc8b5c 100644
--- a/packages/cloudflare/test/requestModuleGraph.test.ts
+++ b/packages/cloudflare/test/requestModuleGraph.test.ts
@@ -76,7 +76,7 @@ describe('module graph of `wrapRequestHandler`', () => {
     expect(modules).not.toContain('async.ts');
   });
 
-  it('does not reach `sdk.ts`, which holds the default integrations that need `nodejs_compat`', () => {
+  it('does not reach `sdk.ts`, which imports the OpenTelemetry tracer setup', () => {
     expect(modules).not.toContain('sdk.ts');
   });
 });

From 379346e3498337e86007ee67a5a5c83255a104e0 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 10:34:18 +0100
Subject: [PATCH 011/169] test(e2e): Move canary variants into `canaryVariants`
 (#25865)

**Why:** Canary variants ran in two places: as `optionalVariants` on
every PR and in the nightly `canary.yml`. This adds a
`sentryTest.canaryVariants` field for variants that build against
upstream prereleases (`canary`, `next`, nightly) and moves them there,
so they stop running on PRs. `create-react-app`,
`react-create-hash-router` and `react-router-6` only had canary builds
in `canary.yml`, so they get `canaryVariants` entries. The `latest`
builds that only ran in `canary.yml` (`tanstackstart-react (latest)`,
`nestjs-12 (latest)`) are not canary builds, so they become
`optionalVariants`, and `nextjs-14 (latest)` / `nextjs-15 (latest)` stay
optional.

`getTestMatrix.mjs` now takes `--variant=optional|canary` instead of the
boolean `--optional=true`, because the matrices are mutually exclusive.
`ci:build-matrix-canary` outputs the canary variants, and `run.mjs
--variant` finds them for local runs.

First of 2 stacked PRs (#25866). `canary.yml` keeps its hard-coded list
until #25866, so the canary variants that were only optional before
(`angular-21`, `nextjs-16-standalone`, `nuxt-4-static`, `vue-3`) run
nowhere until that one lands. Merge them together.

**How to review:** Start with `getTestMatrix.mjs`. The `package.json`
changes only move entries. The angular canary labels are renamed to
`angular-21 (canary)` / `angular-22 (canary)` so the two are not both
called `angular (canary)`.

**Unsure about:** `nextjs-app-dir (next@15)` was in `canary.yml`, but it
is already a required variant on PRs, so I left it in `variants`. After
#25866 it no longer also runs nightly.

<!-- junior-request-attribution:start -->
via **Francesco Gringl-Novy**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AD0CA8FXFXAS%3A1793261840.120889 -->

--

[View Junior
Session](https://junior-prod.sentry.dev/conversations/slack%3AD0CA8FXFXAS%3A1793261840.120889)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AD0CA8FXFXAS%3A1793261840.120889/?project=4510944073809921)

<!-- junior-session-footer:end -->

---------

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Francesco Gringl-Novy <francesco.novy@sentry.io>
---
 dev-packages/e2e-tests/README.md              | 12 +++++++
 dev-packages/e2e-tests/lib/getTestMatrix.mjs  | 34 +++++++++++++------
 dev-packages/e2e-tests/package.json           |  3 +-
 dev-packages/e2e-tests/run.mjs                |  3 +-
 .../test-applications/angular-21/package.json |  4 +--
 .../test-applications/angular-22/package.json |  4 +--
 .../create-react-app/package.json             |  8 +++++
 .../test-applications/nestjs-12/package.json  |  8 +++++
 .../test-applications/nextjs-14/package.json  | 10 +++---
 .../nextjs-16-standalone/package.json         |  2 +-
 .../test-applications/nextjs-16/package.json  | 22 ++++++------
 .../test-applications/nuxt-3/package.json     |  2 +-
 .../nuxt-4-static/package.json                |  2 +-
 .../test-applications/nuxt-4/package.json     |  2 +-
 .../react-create-hash-router/package.json     |  8 +++++
 .../react-router-6/package.json               |  8 ++++-
 .../tanstackstart-react/package.json          |  6 ++++
 .../test-applications/vue-3/package.json      | 10 +++---
 18 files changed, 108 insertions(+), 40 deletions(-)

diff --git a/dev-packages/e2e-tests/README.md b/dev-packages/e2e-tests/README.md
index ce769d3c87f8..400d227bc864 100644
--- a/dev-packages/e2e-tests/README.md
+++ b/dev-packages/e2e-tests/README.md
@@ -290,6 +290,18 @@ The required E2E jobs run on 2 vCPUs (`namespace-profile-sentry-javascript-small
 about 90 seconds, set `"sentryTest": { "runner": "namespace-profile-sentry-javascript" }` to run it and its variants on
 4 vCPUs.
 
+Variants that build against upstream prereleases (for example `canary`, `next` or nightly builds of a framework) go into
+`canaryVariants`. They do not run on PRs, only in the nightly `CI: Canary Tests` workflow (`.github/workflows/canary.yml`),
+so failures caused by an upstream prerelease do not show up on unrelated PRs. Run one locally with
+`pnpm run test:run <app> --variant <label>`. Variants that build against the `latest` release belong in
+`optionalVariants`.
+
+```json
+"sentryTest": {
+  "canaryVariants": [{ "build-command": "pnpm test:build-canary", "label": "my-app (canary)" }]
+}
+```
+
 If you add Sentry dependencies to your test application, set the dependency versions to `latest || *` in order
 for it to work with both regular and prerelease versions:
 
diff --git a/dev-packages/e2e-tests/lib/getTestMatrix.mjs b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
index cec2cb530828..0ec456f391a2 100644
--- a/dev-packages/e2e-tests/lib/getTestMatrix.mjs
+++ b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
@@ -6,14 +6,22 @@ import { parseArgs } from 'node:util';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
+const VARIANT_FIELDS = {
+  required: 'variants',
+  optional: 'optionalVariants',
+  canary: 'canaryVariants',
+};
+
 /**
  * Generates a matrix for the GitHub Actions workflow to run the E2E tests.
  * Checks which test applications are affected by the current changes in the PR and then generates a matrix
  * including all test apps that have at least one dependency that was changed in the PR.
  * If no `--base=xxx` is provided, it will output all test applications.
  *
- * If `--optional=true` is set, it will generate a matrix of optional test applications only.
- * Otherwise, these will be skipped.
+ * `--variant` selects which matrix to generate:
+ * - not set: the required test applications and their `variants`
+ * - `optional`: the optional test applications and the `optionalVariants` of all test applications
+ * - `canary`: only the `canaryVariants` of all test applications
  */
 function run() {
   const { values } = parseArgs({
@@ -21,15 +29,19 @@ function run() {
     options: {
       base: { type: 'string' },
       head: { type: 'string' },
-      optional: { type: 'string', default: 'false' },
+      variant: { type: 'string', default: 'required' },
     },
   });
 
-  const { base, head = 'HEAD', optional } = values;
+  const { base, head = 'HEAD', variant } = values;
 
   // For GitHub Action debugging
   // eslint-disable-next-line no-console
-  console.error(`Parsed command line arguments: base=${base}, head=${head}, optional=${optional}`);
+  console.error(`Parsed command line arguments: base=${base}, head=${head}, variant=${variant}`);
+
+  if (!Object.hasOwn(VARIANT_FIELDS, variant)) {
+    throw new Error(`Unknown --variant=${variant}, expected one of: ${Object.keys(VARIANT_FIELDS).join(', ')}`);
+  }
 
   const testApplications = discoverTestApplicationDirs();
 
@@ -43,11 +55,10 @@ function run() {
     ? getAffectedTestApplications(testApplications, { base, head })
     : testApplications;
 
-  const optionalMode = optional === 'true';
   const includes = [];
 
   includedTestApplications.forEach(testApp => {
-    addIncludesForTestApp(testApp, includes, { optionalMode });
+    addIncludesForTestApp(testApp, includes, { variant });
   });
 
   // We print this to the output, so the GHA can use it for the matrix
@@ -66,12 +77,12 @@ function discoverTestApplicationDirs() {
     .sort();
 }
 
-function addIncludesForTestApp(testApp, includes, { optionalMode }) {
+function addIncludesForTestApp(testApp, includes, { variant }) {
   const packageJson = getPackageJson(testApp);
 
   const shouldSkip = packageJson.sentryTest?.skip || false;
   const isOptional = packageJson.sentryTest?.optional || false;
-  const variants = (optionalMode ? packageJson.sentryTest?.optionalVariants : packageJson.sentryTest?.variants) || [];
+  const variants = packageJson.sentryTest?.[VARIANT_FIELDS[variant]] || [];
   const runner = packageJson.sentryTest?.runner;
   const baseInclude = { 'test-application': testApp, ...(runner ? { runner } : {}) };
 
@@ -79,8 +90,9 @@ function addIncludesForTestApp(testApp, includes, { optionalMode }) {
     return;
   }
 
-  // Add the basic test-application itself, if it is in the current mode
-  if (optionalMode === isOptional) {
+  // The test application itself is either required or optional, never canary, and only runs in the matrix of its mode.
+  const appVariant = isOptional ? 'optional' : 'required';
+  if (appVariant === variant) {
     includes.push(baseInclude);
   }
 
diff --git a/dev-packages/e2e-tests/package.json b/dev-packages/e2e-tests/package.json
index d2ef227b500d..af77f36a6fb6 100644
--- a/dev-packages/e2e-tests/package.json
+++ b/dev-packages/e2e-tests/package.json
@@ -12,7 +12,8 @@
     "test:validate": "node validate-packed-tarball-setup.mjs",
     "clean": "rimraf tmp node_modules packed && pnpm run clean:test-applications && pnpm run clean:pnpm",
     "ci:build-matrix": "node ./lib/getTestMatrix.mjs",
-    "ci:build-matrix-optional": "node ./lib/getTestMatrix.mjs --optional=true",
+    "ci:build-matrix-optional": "node ./lib/getTestMatrix.mjs --variant=optional",
+    "ci:build-matrix-canary": "node ./lib/getTestMatrix.mjs --variant=canary",
     "ci:copy-to-temp": "node ./ciCopyToTemp.mjs",
     "ci:pnpm-overrides": "node ./ciPnpmOverrides.mjs",
     "clean:test-applications": "rimraf --glob test-applications/**/{node_modules,dist,build,.next,.nuxt,.sveltekit,.react-router,.astro,.output,pnpm-lock.yaml,.last-run.json,test-results,.angular}",
diff --git a/dev-packages/e2e-tests/run.mjs b/dev-packages/e2e-tests/run.mjs
index d8ed9865b2f8..300b304f2bfa 100644
--- a/dev-packages/e2e-tests/run.mjs
+++ b/dev-packages/e2e-tests/run.mjs
@@ -19,7 +19,7 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
  * @typedef {{ 'build-command': string; 'assert-command'?: string; label?: string; skip?: boolean; runtime?: string }} SentryTestVariant
  */
 
-/** @typedef {{ sentryTest?: { variants?: SentryTestVariant[]; optionalVariants?: SentryTestVariant[] } }} PackageJson */
+/** @typedef {{ sentryTest?: { variants?: SentryTestVariant[]; optionalVariants?: SentryTestVariant[]; canaryVariants?: SentryTestVariant[] } }} PackageJson */
 
 const DEFAULT_DSN = 'https://username@domain/123';
 const DEFAULT_SENTRY_ORG_SLUG = 'sentry-javascript-sdks';
@@ -100,6 +100,7 @@ async function getVariantBuildCommand(packageJsonPath, variantLabel, testAppPath
     const allVariants = [
       ...(packageJson.sentryTest?.variants || []),
       ...(packageJson.sentryTest?.optionalVariants || []),
+      ...(packageJson.sentryTest?.canaryVariants || []),
     ];
 
     const matchingVariant = findMatchingVariant(allVariants, variantLabel);
diff --git a/dev-packages/e2e-tests/test-applications/angular-21/package.json b/dev-packages/e2e-tests/test-applications/angular-21/package.json
index 60e53772f091..ce311f876192 100644
--- a/dev-packages/e2e-tests/test-applications/angular-21/package.json
+++ b/dev-packages/e2e-tests/test-applications/angular-21/package.json
@@ -47,10 +47,10 @@
     "typescript": "~6.0.0"
   },
   "sentryTest": {
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
-        "label": "angular (canary)"
+        "label": "angular-21 (canary)"
       }
     ]
   }
diff --git a/dev-packages/e2e-tests/test-applications/angular-22/package.json b/dev-packages/e2e-tests/test-applications/angular-22/package.json
index a66c7252ef21..7384f9368932 100644
--- a/dev-packages/e2e-tests/test-applications/angular-22/package.json
+++ b/dev-packages/e2e-tests/test-applications/angular-22/package.json
@@ -47,10 +47,10 @@
     "typescript": "~6.0.0"
   },
   "sentryTest": {
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
-        "label": "angular (canary)"
+        "label": "angular-22 (canary)"
       }
     ]
   }
diff --git a/dev-packages/e2e-tests/test-applications/create-react-app/package.json b/dev-packages/e2e-tests/test-applications/create-react-app/package.json
index 9858e5c45875..f5541c6be21c 100644
--- a/dev-packages/e2e-tests/test-applications/create-react-app/package.json
+++ b/dev-packages/e2e-tests/test-applications/create-react-app/package.json
@@ -39,5 +39,13 @@
       "last 1 firefox version",
       "last 1 safari version"
     ]
+  },
+  "sentryTest": {
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "create-react-app (canary)"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-12/package.json b/dev-packages/e2e-tests/test-applications/nestjs-12/package.json
index 724a30b63c0f..db3903bfd091 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-12/package.json
+++ b/dev-packages/e2e-tests/test-applications/nestjs-12/package.json
@@ -42,5 +42,13 @@
     "ts-loader": "^9.4.3",
     "tsconfig-paths": "^4.2.0",
     "typescript": "~5.9.0"
+  },
+  "sentryTest": {
+    "optionalVariants": [
+      {
+        "build-command": "pnpm test:build-latest",
+        "label": "nestjs-12 (latest)"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-14/package.json b/dev-packages/e2e-tests/test-applications/nextjs-14/package.json
index 9a3aa45dc92b..2704a2f90c0b 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-14/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-14/package.json
@@ -29,14 +29,16 @@
   },
   "sentryTest": {
     "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-canary",
-        "label": "nextjs-14 (canary)"
-      },
       {
         "build-command": "pnpm test:build-latest",
         "label": "nextjs-14 (latest)"
       }
+    ],
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "nextjs-14 (canary)"
+      }
     ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-standalone/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-standalone/package.json
index df76d8284b31..4ef0a0350d4b 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-standalone/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-standalone/package.json
@@ -49,7 +49,7 @@
         "assert-command": "pnpm test:assert"
       }
     ],
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
         "label": "nextjs-16-standalone (canary, turbopack)",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
index 75071f25d027..4629e84a780d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
@@ -93,16 +93,6 @@
       }
     ],
     "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-canary",
-        "label": "nextjs-16 (canary, turbopack)",
-        "assert-command": "pnpm test:assert"
-      },
-      {
-        "build-command": "pnpm test:build-canary-webpack",
-        "label": "nextjs-16 (canary, webpack)",
-        "assert-command": "pnpm test:assert-webpack"
-      },
       {
         "runtime": "cloudflare",
         "build-command": "pnpm test:build-latest:cloudflare",
@@ -126,6 +116,18 @@
         "assert-command": "pnpm test:assert:vinext",
         "label": "nextjs-16 (vinext, bun)"
       }
+    ],
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "nextjs-16 (canary, turbopack)",
+        "assert-command": "pnpm test:assert"
+      },
+      {
+        "build-command": "pnpm test:build-canary-webpack",
+        "label": "nextjs-16 (canary, webpack)",
+        "assert-command": "pnpm test:assert-webpack"
+      }
     ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-3/package.json b/dev-packages/e2e-tests/test-applications/nuxt-3/package.json
index d1891d751fc7..beb754c4e7c4 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-3/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-3/package.json
@@ -25,7 +25,7 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   },
   "sentryTest": {
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
         "label": "nuxt-3 (canary)"
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
index 63fd1d8c01e9..8fcd03d53834 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
@@ -38,7 +38,7 @@
         "label": "nuxt-4-static (tracer provider)"
       }
     ],
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
         "label": "nuxt-4-static (canary)"
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4/package.json b/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
index abfe18e43daa..38b6d60024a3 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
@@ -63,7 +63,7 @@
         "label": "nuxt-4 (tunnel-basepath-dev)"
       }
     ],
-    "optionalVariants": [
+    "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
         "label": "nuxt-4 (canary)"
diff --git a/dev-packages/e2e-tests/test-applications/react-create-hash-router/package.json b/dev-packages/e2e-tests/test-applications/react-create-hash-router/package.json
index a6c572225b97..80481c626bd4 100644
--- a/dev-packages/e2e-tests/test-applications/react-create-hash-router/package.json
+++ b/dev-packages/e2e-tests/test-applications/react-create-hash-router/package.json
@@ -45,5 +45,13 @@
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
     "serve": "14.0.1"
+  },
+  "sentryTest": {
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "react-create-hash-router (canary)"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/react-router-6/package.json b/dev-packages/e2e-tests/test-applications/react-router-6/package.json
index eabd1c9498b6..afa0bdf2dda5 100644
--- a/dev-packages/e2e-tests/test-applications/react-router-6/package.json
+++ b/dev-packages/e2e-tests/test-applications/react-router-6/package.json
@@ -49,6 +49,12 @@
     "npm-run-all2": "^6.2.0"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
+    "runner": "namespace-profile-sentry-javascript",
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "react-router-6 (canary)"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/tanstackstart-react/package.json b/dev-packages/e2e-tests/test-applications/tanstackstart-react/package.json
index eb862db2b1e1..69c718ec1dee 100644
--- a/dev-packages/e2e-tests/test-applications/tanstackstart-react/package.json
+++ b/dev-packages/e2e-tests/test-applications/tanstackstart-react/package.json
@@ -79,6 +79,12 @@
         "build-command": "pnpm install",
         "assert-command": "pnpm test:assert:tunnel-basepath-dev"
       }
+    ],
+    "optionalVariants": [
+      {
+        "build-command": "pnpm test:build-latest",
+        "label": "tanstackstart-react (latest)"
+      }
     ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/vue-3/package.json b/dev-packages/e2e-tests/test-applications/vue-3/package.json
index 60707aed87b5..6048d7d8d9ff 100644
--- a/dev-packages/e2e-tests/test-applications/vue-3/package.json
+++ b/dev-packages/e2e-tests/test-applications/vue-3/package.json
@@ -56,15 +56,17 @@
       }
     ],
     "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-canary",
-        "label": "vue-3 (canary)"
-      },
       {
         "build-command": "pnpm test:build-no-options-api",
         "assert-command": "pnpm test:assert-no-options-api",
         "label": "vue-3 (no Options API)"
       }
+    ],
+    "canaryVariants": [
+      {
+        "build-command": "pnpm test:build-canary",
+        "label": "vue-3 (canary)"
+      }
     ]
   }
 }

From 9543b712354c6b6e0427dcdfab0e99e411e02526 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 10:34:18 +0100
Subject: [PATCH 012/169] ci(canary): Build the canary test matrix from
 `canaryVariants` (#25866)

**Why:** `canary.yml` had a hard-coded list of apps and build commands
that drifted from the variants in the test apps. It now gets its matrix
from `ci:build-matrix-canary`, the same way `build.yml` gets the
optional E2E matrix, so adding a `canaryVariants` entry is enough to run
it nightly.

The test jobs now use the shared `prepare-e2e-test` action like the E2E
jobs in `build.yml`, so canary variants get `runtime`, `deno-version`,
`runner` and default build/assert commands for free. For that, the
prepare job uploads the tarballs as artifacts instead of the
`actions/cache` it used before. The test jobs use their own cache volume
(`sentry-javascript-e2e-canary`), so prerelease installs don't land in
the volume the regular E2E jobs use. Like in `build.yml`, they run on
the small runner unless the app sets `sentryTest.runner`; slower nightly
runs are fine.

Stacked on #25865.

**How to review:** Only `.github/workflows/canary.yml`. The issue step
is unchanged and still opens one issue per failed variant.

<!-- junior-request-attribution:start -->
via **Francesco Gringl-Novy**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AD0CA8FXFXAS%3A1793261840.120889 -->

--

[View Junior
Session](https://junior-prod.sentry.dev/conversations/slack%3AD0CA8FXFXAS%3A1793261840.120889)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AD0CA8FXFXAS%3A1793261840.120889/?project=4510944073809921)

<!-- junior-session-footer:end -->

---------

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Francesco Gringl-Novy <francesco.novy@sentry.io>
---
 .github/workflows/canary.yml | 151 +++++++++++------------------------
 1 file changed, 47 insertions(+), 104 deletions(-)

diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 55a6d1f10bef..62cc55309d3a 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -12,15 +12,6 @@ on:
 env:
   HEAD_COMMIT: ${{ github.event.inputs.commit || github.sha }}
 
-  CACHED_BUILD_PATHS: |
-    ${{ github.workspace }}/packages/*/*.tgz
-    ${{ github.workspace }}/dev-packages/test-utils/*.tgz
-    ${{ github.workspace }}/node_modules
-    ${{ github.workspace }}/packages/*/node_modules
-    ${{ github.workspace }}/dev-packages/*/node_modules
-    ${{ github.workspace }}/dev-packages/*/build
-    ${{ github.workspace }}/packages/*/build
-
 permissions:
   contents: read
   issues: write
@@ -30,6 +21,8 @@ jobs:
     name: Prepare E2E Canary tests
     runs-on: namespace-profile-sentry-javascript-large
     timeout-minutes: 30
+    outputs:
+      matrix: ${{ steps.matrix.outputs.matrix }}
     steps:
       - name: Check out current commit
         uses: actions/checkout@v7
@@ -41,11 +34,6 @@ jobs:
         uses: actions/setup-node@v7
         with:
           node-version-file: 'package.json'
-      - name: Check canary cache
-        uses: actions/cache@v6.1.0
-        with:
-          path: ${{ env.CACHED_BUILD_PATHS }}
-          key: canary-${{ env.HEAD_COMMIT }}
       - name: Install dependencies
         run: pnpm install
       - name: Build packages
@@ -54,10 +42,40 @@ jobs:
       - name: Build tarballs
         run: pnpm run build:tarball
 
+      # Same artifacts as in build.yml, so the test jobs can use the shared prepare-e2e-test action
+      - name: Upload tarball artifacts
+        uses: actions/upload-artifact@v7
+        with:
+          name: build-tarball-output
+          path: packages/*/*.tgz
+          if-no-files-found: error
+          retention-days: 4
+          compression-level: 6
+          overwrite: true
+
+      - name: Upload test-utils tarball artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: build-test-utils-tarball-output
+          path: dev-packages/test-utils/*.tgz
+          if-no-files-found: error
+          retention-days: 4
+          compression-level: 6
+          overwrite: true
+
+      - name: Determine canary test applications
+        id: matrix
+        run: pnpm --silent run ci:build-matrix-canary >> $GITHUB_OUTPUT
+        working-directory: dev-packages/e2e-tests
+
   job_e2e_tests:
-    name: E2E ${{ matrix.label }} Test
+    name: E2E ${{ matrix.label || matrix.test-application }} Test
     needs: [job_e2e_prepare]
-    runs-on: namespace-profile-sentry-javascript
+    if: needs.job_e2e_prepare.outputs.matrix != '{"include":[]}'
+    # Canary builds install prerelease dependencies, so they get their own cache volume.
+    runs-on:
+      ${{ matrix.runner || 'namespace-profile-sentry-javascript-small'
+      }};overrides.cache-tag=sentry-javascript-e2e-canary
     timeout-minutes: 20
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
@@ -68,105 +86,30 @@ jobs:
       REACT_APP_E2E_TEST_DSN: 'https://username@domain/123'
       E2E_TEST_SENTRY_ORG_SLUG: 'sentry-javascript-sdks'
       E2E_TEST_SENTRY_PROJECT: 'sentry-javascript-e2e-tests'
+      # The `runtime` of a runtime variant, see dev-packages/e2e-tests/README.md
+      RUNTIME: ${{ matrix.runtime }}
+      # Without the root node_modules, `pnpm run` would first install the whole workspace.
+      pnpm_config_verify_deps_before_run: 'false'
     strategy:
       fail-fast: false
-      matrix:
-        include:
-          - test-application: 'angular-22'
-            build-command: 'test:build-canary'
-            label: 'angular-22 (next)'
-          - test-application: 'create-react-app'
-            build-command: 'test:build-canary'
-            label: 'create-react-app (canary)'
-          - test-application: 'nextjs-app-dir'
-            build-command: 'test:build-15'
-            label: 'nextjs-app-dir (next@15)'
-          - test-application: 'nextjs-14'
-            build-command: 'test:build-canary'
-            label: 'nextjs-14 (canary)'
-          - test-application: 'nextjs-14'
-            build-command: 'test:build-latest'
-            label: 'nextjs-14 (latest)'
-          - test-application: 'nextjs-15'
-            build-command: 'test:build-latest'
-            label: 'nextjs-15 (latest)'
-          - test-application: 'nextjs-16'
-            build-command: 'test:build-canary'
-            label: 'nextjs-16 (canary)'
-          - test-application: 'nextjs-16'
-            build-command: 'test:build-canary-webpack'
-            label: 'nextjs-16 (canary-webpack)'
-          - test-application: 'react-create-hash-router'
-            build-command: 'test:build-canary'
-            label: 'react-create-hash-router (canary)'
-          - test-application: 'react-router-6'
-            build-command: 'test:build-canary'
-            label: 'react-router-6 (canary)'
-          - test-application: 'nuxt-3'
-            build-command: 'test:build-canary'
-            label: 'nuxt-3 (canary)'
-          - test-application: 'nuxt-4'
-            build-command: 'test:build-canary'
-            label: 'nuxt-4 (canary)'
-          - test-application: 'tanstackstart-react'
-            build-command: 'test:build-latest'
-            label: 'tanstackstart-react (latest)'
-          - test-application: 'nestjs-12'
-            build-command: 'test:build-latest'
-            label: 'nestjs-12 (latest)'
+      matrix: ${{ fromJson(needs.job_e2e_prepare.outputs.matrix) }}
 
     steps:
       - name: Check out current commit
         uses: actions/checkout@v7
         with:
           ref: ${{ env.HEAD_COMMIT }}
-      - name: Install pnpm
-        uses: ./.github/actions/install-pnpm
-      # Uses the repo's root node pin for the steps before the app is copied (`test:prepare`, `test:validate`,
-      # `ci:copy-to-temp`). The app's own node version is set up after the copy below.
-      - name: Set up Node
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: 'package.json'
-
-      - name: Restore canary cache
-        uses: actions/cache/restore@v6.1.0
-        with:
-          path: ${{ env.CACHED_BUILD_PATHS }}
-          key: canary-${{ env.HEAD_COMMIT }}
-
-      - name: Prepare e2e tests
-        run: pnpm run test:prepare
-        working-directory: dev-packages/e2e-tests
-
-      - name: Validate test setup
-        run: pnpm run test:validate
-        working-directory: dev-packages/e2e-tests
-
-      - name: Copy to temp
-        run:
-          pnpm run ci:copy-to-temp ./test-applications/${{ matrix.test-application }} ${{ runner.temp
-          }}/test-application
-        working-directory: dev-packages/e2e-tests
-
-      # Reads the node version that `ci:copy-to-temp` wrote into the copied app's `devEngines.runtime`: the app's own pin
-      # if it has one, otherwise the one inherited from the repo root. setup-node can't look up parent directories, so
-      # the temp copy has to carry the resolved version.
-      - name: Set up Node for the E2E app
-        uses: actions/setup-node@v7
+      - name: Prepare E2E test application
+        uses: ./.github/actions/prepare-e2e-test
         with:
-          node-version-file: '${{ runner.temp }}/test-application/package.json'
-
-      - name: Add pnpm overrides
-        run:
-          pnpm run ci:pnpm-overrides ${{ runner.temp }}/test-application ${{ github.workspace
-          }}/dev-packages/e2e-tests/packed
-        working-directory: dev-packages/e2e-tests
+          test-application: ${{ matrix.test-application }}
+          runtime: ${{ matrix.runtime }}
+          deno-version: ${{ matrix.deno-version }}
 
       - name: Build E2E app
         working-directory: ${{ runner.temp }}/test-application
         timeout-minutes: 7
-        run: pnpm ${{ matrix.build-command }}
+        run: ${{ matrix.build-command || 'pnpm test:build' }}
 
       - name: Install Playwright
         uses: ./.github/actions/install-playwright
@@ -177,7 +120,7 @@ jobs:
       - name: Run E2E test
         working-directory: ${{ runner.temp }}/test-application
         timeout-minutes: 15
-        run: pnpm test:assert
+        run: ${{ matrix.assert-command || 'pnpm test:assert' }}
 
       - name: Create Issue
         if: failure() && github.event_name == 'schedule'
@@ -185,7 +128,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           RUN_LINK: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-          TITLE: ${{ matrix.label }} Test Failed
+          TITLE: ${{ matrix.label || matrix.test-application }} Test Failed
         with:
           filename: .github/CANARY_FAILURE_TEMPLATE.md
           update_existing: true

From 6bc31a6741aadee34c60ff1b9022245a0827637e Mon Sep 17 00:00:00 2001
From: Lazizbek Ergashev <lazerg2@gmail.com>
Date: Thu, 29 Oct 2026 14:38:59 +0500
Subject: [PATCH 013/169] fix(server-utils): Require a parent span for
 Firestore operations (#25855)

**Why:** Firestore calls made outside any active span each became their
own root span with no context. This passes `requiresParentSpan: true` to
the channel binding, like the other db integrations.

**How to review:** The fix is the option in
`firebase/instrumentation.ts`. The Deno test runs `addDoc` before,
inside and after a parent span and checks that only the one inside
creates a span.

Closes #25800

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
---
 .../suites/orchestrion-firebase/test.ts       | 47 +++++++++++++++++++
 .../node-firebase/firestore-app/src/app.ts    | 12 +++++
 .../node-firebase/tests/spans.test.ts         | 26 +++++++++-
 .../integrations/firebase/instrumentation.ts  | 21 +++++----
 4 files changed, 96 insertions(+), 10 deletions(-)

diff --git a/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts b/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
index cb131997dca9..abc063529480 100644
--- a/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
+++ b/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
@@ -7,6 +7,7 @@ import { assert } from 'https://deno.land/std@0.212.0/assert/assert.ts';
 import { assertExists } from 'https://deno.land/std@0.212.0/assert/assert_exists.ts';
 import { assertEquals } from 'https://deno.land/std@0.212.0/assert/assert_equals.ts';
 import { getSpanOp, resetGlobals, spanSink, withTimeout } from '../../src/index.ts';
+import { DB_QUERY } from '@sentry/conventions/op';
 
 Deno.test('firebase instrumentation: included in default integrations (Deno 2.8.0+)', () => {
   resetGlobals();
@@ -72,3 +73,49 @@ Deno.test('firebase instrumentation: orchestrion @firebase/firestore:add-doc cha
   assertEquals(fsSpan.attributes['firebase.firestore.options.projectId']?.value, 'demo-project');
   assertEquals(fsSpan.attributes['sentry.origin']?.value, 'auto.db.firebase.firestore');
 });
+
+Deno.test('firebase instrumentation: only creates firestore db spans with an active parent span', async () => {
+  resetGlobals();
+  const sink = spanSink();
+  init({
+    dsn: 'https://username@domain/123',
+    tracesSampleRate: 1,
+    transport: sink.transport,
+  });
+
+  const channel = tracingChannel('orchestrion:@firebase/firestore:add-doc');
+
+  function addDoc(path: string): void {
+    const reference = {
+      path,
+      type: 'collection',
+      firestore: {
+        app: { name: '[DEFAULT]', options: { projectId: 'demo-project', appId: 'demo-app' } },
+        toJSON: () => ({ settings: {} }),
+      },
+    };
+    const ctx: Record<string, unknown> = { arguments: [reference] };
+    channel.start.runStores(ctx, () => undefined);
+    channel.end.publish(ctx);
+    ctx.result = {};
+    channel.asyncStart.runStores(ctx, () => undefined);
+    channel.asyncEnd.publish(ctx);
+  }
+
+  addDoc('before_parent');
+  startSpan({ name: 'parent', op: 'test' }, () => addDoc('inside_parent'));
+  addDoc('after_parent');
+
+  await flush();
+
+  const parent = await withTimeout(
+    sink.waitFor(span => span.is_segment && span.name === 'parent'),
+    5000,
+    "'parent' segment span",
+  );
+  const dbSpans = sink.spans.filter(span => getSpanOp(span) === DB_QUERY);
+  assertEquals(
+    dbSpans.map(span => ({ name: span.name, parentSpanId: span.parent_span_id, isSegment: span.is_segment })),
+    [{ name: 'addDoc inside_parent', parentSpanId: parent.span_id, isSegment: false }],
+  );
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts b/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
index 486aa06b5ffc..83d04bebd136 100644
--- a/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
+++ b/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
@@ -66,6 +66,18 @@ expressApp.get('/test', async function (req, res) {
   res.send({ version: 'v1' });
 });
 
+expressApp.get('/test-no-parent', async function (req, res) {
+  const noParentRef = collection(db, 'no-parent');
+  await addDoc(noParentRef, { name: 'Without Parent' });
+  // Flush before the marker so a span from the call above would reach the proxy before it.
+  await Sentry.flush();
+  await Sentry.startSpan({ name: 'No Parent Marker' }, async () => {
+    await addDoc(noParentRef, { name: 'With Parent' });
+  });
+  await Sentry.flush();
+  res.send({ version: 'v1' });
+});
+
 expressApp.listen(port, () => {
   console.log(`Example app listening on port ${port}`);
 });
diff --git a/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts b/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
index cd9717ccdea0..836238fc3add 100644
--- a/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
+++ b/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
@@ -1,5 +1,6 @@
 import { expect, test } from '@playwright/test';
-import { collectStreamedSpansUntilSegment } from '@sentry-internal/test-utils';
+import type { SerializedStreamedSpan } from '@sentry-internal/test-utils';
+import { collectStreamedSpansUntilSegment, waitForStreamedSpans } from '@sentry-internal/test-utils';
 
 // The orchestrion spans are Sentry-native, so they carry no span-kind attribute (`sentry.kind`).
 const origin = 'auto.db.firebase.firestore';
@@ -49,3 +50,26 @@ test('should add, set, get and delete document', async ({ baseURL }) => {
   expect(children).toHaveLength(4);
   expect(children).toEqual(expect.arrayContaining([spanAddDoc, spanSetDocs, spanGetDocs, spanDeleteDoc]));
 });
+
+test('does not create firestore spans without a parent span', async ({ baseURL }) => {
+  const seen: SerializedStreamedSpan[] = [];
+  // A span that is never sent cannot be awaited, so wait for a marker span sent after the Firestore call.
+  const markerPromise = waitForStreamedSpans('node-firebase', spans => {
+    seen.push(...spans);
+    return spans.some(span => span.is_segment && span.name === 'No Parent Marker');
+  });
+
+  const response = await fetch(`${baseURL}/test-no-parent`);
+  expect(response.ok).toBe(true);
+  await markerPromise;
+
+  const marker = seen.find(span => span.is_segment && span.name === 'No Parent Marker')!;
+  // Only the call inside the marker span may produce a span, as its child.
+  expect(seen.filter(span => span.name === 'addDoc no-parent')).toEqual([
+    expect.objectContaining({
+      is_segment: false,
+      parent_span_id: marker.span_id,
+      trace_id: marker.trace_id,
+    }),
+  ]);
+});
diff --git a/packages/server-utils/src/integrations/firebase/instrumentation.ts b/packages/server-utils/src/integrations/firebase/instrumentation.ts
index b10534aea30a..246ebd9895d8 100644
--- a/packages/server-utils/src/integrations/firebase/instrumentation.ts
+++ b/packages/server-utils/src/integrations/firebase/instrumentation.ts
@@ -37,15 +37,18 @@ const NOOP = (): void => {};
 
 export function instrumentFirebase() {
   for (const { channel, spanName, useParent } of FIRESTORE_OPERATIONS) {
-    bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(channel), data =>
-      safeChannelCallback(() => {
-        const reference = data.arguments[0] as FirestoreReference | undefined;
-        if (!reference) {
-          return undefined;
-        }
-        const spanReference = useParent ? reference.parent || reference : reference;
-        return startFirestoreSpan(spanName, spanReference);
-      }),
+    bindTracingChannelToSpan(
+      diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(channel),
+      data =>
+        safeChannelCallback(() => {
+          const reference = data.arguments[0] as FirestoreReference | undefined;
+          if (!reference) {
+            return undefined;
+          }
+          const spanReference = useParent ? reference.parent || reference : reference;
+          return startFirestoreSpan(spanName, spanReference);
+        }),
+      { requiresParentSpan: true },
     );
   }
 

From 7f3d5607d464190119a4fcaa274ca8170c1e1610 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Thu, 29 Oct 2026 10:41:57 +0100
Subject: [PATCH 014/169] feat(server-utils): Support @mistralai/mistralai v3
 (#25827)

`@mistralai/mistralai` 3.x is out (latest 3.3.0), but our orchestrion
range stopped at `<3`, so Mistral spans silently disappear on v3.
Everything we hook is unchanged in v3: same files, classes and methods,
and the response and stream fields we read are still there. The 3.0.0
breaking changes don't touch anything we use, so widening the range to
`<4` is enough.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../node-suites/excludes.ts                   |   6 ++
 .../node-suites/excludes.ts                   |   1 +
 .../node-integration-tests/package.json       |   2 +-
 .../suites/tracing/mistral-v2/test.ts         |  75 +++++++++++++
 .../suites/tracing/mistral/test.ts            |   2 +-
 .../src/orchestrion/config/mistral.ts         |   4 +-
 pnpm-lock.yaml                                | 100 ++++++++++++++++--
 7 files changed, 178 insertions(+), 12 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/mistral-v2/test.ts

diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index c62a8b2059ec..116d86d2634c 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -92,6 +92,7 @@ export const NO_AUTO_INSTRUMENTATION = [
   'suites/tracing/mastra/test.ts',
   'suites/tracing/mcp-handler-exact-once/test.ts',
   'suites/tracing/mcp-server/**',
+  'suites/tracing/mistral-v2/test.ts',
   'suites/tracing/mistral/test.ts',
   'suites/tracing/mongodb-v4/test.ts',
   'suites/tracing/mongodb-v5/test.ts',
@@ -211,6 +212,10 @@ const BUN_BUILD_EAGER_SUBSCRIPTION = ['suites/tracing/orchestrion-lazy-registrat
 // `http.server.request.start`.
 const BUN_BUILD_NO_HTTP_SERVER_INTEGRATION = ['suites/express/multiple-init/test.ts'];
 
+// `@mistralai/mistralai` v3 statically imports its optional peer `@livekit/rtc-node`, so Bun cannot
+// bundle the scenarios. `mistral-v2` still covers Mistral here.
+const BUN_BUILD_UNBUNDLEABLE_DEPENDENCY = ['suites/tracing/mistral/test.ts'];
+
 // Some or all tests fail with the bundled scenarios. The cause is not investigated yet. In
 // `express/tracing` only the request data tests fail: they set `httpIntegration` options, and with
 // `@sentry/bun` the request body comes from `bunHttpServerIntegration`.
@@ -248,5 +253,6 @@ export const BUN_BUILD_EXCLUDE = [
   '**/node_modules/**',
   ...BUN_BUILD_EAGER_SUBSCRIPTION,
   ...BUN_BUILD_NO_HTTP_SERVER_INTEGRATION,
+  ...BUN_BUILD_UNBUNDLEABLE_DEPENDENCY,
   ...BUN_BUILD_NOT_TRIAGED,
 ];
diff --git a/dev-packages/deno-integration-tests/node-suites/excludes.ts b/dev-packages/deno-integration-tests/node-suites/excludes.ts
index b93a8ff63a65..bed8f796a588 100644
--- a/dev-packages/deno-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/deno-integration-tests/node-suites/excludes.ts
@@ -62,6 +62,7 @@ const NOT_TRIAGED = [
   'suites/tracing/koa/test.ts',
   'suites/tracing/langchain/test.ts',
   'suites/tracing/langgraph/test.ts',
+  'suites/tracing/mistral-v2/test.ts',
   'suites/tracing/mistral/test.ts',
   'suites/tracing/mongodb/test.ts',
   'suites/tracing/mongoose-v5/test.ts',
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 27187e843dfb..2ea842433e12 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -44,7 +44,7 @@
     "@langchain/core": "^0.3.80",
     "@langchain/langgraph": "^0.2.32",
     "@langchain/openai": "^0.5.0",
-    "@mistralai/mistralai": "2.6.4",
+    "@mistralai/mistralai": "3.3.0",
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "@nestjs/common": "^11",
diff --git a/dev-packages/node-integration-tests/suites/tracing/mistral-v2/test.ts b/dev-packages/node-integration-tests/suites/tracing/mistral-v2/test.ts
new file mode 100644
index 000000000000..5cd698bda1a2
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/mistral-v2/test.ts
@@ -0,0 +1,75 @@
+import {
+  GEN_AI_OPERATION_NAME,
+  GEN_AI_RESPONSE_ID,
+  GEN_AI_RESPONSE_STREAMING,
+  GEN_AI_USAGE_TOTAL_TOKENS,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmTests } from '../../../utils/runner';
+
+const ORIGIN = 'auto.ai.mistralai';
+const MISTRAL_V2 = { additionalDependencies: { '@mistralai/mistralai': '2.6.4' } };
+
+// The `mistral` suite runs on the latest major; this keeps the still-supported v2 covered. The
+// scenarios are shared, since the request and response shapes we read are the same across majors.
+describe('Mistral integration (v2)', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmTests(
+    __dirname,
+    '../mistral/scenario-chat.mjs',
+    '../mistral/instrument.mjs',
+    (createRunner, test) => {
+      test('creates chat and streamed chat spans on @mistralai/mistralai v2', async () => {
+        await createRunner()
+          .expect({
+            span: container => {
+              const chatSpan = container.items.find(
+                s => s.attributes[GEN_AI_RESPONSE_ID]?.value === 'chatcmpl-mock123',
+              );
+              expect(chatSpan).toBeDefined();
+              expect(chatSpan!.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('chat');
+              expect(chatSpan!.attributes[SENTRY_ORIGIN]?.value).toBe(ORIGIN);
+              expect(chatSpan!.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBe(25);
+
+              const streamSpan = container.items.find(
+                s => s.attributes[GEN_AI_RESPONSE_ID]?.value === 'chatcmpl-stream-123',
+              );
+              expect(streamSpan).toBeDefined();
+              expect(streamSpan!.attributes[GEN_AI_RESPONSE_STREAMING]?.value).toBe(true);
+              expect(streamSpan!.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBe(30);
+            },
+          })
+          .start()
+          .completed();
+      });
+    },
+    MISTRAL_V2,
+  );
+
+  createEsmTests(
+    __dirname,
+    '../mistral/scenario-embeddings.mjs',
+    '../mistral/instrument.mjs',
+    (createRunner, test) => {
+      test('creates embeddings spans on @mistralai/mistralai v2', async () => {
+        await createRunner()
+          .expect({
+            span: container => {
+              const embeddingsSpan = container.items.find(
+                s => s.attributes[GEN_AI_OPERATION_NAME]?.value === 'embeddings',
+              );
+              expect(embeddingsSpan).toBeDefined();
+              expect(embeddingsSpan!.attributes[SENTRY_ORIGIN]?.value).toBe(ORIGIN);
+            },
+          })
+          .start()
+          .completed();
+      });
+    },
+    MISTRAL_V2,
+  );
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/mistral/test.ts b/dev-packages/node-integration-tests/suites/tracing/mistral/test.ts
index 1b1e91310beb..8b5373b22921 100644
--- a/dev-packages/node-integration-tests/suites/tracing/mistral/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/mistral/test.ts
@@ -30,7 +30,7 @@ const ORIGIN = 'auto.ai.mistralai';
 // Not exported from `@sentry/conventions` yet; the SDK defines it in `ai/core/gen-ai-attributes`.
 const GEN_AI_REQUEST_STREAM = 'gen_ai.request.stream';
 
-// ESM-only: `@mistralai/mistralai` v2 ships no CJS build, so CJS consumers load it via `require(esm)`,
+// ESM-only: `@mistralai/mistralai` v2+ ships no CJS build, so CJS consumers load it via `require(esm)`,
 // whose auto-instrumentation is inconsistent across Node versions. The SDK's native mode is ESM, so we
 // only run the suite there.
 describe('Mistral integration', () => {
diff --git a/packages/server-utils/src/orchestrion/config/mistral.ts b/packages/server-utils/src/orchestrion/config/mistral.ts
index 01dd2b7320ff..aefaafb01c1d 100644
--- a/packages/server-utils/src/orchestrion/config/mistral.ts
+++ b/packages/server-utils/src/orchestrion/config/mistral.ts
@@ -2,10 +2,10 @@ import type { InstrumentationConfig } from '../apmTypes';
 
 import { getModuleNames } from './module-names';
 
-// `@mistralai/mistralai` v2 is ESM-only, so there is a single built file per resource (no dual CJS/ESM
+// `@mistralai/mistralai` v2+ is ESM-only, so there is a single built file per resource (no dual CJS/ESM
 // variants). Each SDK resource class exposes async methods that return a thenable, so `kind: 'Auto'`
 // resolves to `wrapPromise`; the `.stream` methods resolve to an async-iterable `EventStream`.
-const MODULE = { name: '@mistralai/mistralai', versionRange: '>=2.0.0 <3' } as const;
+const MODULE = { name: '@mistralai/mistralai', versionRange: '>=2.0.0 <4' } as const;
 
 const CHAT_FILE = { ...MODULE, filePath: 'esm/sdk/chat.js' } as const;
 const AGENTS_FILE = { ...MODULE, filePath: 'esm/sdk/agents.js' } as const;
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7d319b2ae320..68e748c2dac3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -453,7 +453,7 @@ importers:
         version: 0.133.0(zod@4.6.7)
       '@google/genai':
         specifier: ^1.20.0
-        version: 1.20.0(encoding@0.1.13)(supports-color@10.0.0)
+        version: 1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)
       '@langchain/core':
         specifier: ^1.2.17
         version: 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
@@ -606,7 +606,7 @@ importers:
         version: 3.1068.0
       '@google/genai':
         specifier: ^1.20.0
-        version: 1.20.0(encoding@0.1.13)(supports-color@10.0.0)
+        version: 1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)
       '@growthbook/growthbook':
         specifier: ^1.6.5
         version: 1.6.5
@@ -632,8 +632,8 @@ importers:
         specifier: ^0.5.0
         version: 0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(ws@8.21.3)
       '@mistralai/mistralai':
-        specifier: 2.6.4
-        version: 2.6.4(@opentelemetry/api@1.9.0)
+        specifier: 3.3.0
+        version: 3.3.0(@aws-sdk/client-s3@3.1068.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
       '@modelcontextprotocol/client':
         specifier: ^2.0.0
         version: 2.0.0
@@ -6086,14 +6086,36 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  '@mistralai/mistralai@2.6.4':
-    resolution: {integrity: sha512-PPt4GyJqs2hEsWrYCJZK5f0ORmT+L2MSm75LVGD7kBLf6ZKsoDpld/FRBQXr8xG6iFCBOFJFYzvGYhUb+UCkbw==}
+  '@mistralai/mistralai@3.3.0':
+    resolution: {integrity: sha512-b5NSkQ8lFBxwZfA4Vj5oHxs7Jw7VrZRI2E9g95sigQiTi3NsQ//o6y3nDXjKUPWjksfagjH3STEFCYBg19SMvg==}
     peerDependencies:
+      '@aws-sdk/client-s3': ^3.300.0
+      '@azure/identity': ^4.0.0
+      '@azure/storage-blob': ^12.24.0
+      '@google-cloud/storage': ^7.0.0 || ^8.0.0
+      '@hpcc-js/wasm-zstd': ^1.16.0
+      '@livekit/rtc-node': ^0.13.28
+      '@msgpack/msgpack': ^3.0.0
       '@opentelemetry/api': ^1.9.0
       '@opentelemetry/exporter-trace-otlp-http': ^0.220.0
       '@opentelemetry/resources': ^2.9.0
       '@opentelemetry/sdk-trace-base': ^2.9.0
+      livekit-client: ^2.19.0
     peerDependenciesMeta:
+      '@aws-sdk/client-s3':
+        optional: true
+      '@azure/identity':
+        optional: true
+      '@azure/storage-blob':
+        optional: true
+      '@google-cloud/storage':
+        optional: true
+      '@hpcc-js/wasm-zstd':
+        optional: true
+      '@livekit/rtc-node':
+        optional: true
+      '@msgpack/msgpack':
+        optional: true
       '@opentelemetry/api':
         optional: true
       '@opentelemetry/exporter-trace-otlp-http':
@@ -6102,6 +6124,8 @@ packages:
         optional: true
       '@opentelemetry/sdk-trace-base':
         optional: true
+      livekit-client:
+        optional: true
 
   '@mjackson/node-fetch-server@0.2.0':
     resolution: {integrity: sha512-EMlH1e30yzmTpGLQjlFmaDAjyOeZhng1/XCd7DExR8PNAnG/G1tyruZxEoUe11ClnwGhGrtsdnyyUx1frSzjng==}
@@ -6114,6 +6138,16 @@ packages:
     resolution: {integrity: sha512-pJCEwGG7Lfr/+PQp9ZTwKXNeO5wzbfKL7H3MYpCorM4oFBoQrdjnBgEoqG+RjhsvS1FKrDbKux+M1HhlnGWqcA==}
     engines: {node: '>=20'}
 
+  '@modelcontextprotocol/sdk@1.32.2':
+    resolution: {integrity: sha512-SWsVtH/0vULSQStoZ6xxH2K09Li8fXYTMC64ZeogCdpZ3XSi1eCPOByV1OpuJxuI3OcmHhosDWYyii07tpPsLw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@cfworker/json-schema': ^4.1.1
+      zod: ^3.25 || ^4.0
+    peerDependenciesMeta:
+      '@cfworker/json-schema':
+        optional: true
+
   '@modelcontextprotocol/server@2.0.0':
     resolution: {integrity: sha512-YhHWdHfpFMQfd0prsEnxKeS3Qz3ytIGmsS0sth4KDjnacIT7hxk6hXHkJ9KysxlkvTM+WZAtQbbcUhdoP4Hvtw==}
     engines: {node: '>=20'}
@@ -12206,6 +12240,12 @@ packages:
     resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
     engines: {node: '>=12.0.0'}
 
+  express-rate-limit@8.7.1:
+    resolution: {integrity: sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==}
+    engines: {node: '>= 16'}
+    peerDependencies:
+      express: '>= 4.11'
+
   express@4.22.1:
     resolution: {integrity: sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==}
     engines: {node: '>= 0.10.0'}
@@ -13700,6 +13740,9 @@ packages:
   json-schema-traverse@1.0.0:
     resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
 
+  json-schema-typed@8.0.2:
+    resolution: {integrity: sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==}
+
   json-schema@0.4.0:
     resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
 
@@ -23480,10 +23523,12 @@ snapshots:
 
   '@google-cloud/promisify@2.0.3': {}
 
-  '@google/genai@1.20.0(encoding@0.1.13)(supports-color@10.0.0)':
+  '@google/genai@1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)':
     dependencies:
       google-auth-library: 9.15.1(encoding@0.1.13)(supports-color@10.0.0)
       ws: 8.21.3
+    optionalDependencies:
+      '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
     transitivePeerDependencies:
       - bufferutil
       - encoding
@@ -24235,16 +24280,21 @@ snapshots:
       - encoding
       - supports-color
 
-  '@mistralai/mistralai@2.6.4(@opentelemetry/api@1.9.0)':
+  '@mistralai/mistralai@3.3.0(@aws-sdk/client-s3@3.1068.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
     dependencies:
+      '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
       '@opentelemetry/semantic-conventions': 1.43.0
       ws: 8.21.3
       zod: 4.6.7
       zod-to-json-schema: 3.25.2(zod@4.6.7)
     optionalDependencies:
+      '@aws-sdk/client-s3': 3.1068.0
+      '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       '@opentelemetry/api': 1.9.0
     transitivePeerDependencies:
+      - '@cfworker/json-schema'
       - bufferutil
+      - supports-color
       - utf-8-validate
 
   '@mjackson/node-fetch-server@0.2.0': {}
@@ -24263,6 +24313,30 @@ snapshots:
     dependencies:
       zod: 4.6.7
 
+  '@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)':
+    dependencies:
+      '@hono/node-server': 2.0.10(hono@4.13.11)
+      ajv: 8.20.0
+      ajv-formats: 3.0.1
+      content-type: 1.0.5
+      cors: 2.8.6
+      cross-spawn: 7.0.6
+      eventsource: 3.0.7
+      eventsource-parser: 3.1.1
+      express: 5.2.1(supports-color@10.0.0)
+      express-rate-limit: 8.7.1(express@5.2.1(supports-color@10.0.0))(supports-color@10.0.0)
+      hono: 4.13.11
+      jose: 6.2.10
+      json-schema-typed: 8.0.2
+      pkce-challenge: 5.0.1
+      raw-body: 3.0.2
+      zod: 4.6.7
+      zod-to-json-schema: 3.25.2(zod@4.6.7)
+    optionalDependencies:
+      '@cfworker/json-schema': 4.1.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@modelcontextprotocol/server@2.0.0':
     dependencies:
       '@modelcontextprotocol/core': 2.0.0
@@ -31195,6 +31269,14 @@ snapshots:
 
   expect-type@1.4.0: {}
 
+  express-rate-limit@8.7.1(express@5.2.1(supports-color@10.0.0))(supports-color@10.0.0):
+    dependencies:
+      debug: 4.4.3(supports-color@10.0.0)
+      express: 5.2.1(supports-color@10.0.0)
+      ip-address: 10.7.2
+    transitivePeerDependencies:
+      - supports-color
+
   express@4.22.1(supports-color@10.0.0):
     dependencies:
       accepts: 1.3.8
@@ -33165,6 +33247,8 @@ snapshots:
 
   json-schema-traverse@1.0.0: {}
 
+  json-schema-typed@8.0.2: {}
+
   json-schema@0.4.0: {}
 
   json-stable-stringify-without-jsonify@1.0.1: {}

From 67c633f2355d9d5e91b2ccd1aa565ebbbbbb33a0 Mon Sep 17 00:00:00 2001
From: "javascript-sdk-gitflow[bot]"
 <255134079+javascript-sdk-gitflow[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 10:42:38 +0100
Subject: [PATCH 015/169] chore: Add external contributor to CHANGELOG.md
 (#25870)

This PR adds the external contributor to the CHANGELOG.md file, so that
they are credited for their contribution. See #25855

Co-authored-by: Lms24 <8420481+Lms24@users.noreply.github.com>
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 964bb5cd0f8b..91bd3bf92ded 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
-Work in this release was contributed by @lazerg. Thank you for your contribution!
+Work in this release was contributed by @lazerg. Thank you for your contributions!
 
 ## 11.10.0
 

From b364030ec85c0d583dbd7cf6f6e7c3f523c7d2cb Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Thu, 29 Oct 2026 10:55:45 +0100
Subject: [PATCH 016/169] test(e2e): Check node-openai-decisions through the
 event proxy (#25840)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Whether gen_ai spans arrive in Sentry isn't something we need
to test for each AI integration, but this app is still the only one that
calls the real OpenAI Decisions API (OpenRouter has no `/decisions`
route), so it stays, renamed, and checks the `gen_ai.decide` spans at
the local event proxy instead of polling the Sentry API. The tests now
wait about 90s at most instead of up to ~6min.

**How to review:** The assertions are the same as before, but they use
the attribute names the SDK sends (`sentry.origin`, `gen_ai.*`) instead
of the names Sentry stores, and integers are numbers instead of strings.
The `E2E_OPENAI_DECISIONS_API_KEY` scoping in `optional-e2e.yml` now
uses the new app name.

**Unsure about:** I couldn't run this locally (no Decisions key), so the
first optional E2E run on this PR is its first run.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/optional-e2e.yml            |   3 +-
 dev-packages/e2e-tests/.env.example           |   2 +-
 .../playwright.config.ts                      |  27 ---
 .../tests/send-to-sentry.test.ts              | 224 ------------------
 .../.gitignore                                |   0
 .../package.json                              |   7 +-
 .../playwright.config.ts                      |   9 +
 .../pnpm-workspace.yaml                       |   0
 .../src/app.ts                                |   6 +-
 .../src/instrument.ts                         |   3 +-
 .../start-event-proxy.mjs                     |   6 +
 .../tests/decisions.test.ts                   | 195 +++++++++++++++
 .../tsconfig.json                             |   0
 13 files changed, 220 insertions(+), 262 deletions(-)
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/playwright.config.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tests/send-to-sentry.test.ts
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/.gitignore (100%)
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/package.json (73%)
 create mode 100644 dev-packages/e2e-tests/test-applications/node-openai-decisions/playwright.config.ts
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/pnpm-workspace.yaml (100%)
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/src/app.ts (94%)
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/src/instrument.ts (63%)
 create mode 100644 dev-packages/e2e-tests/test-applications/node-openai-decisions/start-event-proxy.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/node-openai-decisions/tests/decisions.test.ts
 rename dev-packages/e2e-tests/test-applications/{node-openai-decisions-send-to-sentry => node-openai-decisions}/tsconfig.json (100%)

diff --git a/.github/workflows/optional-e2e.yml b/.github/workflows/optional-e2e.yml
index f73eaa256fc0..cff2e2437ad1 100644
--- a/.github/workflows/optional-e2e.yml
+++ b/.github/workflows/optional-e2e.yml
@@ -59,8 +59,7 @@ jobs:
       E2E_OPENROUTER_API_KEY: ${{ secrets.E2E_OPENROUTER_API_KEY }}
       # Only this app talks to OpenAI directly (OpenRouter has no Decisions route), so only it gets the key.
       E2E_OPENAI_DECISIONS_API_KEY:
-        ${{ matrix.test-application == 'node-openai-decisions-send-to-sentry' && secrets.E2E_OPENAI_DECISIONS_API_KEY ||
-        '' }}
+        ${{ matrix.test-application == 'node-openai-decisions' && secrets.E2E_OPENAI_DECISIONS_API_KEY || '' }}
       # Used by test apps that deploy a real Cloudflare Worker, e.g. cloudflare-workers-send-to-sentry
       CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
       CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
diff --git a/dev-packages/e2e-tests/.env.example b/dev-packages/e2e-tests/.env.example
index 3815cae556f0..17326f227680 100644
--- a/dev-packages/e2e-tests/.env.example
+++ b/dev-packages/e2e-tests/.env.example
@@ -17,7 +17,7 @@ E2E_TEST_SENTRY_PROJECT=
 E2E_OPENROUTER_API_KEY=
 
 # An OpenAI API key for the Decisions API (OpenRouter has no Decisions route).
-# Only needed to run node-openai-decisions-send-to-sentry locally.
+# Only needed to run node-openai-decisions locally.
 E2E_OPENAI_DECISIONS_API_KEY=
 
 # Cloudflare credentials for E2E tests that deploy a real Worker (e.g. cloudflare-workers-send-to-sentry).
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/playwright.config.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/playwright.config.ts
deleted file mode 100644
index af5ea8f0b951..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/playwright.config.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import { defineConfig } from '@playwright/test';
-
-const port = 3030;
-
-export default defineConfig({
-  testDir: './tests',
-  /*
-   * Each Sentry poll can take up to 180s. The first poll also waits the ~2min until the span can be
-   * queried, so the later polls usually pass at once. This leaves room for two full polls.
-   */
-  timeout: 400_000,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: 0,
-  // Every test spends most of its time polling Sentry, so run them all at once.
-  workers: '100%',
-  reporter: process.env.CI ? [['list'], ['junit', { outputFile: 'results.junit.xml' }]] : 'list',
-  use: {
-    baseURL: `http://localhost:${port}`,
-  },
-  webServer: {
-    command: 'pnpm start',
-    port,
-    stdout: 'pipe',
-    stderr: 'pipe',
-  },
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tests/send-to-sentry.test.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tests/send-to-sentry.test.ts
deleted file mode 100644
index f15dec0a9e8d..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tests/send-to-sentry.test.ts
+++ /dev/null
@@ -1,224 +0,0 @@
-import { expect, test } from '@playwright/test';
-import {
-  SEARCH_GEN_AI__INPUT__MESSAGES,
-  SEARCH_GEN_AI__OPERATION__NAME,
-  SEARCH_GEN_AI__OUTPUT__MESSAGES,
-  SEARCH_GEN_AI__PROVIDER__NAME,
-  SEARCH_GEN_AI__REQUEST__MODEL,
-  SEARCH_GEN_AI__RESPONSE__MODEL,
-  SEARCH_GEN_AI__USAGE__INPUT_TOKENS,
-  SEARCH_GEN_AI__USAGE__OUTPUT_TOKENS,
-  SEARCH_GEN_AI__USAGE__TOTAL_TOKENS,
-  SEARCH_ORIGIN,
-  SEARCH_SPAN__OP,
-  SEARCH_SPAN__STATUS,
-} from '@sentry/conventions/attributes/search';
-import { GEN_AI_DECIDE, HTTP_SERVER } from '@sentry/conventions/op';
-import {
-  EVENT_POLLING_OPTIONS,
-  fetchSpanAttributes,
-  fetchTrace,
-  findSpanInTrace,
-  flattenTrace,
-  traceTarget,
-} from '@sentry-internal/test-utils/cli';
-
-// Mirrors src/app.ts.
-const MODEL = 'gpt-6-luna';
-
-/**
- * What every decide span carries once Sentry has stored it, whatever the model answers. The keys are the
- * search names, e.g. `span.op` and `origin` rather than the `sentry.*` attributes the SDK sends.
- * `span.description` stays empty: ingest only derives it for ops it knows, and `gen_ai.decide` is new.
- */
-const DECIDE_SPAN_ATTRIBUTES = {
-  'span.name': `decide ${MODEL}`,
-  [SEARCH_SPAN__OP]: GEN_AI_DECIDE,
-  [SEARCH_SPAN__STATUS]: 'ok',
-  [SEARCH_ORIGIN]: 'auto.ai.openai',
-  [SEARCH_GEN_AI__OPERATION__NAME]: 'decide',
-  [SEARCH_GEN_AI__PROVIDER__NAME]: 'openai',
-  [SEARCH_GEN_AI__REQUEST__MODEL]: MODEL,
-  [SEARCH_GEN_AI__RESPONSE__MODEL]: MODEL,
-};
-
-test('records a text decision with its state, questions and answers', async ({ baseURL }) => {
-  const response = await fetch(`${baseURL}/decide`);
-  const body = await response.json();
-  expect(response.status, JSON.stringify(body)).toBe(200);
-  const { traceId }: { traceId: string } = body;
-
-  console.log(`Polling for gen_ai.decide span: sentry trace view ${traceTarget(traceId)}`);
-
-  let spanId: string | undefined;
-  await expect
-    .poll(() => (spanId = findSpanInTrace(traceId, GEN_AI_DECIDE)?.event_id), EVENT_POLLING_OPTIONS)
-    .toBeDefined();
-
-  let attributes: Record<string, unknown> | undefined;
-  await expect
-    .poll(() => (attributes = fetchSpanAttributes(traceId, spanId!)), EVENT_POLLING_OPTIONS)
-    .toMatchObject(DECIDE_SPAN_ATTRIBUTES);
-
-  // Integers come back as strings. Decisions bills input tokens only, so there are no output tokens.
-  expect(Number(attributes![SEARCH_GEN_AI__USAGE__OUTPUT_TOKENS])).toBe(0);
-  expect(Number(attributes![SEARCH_GEN_AI__USAGE__INPUT_TOKENS])).toBeGreaterThan(0);
-  expect(Number(attributes![SEARCH_GEN_AI__USAGE__TOTAL_TOKENS])).toBe(
-    Number(attributes![SEARCH_GEN_AI__USAGE__INPUT_TOKENS]),
-  );
-
-  // The request span is the segment; it ends last, so it can land after the decide span.
-  await expect
-    .poll(() => {
-      const requestSpan = flattenTrace(fetchTrace(traceId)).find(item => item.op === HTTP_SERVER);
-      return flattenTrace(requestSpan?.children ?? []).some(item => item.event_id === spanId);
-    }, EVENT_POLLING_OPTIONS)
-    .toBe(true);
-
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__INPUT__MESSAGES] as string)).toEqual([
-    {
-      type: 'evaluation',
-      state: 'I was charged twice this month and want a refund.',
-      questions: {
-        wants_refund: { type: 'predicate', instructions: 'Is a refund requested?' },
-        department: {
-          type: 'choice',
-          instructions: 'Which team should handle this?',
-          criteria: { billing: 'Charges and refunds', other: 'Anything else' },
-        },
-        urgency: {
-          type: 'score',
-          instructions: 'How urgent is this ticket?',
-          criteria: ['low', 'high'],
-        },
-      },
-    },
-  ]);
-
-  // The answers depend on the model, the shape does not.
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__OUTPUT__MESSAGES] as string)).toEqual([
-    {
-      type: 'evaluation',
-      answers: {
-        wants_refund: { type: 'predicate', probability: expect.any(Number) },
-        department: {
-          type: 'choice',
-          choice: expect.stringMatching(/^(billing|other)$/),
-          probabilities: { billing: expect.any(Number), other: expect.any(Number) },
-          confidence: expect.any(Number),
-        },
-        urgency: {
-          type: 'score',
-          score: expect.any(Number),
-          probabilities: { 0: expect.any(Number), 1: expect.any(Number) },
-          legend: { 0: 'low', 1: 'high' },
-          confidence: expect.any(Number),
-        },
-      },
-    },
-  ]);
-});
-
-test('records an image decision with its image data', async ({ baseURL }) => {
-  const response = await fetch(`${baseURL}/decide-image`);
-  const body = await response.json();
-  expect(response.status, JSON.stringify(body)).toBe(200);
-  const { traceId }: { traceId: string } = body;
-
-  console.log(`Polling for gen_ai.decide span: sentry trace view ${traceTarget(traceId)}`);
-
-  let spanId: string | undefined;
-  await expect
-    .poll(() => (spanId = findSpanInTrace(traceId, GEN_AI_DECIDE)?.event_id), EVENT_POLLING_OPTIONS)
-    .toBeDefined();
-
-  let attributes: Record<string, unknown> | undefined;
-  await expect
-    .poll(() => (attributes = fetchSpanAttributes(traceId, spanId!)), EVENT_POLLING_OPTIONS)
-    .toMatchObject(DECIDE_SPAN_ATTRIBUTES);
-
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__INPUT__MESSAGES] as string)).toEqual([
-    {
-      type: 'evaluation',
-      state: [
-        {
-          role: 'user',
-          content: [
-            { type: 'input_text', text: 'Is this image mostly red?' },
-            { type: 'input_image', image_url: expect.stringMatching(/^data:image\/png;base64,/) },
-          ],
-        },
-      ],
-      questions: { is_red: { type: 'predicate', instructions: 'Is the image mostly red?' } },
-    },
-  ]);
-
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__OUTPUT__MESSAGES] as string)).toEqual([
-    { type: 'evaluation', answers: { is_red: { type: 'predicate', probability: expect.any(Number) } } },
-  ]);
-});
-
-test('records a Vercel AI decision with the confidence of its answers', async ({ baseURL }) => {
-  const response = await fetch(`${baseURL}/vercel-ai-decide`);
-  const body = await response.json();
-  expect(response.status, JSON.stringify(body)).toBe(200);
-  const { traceId }: { traceId: string } = body;
-
-  console.log(`Polling for gen_ai.decide span: sentry trace view ${traceTarget(traceId)}`);
-
-  let spanId: string | undefined;
-  await expect
-    .poll(() => (spanId = findSpanInTrace(traceId, GEN_AI_DECIDE)?.event_id), EVENT_POLLING_OPTIONS)
-    .toBeDefined();
-
-  let attributes: Record<string, unknown> | undefined;
-  await expect
-    .poll(() => (attributes = fetchSpanAttributes(traceId, spanId!)), EVENT_POLLING_OPTIONS)
-    .toMatchObject({
-      'span.name': `decide ${MODEL}`,
-      [SEARCH_SPAN__OP]: GEN_AI_DECIDE,
-      [SEARCH_SPAN__STATUS]: 'ok',
-      [SEARCH_ORIGIN]: 'auto.ai.vercelai',
-      [SEARCH_GEN_AI__OPERATION__NAME]: 'decide',
-      [SEARCH_GEN_AI__PROVIDER__NAME]: 'openai.decision',
-      [SEARCH_GEN_AI__REQUEST__MODEL]: MODEL,
-    });
-
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__INPUT__MESSAGES] as string)).toEqual([
-    {
-      type: 'evaluation',
-      state: 'I was charged twice this month and want a refund.',
-      questions: {
-        wantsRefund: { type: 'boolean', instructions: 'Is a refund requested?' },
-        department: {
-          type: 'choice',
-          instructions: 'Which team should handle this?',
-          criteria: { billing: 'Charges and refunds', other: 'Anything else' },
-        },
-        urgency: { type: 'score', instructions: 'How urgent is this ticket?', criteria: ['low', 'high'] },
-      },
-    },
-  ]);
-
-  // The OpenAI provider moves `confidence` into its provider metadata; the span must keep it on the answers.
-  expect(JSON.parse(attributes![SEARCH_GEN_AI__OUTPUT__MESSAGES] as string)).toEqual([
-    {
-      type: 'evaluation',
-      answers: {
-        wantsRefund: { type: 'boolean', probability: expect.any(Number) },
-        department: {
-          type: 'choice',
-          choice: expect.stringMatching(/^(billing|other)$/),
-          probabilities: { billing: expect.any(Number), other: expect.any(Number) },
-          confidence: expect.any(Number),
-        },
-        urgency: {
-          type: 'score',
-          score: expect.any(Number),
-          probabilities: { 0: expect.any(Number), 1: expect.any(Number) },
-          confidence: expect.any(Number),
-        },
-      },
-    },
-  ]);
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/.gitignore b/dev-packages/e2e-tests/test-applications/node-openai-decisions/.gitignore
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/.gitignore
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/.gitignore
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-openai-decisions/package.json
similarity index 73%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/package.json
index 7785dcfc5b72..41a84ca03d45 100644
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/package.json
@@ -1,6 +1,6 @@
 {
-  "name": "node-openai-decisions-send-to-sentry",
-  "description": "The OpenAI Decisions API as a user runs it: a plain Sentry.init on an express app, real decisions requests against OpenAI through the openai client and the Vercel AI SDK, and the gen_ai.decide spans read back from a real Sentry project",
+  "name": "node-openai-decisions",
+  "description": "The OpenAI Decisions API as a user runs it: real decisions requests against OpenAI through the openai client and the Vercel AI SDK, and the gen_ai.decide spans they record",
   "version": "1.0.0",
   "private": true,
   "type": "module",
@@ -27,7 +27,6 @@
     "@sentry/conventions": "0.30.0",
     "@types/express": "^4.17.21",
     "@types/node": "^24.0.0",
-    "sentry": "~0.44.1",
     "typescript": "~5.9.0"
   },
   "sentryTest": {
@@ -35,7 +34,7 @@
     "optionalVariants": [
       {
         "build-command": "pnpm test:build-latest",
-        "label": "node-openai-decisions-send-to-sentry (latest)"
+        "label": "node-openai-decisions (latest)"
       }
     ]
   }
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions/playwright.config.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions/playwright.config.ts
new file mode 100644
index 000000000000..7fe69f2eddd2
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/playwright.config.ts
@@ -0,0 +1,9 @@
+import { getPlaywrightConfig } from '@sentry-internal/test-utils';
+
+const config = getPlaywrightConfig(
+  { startCommand: 'pnpm start' },
+  // Each test makes a real Decisions API call, which does not reliably fit the default 30s timeout.
+  { timeout: 90_000 },
+);
+
+export default config;
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/node-openai-decisions/pnpm-workspace.yaml
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/pnpm-workspace.yaml
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/pnpm-workspace.yaml
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/app.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions/src/app.ts
similarity index 94%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/app.ts
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/src/app.ts
index 20c7ba9a96c7..4a3f15581765 100644
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/app.ts
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/src/app.ts
@@ -23,8 +23,8 @@ const RED_PIXEL =
 
 const app = express();
 
-// Each route makes one `decisions.create` call and answers with the trace id, so the test can find
-// the request's spans in Sentry.
+// Each route makes one decisions call and answers with the trace id, so the test can check it picked the
+// spans of its own request.
 
 app.get('/decide', async (_req, res, next) => {
   try {
@@ -107,5 +107,5 @@ app.use((error: Error, _req: express.Request, res: express.Response, _next: expr
 const port = Number(process.env.PORT ?? 3030);
 app.listen(port, () => {
   // eslint-disable-next-line no-console
-  console.log(`node-openai-decisions-send-to-sentry listening on port ${port}`);
+  console.log(`node-openai-decisions listening on port ${port}`);
 });
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/instrument.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions/src/instrument.ts
similarity index 63%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/instrument.ts
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/src/instrument.ts
index e0a0c1807f75..9d6f0f49f765 100644
--- a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/src/instrument.ts
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/src/instrument.ts
@@ -2,6 +2,7 @@ import * as Sentry from '@sentry/node';
 
 Sentry.init({
   dsn: process.env.E2E_TEST_DSN,
-  environment: 'qa', // dynamic sampling bias to keep transactions
+  environment: 'qa',
+  tunnel: 'http://localhost:3031/',
   tracesSampleRate: 1,
 });
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions/start-event-proxy.mjs b/dev-packages/e2e-tests/test-applications/node-openai-decisions/start-event-proxy.mjs
new file mode 100644
index 000000000000..a40b90989577
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/start-event-proxy.mjs
@@ -0,0 +1,6 @@
+import { startEventProxyServer } from '@sentry-internal/test-utils';
+
+startEventProxyServer({
+  port: 3031,
+  proxyServerName: 'node-openai-decisions',
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions/tests/decisions.test.ts b/dev-packages/e2e-tests/test-applications/node-openai-decisions/tests/decisions.test.ts
new file mode 100644
index 000000000000..2f4647ecbf6e
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/node-openai-decisions/tests/decisions.test.ts
@@ -0,0 +1,195 @@
+import { expect, test } from '@playwright/test';
+import {
+  GEN_AI_INPUT_MESSAGES,
+  GEN_AI_OPERATION_NAME,
+  GEN_AI_OUTPUT_MESSAGES,
+  GEN_AI_PROVIDER_NAME,
+  GEN_AI_REQUEST_MODEL,
+  GEN_AI_RESPONSE_MODEL,
+  GEN_AI_USAGE_INPUT_TOKENS,
+  GEN_AI_USAGE_OUTPUT_TOKENS,
+  GEN_AI_USAGE_TOTAL_TOKENS,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { GEN_AI_DECIDE, HTTP_SERVER } from '@sentry/conventions/op';
+import type { SerializedStreamedSpan } from '@sentry-internal/test-utils';
+import { collectStreamedSpans, getSpanOp } from '@sentry-internal/test-utils';
+
+const APP = 'node-openai-decisions';
+
+// Mirrors src/app.ts.
+const MODEL = 'gpt-6-luna';
+
+const attr = (span: SerializedStreamedSpan, key: string): unknown => span.attributes?.[key]?.value;
+
+const isDecideSpan = (span: SerializedStreamedSpan, origin: string): boolean =>
+  getSpanOp(span) === GEN_AI_DECIDE && attr(span, SENTRY_ORIGIN) === origin;
+
+/**
+ * Calls `path` and returns its decide span once the request span (the segment) has arrived as well. The
+ * text and image decisions share an origin, so `inputMarker` tells their spans apart.
+ */
+async function requestDecideSpan(
+  baseURL: string | undefined,
+  path: string,
+  origin: string,
+  inputMarker: string,
+): Promise<SerializedStreamedSpan> {
+  const matches = (span: SerializedStreamedSpan): boolean =>
+    isDecideSpan(span, origin) && String(attr(span, GEN_AI_INPUT_MESSAGES)).includes(inputMarker);
+  const spansPromise = collectStreamedSpans(
+    APP,
+    spansOfTrace => spansOfTrace.some(matches) && spansOfTrace.some(span => span.is_segment),
+  );
+
+  const response = await fetch(`${baseURL}${path}`);
+  const body = await response.json();
+  expect(response.status, JSON.stringify(body)).toBe(200);
+
+  const spans = await spansPromise;
+  const decideSpans = spans.filter(span => getSpanOp(span) === GEN_AI_DECIDE);
+  expect(decideSpans).toHaveLength(1);
+  const decideSpan = decideSpans[0]!;
+  expect(decideSpan.trace_id).toBe(body.traceId);
+  expect(getSpanOp(spans.find(span => span.is_segment)!)).toBe(HTTP_SERVER);
+
+  return decideSpan;
+}
+
+/** What every decide span of the `openai` client carries, whatever the model answers. */
+function expectOpenAiDecideSpan(span: SerializedStreamedSpan): void {
+  expect(span.name).toBe(`decide ${MODEL}`);
+  expect(span.status).toBe('ok');
+  expect(attr(span, GEN_AI_OPERATION_NAME)).toBe('decide');
+  expect(attr(span, GEN_AI_PROVIDER_NAME)).toBe('openai');
+  expect(attr(span, GEN_AI_REQUEST_MODEL)).toBe(MODEL);
+  expect(attr(span, GEN_AI_RESPONSE_MODEL)).toBe(MODEL);
+}
+
+test('records a text decision with its state, questions and answers', async ({ baseURL }) => {
+  const span = await requestDecideSpan(baseURL, '/decide', 'auto.ai.openai', 'charged twice');
+
+  expectOpenAiDecideSpan(span);
+
+  // Decisions bills input tokens only, so there are no output tokens.
+  expect(attr(span, GEN_AI_USAGE_OUTPUT_TOKENS)).toBe(0);
+  expect(attr(span, GEN_AI_USAGE_INPUT_TOKENS)).toBeGreaterThan(0);
+  expect(attr(span, GEN_AI_USAGE_TOTAL_TOKENS)).toBe(attr(span, GEN_AI_USAGE_INPUT_TOKENS));
+
+  expect(JSON.parse(attr(span, GEN_AI_INPUT_MESSAGES) as string)).toEqual([
+    {
+      type: 'evaluation',
+      state: 'I was charged twice this month and want a refund.',
+      questions: {
+        wants_refund: { type: 'predicate', instructions: 'Is a refund requested?' },
+        department: {
+          type: 'choice',
+          instructions: 'Which team should handle this?',
+          criteria: { billing: 'Charges and refunds', other: 'Anything else' },
+        },
+        urgency: {
+          type: 'score',
+          instructions: 'How urgent is this ticket?',
+          criteria: ['low', 'high'],
+        },
+      },
+    },
+  ]);
+
+  // The answers depend on the model, the shape does not.
+  expect(JSON.parse(attr(span, GEN_AI_OUTPUT_MESSAGES) as string)).toEqual([
+    {
+      type: 'evaluation',
+      answers: {
+        wants_refund: { type: 'predicate', probability: expect.any(Number) },
+        department: {
+          type: 'choice',
+          choice: expect.stringMatching(/^(billing|other)$/),
+          probabilities: { billing: expect.any(Number), other: expect.any(Number) },
+          confidence: expect.any(Number),
+        },
+        urgency: {
+          type: 'score',
+          score: expect.any(Number),
+          probabilities: { 0: expect.any(Number), 1: expect.any(Number) },
+          legend: { 0: 'low', 1: 'high' },
+          confidence: expect.any(Number),
+        },
+      },
+    },
+  ]);
+});
+
+test('records an image decision with its image data', async ({ baseURL }) => {
+  const span = await requestDecideSpan(baseURL, '/decide-image', 'auto.ai.openai', 'mostly red');
+
+  expectOpenAiDecideSpan(span);
+
+  expect(JSON.parse(attr(span, GEN_AI_INPUT_MESSAGES) as string)).toEqual([
+    {
+      type: 'evaluation',
+      state: [
+        {
+          role: 'user',
+          content: [
+            { type: 'input_text', text: 'Is this image mostly red?' },
+            { type: 'input_image', image_url: expect.stringMatching(/^data:image\/png;base64,/) },
+          ],
+        },
+      ],
+      questions: { is_red: { type: 'predicate', instructions: 'Is the image mostly red?' } },
+    },
+  ]);
+
+  expect(JSON.parse(attr(span, GEN_AI_OUTPUT_MESSAGES) as string)).toEqual([
+    { type: 'evaluation', answers: { is_red: { type: 'predicate', probability: expect.any(Number) } } },
+  ]);
+});
+
+test('records a Vercel AI decision with the confidence of its answers', async ({ baseURL }) => {
+  const span = await requestDecideSpan(baseURL, '/vercel-ai-decide', 'auto.ai.vercelai', 'charged twice');
+
+  expect(span.name).toBe(`decide ${MODEL}`);
+  expect(span.status).toBe('ok');
+  expect(attr(span, GEN_AI_OPERATION_NAME)).toBe('decide');
+  expect(attr(span, GEN_AI_PROVIDER_NAME)).toBe('openai.decision');
+  expect(attr(span, GEN_AI_REQUEST_MODEL)).toBe(MODEL);
+
+  expect(JSON.parse(attr(span, GEN_AI_INPUT_MESSAGES) as string)).toEqual([
+    {
+      type: 'evaluation',
+      state: 'I was charged twice this month and want a refund.',
+      questions: {
+        wantsRefund: { type: 'boolean', instructions: 'Is a refund requested?' },
+        department: {
+          type: 'choice',
+          instructions: 'Which team should handle this?',
+          criteria: { billing: 'Charges and refunds', other: 'Anything else' },
+        },
+        urgency: { type: 'score', instructions: 'How urgent is this ticket?', criteria: ['low', 'high'] },
+      },
+    },
+  ]);
+
+  // The OpenAI provider moves `confidence` into its provider metadata; the span must keep it on the answers.
+  expect(JSON.parse(attr(span, GEN_AI_OUTPUT_MESSAGES) as string)).toEqual([
+    {
+      type: 'evaluation',
+      answers: {
+        wantsRefund: { type: 'boolean', probability: expect.any(Number) },
+        department: {
+          type: 'choice',
+          choice: expect.stringMatching(/^(billing|other)$/),
+          probabilities: { billing: expect.any(Number), other: expect.any(Number) },
+          confidence: expect.any(Number),
+        },
+        urgency: {
+          type: 'score',
+          score: expect.any(Number),
+          probabilities: { 0: expect.any(Number), 1: expect.any(Number) },
+          confidence: expect.any(Number),
+        },
+      },
+    },
+  ]);
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tsconfig.json b/dev-packages/e2e-tests/test-applications/node-openai-decisions/tsconfig.json
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/node-openai-decisions-send-to-sentry/tsconfig.json
rename to dev-packages/e2e-tests/test-applications/node-openai-decisions/tsconfig.json

From e0d6c88a76945897726a4ed437b5823711b3520d Mon Sep 17 00:00:00 2001
From: Vladimir Babin <vovababin@gmail.com>
Date: Thu, 29 Oct 2026 19:34:11 +0800
Subject: [PATCH 017/169] fix(core): Only create Supabase db spans when there
 is a parent span (#25807)

fix(core): Only create Supabase db spans when there is a parent span
---
 .../supabase-nextjs/tests/performance.test.ts | 50 +++++++++++++------
 packages/core/src/integrations/supabase.ts    |  2 +
 .../test/lib/integrations/supabase.test.ts    | 38 ++++++++++++++
 3 files changed, 76 insertions(+), 14 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/supabase-nextjs/tests/performance.test.ts b/dev-packages/e2e-tests/test-applications/supabase-nextjs/tests/performance.test.ts
index 79c9861008f7..6b28f1ee0e9f 100644
--- a/dev-packages/e2e-tests/test-applications/supabase-nextjs/tests/performance.test.ts
+++ b/dev-packages/e2e-tests/test-applications/supabase-nextjs/tests/performance.test.ts
@@ -1,5 +1,10 @@
 import { expect, test } from '@playwright/test';
-import { collectStreamedSpansUntilSegment, getSpanOp, waitForStreamedSpan } from '@sentry-internal/test-utils';
+import {
+  collectStreamedSpansUntilSegment,
+  getSpanOp,
+  waitForEnvelopeItem,
+  waitForStreamedSpan,
+} from '@sentry-internal/test-utils';
 
 type StreamedSpan = Awaited<ReturnType<typeof waitForStreamedSpan>>;
 
@@ -65,7 +70,21 @@ test('Sends client-side Supabase db-operation spans to Sentry', async ({ page })
     );
   });
 
-  const insertSpanPromise = waitForStreamedSpan('supabase-nextjs', span => span.name === 'insert todos');
+  let insertSpanSent = false;
+  waitForStreamedSpan('supabase-nextjs', span => {
+    if (span.name === 'insert todos') {
+      insertSpanSent = true;
+    }
+    return false;
+  }).catch(() => {});
+
+  const clientReportPromise = waitForEnvelopeItem('supabase-nextjs', ([header, payload]) => {
+    if (header.type !== 'client_report') {
+      return false;
+    }
+    const { discarded_events } = payload as { discarded_events: Array<{ reason: string; category: string }> };
+    return discarded_events.some(e => e.reason === 'no_parent_span' && e.category === 'span');
+  });
 
   await page.goto('/');
 
@@ -78,15 +97,21 @@ test('Sends client-side Supabase db-operation spans to Sentry', async ({ page })
   // Wait for login to complete
   await page.waitForSelector('button:has-text("Add")');
 
+  const [pageloadSpan, selectSpan] = await Promise.all([pageloadSpanPromise, selectSpanPromise]);
+
   // Add a new todo entry
-  await page.locator('input[id=new-task-text]').fill('test');
+  const task = `test-${Date.now()}`;
+  await page.locator('input[id=new-task-text]').fill(task);
   await page.locator('button[id=add-task]').click();
+  await page.getByText(task).waitFor();
+
+  // Hiding the page flushes the pending client report.
+  await page.evaluate(() => {
+    Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => 'hidden' });
+    document.dispatchEvent(new Event('visibilitychange'));
+  });
 
-  const [pageloadSpan, selectSpan, insertSpan] = await Promise.all([
-    pageloadSpanPromise,
-    selectSpanPromise,
-    insertSpanPromise,
-  ]);
+  await clientReportPromise;
 
   // Client-side database query data is collected by default.
   expectDbSpan(selectSpan, 'select todos', {
@@ -94,13 +119,10 @@ test('Sends client-side Supabase db-operation spans to Sentry', async ({ page })
     'db.query': { value: ['select(*)', 'filter(order, asc)'], type: 'array' },
   });
   expect(selectSpan.trace_id).toBe(pageloadSpan.trace_id);
+  expect(selectSpan.parent_span_id).toBe(pageloadSpan.span_id);
 
-  // The insert is triggered long after the pageload span has ended, so it is streamed on its own
-  // rather than as a child of the pageload span.
-  expectDbSpan(insertSpan, 'insert todos', {
-    'db.operation.name': { value: 'insert', type: 'string' },
-    'db.query': { value: ['select(*)'], type: 'array' },
-  });
+  // The insert runs after the pageload span has ended, so it has no parent and no span is sent.
+  expect(insertSpanSent).toBe(false);
 });
 
 test('Sends server-side Supabase db-operation spans to Sentry', async ({ baseURL }) => {
diff --git a/packages/core/src/integrations/supabase.ts b/packages/core/src/integrations/supabase.ts
index 187659aa6345..16b6f95588b7 100644
--- a/packages/core/src/integrations/supabase.ts
+++ b/packages/core/src/integrations/supabase.ts
@@ -295,6 +295,7 @@ function instrumentAuthOperation(operation: AuthOperationFn, isAdmin = false): A
       return startSpanManual(
         {
           name,
+          onlyIfParent: true,
           attributes: {
             [SENTRY_ORIGIN]: 'auto.db.supabase',
             [SENTRY_OP]: DB,
@@ -479,6 +480,7 @@ function instrumentPostgRESTFilterBuilder(
         return startSpanManual(
           {
             name,
+            onlyIfParent: true,
             attributes,
           },
           span => {
diff --git a/packages/core/test/lib/integrations/supabase.test.ts b/packages/core/test/lib/integrations/supabase.test.ts
index cae6111f7e4d..dcb0233abdb0 100644
--- a/packages/core/test/lib/integrations/supabase.test.ts
+++ b/packages/core/test/lib/integrations/supabase.test.ts
@@ -645,4 +645,42 @@ describe('Supabase Integration', () => {
       expect(spanOptions.attributes['db.operation.name']).toBe('upsert');
     });
   });
+
+  describe('onlyIfParent', () => {
+    beforeEach(() => {
+      vi.spyOn(exportsModule, 'captureException').mockImplementation(() => '');
+      vi.spyOn(breadcrumbModule, 'addBreadcrumb').mockImplementation(() => {});
+    });
+
+    afterEach(() => {
+      vi.restoreAllMocks();
+    });
+
+    it('starts the PostgREST span with onlyIfParent so it is dropped without an active parent', async () => {
+      tracingMocks.startSpanManual.mockClear();
+      const client = createMockSupabaseClient({ status: 200, data: [] });
+      instrumentSupabaseClient(client);
+
+      await (client as any).from('todos').select('*').then();
+
+      expect(tracingMocks.startSpanManual).toHaveBeenCalledWith(
+        expect.objectContaining({ onlyIfParent: true }),
+        expect.any(Function),
+      );
+    });
+
+    it('starts the auth span with onlyIfParent so it is dropped without an active parent', async () => {
+      tracingMocks.startSpanManual.mockClear();
+      const client = createMockSupabaseClient(undefined) as any;
+      client.auth.signInWithPassword = vi.fn(() => Promise.resolve({ data: { user: {} }, error: null }));
+      instrumentSupabaseClient(client);
+
+      await client.auth.signInWithPassword({ email: 'a@b.c', password: 'pw' });
+
+      expect(tracingMocks.startSpanManual).toHaveBeenCalledWith(
+        expect.objectContaining({ onlyIfParent: true }),
+        expect.any(Function),
+      );
+    });
+  });
 });

From c5216338bce0fcc18c53ee3b8569d5931525a3fa Mon Sep 17 00:00:00 2001
From: "javascript-sdk-gitflow[bot]"
 <255134079+javascript-sdk-gitflow[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 12:36:06 +0100
Subject: [PATCH 018/169] chore: Add external contributor to CHANGELOG.md
 (#25872)

This PR adds the external contributor to the CHANGELOG.md file, so that
they are credited for their contribution. See #25807

Co-authored-by: andreiborza <168741329+andreiborza@users.noreply.github.com>
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 91bd3bf92ded..29fecaa4a5ad 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
-Work in this release was contributed by @lazerg. Thank you for your contributions!
+Work in this release was contributed by @lazerg and @chiliec. Thank you for your contributions!
 
 ## 11.10.0
 

From 90c1ebb9ae6e7521de3e45acb9cc01f506d860bf Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 13:00:08 +0100
Subject: [PATCH 019/169] fix(core): Respect header collection for session user
 agents (#25871)

**Why:** Sessions still automatically collected the browser's User-Agent
when `dataCollection.httpHeaders.request` disabled or filtered it for
events and spans. Apply the same filtering to sessions while preserving
explicitly supplied session options.

Related to #25843

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 packages/core/src/exports.ts           | 10 +++++---
 packages/core/test/lib/session.test.ts | 35 +++++++++++++++++++++++++-
 2 files changed, 41 insertions(+), 4 deletions(-)

diff --git a/packages/core/src/exports.ts b/packages/core/src/exports.ts
index 19e9509ea3a0..ce531805a997 100644
--- a/packages/core/src/exports.ts
+++ b/packages/core/src/exports.ts
@@ -10,6 +10,7 @@ import type { Primitive } from './types/misc';
 import type { Session, SessionContext } from './types/session';
 import type { SeverityLevel } from './types/severity';
 import type { User } from './types/user';
+import { filterKeyValueData } from './utils/data-collection/filterKeyValueData';
 import { debug } from './utils/debug-logger';
 import type { ExclusiveEventHintOrCaptureContext } from './utils/prepareEvent';
 import { parseEventHintOrCaptureContext } from './utils/prepareEvent';
@@ -252,12 +253,15 @@ export function startSession(context?: SessionContext): Session {
 
   const { user } = getCombinedScopeData(isolationScope, getCurrentScope());
 
-  // Will fetch userAgent if called from browser sdk
-  const { userAgent } = GLOBAL_OBJ.navigator || {};
+  let userAgent = GLOBAL_OBJ.navigator?.userAgent;
+  if (userAgent) {
+    const headerCollection = getClient()?.getDataCollectionOptions().httpHeaders.request ?? true;
+    userAgent = filterKeyValueData({ 'User-Agent': userAgent }, headerCollection)['User-Agent'];
+  }
 
   const session = makeSession({
     user,
-    ...(userAgent && { userAgent }),
+    userAgent,
     ...context,
   });
 
diff --git a/packages/core/test/lib/session.test.ts b/packages/core/test/lib/session.test.ts
index dfe3a764af16..f23c89e5231d 100644
--- a/packages/core/test/lib/session.test.ts
+++ b/packages/core/test/lib/session.test.ts
@@ -1,7 +1,40 @@
-import { describe, expect, it, test } from 'vitest';
+import { afterEach, beforeEach, describe, expect, it, test, vi } from 'vitest';
+import { getCurrentScope } from '../../src/currentScopes';
+import { startSession } from '../../src/exports';
 import { closeSession, makeSession, updateSession } from '../../src/session';
 import type { SessionContext } from '../../src/types/session';
 import { timestampInSeconds } from '../../src/utils/time';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
+import { resetGlobals } from '../testutils';
+
+describe('startSession', () => {
+  const userAgent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/130.0.0.0 Safari/537.36';
+
+  beforeEach(() => {
+    resetGlobals();
+    vi.stubGlobal('navigator', { userAgent });
+    getCurrentScope().setClient(
+      new TestClient(getDefaultTestClientOptions({ dataCollection: { httpHeaders: { request: false } } })),
+    );
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    resetGlobals();
+  });
+
+  it('omits the automatic user agent when request header collection is disabled', () => {
+    const session = startSession();
+
+    expect(session.toJSON().attrs?.user_agent).toBeUndefined();
+  });
+
+  it('preserves an explicit user agent when request header collection is disabled', () => {
+    const session = startSession({ userAgent: 'custom-user-agent' });
+
+    expect(session.toJSON().attrs?.user_agent).toBe('custom-user-agent');
+  });
+});
 
 describe('Session', () => {
   it('initializes with the proper defaults', () => {

From 1e3ef4111f20d5b1a06a02cc4506b60c2a362bf3 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 13:44:53 +0100
Subject: [PATCH 020/169] fix(core): Enforce linked error limits for aggregate
 and suppressed errors (#25873)

This fixes a bug where `AggregateError` or `SuppressedError` children
did not respect the `linkedErrorsIntegration`'s maximum exception limit.
By checking the limit before converting each child error to a Sentry
exception, we enforce it for all three branches (regular errors chained
via `cause` or another property, aggregate errors, and suppressed
errors).

Closes #25836

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 packages/core/src/utils/aggregate-errors.ts   |  4 +-
 .../test/lib/utils/aggregate-errors.test.ts   | 44 +++++++++++++++++++
 2 files changed, 46 insertions(+), 2 deletions(-)

diff --git a/packages/core/src/utils/aggregate-errors.ts b/packages/core/src/utils/aggregate-errors.ts
index a481ea7ab28c..a7202c963bdc 100644
--- a/packages/core/src/utils/aggregate-errors.ts
+++ b/packages/core/src/utils/aggregate-errors.ts
@@ -76,7 +76,7 @@ function aggregateExceptionsFromError(
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/AggregateError
   if (isExceptionGroup(error)) {
     error.errors.forEach((childError, i) => {
-      if (isError(childError)) {
+      if (newExceptions.length < limit + 1 && isError(childError)) {
         applyExceptionGroupFieldsForParentException(exception, exceptionId, error);
         const newException = exceptionFromErrorImplementation(parser, childError);
         const newExceptionId = newExceptions.length;
@@ -102,7 +102,7 @@ function aggregateExceptionsFromError(
   if (isSuppressedError(error)) {
     ['error', 'suppressed'].forEach(property => {
       const childError = error[property];
-      if (isError(childError)) {
+      if (newExceptions.length < limit + 1 && isError(childError)) {
         applyExceptionGroupFieldsForParentException(exception, exceptionId, error);
         const newException = exceptionFromErrorImplementation(parser, childError);
         const newExceptionId = newExceptions.length;
diff --git a/packages/core/test/lib/utils/aggregate-errors.test.ts b/packages/core/test/lib/utils/aggregate-errors.test.ts
index 2ca4891710a9..34498347cf31 100644
--- a/packages/core/test/lib/utils/aggregate-errors.test.ts
+++ b/packages/core/test/lib/utils/aggregate-errors.test.ts
@@ -273,6 +273,50 @@ describe('applyAggregateErrorsToEvent()', () => {
     });
   });
 
+  test('limits AggregateError children', () => {
+    const error = new FakeAggregateError(
+      Array.from({ length: 20 }, (_, i) => new Error(`child-${i}`)),
+      'group',
+    );
+    const event: Event = { exception: { values: [exceptionFromError(stackParser, error)] } };
+
+    applyAggregateErrorsToEvent(exceptionFromError, stackParser, 'cause', 5, event, { originalException: error });
+
+    expect(event.exception?.values?.map(exception => exception.value)).toEqual([
+      'child-4',
+      'child-3',
+      'child-2',
+      'child-1',
+      'child-0',
+      'group',
+    ]);
+  });
+
+  test('limits SuppressedError siblings after traversing a nested error', () => {
+    const inner = new FakeSuppressedError(new Error('dispose failed'), new Error('original'), 'inner');
+    const error = new FakeSuppressedError(inner, new Error('outer suppressed'), 'outer');
+    const event: Event = { exception: { values: [exceptionFromError(stackParser, error)] } };
+
+    applyAggregateErrorsToEvent(exceptionFromError, stackParser, 'cause', 2, event, { originalException: error });
+
+    expect(event.exception?.values?.map(exception => exception.value)).toEqual(['dispose failed', 'inner', 'outer']);
+  });
+
+  test('shares the limit across causes, SuppressedErrors, and AggregateErrors', () => {
+    const cause = new FakeSuppressedError(new Error('dispose failed'), new Error('original'), 'cause');
+    const error = new CustomAggregateError([new Error('child')], 'group', cause);
+    const event: Event = { exception: { values: [exceptionFromError(stackParser, error)] } };
+
+    applyAggregateErrorsToEvent(exceptionFromError, stackParser, 'cause', 3, event, { originalException: error });
+
+    expect(event.exception?.values?.map(exception => exception.value)).toEqual([
+      'original',
+      'dispose failed',
+      'cause',
+      'group',
+    ]);
+  });
+
   test('should keep the original mechanism type for the root exception', () => {
     const fakeAggregateError = new FakeAggregateError(
       [new Error('Nested Error 1'), new Error('Nested Error 2')],

From ab1bc56d59ed75a0b2a330c9ef172a03a662bdfb Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Thu, 29 Oct 2026 14:09:54 +0100
Subject: [PATCH 021/169] fix(server-utils): Use onlyIfParent for Tedious spans
 (#25876)

**Why:** Consolidating to use the core `onlyIfParent` logic everywhere
so we can get rid of `requiresParentSpan`.

---------

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../tracing/tedious/scenario-no-parent.mjs    | 51 -------------------
 .../suites/tracing/tedious/test.ts            | 39 --------------
 .../server-utils/src/integrations/tedious.ts  |  6 +--
 3 files changed, 1 insertion(+), 95 deletions(-)
 delete mode 100644 dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs

diff --git a/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs b/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs
deleted file mode 100644
index a9ec1c51be16..000000000000
--- a/dev-packages/node-integration-tests/suites/tracing/tedious/scenario-no-parent.mjs
+++ /dev/null
@@ -1,51 +0,0 @@
-import * as Sentry from '@sentry/node';
-import { waitForConnection } from '@sentry-internal/node-integration-tests';
-import { Connection, Request } from 'tedious';
-
-function connect() {
-  return new Promise((resolve, reject) => {
-    const connection = new Connection({
-      server: '127.0.0.1',
-      authentication: {
-        type: 'default',
-        options: { userName: 'sa', password: 'TESTing123' },
-      },
-      options: { port: 1433, encrypt: false },
-    });
-
-    connection.on('connect', err => {
-      if (err) {
-        connection.close();
-        reject(err);
-      } else {
-        resolve(connection);
-      }
-    });
-    connection.connect();
-  });
-}
-
-function query(connection, sql) {
-  return new Promise((resolve, reject) => {
-    connection.execSql(new Request(sql, err => (err ? reject(err) : resolve())));
-  });
-}
-
-async function run() {
-  const connection = await waitForConnection(connect);
-
-  await query(connection, 'SELECT 1 AS before_parent');
-
-  const parent = Sentry.startInactiveSpan({ name: 'parent operation' });
-  await Sentry.withActiveSpan(parent, () => query(connection, 'SELECT 2 AS inside_parent'));
-
-  await query(connection, 'SELECT 3 AS after_parent');
-  connection.close();
-
-  // Flush every query before the parent signals that span collection is complete.
-  await Sentry.flush();
-  parent.end();
-  await Sentry.flush();
-}
-
-run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts b/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
index e6cd9de30da0..31dd20a0c712 100644
--- a/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/tedious/test.ts
@@ -1,4 +1,3 @@
-import type { SerializedStreamedSpan } from '@sentry/core';
 import {
   DB_NAMESPACE,
   DB_QUERY_SUMMARY,
@@ -123,44 +122,6 @@ describeWithDockerCompose('tedious auto instrumentation', { workingDirectory: [_
     });
   });
 
-  createEsmAndCjsTests(__dirname, 'scenario-no-parent.mjs', 'instrument.mjs', (createTestRunner, test) => {
-    test('only instruments queries with an active parent span', async () => {
-      const runner = createTestRunner();
-      const dbSpans = new Map<string, SerializedStreamedSpan>();
-      const spansPromise = runner.collectStreamedSpans(spans => {
-        for (const span of spans) {
-          if (span.attributes[SENTRY_ORIGIN]?.value === ORIGIN) {
-            dbSpans.set(span.span_id, span);
-          }
-        }
-        return spans.some(span => span.is_segment && span.name === 'parent operation');
-      });
-
-      await runner.unordered().start().completed();
-
-      const spans = await spansPromise;
-      const parent = spans.find(span => span.is_segment && span.name === 'parent operation');
-      expect(parent).toBeDefined();
-      expect(
-        Array.from(dbSpans.values(), span => ({
-          query: span.attributes[DB_QUERY_TEXT]?.value,
-          database: span.attributes[DB_NAMESPACE]?.value,
-          parentSpanId: span.parent_span_id,
-          traceId: span.trace_id,
-          isSegment: span.is_segment,
-        })),
-      ).toEqual([
-        {
-          query: 'SELECT ? AS inside_parent',
-          database: 'master',
-          parentSpanId: parent?.span_id,
-          traceId: parent?.trace_id,
-          isSegment: false,
-        },
-      ]);
-    });
-  });
-
   // tedious 20 requires Node >= 22.
   describe.runIf(supports({ min: 22 }))('tedious v20', () => {
     createEsmAndCjsTests(
diff --git a/packages/server-utils/src/integrations/tedious.ts b/packages/server-utils/src/integrations/tedious.ts
index 42c3f1654c06..825ababebd68 100644
--- a/packages/server-utils/src/integrations/tedious.ts
+++ b/packages/server-utils/src/integrations/tedious.ts
@@ -7,7 +7,6 @@ import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import type { IntegrationFn, SpanAttributes } from '@sentry/core';
 import {
   defineIntegration,
-  getActiveSpan,
   getClient,
   hasSpanStreamingEnabled,
   SPAN_STATUS_ERROR,
@@ -111,10 +110,6 @@ function subscribeConnect(): void {
 
 function subscribeQuery(channelName: string, operation: string): void {
   diagnosticsChannel.tracingChannel(channelName).start.subscribe(message => {
-    if (!getActiveSpan()) {
-      return;
-    }
-
     const data = message as TediousQueryChannelContext;
     const connection = data.self;
     const request = data.arguments[0];
@@ -162,6 +157,7 @@ function subscribeQuery(channelName: string, operation: string): void {
           ? querySummary || getLowCardinalitySecondarySpanName(operation, databaseName, sql, request.table)
           : queryText || getSecondarySpanName(operation, databaseName, request.table),
       attributes,
+      onlyIfParent: true,
     });
 
     const endSpan = once((err?: { message?: string }): void => {

From 2c5b8f8662fb3bb2e5b60eddce6f1747eee360be Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Thu, 29 Oct 2026 14:11:59 +0100
Subject: [PATCH 022/169] fix(server-utils): Use onlyIfParent for Firestore
 spans (#25877)

**Why:** Consolidating to use the core `onlyIfParent` logic everywhere
so we can get rid of `requiresParentSpan`.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../suites/orchestrion-firebase/test.ts       | 47 -------------------
 .../node-firebase/firestore-app/src/app.ts    | 12 -----
 .../node-firebase/tests/spans.test.ts         | 26 +---------
 .../src/integrations/firebase/firestore.ts    |  1 +
 .../integrations/firebase/instrumentation.ts  | 21 ++++-----
 5 files changed, 11 insertions(+), 96 deletions(-)

diff --git a/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts b/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
index abc063529480..cb131997dca9 100644
--- a/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
+++ b/dev-packages/deno-integration-tests/suites/orchestrion-firebase/test.ts
@@ -7,7 +7,6 @@ import { assert } from 'https://deno.land/std@0.212.0/assert/assert.ts';
 import { assertExists } from 'https://deno.land/std@0.212.0/assert/assert_exists.ts';
 import { assertEquals } from 'https://deno.land/std@0.212.0/assert/assert_equals.ts';
 import { getSpanOp, resetGlobals, spanSink, withTimeout } from '../../src/index.ts';
-import { DB_QUERY } from '@sentry/conventions/op';
 
 Deno.test('firebase instrumentation: included in default integrations (Deno 2.8.0+)', () => {
   resetGlobals();
@@ -73,49 +72,3 @@ Deno.test('firebase instrumentation: orchestrion @firebase/firestore:add-doc cha
   assertEquals(fsSpan.attributes['firebase.firestore.options.projectId']?.value, 'demo-project');
   assertEquals(fsSpan.attributes['sentry.origin']?.value, 'auto.db.firebase.firestore');
 });
-
-Deno.test('firebase instrumentation: only creates firestore db spans with an active parent span', async () => {
-  resetGlobals();
-  const sink = spanSink();
-  init({
-    dsn: 'https://username@domain/123',
-    tracesSampleRate: 1,
-    transport: sink.transport,
-  });
-
-  const channel = tracingChannel('orchestrion:@firebase/firestore:add-doc');
-
-  function addDoc(path: string): void {
-    const reference = {
-      path,
-      type: 'collection',
-      firestore: {
-        app: { name: '[DEFAULT]', options: { projectId: 'demo-project', appId: 'demo-app' } },
-        toJSON: () => ({ settings: {} }),
-      },
-    };
-    const ctx: Record<string, unknown> = { arguments: [reference] };
-    channel.start.runStores(ctx, () => undefined);
-    channel.end.publish(ctx);
-    ctx.result = {};
-    channel.asyncStart.runStores(ctx, () => undefined);
-    channel.asyncEnd.publish(ctx);
-  }
-
-  addDoc('before_parent');
-  startSpan({ name: 'parent', op: 'test' }, () => addDoc('inside_parent'));
-  addDoc('after_parent');
-
-  await flush();
-
-  const parent = await withTimeout(
-    sink.waitFor(span => span.is_segment && span.name === 'parent'),
-    5000,
-    "'parent' segment span",
-  );
-  const dbSpans = sink.spans.filter(span => getSpanOp(span) === DB_QUERY);
-  assertEquals(
-    dbSpans.map(span => ({ name: span.name, parentSpanId: span.parent_span_id, isSegment: span.is_segment })),
-    [{ name: 'addDoc inside_parent', parentSpanId: parent.span_id, isSegment: false }],
-  );
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts b/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
index 83d04bebd136..486aa06b5ffc 100644
--- a/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
+++ b/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/src/app.ts
@@ -66,18 +66,6 @@ expressApp.get('/test', async function (req, res) {
   res.send({ version: 'v1' });
 });
 
-expressApp.get('/test-no-parent', async function (req, res) {
-  const noParentRef = collection(db, 'no-parent');
-  await addDoc(noParentRef, { name: 'Without Parent' });
-  // Flush before the marker so a span from the call above would reach the proxy before it.
-  await Sentry.flush();
-  await Sentry.startSpan({ name: 'No Parent Marker' }, async () => {
-    await addDoc(noParentRef, { name: 'With Parent' });
-  });
-  await Sentry.flush();
-  res.send({ version: 'v1' });
-});
-
 expressApp.listen(port, () => {
   console.log(`Example app listening on port ${port}`);
 });
diff --git a/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts b/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
index 836238fc3add..cd9717ccdea0 100644
--- a/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
+++ b/dev-packages/e2e-tests/test-applications/node-firebase/tests/spans.test.ts
@@ -1,6 +1,5 @@
 import { expect, test } from '@playwright/test';
-import type { SerializedStreamedSpan } from '@sentry-internal/test-utils';
-import { collectStreamedSpansUntilSegment, waitForStreamedSpans } from '@sentry-internal/test-utils';
+import { collectStreamedSpansUntilSegment } from '@sentry-internal/test-utils';
 
 // The orchestrion spans are Sentry-native, so they carry no span-kind attribute (`sentry.kind`).
 const origin = 'auto.db.firebase.firestore';
@@ -50,26 +49,3 @@ test('should add, set, get and delete document', async ({ baseURL }) => {
   expect(children).toHaveLength(4);
   expect(children).toEqual(expect.arrayContaining([spanAddDoc, spanSetDocs, spanGetDocs, spanDeleteDoc]));
 });
-
-test('does not create firestore spans without a parent span', async ({ baseURL }) => {
-  const seen: SerializedStreamedSpan[] = [];
-  // A span that is never sent cannot be awaited, so wait for a marker span sent after the Firestore call.
-  const markerPromise = waitForStreamedSpans('node-firebase', spans => {
-    seen.push(...spans);
-    return spans.some(span => span.is_segment && span.name === 'No Parent Marker');
-  });
-
-  const response = await fetch(`${baseURL}/test-no-parent`);
-  expect(response.ok).toBe(true);
-  await markerPromise;
-
-  const marker = seen.find(span => span.is_segment && span.name === 'No Parent Marker')!;
-  // Only the call inside the marker span may produce a span, as its child.
-  expect(seen.filter(span => span.name === 'addDoc no-parent')).toEqual([
-    expect.objectContaining({
-      is_segment: false,
-      parent_span_id: marker.span_id,
-      trace_id: marker.trace_id,
-    }),
-  ]);
-});
diff --git a/packages/server-utils/src/integrations/firebase/firestore.ts b/packages/server-utils/src/integrations/firebase/firestore.ts
index 155e07797d1a..3154e51869be 100644
--- a/packages/server-utils/src/integrations/firebase/firestore.ts
+++ b/packages/server-utils/src/integrations/firebase/firestore.ts
@@ -22,6 +22,7 @@ import type { FirebaseApp, FirebaseOptions, FirestoreReference, FirestoreSetting
 export function startFirestoreSpan(spanName: string, reference: FirestoreReference): Span {
   return startInactiveSpan({
     name: `${spanName} ${reference.path}`,
+    onlyIfParent: true,
     attributes: {
       [SENTRY_OP]: DB_QUERY,
       [SENTRY_KIND]: 'client',
diff --git a/packages/server-utils/src/integrations/firebase/instrumentation.ts b/packages/server-utils/src/integrations/firebase/instrumentation.ts
index 246ebd9895d8..b10534aea30a 100644
--- a/packages/server-utils/src/integrations/firebase/instrumentation.ts
+++ b/packages/server-utils/src/integrations/firebase/instrumentation.ts
@@ -37,18 +37,15 @@ const NOOP = (): void => {};
 
 export function instrumentFirebase() {
   for (const { channel, spanName, useParent } of FIRESTORE_OPERATIONS) {
-    bindTracingChannelToSpan(
-      diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(channel),
-      data =>
-        safeChannelCallback(() => {
-          const reference = data.arguments[0] as FirestoreReference | undefined;
-          if (!reference) {
-            return undefined;
-          }
-          const spanReference = useParent ? reference.parent || reference : reference;
-          return startFirestoreSpan(spanName, spanReference);
-        }),
-      { requiresParentSpan: true },
+    bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(channel), data =>
+      safeChannelCallback(() => {
+        const reference = data.arguments[0] as FirestoreReference | undefined;
+        if (!reference) {
+          return undefined;
+        }
+        const spanReference = useParent ? reference.parent || reference : reference;
+        return startFirestoreSpan(spanName, spanReference);
+      }),
     );
   }
 

From 0f28207b337adb81798bf3070a187e05c8c7616b Mon Sep 17 00:00:00 2001
From: Tim Fish <tim@timfish.uk>
Date: Thu, 29 Oct 2026 14:41:57 +0100
Subject: [PATCH 023/169] feat(bundler-plugins): Add
 `sourcemaps.deleteSourcemapsAfterUpload` and staged uploads (#25637)

First of a stack that lets the bundler plugins handle source maps
without any user configuration (getsentry/sentry-javascript#25609).
Today a user has to set the bundler's source map mode to hidden and
write `filesToDeleteAfterUpload` globs, and wrong globs leave maps in
production or delete files that were never uploaded. The follow-up PRs
wire each bundler plugin to the pieces added here; this one changes no
build output.

The new `sourcemaps.deleteSourcemapsAfterUpload` option defaults to
"auto": the plugin removes source maps only when it turned them on
itself, `true` also removes maps the user enabled, and `false` never
removes them, while the plugin still turns on hidden maps when the
setting is unset so they can be uploaded. That matches the meaning of
the option of the same name in `@sentry/nextjs`, so Next.js can pass it
through in a follow-up. A small decision helper maps the user's source
map setting onto "enable hidden maps" and "delete after upload", and
warns when maps are turned off or inlined. The option also lands on the
shared `SourceMapsOptions` type in core, so the framework SDKs can
expose it later.

The plugin manager gains an upload staging folder that a bundler plugin
fills from its pre-write hook with each chunk and its map, before the
bundler drops the map from its output. `uploadSourcemaps` uploads the
staging folder together with whatever it finds on disk, in the prepared
mode and in the direct `prepareArtifacts: false` mode alike, keeps the
folder with an error log when the upload fails since it holds the only
copy of the maps, and now reports whether it uploaded anything.
---
 .../fixtures/esbuild/telemetry.test.ts        |   2 +-
 .../fixtures/rolldown/telemetry.test.ts       |   2 +-
 .../fixtures/rollup3/telemetry.test.ts        |   2 +-
 .../fixtures/rollup4/telemetry.test.ts        |   2 +-
 .../fixtures/vite4/telemetry.test.ts          |   2 +-
 .../fixtures/vite7/telemetry.test.ts          |   2 +-
 .../fixtures/vite8/telemetry.test.ts          |   2 +-
 .../fixtures/webpack5/telemetry.test.ts       |   2 +-
 .../src/core/build-plugin-manager.ts          | 304 ++++++++++++--
 .../src/core/debug-id-upload.ts               | 191 +++++----
 packages/bundler-plugins/src/core/index.ts    |   3 +
 .../src/core/options-mapping.ts               |   8 +
 .../src/core/sentry/telemetry.ts              |   4 +
 .../src/core/sourcemap-settings.ts            | 103 +++++
 packages/bundler-plugins/src/core/types.ts    |  12 +
 .../test/core/debug-id-upload.test.ts         | 126 ++++++
 .../test/core/option-mappings.test.ts         |  19 +
 .../test/core/sentry/telemetry.test.ts        |  13 +
 .../test/core/sourcemap-settings.test.ts      | 106 +++++
 .../test/core/upload-staging.test.ts          | 384 ++++++++++++++++++
 .../buildTimeOptionsBase.ts                   |   9 +
 21 files changed, 1169 insertions(+), 129 deletions(-)
 create mode 100644 packages/bundler-plugins/src/core/sourcemap-settings.ts
 create mode 100644 packages/bundler-plugins/test/core/sourcemap-settings.test.ts
 create mode 100644 packages/bundler-plugins/test/core/upload-staging.test.ts

diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/esbuild/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/esbuild/telemetry.test.ts
index fe5649ca57dc..2585278adc54 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/esbuild/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/esbuild/telemetry.test.ts
@@ -6,7 +6,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
   expect(readOutputFiles()).toMatchInlineSnapshot(`
     {
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"esbuild","bundler-major-version":"28"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"esbuild","bundler-major-version":"28"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
       "telemetry.js": "(() => {
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/telemetry.test.ts
index 77ac826d8d70..f995682ca797 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/telemetry.test.ts
@@ -18,7 +18,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     //#endregion
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/rollup3/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/rollup3/telemetry.test.ts
index 329f3b6969ed..72ae140b7b42 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/rollup3/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/rollup3/telemetry.test.ts
@@ -9,7 +9,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     !function(){try{var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.SENTRY_RELEASE={id:"CURRENT_SHA"};var n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="00000000-0000-0000-0000-000000000000",e._sentryDebugIdIdentifier="sentry-dbid-00000000-0000-0000-0000-000000000000");}catch(e){}}();console.log("hello world");
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"3"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"3"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/rollup4/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/rollup4/telemetry.test.ts
index 4e0c4d969660..d4bde5c071ae 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/rollup4/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/rollup4/telemetry.test.ts
@@ -9,7 +9,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     !function(){try{var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.SENTRY_RELEASE={id:"CURRENT_SHA"};var n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="00000000-0000-0000-0000-000000000000",e._sentryDebugIdIdentifier="sentry-dbid-00000000-0000-0000-0000-000000000000");}catch(e){}}();console.log("hello world");
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"rollup","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/vite4/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/vite4/telemetry.test.ts
index d6ea3f3a91d5..f61dde5478e3 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/vite4/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/vite4/telemetry.test.ts
@@ -17,7 +17,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     console.log("hello world");
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"4"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/vite7/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/vite7/telemetry.test.ts
index 3b5c50c6a113..9ad711e030fc 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/vite7/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/vite7/telemetry.test.ts
@@ -17,7 +17,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     console.log("hello world");
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"7"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"7"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/vite8/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/vite8/telemetry.test.ts
index d09ee8bc094a..6d832d2ae117 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/vite8/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/vite8/telemetry.test.ts
@@ -18,7 +18,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     //#endregion
     ",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"8"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"vite","bundler-major-version":"8"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/dev-packages/bundler-plugin-integration-tests/fixtures/webpack5/telemetry.test.ts b/dev-packages/bundler-plugin-integration-tests/fixtures/webpack5/telemetry.test.ts
index 0854328dd4a8..22d582168680 100644
--- a/dev-packages/bundler-plugin-integration-tests/fixtures/webpack5/telemetry.test.ts
+++ b/dev-packages/bundler-plugin-integration-tests/fixtures/webpack5/telemetry.test.ts
@@ -13,7 +13,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
     /******/ })()
     ;",
       "sentry-telemetry.json": "[{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":true,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"ok","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
-    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"webpack","bundler-major-version":"5"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
+    [{"event_id":"UUID","sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"},"trace":{"environment":"production","release":"PLUGIN_VERSION","public_key":"UUID","trace_id":"UUID","org_id":"1","transaction":"Sentry Bundler Plugin execution","sampled":"true","sample_rand":"SAMPLE_RAND","sample_rate":"0.3"}},[[{"type":"transaction"},{"contexts":{"trace":{"span_id":"SHORT_UUID","trace_id":"UUID","data":{"sentry.origin":"manual","sentry.segment.name.source":"custom","sentry.sample_rate":0.3},"status":"ok","origin":"manual"},"runtime":{"name":"node","version":"NODE_VERSION"}},"spans":[],"start_timestamp":START_TIMESTAMP,"timestamp":TIMESTAMP,"transaction":"Sentry Bundler Plugin execution","type":"transaction","transaction_info":{"source":"custom"},"platform":"PLATFORM","event_id":"UUID","environment":"production","release":"PLUGIN_VERSION","tags":{"upload-legacy-sourcemaps":false,"module-metadata":false,"inject-build-information":false,"set-commits":"auto","finalize-release":true,"deploy-options":false,"custom-error-handler":false,"sourcemaps-assets":false,"delete-after-upload":false,"delete-sourcemaps-after-upload":"auto","sourcemaps-disabled":false,"react-annotate":false,"node":"NODE_VERSION","platform":"PLATFORM","meta-framework":"none","application-key-set":false,"ci":true,"project":"undefined","bundler":"webpack","bundler-major-version":"5"},"user":{},"sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION","integrations":[],"packages":[{"name":"npm:@sentry/node","version":"SDK_VERSION"}]}}]]],
     [{"sent_at":"TIMESTAMP","sdk":{"name":"sentry.javascript.node","version":"SDK_VERSION"}},[[{"type":"session"},{"sid":"UUID","init":false,"started":"TIMESTAMP","timestamp":"TIMESTAMP","status":"exited","errors":0,"duration":DURATION,"attrs":{"release":"PLUGIN_VERSION","environment":"production"}}]]],
     ",
     }
diff --git a/packages/bundler-plugins/src/core/build-plugin-manager.ts b/packages/bundler-plugins/src/core/build-plugin-manager.ts
index 242a77d73f0d..f4ccb991df5b 100644
--- a/packages/bundler-plugins/src/core/build-plugin-manager.ts
+++ b/packages/bundler-plugins/src/core/build-plugin-manager.ts
@@ -12,8 +12,15 @@ import { createLogger } from './logger';
 import { allowedToSendTelemetry, createSentryInstance, safeFlushTelemetry } from './sentry/telemetry';
 import type { Options, SentrySDKBuildFlags } from './types';
 import { arrayify, getProjects, getTurborepoEnvPassthroughWarning, stripQueryAndHashFromPath } from './utils';
-import { defaultRewriteSourcesHook, prepareBundleForDebugIdUpload } from './debug-id-upload';
+import {
+  defaultRewriteSourcesHook,
+  prepareArtifactForUpload,
+  prepareBundleForDebugIdUpload,
+  writePreparedArtifact,
+} from './debug-id-upload';
 import { globFiles } from './glob';
+import type { SourceMapDecision, SourceMapKind } from './sourcemap-settings';
+import { decideSourceMapHandling } from './sourcemap-settings';
 import { LIB_VERSION } from './version';
 
 // Module-level guard to prevent duplicate deploy records when multiple bundler plugin
@@ -26,6 +33,43 @@ export function _resetDeployedReleasesForTesting(): void {
   _deployedReleases.clear();
 }
 
+/**
+ * A temporary folder that build artifacts are written into straight from the bundler's output,
+ * before the bundler writes them to disk. The upload reads from this folder, so the bundler can
+ * drop the source map assets from its own output.
+ */
+export type UploadStaging = {
+  readonly dir: string;
+  /** Number of artifacts written so far. */
+  readonly count: number;
+  /**
+   * Absolute paths of the chunks staged so far (`mapDir` joined with the file name). The upload
+   * does not prepare these again from disk, where a stale map of an earlier build could sit
+   * next to them.
+   */
+  readonly stagedChunkPaths: ReadonlySet<string>;
+  /**
+   * Stamps the debug ID into the chunk and its source map and writes both into the folder.
+   *
+   * `mapSource` is `undefined` when the chunk has no separate source map. `mapDir` is the directory
+   * the map would be written to and is passed to the `rewriteSources` hook.
+   */
+  stage(input: {
+    code: string;
+    mapSource: string | undefined;
+    mapDir: string;
+    fileName: string;
+  }): Promise<'staged' | 'skipped' | 'failed'>;
+  /** Removes the folder. Call this when no upload will consume it. */
+  discard(): Promise<void>;
+  /**
+   * Keeps the folder and logs how to upload it by hand. Call this when the bundler already
+   * dropped the staged source maps from its output but the upload did not run. Removes the
+   * folder instead when nothing was staged.
+   */
+  keep(reason: string): Promise<void>;
+};
+
 export type SentryBuildPluginManager = {
   /**
    * A logger instance that takes the options passed to the build plugin manager into account. (for silencing and log level etc.)
@@ -80,7 +124,28 @@ export type SentryBuildPluginManager = {
   /**
    * Uploads sourcemaps using the "Debug ID" method. This function takes a list of build artifact paths that will be uploaded
    */
-  uploadSourcemaps(buildArtifactPaths: string[], opts?: { prepareArtifacts?: boolean }): Promise<void>;
+  uploadSourcemaps(
+    buildArtifactPaths: string[],
+    opts?: { prepareArtifacts?: boolean; staging?: UploadStaging },
+  ): Promise<{ uploaded: boolean }>;
+
+  /**
+   * Creates a staging folder that `uploadSourcemaps` uploads together with the build artifacts
+   * found on disk, in both the prepared and the direct (`prepareArtifacts: false`) mode.
+   */
+  createUploadStaging(): Promise<UploadStaging>;
+
+  sourceMaps: {
+    /**
+     * Whether a source map upload can run with the current options and environment.
+     */
+    uploadPossible: boolean;
+    /**
+     * Decides how the plugin treats the user's source map setting (see `decideSourceMapHandling`).
+     * Logs the decision's message once per message.
+     */
+    decide(kind: SourceMapKind): SourceMapDecision;
+  };
 
   /**
    * Will delete artifacts based on the passed `sourcemaps.filesToDeleteAfterUpload` option.
@@ -155,8 +220,22 @@ export function createSentryBuildPluginManager(
       createRelease: async () => {
         /* noop */
       },
-      uploadSourcemaps: async () => {
-        /* noop */
+      uploadSourcemaps: async () => ({ uploaded: false }),
+      createUploadStaging: async () => ({
+        dir: '',
+        count: 0,
+        stagedChunkPaths: new Set<string>(),
+        stage: async () => 'skipped' as const,
+        discard: async () => {
+          /* noop */
+        },
+        keep: async () => {
+          /* noop */
+        },
+      }),
+      sourceMaps: {
+        uploadPossible: false,
+        decide: () => ({ enableHidden: false, deleteAfterUpload: false }),
       },
       deleteArtifacts: async () => {
         /* noop */
@@ -283,6 +362,9 @@ export function createSentryBuildPluginManager(
     };
   }
 
+  const sourceMapUploadPossible = getSourceMapUploadBlocker(options, isDevMode) === undefined;
+  const loggedSourceMapMessages = new Set<string>();
+
   /**
    * Returns a Promise that resolves when all the currently active dependencies are freed again.
    *
@@ -548,17 +630,19 @@ export function createSentryBuildPluginManager(
      * @param buildArtifactPaths - The paths of the build artifacts to upload
      * @param opts - Optional flags to control temp folder usage and preparation
      */
-    async uploadSourcemaps(buildArtifactPaths: string[], opts?: { prepareArtifacts?: boolean }) {
+    async uploadSourcemaps(
+      buildArtifactPaths: string[],
+      opts?: { prepareArtifacts?: boolean; staging?: UploadStaging },
+    ): Promise<{ uploaded: boolean }> {
+      const staging = opts?.staging;
+
       if (!canUploadSourceMaps(options, logger, isDevMode)) {
-        return;
+        await staging?.discard();
+        return { uploaded: false };
       }
 
-      // Early exit if assets is explicitly set to an empty array
       const assets = options.sourcemaps?.assets;
-      if (Array.isArray(assets) && assets.length === 0) {
-        logger.debug('Empty `sourcemaps.assets` option provided. Will not upload sourcemaps with debug ID.');
-        return;
-      }
+      let uploaded = false;
 
       await startSpan(
         // This is `forceTransaction`ed because this span is used in dashboards in the form of indexed transactions.
@@ -568,7 +652,7 @@ export function createSentryBuildPluginManager(
           // If we're not using a temp folder, we must not prepare artifacts in-place (to avoid mutating user files)
           const shouldPrepare = opts?.prepareArtifacts ?? true;
 
-          let folderToCleanUp: string | undefined;
+          let folderToCleanUp: string | undefined = staging?.dir;
 
           // It is possible that this writeBundle hook (which calls this function) is called multiple times in one build (for example when reusing the plugin, or when using build tooling like `@vitejs/plugin-legacy`)
           // Therefore we need to actually register the execution of this hook as dependency on the sourcemap files.
@@ -589,6 +673,18 @@ export function createSentryBuildPluginManager(
                 pathsToUpload = buildArtifactPaths;
               }
 
+              // Staged artifacts are already prepared, so the CLI can take the folder as it is.
+              if (staging && staging.count > 0) {
+                pathsToUpload = [...pathsToUpload, staging.dir];
+              }
+
+              if (pathsToUpload.length === 0) {
+                logger.warn(
+                  "Didn't find any matching sources for debug ID upload. Please check the `sourcemaps.assets` option.",
+                );
+                return;
+              }
+
               await startSpan({ name: 'upload', scope: sentryScope }, async () => {
                 const cliInstance = new SentryCliAdapter(options);
                 await cliInstance.uploadSourcemaps(
@@ -601,6 +697,7 @@ export function createSentryBuildPluginManager(
                 );
               });
 
+              uploaded = true;
               logger.info('Successfully uploaded source maps to Sentry');
             } else {
               // Prepare artifacts in temp folder before uploading
@@ -619,24 +716,24 @@ export function createSentryBuildPluginManager(
               );
 
               const debugIdChunkFilePaths = globResult.filter(debugIdChunkFilePath => {
-                return !!stripQueryAndHashFromPath(debugIdChunkFilePath).match(/\.(js|mjs|cjs)$/);
+                const filePath = stripQueryAndHashFromPath(debugIdChunkFilePath);
+                return !!filePath.match(/\.(js|mjs|cjs)$/) && !staging?.stagedChunkPaths.has(path.resolve(filePath));
               });
 
               // The order of the files output by glob() is not deterministic
               // Ensure order within the files so that {debug-id}-{chunkIndex} coupling is consistent
               debugIdChunkFilePaths.sort();
 
-              if (debugIdChunkFilePaths.length === 0) {
+              const stagedCount = staging?.count ?? 0;
+
+              if (debugIdChunkFilePaths.length === 0 && stagedCount === 0) {
                 logger.warn(
                   "Didn't find any matching sources for debug ID upload. Please check the `sourcemaps.assets` option.",
                 );
               } else {
-                const tmpUploadFolder = await startSpan({ name: 'mkdtemp', scope: sentryScope }, async () => {
-                  return (
-                    process.env?.['SENTRY_TEST_OVERRIDE_TEMP_DIR'] ||
-                    (await fs.promises.mkdtemp(path.join(os.tmpdir(), 'sentry-bundler-plugin-upload-')))
-                  );
-                });
+                const tmpUploadFolder =
+                  staging?.dir ??
+                  (await startSpan({ name: 'mkdtemp', scope: sentryScope }, () => createTempUploadFolder()));
                 folderToCleanUp = tmpUploadFolder;
 
                 // Prepare into temp folder, then upload
@@ -647,7 +744,7 @@ export function createSentryBuildPluginManager(
                     await prepareBundleForDebugIdUpload(
                       chunkFilePath,
                       tmpUploadFolder,
-                      chunkIndex,
+                      stagedCount + chunkIndex,
                       logger,
                       options.sourcemaps?.rewriteSources ?? defaultRewriteSourcesHook,
                       options.sourcemaps?.resolveSourceMap,
@@ -684,7 +781,7 @@ export function createSentryBuildPluginManager(
                   // bundler, so warn instead of silently reporting success.
                   if (files.length === 0) {
                     logger.warn(
-                      `No source maps found for any of the ${debugIdChunkFilePaths.length} matched build ` +
+                      `No source maps found for any of the ${debugIdChunkFilePaths.length + stagedCount} matched build ` +
                         'artifacts, so no source maps were uploaded to Sentry. This usually means source map ' +
                         'generation is not enabled in your bundler. Enable it so Sentry can un-minify your stack traces.',
                     );
@@ -703,11 +800,16 @@ export function createSentryBuildPluginManager(
 
                   // this must be in the method so that the "no sourcemaps"
                   // early return doesn't also log success.
+                  uploaded = true;
                   logger.info('Successfully uploaded source maps to Sentry');
                 });
               }
             }
           } catch (e) {
+            if (staging && folderToCleanUp) {
+              await staging.keep('Source map upload failed.');
+              folderToCleanUp = undefined;
+            }
             sentryScope.captureException('Error in "debugIdUploadPlugin" writeBundle hook');
             handleRecoverableError(e, false);
           } finally {
@@ -734,6 +836,97 @@ export function createSentryBuildPluginManager(
           }
         },
       );
+
+      return { uploaded };
+    },
+
+    async createUploadStaging(): Promise<UploadStaging> {
+      const dir = await createTempUploadFolder();
+      const rewriteSourcesHook = options.sourcemaps?.rewriteSources ?? defaultRewriteSourcesHook;
+      let count = 0;
+      let discarded = false;
+      const stagedChunkPaths = new Set<string>();
+
+      const discard = async (): Promise<void> => {
+        if (discarded) {
+          return;
+        }
+        discarded = true;
+
+        if (process.env['SENTRY_TEST_OVERRIDE_TEMP_DIR']) {
+          return;
+        }
+
+        try {
+          await fs.promises.rm(dir, { recursive: true, force: true });
+        } catch (e) {
+          logger.debug(`Failed to remove staging folder ${dir}:`, e);
+        }
+      };
+
+      return {
+        dir,
+        get count() {
+          return count;
+        },
+        stagedChunkPaths,
+        async stage(input) {
+          const result = prepareArtifactForUpload({
+            code: input.code,
+            mapSource: input.mapSource,
+            mapDir: input.mapDir,
+            rewriteSourcesHook,
+          });
+
+          if (!result.ok) {
+            logger.debug(`Not staging ${input.fileName} for upload: ${result.reason}`);
+            return 'skipped';
+          }
+
+          const index = count++;
+
+          try {
+            await writePreparedArtifact(dir, `${result.artifact.debugId}-${index}`, result.artifact);
+            stagedChunkPaths.add(path.resolve(input.mapDir, path.basename(input.fileName)));
+            return 'staged';
+          } catch (e) {
+            sentryScope.captureException('Error staging build artifact for upload');
+            // Throwing by default: the bundler drops the source map from its
+            // output once staged, so a lost copy would leave no map at all.
+            handleRecoverableError(e, true);
+            return 'failed';
+          }
+        },
+        discard,
+        async keep(reason) {
+          if (count === 0) {
+            await discard();
+            return;
+          }
+          if (discarded) {
+            return;
+          }
+          discarded = true;
+
+          // The bundler dropped the staged source maps from its output, so
+          // this folder is the only copy left.
+          logger.error(
+            `${reason} The source maps were kept in ${dir}. Upload them with \`sentry sourcemap upload ${dir}\`.`,
+          );
+        },
+      };
+    },
+
+    sourceMaps: {
+      uploadPossible: sourceMapUploadPossible,
+      decide(kind) {
+        const decision = decideSourceMapHandling(kind, options, sourceMapUploadPossible);
+        if (decision.log && !loggedSourceMapMessages.has(decision.log.message)) {
+          loggedSourceMapMessages.add(decision.log.message);
+          logger[decision.log.level](decision.log.message);
+        }
+        return decision;
+      },
     },
 
     /**
@@ -774,33 +967,64 @@ export function createSentryBuildPluginManager(
   };
 }
 
-function canUploadSourceMaps(options: NormalizedOptions, logger: Logger, isDevMode: boolean): boolean {
+async function createTempUploadFolder(): Promise<string> {
+  return (
+    process.env['SENTRY_TEST_OVERRIDE_TEMP_DIR'] ||
+    (await fs.promises.mkdtemp(path.join(os.tmpdir(), 'sentry-bundler-plugin-upload-')))
+  );
+}
+
+type SourceMapUploadBlocker = 'disabled' | 'no-assets' | 'dev-mode' | 'no-auth-token' | 'no-org' | 'no-project';
+
+function getSourceMapUploadBlocker(options: NormalizedOptions, isDevMode: boolean): SourceMapUploadBlocker | undefined {
   if (options.sourcemaps?.disable) {
-    logger.debug('Source map upload was disabled. Will not upload sourcemaps using debug ID process.');
-    return false;
+    return 'disabled';
+  }
+  if (Array.isArray(options.sourcemaps?.assets) && options.sourcemaps.assets.length === 0) {
+    return 'no-assets';
   }
   if (isDevMode) {
-    logger.debug('Running in development mode. Will not upload sourcemaps.');
-    return false;
+    return 'dev-mode';
   }
   if (!options.authToken) {
-    logger.warn(
-      `No auth token provided. Will not upload source maps. Please set the \`authToken\` option. You can find information on how to generate a Sentry auth token here: https://docs.sentry.io/api/auth/${getTurborepoEnvPassthroughWarning('SENTRY_AUTH_TOKEN')}`,
-    );
-    return false;
+    return 'no-auth-token';
   }
   if (!options.org && !options.authToken.startsWith('sntrys_')) {
-    logger.warn(
-      `No org provided. Will not upload source maps. Please set the \`org\` option to your Sentry organization slug.${getTurborepoEnvPassthroughWarning('SENTRY_ORG')}`,
-    );
-    return false;
+    return 'no-org';
   }
   if (!getProjects(options.project)?.[0]) {
-    logger.warn(
-      `No project provided. Will not upload source maps. Please set the \`project\` option to your Sentry project slug.${getTurborepoEnvPassthroughWarning('SENTRY_PROJECT')}`,
-    );
-    return false;
+    return 'no-project';
   }
+  return undefined;
+}
 
-  return true;
+function canUploadSourceMaps(options: NormalizedOptions, logger: Logger, isDevMode: boolean): boolean {
+  switch (getSourceMapUploadBlocker(options, isDevMode)) {
+    case 'disabled':
+      logger.debug('Source map upload was disabled. Will not upload sourcemaps using debug ID process.');
+      return false;
+    case 'no-assets':
+      logger.debug('Empty `sourcemaps.assets` option provided. Will not upload sourcemaps with debug ID.');
+      return false;
+    case 'dev-mode':
+      logger.debug('Running in development mode. Will not upload sourcemaps.');
+      return false;
+    case 'no-auth-token':
+      logger.warn(
+        `No auth token provided. Will not upload source maps. Please set the \`authToken\` option. You can find information on how to generate a Sentry auth token here: https://docs.sentry.io/api/auth/${getTurborepoEnvPassthroughWarning('SENTRY_AUTH_TOKEN')}`,
+      );
+      return false;
+    case 'no-org':
+      logger.warn(
+        `No org provided. Will not upload source maps. Please set the \`org\` option to your Sentry organization slug.${getTurborepoEnvPassthroughWarning('SENTRY_ORG')}`,
+      );
+      return false;
+    case 'no-project':
+      logger.warn(
+        `No project provided. Will not upload source maps. Please set the \`project\` option to your Sentry project slug.${getTurborepoEnvPassthroughWarning('SENTRY_PROJECT')}`,
+      );
+      return false;
+    default:
+      return true;
+  }
 }
diff --git a/packages/bundler-plugins/src/core/debug-id-upload.ts b/packages/bundler-plugins/src/core/debug-id-upload.ts
index 8041e8c99d0f..cf402b5f476f 100644
--- a/packages/bundler-plugins/src/core/debug-id-upload.ts
+++ b/packages/bundler-plugins/src/core/debug-id-upload.ts
@@ -2,8 +2,7 @@ import fs from 'fs';
 import path from 'path';
 import * as url from 'url';
 import * as util from 'util';
-import { promisify } from 'util';
-import type { SentryBuildPluginManager } from './build-plugin-manager';
+import type { SentryBuildPluginManager, UploadStaging } from './build-plugin-manager';
 import type { Logger } from './logger';
 import type { ResolveSourceMapHook, RewriteSourcesHook } from './types';
 import { stripQueryAndHashFromPath } from './utils';
@@ -13,11 +12,11 @@ interface DebugIdUploadPluginOptions {
 }
 
 export function createDebugIdUploadFunction({ sentryBuildPluginManager }: DebugIdUploadPluginOptions) {
-  return async (buildArtifactPaths: string[]) => {
+  return async (buildArtifactPaths: string[], opts?: { staging?: UploadStaging }) => {
     // Webpack and perhaps other bundlers allow you to append query strings to
     // filenames for cache busting purposes. We should strip these before upload.
     const cleanedPaths = buildArtifactPaths.map(stripQueryAndHashFromPath);
-    await sentryBuildPluginManager.uploadSourcemaps(cleanedPaths);
+    return sentryBuildPluginManager.uploadSourcemaps(cleanedPaths, opts);
   };
 }
 
@@ -29,26 +28,21 @@ export async function prepareBundleForDebugIdUpload(
   rewriteSourcesHook: RewriteSourcesHook,
   resolveSourceMapHook: ResolveSourceMapHook | undefined,
 ): Promise<void> {
-  let bundleContent;
+  let bundleContent: string;
   try {
-    bundleContent = await promisify(fs.readFile)(bundleFilePath, 'utf8');
+    bundleContent = await fs.promises.readFile(bundleFilePath, 'utf8');
   } catch (e) {
     logger.error(`Could not read bundle to determine debug ID and source map: ${bundleFilePath}`, e);
     return;
   }
 
-  const debugId = determineDebugIdFromBundleSource(bundleContent);
-  if (debugId === undefined) {
+  if (determineDebugIdFromBundleSource(bundleContent) === undefined) {
     logger.debug(
       `Could not determine debug ID from bundle. This can happen if you did not clean your output folder before installing the Sentry plugin. File will not be source mapped: ${bundleFilePath}`,
     );
     return;
   }
 
-  const uniqueUploadName = `${debugId}-${chunkIndex}`;
-
-  bundleContent = addDebugIdToBundleSource(bundleContent, debugId);
-
   const sourceMapPath = await determineSourceMapPathFromBundle(
     bundleFilePath,
     bundleContent,
@@ -56,35 +50,114 @@ export async function prepareBundleForDebugIdUpload(
     resolveSourceMapHook,
   );
 
-  // A chunk with a debug ID but no resolvable source map
-  // (e.g. framework-generated stub chunks that never emit one) can't be
-  // symbolicated, so uploading its minified source alone accomplishes
-  // nothing and only makes the uploader warn about a missing source map ref.
-  // Skip it, unless the source map is inlined into the bundle, in which case
-  // the source file carries the map itself and must still be uploaded.
-  if (!sourceMapPath && !bundleHasInlineSourceMap(bundleContent)) {
-    logger.debug(`Not uploading bundle without a source map: ${bundleFilePath}`);
+  let sourceMapSource: string | undefined;
+  if (sourceMapPath) {
+    try {
+      sourceMapSource = await fs.promises.readFile(sourceMapPath, 'utf8');
+    } catch (e) {
+      logger.error(`Failed to read source map for debug ID upload: ${sourceMapPath}`, e);
+      return;
+    }
+  }
+
+  const result = prepareArtifactForUpload({
+    code: bundleContent,
+    mapSource: sourceMapSource,
+    mapDir: path.dirname(sourceMapPath ?? bundleFilePath),
+    rewriteSourcesHook,
+  });
+
+  if (!result.ok) {
+    if (result.reason === 'invalid-source-map') {
+      logger.error(`Failed to parse source map for debug ID upload: ${sourceMapPath}`);
+    } else {
+      // A chunk with a debug ID but no resolvable source map
+      // (e.g. framework-generated stub chunks that never emit one) can't be
+      // symbolicated, so uploading its minified source alone accomplishes
+      // nothing and only makes the uploader warn about a missing source map ref.
+      logger.debug(`Not uploading bundle without a source map: ${bundleFilePath}`);
+    }
     return;
   }
 
-  const writeSourceFilePromise = fs.promises.writeFile(
-    path.join(uploadFolder, `${uniqueUploadName}.js`),
-    bundleContent,
-    'utf-8',
-  );
+  await writePreparedArtifact(uploadFolder, `${result.artifact.debugId}-${chunkIndex}`, result.artifact);
+}
+
+export type PreparedUploadArtifact = {
+  debugId: string;
+  bundleSource: string;
+  /** `undefined` when the bundle has no separate source map (i.e. the map is inlined). */
+  sourceMapSource: string | undefined;
+};
+
+export type PrepareArtifactResult =
+  | { ok: true; artifact: PreparedUploadArtifact }
+  | { ok: false; reason: 'no-debug-id' | 'no-source-map' | 'invalid-source-map' };
 
-  const writeSourceMapFilePromise = sourceMapPath
-    ? prepareSourceMapForDebugIdUpload(
-        sourceMapPath,
-        path.join(uploadFolder, `${uniqueUploadName}.js.map`),
-        debugId,
-        rewriteSourcesHook,
-        logger,
-      )
-    : Promise.resolve();
-
-  await writeSourceFilePromise;
-  await writeSourceMapFilePromise;
+/**
+ * Prepares a bundle and its source map for the debug ID upload: stamps the debug ID into both
+ * and runs the `rewriteSources` hook over the map's `sources`.
+ *
+ * Pass `mapSource: undefined` when the bundle has no separate source map. A bundle with an
+ * inlined map is still prepared; a bundle without any map is skipped because it cannot be
+ * symbolicated.
+ */
+export function prepareArtifactForUpload(input: {
+  code: string;
+  mapSource: string | undefined;
+  /** Directory the source map lives in, passed to the `rewriteSources` hook. */
+  mapDir: string;
+  rewriteSourcesHook: RewriteSourcesHook;
+}): PrepareArtifactResult {
+  const debugId = determineDebugIdFromBundleSource(input.code);
+  if (debugId === undefined) {
+    return { ok: false, reason: 'no-debug-id' };
+  }
+
+  const bundleSource = addDebugIdToBundleSource(input.code, debugId);
+
+  if (input.mapSource === undefined) {
+    if (!bundleHasInlineSourceMap(input.code)) {
+      return { ok: false, reason: 'no-source-map' };
+    }
+    return { ok: true, artifact: { debugId, bundleSource, sourceMapSource: undefined } };
+  }
+
+  const map = parseSourceMap(input.mapSource);
+  if (!map) {
+    return { ok: false, reason: 'invalid-source-map' };
+  }
+
+  setDebugIdOnSourceMap(map, debugId);
+
+  if (Array.isArray(map['sources'])) {
+    map['sources'] = map['sources'].map((source: string) =>
+      input.rewriteSourcesHook(source, map, { mapDir: input.mapDir }),
+    );
+  }
+
+  return { ok: true, artifact: { debugId, bundleSource, sourceMapSource: JSON.stringify(map) } };
+}
+
+/**
+ * Writes a prepared artifact as `<uniqueUploadName>.js` (and `.js.map`) into the upload folder.
+ */
+export async function writePreparedArtifact(
+  uploadFolder: string,
+  uniqueUploadName: string,
+  artifact: PreparedUploadArtifact,
+): Promise<void> {
+  const writes = [
+    fs.promises.writeFile(path.join(uploadFolder, `${uniqueUploadName}.js`), artifact.bundleSource, 'utf-8'),
+  ];
+
+  if (artifact.sourceMapSource !== undefined) {
+    writes.push(
+      fs.promises.writeFile(path.join(uploadFolder, `${uniqueUploadName}.js.map`), artifact.sourceMapSource, 'utf-8'),
+    );
+  }
+
+  await Promise.all(writes);
 }
 
 /**
@@ -321,50 +394,6 @@ export async function determineSourceMapPathFromBundle(
   return undefined;
 }
 
-/**
- * Reads a source map, injects debug ID fields, and writes the source map to the target path.
- */
-async function prepareSourceMapForDebugIdUpload(
-  sourceMapPath: string,
-  targetPath: string,
-  debugId: string,
-  rewriteSourcesHook: RewriteSourcesHook,
-  logger: Logger,
-): Promise<void> {
-  let sourceMapFileContent: string;
-  try {
-    sourceMapFileContent = await util.promisify(fs.readFile)(sourceMapPath, {
-      encoding: 'utf8',
-    });
-  } catch (e) {
-    logger.error(`Failed to read source map for debug ID upload: ${sourceMapPath}`, e);
-    return;
-  }
-
-  let map: Record<string, unknown>;
-  try {
-    map = JSON.parse(sourceMapFileContent) as { sources: unknown; [key: string]: unknown };
-    setDebugIdOnSourceMap(map, debugId);
-  } catch {
-    logger.error(`Failed to parse source map for debug ID upload: ${sourceMapPath}`);
-    return;
-  }
-
-  if (map['sources'] && Array.isArray(map['sources'])) {
-    const mapDir = path.dirname(sourceMapPath);
-    map['sources'] = map['sources'].map((source: string) => rewriteSourcesHook(source, map, { mapDir }));
-  }
-
-  try {
-    await util.promisify(fs.writeFile)(targetPath, JSON.stringify(map), {
-      encoding: 'utf8',
-    });
-  } catch (e) {
-    logger.error(`Failed to prepare source map for debug ID upload: ${sourceMapPath}`, e);
-    return;
-  }
-}
-
 const PROTOCOL_REGEX = /^[a-zA-Z][a-zA-Z0-9+\-.]*:\/\//;
 export function defaultRewriteSourcesHook(source: string): string {
   if (source.match(PROTOCOL_REGEX)) {
diff --git a/packages/bundler-plugins/src/core/index.ts b/packages/bundler-plugins/src/core/index.ts
index 4edc5ebbed91..e46caaaec203 100644
--- a/packages/bundler-plugins/src/core/index.ts
+++ b/packages/bundler-plugins/src/core/index.ts
@@ -110,4 +110,7 @@ export {
   generateModuleMetadataInjectorCode,
 } from './utils';
 export { createSentryBuildPluginManager } from './build-plugin-manager';
+export type { SentryBuildPluginManager, UploadStaging } from './build-plugin-manager';
 export { createDebugIdUploadFunction, addDebugIdToEmittedArtifacts, stampDebugId } from './debug-id-upload';
+export { decideSourceMapHandling } from './sourcemap-settings';
+export type { SourceMapDecision, SourceMapKind } from './sourcemap-settings';
diff --git a/packages/bundler-plugins/src/core/options-mapping.ts b/packages/bundler-plugins/src/core/options-mapping.ts
index 4847b11b0415..c190d3efc5cc 100644
--- a/packages/bundler-plugins/src/core/options-mapping.ts
+++ b/packages/bundler-plugins/src/core/options-mapping.ts
@@ -30,6 +30,7 @@ export type NormalizedOptions = {
         rewriteSources?: RewriteSourcesHook;
         resolveSourceMap?: ResolveSourceMapHook;
         filesToDeleteAfterUpload?: string | string[] | Promise<string | string[] | undefined>;
+        deleteSourcemapsAfterUpload?: boolean;
       }
     | undefined;
   release: {
@@ -214,6 +215,13 @@ export function validateOptions(options: NormalizedOptions, logger: Logger): boo
     return false;
   }
 
+  if (options.sourcemaps?.deleteSourcemapsAfterUpload && options.sourcemaps.disable) {
+    logger.warn(
+      'The `sourcemaps.deleteSourcemapsAfterUpload` option is set but source map upload is disabled via `sourcemaps.disable`.',
+      'Source maps will not be deleted.',
+    );
+  }
+
   if (options.project && Array.isArray(options.project)) {
     if (options.project.length === 0) {
       logger.error(
diff --git a/packages/bundler-plugins/src/core/sentry/telemetry.ts b/packages/bundler-plugins/src/core/sentry/telemetry.ts
index 72ea587bfef8..c9da77637d90 100644
--- a/packages/bundler-plugins/src/core/sentry/telemetry.ts
+++ b/packages/bundler-plugins/src/core/sentry/telemetry.ts
@@ -106,6 +106,10 @@ export function setTelemetryDataOnScope(
   scope.setTag('custom-error-handler', !!errorHandler);
   scope.setTag('sourcemaps-assets', !!sourcemaps?.assets);
   scope.setTag('delete-after-upload', !!sourcemaps?.filesToDeleteAfterUpload);
+  scope.setTag(
+    'delete-sourcemaps-after-upload',
+    sourcemaps?.deleteSourcemapsAfterUpload === undefined ? 'auto' : String(sourcemaps.deleteSourcemapsAfterUpload),
+  );
   scope.setTag('sourcemaps-disabled', !!sourcemaps?.disable);
 
   scope.setTag('react-annotate', !!reactComponentAnnotation?.enabled);
diff --git a/packages/bundler-plugins/src/core/sourcemap-settings.ts b/packages/bundler-plugins/src/core/sourcemap-settings.ts
new file mode 100644
index 000000000000..0f5a3b3d12fc
--- /dev/null
+++ b/packages/bundler-plugins/src/core/sourcemap-settings.ts
@@ -0,0 +1,103 @@
+import type { NormalizedOptions } from './options-mapping';
+
+/**
+ * The user's source map setting in the bundler, reduced to what matters for upload and deletion.
+ *
+ * - `unset`: the user did not configure source maps
+ * - `off`: source map generation is turned off
+ * - `visible`: separate map files with a `sourceMappingURL` comment
+ * - `hidden`: separate map files without the comment
+ * - `inline`: the map is embedded into the bundle
+ */
+export type SourceMapKind = 'unset' | 'off' | 'visible' | 'hidden' | 'inline';
+
+export type SourceMapDecision = {
+  /** Switch the bundler to hidden source maps. */
+  enableHidden: boolean;
+  /** Remove the source maps from the build output once they are uploaded. */
+  deleteAfterUpload: boolean;
+  log?: { level: 'info' | 'warn'; message: string };
+};
+
+const NO_CHANGE: SourceMapDecision = { enableHidden: false, deleteAfterUpload: false };
+
+/**
+ * Decides whether the plugin turns hidden source maps on and whether it removes the maps from the
+ * build output after the upload. The plugin only turns maps on when an upload can run, and only
+ * removes maps it turned on itself unless `deleteSourcemapsAfterUpload` says otherwise.
+ */
+export function decideSourceMapHandling(
+  kind: SourceMapKind,
+  options: NormalizedOptions,
+  uploadPossible: boolean,
+): SourceMapDecision {
+  const deleteOption = options.sourcemaps?.deleteSourcemapsAfterUpload;
+
+  if (!uploadPossible || options.sourcemaps?.disable) {
+    return NO_CHANGE;
+  }
+
+  switch (kind) {
+    case 'off':
+      return {
+        ...NO_CHANGE,
+        log: {
+          level: 'warn',
+          message:
+            'Source map generation is turned off in your bundler, so Sentry cannot un-minify your stack traces. ' +
+            'Remove the setting to let the plugin generate hidden source maps, upload them to Sentry and remove them from the build output.',
+        },
+      };
+
+    case 'inline':
+      return {
+        ...NO_CHANGE,
+        log: {
+          level: 'warn',
+          message:
+            'Source maps are inlined into your bundles. They are uploaded to Sentry, but inline source maps ship your source code to users and cannot be removed after the upload. ' +
+            'Remove the setting to let the plugin generate hidden source maps instead.',
+        },
+      };
+
+    case 'unset':
+      if (deleteOption === false) {
+        return {
+          enableHidden: true,
+          deleteAfterUpload: false,
+          log: {
+            level: 'info',
+            message: 'Enabling hidden source maps. They are uploaded to Sentry and kept in the build output.',
+          },
+        };
+      }
+      return {
+        enableHidden: true,
+        deleteAfterUpload: true,
+        log: {
+          level: 'info',
+          message:
+            'Enabling hidden source maps. They are uploaded to Sentry and removed from the build output. ' +
+            'Set `sourcemaps.deleteSourcemapsAfterUpload: false` to keep them.',
+        },
+      };
+
+    case 'hidden':
+      return { enableHidden: false, deleteAfterUpload: deleteOption === true };
+
+    case 'visible':
+      if (deleteOption !== true) {
+        return NO_CHANGE;
+      }
+      return {
+        enableHidden: true,
+        deleteAfterUpload: true,
+        log: {
+          level: 'info',
+          message:
+            'Switching to hidden source maps because `sourcemaps.deleteSourcemapsAfterUpload` is set. ' +
+            'Without the `sourceMappingURL` comment browsers do not request the removed map files.',
+        },
+      };
+  }
+}
diff --git a/packages/bundler-plugins/src/core/types.ts b/packages/bundler-plugins/src/core/types.ts
index bd3761c12dca..5712cf3cfa5b 100644
--- a/packages/bundler-plugins/src/core/types.ts
+++ b/packages/bundler-plugins/src/core/types.ts
@@ -192,6 +192,18 @@ export interface Options {
      * Use the `debug` option to print information about which files end up being deleted.
      */
     filesToDeleteAfterUpload?: string | string[] | Promise<string | string[] | undefined>;
+
+    /**
+     * Whether source maps are removed from the build output after they are uploaded to Sentry.
+     *
+     * When unset, the plugin removes only the source maps it turned on itself, that is, when the bundler's source map
+     * setting was not set. `true` also removes source maps you enabled yourself. `false` never removes them; the plugin
+     * still turns on hidden source maps when the setting is not set, so they can be uploaded.
+     *
+     * With Rollup, Vite and webpack the removed source maps are never written to the output directory. With esbuild
+     * they are deleted after the upload.
+     */
+    deleteSourcemapsAfterUpload?: boolean;
   };
 
   /**
diff --git a/packages/bundler-plugins/test/core/debug-id-upload.test.ts b/packages/bundler-plugins/test/core/debug-id-upload.test.ts
index ddeeff073fc3..4c6690e3b42d 100644
--- a/packages/bundler-plugins/test/core/debug-id-upload.test.ts
+++ b/packages/bundler-plugins/test/core/debug-id-upload.test.ts
@@ -4,8 +4,10 @@ import * as path from 'path';
 import * as os from 'os';
 import {
   addDebugIdToEmittedArtifacts,
+  prepareArtifactForUpload,
   prepareBundleForDebugIdUpload,
   stampDebugId,
+  writePreparedArtifact,
 } from '../../src/core/debug-id-upload';
 import type { RewriteSourcesHook } from '../../src/core/types';
 import type { Logger } from '../../src/core';
@@ -74,6 +76,19 @@ describe('prepareBundleForDebugIdUpload', () => {
 
   const noopRewriteHook: RewriteSourcesHook = source => source;
 
+  it('lets a failed write of the upload artifact propagate', async () => {
+    const bundlePath = path.join(tmpDir, 'bundle.js');
+    fs.writeFileSync(
+      bundlePath,
+      `"use strict";\n${debugIdSnippet('aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee')}\n//# sourceMappingURL=bundle.js.map`,
+    );
+    fs.writeFileSync(`${bundlePath}.map`, JSON.stringify({ version: 3, sources: ['a.ts'], mappings: 'AAAA' }));
+
+    await expect(
+      prepareBundleForDebugIdUpload(bundlePath, path.join(tmpDir, 'missing'), 0, makeLogger(), s => s, undefined),
+    ).rejects.toThrow();
+  });
+
   it('does not write an upload artifact for a chunk that has no source map', async () => {
     const bundleDir = path.join(tmpDir, 'src');
     const uploadDir = path.join(tmpDir, 'upload');
@@ -112,6 +127,117 @@ describe('prepareBundleForDebugIdUpload', () => {
   });
 });
 
+describe('prepareArtifactForUpload', () => {
+  const debugId = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
+  const noopRewriteHook: RewriteSourcesHook = source => source;
+  const map = JSON.stringify({ version: 3, sources: ['../src/a.ts'], mappings: 'AAAA' });
+
+  it('stamps the debug ID into the bundle and the map and rewrites the sources', () => {
+    const rewriteHook: RewriteSourcesHook = (source, _map, context) => `${context?.mapDir}|${source}`;
+
+    const result = prepareArtifactForUpload({
+      code: `code();\n${debugIdSnippet(debugId)}`,
+      mapSource: map,
+      mapDir: '/out/assets',
+      rewriteSourcesHook: rewriteHook,
+    });
+
+    expect(result.ok).toBe(true);
+    if (!result.ok) {
+      return;
+    }
+    expect(result.artifact.debugId).toBe(debugId);
+    expect(result.artifact.bundleSource).toBe(`code();\n${debugIdSnippet(debugId)}\n//# debugId=${debugId}`);
+    expect(JSON.parse(result.artifact.sourceMapSource!)).toEqual({
+      version: 3,
+      sources: ['/out/assets|../src/a.ts'],
+      mappings: 'AAAA',
+      debug_id: debugId,
+      debugId,
+    });
+  });
+
+  it('replaces an existing spec comment', () => {
+    const result = prepareArtifactForUpload({
+      code: `${debugIdSnippet(debugId)}\n//# debugId=00000000-0000-0000-0000-000000000000`,
+      mapSource: map,
+      mapDir: '/out',
+      rewriteSourcesHook: noopRewriteHook,
+    });
+
+    expect(result.ok && result.artifact.bundleSource).toBe(`${debugIdSnippet(debugId)}\n//# debugId=${debugId}`);
+  });
+
+  it('prepares a bundle with an inlined map without a separate map', () => {
+    const result = prepareArtifactForUpload({
+      code: `${debugIdSnippet(debugId)}\n//# sourceMappingURL=data:application/json;base64,e30=`,
+      mapSource: undefined,
+      mapDir: '/out',
+      rewriteSourcesHook: noopRewriteHook,
+    });
+
+    expect(result.ok && result.artifact.sourceMapSource).toBeUndefined();
+  });
+
+  it('reports a bundle without a debug ID', () => {
+    expect(
+      prepareArtifactForUpload({
+        code: 'code();',
+        mapSource: map,
+        mapDir: '/out',
+        rewriteSourcesHook: noopRewriteHook,
+      }),
+    ).toEqual({ ok: false, reason: 'no-debug-id' });
+  });
+
+  it('reports a bundle without any source map', () => {
+    expect(
+      prepareArtifactForUpload({
+        code: debugIdSnippet(debugId),
+        mapSource: undefined,
+        mapDir: '/out',
+        rewriteSourcesHook: noopRewriteHook,
+      }),
+    ).toEqual({ ok: false, reason: 'no-source-map' });
+  });
+
+  it('reports an invalid source map', () => {
+    expect(
+      prepareArtifactForUpload({
+        code: debugIdSnippet(debugId),
+        mapSource: '{not json',
+        mapDir: '/out',
+        rewriteSourcesHook: noopRewriteHook,
+      }),
+    ).toEqual({ ok: false, reason: 'invalid-source-map' });
+  });
+});
+
+describe('writePreparedArtifact', () => {
+  let tmpDir: string;
+
+  beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sentry-test-'));
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  });
+
+  it('writes the bundle and the map', async () => {
+    await writePreparedArtifact(tmpDir, 'abc-0', { debugId: 'abc', bundleSource: 'js', sourceMapSource: '{}' });
+
+    expect(fs.readFileSync(path.join(tmpDir, 'abc-0.js'), 'utf8')).toBe('js');
+    expect(fs.readFileSync(path.join(tmpDir, 'abc-0.js.map'), 'utf8')).toBe('{}');
+  });
+
+  it('writes only the bundle when there is no separate map', async () => {
+    await writePreparedArtifact(tmpDir, 'abc-0', { debugId: 'abc', bundleSource: 'js', sourceMapSource: undefined });
+
+    expect(fs.readdirSync(tmpDir)).toEqual(['abc-0.js']);
+  });
+});
+
 describe('stampDebugId', () => {
   const debugId = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
   const bundleSource = `"use strict";\n${debugIdSnippet(debugId)}\n//# sourceMappingURL=bundle.js.map`;
diff --git a/packages/bundler-plugins/test/core/option-mappings.test.ts b/packages/bundler-plugins/test/core/option-mappings.test.ts
index 341aad2f21e6..1c1bbbe42b82 100644
--- a/packages/bundler-plugins/test/core/option-mappings.test.ts
+++ b/packages/bundler-plugins/test/core/option-mappings.test.ts
@@ -351,6 +351,25 @@ describe('validateOptions', () => {
     expect(mockedLogger.error).not.toHaveBeenCalled();
   });
 
+  it('warns when `deleteSourcemapsAfterUpload` is set together with `sourcemaps.disable`', () => {
+    const options = normalizeUserOptions({
+      sourcemaps: { disable: 'disable-upload', deleteSourcemapsAfterUpload: true },
+    });
+
+    expect(validateOptions(options, mockedLogger)).toBe(true);
+    expect(mockedLogger.warn).toHaveBeenCalledWith(
+      expect.stringContaining('deleteSourcemapsAfterUpload'),
+      expect.any(String),
+    );
+  });
+
+  it('does not warn when `deleteSourcemapsAfterUpload` is set and uploads are enabled', () => {
+    const options = normalizeUserOptions({ sourcemaps: { deleteSourcemapsAfterUpload: true } });
+
+    expect(validateOptions(options, mockedLogger)).toBe(true);
+    expect(mockedLogger.warn).not.toHaveBeenCalled();
+  });
+
   it('should return `true` for options without special cases', () => {
     const options = {
       org: 'my-org',
diff --git a/packages/bundler-plugins/test/core/sentry/telemetry.test.ts b/packages/bundler-plugins/test/core/sentry/telemetry.test.ts
index 49cf78b7dffa..7de02ab79bc0 100644
--- a/packages/bundler-plugins/test/core/sentry/telemetry.test.ts
+++ b/packages/bundler-plugins/test/core/sentry/telemetry.test.ts
@@ -68,6 +68,19 @@ describe('addPluginOptionTagsToScope', () => {
     expect(mockedScope.setTag).toHaveBeenCalledWith('deploy-options', true);
   });
 
+  it.each([
+    [undefined, 'auto'],
+    [true, 'true'],
+    [false, 'false'],
+  ])('should set the delete-sourcemaps-after-upload tag for `%s` to `%s`', (option, tag) => {
+    setTelemetryDataOnScope(
+      normalizeUserOptions({ ...defaultOptions, sourcemaps: { deleteSourcemapsAfterUpload: option } }),
+      mockedScope as unknown as Scope,
+      'rollup',
+    );
+    expect(mockedScope.setTag).toHaveBeenCalledWith('delete-sourcemaps-after-upload', tag);
+  });
+
   it('should set errorHandler tag to `custom` if the errorHandler option is specified', () => {
     setTelemetryDataOnScope(
       // eslint-disable-next-line @typescript-eslint/no-empty-function
diff --git a/packages/bundler-plugins/test/core/sourcemap-settings.test.ts b/packages/bundler-plugins/test/core/sourcemap-settings.test.ts
new file mode 100644
index 000000000000..4435fb98662e
--- /dev/null
+++ b/packages/bundler-plugins/test/core/sourcemap-settings.test.ts
@@ -0,0 +1,106 @@
+import { describe, it, expect } from 'vitest';
+import { normalizeUserOptions } from '../../src/core/options-mapping';
+import type { Options } from '../../src/core';
+import { decideSourceMapHandling } from '../../src/core/sourcemap-settings';
+import type { SourceMapKind } from '../../src/core/sourcemap-settings';
+
+function options(sourcemaps?: Options['sourcemaps']) {
+  return normalizeUserOptions({ org: 'o', project: 'p', authToken: 't', release: { name: 'r' }, sourcemaps });
+}
+
+const NO_CHANGE = { enableHidden: false, deleteAfterUpload: false };
+
+describe('decideSourceMapHandling', () => {
+  describe('with the option unset (auto)', () => {
+    it('enables hidden source maps and deletion when the bundler setting is unset', () => {
+      const decision = decideSourceMapHandling('unset', options(), true);
+
+      expect(decision).toMatchObject({ enableHidden: true, deleteAfterUpload: true });
+      expect(decision.log?.level).toBe('info');
+    });
+
+    it.each<SourceMapKind>(['hidden', 'visible'])('leaves a `%s` setting alone', kind => {
+      expect(decideSourceMapHandling(kind, options(), true)).toEqual(NO_CHANGE);
+    });
+
+    it('warns when source maps are turned off', () => {
+      const decision = decideSourceMapHandling('off', options(), true);
+
+      expect(decision).toMatchObject(NO_CHANGE);
+      expect(decision.log?.level).toBe('warn');
+      expect(decision.log?.message).toMatch(/turned off/);
+    });
+
+    it('warns when source maps are inlined', () => {
+      const decision = decideSourceMapHandling('inline', options(), true);
+
+      expect(decision).toMatchObject(NO_CHANGE);
+      expect(decision.log?.level).toBe('warn');
+      expect(decision.log?.message).toMatch(/inlined/);
+    });
+  });
+
+  describe('with the option set to true', () => {
+    it('enables hidden source maps and deletion when the bundler setting is unset', () => {
+      expect(decideSourceMapHandling('unset', options({ deleteSourcemapsAfterUpload: true }), true)).toMatchObject({
+        enableHidden: true,
+        deleteAfterUpload: true,
+      });
+    });
+
+    it('deletes hidden source maps without changing the setting', () => {
+      expect(decideSourceMapHandling('hidden', options({ deleteSourcemapsAfterUpload: true }), true)).toEqual({
+        enableHidden: false,
+        deleteAfterUpload: true,
+      });
+    });
+
+    it('switches visible source maps to hidden and deletes them', () => {
+      const decision = decideSourceMapHandling('visible', options({ deleteSourcemapsAfterUpload: true }), true);
+
+      expect(decision).toMatchObject({ enableHidden: true, deleteAfterUpload: true });
+      expect(decision.log?.level).toBe('info');
+    });
+
+    it.each<SourceMapKind>(['off', 'inline'])('warns and does not delete for a `%s` setting', kind => {
+      const decision = decideSourceMapHandling(kind, options({ deleteSourcemapsAfterUpload: true }), true);
+
+      expect(decision).toMatchObject(NO_CHANGE);
+      expect(decision.log?.level).toBe('warn');
+    });
+  });
+
+  describe('with the option set to false', () => {
+    it('enables hidden source maps without deletion when the bundler setting is unset', () => {
+      const decision = decideSourceMapHandling('unset', options({ deleteSourcemapsAfterUpload: false }), true);
+
+      expect(decision).toMatchObject({ enableHidden: true, deleteAfterUpload: false });
+      expect(decision.log?.level).toBe('info');
+      expect(decision.log?.message).toMatch(/kept in the build output/);
+    });
+
+    it.each<SourceMapKind>(['hidden', 'visible'])('leaves a `%s` setting alone', kind => {
+      expect(decideSourceMapHandling(kind, options({ deleteSourcemapsAfterUpload: false }), true)).toEqual(NO_CHANGE);
+    });
+
+    it.each<SourceMapKind>(['off', 'inline'])('still warns about a `%s` setting', kind => {
+      const decision = decideSourceMapHandling(kind, options({ deleteSourcemapsAfterUpload: false }), true);
+
+      expect(decision).toMatchObject(NO_CHANGE);
+      expect(decision.log?.level).toBe('warn');
+    });
+  });
+
+  it.each<SourceMapKind>(['unset', 'off', 'visible', 'hidden', 'inline'])(
+    'does nothing for a `%s` setting when no upload can run',
+    kind => {
+      expect(decideSourceMapHandling(kind, options({ deleteSourcemapsAfterUpload: true }), false)).toEqual(NO_CHANGE);
+    },
+  );
+
+  it.each([true, 'disable-upload'] as const)('does nothing when `sourcemaps.disable` is `%s`', disable => {
+    expect(decideSourceMapHandling('unset', options({ disable, deleteSourcemapsAfterUpload: true }), true)).toEqual(
+      NO_CHANGE,
+    );
+  });
+});
diff --git a/packages/bundler-plugins/test/core/upload-staging.test.ts b/packages/bundler-plugins/test/core/upload-staging.test.ts
new file mode 100644
index 000000000000..ab87bf4f133f
--- /dev/null
+++ b/packages/bundler-plugins/test/core/upload-staging.test.ts
@@ -0,0 +1,384 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { createSentryBuildPluginManager } from '../../src/core/build-plugin-manager';
+
+const { mockSourcemapUpload } = vi.hoisted(() => ({ mockSourcemapUpload: vi.fn() }));
+
+vi.mock('sentry', () => ({
+  createSentrySDK: () => ({
+    release: { create: vi.fn(), finalize: vi.fn(), 'set-commits': vi.fn(), deploy: vi.fn() },
+    sourcemap: { upload: mockSourcemapUpload, inject: vi.fn() },
+    run: vi.fn(),
+  }),
+}));
+
+vi.mock('../../src/core/sentry/telemetry', async () => ({
+  ...(await vi.importActual('../../src/core/sentry/telemetry')),
+  safeFlushTelemetry: vi.fn(),
+}));
+
+const DEBUG_ID = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
+const OTHER_DEBUG_ID = '11111111-2222-3333-4444-555555555555';
+
+function chunk(debugId: string): string {
+  return `console.log(1);\n;!function(){try{var e={},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="${debugId}",e._sentryDebugIdIdentifier="sentry-dbid-${debugId}")}catch(e){}}();`;
+}
+
+const MAP = JSON.stringify({ version: 3, sources: ['/abs/src/index.ts'], mappings: 'AAAA' });
+
+function createManager(rewriteSources?: (source: string) => string) {
+  return createSentryBuildPluginManager(
+    {
+      authToken: 't',
+      org: 'o',
+      project: 'p',
+      release: { name: 'r', create: false, finalize: false },
+      telemetry: false,
+      sourcemaps: { rewriteSources },
+    },
+    { buildTool: 'rollup', loggerPrefix: '[test]' },
+  );
+}
+
+describe('createUploadStaging', () => {
+  let tmpDir: string;
+
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mockSourcemapUpload.mockResolvedValue(undefined);
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sentry-staging-test-'));
+  });
+
+  afterEach(() => {
+    delete process.env['SENTRY_TEST_OVERRIDE_TEMP_DIR'];
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  });
+
+  it('writes the stamped chunk and map into the staging folder', async () => {
+    const manager = createManager(source => path.basename(source));
+    const staging = await manager.createUploadStaging();
+
+    try {
+      const result = await staging.stage({
+        code: chunk(DEBUG_ID),
+        mapSource: MAP,
+        mapDir: '/out',
+        fileName: 'index.js',
+      });
+
+      expect(result).toBe('staged');
+      expect(staging.count).toBe(1);
+      expect(fs.readdirSync(staging.dir).sort()).toEqual([`${DEBUG_ID}-0.js`, `${DEBUG_ID}-0.js.map`]);
+      expect(fs.readFileSync(path.join(staging.dir, `${DEBUG_ID}-0.js`), 'utf8')).toContain(`//# debugId=${DEBUG_ID}`);
+
+      const map = JSON.parse(fs.readFileSync(path.join(staging.dir, `${DEBUG_ID}-0.js.map`), 'utf8'));
+      expect(map).toMatchObject({ debug_id: DEBUG_ID, debugId: DEBUG_ID, sources: ['index.ts'] });
+    } finally {
+      await staging.discard();
+    }
+  });
+
+  it('passes the map directory to the rewriteSources hook', async () => {
+    const rewriteSources = vi.fn((source: string) => source);
+    const manager = createManager(rewriteSources);
+    const staging = await manager.createUploadStaging();
+
+    try {
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out/assets', fileName: 'a.js' });
+    } finally {
+      await staging.discard();
+    }
+
+    expect(rewriteSources).toHaveBeenCalledWith('/abs/src/index.ts', expect.any(Object), { mapDir: '/out/assets' });
+  });
+
+  it('skips chunks without a debug ID or without a source map and does not count them', async () => {
+    const manager = createManager();
+    const staging = await manager.createUploadStaging();
+
+    try {
+      expect(await staging.stage({ code: 'console.log(1)', mapSource: MAP, mapDir: '/out', fileName: 'a.js' })).toBe(
+        'skipped',
+      );
+      expect(
+        await staging.stage({ code: chunk(DEBUG_ID), mapSource: undefined, mapDir: '/out', fileName: 'b.js' }),
+      ).toBe('skipped');
+      expect(staging.count).toBe(0);
+      expect(fs.readdirSync(staging.dir)).toEqual([]);
+    } finally {
+      await staging.discard();
+    }
+  });
+
+  it('removes the folder on discard', async () => {
+    const manager = createManager();
+    const staging = await manager.createUploadStaging();
+
+    await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+    await staging.discard();
+    await staging.discard();
+
+    expect(fs.existsSync(staging.dir)).toBe(false);
+  });
+
+  it('keeps the folder on discard when SENTRY_TEST_OVERRIDE_TEMP_DIR is set', async () => {
+    process.env['SENTRY_TEST_OVERRIDE_TEMP_DIR'] = tmpDir;
+    const manager = createManager();
+    const staging = await manager.createUploadStaging();
+
+    expect(staging.dir).toBe(tmpDir);
+    await staging.discard();
+
+    expect(fs.existsSync(tmpDir)).toBe(true);
+  });
+
+  it('keeps the folder and logs its path on keep', async () => {
+    const manager = createManager();
+    const errorSpy = vi.spyOn(manager.logger, 'error');
+    const staging = await manager.createUploadStaging();
+    await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+    try {
+      await staging.keep('The upload did not run.');
+      await staging.keep('The upload did not run.');
+      await staging.discard();
+
+      expect(fs.existsSync(staging.dir)).toBe(true);
+      expect(errorSpy).toHaveBeenCalledTimes(1);
+      expect(errorSpy).toHaveBeenCalledWith(
+        `The upload did not run. The source maps were kept in ${staging.dir}. Upload them with \`sentry sourcemap upload ${staging.dir}\`.`,
+      );
+    } finally {
+      fs.rmSync(staging.dir, { recursive: true, force: true });
+    }
+  });
+
+  it('removes the folder on keep when nothing was staged', async () => {
+    const manager = createManager();
+    const errorSpy = vi.spyOn(manager.logger, 'error');
+    const staging = await manager.createUploadStaging();
+
+    await staging.keep('The upload did not run.');
+
+    expect(fs.existsSync(staging.dir)).toBe(false);
+    expect(errorSpy).not.toHaveBeenCalled();
+  });
+
+  describe('uploadSourcemaps with a staging folder', () => {
+    it('uploads the staging folder and removes it afterwards', async () => {
+      const manager = createManager();
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+      const result = await manager.uploadSourcemaps([], { staging });
+
+      expect(result).toEqual({ uploaded: true });
+      expect(mockSourcemapUpload).toHaveBeenCalledWith(expect.objectContaining({ directory: staging.dir }));
+      expect(fs.existsSync(staging.dir)).toBe(false);
+    });
+
+    it('does not prepare a staged chunk again from disk', async () => {
+      fs.writeFileSync(path.join(tmpDir, 'index.js'), chunk(DEBUG_ID));
+      fs.writeFileSync(
+        path.join(tmpDir, 'index.js.map'),
+        JSON.stringify({ version: 3, sources: ['stale.ts'], mappings: '' }),
+      );
+      const manager = createManager();
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: tmpDir, fileName: 'index.js' });
+
+      let uploadedFiles: string[] = [];
+      let uploadedMaps = '';
+      mockSourcemapUpload.mockImplementation(async ({ directory }: { directory: string }) => {
+        uploadedFiles = fs.readdirSync(directory).sort();
+        uploadedMaps = uploadedFiles
+          .filter(file => file.endsWith('.map'))
+          .map(file => fs.readFileSync(path.join(directory, file), 'utf8'))
+          .join();
+      });
+
+      const result = await manager.uploadSourcemaps([path.join(tmpDir, '**/*.js')], { staging });
+
+      expect(result).toEqual({ uploaded: true });
+      expect(uploadedFiles).toEqual([`${DEBUG_ID}-0.js`, `${DEBUG_ID}-0.js.map`]);
+      expect(uploadedMaps).not.toContain('stale.ts');
+    });
+
+    it('numbers artifacts prepared from disk after the staged ones', async () => {
+      const outDir = path.join(tmpDir, 'out');
+      fs.mkdirSync(outDir);
+      fs.writeFileSync(path.join(outDir, 'disk.js'), `${chunk(OTHER_DEBUG_ID)}\n//# sourceMappingURL=disk.js.map`);
+      fs.writeFileSync(path.join(outDir, 'disk.js.map'), MAP);
+
+      const manager = createManager();
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: outDir, fileName: 'staged.js' });
+
+      let uploadedFiles: string[] = [];
+      mockSourcemapUpload.mockImplementation(async ({ directory }: { directory: string }) => {
+        uploadedFiles = fs.readdirSync(directory).sort();
+      });
+
+      await manager.uploadSourcemaps([path.join(outDir, 'disk.js')], { staging });
+
+      expect(uploadedFiles).toEqual([
+        `${OTHER_DEBUG_ID}-1.js`,
+        `${OTHER_DEBUG_ID}-1.js.map`,
+        `${DEBUG_ID}-0.js`,
+        `${DEBUG_ID}-0.js.map`,
+      ]);
+    });
+
+    it('does not warn about missing sources when artifacts were staged', async () => {
+      const manager = createManager();
+      const warnSpy = vi.spyOn(manager.logger, 'warn');
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+      await manager.uploadSourcemaps([], { staging });
+
+      expect(warnSpy).not.toHaveBeenCalled();
+      expect(mockSourcemapUpload).toHaveBeenCalledTimes(1);
+    });
+
+    it('discards an empty staging folder and warns when nothing matched on disk', async () => {
+      const manager = createManager();
+      const warnSpy = vi.spyOn(manager.logger, 'warn');
+      const staging = await manager.createUploadStaging();
+
+      const result = await manager.uploadSourcemaps([], { staging });
+
+      expect(result).toEqual({ uploaded: false });
+      expect(warnSpy).toHaveBeenCalledWith(expect.stringMatching(/matching sources/));
+      expect(mockSourcemapUpload).not.toHaveBeenCalled();
+      expect(fs.existsSync(staging.dir)).toBe(false);
+    });
+
+    it('discards the staging folder when the upload cannot run', async () => {
+      const manager = createSentryBuildPluginManager(
+        { org: 'o', project: 'p', release: { name: 'r' }, telemetry: false },
+        { buildTool: 'rollup', loggerPrefix: '[test]' },
+      );
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+      const result = await manager.uploadSourcemaps([], { staging });
+
+      expect(result).toEqual({ uploaded: false });
+      expect(mockSourcemapUpload).not.toHaveBeenCalled();
+      expect(fs.existsSync(staging.dir)).toBe(false);
+    });
+
+    it('keeps the staging folder and logs its path when the upload fails', async () => {
+      mockSourcemapUpload.mockRejectedValue(new Error('upload failed'));
+      const manager = createManager();
+      const errorSpy = vi.spyOn(manager.logger, 'error');
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+      try {
+        const result = await manager.uploadSourcemaps([], { staging });
+
+        expect(result).toEqual({ uploaded: false });
+        expect(errorSpy).toHaveBeenCalledWith(expect.stringContaining(`sentry sourcemap upload ${staging.dir}`));
+        expect(fs.existsSync(staging.dir)).toBe(true);
+      } finally {
+        await staging.discard();
+      }
+    });
+
+    it('uploads the staging folder next to the direct paths when prepareArtifacts is false', async () => {
+      const manager = createManager();
+      const staging = await manager.createUploadStaging();
+      await staging.stage({ code: chunk(DEBUG_ID), mapSource: MAP, mapDir: '/out', fileName: 'a.js' });
+
+      const result = await manager.uploadSourcemaps(['.next/server'], { staging, prepareArtifacts: false });
+
+      expect(result).toEqual({ uploaded: true });
+      expect(mockSourcemapUpload).toHaveBeenCalledTimes(2);
+      expect(mockSourcemapUpload).toHaveBeenCalledWith(expect.objectContaining({ directory: '.next/server' }));
+      expect(mockSourcemapUpload).toHaveBeenCalledWith(expect.objectContaining({ directory: staging.dir }));
+      expect(fs.existsSync(staging.dir)).toBe(false);
+    });
+
+    it('skips an empty staging folder when prepareArtifacts is false', async () => {
+      const manager = createManager();
+      const staging = await manager.createUploadStaging();
+
+      await manager.uploadSourcemaps(['.next/server'], { staging, prepareArtifacts: false });
+
+      expect(mockSourcemapUpload).toHaveBeenCalledTimes(1);
+      expect(mockSourcemapUpload).toHaveBeenCalledWith(expect.objectContaining({ directory: '.next/server' }));
+      expect(fs.existsSync(staging.dir)).toBe(false);
+    });
+
+    it('reports no upload when there is nothing to upload and prepareArtifacts is false', async () => {
+      const manager = createManager();
+      const warnSpy = vi.spyOn(manager.logger, 'warn');
+
+      const result = await manager.uploadSourcemaps([], { prepareArtifacts: false });
+
+      expect(result).toEqual({ uploaded: false });
+      expect(mockSourcemapUpload).not.toHaveBeenCalled();
+      expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining("Didn't find any matching sources"));
+    });
+  });
+});
+
+describe('sourceMaps', () => {
+  afterEach(() => {
+    delete process.env['NODE_ENV'];
+  });
+
+  it('reports that an upload is possible with credentials', () => {
+    expect(createManager().sourceMaps.uploadPossible).toBe(true);
+  });
+
+  it.each([
+    ['no auth token', { org: 'o', project: 'p' }],
+    ['no project', { org: 'o', authToken: 't' }],
+    ['upload disabled', { org: 'o', project: 'p', authToken: 't', sourcemaps: { disable: true as const } }],
+    ['an empty assets list', { org: 'o', project: 'p', authToken: 't', sourcemaps: { assets: [] } }],
+  ])('reports that no upload is possible with %s', (_, options) => {
+    const manager = createSentryBuildPluginManager(
+      { ...options, release: { name: 'r' }, telemetry: false },
+      { buildTool: 'rollup', loggerPrefix: '[test]' },
+    );
+
+    expect(manager.sourceMaps.uploadPossible).toBe(false);
+    expect(manager.sourceMaps.decide('unset')).toEqual({ enableHidden: false, deleteAfterUpload: false });
+  });
+
+  it('reports that no upload is possible in development mode', () => {
+    process.env['NODE_ENV'] = 'development';
+
+    expect(createManager().sourceMaps.uploadPossible).toBe(false);
+  });
+
+  it('logs the decision message once', () => {
+    const manager = createManager();
+    const infoSpy = vi.spyOn(manager.logger, 'info');
+    const { decide } = manager.sourceMaps;
+
+    expect(decide('unset')).toMatchObject({ enableHidden: true, deleteAfterUpload: true });
+    expect(decide('unset')).toMatchObject({ enableHidden: true, deleteAfterUpload: true });
+
+    expect(infoSpy).toHaveBeenCalledTimes(1);
+  });
+
+  it('is inert on a disabled plugin', async () => {
+    const manager = createSentryBuildPluginManager(
+      { disable: true, org: 'o', project: 'p', authToken: 't' },
+      { buildTool: 'rollup', loggerPrefix: '[test]' },
+    );
+
+    expect(manager.sourceMaps.uploadPossible).toBe(false);
+    expect(manager.sourceMaps.decide('unset')).toEqual({ enableHidden: false, deleteAfterUpload: false });
+
+    const staging = await manager.createUploadStaging();
+    expect(await staging.stage({ code: '', mapSource: undefined, mapDir: '', fileName: 'a.js' })).toBe('skipped');
+    expect(await manager.uploadSourcemaps([], { staging })).toEqual({ uploaded: false });
+  });
+});
diff --git a/packages/core/src/build-time-plugins/buildTimeOptionsBase.ts b/packages/core/src/build-time-plugins/buildTimeOptionsBase.ts
index 9cc883e8e257..49eaae2b7916 100644
--- a/packages/core/src/build-time-plugins/buildTimeOptionsBase.ts
+++ b/packages/core/src/build-time-plugins/buildTimeOptionsBase.ts
@@ -250,6 +250,15 @@ interface SourceMapsOptions {
    */
   filesToDeleteAfterUpload?: string | Array<string>;
 
+  /**
+   * Whether source maps are removed from the build output after they are uploaded to Sentry.
+   *
+   * When unset, the plugin removes only the source maps it turned on itself, that is, when the bundler's source map
+   * setting was not set. `true` also removes source maps you enabled yourself. `false` never removes them; the plugin
+   * still turns on hidden source maps when the setting is not set, so they can be uploaded.
+   */
+  deleteSourcemapsAfterUpload?: boolean;
+
   /**
    * Hook to rewrite the `sources` field inside the source map before being uploaded to Sentry. Does not modify the actual source map.
    *

From 51248d402e0ff053c9ea11c7f36dde627977c729 Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Thu, 29 Oct 2026 09:54:02 -0400
Subject: [PATCH 024/169] fix(solidstart): Serve the managed tunnel under
 Vite's base on SolidStart 2 (#25848)

On SolidStart 2 the managed tunnel ignored Vite's `base`, so behind a
proxy that only forwards the base path the browser's envelopes never
arrived. This is the last hold out.

This is fixed by passing the base path to the browser and to
`@sentry/nitro` through Nitro's runtime config. I added tunnel e2e
variants for prod and dev under `/app`, and the prod one fails before
the fix.

closes #25467
---
 .../solidstart-2/package.json                 | 19 ++++++++--
 .../solidstart-2/playwright.config.mjs        |  2 +-
 .../solidstart-2/server/middleware/auth.ts    |  8 +++++
 .../solidstart-2/server/plugins/sentry.ts     |  1 +
 .../solidstart-2/src/entry-client.tsx         |  6 ++--
 .../solidstart-2/tests/tunnel.test.ts         | 25 +++++++++++++
 .../solidstart-2/vite.config.ts               |  5 +++
 packages/nitro/src/module.ts                  |  4 ++-
 packages/nitro/src/runtime/plugins/server.ts  |  7 ++--
 packages/nitro/test/module.test.ts            | 12 +++++--
 packages/solidstart/src/common/tunnel.ts      |  4 +--
 .../solidstart/src/vite/sentrySolidStart.ts   | 35 +++++++++++++------
 .../test/vite/sentrySolidStart.test.ts        | 14 ++++++++
 13 files changed, 120 insertions(+), 22 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/solidstart-2/server/middleware/auth.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/solidstart-2/tests/tunnel.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/package.json b/dev-packages/e2e-tests/test-applications/solidstart-2/package.json
index a8336229c229..f0c55b3ba846 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-2/package.json
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/package.json
@@ -9,7 +9,10 @@
     "start": "HOST=localhost PORT=3030 node .output/server/index.mjs",
     "test:prod": "TEST_ENV=production playwright test",
     "test:build": "pnpm install && pnpm build",
-    "test:assert": "node assert-build.ts && pnpm test:prod"
+    "test:assert": "node assert-build.ts && pnpm test:prod",
+    "test:build:tunnel-basepath": "pnpm install && E2E_TEST_TUNNEL=1 E2E_TEST_BASE_PATH=/app pnpm build",
+    "test:assert:tunnel-basepath": "E2E_TEST_TUNNEL=1 E2E_TEST_BASE_PATH=/app E2E_TEST_DSN=http://public@localhost:3031/1337 pnpm test:prod tunnel",
+    "test:assert:tunnel-basepath-dev": "E2E_TEST_TUNNEL=1 E2E_TEST_BASE_PATH=/app E2E_TEST_DSN=http://public@localhost:3031/1337 TEST_ENV=development playwright test tunnel"
   },
   "type": "module",
   "dependencies": {
@@ -35,6 +38,18 @@
     "node": ">=24"
   },
   "sentryTest": {
-    "optional": true
+    "optional": true,
+    "variants": [
+      {
+        "build-command": "pnpm test:build:tunnel-basepath",
+        "assert-command": "pnpm test:assert:tunnel-basepath",
+        "label": "solidstart-2 (tunnel-basepath)"
+      },
+      {
+        "build-command": "pnpm install",
+        "assert-command": "pnpm test:assert:tunnel-basepath-dev",
+        "label": "solidstart-2 (tunnel-basepath-dev)"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/playwright.config.mjs b/dev-packages/e2e-tests/test-applications/solidstart-2/playwright.config.mjs
index b52ff06a5105..f1bae85626ba 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-2/playwright.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/playwright.config.mjs
@@ -1,7 +1,7 @@
 import { getPlaywrightConfig } from '@sentry-internal/test-utils';
 
 const config = getPlaywrightConfig({
-  startCommand: 'pnpm start',
+  startCommand: process.env.TEST_ENV === 'development' ? `HOST=localhost pnpm exec vite dev --port 3030` : 'pnpm start',
   port: 3030,
 });
 
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/server/middleware/auth.ts b/dev-packages/e2e-tests/test-applications/solidstart-2/server/middleware/auth.ts
new file mode 100644
index 000000000000..ae6375805232
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/server/middleware/auth.ts
@@ -0,0 +1,8 @@
+import { defineHandler, HTTPError } from 'nitro/h3';
+
+export default defineHandler(event => {
+  // The tunnel variant checks that the managed tunnel answers before an auth middleware like this one.
+  if (process.env.E2E_TEST_TUNNEL && event.req.method === 'POST' && event.req.headers.get('x-auth') !== 'ok') {
+    throw new HTTPError({ status: 401, statusText: 'blocked by user auth' });
+  }
+});
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/server/plugins/sentry.ts b/dev-packages/e2e-tests/test-applications/solidstart-2/server/plugins/sentry.ts
index 812abe8255fb..9a8a30675c38 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-2/server/plugins/sentry.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/server/plugins/sentry.ts
@@ -8,6 +8,7 @@ export default definePlugin(() => {
     environment: 'qa', // dynamic sampling bias to keep transactions
     tracesSampleRate: 1.0, //  Capture 100% of the transactions
     tunnel: 'http://localhost:3031/', // proxy server
+    integrations: process.env.E2E_TEST_TUNNEL ? [Sentry.serveTunnelIntegration()] : [],
     debug: !!process.env.DEBUG,
   });
 });
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/src/entry-client.tsx b/dev-packages/e2e-tests/test-applications/solidstart-2/src/entry-client.tsx
index 17e38cf08b72..e4413bd7e137 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-2/src/entry-client.tsx
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/src/entry-client.tsx
@@ -4,13 +4,15 @@ import * as Sentry from '@sentry/solidstart';
 import { solidRouterBrowserTracingIntegration } from '@sentry/solidstart/solidrouter';
 import { StartClient, mount } from '@solidjs/start/client';
 
+declare const __E2E_TEST_TUNNEL__: boolean;
+
 Sentry.init({
   // We can't use env variables here, seems like they are stripped
   // out in production builds.
-  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  dsn: __E2E_TEST_TUNNEL__ ? 'http://public@localhost:3031/1337' : 'https://public@dsn.ingest.sentry.io/1337',
   environment: 'qa', // dynamic sampling bias to keep transactions
   integrations: [solidRouterBrowserTracingIntegration()],
-  tunnel: 'http://localhost:3031/', // proxy server
+  tunnel: __E2E_TEST_TUNNEL__ ? true : 'http://localhost:3031/', // proxy server
   // Performance Monitoring
   tracesSampleRate: 1.0, //  Capture 100% of the transactions
   debug: !!import.meta.env.DEBUG,
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/tests/tunnel.test.ts b/dev-packages/e2e-tests/test-applications/solidstart-2/tests/tunnel.test.ts
new file mode 100644
index 000000000000..def91eb9d5e6
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/tests/tunnel.test.ts
@@ -0,0 +1,25 @@
+import { expect, test } from '@playwright/test';
+import { isServerSpanAt, watchForTunnelSpan } from '@sentry-internal/test-utils';
+
+test.skip(!process.env.E2E_TEST_TUNNEL, 'Only runs in the tunnel variants');
+
+const APP_NAME = 'solidstart-2';
+const BASE_PATH = process.env.E2E_TEST_BASE_PATH ?? '';
+const TUNNEL_PATH = new RegExp(`^${BASE_PATH}/[a-z0-9]{1,7}$`);
+
+test('answers the managed tunnel before the app auth middleware', async ({ page }) => {
+  // The variant's auth middleware rejects every other POST.
+  expect((await page.request.post(`${BASE_PATH}/`, { data: 'x' })).status()).toBe(401);
+
+  const raceTunnelSpan = watchForTunnelSpan(APP_NAME, isServerSpanAt(TUNNEL_PATH));
+  const tunnelResponsePromise = page.waitForResponse(
+    response => response.request().method() === 'POST' && TUNNEL_PATH.test(new URL(response.url()).pathname),
+  );
+
+  await page.goto(`${BASE_PATH}/`);
+
+  expect((await tunnelResponsePromise).status()).toBe(200);
+  expect(
+    await raceTunnelSpan(isServerSpanAt(`${BASE_PATH}/users/6`), () => page.request.get(`${BASE_PATH}/users/6`)),
+  ).toBe('anchor');
+});
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-2/vite.config.ts b/dev-packages/e2e-tests/test-applications/solidstart-2/vite.config.ts
index 74811201d2cf..24cb35bad781 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-2/vite.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-2/vite.config.ts
@@ -25,6 +25,11 @@ function recordChunksWithoutSourceMap() {
 }
 
 export default defineConfig({
+  // The base-path variant serves the app, and so the tunnel, under `/app`.
+  ...(process.env.E2E_TEST_BASE_PATH && { base: `${process.env.E2E_TEST_BASE_PATH}/` }),
+  define: {
+    __E2E_TEST_TUNNEL__: JSON.stringify(!!process.env.E2E_TEST_TUNNEL),
+  },
   plugins: [
     solidStart({
       appRoot: './src',
diff --git a/packages/nitro/src/module.ts b/packages/nitro/src/module.ts
index f8b6174a7874..16ef233a809d 100644
--- a/packages/nitro/src/module.ts
+++ b/packages/nitro/src/module.ts
@@ -17,7 +17,9 @@ export function createNitroModule(sentryOptions?: SentryNitroOptions, sentryEnab
       // In dev, Vite's server takes each request in this process before Nitro handles it, and its `http.server` span
       // comes from the SDK `--import` set up here. The runtime plugin only reaches the client where Nitro runs.
       if (nitro.options.dev) {
-        setManagedTunnelDefaults({ basePath: nitro.options.baseURL });
+        // `sentryTunnelBasePath` is set by `@sentry/solidstart`, whose app is served under Vite's `base`.
+        const tunnelBasePath = nitro.options.runtimeConfig.sentryTunnelBasePath as string | undefined;
+        setManagedTunnelDefaults({ basePath: tunnelBasePath || nitro.options.baseURL });
       }
     },
   };
diff --git a/packages/nitro/src/runtime/plugins/server.ts b/packages/nitro/src/runtime/plugins/server.ts
index 44ced3c5b3c3..edc7368060ce 100644
--- a/packages/nitro/src/runtime/plugins/server.ts
+++ b/packages/nitro/src/runtime/plugins/server.ts
@@ -11,8 +11,11 @@ export default definePlugin(nitroApp => {
 
   // Nitro runs the app's `middleware/` before anything a module registers, so an auth middleware there would block
   // the tunnel. Every preset hands requests to `nitroApp.fetch` after the plugins ran, so wrapping it goes first,
-  // before route rules and middleware. Requests still carry Nitro's `baseURL` here, so the tunnel is served under it.
-  setManagedTunnelDefaults({ basePath: (useRuntimeConfig() as { app?: { baseURL?: string } }).app?.baseURL });
+  // before route rules and middleware. Requests still carry Nitro's `baseURL` here, so the tunnel is served under it,
+  // unless a framework serves the app under another prefix: `@sentry/solidstart` sets `sentryTunnelBasePath` to Vite's
+  // `base`.
+  const runtimeConfig = useRuntimeConfig() as { app?: { baseURL?: string }; sentryTunnelBasePath?: string };
+  setManagedTunnelDefaults({ basePath: runtimeConfig.sentryTunnelBasePath || runtimeConfig.app?.baseURL });
   const appFetch = nitroApp.fetch;
   nitroApp.fetch = request => handleServedTunnelRequest(request) ?? appFetch(request);
 });
diff --git a/packages/nitro/test/module.test.ts b/packages/nitro/test/module.test.ts
index d65698d6eee0..c293176a5bd8 100644
--- a/packages/nitro/test/module.test.ts
+++ b/packages/nitro/test/module.test.ts
@@ -19,8 +19,8 @@ function setClient(managedTunnel: object): Record<string, unknown> {
   return options;
 }
 
-function setup(options: { dev: boolean; baseURL: string }): void {
-  (createNitroModule().setup as (nitro: unknown) => void)({ options });
+function setup(options: { dev: boolean; baseURL: string; runtimeConfig?: Record<string, unknown> }): void {
+  (createNitroModule().setup as (nitro: unknown) => void)({ options: { runtimeConfig: {}, ...options } });
 }
 
 describe('createNitroModule', () => {
@@ -44,4 +44,12 @@ describe('createNitroModule', () => {
 
     expect(options._managedTunnel).toEqual({});
   });
+
+  it("serves the dev server's managed tunnel under a framework's `sentryTunnelBasePath`", () => {
+    const options = setClient({});
+
+    setup({ dev: true, baseURL: '/', runtimeConfig: { sentryTunnelBasePath: '/app' } });
+
+    expect(options._managedTunnel).toEqual({ basePath: '/app' });
+  });
 });
diff --git a/packages/solidstart/src/common/tunnel.ts b/packages/solidstart/src/common/tunnel.ts
index 0f8761686010..9623abbc338e 100644
--- a/packages/solidstart/src/common/tunnel.ts
+++ b/packages/solidstart/src/common/tunnel.ts
@@ -7,8 +7,8 @@ export const TUNNEL_BASE_PATH_GLOBAL = '__sentry_solidstart_base_path';
 declare const __SENTRY_SOLIDSTART_TUNNEL_BASE_PATH__: string | undefined;
 
 /**
- * Serves the browser's managed tunnel under the app's `server.baseURL`, which `withSentry` defines at build time.
- * A `basePath` the user set wins.
+ * Serves the browser's managed tunnel under the app's base path, which `withSentry` (SolidStart 1) or
+ * `sentrySolidStart` (SolidStart 2) defines at build time. A `basePath` the user set wins.
  */
 export function applyTunnelBasePath(options: Pick<Options, 'tunnel'>): void {
   const basePath =
diff --git a/packages/solidstart/src/vite/sentrySolidStart.ts b/packages/solidstart/src/vite/sentrySolidStart.ts
index c68d9bada4cf..13972bbf3748 100644
--- a/packages/solidstart/src/vite/sentrySolidStart.ts
+++ b/packages/solidstart/src/vite/sentrySolidStart.ts
@@ -1,4 +1,8 @@
-import { type BuildTimeOptionsBase, warnOnRemovedBuildOptions } from '@sentry/core';
+import {
+  type BuildTimeOptionsBase,
+  _INTERNAL_normalizeTunnelBasePath as normalizeTunnelBasePath,
+  warnOnRemovedBuildOptions,
+} from '@sentry/core';
 import { setupSentryNitroModule } from '@sentry/nitro';
 import { sentryOrchestrionPlugin } from '@sentry/server-utils/orchestrion/vite';
 import type { Plugin, UserConfig } from 'vite';
@@ -60,11 +64,14 @@ export function sentrySolidStart(options: SentrySolidStartOptions = {}): Plugin[
 
 // Nitro's `NitroConfig` only matches `@sentry/nitro`'s when both resolve the same `nitro` install,
 // which is not guaranteed, so the key stays opaque rather than coupling the two copies.
-type ViteConfigWithNitro = UserConfig & { nitro?: Record<string, unknown> };
+type ViteConfigWithNitro = UserConfig & {
+  nitro?: Record<string, unknown>;
+  server?: UserConfig['server'] & { baseURL?: string };
+};
 
 /**
  * Delivers everything only Nitro can reach — server source maps, runtime hooks, the
- * `sourcemapMinify` opt-out — through Vite's `nitro` key.
+ * `sourcemapMinify` opt-out — through Vite's `nitro` key, and the app's base path to the browser SDK.
  *
  * `setupSentryNitroModule` is handed only the keys it reads, never the user's whole config, so what
  * comes back is purely Sentry's additions. Vite concatenates arrays when merging a `config` return
@@ -79,15 +86,23 @@ function makeSentryNitroPlugin(options: SentrySolidStartOptions): Plugin {
     enforce: 'pre',
     config(userConfig: ViteConfigWithNitro) {
       const userNitro = userConfig.nitro;
+      // SolidStart serves the app under Vite's `base` (or `server.baseURL`), not Nitro's `baseURL`, so the browser
+      // and the server both serve the managed tunnel under it.
+      const tunnelBasePath = normalizeTunnelBasePath(userConfig.server?.baseURL || userConfig.base);
 
       return {
-        nitro: setupSentryNitroModule(
-          // `sourcemap` decides whether Sentry enables its own; `tracingChannel` is left as the user set it.
-          { sourcemap: userNitro?.sourcemap, tracingChannel: userNitro?.tracingChannel } as Parameters<
-            typeof setupSentryNitroModule
-          >[0],
-          options,
-        ) as Record<string, unknown>,
+        define: { __SENTRY_SOLIDSTART_TUNNEL_BASE_PATH__: JSON.stringify(tunnelBasePath) },
+        nitro: {
+          ...(setupSentryNitroModule(
+            // `sourcemap` decides whether Sentry enables its own; `tracingChannel` is left as the user set it.
+            { sourcemap: userNitro?.sourcemap, tracingChannel: userNitro?.tracingChannel } as Parameters<
+              typeof setupSentryNitroModule
+            >[0],
+            options,
+          ) as Record<string, unknown>),
+          // `@sentry/nitro` serves the tunnel under this instead of Nitro's `baseURL`.
+          ...(tunnelBasePath && { runtimeConfig: { sentryTunnelBasePath: tunnelBasePath } }),
+        },
       } as Omit<UserConfig, 'plugins'>;
     },
   };
diff --git a/packages/solidstart/test/vite/sentrySolidStart.test.ts b/packages/solidstart/test/vite/sentrySolidStart.test.ts
index 75076c3ba99c..a2aadf600b2c 100644
--- a/packages/solidstart/test/vite/sentrySolidStart.test.ts
+++ b/packages/solidstart/test/vite/sentrySolidStart.test.ts
@@ -106,6 +106,20 @@ describe('sentrySolidStart()', () => {
       });
     });
 
+    it("serves the managed tunnel under Vite's `base` in the browser and on the server", () => {
+      const contributed = callConfigHook(getNitroPlugin(sentrySolidStart()), { base: '/app/' });
+
+      expect(contributed?.define).toEqual({ __SENTRY_SOLIDSTART_TUNNEL_BASE_PATH__: '"/app"' });
+      expect(contributed?.nitro?.runtimeConfig).toEqual({ sentryTunnelBasePath: '/app' });
+    });
+
+    it("leaves the server on Nitro's `baseURL` when the app has no base path", () => {
+      const contributed = callConfigHook(getNitroPlugin(sentrySolidStart()), { base: '/' });
+
+      expect(contributed?.define).toEqual({ __SENTRY_SOLIDSTART_TUNNEL_BASE_PATH__: '""' });
+      expect(contributed?.nitro?.runtimeConfig).toBeUndefined();
+    });
+
     it('enables hidden source maps and opts out of nitro sourcemap minification', () => {
       const contributed = callConfigHook(getNitroPlugin(sentrySolidStart()));
 

From f7b636437445f094410e3337462152b78059142b Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 15:49:03 +0100
Subject: [PATCH 025/169] fix(nextjs): Strip source map comments before
 trailing debug IDs (#25881)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** During upload, the CLI can append a `debugId` comment after a
Turbopack worker’s `sourceMappingURL`. Our stripping regex only matches
at the end of the file, leaving a reference to a deleted source map.
This fix allows the trailing debug ID and preserves it.

Closes #25874

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/config/handleRunAfterProductionCompile.ts  |  3 ++-
 .../config/handleRunAfterProductionCompile.test.ts | 14 ++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/packages/nextjs/src/config/handleRunAfterProductionCompile.ts b/packages/nextjs/src/config/handleRunAfterProductionCompile.ts
index 5d21f2653b3a..a9dafeaeac86 100644
--- a/packages/nextjs/src/config/handleRunAfterProductionCompile.ts
+++ b/packages/nextjs/src/config/handleRunAfterProductionCompile.ts
@@ -137,7 +137,8 @@ async function warnAboutUncoveredSourcemaps(
   }
 }
 
-const SOURCEMAPPING_URL_COMMENT_REGEX = /(?:^|\n)\/\/[#@] sourceMappingURL=[^\s'"`*]+\s*$/;
+const SOURCEMAPPING_URL_COMMENT_REGEX =
+  /(?:^|\r?\n)\/\/[#@] sourceMappingURL=[^\s'"`*]+\s*?(?=(?:\r?\n\/\/# debugId=[\da-fA-F-]+\s*)?$)/;
 const CSS_SOURCEMAPPING_URL_COMMENT_REGEX = /\n?\/\*[#@] sourceMappingURL=[^\s*]+\s*\*\/\s*$/;
 
 /**
diff --git a/packages/nextjs/test/config/handleRunAfterProductionCompile.test.ts b/packages/nextjs/test/config/handleRunAfterProductionCompile.test.ts
index b7a81d3fc1c0..634218b4cdaa 100644
--- a/packages/nextjs/test/config/handleRunAfterProductionCompile.test.ts
+++ b/packages/nextjs/test/config/handleRunAfterProductionCompile.test.ts
@@ -656,6 +656,20 @@ describe('stripSourceMappingURLComments', () => {
     expect(content).not.toContain('sourceMappingURL');
   });
 
+  it.each(['\n', '\r\n'])('preserves a trailing debugId comment with %j line endings', async newline => {
+    const filePath = path.join(tmpDir, 'chunks', 'turbopack-worker.js');
+    const debugIdComment = '//# debugId=12345678-1234-4234-8234-123456789abc';
+    await fs.promises.writeFile(
+      filePath,
+      `self.onmessage = () => {};${newline}//# sourceMappingURL=worker.js.map${newline}${debugIdComment}${newline}`,
+    );
+
+    await stripSourceMappingURLComments(tmpDir);
+
+    const content = await fs.promises.readFile(filePath, 'utf-8');
+    expect(content).toBe(`self.onmessage = () => {};${newline}${debugIdComment}${newline}`);
+  });
+
   it('strips sourceMappingURL comment from MJS files', async () => {
     const filePath = path.join(tmpDir, 'chunks', 'module.mjs');
     await fs.promises.writeFile(filePath, 'export default 42;\n//# sourceMappingURL=module.mjs.map');

From 46a1fd71b9ea16cdeb9e67abf6b2a862c6474e64 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:38:23 +0100
Subject: [PATCH 026/169] ref(astro): Use convention constants for attribute
 keys (#25894)

**Why:** Use the shared span-origin constant in the server SDK so the
attribute name comes from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/astro/src/server/sdk.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/astro/src/server/sdk.ts b/packages/astro/src/server/sdk.ts
index 6ba2703bc994..557c1b7812d7 100644
--- a/packages/astro/src/server/sdk.ts
+++ b/packages/astro/src/server/sdk.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
 import { applySdkMetadata } from '@sentry/core';
 import type { NodeClient, NodeOptions } from '@sentry/node';
@@ -20,7 +21,7 @@ export function init(options: NodeOptions): NodeClient | undefined {
     // we want to drop them
     // this is the case with http.server spans of prerendered pages
     // we do not care about those, as they are effectively static
-    { op: HTTP_SERVER, attributes: { 'sentry.origin': 'auto.http.http_server' } },
+    { op: HTTP_SERVER, attributes: { [SENTRY_ORIGIN]: 'auto.http.http_server' } },
   ];
 
   return initNodeSdk(opts);

From 52ea34a2b2bd4e1e6706f847c8d85f9d36b65810 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:40:38 +0100
Subject: [PATCH 027/169] ref(react-router): Use convention constants for
 attribute keys (#25906)

**Why:** Use shared constants for navigation and route attributes. Keep
the existing navigation key to avoid changing emitted telemetry in this
cleanup.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/client/createClientInstrumentation.ts       | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/packages/react-router/src/client/createClientInstrumentation.ts b/packages/react-router/src/client/createClientInstrumentation.ts
index fb77746120fc..cacbc2b8efeb 100644
--- a/packages/react-router/src/client/createClientInstrumentation.ts
+++ b/packages/react-router/src/client/createClientInstrumentation.ts
@@ -32,6 +32,8 @@ import {
   URL_FULL,
   URL_TEMPLATE,
   SENTRY_ORIGIN,
+  HTTP_ROUTE,
+  NAVIGATION_TYPE,
 } from '@sentry/conventions/attributes';
 import { FUNCTION, MIDDLEWARE, NAVIGATION } from '@sentry/conventions/op';
 
@@ -120,7 +122,8 @@ export function createSentryClientInstrumentation(
                 [SENTRY_SEGMENT_NAME_SOURCE]: 'url',
                 [SENTRY_OP]: NAVIGATION,
                 [SENTRY_ORIGIN]: 'auto.navigation.react_router.instrumentation_api',
-                'navigation.type': 'browser.popstate',
+                // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+                [NAVIGATION_TYPE]: 'browser.popstate',
               },
             },
             { url: getAbsoluteUrl(pathname) },
@@ -165,7 +168,8 @@ export function createSentryClientInstrumentation(
                     [SENTRY_SEGMENT_NAME_SOURCE]: 'url',
                     [SENTRY_OP]: NAVIGATION,
                     [SENTRY_ORIGIN]: 'auto.navigation.react_router.instrumentation_api',
-                    'navigation.type': navigationType,
+                    // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+                    [NAVIGATION_TYPE]: navigationType,
                   },
                 },
                 { url: getAbsoluteUrl(currentPathname) },
@@ -212,7 +216,8 @@ export function createSentryClientInstrumentation(
                   [SENTRY_SEGMENT_NAME_SOURCE]: 'url',
                   [SENTRY_OP]: NAVIGATION,
                   [SENTRY_ORIGIN]: 'auto.navigation.react_router.instrumentation_api',
-                  'navigation.type': 'router.navigate',
+                  // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+                  [NAVIGATION_TYPE]: 'router.navigate',
                 },
               },
               { url: resolveNavigateAbsoluteUrl(info.to, info.currentUrl) },
@@ -358,7 +363,7 @@ export function createSentryClientInstrumentation(
                 [CODE_FUNCTION_NAME]: 'clientMiddleware',
                 [SENTRY_ORIGIN]: 'auto.function.react_router.instrumentation_api',
                 'react_router.route.id': routeId,
-                'http.route': routePattern,
+                [HTTP_ROUTE]: routePattern,
                 'react_router.middleware.index': middlewareIndex,
               },
             },

From d0e4b27453824e59057ce15a1e6db06f2f88137b Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:41:05 +0100
Subject: [PATCH 028/169] ref(nuxt): Use convention constants for attribute
 keys (#25904)

**Why:** Use shared constants for middleware, database, and storage
attributes so these keys come from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/runtime/hooks/wrapMiddlewareHandler.ts  | 12 +++++++++---
 .../src/runtime/utils/database-span-data.ts     | 11 ++++++-----
 .../src/runtime/utils/instrumentDatabase.ts     |  2 +-
 .../nuxt/src/runtime/utils/instrumentStorage.ts | 17 +++++++++++++----
 4 files changed, 29 insertions(+), 13 deletions(-)

diff --git a/packages/nuxt/src/runtime/hooks/wrapMiddlewareHandler.ts b/packages/nuxt/src/runtime/hooks/wrapMiddlewareHandler.ts
index 270654bb9ff8..1786be5d69c1 100644
--- a/packages/nuxt/src/runtime/hooks/wrapMiddlewareHandler.ts
+++ b/packages/nuxt/src/runtime/hooks/wrapMiddlewareHandler.ts
@@ -1,4 +1,10 @@
-import { SENTRY_SEGMENT_NAME_SOURCE, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_SEGMENT_NAME_SOURCE,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  HTTP_REQUEST_METHOD,
+  HTTP_ROUTE,
+} from '@sentry/conventions/attributes';
 import { MIDDLEWARE } from '@sentry/conventions/op';
 import {
   captureException,
@@ -183,11 +189,11 @@ function getSpanAttributes(
   const path = event.path ?? eventH3v2?.url?.pathname;
 
   if (method) {
-    attributes['http.request.method'] = method;
+    attributes[HTTP_REQUEST_METHOD] = method;
   }
 
   if (path) {
-    attributes['http.route'] = path;
+    attributes[HTTP_ROUTE] = path;
   }
 
   // h3 v1 (Nuxt 4): headers are on event.node.req.headers
diff --git a/packages/nuxt/src/runtime/utils/database-span-data.ts b/packages/nuxt/src/runtime/utils/database-span-data.ts
index d69368c92e1e..ed3a4804a656 100644
--- a/packages/nuxt/src/runtime/utils/database-span-data.ts
+++ b/packages/nuxt/src/runtime/utils/database-span-data.ts
@@ -1,3 +1,4 @@
+import { DB_NAMESPACE, SERVER_ADDRESS, SERVER_PORT } from '@sentry/conventions/attributes';
 import type { ConnectorName } from 'db0';
 
 export interface DatabaseSpanData {
@@ -27,27 +28,27 @@ export function getDatabaseSpanData(config?: DatabaseConnectionConfig): Partial<
     if (!config?.connector) {
       // Default to SQLite if no connector is configured
       return {
-        'db.namespace': 'db.sqlite',
+        [DB_NAMESPACE]: 'db.sqlite',
       };
     }
 
     if (config.connector === 'postgresql' || config.connector === 'mysql2') {
       return {
-        'server.address': config.options?.host,
-        'server.port': config.options?.port,
+        [SERVER_ADDRESS]: config.options?.host,
+        [SERVER_PORT]: config.options?.port,
       };
     }
 
     if (config.connector === 'pglite') {
       return {
-        'db.namespace': config.options?.dataDir,
+        [DB_NAMESPACE]: config.options?.dataDir,
       };
     }
 
     if ((['better-sqlite3', 'bun', 'sqlite', 'sqlite3'] as ConnectorName[]).includes(config.connector)) {
       return {
         // DB is the default file name in nitro for sqlite-like connectors
-        'db.namespace': `${config.options?.name ?? 'db'}.sqlite`,
+        [DB_NAMESPACE]: `${config.options?.name ?? 'db'}.sqlite`,
       };
     }
 
diff --git a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
index 71149f91ff19..4c525e005869 100644
--- a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
@@ -248,7 +248,7 @@ function createBreadcrumb(query: string, dialect: SqlDialect | undefined): void
     category: 'query',
     message: queryText,
     data: {
-      'db.query.text': queryText,
+      [DB_QUERY_TEXT]: queryText,
     },
   });
 }
diff --git a/packages/nuxt/src/runtime/utils/instrumentStorage.ts b/packages/nuxt/src/runtime/utils/instrumentStorage.ts
index 1480c1b7b32d..f0dd1fb1b399 100644
--- a/packages/nuxt/src/runtime/utils/instrumentStorage.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentStorage.ts
@@ -1,4 +1,13 @@
-import { CACHE_HIT, CACHE_KEY, CACHE_OPERATION, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  CACHE_HIT,
+  CACHE_KEY,
+  CACHE_OPERATION,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  DB_COLLECTION_NAME,
+  DB_OPERATION_NAME,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 import { CACHE_GET, CACHE_PUT, CACHE_REMOVE } from '@sentry/conventions/op';
 import {
   CACHE_OPERATION_NAMES,
@@ -240,9 +249,9 @@ function createSpanStartOptions(
     [CACHE_OPERATION]: cacheOperationName,
     [SENTRY_ORIGIN]: 'auto.cache.nuxt',
     [CACHE_KEY]: keys.length > 1 ? keys : keys[0],
-    'db.operation.name': methodName,
-    'db.collection.name': mountBase.replace(/:$/, ''),
-    'db.system.name': driver.name ?? 'unknown',
+    [DB_OPERATION_NAME]: methodName,
+    [DB_COLLECTION_NAME]: mountBase.replace(/:$/, ''),
+    [DB_SYSTEM_NAME]: driver.name ?? 'unknown',
   };
 
   const client = getClient();

From 11abeaa8bc6aa7256ea59853d4d6a6f10b392007 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:41:44 +0100
Subject: [PATCH 029/169] ref(nextjs): Use convention constants for attribute
 keys (#25902)

**Why:** Use shared constants for navigation and queue attributes. Keep
the existing navigation key to avoid changing emitted telemetry in this
cleanup.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../appRouterRoutingInstrumentation.ts        | 13 ++++++---
 .../src/server/vercelQueuesMonitoring.ts      | 27 ++++++++++---------
 2 files changed, 24 insertions(+), 16 deletions(-)

diff --git a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
index 108637e5de2e..ba6e5c88986e 100644
--- a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
+++ b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
@@ -27,6 +27,7 @@ import {
   URL_PATH,
   URL_TEMPLATE,
   SENTRY_ORIGIN,
+  NAVIGATION_TYPE,
 } from '@sentry/conventions/attributes';
 import { NAVIGATION, PAGELOAD } from '@sentry/conventions/op';
 
@@ -239,7 +240,8 @@ export function appRouterInstrumentNavigation(client: Client): void {
     if (currentNavigationSpan) {
       currentNavigationSpan.updateName(spanName);
       currentNavigationSpan.setAttributes({
-        'navigation.type': `router.${navigationType}`,
+        // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+        [NAVIGATION_TYPE]: `router.${navigationType}`,
         [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
         ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
       });
@@ -254,7 +256,8 @@ export function appRouterInstrumentNavigation(client: Client): void {
             [SENTRY_OP]: NAVIGATION,
             [SENTRY_ORIGIN]: 'auto.navigation.nextjs.app_router_instrumentation',
             [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
-            'navigation.type': `router.${navigationType}`,
+            // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+            [NAVIGATION_TYPE]: `router.${navigationType}`,
             ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
           },
         },
@@ -291,7 +294,8 @@ export function appRouterInstrumentNavigation(client: Client): void {
           attributes: {
             [SENTRY_ORIGIN]: 'auto.navigation.nextjs.app_router_instrumentation',
             [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
-            'navigation.type': traversal?.navigationType ?? 'browser.popstate',
+            // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+            [NAVIGATION_TYPE]: traversal?.navigationType ?? 'browser.popstate',
             ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
           },
         },
@@ -388,7 +392,8 @@ function patchRouter(client: Client, router: NextRouter, currentNavigationSpanRe
                 [SENTRY_OP]: NAVIGATION,
                 [SENTRY_ORIGIN]: 'auto.navigation.nextjs.app_router_instrumentation',
                 [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
-                'navigation.type': `router.${routerFunctionName}`,
+                // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+                [NAVIGATION_TYPE]: `router.${routerFunctionName}`,
                 ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
               },
             },
diff --git a/packages/nextjs/src/server/vercelQueuesMonitoring.ts b/packages/nextjs/src/server/vercelQueuesMonitoring.ts
index e4216afd6c88..977046b79045 100644
--- a/packages/nextjs/src/server/vercelQueuesMonitoring.ts
+++ b/packages/nextjs/src/server/vercelQueuesMonitoring.ts
@@ -1,12 +1,15 @@
-import { URL_FULL } from '@sentry/conventions/attributes';
+import {
+  URL_FULL,
+  MESSAGING_DESTINATION_NAME,
+  MESSAGING_MESSAGE_ID,
+  MESSAGING_OPERATION_NAME,
+  MESSAGING_SYSTEM,
+} from '@sentry/conventions/attributes';
 import type { Span } from '@sentry/core';
 import { getIsolationScope, spanToJSON } from '@sentry/core';
 
 // OTel Messaging semantic convention attribute keys
-const ATTR_MESSAGING_SYSTEM = 'messaging.system';
-const ATTR_MESSAGING_DESTINATION_NAME = 'messaging.destination.name';
-const ATTR_MESSAGING_MESSAGE_ID = 'messaging.message.id';
-const ATTR_MESSAGING_OPERATION_NAME = 'messaging.operation.name';
+
 const ATTR_MESSAGING_CONSUMER_GROUP_NAME = 'messaging.consumer.group.name';
 const ATTR_MESSAGING_MESSAGE_DELIVERY_COUNT = 'messaging.message.delivery_count';
 
@@ -40,15 +43,15 @@ export function maybeEnrichQueueConsumerSpan(span: Span): void {
   const consumerGroup = getHeader(headers, 'ce-vqsconsumergroup');
   const deliveryCount = getHeader(headers, 'ce-vqsdeliverycount');
 
-  span.setAttribute(ATTR_MESSAGING_SYSTEM, 'vercel.queue');
-  span.setAttribute(ATTR_MESSAGING_OPERATION_NAME, 'process');
+  span.setAttribute(MESSAGING_SYSTEM, 'vercel.queue');
+  span.setAttribute(MESSAGING_OPERATION_NAME, 'process');
 
   if (queueName) {
-    span.setAttribute(ATTR_MESSAGING_DESTINATION_NAME, queueName);
+    span.setAttribute(MESSAGING_DESTINATION_NAME, queueName);
   }
 
   if (messageId) {
-    span.setAttribute(ATTR_MESSAGING_MESSAGE_ID, messageId);
+    span.setAttribute(MESSAGING_MESSAGE_ID, messageId);
   }
 
   if (consumerGroup) {
@@ -101,9 +104,9 @@ export function maybeEnrichQueueProducerSpan(span: Span): void {
 
   const topic = decodeURIComponent(topicMatch[1]!);
 
-  span.setAttribute(ATTR_MESSAGING_SYSTEM, 'vercel.queue');
-  span.setAttribute(ATTR_MESSAGING_DESTINATION_NAME, topic);
-  span.setAttribute(ATTR_MESSAGING_OPERATION_NAME, 'send');
+  span.setAttribute(MESSAGING_SYSTEM, 'vercel.queue');
+  span.setAttribute(MESSAGING_DESTINATION_NAME, topic);
+  span.setAttribute(MESSAGING_OPERATION_NAME, 'send');
 
   // Mark span so we can clean up marker on spanEnd
   span.setAttribute(ATTR_SENTRY_QUEUE_ENRICHED, true);

From 1c73883575d6f61dd4d3cc7315c28213e1c26cfe Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:42:11 +0100
Subject: [PATCH 030/169] ref(google-cloud-serverless): Use convention
 constants for attribute keys (#25901)

**Why:** Use shared constants for the function-context mapping so the
emitted keys come from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/integrations/gcp-context.ts           | 29 +++++++++++++------
 1 file changed, 20 insertions(+), 9 deletions(-)

diff --git a/packages/google-cloud-serverless/src/integrations/gcp-context.ts b/packages/google-cloud-serverless/src/integrations/gcp-context.ts
index d7a68b371a68..594d66ac4126 100644
--- a/packages/google-cloud-serverless/src/integrations/gcp-context.ts
+++ b/packages/google-cloud-serverless/src/integrations/gcp-context.ts
@@ -1,16 +1,27 @@
+import {
+  GCP_FUNCTION_CONTEXT_EVENT_ID,
+  GCP_FUNCTION_CONTEXT_EVENT_TYPE,
+  GCP_FUNCTION_CONTEXT_ID,
+  GCP_FUNCTION_CONTEXT_RESOURCE,
+  GCP_FUNCTION_CONTEXT_SOURCE,
+  GCP_FUNCTION_CONTEXT_SPECVERSION,
+  GCP_FUNCTION_CONTEXT_TIME,
+  GCP_FUNCTION_CONTEXT_TIMESTAMP,
+  GCP_FUNCTION_CONTEXT_TYPE,
+} from '@sentry/conventions/attributes';
 import type { IntegrationFn } from '@sentry/core';
 import { defineIntegration, getCurrentScope, safeSetSpanJSONAttributes } from '@sentry/core';
 
 const GCP_CONTEXT_ATTRIBUTE_MAP: Record<string, string> = {
-  type: 'gcp.function.context.type',
-  source: 'gcp.function.context.source',
-  id: 'gcp.function.context.id',
-  specversion: 'gcp.function.context.specversion',
-  time: 'gcp.function.context.time',
-  eventId: 'gcp.function.context.event_id',
-  timestamp: 'gcp.function.context.timestamp',
-  eventType: 'gcp.function.context.event_type',
-  resource: 'gcp.function.context.resource',
+  type: GCP_FUNCTION_CONTEXT_TYPE,
+  source: GCP_FUNCTION_CONTEXT_SOURCE,
+  id: GCP_FUNCTION_CONTEXT_ID,
+  specversion: GCP_FUNCTION_CONTEXT_SPECVERSION,
+  time: GCP_FUNCTION_CONTEXT_TIME,
+  eventId: GCP_FUNCTION_CONTEXT_EVENT_ID,
+  timestamp: GCP_FUNCTION_CONTEXT_TIMESTAMP,
+  eventType: GCP_FUNCTION_CONTEXT_EVENT_TYPE,
+  resource: GCP_FUNCTION_CONTEXT_RESOURCE,
 };
 
 const _gcpContextIntegration = (() => {

From 59fc61492c0143fe22a5cdd8a5fd4bd3ea28ab6c Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:42:51 +0100
Subject: [PATCH 031/169] ref(node): Use convention constants for attribute
 keys (#25903)

**Why:** Use shared constants for context, HTTP, logging, and
runtime-metric attributes. Preserve existing names, including the
deprecated OS build key.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/node/src/integrations/context.ts     | 96 ++++++++++++-------
 .../http/httpServerSpansIntegration.ts        |  6 +-
 .../src/integrations/nodeRuntimeMetrics.ts    |  7 +-
 packages/node/src/integrations/pino.ts        |  3 +-
 packages/node/src/integrations/winston.ts     |  3 +-
 packages/node/src/logs/capture.ts             |  3 +-
 packages/node/src/sdk/client.ts               |  3 +-
 7 files changed, 76 insertions(+), 45 deletions(-)

diff --git a/packages/node/src/integrations/context.ts b/packages/node/src/integrations/context.ts
index c35f74b350c6..ef967476b57f 100644
--- a/packages/node/src/integrations/context.ts
+++ b/packages/node/src/integrations/context.ts
@@ -1,5 +1,28 @@
 /* eslint-disable max-lines */
 
+import {
+  APP_START_TIME,
+  CLOUD_ACCOUNT_ID,
+  CLOUD_AVAILABILITY_ZONE,
+  CLOUD_PLATFORM,
+  CLOUD_PROVIDER,
+  CLOUD_REGION,
+  CULTURE_LOCALE,
+  CULTURE_TIMEZONE,
+  DEVICE_ARCHS,
+  DEVICE_BOOT_TIME,
+  DEVICE_CPU_DESCRIPTION,
+  DEVICE_FREE_MEMORY,
+  DEVICE_MEMORY_SIZE,
+  DEVICE_PROCESSOR_COUNT,
+  DEVICE_PROCESSOR_FREQUENCY,
+  OS_BUILD,
+  OS_KERNEL_VERSION,
+  OS_NAME,
+  OS_VERSION,
+  PROCESS_RUNTIME_ENGINE_NAME,
+  PROCESS_RUNTIME_ENGINE_VERSION,
+} from '@sentry/conventions/attributes';
 import { execFile } from 'node:child_process';
 import { readdir, readFile } from 'node:fs';
 import * as os from 'node:os';
@@ -54,8 +77,8 @@ const _nodeContextIntegration = ((options: ContextOptions = {}) => {
 
   // Map static context data to span attributes
   const cachedSpanAttributes: Record<string, unknown> = {
-    'process.runtime.engine.name': 'v8',
-    'process.runtime.engine.version': process.versions.v8,
+    [PROCESS_RUNTIME_ENGINE_NAME]: 'v8',
+    [PROCESS_RUNTIME_ENGINE_VERSION]: process.versions.v8,
     ...contextsToSpanAttributes({
       app: appContext,
       device: deviceContext,
@@ -156,52 +179,53 @@ export function contextsToSpanAttributes(contexts: Contexts): Record<string, unk
 
   if (app) {
     if (app.app_start_time) {
-      attrs['app.start_time'] = app.app_start_time;
+      attrs[APP_START_TIME] = app.app_start_time;
     }
   }
 
   if (device) {
     if (device.arch) {
-      attrs['device.archs'] = [device.arch];
+      attrs[DEVICE_ARCHS] = [device.arch];
     }
     if (device.boot_time) {
-      attrs['device.boot_time'] = device.boot_time;
+      attrs[DEVICE_BOOT_TIME] = device.boot_time;
     }
     if (device.memory_size != null) {
-      attrs['device.memory_size'] = device.memory_size;
+      attrs[DEVICE_MEMORY_SIZE] = device.memory_size;
     }
     if (device.processor_count != null) {
-      attrs['device.processor_count'] = device.processor_count;
+      attrs[DEVICE_PROCESSOR_COUNT] = device.processor_count;
     }
     if (device.cpu_description) {
-      attrs['device.cpu_description'] = device.cpu_description;
+      attrs[DEVICE_CPU_DESCRIPTION] = device.cpu_description;
     }
     if (device.processor_frequency != null) {
-      attrs['device.processor_frequency'] = device.processor_frequency;
+      attrs[DEVICE_PROCESSOR_FREQUENCY] = device.processor_frequency;
     }
   }
 
   if (osCtx) {
     if (osCtx.name) {
-      attrs['os.name'] = osCtx.name;
+      attrs[OS_NAME] = osCtx.name;
     }
     if (osCtx.version) {
-      attrs['os.version'] = osCtx.version;
+      attrs[OS_VERSION] = osCtx.version;
     }
     if (osCtx.kernel_version) {
-      attrs['os.kernel_version'] = osCtx.kernel_version;
+      attrs[OS_KERNEL_VERSION] = osCtx.kernel_version;
     }
     if (osCtx.build) {
-      attrs['os.build'] = osCtx.build;
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      attrs[OS_BUILD] = osCtx.build;
     }
   }
 
   if (culture) {
     if (culture.locale) {
-      attrs['culture.locale'] = culture.locale;
+      attrs[CULTURE_LOCALE] = culture.locale;
     }
     if (culture.timezone) {
-      attrs['culture.timezone'] = culture.timezone;
+      attrs[CULTURE_TIMEZONE] = culture.timezone;
     }
   }
 
@@ -235,7 +259,7 @@ export function getDynamicSpanAttributes(
 
   // Only include if memory tracking was initially enabled (indicated by free_memory being set)
   if (deviceContext?.free_memory != null) {
-    attrs['device.free_memory'] = os.freemem();
+    attrs[DEVICE_FREE_MEMORY] = os.freemem();
   }
 
   return attrs;
@@ -519,62 +543,62 @@ function getCloudResourceContext(): CloudResourceContext | undefined {
   if (process.env.VERCEL) {
     // https://vercel.com/docs/concepts/projects/environment-variables/system-environment-variables#system-environment-variables
     return {
-      'cloud.provider': 'vercel',
-      'cloud.region': process.env.VERCEL_REGION,
+      [CLOUD_PROVIDER]: 'vercel',
+      [CLOUD_REGION]: process.env.VERCEL_REGION,
     };
   } else if (process.env.AWS_REGION) {
     // https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html
     return {
-      'cloud.provider': 'aws',
-      'cloud.region': process.env.AWS_REGION,
-      'cloud.platform': process.env.AWS_EXECUTION_ENV,
+      [CLOUD_PROVIDER]: 'aws',
+      [CLOUD_REGION]: process.env.AWS_REGION,
+      [CLOUD_PLATFORM]: process.env.AWS_EXECUTION_ENV,
     };
   } else if (process.env.GCP_PROJECT) {
     // https://cloud.google.com/composer/docs/how-to/managing/environment-variables#reserved_variables
     return {
-      'cloud.provider': 'gcp',
+      [CLOUD_PROVIDER]: 'gcp',
     };
   } else if (process.env.ALIYUN_REGION_ID) {
     // TODO: find where I found these environment variables - at least gc.github.com returns something
     return {
-      'cloud.provider': 'alibaba_cloud',
-      'cloud.region': process.env.ALIYUN_REGION_ID,
+      [CLOUD_PROVIDER]: 'alibaba_cloud',
+      [CLOUD_REGION]: process.env.ALIYUN_REGION_ID,
     };
   } else if (process.env.WEBSITE_SITE_NAME && process.env.REGION_NAME) {
     // https://learn.microsoft.com/en-us/azure/app-service/reference-app-settings?tabs=kudu%2Cdotnet#app-environment
     return {
-      'cloud.provider': 'azure',
-      'cloud.region': process.env.REGION_NAME,
+      [CLOUD_PROVIDER]: 'azure',
+      [CLOUD_REGION]: process.env.REGION_NAME,
     };
   } else if (process.env.IBM_CLOUD_REGION) {
     // TODO: find where I found these environment variables - at least gc.github.com returns something
     return {
-      'cloud.provider': 'ibm_cloud',
-      'cloud.region': process.env.IBM_CLOUD_REGION,
+      [CLOUD_PROVIDER]: 'ibm_cloud',
+      [CLOUD_REGION]: process.env.IBM_CLOUD_REGION,
     };
   } else if (process.env.TENCENTCLOUD_REGION) {
     // https://www.tencentcloud.com/document/product/583/32748
     return {
-      'cloud.provider': 'tencent_cloud',
-      'cloud.region': process.env.TENCENTCLOUD_REGION,
-      'cloud.account.id': process.env.TENCENTCLOUD_APPID,
-      'cloud.availability_zone': process.env.TENCENTCLOUD_ZONE,
+      [CLOUD_PROVIDER]: 'tencent_cloud',
+      [CLOUD_REGION]: process.env.TENCENTCLOUD_REGION,
+      [CLOUD_ACCOUNT_ID]: process.env.TENCENTCLOUD_APPID,
+      [CLOUD_AVAILABILITY_ZONE]: process.env.TENCENTCLOUD_ZONE,
     };
   } else if (process.env.NETLIFY) {
     // https://docs.netlify.com/configure-builds/environment-variables/#read-only-variables
     return {
-      'cloud.provider': 'netlify',
+      [CLOUD_PROVIDER]: 'netlify',
     };
   } else if (process.env.FLY_REGION) {
     // https://fly.io/docs/reference/runtime-environment/
     return {
-      'cloud.provider': 'fly.io',
-      'cloud.region': process.env.FLY_REGION,
+      [CLOUD_PROVIDER]: 'fly.io',
+      [CLOUD_REGION]: process.env.FLY_REGION,
     };
   } else if (process.env.DYNO) {
     // https://devcenter.heroku.com/articles/dynos#local-environment-variables
     return {
-      'cloud.provider': 'heroku',
+      [CLOUD_PROVIDER]: 'heroku',
     };
   } else {
     return undefined;
diff --git a/packages/node/src/integrations/http/httpServerSpansIntegration.ts b/packages/node/src/integrations/http/httpServerSpansIntegration.ts
index db9c231a810f..4d896a62485d 100644
--- a/packages/node/src/integrations/http/httpServerSpansIntegration.ts
+++ b/packages/node/src/integrations/http/httpServerSpansIntegration.ts
@@ -25,6 +25,8 @@ import {
   URL_SCHEME,
   USER_AGENT_ORIGINAL,
   SENTRY_ORIGIN,
+  HTTP_REQUEST_BODY_SIZE,
+  HTTP_RESPONSE_STATUS_TEXT,
 } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
 import type { Event, Integration, IntegrationFn, Span, SpanAttributes, SpanStatus } from '@sentry/core';
@@ -188,7 +190,7 @@ const _httpServerSpansIntegration = ((options: HttpServerSpansIntegrationOptions
               [NETWORK_PROTOCOL_NAME]: 'http',
               [NETWORK_PROTOCOL_VERSION]: httpVersion,
               [NETWORK_TRANSPORT]: httpVersion?.toUpperCase() === 'QUIC' ? 'udp' : 'tcp',
-              'http.request.body.size': getContentLengthFromHeaders(request.headers),
+              [HTTP_REQUEST_BODY_SIZE]: getContentLengthFromHeaders(request.headers),
               ...httpHeadersToSpanAttributes(normalizedRequest.headers || {}, client.getDataCollectionOptions()),
             },
           });
@@ -362,7 +364,7 @@ function getIncomingRequestAttributesOnResponse(
 
   const newAttributes: SpanAttributes = {
     [HTTP_RESPONSE_STATUS_CODE]: statusCode,
-    'http.response.status_text': statusMessage?.toUpperCase(),
+    [HTTP_RESPONSE_STATUS_TEXT]: statusMessage?.toUpperCase(),
   };
 
   // `client.address` is the originating client, so a forwarding header wins over the socket, which
diff --git a/packages/node/src/integrations/nodeRuntimeMetrics.ts b/packages/node/src/integrations/nodeRuntimeMetrics.ts
index 0c2b92307778..3b203586e15f 100644
--- a/packages/node/src/integrations/nodeRuntimeMetrics.ts
+++ b/packages/node/src/integrations/nodeRuntimeMetrics.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import { monitorEventLoopDelay, performance } from 'perf_hooks';
 import { _INTERNAL_safeDateNow, defineIntegration, metrics } from '@sentry/core';
 import { _INTERNAL_safeUnref } from '@sentry/core/server';
@@ -138,9 +139,9 @@ export const nodeRuntimeMetricsIntegration = defineIntegration((options: NodeRun
   const resolutionNs = EVENT_LOOP_DELAY_RESOLUTION_MS * 1e6;
   const nsToS = (ns: number): number => Math.max(0, (ns - resolutionNs) / 1e9);
 
-  const METRIC_ATTRIBUTES = { attributes: { 'sentry.origin': 'auto.node.runtime_metrics' } };
-  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { 'sentry.origin': 'auto.node.runtime_metrics' } };
-  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { 'sentry.origin': 'auto.node.runtime_metrics' } };
+  const METRIC_ATTRIBUTES = { attributes: { [SENTRY_ORIGIN]: 'auto.node.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { [SENTRY_ORIGIN]: 'auto.node.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { [SENTRY_ORIGIN]: 'auto.node.runtime_metrics' } };
 
   function collectMetrics(): void {
     const now = _INTERNAL_safeDateNow();
diff --git a/packages/node/src/integrations/pino.ts b/packages/node/src/integrations/pino.ts
index c5560f0c34d5..e058975a3511 100644
--- a/packages/node/src/integrations/pino.ts
+++ b/packages/node/src/integrations/pino.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import type { IntegrationFn, LogSeverityLevel } from '@sentry/core';
 import {
   _INTERNAL_captureLog,
@@ -142,7 +143,7 @@ const _pinoIntegration = defineIntegration((userOptions: DeepPartial<PinoOptions
         if (options.log.levels.includes(level)) {
           const attributes: Record<string, unknown> = {
             ...resultObj,
-            'sentry.origin': 'auto.log.pino',
+            [SENTRY_ORIGIN]: 'auto.log.pino',
             'pino.logger.level': levelNumber,
           };
 
diff --git a/packages/node/src/integrations/winston.ts b/packages/node/src/integrations/winston.ts
index fd0d510599d4..289d3463dab4 100644
--- a/packages/node/src/integrations/winston.ts
+++ b/packages/node/src/integrations/winston.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 /* eslint-disable @typescript-eslint/ban-ts-comment */
 import type { LogSeverityLevel } from '@sentry/core';
 import { debug, isObjectLike } from '@sentry/core';
@@ -109,7 +110,7 @@ export function createSentryWinstonTransport<TransportStreamInstance extends obj
         if (this._levels.has(logSeverityLevel)) {
           captureLog(logSeverityLevel, message as string, {
             ...attributes,
-            'sentry.origin': 'auto.log.winston',
+            [SENTRY_ORIGIN]: 'auto.log.winston',
           });
         } else if (!customLevel && !winstonLogLevel) {
           DEBUG_BUILD &&
diff --git a/packages/node/src/logs/capture.ts b/packages/node/src/logs/capture.ts
index 8c77186785ff..0b6761333ae4 100644
--- a/packages/node/src/logs/capture.ts
+++ b/packages/node/src/logs/capture.ts
@@ -1,3 +1,4 @@
+import { SENTRY_MESSAGE_TEMPLATE } from '@sentry/conventions/attributes';
 import { format } from 'node:util';
 import type { Log, LogSeverityLevel, ParameterizedString, Scope } from '@sentry/core';
 import { _INTERNAL_captureLog } from '@sentry/core';
@@ -36,7 +37,7 @@ export function captureLog(level: LogSeverityLevel, ...args: CaptureLogArgs): vo
   if (Array.isArray(paramsOrAttributes)) {
     // type-casting here because from the type definitions we know that `maybeAttributesOrMetadata` is an attributes object (or undefined)
     const attributes = { ...(maybeAttributesOrMetadata as Log['attributes'] | undefined) };
-    attributes['sentry.message.template'] = messageOrMessageTemplate;
+    attributes[SENTRY_MESSAGE_TEMPLATE] = messageOrMessageTemplate;
     paramsOrAttributes.forEach((param, index) => {
       attributes[`sentry.message.parameter.${index}`] = param;
     });
diff --git a/packages/node/src/sdk/client.ts b/packages/node/src/sdk/client.ts
index e9dd30bf7bac..835a4dab387f 100644
--- a/packages/node/src/sdk/client.ts
+++ b/packages/node/src/sdk/client.ts
@@ -1,3 +1,4 @@
+import { SERVER_ADDRESS } from '@sentry/conventions/attributes';
 import * as os from 'node:os';
 import type { Tracer } from '@opentelemetry/api';
 import { trace } from '@opentelemetry/api';
@@ -68,7 +69,7 @@ export class NodeClient extends ServerRuntimeClient<NodeClientOptions> {
       this.on('beforeCaptureLog', log => {
         log.attributes = {
           ...log.attributes,
-          'server.address': serverName,
+          [SERVER_ADDRESS]: serverName,
         };
       });
     }

From b85e0a6150b1a0d92c897835a98d57631010fb81 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:43:19 +0100
Subject: [PATCH 032/169] ref(cloudflare): Use convention constants for
 attribute keys (#25898)

**Why:** Use shared constants for storage, D1, queue, workflow, and
request attributes so these keys come from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../instrumentDurableObjectStorage.ts         |  6 +--
 .../instrumentDurableObjectSyncKvStorage.ts   |  6 +--
 .../instrumentations/instrumentSqlStorage.ts  | 20 +++++++---
 .../instrumentations/worker/instrumentD1.ts   | 37 ++++++++++++-------
 .../worker/instrumentQueue.ts                 | 27 ++++++++++----
 .../worker/instrumentQueueProducer.ts         | 23 ++++++++----
 packages/cloudflare/src/scope-utils.ts        |  3 +-
 packages/cloudflare/src/workflows.ts          | 15 +++++---
 .../src/wrapRequestHandlerWithInit.ts         |  6 ++-
 9 files changed, 95 insertions(+), 48 deletions(-)

diff --git a/packages/cloudflare/src/instrumentations/instrumentDurableObjectStorage.ts b/packages/cloudflare/src/instrumentations/instrumentDurableObjectStorage.ts
index e1d1a3fc1025..eabad9dee209 100644
--- a/packages/cloudflare/src/instrumentations/instrumentDurableObjectStorage.ts
+++ b/packages/cloudflare/src/instrumentations/instrumentDurableObjectStorage.ts
@@ -1,5 +1,5 @@
 import type { DurableObjectStorage, SyncKvStorage, SqlStorage } from '@cloudflare/workers-types';
-import { SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import { SENTRY_OP, SENTRY_ORIGIN, DB_OPERATION_NAME, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import { getClient, isThenable, startSpan } from '@sentry/core';
 import type { CloudflareClientOptions } from '../client';
@@ -76,8 +76,8 @@ export function instrumentDurableObjectStorage(
             attributes: {
               [SENTRY_OP]: DB,
               [SENTRY_ORIGIN]: 'auto.db.cloudflare.durable_object',
-              'db.system.name': 'cloudflare.durable_object.storage',
-              'db.operation.name': methodName,
+              [DB_SYSTEM_NAME]: 'cloudflare.durable_object.storage',
+              [DB_OPERATION_NAME]: methodName,
             },
           },
           () => {
diff --git a/packages/cloudflare/src/instrumentations/instrumentDurableObjectSyncKvStorage.ts b/packages/cloudflare/src/instrumentations/instrumentDurableObjectSyncKvStorage.ts
index eb21b57a2fbf..2ab1d58d69f0 100644
--- a/packages/cloudflare/src/instrumentations/instrumentDurableObjectSyncKvStorage.ts
+++ b/packages/cloudflare/src/instrumentations/instrumentDurableObjectSyncKvStorage.ts
@@ -1,5 +1,5 @@
 import type { SyncKvStorage } from '@cloudflare/workers-types';
-import { SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import { SENTRY_OP, SENTRY_ORIGIN, DB_OPERATION_NAME, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import { startSpan } from '@sentry/core';
 
@@ -31,8 +31,8 @@ export function instrumentDurableObjectSyncKvStorage(syncKv: SyncKvStorage): Syn
               [SENTRY_ORIGIN]: 'auto.db.cloudflare.durable_object',
               // keeping the value as close as possible to the Cloudflare Worker KV instrumentation
               // https://github.com/cloudflare/workerd/blob/6b8b11787e2b2a800ab0edd0690bfab3857b0529/src/workerd/api/sync-kv.c%2B%2B#L19
-              'db.system.name': 'cloudflare-durable-object-sql',
-              'db.operation.name': methodName,
+              [DB_SYSTEM_NAME]: 'cloudflare-durable-object-sql',
+              [DB_OPERATION_NAME]: methodName,
             },
           },
           () => {
diff --git a/packages/cloudflare/src/instrumentations/instrumentSqlStorage.ts b/packages/cloudflare/src/instrumentations/instrumentSqlStorage.ts
index 8147a2a2bdbb..61dfed37366b 100644
--- a/packages/cloudflare/src/instrumentations/instrumentSqlStorage.ts
+++ b/packages/cloudflare/src/instrumentations/instrumentSqlStorage.ts
@@ -1,5 +1,13 @@
 import type { SqlStorage } from '@cloudflare/workers-types';
-import { SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  CLOUDFLARE_DURABLE_OBJECT_QUERY_BINDINGS,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 import { DB_QUERY } from '@sentry/conventions/op';
 import { getActiveSpan, getClient, hasSpansEnabled, spanIsSampled, startSpan } from '@sentry/core';
 import { getSqlQuerySummary, sanitizeSqlQuery } from '@sentry/server-utils';
@@ -9,8 +17,8 @@ import { mayTargetCloudflareInternalTable, targetsCloudflareInternalTable } from
 const SPAN_ATTRIBUTES = {
   [SENTRY_OP]: DB_QUERY,
   [SENTRY_ORIGIN]: 'auto.db.cloudflare.durable_object_sql',
-  'db.system.name': 'cloudflare-durable-object-sql',
-  'db.operation.name': 'exec',
+  [DB_SYSTEM_NAME]: 'cloudflare-durable-object-sql',
+  [DB_OPERATION_NAME]: 'exec',
 };
 
 /**
@@ -58,9 +66,9 @@ export function instrumentSqlStorage(sql: SqlStorage): SqlStorage {
             name: querySummary || sanitizedQuery,
             attributes: {
               ...SPAN_ATTRIBUTES,
-              'db.query.text': sanitizedQuery,
-              'db.query.summary': querySummary,
-              'cloudflare.durable_object.query.bindings': bindings.length,
+              [DB_QUERY_TEXT]: sanitizedQuery,
+              [DB_QUERY_SUMMARY]: querySummary,
+              [CLOUDFLARE_DURABLE_OBJECT_QUERY_BINDINGS]: bindings.length,
             },
           },
           callOriginal,
diff --git a/packages/cloudflare/src/instrumentations/worker/instrumentD1.ts b/packages/cloudflare/src/instrumentations/worker/instrumentD1.ts
index 42b01428816c..f76426956138 100644
--- a/packages/cloudflare/src/instrumentations/worker/instrumentD1.ts
+++ b/packages/cloudflare/src/instrumentations/worker/instrumentD1.ts
@@ -1,6 +1,17 @@
 /* eslint-disable @typescript-eslint/unbound-method */
 import type { D1Database, D1DatabaseSession, D1PreparedStatement, D1Response } from '@cloudflare/workers-types';
-import { SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  CLOUDFLARE_D1_DURATION,
+  CLOUDFLARE_D1_ROWS_READ,
+  CLOUDFLARE_D1_ROWS_WRITTEN,
+  DB_OPERATION_BATCH_SIZE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 import { DB_QUERY } from '@sentry/conventions/op';
 import type { Span, SpanAttributes, StartSpanOptions } from '@sentry/core';
 import { addBreadcrumb, getClient, hasSpanStreamingEnabled, SPAN_STATUS_ERROR, startSpan } from '@sentry/core';
@@ -106,9 +117,9 @@ function applyD1ReturnObjectToSpan(span: Span, d1Result: D1Response): void {
 
 function getAttributesFromD1Response(d1Result: D1Response): SpanAttributes {
   return {
-    'cloudflare.d1.duration': d1Result.meta.duration,
-    'cloudflare.d1.rows_read': d1Result.meta.rows_read,
-    'cloudflare.d1.rows_written': d1Result.meta.rows_written,
+    [CLOUDFLARE_D1_DURATION]: d1Result.meta.duration,
+    [CLOUDFLARE_D1_ROWS_READ]: d1Result.meta.rows_read,
+    [CLOUDFLARE_D1_ROWS_WRITTEN]: d1Result.meta.rows_written,
   };
 }
 
@@ -121,7 +132,7 @@ function createD1Breadcrumb(message: string | undefined, type: D1QueryType, d1Re
     message,
     data: {
       ...(d1Result ? getAttributesFromD1Response(d1Result) : {}),
-      'db.operation.name': type,
+      [DB_OPERATION_NAME]: type,
     },
   });
 }
@@ -137,10 +148,10 @@ function createStartSpanOptions(queryText: string | undefined, type: D1QueryType
     name,
     attributes: {
       [SENTRY_OP]: DB_QUERY,
-      'db.system.name': 'cloudflare-d1',
-      'db.operation.name': type,
-      'db.query.text': queryText,
-      'db.query.summary': querySummary,
+      [DB_SYSTEM_NAME]: 'cloudflare-d1',
+      [DB_OPERATION_NAME]: type,
+      [DB_QUERY_TEXT]: queryText,
+      [DB_QUERY_SUMMARY]: querySummary,
       [SENTRY_ORIGIN]: 'auto.db.cloudflare.d1',
     },
   };
@@ -176,10 +187,10 @@ function instrumentBatch(
           name: 'D1 batch',
           attributes: {
             [SENTRY_OP]: DB_QUERY,
-            'db.system.name': 'cloudflare-d1',
-            'db.operation.name': 'batch',
-            'db.query.text': queryText || undefined,
-            'db.operation.batch.size': statements.length,
+            [DB_SYSTEM_NAME]: 'cloudflare-d1',
+            [DB_OPERATION_NAME]: 'batch',
+            [DB_QUERY_TEXT]: queryText || undefined,
+            [DB_OPERATION_BATCH_SIZE]: statements.length,
             [SENTRY_ORIGIN]: 'auto.db.cloudflare.d1',
           },
         },
diff --git a/packages/cloudflare/src/instrumentations/worker/instrumentQueue.ts b/packages/cloudflare/src/instrumentations/worker/instrumentQueue.ts
index b12f01474d6a..34e2d8bddd7c 100644
--- a/packages/cloudflare/src/instrumentations/worker/instrumentQueue.ts
+++ b/packages/cloudflare/src/instrumentations/worker/instrumentQueue.ts
@@ -1,7 +1,18 @@
 import type { MessageBatch } from '@cloudflare/workers-types';
 import type { AnyExportedHandler } from '../../types';
 import type { env as cloudflareEnv, WorkerEntrypoint } from 'cloudflare:workers';
-import { SENTRY_SEGMENT_NAME_SOURCE, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_SEGMENT_NAME_SOURCE,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  FAAS_TRIGGER,
+  MESSAGING_BATCH_MESSAGE_COUNT,
+  MESSAGING_DESTINATION_NAME,
+  MESSAGING_MESSAGE_RETRY_COUNT,
+  MESSAGING_OPERATION_NAME,
+  MESSAGING_OPERATION_TYPE,
+  MESSAGING_SYSTEM,
+} from '@sentry/conventions/attributes';
 import { QUEUE_PROCESS } from '@sentry/conventions/op';
 import { captureException, startSpan, withIsolationScope } from '@sentry/core';
 import type { CloudflareOptions } from '../../client';
@@ -38,13 +49,13 @@ function wrapQueueHandler(
         name: `process ${batch.queue}`,
         attributes: {
           [SENTRY_OP]: QUEUE_PROCESS,
-          'faas.trigger': 'pubsub',
-          'messaging.destination.name': batch.queue,
-          'messaging.system': 'cloudflare',
-          'messaging.operation.type': 'process',
-          'messaging.operation.name': 'process',
-          'messaging.batch.message_count': batch.messages.length,
-          'messaging.message.retry.count': batch.messages.reduce((acc, message) => acc + message.attempts - 1, 0),
+          [FAAS_TRIGGER]: 'pubsub',
+          [MESSAGING_DESTINATION_NAME]: batch.queue,
+          [MESSAGING_SYSTEM]: 'cloudflare',
+          [MESSAGING_OPERATION_TYPE]: 'process',
+          [MESSAGING_OPERATION_NAME]: 'process',
+          [MESSAGING_BATCH_MESSAGE_COUNT]: batch.messages.length,
+          [MESSAGING_MESSAGE_RETRY_COUNT]: batch.messages.reduce((acc, message) => acc + message.attempts - 1, 0),
           [SENTRY_ORIGIN]: 'auto.faas.cloudflare.queue',
           [SENTRY_SEGMENT_NAME_SOURCE]: 'task',
         },
diff --git a/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts b/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
index 3460ea32c633..866e50e3e4dd 100644
--- a/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
+++ b/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
@@ -1,5 +1,14 @@
 import type { MessageSendRequest, Queue, QueueSendBatchOptions, QueueSendOptions } from '@cloudflare/workers-types';
-import { SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  MESSAGING_BATCH_MESSAGE_COUNT,
+  MESSAGING_DESTINATION_NAME,
+  MESSAGING_MESSAGE_BODY_SIZE,
+  MESSAGING_OPERATION_NAME,
+  MESSAGING_OPERATION_TYPE,
+  MESSAGING_SYSTEM,
+} from '@sentry/conventions/attributes';
 import { QUEUE_PUBLISH } from '@sentry/conventions/op';
 import { startSpan } from '@sentry/core';
 
@@ -19,12 +28,12 @@ function startPublishSpan<T>(
     {
       name: `send ${bindingName}`,
       attributes: {
-        'messaging.system': 'cloudflare',
-        'messaging.destination.name': bindingName,
-        'messaging.operation.type': 'send',
-        'messaging.operation.name': 'send',
-        ...(messageCount !== undefined && { 'messaging.batch.message_count': messageCount }),
-        'messaging.message.body.size': bodySize,
+        [MESSAGING_SYSTEM]: 'cloudflare',
+        [MESSAGING_DESTINATION_NAME]: bindingName,
+        [MESSAGING_OPERATION_TYPE]: 'send',
+        [MESSAGING_OPERATION_NAME]: 'send',
+        ...(messageCount !== undefined && { [MESSAGING_BATCH_MESSAGE_COUNT]: messageCount }),
+        [MESSAGING_MESSAGE_BODY_SIZE]: bodySize,
         [SENTRY_OP]: QUEUE_PUBLISH,
         [SENTRY_ORIGIN]: ORIGIN,
       },
diff --git a/packages/cloudflare/src/scope-utils.ts b/packages/cloudflare/src/scope-utils.ts
index 7c46e8af1001..540a4589c1a5 100644
--- a/packages/cloudflare/src/scope-utils.ts
+++ b/packages/cloudflare/src/scope-utils.ts
@@ -1,3 +1,4 @@
+import { CLOUD_PROVIDER } from '@sentry/conventions/attributes';
 import type { CfProperties, IncomingRequestCfProperties } from '@cloudflare/workers-types';
 import type { Scope } from '@sentry/core';
 import { winterCGRequestToRequestData } from '@sentry/core';
@@ -7,7 +8,7 @@ import { winterCGRequestToRequestData } from '@sentry/core';
  */
 export function addCloudResourceContext(scope: Scope): void {
   scope.setContext('cloud_resource', {
-    'cloud.provider': 'cloudflare',
+    [CLOUD_PROVIDER]: 'cloudflare',
   });
 }
 
diff --git a/packages/cloudflare/src/workflows.ts b/packages/cloudflare/src/workflows.ts
index ec065bca348e..f4869a38615e 100644
--- a/packages/cloudflare/src/workflows.ts
+++ b/packages/cloudflare/src/workflows.ts
@@ -3,6 +3,11 @@ import {
   CODE_FUNCTION_NAME,
   SENTRY_OP,
   SENTRY_ORIGIN,
+  CLOUDFLARE_WORKFLOW_ATTEMPT,
+  CLOUDFLARE_WORKFLOW_RETRIES_BACKOFF,
+  CLOUDFLARE_WORKFLOW_RETRIES_DELAY,
+  CLOUDFLARE_WORKFLOW_RETRIES_LIMIT,
+  CLOUDFLARE_WORKFLOW_TIMEOUT,
 } from '@sentry/conventions/attributes';
 import { FUNCTION } from '@sentry/conventions/op';
 import type { PropagationContext, Scope } from '@sentry/core';
@@ -136,13 +141,13 @@ class WrappedWorkflowStep implements WorkflowStep {
               [SENTRY_OP]: FUNCTION,
               [CODE_FUNCTION_NAME]: name,
               'workflow.step.name': name,
-              'cloudflare.workflow.timeout': config?.timeout,
-              'cloudflare.workflow.retries.backoff': config?.retries?.backoff,
+              [CLOUDFLARE_WORKFLOW_TIMEOUT]: config?.timeout,
+              [CLOUDFLARE_WORKFLOW_RETRIES_BACKOFF]: config?.retries?.backoff,
               // In workers-types v5, `delay` may be a `WorkflowDelayFunction`, which isn't a valid span attribute value.
-              'cloudflare.workflow.retries.delay':
+              [CLOUDFLARE_WORKFLOW_RETRIES_DELAY]:
                 typeof config?.retries?.delay === 'function' ? undefined : config?.retries?.delay,
-              'cloudflare.workflow.retries.limit': config?.retries?.limit,
-              'cloudflare.workflow.attempt': attempt,
+              [CLOUDFLARE_WORKFLOW_RETRIES_LIMIT]: config?.retries?.limit,
+              [CLOUDFLARE_WORKFLOW_ATTEMPT]: attempt,
               [SENTRY_ORIGIN]: 'auto.faas.cloudflare.workflow',
               [SENTRY_SEGMENT_NAME_SOURCE]: 'task',
             },
diff --git a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
index fbc5262c3e55..9c2126b9add2 100644
--- a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
+++ b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
@@ -4,6 +4,8 @@ import {
   NETWORK_PROTOCOL_VERSION,
   SENTRY_OP,
   SENTRY_SEGMENT_NAME_SOURCE,
+  HTTP_REQUEST_BODY_SIZE,
+  USER_AGENT_ORIGINAL,
 } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
 import type { Span } from '@sentry/core';
@@ -113,12 +115,12 @@ export function wrapRequestHandlerWithInit(
 
     const contentLength = request.headers.get('content-length');
     if (contentLength) {
-      attributes['http.request.body.size'] = parseInt(contentLength, 10);
+      attributes[HTTP_REQUEST_BODY_SIZE] = parseInt(contentLength, 10);
     }
 
     const userAgentHeader = request.headers.get('user-agent');
     if (userAgentHeader) {
-      attributes['user_agent.original'] = userAgentHeader;
+      attributes[USER_AGENT_ORIGINAL] = userAgentHeader;
     }
 
     if (client) {

From 023cbc6876e70601c2e3629cfb609ad8d04cfff3 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:43:53 +0100
Subject: [PATCH 033/169] ref(sveltekit): Use convention constants for
 attribute keys (#25909)

**Why:** Use shared constants for navigation and tracing attributes.
Preserve the existing SvelteKit navigation keys even though their
constants are deprecated.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/client/svelte4BrowserTracing.ts       | 19 +++++++++++++++----
 .../src/client/svelte5BrowserTracing.ts       | 19 +++++++++++++++----
 .../sveltekit/src/server-common/handle.ts     |  3 ++-
 3 files changed, 32 insertions(+), 9 deletions(-)

diff --git a/packages/sveltekit/src/client/svelte4BrowserTracing.ts b/packages/sveltekit/src/client/svelte4BrowserTracing.ts
index 19c0f3600b98..9dbb21336021 100644
--- a/packages/sveltekit/src/client/svelte4BrowserTracing.ts
+++ b/packages/sveltekit/src/client/svelte4BrowserTracing.ts
@@ -12,7 +12,15 @@ import {
   startInactiveSpan,
   WINDOW,
 } from '@sentry/svelte';
-import { SENTRY_SEGMENT_NAME_SOURCE, SENTRY_OP, URL_TEMPLATE, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_SEGMENT_NAME_SOURCE,
+  SENTRY_OP,
+  URL_TEMPLATE,
+  SENTRY_ORIGIN,
+  SENTRY_SVELTEKIT_NAVIGATION_FROM,
+  SENTRY_SVELTEKIT_NAVIGATION_TO,
+  SENTRY_SVELTEKIT_NAVIGATION_TYPE,
+} from '@sentry/conventions/attributes';
 import { NAVIGATION, PAGELOAD, ROUTER } from '@sentry/conventions/op';
 import type { Navigation, Page } from '@sveltejs/kit';
 // eslint-disable-next-line typescript/no-deprecated
@@ -112,9 +120,12 @@ function _instrumentNavigations(client: Client, navigatingStore: Readable<Naviga
     }
 
     const navigationInfo = {
-      'sentry.sveltekit.navigation.type': navigation.type,
-      'sentry.sveltekit.navigation.from': parameterizedRouteOrigin || undefined,
-      'sentry.sveltekit.navigation.to': parameterizedRouteDestination || undefined,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_TYPE]: navigation.type,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_FROM]: parameterizedRouteOrigin || undefined,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_TO]: parameterizedRouteDestination || undefined,
     };
 
     startBrowserTracingNavigationSpan(
diff --git a/packages/sveltekit/src/client/svelte5BrowserTracing.ts b/packages/sveltekit/src/client/svelte5BrowserTracing.ts
index 356edfbfdb27..b8388adc91b6 100644
--- a/packages/sveltekit/src/client/svelte5BrowserTracing.ts
+++ b/packages/sveltekit/src/client/svelte5BrowserTracing.ts
@@ -12,7 +12,15 @@ import {
   startInactiveSpan,
   WINDOW,
 } from '@sentry/svelte';
-import { SENTRY_SEGMENT_NAME_SOURCE, SENTRY_OP, URL_TEMPLATE, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  SENTRY_SEGMENT_NAME_SOURCE,
+  SENTRY_OP,
+  URL_TEMPLATE,
+  SENTRY_ORIGIN,
+  SENTRY_SVELTEKIT_NAVIGATION_FROM,
+  SENTRY_SVELTEKIT_NAVIGATION_TO,
+  SENTRY_SVELTEKIT_NAVIGATION_TYPE,
+} from '@sentry/conventions/attributes';
 import { NAVIGATION, PAGELOAD, ROUTER } from '@sentry/conventions/op';
 import type { Navigation } from '@sveltejs/kit';
 import { getCurrentNavigation, onNavigationChange, onPageRouteChange } from './navigationState.svelte';
@@ -92,9 +100,12 @@ function _instrumentNavigations(client: Client): void {
     routingSpan?.end();
 
     const navigationInfo = {
-      'sentry.sveltekit.navigation.type': navigation.type,
-      'sentry.sveltekit.navigation.from': parameterizedRouteOrigin || undefined,
-      'sentry.sveltekit.navigation.to': parameterizedRouteDestination || undefined,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_TYPE]: navigation.type,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_FROM]: parameterizedRouteOrigin || undefined,
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      [SENTRY_SVELTEKIT_NAVIGATION_TO]: parameterizedRouteDestination || undefined,
     };
 
     startBrowserTracingNavigationSpan(
diff --git a/packages/sveltekit/src/server-common/handle.ts b/packages/sveltekit/src/server-common/handle.ts
index a910add9b0d1..c9ad219f9b86 100644
--- a/packages/sveltekit/src/server-common/handle.ts
+++ b/packages/sveltekit/src/server-common/handle.ts
@@ -36,6 +36,7 @@ import {
   URL_FULL,
   URL_PATH,
   SENTRY_ORIGIN,
+  SVELTEKIT_TRACING_ORIGINAL_NAME,
 } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
 
@@ -212,7 +213,7 @@ async function instrumentHandle(
           [SENTRY_OP]: HTTP_SERVER,
           [SENTRY_ORIGIN]: 'auto.http.sveltekit',
           [SENTRY_SEGMENT_NAME_SOURCE]: routeName ? 'route' : 'url',
-          'sveltekit.tracing.original_name': originalName,
+          [SVELTEKIT_TRACING_ORIGINAL_NAME]: originalName,
           [URL_FULL]: kitRootSpanAttributes[URL_FULL] ?? filterCollectedUrl(event.url.href),
           [URL_PATH]: kitRootSpanAttributes[URL_PATH] ?? event.url.pathname,
           ...(routeName && {

From 6b2cf3d3a1a0f700952112417b29392a730691fe Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:45:36 +0100
Subject: [PATCH 034/169] ref(server-utils): Use convention constants for
 attribute keys (#25908)

**Why:** Replace hardcoded integration attribute keys and duplicate
local constants with conventions exports. Preserve the existing database
connection-string attribute for compatibility.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../server-utils/src/integrations/amqplib.ts    | 13 ++++++-------
 .../src/integrations/graphql/constants.ts       |  3 +--
 .../src/integrations/kafkajs/semconv.ts         | 15 ++++++---------
 .../src/integrations/mongodb/mongodb-span.ts    |  7 +++----
 packages/server-utils/src/integrations/mysql.ts |  8 +++-----
 .../integrations/nitro/captureStorageEvents.ts  | 17 +++++++++++++----
 .../integrations/nitro/captureTracingEvents.ts  |  4 ++--
 .../src/integrations/postgres-js.ts             |  5 +----
 .../server-utils/src/integrations/postgres.ts   | 10 +++++-----
 .../server-utils/src/integrations/postgresjs.ts |  6 ++++--
 10 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/packages/server-utils/src/integrations/amqplib.ts b/packages/server-utils/src/integrations/amqplib.ts
index f5db922608a8..dcd0346cac1e 100644
--- a/packages/server-utils/src/integrations/amqplib.ts
+++ b/packages/server-utils/src/integrations/amqplib.ts
@@ -26,6 +26,8 @@ import {
   SERVER_PORT,
   URL_FULL,
   SENTRY_ORIGIN,
+  MESSAGING_MESSAGE_CONVERSATION_ID,
+  MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY,
 } from '@sentry/conventions/attributes';
 import { QUEUE_PROCESS, QUEUE_PUBLISH } from '@sentry/conventions/op';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
@@ -41,9 +43,6 @@ const INTEGRATION_NAME = 'Amqplib' as const;
 const PUBLISHER_ORIGIN = 'auto.queue.amqplib.publisher';
 const CONSUMER_ORIGIN = 'auto.queue.amqplib.consumer';
 
-const ATTR_MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY = 'messaging.rabbitmq.destination.routing_key';
-const ATTR_MESSAGING_CONVERSATION_ID = 'messaging.message.conversation_id';
-
 const MESSAGING_OPERATION_VALUE_PROCESS = 'process';
 const MESSAGING_OPERATION_VALUE_SEND = 'send';
 
@@ -498,11 +497,11 @@ function startPublishSpan(data: AmqpChannelContext): Span {
       [SENTRY_KIND]: 'producer',
       ...getStoredConnectionAttributes(data.self),
       [MESSAGING_DESTINATION_NAME]: destination,
-      [ATTR_MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY]: routingKey,
+      [MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY]: routingKey,
       [MESSAGING_OPERATION_NAME]: MESSAGING_OPERATION_VALUE_SEND,
       [MESSAGING_OPERATION_TYPE]: MESSAGING_OPERATION_VALUE_SEND,
       [MESSAGING_MESSAGE_ID]: options?.messageId as string | undefined,
-      [ATTR_MESSAGING_CONVERSATION_ID]: options?.correlationId as string | undefined,
+      [MESSAGING_MESSAGE_CONVERSATION_ID]: options?.correlationId as string | undefined,
       [SENTRY_ORIGIN]: PUBLISHER_ORIGIN,
     },
   });
@@ -544,11 +543,11 @@ function startConsumeSpan(queue: string | undefined, msg: ConsumeMessage, channe
       [SENTRY_SEGMENT_NAME_SOURCE]: 'component',
       ...getStoredConnectionAttributes(channel),
       [MESSAGING_DESTINATION_NAME]: destination,
-      [ATTR_MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY]: msg.fields?.routingKey,
+      [MESSAGING_RABBITMQ_DESTINATION_ROUTING_KEY]: msg.fields?.routingKey,
       [MESSAGING_OPERATION_NAME]: MESSAGING_OPERATION_VALUE_PROCESS,
       [MESSAGING_OPERATION_TYPE]: MESSAGING_OPERATION_VALUE_PROCESS,
       [MESSAGING_MESSAGE_ID]: msg.properties?.messageId as string | undefined,
-      [ATTR_MESSAGING_CONVERSATION_ID]: msg.properties?.correlationId as string | undefined,
+      [MESSAGING_MESSAGE_CONVERSATION_ID]: msg.properties?.correlationId as string | undefined,
       [SENTRY_ORIGIN]: CONSUMER_ORIGIN,
     },
   });
diff --git a/packages/server-utils/src/integrations/graphql/constants.ts b/packages/server-utils/src/integrations/graphql/constants.ts
index 7a6f556d0c6d..10e8ff72a670 100644
--- a/packages/server-utils/src/integrations/graphql/constants.ts
+++ b/packages/server-utils/src/integrations/graphql/constants.ts
@@ -9,8 +9,7 @@ export const SPAN_NAME_EXECUTE = 'graphql.execute';
 export const SPAN_NAME_SUBSCRIBE = 'graphql.subscribe';
 export const SPAN_NAME_RESOLVE = 'graphql.resolve';
 
-// Inlined until `@sentry/conventions` ships it (https://github.com/getsentry/sentry-conventions/pull/572).
-export const GRAPHQL_PROCESSING_TYPE = 'graphql.processing.type';
+export { GRAPHQL_PROCESSING_TYPE } from '@sentry/conventions/attributes';
 
 export const PROCESSING_TYPE_PARSE = 'parse';
 export const PROCESSING_TYPE_VALIDATE = 'validate';
diff --git a/packages/server-utils/src/integrations/kafkajs/semconv.ts b/packages/server-utils/src/integrations/kafkajs/semconv.ts
index 64375bee5548..3dc404fe6145 100644
--- a/packages/server-utils/src/integrations/kafkajs/semconv.ts
+++ b/packages/server-utils/src/integrations/kafkajs/semconv.ts
@@ -1,13 +1,10 @@
-/*
- * Unstable OTel semantic-convention keys/values without a `@sentry/conventions` constant, inlined to
- * keep this integration free of `@opentelemetry/*` deps. Values are byte-identical to the vendored OTel
- * instrumentation (`@sentry/node`'s `integrations/tracing/kafka/vendored/semconv.ts`) for span parity.
- */
+export {
+  MESSAGING_DESTINATION_PARTITION_ID as ATTR_MESSAGING_DESTINATION_PARTITION_ID,
+  MESSAGING_KAFKA_MESSAGE_KEY as ATTR_MESSAGING_KAFKA_MESSAGE_KEY,
+  MESSAGING_KAFKA_MESSAGE_TOMBSTONE as ATTR_MESSAGING_KAFKA_MESSAGE_TOMBSTONE,
+  MESSAGING_KAFKA_OFFSET as ATTR_MESSAGING_KAFKA_OFFSET,
+} from '@sentry/conventions/attributes';
 
-export const ATTR_MESSAGING_DESTINATION_PARTITION_ID = 'messaging.destination.partition.id' as const;
-export const ATTR_MESSAGING_KAFKA_MESSAGE_KEY = 'messaging.kafka.message.key' as const;
-export const ATTR_MESSAGING_KAFKA_MESSAGE_TOMBSTONE = 'messaging.kafka.message.tombstone' as const;
-export const ATTR_MESSAGING_KAFKA_OFFSET = 'messaging.kafka.offset' as const;
 export const MESSAGING_OPERATION_TYPE_VALUE_PROCESS = 'process' as const;
 export const MESSAGING_OPERATION_TYPE_VALUE_RECEIVE = 'receive' as const;
 export const MESSAGING_OPERATION_TYPE_VALUE_SEND = 'send' as const;
diff --git a/packages/server-utils/src/integrations/mongodb/mongodb-span.ts b/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
index 2f0a86721314..99d1778e758d 100644
--- a/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
+++ b/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
@@ -9,14 +9,12 @@ import {
   SERVER_ADDRESS,
   SERVER_PORT,
   SENTRY_ORIGIN,
+  DB_CONNECTION_STRING,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { Span, SpanAttributes } from '@sentry/core';
 import { getClient, hasSpanStreamingEnabled, isObjectLike, startInactiveSpan } from '@sentry/core';
 
-// `db.connection_string` is not part of `@sentry/conventions`, so it stays inlined to match
-// what `@opentelemetry/instrumentation-mongodb` emitted.
-const ATTR_DB_CONNECTION_STRING = 'db.connection_string';
 const DB_SYSTEM_VALUE_MONGODB = 'mongodb';
 
 /**
@@ -127,7 +125,8 @@ export function getSpanAttributes(
     [DB_NAMESPACE]: dbName,
     [DB_COLLECTION_NAME]: dbCollection,
     [DB_OPERATION_NAME]: operation,
-    [ATTR_DB_CONNECTION_STRING]: `mongodb://${host}:${port}/${dbName}`,
+    // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+    [DB_CONNECTION_STRING]: `mongodb://${host}:${port}/${dbName}`,
   };
 
   if (host && port) {
diff --git a/packages/server-utils/src/integrations/mysql.ts b/packages/server-utils/src/integrations/mysql.ts
index d3e8010cb1ba..de538d52afd7 100644
--- a/packages/server-utils/src/integrations/mysql.ts
+++ b/packages/server-utils/src/integrations/mysql.ts
@@ -10,6 +10,7 @@ import {
   SERVER_ADDRESS,
   SERVER_PORT,
   SENTRY_ORIGIN,
+  DB_CONNECTION_STRING,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Scope } from '@sentry/core';
@@ -33,10 +34,6 @@ import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation
 // When enabled, OTel 'Mysql' integration is omitted from the default set.
 const INTEGRATION_NAME = 'Mysql' as const;
 
-// `db.connection_string` is not part of `@sentry/conventions`, so it stays inlined. Matches
-// `@opentelemetry/instrumentation-mysql`'s default shape.
-const ATTR_DB_CONNECTION_STRING = 'db.connection_string';
-
 const DB_SYSTEM_NAME_VALUE_MYSQL = 'mysql' as const;
 
 /**
@@ -99,7 +96,8 @@ function instrumentMysql(): void {
           [SENTRY_KIND]: 'client',
           [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
           [SENTRY_ORIGIN]: 'auto.db.mysql',
-          [ATTR_DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
+          // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+          [DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
           ...(database ? { [DB_NAMESPACE]: database } : {}),
           ...(user ? { [DB_USER]: user } : {}),
           ...(queryText ? { [DB_QUERY_TEXT]: queryText } : {}),
diff --git a/packages/server-utils/src/integrations/nitro/captureStorageEvents.ts b/packages/server-utils/src/integrations/nitro/captureStorageEvents.ts
index d419951912fa..0e464947c37c 100644
--- a/packages/server-utils/src/integrations/nitro/captureStorageEvents.ts
+++ b/packages/server-utils/src/integrations/nitro/captureStorageEvents.ts
@@ -1,4 +1,13 @@
-import { CACHE_HIT, CACHE_KEY, CACHE_OPERATION, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import {
+  CACHE_HIT,
+  CACHE_KEY,
+  CACHE_OPERATION,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  DB_COLLECTION_NAME,
+  DB_OPERATION_NAME,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 import { CACHE_GET, CACHE_PUT, CACHE_REMOVE } from '@sentry/conventions/op';
 import {
   CACHE_OPERATION_NAMES,
@@ -97,9 +106,9 @@ function setupStorageTracingChannel(operation: TracedOperation): void {
           [CACHE_OPERATION]: cacheOperationName,
           [SENTRY_ORIGIN]: ORIGIN,
           [CACHE_KEY]: cacheKeys.length > 1 ? cacheKeys : cacheKeys[0],
-          'db.operation.name': operation,
-          'db.collection.name': mountBase(data),
-          'db.system.name': data.driver?.name ?? 'unknown',
+          [DB_OPERATION_NAME]: operation,
+          [DB_COLLECTION_NAME]: mountBase(data),
+          [DB_SYSTEM_NAME]: data.driver?.name ?? 'unknown',
         },
       });
     },
diff --git a/packages/server-utils/src/integrations/nitro/captureTracingEvents.ts b/packages/server-utils/src/integrations/nitro/captureTracingEvents.ts
index 42f02ed96152..800acc5b30ca 100644
--- a/packages/server-utils/src/integrations/nitro/captureTracingEvents.ts
+++ b/packages/server-utils/src/integrations/nitro/captureTracingEvents.ts
@@ -1,4 +1,4 @@
-import { SENTRY_OP, SENTRY_SEGMENT_NAME_SOURCE, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
+import { SENTRY_OP, SENTRY_SEGMENT_NAME_SOURCE, SENTRY_ORIGIN, SERVER_PORT } from '@sentry/conventions/attributes';
 import { HANDLER, HTTP_SERVER, MIDDLEWARE } from '@sentry/conventions/op';
 import {
   isObjectLike,
@@ -230,7 +230,7 @@ function setupSrvxTracingChannels(): void {
           ...headerAttributes,
           [SENTRY_ORIGIN]: 'auto.http.nitro.srvx',
           [SENTRY_OP]: data.middleware ? MIDDLEWARE : HTTP_SERVER,
-          'server.port': getServerPort(data.server),
+          [SERVER_PORT]: getServerPort(data.server),
         },
         // Use the same parent span as middleware to make them siblings
         parentSpan: requestParentSpans.get(data.request) || undefined,
diff --git a/packages/server-utils/src/integrations/postgres-js.ts b/packages/server-utils/src/integrations/postgres-js.ts
index 0ac51daa8f54..c38616b0bf50 100644
--- a/packages/server-utils/src/integrations/postgres-js.ts
+++ b/packages/server-utils/src/integrations/postgres-js.ts
@@ -8,6 +8,7 @@ import {
   SENTRY_KIND,
   SENTRY_OP,
   SENTRY_ORIGIN,
+  DB_RESPONSE_STATUS_CODE,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Span } from '@sentry/core';
@@ -42,10 +43,6 @@ const ORIGIN = 'auto.db.postgresjs';
 
 const DB_SYSTEM_NAME_POSTGRES = 'postgres';
 
-// Not part of `@sentry/conventions`, so we keep it inline (matches older OTel
-// `PostgresJsInstrumentation`).
-const DB_RESPONSE_STATUS_CODE = 'db.response.status_code';
-
 const NOOP = (): void => {};
 
 // Same `Symbol.for()` marker the core `instrumentPostgresJsSql` wrapper sets on
diff --git a/packages/server-utils/src/integrations/postgres.ts b/packages/server-utils/src/integrations/postgres.ts
index 9dc4e62bf01e..6ef1346a5ee5 100644
--- a/packages/server-utils/src/integrations/postgres.ts
+++ b/packages/server-utils/src/integrations/postgres.ts
@@ -10,6 +10,7 @@ import {
   SERVER_ADDRESS,
   SERVER_PORT,
   SENTRY_ORIGIN,
+  DB_CONNECTION_STRING,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Scope, SpanAttributes } from '@sentry/core';
@@ -37,9 +38,6 @@ const INTEGRATION_NAME = 'Postgres' as const;
 // so they default to 'manual').
 const ORIGIN = 'auto.db.postgres';
 
-// `db.connection_string` is not part of `@sentry/conventions`, so it stays
-// inlined, keeping this integration free of `@opentelemetry/*` deps.
-const ATTR_DB_CONNECTION_STRING = 'db.connection_string';
 const ATTR_PG_PLAN = 'db.postgresql.plan';
 const ATTR_PG_IDLE_TIMEOUT = 'db.postgresql.idle.timeout.millis';
 const ATTR_PG_MAX_CLIENT = 'db.postgresql.max.client';
@@ -254,7 +252,8 @@ export function getConnectionAttributes(params: PgConnectionParams): SpanAttribu
 }
 
 function getPgConnectionAttributes(params: PgConnectionParams): SpanAttributes {
-  return { ...getConnectionAttributes(params), [ATTR_DB_CONNECTION_STRING]: getConnectionString(params) };
+  // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+  return { ...getConnectionAttributes(params), [DB_CONNECTION_STRING]: getConnectionString(params) };
 }
 
 function getPoolConnectionAttributes(opts: PgPoolOptions): SpanAttributes {
@@ -273,7 +272,8 @@ function getPoolConnectionAttributes(opts: PgPoolOptions): SpanAttributes {
   const user = url?.username || opts.user;
   return {
     [DB_SYSTEM_NAME]: DB_SYSTEM_POSTGRESQL,
-    [ATTR_DB_CONNECTION_STRING]: getConnectionString(opts),
+    // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+    [DB_CONNECTION_STRING]: getConnectionString(opts),
     [ATTR_PG_IDLE_TIMEOUT]: opts.idleTimeoutMillis,
     [ATTR_PG_MAX_CLIENT]: opts.max,
     [DB_NAMESPACE]: database,
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs.ts
index 8588ed1a56ea..c8f11e709f48 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs.ts
@@ -26,6 +26,8 @@ import {
   SENTRY_ORIGIN,
   SERVER_ADDRESS,
   SERVER_PORT,
+  DB_RESPONSE_STATUS_CODE,
+  ERROR_TYPE,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 
@@ -309,8 +311,8 @@ function _wrapSingleQueryHandle(
                 message: rejectArgs?.[0]?.message || 'unknown_error',
               });
 
-              span.setAttribute('db.response.status_code', rejectArgs?.[0]?.code || 'unknown');
-              span.setAttribute('error.type', rejectArgs?.[0]?.name || 'unknown');
+              span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
+              span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
 
               span.end();
             } catch (e) {

From 1cd91ed9e91353a21bd4b349c182edbaff58b127 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:46:00 +0100
Subject: [PATCH 035/169] ref(replay-internal): Use convention constants for
 attribute keys (#25907)

**Why:** Use the shared replay-ID constant when enriching streamed spans
so the attribute name comes from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/replay-internal/src/integration.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/replay-internal/src/integration.ts b/packages/replay-internal/src/integration.ts
index 547b2417090e..0576e696383d 100644
--- a/packages/replay-internal/src/integration.ts
+++ b/packages/replay-internal/src/integration.ts
@@ -1,3 +1,4 @@
+import { SENTRY_REPLAY_ID } from '@sentry/conventions/attributes';
 import type { Client, Integration, IntegrationFn, ReplayRecordingMode, StreamedSpanJSON } from '@sentry/core';
 import type { BrowserClientReplayOptions } from '@sentry/core/browser';
 import { consoleSandbox, GLOBAL_OBJ, isBrowser, parseSampleRate, safeSetSpanJSONAttributes } from '@sentry/core';
@@ -368,7 +369,7 @@ export class Replay implements Integration {
   public processSpan(span: StreamedSpanJSON): void {
     const replayId = this.getReplayId(true);
     if (replayId) {
-      safeSetSpanJSONAttributes(span, { 'sentry.replay_id': replayId });
+      safeSetSpanJSONAttributes(span, { [SENTRY_REPLAY_ID]: replayId });
       if (this.getRecordingMode() === 'buffer') {
         safeSetSpanJSONAttributes(span, { 'sentry._internal.replay_is_buffering': true });
       }

From c88a9580cffeb4a6777a89db2254f190611f5bcb Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:46:30 +0100
Subject: [PATCH 036/169] ref(browser): Use convention constants for attribute
 keys (#25895)

**Why:** Use shared constants for culture, profiling thread, and
background-tab attributes so these keys come from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/browser/src/integrations/culturecontext.ts | 7 ++++---
 packages/browser/src/profiling/utils.ts             | 5 +++--
 packages/browser/src/tracing/backgroundtab.ts       | 4 ++--
 3 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/packages/browser/src/integrations/culturecontext.ts b/packages/browser/src/integrations/culturecontext.ts
index 294f52402371..5978878627da 100644
--- a/packages/browser/src/integrations/culturecontext.ts
+++ b/packages/browser/src/integrations/culturecontext.ts
@@ -1,3 +1,4 @@
+import { CULTURE_CALENDAR, CULTURE_LOCALE, CULTURE_TIMEZONE } from '@sentry/conventions/attributes';
 import type { CultureContext, IntegrationFn } from '@sentry/core';
 import { defineIntegration, safeSetSpanJSONAttributes } from '@sentry/core';
 import { WINDOW } from '../helpers';
@@ -22,9 +23,9 @@ const _cultureContextIntegration = (() => {
 
       if (culture) {
         safeSetSpanJSONAttributes(span, {
-          'culture.locale': culture.locale,
-          'culture.timezone': culture.timezone,
-          'culture.calendar': culture.calendar,
+          [CULTURE_LOCALE]: culture.locale,
+          [CULTURE_TIMEZONE]: culture.timezone,
+          [CULTURE_CALENDAR]: culture.calendar,
         });
       }
     },
diff --git a/packages/browser/src/profiling/utils.ts b/packages/browser/src/profiling/utils.ts
index a2bfaaa0f508..327dee750092 100644
--- a/packages/browser/src/profiling/utils.ts
+++ b/packages/browser/src/profiling/utils.ts
@@ -1,3 +1,4 @@
+import { THREAD_ID, THREAD_NAME } from '@sentry/conventions/attributes';
 /* eslint-disable max-lines */
 import type { Client, ContinuousThreadCpuProfile, DebugImage, ProfileChunk, Span } from '@sentry/core';
 import {
@@ -306,6 +307,6 @@ export function shouldProfileSession(options: BrowserOptions): boolean {
 }
 
 export function setThreadAttributes(span: Span): void {
-  span.setAttribute('thread.id', PROFILER_THREAD_ID_STRING);
-  span.setAttribute('thread.name', PROFILER_THREAD_NAME);
+  span.setAttribute(THREAD_ID, PROFILER_THREAD_ID_STRING);
+  span.setAttribute(THREAD_NAME, PROFILER_THREAD_NAME);
 }
diff --git a/packages/browser/src/tracing/backgroundtab.ts b/packages/browser/src/tracing/backgroundtab.ts
index 5867a4e07997..939837825d15 100644
--- a/packages/browser/src/tracing/backgroundtab.ts
+++ b/packages/browser/src/tracing/backgroundtab.ts
@@ -1,7 +1,7 @@
 import { debug, getActiveSpan, getRootSpan, SPAN_STATUS_ERROR, spanToJSON } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
 import { WINDOW } from '../helpers';
-import { SENTRY_OP } from '@sentry/conventions/attributes';
+import { SENTRY_OP, SENTRY_CANCELLATION_REASON } from '@sentry/conventions/attributes';
 
 /**
  * Add a listener that cancels and finishes a transaction when the global
@@ -35,7 +35,7 @@ export function registerBackgroundTabDetection(): void {
           rootSpan.setStatus({ code: SPAN_STATUS_ERROR, message: cancelledStatus });
         }
 
-        rootSpan.setAttribute('sentry.cancellation_reason', 'document.hidden');
+        rootSpan.setAttribute(SENTRY_CANCELLATION_REASON, 'document.hidden');
         rootSpan.end();
       }
     });

From efe1e26cb3b39d6e4f1e246ae6225ef470c8d488 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:47:39 +0100
Subject: [PATCH 037/169] ref(browser-utils): Use convention constants for
 attribute keys (#25896)

**Why:** Use shared constants for resource timing, web vitals, device
information, and element-timing attributes. Legacy attribute names are
preserved, including where that requires deprecated constants.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../src/performance/elementTiming.ts          | 26 ++++++----
 .../browser-utils/src/performance/entries.ts  | 37 ++++++++++-----
 .../src/performance/resourceTiming.ts         | 47 +++++++++++++------
 .../browser-utils/src/web-vitals/emitSpan.ts  |  3 +-
 .../browser-utils/src/web-vitals/spans.ts     | 18 ++++---
 .../browser-utils/src/web-vitals/tracking.ts  | 42 +++++++++++++----
 6 files changed, 122 insertions(+), 51 deletions(-)

diff --git a/packages/browser-utils/src/performance/elementTiming.ts b/packages/browser-utils/src/performance/elementTiming.ts
index 5b8e5f01218e..1663f5096c00 100644
--- a/packages/browser-utils/src/performance/elementTiming.ts
+++ b/packages/browser-utils/src/performance/elementTiming.ts
@@ -1,3 +1,13 @@
+import {
+  SENTRY_ORIGIN,
+  UI_ELEMENT_HEIGHT,
+  UI_ELEMENT_ID,
+  UI_ELEMENT_IDENTIFIER,
+  UI_ELEMENT_PAINT_TYPE,
+  UI_ELEMENT_TYPE,
+  UI_ELEMENT_URL,
+  UI_ELEMENT_WIDTH,
+} from '@sentry/conventions/attributes';
 import type { IntegrationFn } from '@sentry/core';
 import { browserPerformanceTimeOrigin, defineIntegration, filterCollectedUrl, metrics } from '@sentry/core';
 import { addPerformanceInstrumentationHandler } from '../instrumentation/performanceObserver';
@@ -41,32 +51,32 @@ const _elementTimingIntegration = (() => {
           const loadTime = elementEntry.loadTime;
 
           const metricAttributes: Record<string, string | number> = {
-            'sentry.origin': 'auto.ui.browser.element_timing',
-            'ui.element.identifier': identifier,
+            [SENTRY_ORIGIN]: 'auto.ui.browser.element_timing',
+            [UI_ELEMENT_IDENTIFIER]: identifier,
           };
 
           if (paintType) {
-            metricAttributes['ui.element.paint_type'] = paintType;
+            metricAttributes[UI_ELEMENT_PAINT_TYPE] = paintType;
           }
 
           if (elementEntry.id) {
-            metricAttributes['ui.element.id'] = elementEntry.id;
+            metricAttributes[UI_ELEMENT_ID] = elementEntry.id;
           }
 
           if (elementEntry.element) {
-            metricAttributes['ui.element.type'] = elementEntry.element.tagName.toLowerCase();
+            metricAttributes[UI_ELEMENT_TYPE] = elementEntry.element.tagName.toLowerCase();
           }
 
           if (elementEntry.url) {
-            metricAttributes['ui.element.url'] = filterCollectedUrl(elementEntry.url);
+            metricAttributes[UI_ELEMENT_URL] = filterCollectedUrl(elementEntry.url);
           }
 
           if (elementEntry.naturalWidth) {
-            metricAttributes['ui.element.width'] = elementEntry.naturalWidth;
+            metricAttributes[UI_ELEMENT_WIDTH] = elementEntry.naturalWidth;
           }
 
           if (elementEntry.naturalHeight) {
-            metricAttributes['ui.element.height'] = elementEntry.naturalHeight;
+            metricAttributes[UI_ELEMENT_HEIGHT] = elementEntry.naturalHeight;
           }
 
           if (renderTime > 0) {
diff --git a/packages/browser-utils/src/performance/entries.ts b/packages/browser-utils/src/performance/entries.ts
index 905fa44426f7..8beb84e555af 100644
--- a/packages/browser-utils/src/performance/entries.ts
+++ b/packages/browser-utils/src/performance/entries.ts
@@ -28,6 +28,17 @@ import {
   URL_FULL,
   URL_SCHEME,
   SENTRY_ORIGIN,
+  BROWSER_SCRIPT_INVOKER,
+  BROWSER_SCRIPT_INVOKER_TYPE,
+  BROWSER_SCRIPT_SOURCE_CHAR_POSITION,
+  CONNECTIONTYPE,
+  DEVICEMEMORY,
+  DEVICE_MEMORY_ESTIMATED_CAPACITY,
+  DEVICE_PROCESSOR_COUNT,
+  EFFECTIVECONNECTIONTYPE,
+  HARDWARECONCURRENCY,
+  HTTP_RESPONSE_BODY_DECODED_SIZE,
+  RESOURCE_RENDER_BLOCKING_STATUS,
 } from '@sentry/conventions/attributes';
 import {
   BROWSER_CACHE,
@@ -171,8 +182,8 @@ export function startTrackingLongAnimationFrames(): void {
 
       const initialScript = entry.scripts[0];
       const { invoker, invokerType, sourceURL, sourceFunctionName, sourceCharPosition } = initialScript;
-      attributes['browser.script.invoker'] = invoker;
-      attributes['browser.script.invoker_type'] = invokerType;
+      attributes[BROWSER_SCRIPT_INVOKER] = invoker;
+      attributes[BROWSER_SCRIPT_INVOKER_TYPE] = invokerType;
       if (sourceURL) {
         attributes[CODE_FILE_PATH] = sourceURL;
       }
@@ -180,7 +191,7 @@ export function startTrackingLongAnimationFrames(): void {
         attributes[CODE_FUNCTION_NAME] = sourceFunctionName;
       }
       if (sourceCharPosition !== -1) {
-        attributes['browser.script.source_char_position'] = sourceCharPosition;
+        attributes[BROWSER_SCRIPT_SOURCE_CHAR_POSITION] = sourceCharPosition;
       }
 
       startAndEndSpan(parent, startTime, startTime + duration, {
@@ -478,10 +489,10 @@ export function _addResourceSpans(
 
     ['transferSize', HTTP_RESPONSE_SIZE],
     ['encodedBodySize', HTTP_RESPONSE_BODY_SIZE],
-    ['decodedBodySize', 'http.response.body.decoded_size'],
+    ['decodedBodySize', HTTP_RESPONSE_BODY_DECODED_SIZE],
 
     // https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming/renderBlockingStatus
-    ['renderBlockingStatus', 'resource.render_blocking_status'],
+    ['renderBlockingStatus', RESOURCE_RENDER_BLOCKING_STATUS],
 
     // https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming/deliveryType
     ['deliveryType', 'http.response_delivery_type'],
@@ -516,13 +527,15 @@ function _trackNavigator(span: Span, spanStreamingEnabled: boolean | undefined):
   if (connection) {
     if (connection.effectiveType) {
       span.setAttribute(
-        spanStreamingEnabled ? NETWORK_CONNECTION_EFFECTIVE_TYPE : 'effectiveConnectionType',
+        // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+        spanStreamingEnabled ? NETWORK_CONNECTION_EFFECTIVE_TYPE : EFFECTIVECONNECTIONTYPE,
         connection.effectiveType,
       );
     }
 
     if (connection.type) {
-      span.setAttribute(spanStreamingEnabled ? NETWORK_CONNECTION_TYPE : 'connectionType', connection.type);
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(spanStreamingEnabled ? NETWORK_CONNECTION_TYPE : CONNECTIONTYPE, connection.type);
     }
 
     if (isMeasurementValue(connection.rtt)) {
@@ -538,17 +551,19 @@ function _trackNavigator(span: Span, spanStreamingEnabled: boolean | undefined):
 
   if (isMeasurementValue(navigator.deviceMemory)) {
     if (spanStreamingEnabled) {
-      span.setAttribute('device.memory.estimated_capacity', navigator.deviceMemory);
+      span.setAttribute(DEVICE_MEMORY_ESTIMATED_CAPACITY, navigator.deviceMemory);
     } else {
-      span.setAttribute('deviceMemory', `${navigator.deviceMemory} GB`);
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(DEVICEMEMORY, `${navigator.deviceMemory} GB`);
     }
   }
 
   if (isMeasurementValue(navigator.hardwareConcurrency)) {
     if (spanStreamingEnabled) {
-      span.setAttribute('device.processor_count', navigator.hardwareConcurrency);
+      span.setAttribute(DEVICE_PROCESSOR_COUNT, navigator.hardwareConcurrency);
     } else {
-      span.setAttribute('hardwareConcurrency', String(navigator.hardwareConcurrency));
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(HARDWARECONCURRENCY, String(navigator.hardwareConcurrency));
     }
   }
 }
diff --git a/packages/browser-utils/src/performance/resourceTiming.ts b/packages/browser-utils/src/performance/resourceTiming.ts
index 172a454f31da..8fb0b459b87b 100644
--- a/packages/browser-utils/src/performance/resourceTiming.ts
+++ b/packages/browser-utils/src/performance/resourceTiming.ts
@@ -1,3 +1,20 @@
+import {
+  HTTP_REQUEST_CONNECTION_END,
+  HTTP_REQUEST_CONNECT_START,
+  HTTP_REQUEST_DOMAIN_LOOKUP_END,
+  HTTP_REQUEST_DOMAIN_LOOKUP_START,
+  HTTP_REQUEST_FETCH_START,
+  HTTP_REQUEST_REDIRECT_END,
+  HTTP_REQUEST_REDIRECT_START,
+  HTTP_REQUEST_REQUEST_START,
+  HTTP_REQUEST_RESPONSE_END,
+  HTTP_REQUEST_RESPONSE_START,
+  HTTP_REQUEST_SECURE_CONNECTION_START,
+  HTTP_REQUEST_TIME_TO_FIRST_BYTE,
+  HTTP_REQUEST_WORKER_START,
+  NETWORK_PROTOCOL_NAME,
+  NETWORK_PROTOCOL_VERSION,
+} from '@sentry/conventions/attributes';
 import type { SpanAttributes } from '@sentry/core';
 import { _INTERNAL_performanceTimeToSeconds } from '@sentry/core';
 import { extractNetworkProtocol, msToSec } from './utils';
@@ -18,8 +35,8 @@ export function resourceTimingToSpanAttributes(resourceTiming: PerformanceResour
   // valid for `nextHopProtocol` to be an empty string.
   if (resourceTiming.nextHopProtocol != undefined) {
     const { name, version } = extractNetworkProtocol(resourceTiming.nextHopProtocol);
-    timingSpanData['network.protocol.version'] = version;
-    timingSpanData['network.protocol.name'] = name;
+    timingSpanData[NETWORK_PROTOCOL_VERSION] = version;
+    timingSpanData[NETWORK_PROTOCOL_NAME] = name;
   }
 
   if (_INTERNAL_performanceTimeToSeconds(resourceTiming.startTime) === undefined) {
@@ -35,29 +52,29 @@ export function resourceTimingToSpanAttributes(resourceTiming: PerformanceResour
   return dropUndefinedKeysFromObject({
     ...timingSpanData,
 
-    'http.request.redirect_start': getAbsoluteTime(resourceTiming.redirectStart),
-    'http.request.redirect_end': getAbsoluteTime(resourceTiming.redirectEnd),
+    [HTTP_REQUEST_REDIRECT_START]: getAbsoluteTime(resourceTiming.redirectStart),
+    [HTTP_REQUEST_REDIRECT_END]: getAbsoluteTime(resourceTiming.redirectEnd),
 
-    'http.request.worker_start': getAbsoluteTime(resourceTiming.workerStart),
+    [HTTP_REQUEST_WORKER_START]: getAbsoluteTime(resourceTiming.workerStart),
 
-    'http.request.fetch_start': getAbsoluteTime(resourceTiming.fetchStart),
+    [HTTP_REQUEST_FETCH_START]: getAbsoluteTime(resourceTiming.fetchStart),
 
-    'http.request.domain_lookup_start': getAbsoluteTime(resourceTiming.domainLookupStart),
-    'http.request.domain_lookup_end': getAbsoluteTime(resourceTiming.domainLookupEnd),
+    [HTTP_REQUEST_DOMAIN_LOOKUP_START]: getAbsoluteTime(resourceTiming.domainLookupStart),
+    [HTTP_REQUEST_DOMAIN_LOOKUP_END]: getAbsoluteTime(resourceTiming.domainLookupEnd),
 
-    'http.request.connect_start': getAbsoluteTime(resourceTiming.connectStart),
-    'http.request.secure_connection_start': getAbsoluteTime(resourceTiming.secureConnectionStart),
-    'http.request.connection_end': getAbsoluteTime(resourceTiming.connectEnd),
+    [HTTP_REQUEST_CONNECT_START]: getAbsoluteTime(resourceTiming.connectStart),
+    [HTTP_REQUEST_SECURE_CONNECTION_START]: getAbsoluteTime(resourceTiming.secureConnectionStart),
+    [HTTP_REQUEST_CONNECTION_END]: getAbsoluteTime(resourceTiming.connectEnd),
 
-    'http.request.request_start': getAbsoluteTime(resourceTiming.requestStart),
+    [HTTP_REQUEST_REQUEST_START]: getAbsoluteTime(resourceTiming.requestStart),
 
-    'http.request.response_start': getAbsoluteTime(resourceTiming.responseStart),
-    'http.request.response_end': getAbsoluteTime(resourceTiming.responseEnd),
+    [HTTP_REQUEST_RESPONSE_START]: getAbsoluteTime(resourceTiming.responseStart),
+    [HTTP_REQUEST_RESPONSE_END]: getAbsoluteTime(resourceTiming.responseEnd),
 
     // For TTFB we actually want the relative time from timeOrigin to responseStart
     // This way, TTFB always measures the "first page load" experience.
     // see: https://web.dev/articles/ttfb#measure-resource-requests
-    'http.request.time_to_first_byte':
+    [HTTP_REQUEST_TIME_TO_FIRST_BYTE]:
       resourceTiming.responseStart != null ? msToSec(resourceTiming.responseStart) : undefined,
   });
 }
diff --git a/packages/browser-utils/src/web-vitals/emitSpan.ts b/packages/browser-utils/src/web-vitals/emitSpan.ts
index 5e25931f4bf8..90b11673e1b6 100644
--- a/packages/browser-utils/src/web-vitals/emitSpan.ts
+++ b/packages/browser-utils/src/web-vitals/emitSpan.ts
@@ -11,6 +11,7 @@ import {
   USER_AGENT_ORIGINAL,
   SENTRY_OP,
   SENTRY_ORIGIN,
+  SENTRY_PAGELOAD_SPAN_ID,
 } from '@sentry/conventions/attributes';
 import { WINDOW } from '../types';
 import type { MetricNavigationType } from '../instrumentation/performanceObserver';
@@ -100,7 +101,7 @@ export function _emitWebVitalSpan(options: WebVitalSpanOptions): void {
 
   if (parentSpan && spanToJSON(parentSpan).attributes[SENTRY_OP] === 'pageload') {
     // for LCP and CLS, we collect the pageload span id as an attribute
-    attributes['sentry.pageload.span_id'] = parentSpan.spanContext().spanId;
+    attributes[SENTRY_PAGELOAD_SPAN_ID] = parentSpan.spanContext().spanId;
   }
 
   if (softNavigationId != null) {
diff --git a/packages/browser-utils/src/web-vitals/spans.ts b/packages/browser-utils/src/web-vitals/spans.ts
index 3361254ffc1d..ba08eceafcb0 100644
--- a/packages/browser-utils/src/web-vitals/spans.ts
+++ b/packages/browser-utils/src/web-vitals/spans.ts
@@ -37,6 +37,12 @@ import {
   BROWSER_WEB_VITAL_INP_TARGET,
   UI_COMPONENT_NAME,
   SENTRY_OP,
+  BROWSER_WEB_VITAL_LCP_ELEMENT,
+  BROWSER_WEB_VITAL_LCP_ID,
+  BROWSER_WEB_VITAL_LCP_LOAD_TIME,
+  BROWSER_WEB_VITAL_LCP_RENDER_TIME,
+  BROWSER_WEB_VITAL_LCP_SIZE,
+  BROWSER_WEB_VITAL_LCP_URL,
 } from '@sentry/conventions/attributes';
 import { _emitWebVitalSpan } from './emitSpan';
 import { isValidLcpMetric } from './lcp';
@@ -214,16 +220,16 @@ export function _sendLcpSpan(
   const attributes: SpanAttributes = {};
 
   if (selector) {
-    attributes['browser.web_vital.lcp.element'] = selector;
+    attributes[BROWSER_WEB_VITAL_LCP_ELEMENT] = selector;
   }
   if (componentName) {
     attributes[UI_COMPONENT_NAME] = componentName;
   }
-  entry?.id && (attributes['browser.web_vital.lcp.id'] = entry.id);
-  entry?.url && (attributes['browser.web_vital.lcp.url'] = filterCollectedUrl(entry.url, client));
-  entry?.loadTime != null && (attributes['browser.web_vital.lcp.load_time'] = entry.loadTime);
-  entry?.renderTime != null && (attributes['browser.web_vital.lcp.render_time'] = entry.renderTime);
-  entry?.size != null && (attributes['browser.web_vital.lcp.size'] = entry.size);
+  entry?.id && (attributes[BROWSER_WEB_VITAL_LCP_ID] = entry.id);
+  entry?.url && (attributes[BROWSER_WEB_VITAL_LCP_URL] = filterCollectedUrl(entry.url, client));
+  entry?.loadTime != null && (attributes[BROWSER_WEB_VITAL_LCP_LOAD_TIME] = entry.loadTime);
+  entry?.renderTime != null && (attributes[BROWSER_WEB_VITAL_LCP_RENDER_TIME] = entry.renderTime);
+  entry?.size != null && (attributes[BROWSER_WEB_VITAL_LCP_SIZE] = entry.size);
 
   _emitWebVitalSpan({
     name,
diff --git a/packages/browser-utils/src/web-vitals/tracking.ts b/packages/browser-utils/src/web-vitals/tracking.ts
index c83fd40f02f0..ee2907cf3e92 100644
--- a/packages/browser-utils/src/web-vitals/tracking.ts
+++ b/packages/browser-utils/src/web-vitals/tracking.ts
@@ -1,6 +1,20 @@
 import type { Client, Measurements, Span } from '@sentry/core';
 import { browserPerformanceTimeOrigin, debug, filterCollectedUrl, setMeasurement, spanToJSON } from '@sentry/core';
-import { BROWSER_NAVIGATION_TYPE, SENTRY_OP } from '@sentry/conventions/attributes';
+import {
+  BROWSER_NAVIGATION_TYPE,
+  SENTRY_OP,
+  BROWSER_PERFORMANCE_NAVIGATION_ACTIVATION_START,
+  BROWSER_PERFORMANCE_TIME_ORIGIN,
+  BROWSER_WEB_VITAL_TTFB_REQUEST_TIME,
+  LCP_ELEMENT,
+  LCP_ID,
+  LCP_LOADTIME,
+  LCP_RENDERTIME,
+  LCP_SIZE,
+  LCP_URL,
+  PERFORMANCE_ACTIVATIONSTART,
+  PERFORMANCE_TIMEORIGIN,
+} from '@sentry/conventions/attributes';
 import { DEBUG_BUILD } from '../debug-build';
 import { htmlTreeAsString } from '../htmlTreeAsString';
 import type { MetricNavigationType } from '../instrumentation/performanceObserver';
@@ -186,7 +200,7 @@ export function addWebVitalsToSpan(span: Span, options: AddWebVitalsToSpanOption
         }
       });
       if (_measurements['ttfb.requestTime']) {
-        setAttr('ttfb.requestTime', _measurements['ttfb.requestTime'].value, 'browser.web_vital.ttfb.request_time');
+        setAttr('ttfb.requestTime', _measurements['ttfb.requestTime'].value, BROWSER_WEB_VITAL_TTFB_REQUEST_TIME);
       }
     } else {
       // If CLS is tracked as a span (span streaming), don't record CLS as a measurement
@@ -213,7 +227,8 @@ export function addWebVitalsToSpan(span: Span, options: AddWebVitalsToSpanOption
     }
 
     // Set timeOrigin which denotes the timestamp which to base the LCP/FCP/FP/TTFB measurements on
-    span.setAttribute(spanStreamingEnabled ? 'browser.performance.time_origin' : 'performance.timeOrigin', timeOrigin);
+    // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+    span.setAttribute(spanStreamingEnabled ? BROWSER_PERFORMANCE_TIME_ORIGIN : PERFORMANCE_TIMEORIGIN, timeOrigin);
 
     // In prerendering scenarios, where a page might be prefetched and pre-rendered before the user clicks the link,
     // the navigation starts earlier than when the user clicks it. Web Vitals should always be based on the
@@ -222,7 +237,8 @@ export function addWebVitalsToSpan(span: Span, options: AddWebVitalsToSpanOption
     // This is user action is called "activation" and the time between navigation and activation is stored in
     // the `activationStart` attribute of the "navigation" PerformanceEntry.
     span.setAttribute(
-      spanStreamingEnabled ? 'browser.performance.navigation.activation_start' : 'performance.activationStart',
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      spanStreamingEnabled ? BROWSER_PERFORMANCE_NAVIGATION_ACTIVATION_START : PERFORMANCE_ACTIVATIONSTART,
       getActivationStart(),
     );
   }
@@ -244,31 +260,37 @@ function _setWebVitalAttributes(span: Span, options: AddWebVitalsToSpanOptions):
     // Capture Properties of the LCP element that contributes to the LCP.
 
     if (_lcpEntry.element) {
-      span.setAttribute('lcp.element', htmlTreeAsString(_lcpEntry.element));
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(LCP_ELEMENT, htmlTreeAsString(_lcpEntry.element));
     }
 
     if (_lcpEntry.id) {
-      span.setAttribute('lcp.id', _lcpEntry.id);
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(LCP_ID, _lcpEntry.id);
     }
 
     if (_lcpEntry.url) {
       // Trim URL to the first 200 characters.
-      span.setAttribute('lcp.url', filterCollectedUrl(_lcpEntry.url.trim()).slice(0, 200));
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(LCP_URL, filterCollectedUrl(_lcpEntry.url.trim()).slice(0, 200));
     }
 
     if (_lcpEntry.loadTime != null) {
       // loadTime is the time of LCP that's related to receiving the LCP element response..
-      span.setAttribute('lcp.loadTime', _lcpEntry.loadTime);
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(LCP_LOADTIME, _lcpEntry.loadTime);
     }
 
     if (_lcpEntry.renderTime != null) {
       // renderTime is loadTime + rendering time
       // it's 0 if the LCP element is loaded from a 3rd party origin that doesn't send the
       // `Timing-Allow-Origin` header.
-      span.setAttribute('lcp.renderTime', _lcpEntry.renderTime);
+      // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+      span.setAttribute(LCP_RENDERTIME, _lcpEntry.renderTime);
     }
 
-    span.setAttribute('lcp.size', _lcpEntry.size);
+    // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+    span.setAttribute(LCP_SIZE, _lcpEntry.size);
   }
 
   // Only add CLS attributes if CLS is being recorded on the pageload span

From 632cbfe07d1fb56b249fe60cd6b54e5e94384877 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:48:11 +0100
Subject: [PATCH 038/169] ref(bun): Use convention constants for attribute keys
 (#25897)

**Why:** Use the shared origin constant for runtime metrics so the
attribute name comes from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/bun/src/integrations/bunRuntimeMetrics.ts | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/packages/bun/src/integrations/bunRuntimeMetrics.ts b/packages/bun/src/integrations/bunRuntimeMetrics.ts
index beb079473b99..9be65ffd3b9e 100644
--- a/packages/bun/src/integrations/bunRuntimeMetrics.ts
+++ b/packages/bun/src/integrations/bunRuntimeMetrics.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import { performance } from 'perf_hooks';
 import { _INTERNAL_safeDateNow, defineIntegration, metrics } from '@sentry/core';
 import { _INTERNAL_safeUnref } from '@sentry/core/server';
@@ -92,9 +93,9 @@ export const bunRuntimeMetricsIntegration = defineIntegration((options: BunRunti
   let prevFlushTime: number = 0;
   let eluAvailable = false;
 
-  const METRIC_ATTRIBUTES = { attributes: { 'sentry.origin': 'auto.bun.runtime_metrics' } };
-  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { 'sentry.origin': 'auto.bun.runtime_metrics' } };
-  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { 'sentry.origin': 'auto.bun.runtime_metrics' } };
+  const METRIC_ATTRIBUTES = { attributes: { [SENTRY_ORIGIN]: 'auto.bun.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { [SENTRY_ORIGIN]: 'auto.bun.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { [SENTRY_ORIGIN]: 'auto.bun.runtime_metrics' } };
 
   function collectMetrics(): void {
     const now = _INTERNAL_safeDateNow();

From 53daa00f9647a7f8efb5192e6ed6f9e93dd7a078 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 16:48:43 +0100
Subject: [PATCH 039/169] ref(deno): Use convention constants for attribute
 keys (#25900)

**Why:** Use shared constants for server, runtime, and context
attributes so these keys come from conventions.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/deno/src/client.ts                   |  3 ++-
 packages/deno/src/integrations/context.ts     | 23 +++++++++++++------
 .../src/integrations/denoRuntimeMetrics.ts    |  5 ++--
 3 files changed, 21 insertions(+), 10 deletions(-)

diff --git a/packages/deno/src/client.ts b/packages/deno/src/client.ts
index 8dbbd144f9c7..20207bdc0074 100644
--- a/packages/deno/src/client.ts
+++ b/packages/deno/src/client.ts
@@ -1,3 +1,4 @@
+import { SERVER_ADDRESS } from '@sentry/conventions/attributes';
 import type { ServerRuntimeClientOptions } from '@sentry/core/server';
 import { SDK_VERSION } from '@sentry/core';
 import { ServerRuntimeClient } from '@sentry/core/server';
@@ -65,7 +66,7 @@ export class DenoClient extends ServerRuntimeClient<DenoClientOptions> {
       this.on('beforeCaptureLog', log => {
         log.attributes = {
           ...log.attributes,
-          'server.address': serverName,
+          [SERVER_ADDRESS]: serverName,
         };
       });
     }
diff --git a/packages/deno/src/integrations/context.ts b/packages/deno/src/integrations/context.ts
index 8adf1d7dce73..d08362250b58 100644
--- a/packages/deno/src/integrations/context.ts
+++ b/packages/deno/src/integrations/context.ts
@@ -1,3 +1,12 @@
+import {
+  APP_START_TIME,
+  DEVICE_ARCHS,
+  DEVICE_PROCESSOR_COUNT,
+  OS_NAME,
+  OS_VERSION,
+  PROCESS_RUNTIME_ENGINE_NAME,
+  PROCESS_RUNTIME_ENGINE_VERSION,
+} from '@sentry/conventions/attributes';
 import type { IntegrationFn } from '@sentry/core';
 import { defineIntegration, safeSetSpanJSONAttributes } from '@sentry/core';
 
@@ -40,20 +49,20 @@ const _denoContextIntegration = (() => {
   };
 
   const cachedSpanAttributes: Record<string, unknown> = {
-    'app.start_time': appStartTime,
+    [APP_START_TIME]: appStartTime,
     // Convention uses 'device.archs' (string[]), but array attributes are not yet serialized.
     // Once array serialization lands, this will start appearing on spans automatically.
-    'device.archs': [arch],
-    'device.processor_count': processorCount,
-    'os.name': osName,
-    'process.runtime.engine.name': 'v8',
-    'process.runtime.engine.version': v8Version,
+    [DEVICE_ARCHS]: [arch],
+    [DEVICE_PROCESSOR_COUNT]: processorCount,
+    [OS_NAME]: osName,
+    [PROCESS_RUNTIME_ENGINE_NAME]: 'v8',
+    [PROCESS_RUNTIME_ENGINE_VERSION]: v8Version,
   };
 
   getOSRelease()
     .then(release => {
       cachedContext.os.version = release;
-      cachedSpanAttributes['os.version'] = release;
+      cachedSpanAttributes[OS_VERSION] = release;
     })
     .catch(() => {
       // Ignore - os.version will be undefined
diff --git a/packages/deno/src/integrations/denoRuntimeMetrics.ts b/packages/deno/src/integrations/denoRuntimeMetrics.ts
index 0a0382e067b9..d697e898c9be 100644
--- a/packages/deno/src/integrations/denoRuntimeMetrics.ts
+++ b/packages/deno/src/integrations/denoRuntimeMetrics.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import { _INTERNAL_safeDateNow, defineIntegration, metrics } from '@sentry/core';
 
 const INTEGRATION_NAME = 'DenoRuntimeMetrics' as const;
@@ -79,8 +80,8 @@ export const denoRuntimeMetricsIntegration = defineIntegration((options: DenoRun
   let intervalId: number | undefined;
   let prevFlushTime: number = 0;
 
-  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { 'sentry.origin': 'auto.deno.runtime_metrics' } };
-  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { 'sentry.origin': 'auto.deno.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_BYTE = { unit: 'byte', attributes: { [SENTRY_ORIGIN]: 'auto.deno.runtime_metrics' } };
+  const METRIC_ATTRIBUTES_SECOND = { unit: 'second', attributes: { [SENTRY_ORIGIN]: 'auto.deno.runtime_metrics' } };
 
   function collectMetrics(): void {
     const now = _INTERNAL_safeDateNow();

From 176da4a1205ac9935f4d896bfc90ec5c274b7f21 Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Thu, 29 Oct 2026 17:25:17 +0100
Subject: [PATCH 040/169] ci: Split the E2E test matrix into two jobs (#25913)

## What
Split the required E2E tests into two jobs.

## Why
GitHub Actions allows at most 256 jobs in one matrix. The full E2E
matrix now has 257, so every full run fails and runs no E2E tests at
all.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/build.yml                  | 44 +++++++++++++++-----
 dev-packages/e2e-tests/lib/getTestMatrix.mjs | 33 +++++++++++++--
 2 files changed, 62 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8766de594d0c..a546292a32ef 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -140,7 +140,7 @@ jobs:
       - name: Determine which test applications should be run
         id: matrix
         run:
-          pnpm --silent run ci:build-matrix --base=${{ (github.event_name == 'pull_request' &&
+          pnpm --silent run ci:build-matrix --shards=2 --base=${{ (github.event_name == 'pull_request' &&
           needs.job_get_metadata.outputs.changed_ci != 'true' && github.event.pull_request.base.sha) || '' }} >>
           $GITHUB_OUTPUT
         working-directory: dev-packages/e2e-tests
@@ -184,15 +184,17 @@ jobs:
       changed_aws_serverless:
         ${{ needs.job_get_metadata.outputs.changed_ci == 'true' || contains(steps.checkForAffected.outputs.affected,
         '@sentry/aws-serverless') }}
-      e2e-matrix: ${{ steps.matrix.outputs.matrix }}
+      e2e-matrix-1: ${{ steps.matrix.outputs.matrix-1 }}
+      e2e-matrix-2: ${{ steps.matrix.outputs.matrix-2 }}
       e2e-matrix-optional: ${{ steps.matrix-optional.outputs.matrix }}
 
   job_build_layer:
     name: Build Lambda layer
     needs: [job_get_metadata, job_build]
     if:
-      needs.job_build.outputs.changed_aws_serverless == 'true' || contains(needs.job_build.outputs.e2e-matrix,
-      'aws-serverless') || github.event_name != 'pull_request'
+      needs.job_build.outputs.changed_aws_serverless == 'true' || contains(needs.job_build.outputs.e2e-matrix-1,
+      'aws-serverless') || contains(needs.job_build.outputs.e2e-matrix-2, 'aws-serverless') || github.event_name !=
+      'pull_request'
     timeout-minutes: 10
     runs-on:
       namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
@@ -1021,20 +1023,23 @@ jobs:
           compression-level: 6
           overwrite: true
 
-  job_e2e_tests:
+  # GitHub Actions allows at most 256 jobs in one matrix, so the E2E tests are split into two jobs that share `env`
+  # and `steps`.
+  job_e2e_tests_1:
     name: E2E ${{ matrix.label || matrix.test-application }} Test
     # We need to add the `always()` check here because the previous step has this as well :(
     # See: https://github.com/actions/runner/issues/2205
     if:
-      always() && needs.job_build_tarballs.result == 'success' && needs.job_build.outputs.e2e-matrix !='{"include":[]}'
+      always() && needs.job_build_tarballs.result == 'success' && needs.job_build.outputs.e2e-matrix-1 !=
+      '{"include":[]}'
     needs: [job_get_metadata, job_build, job_build_layer, job_build_tarballs]
     # Most apps finish in under a minute on 4 vCPUs, so they run on 2. Apps that take longer set `sentryTest.runner`.
     runs-on:
       ${{ matrix.runner || 'namespace-profile-sentry-javascript-small' }};overrides.cache-tag=sentry-javascript-e2e${{
       github.event_name == 'pull_request' && '-pr' || '' }}
     timeout-minutes: 15
-    env:
-      # We just use a dummy DSN here, only send to the tunnel anyhow
+    # We just use a dummy DSN here, only send to the tunnel anyhow
+    env: &e2e-env
       E2E_TEST_DSN: 'https://username@domain/123'
       # Needed because some apps expect a certain prefix
       NEXT_PUBLIC_E2E_TEST_DSN: 'https://username@domain/123'
@@ -1048,8 +1053,8 @@ jobs:
       pnpm_config_verify_deps_before_run: 'false'
     strategy:
       fail-fast: false
-      matrix: ${{ fromJson(needs.job_build.outputs.e2e-matrix) }}
-    steps:
+      matrix: ${{ fromJson(needs.job_build.outputs.e2e-matrix-1) }}
+    steps: &e2e-steps
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
         with:
@@ -1115,6 +1120,22 @@ jobs:
           overwrite: true
           retention-days: 7
 
+  job_e2e_tests_2:
+    name: E2E ${{ matrix.label || matrix.test-application }} Test
+    if:
+      always() && needs.job_build_tarballs.result == 'success' && needs.job_build.outputs.e2e-matrix-2 !=
+      '{"include":[]}'
+    needs: [job_get_metadata, job_build, job_build_layer, job_build_tarballs]
+    runs-on:
+      ${{ matrix.runner || 'namespace-profile-sentry-javascript-small' }};overrides.cache-tag=sentry-javascript-e2e${{
+      github.event_name == 'pull_request' && '-pr' || '' }}
+    timeout-minutes: 15
+    env: *e2e-env
+    strategy:
+      fail-fast: false
+      matrix: ${{ fromJson(needs.job_build.outputs.e2e-matrix-2) }}
+    steps: *e2e-steps
+
   # - We skip optional tests on release branches
   # - The tests run in optional-e2e.yml, so their failures do not mark the PR as failed. This job only waits for
   #   them. optional-e2e.yml reports the results in a PR comment.
@@ -1175,7 +1196,8 @@ jobs:
         job_deno_integration_tests,
         job_browser_playwright_tests,
         job_browser_loader_tests,
-        job_e2e_tests,
+        job_e2e_tests_1,
+        job_e2e_tests_2,
         job_artifacts,
         job_lint,
         job_check_lockfile,
diff --git a/dev-packages/e2e-tests/lib/getTestMatrix.mjs b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
index 0ec456f391a2..6d409d4e9411 100644
--- a/dev-packages/e2e-tests/lib/getTestMatrix.mjs
+++ b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
@@ -6,6 +6,9 @@ import { parseArgs } from 'node:util';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
+// GitHub Actions fails a job whose matrix has more jobs than this, and runs none of them.
+const MAX_MATRIX_JOBS = 256;
+
 const VARIANT_FIELDS = {
   required: 'variants',
   optional: 'optionalVariants',
@@ -22,6 +25,9 @@ const VARIANT_FIELDS = {
  * - not set: the required test applications and their `variants`
  * - `optional`: the optional test applications and the `optionalVariants` of all test applications
  * - `canary`: only the `canaryVariants` of all test applications
+ *
+ * `--shards=N` splits the matrix into N parts (`matrix-1=...` to `matrix-N=...`), because GitHub Actions allows at
+ * most 256 jobs in one matrix.
  */
 function run() {
   const { values } = parseArgs({
@@ -30,10 +36,11 @@ function run() {
       base: { type: 'string' },
       head: { type: 'string' },
       variant: { type: 'string', default: 'required' },
+      shards: { type: 'string' },
     },
   });
 
-  const { base, head = 'HEAD', variant } = values;
+  const { base, head = 'HEAD', variant, shards } = values;
 
   // For GitHub Action debugging
   // eslint-disable-next-line no-console
@@ -61,9 +68,27 @@ function run() {
     addIncludesForTestApp(testApp, includes, { variant });
   });
 
-  // We print this to the output, so the GHA can use it for the matrix
-  // eslint-disable-next-line no-console
-  console.log(`matrix=${JSON.stringify({ include: includes })}`);
+  if (!shards) {
+    // We print this to the output, so the GHA can use it for the matrix
+    // eslint-disable-next-line no-console
+    console.log(`matrix=${JSON.stringify({ include: includes })}`);
+    return;
+  }
+
+  const shardCount = Number(shards);
+  const shardSize = Math.ceil(includes.length / shardCount);
+
+  if (shardSize > MAX_MATRIX_JOBS) {
+    throw new Error(
+      `${includes.length} jobs do not fit into ${shardCount} matrices of at most ${MAX_MATRIX_JOBS} jobs, increase --shards`,
+    );
+  }
+
+  for (let i = 0; i < shardCount; i++) {
+    const shardIncludes = includes.slice(i * shardSize, (i + 1) * shardSize);
+    // eslint-disable-next-line no-console
+    console.log(`matrix-${i + 1}=${JSON.stringify({ include: shardIncludes })}`);
+  }
 }
 
 /** Direct children of `test-applications/` that contain a `package.json` (replaces glob one-segment + package.json). */

From 68e5c95307ce565fd27d4511d8fc437971c79b79 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 17:37:18 +0100
Subject: [PATCH 041/169] ref(core): Use convention constants for attribute
 keys (#25899)

**Why:** Use shared constants for telemetry metadata, HTTP, scope
context, and timestamp attributes. Existing attribute names are
preserved, including the deprecated parent-span key.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/core/src/integrations/consola.ts     |  3 +-
 .../http/get-outgoing-span-data.ts            |  3 +-
 .../integrations/http/server-subscription.ts  |  6 ++--
 packages/core/src/integrations/requestdata.ts | 13 ++++++--
 packages/core/src/logs/internal.ts            | 33 +++++++++++++------
 packages/core/src/logs/utils.ts               |  3 +-
 packages/core/src/metrics/internal.ts         | 26 ++++++++++-----
 packages/core/src/server-runtime-client.ts    |  3 +-
 .../tracing/spans/scopeContextAttributes.ts   | 29 +++++++++++-----
 packages/core/src/tracing/spanstatus.ts       |  3 +-
 packages/core/src/utils/timestampSequence.ts  |  4 +--
 11 files changed, 87 insertions(+), 39 deletions(-)

diff --git a/packages/core/src/integrations/consola.ts b/packages/core/src/integrations/consola.ts
index 6385d330ec37..2c57c9e44360 100644
--- a/packages/core/src/integrations/consola.ts
+++ b/packages/core/src/integrations/consola.ts
@@ -1,3 +1,4 @@
+import { SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import type { Client } from '../client';
 import { getClient } from '../currentScopes';
 import { _INTERNAL_captureLog } from '../logs/internal';
@@ -253,7 +254,7 @@ export function createConsolaReporter(options: ConsolaReporterOptions = {}): Con
         attributes[key] = normalize(value, normalizeDepth, normalizeMaxBreadth);
       }
 
-      attributes['sentry.origin'] = 'auto.log.consola';
+      attributes[SENTRY_ORIGIN] = 'auto.log.consola';
 
       if (tag) {
         attributes['consola.tag'] = tag;
diff --git a/packages/core/src/integrations/http/get-outgoing-span-data.ts b/packages/core/src/integrations/http/get-outgoing-span-data.ts
index 71ca886eb486..8f04fd161bbe 100644
--- a/packages/core/src/integrations/http/get-outgoing-span-data.ts
+++ b/packages/core/src/integrations/http/get-outgoing-span-data.ts
@@ -24,6 +24,7 @@ import {
   SERVER_PORT,
   URL_FULL,
   USER_AGENT_ORIGINAL,
+  HTTP_RESPONSE_STATUS_TEXT,
 } from '@sentry/conventions/attributes';
 import { HTTP_CLIENT } from '@sentry/conventions/op';
 
@@ -77,7 +78,7 @@ export function setIncomingResponseSpanData(response: HttpIncomingMessage, span:
     [NETWORK_PROTOCOL_NAME]: 'http',
     [NETWORK_PROTOCOL_VERSION]: httpVersion,
     [NETWORK_TRANSPORT]: transport,
-    'http.response.status_text': statusMessage?.toUpperCase(),
+    [HTTP_RESPONSE_STATUS_TEXT]: statusMessage?.toUpperCase(),
     [HTTP_RESPONSE_BODY_SIZE]: getContentLengthFromHeaders(response.headers),
     ...getSocketAttrs(socket),
   });
diff --git a/packages/core/src/integrations/http/server-subscription.ts b/packages/core/src/integrations/http/server-subscription.ts
index d75bd2b10703..af5826fb6c86 100644
--- a/packages/core/src/integrations/http/server-subscription.ts
+++ b/packages/core/src/integrations/http/server-subscription.ts
@@ -67,6 +67,8 @@ import {
   URL_SCHEME,
   USER_AGENT_ORIGINAL,
   SENTRY_ORIGIN,
+  HTTP_REQUEST_BODY_SIZE,
+  HTTP_RESPONSE_STATUS_TEXT,
 } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
 import { filterCollectedUrl, filterCollectedUrlQuery } from '../../utils/data-collection/filterCollectedUrl';
@@ -357,7 +359,7 @@ function buildServerSpanWrap(
             [USER_AGENT_ORIGINAL]: userAgent,
             [URL_SCHEME]: scheme,
             [NETWORK_TRANSPORT]: httpVersion?.toUpperCase() === 'QUIC' ? 'udp' : 'tcp',
-            'http.request.body.size': getContentLengthFromHeaders(request.headers),
+            [HTTP_REQUEST_BODY_SIZE]: getContentLengthFromHeaders(request.headers),
             ...httpHeadersToSpanAttributes(normalizedRequest.headers || {}, dataCollectionOptions),
           },
         },
@@ -379,7 +381,7 @@ function buildServerSpanWrap(
             isEnded = true;
             // set attributes that come from the response
             span.setAttributes({
-              'http.response.status_text': response.statusMessage?.toUpperCase(),
+              [HTTP_RESPONSE_STATUS_TEXT]: response.statusMessage?.toUpperCase(),
               [HTTP_RESPONSE_STATUS_CODE]: response.statusCode,
               ...httpHeadersToSpanAttributes(headersToDict(response.headers), dataCollectionOptions, 'response'),
             });
diff --git a/packages/core/src/integrations/requestdata.ts b/packages/core/src/integrations/requestdata.ts
index 12d9d99d433c..04913990440a 100644
--- a/packages/core/src/integrations/requestdata.ts
+++ b/packages/core/src/integrations/requestdata.ts
@@ -18,7 +18,14 @@ import { getUrlQuery } from '../utils/url';
 import { getClientIPAddress } from '../utils/clientIPAddress';
 import { ipHeaderNames } from '../vendor/getIpAddress';
 import { safeSetSpanJSONAttributes } from '../tracing/spans/captureSpan';
-import { SENTRY_IS_LOCALHOST, URL_FULL, URL_QUERY, USER_IP_ADDRESS } from '@sentry/conventions/attributes';
+import {
+  SENTRY_IS_LOCALHOST,
+  URL_FULL,
+  URL_QUERY,
+  USER_IP_ADDRESS,
+  HTTP_REQUEST_BODY_DATA,
+  HTTP_REQUEST_METHOD,
+} from '@sentry/conventions/attributes';
 
 type RequestDataIncludeOptions = {
   cookies?: boolean;
@@ -219,7 +226,7 @@ function addNormalizedRequestDataToSpan(
   }
 
   if (requestData.method) {
-    attributes['http.request.method'] = requestData.method;
+    attributes[HTTP_REQUEST_METHOD] = requestData.method;
   }
 
   if (requestData.query_string) {
@@ -254,7 +261,7 @@ function addNormalizedRequestDataToSpan(
   if (requestData.data != null) {
     const serialized = typeof requestData.data === 'string' ? requestData.data : JSON.stringify(requestData.data);
     if (serialized) {
-      safeSetSpanJSONAttributes(span, { 'http.request.body.data': serialized });
+      safeSetSpanJSONAttributes(span, { [HTTP_REQUEST_BODY_DATA]: serialized });
     }
   }
 
diff --git a/packages/core/src/logs/internal.ts b/packages/core/src/logs/internal.ts
index 64bbabad80e6..652212746a5c 100644
--- a/packages/core/src/logs/internal.ts
+++ b/packages/core/src/logs/internal.ts
@@ -1,3 +1,15 @@
+import {
+  SENTRY_ENVIRONMENT,
+  SENTRY_MESSAGE_TEMPLATE,
+  SENTRY_RELEASE,
+  SENTRY_REPLAY_ID,
+  SENTRY_SDK_NAME,
+  SENTRY_SDK_VERSION,
+  SENTRY_TRACE_PARENT_SPAN_ID,
+  USER_EMAIL,
+  USER_ID,
+  USER_NAME,
+} from '@sentry/conventions/attributes';
 import type { Attributes } from '../attributes';
 import { serializeAttributes } from '../attributes';
 import { getGlobalSingleton } from '../carrier';
@@ -98,16 +110,16 @@ export function _INTERNAL_captureLog(
     attributes: scopeAttributes,
   } = getCombinedScopeData(getIsolationScope(), currentScope);
 
-  setLogAttribute(processedLogAttributes, 'user.id', id, false);
-  setLogAttribute(processedLogAttributes, 'user.email', email, false);
-  setLogAttribute(processedLogAttributes, 'user.name', username, false);
+  setLogAttribute(processedLogAttributes, USER_ID, id, false);
+  setLogAttribute(processedLogAttributes, USER_EMAIL, email, false);
+  setLogAttribute(processedLogAttributes, USER_NAME, username, false);
 
-  setLogAttribute(processedLogAttributes, 'sentry.release', release);
-  setLogAttribute(processedLogAttributes, 'sentry.environment', environment);
+  setLogAttribute(processedLogAttributes, SENTRY_RELEASE, release);
+  setLogAttribute(processedLogAttributes, SENTRY_ENVIRONMENT, environment);
 
   const { name, version } = client.getSdkMetadata()?.sdk ?? {};
-  setLogAttribute(processedLogAttributes, 'sentry.sdk.name', name);
-  setLogAttribute(processedLogAttributes, 'sentry.sdk.version', version);
+  setLogAttribute(processedLogAttributes, SENTRY_SDK_NAME, name);
+  setLogAttribute(processedLogAttributes, SENTRY_SDK_VERSION, version);
 
   const replay = client.getIntegrationByName<
     Integration & {
@@ -117,7 +129,7 @@ export function _INTERNAL_captureLog(
   >('Replay');
 
   const replayId = replay?.getReplayId(true);
-  setLogAttribute(processedLogAttributes, 'sentry.replay_id', replayId);
+  setLogAttribute(processedLogAttributes, SENTRY_REPLAY_ID, replayId);
 
   if (replayId && replay?.getRecordingMode() === 'buffer') {
     // We send this so we can identify cases where the replayId is attached but the replay itself might not have been sent to Sentry
@@ -128,7 +140,7 @@ export function _INTERNAL_captureLog(
   if (isParameterizedString(beforeLogMessage)) {
     const { __sentry_template_string__, __sentry_template_values__ = [] } = beforeLogMessage;
     if (__sentry_template_values__?.length) {
-      processedLogAttributes['sentry.message.template'] = __sentry_template_string__;
+      processedLogAttributes[SENTRY_MESSAGE_TEMPLATE] = __sentry_template_string__;
     }
     __sentry_template_values__.forEach((param, index) => {
       processedLogAttributes[`sentry.message.parameter.${index}`] = param;
@@ -137,7 +149,8 @@ export function _INTERNAL_captureLog(
 
   const span = getActiveSpan(currentScope);
   // Add the parent span ID to the log attributes for trace context
-  setLogAttribute(processedLogAttributes, 'sentry.trace.parent_span_id', span?.spanContext().spanId);
+  // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+  setLogAttribute(processedLogAttributes, SENTRY_TRACE_PARENT_SPAN_ID, span?.spanContext().spanId);
 
   const processedLog = { ...beforeLog, attributes: processedLogAttributes };
 
diff --git a/packages/core/src/logs/utils.ts b/packages/core/src/logs/utils.ts
index 5f95e0db3aad..af4a1ba71e74 100644
--- a/packages/core/src/logs/utils.ts
+++ b/packages/core/src/logs/utils.ts
@@ -1,3 +1,4 @@
+import { SENTRY_MESSAGE_TEMPLATE } from '@sentry/conventions/attributes';
 import { isPrimitive } from '../utils/is';
 import { normalize } from '../utils/normalize';
 import { GLOBAL_OBJ } from '../utils/worldwide';
@@ -60,7 +61,7 @@ export function createConsoleTemplateAttributes(firstArg: unknown, followingArgs
 
   // Create template with placeholders for each argument
   const template = new Array(followingArgs.length).fill('{}').join(' ');
-  attributes['sentry.message.template'] = `${firstArg} ${template}`;
+  attributes[SENTRY_MESSAGE_TEMPLATE] = `${firstArg} ${template}`;
 
   // Add each argument as a parameter
   followingArgs.forEach((arg, index) => {
diff --git a/packages/core/src/metrics/internal.ts b/packages/core/src/metrics/internal.ts
index 830fb279303d..4d0635522bd6 100644
--- a/packages/core/src/metrics/internal.ts
+++ b/packages/core/src/metrics/internal.ts
@@ -1,3 +1,13 @@
+import {
+  SENTRY_ENVIRONMENT,
+  SENTRY_RELEASE,
+  SENTRY_REPLAY_ID,
+  SENTRY_SDK_NAME,
+  SENTRY_SDK_VERSION,
+  USER_EMAIL,
+  USER_ID,
+  USER_NAME,
+} from '@sentry/conventions/attributes';
 import { type RawAttributes, serializeAttributes } from '../attributes';
 import { getGlobalSingleton } from '../carrier';
 import type { Client } from '../client';
@@ -88,18 +98,18 @@ function _enrichMetricAttributes(beforeMetric: Metric, client: Client, user: Use
   };
 
   // Add user attributes
-  setMetricAttribute(processedMetricAttributes, 'user.id', user.id, false);
-  setMetricAttribute(processedMetricAttributes, 'user.email', user.email, false);
-  setMetricAttribute(processedMetricAttributes, 'user.name', user.username, false);
+  setMetricAttribute(processedMetricAttributes, USER_ID, user.id, false);
+  setMetricAttribute(processedMetricAttributes, USER_EMAIL, user.email, false);
+  setMetricAttribute(processedMetricAttributes, USER_NAME, user.username, false);
 
   // Add Sentry metadata
-  setMetricAttribute(processedMetricAttributes, 'sentry.release', release);
-  setMetricAttribute(processedMetricAttributes, 'sentry.environment', environment);
+  setMetricAttribute(processedMetricAttributes, SENTRY_RELEASE, release);
+  setMetricAttribute(processedMetricAttributes, SENTRY_ENVIRONMENT, environment);
 
   // Add SDK metadata
   const { name, version } = client.getSdkMetadata()?.sdk ?? {};
-  setMetricAttribute(processedMetricAttributes, 'sentry.sdk.name', name);
-  setMetricAttribute(processedMetricAttributes, 'sentry.sdk.version', version);
+  setMetricAttribute(processedMetricAttributes, SENTRY_SDK_NAME, name);
+  setMetricAttribute(processedMetricAttributes, SENTRY_SDK_VERSION, version);
 
   // Add replay metadata
   const replay = client.getIntegrationByName<
@@ -110,7 +120,7 @@ function _enrichMetricAttributes(beforeMetric: Metric, client: Client, user: Use
   >('Replay');
 
   const replayId = replay?.getReplayId(true);
-  setMetricAttribute(processedMetricAttributes, 'sentry.replay_id', replayId);
+  setMetricAttribute(processedMetricAttributes, SENTRY_REPLAY_ID, replayId);
 
   if (replayId && replay?.getRecordingMode() === 'buffer') {
     setMetricAttribute(processedMetricAttributes, 'sentry._internal.replay_is_buffering', true);
diff --git a/packages/core/src/server-runtime-client.ts b/packages/core/src/server-runtime-client.ts
index 9dcc4512bea4..ab9729f60732 100644
--- a/packages/core/src/server-runtime-client.ts
+++ b/packages/core/src/server-runtime-client.ts
@@ -1,3 +1,4 @@
+import { SERVER_ADDRESS } from '@sentry/conventions/attributes';
 import { createCheckInEnvelope } from './checkin';
 import { Client } from './client';
 import { getIsolationScope } from './currentScopes';
@@ -248,7 +249,7 @@ export class ServerRuntimeClient<
     this.on('processMetric', metric => {
       if (this._options.serverName) {
         metric.attributes = {
-          'server.address': this._options.serverName,
+          [SERVER_ADDRESS]: this._options.serverName,
           ...metric.attributes,
         };
       }
diff --git a/packages/core/src/tracing/spans/scopeContextAttributes.ts b/packages/core/src/tracing/spans/scopeContextAttributes.ts
index 63b468fea922..a0bc65e4cc90 100644
--- a/packages/core/src/tracing/spans/scopeContextAttributes.ts
+++ b/packages/core/src/tracing/spans/scopeContextAttributes.ts
@@ -1,3 +1,14 @@
+import {
+  ANGULAR_VERSION,
+  CULTURE_LOCALE,
+  CULTURE_TIMEZONE,
+  HTTP_RESPONSE_BODY_SIZE,
+  HTTP_RESPONSE_STATUS_CODE,
+  REACT_VERSION,
+  SENTRY_PROFILER_ID,
+  SENTRY_PROFILE_ID,
+  STATE_TYPE,
+} from '@sentry/conventions/attributes';
 import type { Contexts } from '../../types/context';
 
 /**
@@ -13,19 +24,19 @@ export function scopeContextsToSpanAttributes(contexts: Contexts): Record<string
 
   if (response) {
     if (response.status_code != null) {
-      attrs['http.response.status_code'] = response.status_code;
+      attrs[HTTP_RESPONSE_STATUS_CODE] = response.status_code;
     }
     if (response.body_size != null) {
-      attrs['http.response.body.size'] = response.body_size;
+      attrs[HTTP_RESPONSE_BODY_SIZE] = response.body_size;
     }
   }
 
   if (profile) {
     if (profile.profile_id) {
-      attrs['sentry.profile_id'] = profile.profile_id;
+      attrs[SENTRY_PROFILE_ID] = profile.profile_id;
     }
     if (profile.profiler_id) {
-      attrs['sentry.profiler_id'] = profile.profiler_id;
+      attrs[SENTRY_PROFILER_ID] = profile.profiler_id;
     }
   }
 
@@ -40,15 +51,15 @@ export function scopeContextsToSpanAttributes(contexts: Contexts): Record<string
 
   if (culture) {
     if (culture.locale) {
-      attrs['culture.locale'] = culture.locale;
+      attrs[CULTURE_LOCALE] = culture.locale;
     }
     if (culture.timezone) {
-      attrs['culture.timezone'] = culture.timezone;
+      attrs[CULTURE_TIMEZONE] = culture.timezone;
     }
   }
 
   if (state?.state && typeof state.state.type === 'string') {
-    attrs['state.type'] = state.state.type;
+    attrs[STATE_TYPE] = state.state.type;
   }
 
   // Framework version contexts
@@ -56,7 +67,7 @@ export function scopeContextsToSpanAttributes(contexts: Contexts): Record<string
   if (angular) {
     const version = angular['version'];
     if (typeof version === 'string' || typeof version === 'number') {
-      attrs['angular.version'] = version;
+      attrs[ANGULAR_VERSION] = version;
     }
   }
 
@@ -64,7 +75,7 @@ export function scopeContextsToSpanAttributes(contexts: Contexts): Record<string
   if (react) {
     const version = react['version'];
     if (typeof version === 'string' || typeof version === 'number') {
-      attrs['react.version'] = version;
+      attrs[REACT_VERSION] = version;
     }
   }
 
diff --git a/packages/core/src/tracing/spanstatus.ts b/packages/core/src/tracing/spanstatus.ts
index 9e0b1d95521c..3fa9c2de5de2 100644
--- a/packages/core/src/tracing/spanstatus.ts
+++ b/packages/core/src/tracing/spanstatus.ts
@@ -1,3 +1,4 @@
+import { HTTP_RESPONSE_STATUS_CODE } from '@sentry/conventions/attributes';
 import type { Span } from '../types/span';
 import type { SpanStatusType } from '../types/spanStatus';
 import { SPAN_STATUS_TYPES, type SpanStatus } from '../types/spanStatus';
@@ -64,7 +65,7 @@ export function getSpanStatusFromHttpCode(httpStatus: number): SpanStatus {
  * Additionally, the span's status is updated, depending on the http code.
  */
 export function setHttpStatus(span: Span, httpStatus: number): void {
-  span.setAttribute('http.response.status_code', httpStatus);
+  span.setAttribute(HTTP_RESPONSE_STATUS_CODE, httpStatus);
 
   const spanStatus = getSpanStatusFromHttpCode(httpStatus);
   if (spanStatus.message !== 'unknown_error') {
diff --git a/packages/core/src/utils/timestampSequence.ts b/packages/core/src/utils/timestampSequence.ts
index d2755d7a0724..2d2fdfc5f5d0 100644
--- a/packages/core/src/utils/timestampSequence.ts
+++ b/packages/core/src/utils/timestampSequence.ts
@@ -1,4 +1,4 @@
-const SEQUENCE_ATTR_KEY = 'sentry.timestamp.sequence';
+import { SENTRY_TIMESTAMP_SEQUENCE } from '@sentry/conventions/attributes';
 
 let _sequenceNumber = 0;
 let _previousTimestampMs: number | undefined;
@@ -27,7 +27,7 @@ export function getSequenceAttribute(timestampInSeconds: number): {
   _previousTimestampMs = nowMs;
 
   return {
-    key: SEQUENCE_ATTR_KEY,
+    key: SENTRY_TIMESTAMP_SEQUENCE,
     value: { value, type: 'integer' },
   };
 }

From 60d6dc1ce89e3ad4613b4e86426a6f62ad5a1e4a Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Thu, 29 Oct 2026 17:38:25 +0100
Subject: [PATCH 042/169] ref(profiling-node): Use convention constants for
 attribute keys (#25905)

**Why:** Use shared constants for profiling thread attributes. Add the
same conventions dependency version used by the other SDK packages.

**How to review:** Compare each imported constant with the literal it
replaces; emitted attribute names stay unchanged.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/profiling-node/package.json       | 1 +
 packages/profiling-node/src/integration.ts | 5 +++--
 pnpm-lock.yaml                             | 3 +++
 3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/packages/profiling-node/package.json b/packages/profiling-node/package.json
index eb480d1c7dc0..467b409192eb 100644
--- a/packages/profiling-node/package.json
+++ b/packages/profiling-node/package.json
@@ -50,6 +50,7 @@
     "test:watch": "vitest --watch"
   },
   "dependencies": {
+    "@sentry/conventions": "^0.30.0",
     "@sentry/node-cpu-profiler": "^2.4.4",
     "@sentry/core": "11.10.0",
     "@sentry/node": "11.10.0"
diff --git a/packages/profiling-node/src/integration.ts b/packages/profiling-node/src/integration.ts
index 0832bd379c11..21f5e6afa900 100644
--- a/packages/profiling-node/src/integration.ts
+++ b/packages/profiling-node/src/integration.ts
@@ -1,4 +1,5 @@
 /* eslint-disable max-lines */
+import { THREAD_ID, THREAD_NAME } from '@sentry/conventions/attributes';
 import type { Event, IntegrationFn, ProfileChunk, ProfilingIntegration } from '@sentry/core';
 import {
   consoleSandbox,
@@ -424,8 +425,8 @@ class ContinuousProfiler {
       ...(event.contexts?.trace ?? {}),
       data: {
         ...(event.contexts?.trace?.data ?? {}),
-        ['thread.id']: PROFILER_THREAD_ID_STRING,
-        ['thread.name']: PROFILER_THREAD_NAME,
+        [THREAD_ID]: PROFILER_THREAD_ID_STRING,
+        [THREAD_NAME]: PROFILER_THREAD_NAME,
       },
     };
   }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 68e748c2dac3..0998abef0ad2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1870,6 +1870,9 @@ importers:
 
   packages/profiling-node:
     dependencies:
+      '@sentry/conventions':
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.10.0
         version: link:../core

From 9c93bbd388a4df87be6c7456bb31da66d7800e54 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 17:50:51 +0100
Subject: [PATCH 043/169] chore(deps): Bump webpack from 5.104.1 to 5.112.2
 (#25910)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [webpack](https://github.com/webpack/webpack) from 5.104.1 to
5.112.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/releases">webpack's
releases</a>.</em></p>
<blockquote>
<h2>v5.112.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Reduce repeated scans when concatenating imported modules. (by <a
href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22865">#22865</a>)</p>
</li>
<li>
<p>Avoid allocating CSS module sets for single-group chunks. (by <a
href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22866">#22866</a>)</p>
</li>
<li>
<p>Return the value of every module type loaded with
<code>importModule()</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22869">#22869</a>)</p>
</li>
</ul>
<h2>v5.112.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Rebuild a lazy barrel in watch when what it defers changes, and keep
the imports and re-exports it still runs. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22699">#22699</a>)</p>
</li>
<li>
<p>Rebuild under <code>cacheUnaffected</code> a module whose re-export
target goes or returns. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22749">#22749</a>)</p>
</li>
<li>
<p>Fix &quot;Self-reference dependency has unused export name&quot; for
CommonJS namespace re-exports. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22791">#22791</a>)</p>
</li>
<li>
<p>Fix <code>exportType: &quot;style&quot;</code> CSS modules throwing
outside the runtime chunk. (by <a
href="https://github.com/lazerg"><code>@​lazerg</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22833">#22833</a>)</p>
</li>
<li>
<p>Fix crash when a CSS module with <code>exportType:
&quot;style&quot;</code> imports an ignored stylesheet. (by <a
href="https://github.com/codeXsidd"><code>@​codeXsidd</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22846">#22846</a>)</p>
</li>
<li>
<p>Keep empty process environment variables that <code>.env</code> files
don't define in <code>DotenvPlugin</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22794">#22794</a>)</p>
</li>
<li>
<p>Rehash an ESM entry chunk when a chunk it imports by file name
changes. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22804">#22804</a>)</p>
</li>
<li>
<p>Handle a NUL inside an HTML CDATA section the way the parsing spec
does. (by <a
href="https://github.com/apps/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22811">#22811</a>)</p>
</li>
<li>
<p>Keep module exports live across chunks, runtimes, HMR and eval,
sparing globals. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22733">#22733</a>)</p>
</li>
<li>
<p>Await asynchronous modules that <code>ProvidePlugin</code> injects
into ES modules. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22728">#22728</a>)</p>
</li>
<li>
<p>Keep a resolve that ends after the compiler closed from throwing. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22795">#22795</a>)</p>
</li>
<li>
<p>Preserve string names passed to SharedWorker constructors. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/22770">#22770</a>)</p>
</li>
<li>
<p>Preserve string contents when extracting source map comments. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/22768">#22768</a>)</p>
</li>
<li>
<p>Scope strict-mode, async and generator block function declarations to
their block. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22800">#22800</a>)</p>
</li>
<li>
<p>Preserve raw dotenv values when reusing cached environment files. (by
<a
href="https://github.com/Eshiv-Pandey"><code>@​Eshiv-Pandey</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22787">#22787</a>)</p>
</li>
<li>
<p>Preserve assigned or patched built-ins, conversions and pattern
targets. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22761">#22761</a>)</p>
</li>
<li>
<p>Keep globals a <code>globalThis</code> write replaces, and
<code>slice</code> on a patched array. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22862">#22862</a>)</p>
</li>
<li>
<p>Skip HTML script tags for shared chunks that emit no JavaScript. (by
<a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22779">#22779</a>)</p>
</li>
<li>
<p>Keep the digits Firefox lays out a minified CSS percentage with. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22718">#22718</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md">webpack's
changelog</a>.</em></p>
<blockquote>
<h2>5.112.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Reduce repeated scans when concatenating imported modules. (by <a
href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22865">#22865</a>)</p>
</li>
<li>
<p>Avoid allocating CSS module sets for single-group chunks. (by <a
href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22866">#22866</a>)</p>
</li>
<li>
<p>Return the value of every module type loaded with
<code>importModule()</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22869">#22869</a>)</p>
</li>
</ul>
<h2>5.112.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Rebuild a lazy barrel in watch when what it defers changes, and keep
the imports and re-exports it still runs. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22699">#22699</a>)</p>
</li>
<li>
<p>Rebuild under <code>cacheUnaffected</code> a module whose re-export
target goes or returns. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22749">#22749</a>)</p>
</li>
<li>
<p>Fix &quot;Self-reference dependency has unused export name&quot; for
CommonJS namespace re-exports. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22791">#22791</a>)</p>
</li>
<li>
<p>Fix <code>exportType: &quot;style&quot;</code> CSS modules throwing
outside the runtime chunk. (by <a
href="https://github.com/lazerg"><code>@​lazerg</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22833">#22833</a>)</p>
</li>
<li>
<p>Fix crash when a CSS module with <code>exportType:
&quot;style&quot;</code> imports an ignored stylesheet. (by <a
href="https://github.com/codeXsidd"><code>@​codeXsidd</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22846">#22846</a>)</p>
</li>
<li>
<p>Keep empty process environment variables that <code>.env</code> files
don't define in <code>DotenvPlugin</code>. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22794">#22794</a>)</p>
</li>
<li>
<p>Rehash an ESM entry chunk when a chunk it imports by file name
changes. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22804">#22804</a>)</p>
</li>
<li>
<p>Handle a NUL inside an HTML CDATA section the way the parsing spec
does. (by <a
href="https://github.com/apps/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22811">#22811</a>)</p>
</li>
<li>
<p>Keep module exports live across chunks, runtimes, HMR and eval,
sparing globals. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22733">#22733</a>)</p>
</li>
<li>
<p>Await asynchronous modules that <code>ProvidePlugin</code> injects
into ES modules. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22728">#22728</a>)</p>
</li>
<li>
<p>Keep a resolve that ends after the compiler closed from throwing. (by
<a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22795">#22795</a>)</p>
</li>
<li>
<p>Preserve string names passed to SharedWorker constructors. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/22770">#22770</a>)</p>
</li>
<li>
<p>Preserve string contents when extracting source map comments. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack/pull/22768">#22768</a>)</p>
</li>
<li>
<p>Scope strict-mode, async and generator block function declarations to
their block. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22800">#22800</a>)</p>
</li>
<li>
<p>Preserve raw dotenv values when reusing cached environment files. (by
<a
href="https://github.com/Eshiv-Pandey"><code>@​Eshiv-Pandey</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22787">#22787</a>)</p>
</li>
<li>
<p>Preserve assigned or patched built-ins, conversions and pattern
targets. (by <a
href="https://github.com/aryanraj45"><code>@​aryanraj45</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/22761">#22761</a>)</p>
</li>
<li>
<p>Keep globals a <code>globalThis</code> write replaces, and
<code>slice</code> on a patched array. (by <a
href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22862">#22862</a>)</p>
</li>
<li>
<p>Skip HTML script tags for shared chunks that emit no JavaScript. (by
<a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/22779">#22779</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack/commit/e95a7f2764281318c038e9384371797dfef0e48a"><code>e95a7f2</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack/issues/22867">#22867</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/6e43fc2dc84bcea03bfe36d87eea29feb501e577"><code>6e43fc2</code></a>
fix: return the value of every module type from importModule() (<a
href="https://redirect.github.com/webpack/webpack/issues/22869">#22869</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/4ffac8d5f4ee6f55326580ac00056df391e73f69"><code>4ffac8d</code></a>
ci: rename the parser job to spec and run CSS, HTML and XML in one leg
(<a
href="https://redirect.github.com/webpack/webpack/issues/22870">#22870</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/0c02242d9e0da268b85cc74f95838051e9498c18"><code>0c02242</code></a>
test: split the syntax unit tests into tokenizer, parser and printer (<a
href="https://redirect.github.com/webpack/webpack/issues/22825">#22825</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/660608c0d6c7578b77bb2a871c6c1e1b6deac9c3"><code>660608c</code></a>
perf(css): cut CPU and allocation in the CSS minifier (<a
href="https://redirect.github.com/webpack/webpack/issues/22868">#22868</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/8c3cbd3298cece30b0aa9f557cbb1c6dc1eb5cbb"><code>8c3cbd3</code></a>
perf: avoid allocating unused CSS module sets (<a
href="https://redirect.github.com/webpack/webpack/issues/22866">#22866</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/a1e5f6a9af0d7a360d9bea6705778e3762a351e8"><code>a1e5f6a</code></a>
perf: avoid duplicate scans in module concatenation (<a
href="https://redirect.github.com/webpack/webpack/issues/22865">#22865</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/759b5396ad0cb7e8e02bf9404acf8a9ad63449c8"><code>759b539</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack/issues/22720">#22720</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/539f8deebc1f94a46a5161aeed0f598d7d4918bd"><code>539f8de</code></a>
fix(minify): keep globals a <code>globalThis</code> write replaces, and
<code>slice</code> on a pat...</li>
<li><a
href="https://github.com/webpack/webpack/commit/966815508a95ce5d110c46ee24af74b098d4fddc"><code>9668155</code></a>
ci: run the deep-imports check in the lint job (<a
href="https://redirect.github.com/webpack/webpack/issues/22859">#22859</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack/compare/v5.104.1...v5.112.2">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for webpack since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.104.1&new-version=5.112.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
---
 .../browser-integration-tests/package.json    |   2 +-
 dev-packages/bundler-tests/package.json       |   2 +-
 package.json                                  |   2 +-
 packages/bundler-plugins/package.json         |   2 +-
 packages/gatsby/package.json                  |   2 +-
 packages/server-utils/package.json            |   2 +-
 pnpm-lock.yaml                                | 821 ++++++++++--------
 7 files changed, 466 insertions(+), 367 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index d26f4c7e9a63..714fe69a262f 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -69,7 +69,7 @@
     "babel-loader": "^10.1.1",
     "fflate": "0.8.3",
     "html-webpack-plugin": "^5.5.0",
-    "webpack": "^5.95.0"
+    "webpack": "^5.112.2"
   },
   "devDependencies": {
     "@sentry/browser-utils": "11.10.0",
diff --git a/dev-packages/bundler-tests/package.json b/dev-packages/bundler-tests/package.json
index 9f119ab94f65..35d63991cbc8 100644
--- a/dev-packages/bundler-tests/package.json
+++ b/dev-packages/bundler-tests/package.json
@@ -17,7 +17,7 @@
     "rollup": "^4.60.3",
     "vite": "^8.3.1",
     "vitest": "^4.1.11",
-    "webpack": "^5.0.0"
+    "webpack": "^5.112.2"
   },
   "type": "module"
 }
diff --git a/package.json b/package.json
index 954928582f62..087310513a66 100644
--- a/package.json
+++ b/package.json
@@ -169,7 +169,7 @@
     "tsx": "^4.23.0",
     "typescript": "~7.0.2",
     "vitest": "^4.1.11",
-    "webpack": "^5.104.1",
+    "webpack": "^5.112.2",
     "yalc": "^1.0.0-pre.53"
   },
   "version": "0.0.0",
diff --git a/packages/bundler-plugins/package.json b/packages/bundler-plugins/package.json
index 5a856948c8f9..3bb53c945278 100644
--- a/packages/bundler-plugins/package.json
+++ b/packages/bundler-plugins/package.json
@@ -146,7 +146,7 @@
     "premove": "^4.0.0",
     "rolldown": "^1.0.0",
     "vitest": "^4.1.11",
-    "webpack": "5.104.1"
+    "webpack": "5.112.2"
   },
   "engines": {
     "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
diff --git a/packages/gatsby/package.json b/packages/gatsby/package.json
index 53322962f1ae..4f0e474fe884 100644
--- a/packages/gatsby/package.json
+++ b/packages/gatsby/package.json
@@ -51,7 +51,7 @@
     "@testing-library/react": "^15.0.5",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "webpack": "^5.0.0"
+    "webpack": "^5.112.2"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/packages/server-utils/package.json b/packages/server-utils/package.json
index 2e270b6e9338..64bca0f41e4d 100644
--- a/packages/server-utils/package.json
+++ b/packages/server-utils/package.json
@@ -107,7 +107,7 @@
     "@types/node": "^20.19.0",
     "meriyah": "^6.1.4",
     "vite": "^8.3.1",
-    "webpack": "^5.104.1"
+    "webpack": "^5.112.2"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0998abef0ad2..d8ed6712cf3a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -206,7 +206,7 @@ importers:
         version: 12.1.0(size-limit@12.1.0(jiti@2.7.0))
       '@size-limit/webpack':
         specifier: ~12.1.0
-        version: 12.1.0(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(size-limit@12.1.0(jiti@2.7.0))(uglify-js@3.13.3)
+        version: 12.1.0(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(size-limit@12.1.0(jiti@2.7.0))(svgo@4.1.0)(uglify-js@3.13.3)
       '@types/jsdom':
         specifier: ^21.1.6
         version: 21.1.6
@@ -275,10 +275,10 @@ importers:
         version: 7.0.2
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       webpack:
-        specifier: ^5.104.1
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
       yalc:
         specifier: ^1.0.0-pre.53
         version: 1.0.0-pre.53
@@ -317,16 +317,16 @@ importers:
         version: 1.20.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)
       babel-loader:
         specifier: ^10.1.1
-        version: 10.1.1(@babel/core@7.29.7(supports-color@10.0.0))(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 10.1.1(@babel/core@7.29.7(supports-color@10.0.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       fflate:
         specifier: 0.8.3
         version: 0.8.3
       html-webpack-plugin:
         specifier: ^5.5.0
-        version: 5.6.0(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       webpack:
-        specifier: ^5.95.0
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
     devDependencies:
       '@sentry/browser-utils':
         specifier: 11.10.0
@@ -391,7 +391,7 @@ importers:
         version: 1.2.9
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   dev-packages/bundler-plugin-integration-tests:
     dependencies:
@@ -410,7 +410,7 @@ importers:
         version: 6.0.3
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   dev-packages/bundler-tests:
     dependencies:
@@ -425,13 +425,13 @@ importers:
         version: 4.62.3
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       webpack:
-        specifier: ^5.0.0
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   dev-packages/clear-cache-gh-action:
     dependencies:
@@ -496,7 +496,7 @@ importers:
     devDependencies:
       '@cloudflare/vite-plugin':
         specifier: 1.34.0
-        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))
+        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))
       '@cloudflare/workers-types':
         specifier: ^4.20260426.0
         version: 4.20260519.1
@@ -520,10 +520,10 @@ importers:
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       wrangler:
         specifier: 4.86.0
         version: 4.86.0(@cloudflare/workers-types@4.20260519.1)
@@ -551,7 +551,7 @@ importers:
         version: 0.30.0
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   dev-packages/e2e-tests:
     devDependencies:
@@ -988,7 +988,7 @@ importers:
     devDependencies:
       '@angular-devkit/build-angular':
         specifier: ^14.2.13
-        version: 14.2.13(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(chokidar@3.6.0)(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(html-minifier-terser@6.1.0)(html-webpack-plugin@5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(lightningcss@1.33.0)(ng-packagr@14.3.0(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(@types/node@14.18.63)(supports-color@10.0.0)(tslib@2.8.1)(typescript@4.6.4))(supports-color@10.0.0)(typescript@4.6.4)(uglify-js@3.13.3)
+        version: 14.2.13(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(chokidar@3.6.0)(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(debug@4.4.3(supports-color@10.0.0))(html-minifier-terser@6.1.0)(html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)))(lightningcss@1.33.0)(ng-packagr@14.3.0(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(@types/node@14.18.63)(supports-color@10.0.0)(tslib@2.8.1)(typescript@4.6.4))(supports-color@10.0.0)(typescript@4.6.4)(uglify-js@3.13.3)
       '@angular/cli':
         specifier: ^14.2.13
         version: 14.2.13(chokidar@3.6.0)(supports-color@10.0.0)
@@ -1058,10 +1058,10 @@ importers:
         version: link:../../dev-packages/rollup-utils
       astro:
         specifier: ^4.16.19
-        version: 4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(typescript@7.0.2)
+        version: 4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(typescript@7.0.2)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/aws-serverless:
     dependencies:
@@ -1219,10 +1219,10 @@ importers:
         version: 1.2.11
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       webpack:
-        specifier: 5.104.1
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: 5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   packages/cloudflare:
     dependencies:
@@ -1259,7 +1259,7 @@ importers:
         version: 8.18.0
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       wrangler:
         specifier: 4.61.0
         version: 4.61.0(@cloudflare/workers-types@5.20260710.1)
@@ -1393,7 +1393,7 @@ importers:
         version: 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
       '@embroider/vite':
         specifier: ^1.7.2
-        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@glint/ember-tsc':
         specifier: ^1.5.0
         version: 1.10.0(ember-source@6.12.0(rsvp@4.8.5)(supports-color@10.0.0))(supports-color@10.0.0)(typescript@5.8.3)
@@ -1408,7 +1408,7 @@ importers:
         version: 5.8.3
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/esbuild-plugin:
     dependencies:
@@ -1501,8 +1501,8 @@ importers:
         specifier: ^18.3.1
         version: 18.3.1(react@18.3.1)
       webpack:
-        specifier: ^5.0.0
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   packages/google-cloud-serverless:
     dependencies:
@@ -1721,7 +1721,7 @@ importers:
         version: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
       nitro:
         specifier: ^3.0.260415-beta
-        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       srvx:
         specifier: ^0.11.22
         version: 0.11.22
@@ -1783,7 +1783,7 @@ importers:
     dependencies:
       '@nuxt/kit':
         specifier: ^4.6.0
-        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../browser
@@ -1817,7 +1817,7 @@ importers:
         version: 4.20260519.1
       '@nuxt/nitro-server':
         specifier: ^3.21.11
-        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema':
         specifier: ^3.21.11
         version: 3.21.11
@@ -1832,22 +1832,22 @@ importers:
         version: 1.15.11
       nitro:
         specifier: ^3.0.260311-beta
-        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       nuxi:
         specifier: ^3.25.1
         version: 3.25.1
       nuxt:
         specifier: 3.21.11
-        version: 3.21.11(955174819940f662d7743f134f0d89c6)
+        version: 3.21.11(51972c16778dadf3035cea341382f655)
       unstorage:
         specifier: ^1.17.5
         version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vue:
         specifier: ^3.5.41
         version: 3.5.44(typescript@7.0.2)
@@ -1998,7 +1998,7 @@ importers:
     devDependencies:
       '@react-router/dev':
         specifier: ^7.17.0
-        version: 7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
+        version: 7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
       '@react-router/node':
         specifier: ^7.15.0
         version: 7.18.1(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
@@ -2022,7 +2022,7 @@ importers:
         version: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/remix:
     dependencies:
@@ -2095,7 +2095,7 @@ importers:
         version: 7.8.5
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/replay-canvas:
     dependencies:
@@ -2211,7 +2211,7 @@ importers:
     devDependencies:
       '@apm-js-collab/code-transformer-bundler-plugins':
         specifier: ^0.7.4
-        version: 0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@neondatabase/serverless':
         specifier: 1.2.0
         version: 1.2.0
@@ -2226,10 +2226,10 @@ importers:
         version: 6.1.4
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       webpack:
-        specifier: ^5.104.1
-        version: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   packages/solid:
     dependencies:
@@ -2269,10 +2269,10 @@ importers:
         version: 1.9.11
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
 
   packages/solidstart:
     dependencies:
@@ -2315,7 +2315,7 @@ importers:
         version: 1.0.0(solid-js@1.9.11)
       '@solidjs/start':
         specifier: ^1.3.2
-        version: 1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.3.2(a3d6e0cbce53af562c34fef3544b2a36)
       '@solidjs/testing-library':
         specifier: 0.8.5
         version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
@@ -2330,7 +2330,7 @@ importers:
         version: 20.19.43
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-mock-http:
         specifier: ^1.0.4
         version: 1.0.4
@@ -2339,13 +2339,13 @@ importers:
         version: 1.9.11
       vinxi:
         specifier: ^0.5.11
-        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
 
   packages/svelte:
     dependencies:
@@ -2367,7 +2367,7 @@ importers:
         version: link:../../dev-packages/rollup-utils
       '@sveltejs/vite-plugin-svelte':
         specifier: 1.4.0
-        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@testing-library/svelte':
         specifier: ^3.2.1
         version: 3.2.1(svelte@3.59.2)
@@ -2376,7 +2376,7 @@ importers:
         version: 3.59.2
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/sveltekit:
     dependencies:
@@ -2428,10 +2428,10 @@ importers:
         version: link:../browser
       '@sveltejs/kit':
         specifier: ^2.70.2
-        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@sveltejs/vite-plugin-svelte':
         specifier: ^3.0.0
-        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@types/node':
         specifier: ^20.19.0
         version: 20.19.43
@@ -2440,7 +2440,7 @@ importers:
         version: 4.2.8
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/tanstackstart-react:
     dependencies:
@@ -2480,7 +2480,7 @@ importers:
         version: 20.19.43
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   packages/typescript: {}
 
@@ -9673,12 +9673,6 @@ packages:
     peerDependencies:
       acorn: ^8
 
-  acorn-import-phases@1.0.4:
-    resolution: {integrity: sha512-wKmbr/DDiIXzEOiWrTTUcDm24kQ2vGfZQvM2fwg2vXqR5uW6aapr7ObPtj1th32b9u90/Pf4AItvdTh42fBmVQ==}
-    engines: {node: '>=10.13.0'}
-    peerDependencies:
-      acorn: ^8.14.0
-
   acorn-jsx@5.3.2:
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
     peerDependencies:
@@ -11613,8 +11607,8 @@ packages:
   end-of-stream@1.4.5:
     resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
 
-  enhanced-resolve@5.24.0:
-    resolution: {integrity: sha512-SkE2t82KlkkxQRVMVLAGKxLfORGQfrkx5dkj+vlgXRVNEdPc4eZcR+J/Fvj8C+yKSFH5L0q3NFlyufOVQnCcYQ==}
+  enhanced-resolve@5.26.0:
+    resolution: {integrity: sha512-9vhedylFonb2YGogzUKX6+Ja72gOJbN1QHAqdrvqLwhdl/QWbKopzoUC9EbQNVsAns/bx/4uyqalrQAoy1IByw==}
     engines: {node: '>=10.13.0'}
 
   enquirer@2.3.6:
@@ -14613,6 +14607,61 @@ packages:
   minimist@1.2.8:
     resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
 
+  minimizer-webpack-plugin@5.13.1:
+    resolution: {integrity: sha512-1mhAfvachWYYOm8tpmany5NLuvP+F2wxZWBSX8DC0uFS2wJpM9q3rWgN9wBooAH9d5V12wX0BjyJe4fMjHMarQ==}
+    engines: {node: '>= 10.13.0'}
+    peerDependencies:
+      '@minify-html/node': '*'
+      '@napi-rs/image': '*'
+      '@swc/core': '*'
+      '@swc/css': '*'
+      '@swc/html': '*'
+      clean-css: '*'
+      cssnano: '*'
+      csso: '*'
+      esbuild: '*'
+      html-minifier-terser: '*'
+      imagemin: '*'
+      lightningcss: '*'
+      postcss: '*'
+      sharp: '*'
+      svgo: '*'
+      uglify-js: '*'
+      webpack: ^5.1.0
+    peerDependenciesMeta:
+      '@minify-html/node':
+        optional: true
+      '@napi-rs/image':
+        optional: true
+      '@swc/core':
+        optional: true
+      '@swc/css':
+        optional: true
+      '@swc/html':
+        optional: true
+      clean-css:
+        optional: true
+      cssnano:
+        optional: true
+      csso:
+        optional: true
+      esbuild:
+        optional: true
+      html-minifier-terser:
+        optional: true
+      imagemin:
+        optional: true
+      lightningcss:
+        optional: true
+      postcss:
+        optional: true
+      sharp:
+        optional: true
+      svgo:
+        optional: true
+      uglify-js:
+        optional: true
+
   minipass-collect@1.0.2:
     resolution: {integrity: sha512-6T6lH0H8OG9kITm/Jm6tdooIbogG9e0tLgpY6mphXSm/A9u8Nq1ryBG+Qspiub9LjWlBPsPS3tWQ/Botq4FdxA==}
     engines: {node: '>= 8'}
@@ -17133,9 +17182,15 @@ packages:
     resolution: {integrity: sha512-pN/yOAvcC+5rQ5nERGuwrjLlYvLTbCibnZ1I7B1LaiAz9BRBlE9GMgE/eqV30P7aJQUf7Ddimy/RsbYO/GrVGg==}
     engines: {node: '>= 10.13.0'}
 
-  schema-utils@4.3.3:
-    resolution: {integrity: sha512-eflK8wEtyOE6+hsaRVPxvUKYCpRgzLqDTb8krvAsRIwOGlHoSgYLgBXoubGgLd2fT41/OUYdb48v4k4WWHQurA==}
+  schema-utils@4.8.1:
+    resolution: {integrity: sha512-x39pYlJPyH7Uge5QO64B9XGP9zLDc9WNmiQZc+CE3IzZPvMu3lHOuAMGpYNoPixEL7MSWlGhYTg5UlLSL8G6iw==}
     engines: {node: '>= 10.13.0'}
+    hasBin: true
+    peerDependencies:
+      webpack: ^5.112.0
+    peerDependenciesMeta:
+      webpack:
+        optional: true
 
   scslre@0.3.0:
     resolution: {integrity: sha512-3A6sD0WYP7+QrjbfNA2FN3FsOaGGFoekCVgTyypy53gPxhbkCIjtO6YWgdrfM+n/8sI8JeXZOIxsHjMTNxQ4nQ==}
@@ -17935,8 +17990,8 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  terser@5.43.1:
-    resolution: {integrity: sha512-+6erLbBm0+LROX2sPXlUYx/ux5PyE9K/a92Wrt6oA+WDAoFTdpHE5tCYCI5PNzq2y8df4rA+QgHLJuR4jNymsg==}
+  terser@5.51.2:
+    resolution: {integrity: sha512-bWnjSNscmuI+GJze6ZupnHP8G/cTcsJF+bXCeQknk2SHQsgbNJnLrqiH9jZ2W4STPVXH2mDKKRX3iwPhc9Cn/Q==}
     engines: {node: '>=10'}
     hasBin: true
 
@@ -19183,8 +19238,8 @@ packages:
     resolution: {integrity: sha512-MrJK9z7kD5Gl3jHBnnBVHvr1saVGAfmkyyrvuNzV/oe0Gr1nwZTy5VSA0Gw2j2Or0Mu8HcjUa44qlBvC2Ofnpg==}
     engines: {node: '>= 8'}
 
-  watchpack@2.5.1:
-    resolution: {integrity: sha512-Zn5uXdcFNIA1+1Ei5McRd+iRzfhENPCe7LeABkJtNulSxjma+l7ltNx55BWZkRlwRnpOgHqxnjyaDgJnNXnqzg==}
+  watchpack@2.6.3:
+    resolution: {integrity: sha512-s3NZy0QpTY9qGqzc0wtz4qI28z3+5qKbbAec4MV4G9N3CfgZ9wgvQRr0cl2jh/tqkWG1NWHkmVMHZpCamev5Wg==}
     engines: {node: '>=10.13.0'}
 
   wbuf@1.7.3:
@@ -19234,8 +19289,8 @@ packages:
     resolution: {integrity: sha512-/SaI7xY0831XwP6kzuwhKWVKDP9t1QY1h65lAFLbZqMPIuYcD9QAW4u9STIbU9kaJbPBB/geU/gLr1wDjOhQ+Q==}
     engines: {node: '>=10.0.0'}
 
-  webpack-sources@3.5.0:
-    resolution: {integrity: sha512-HPuy+uuoTCaaoEoI1LQ3JN9+vrPBvEesnnX1jADHy728cHSMlq4wUc4afYqahq2B1mhQVZxCXOkNTnXltr+2vQ==}
+  webpack-sources@3.6.0:
+    resolution: {integrity: sha512-EIMmPVvNI0CYXyRPp34F2Qk7W37/BZVZIofS6LAUnrNjCVahS+hO4mxwFJDjQjODTGZDtVzLYoN2+1dYkhk9qA==}
     engines: {node: '>=10.13.0'}
 
   webpack-subresource-integrity@5.1.0:
@@ -19251,18 +19306,8 @@ packages:
   webpack-virtual-modules@0.6.2:
     resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==}
 
-  webpack@5.104.1:
-    resolution: {integrity: sha512-Qphch25abbMNtekmEGJmeRUhLDbe+QfiWTiqpKYkpCOWY64v9eyl+KRRLmqOFA2AvKPpc9DC6+u2n76tQLBoaA==}
-    engines: {node: '>=10.13.0'}
-    hasBin: true
-    peerDependencies:
-      webpack-cli: '*'
-    peerDependenciesMeta:
-      webpack-cli:
-        optional: true
-
-  webpack@5.107.2:
-    resolution: {integrity: sha512-v7RhXaJbpMlV0D7hC7lb2EbnxkoeUqf9qhKr6lozx3Q48pmFrqqNRmZFUEGmi7pSwm6fCQ2H1IjvCkHqdpVdjQ==}
+  webpack@5.112.2:
+    resolution: {integrity: sha512-B2tp1LI9D8GVpPDqprdt12ukTkXXahj9MzqSWJq4faSPgOUM7CdZaGAB6HrL/8E6UwbBpdj4vzWDbKoFnVoU6g==}
     engines: {node: '>=10.13.0'}
     hasBin: true
     peerDependencies:
@@ -19764,11 +19809,11 @@ snapshots:
     transitivePeerDependencies:
       - chokidar
 
-  '@angular-devkit/build-angular@14.2.13(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(chokidar@3.6.0)(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(html-minifier-terser@6.1.0)(html-webpack-plugin@5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(lightningcss@1.33.0)(ng-packagr@14.3.0(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(@types/node@14.18.63)(supports-color@10.0.0)(tslib@2.8.1)(typescript@4.6.4))(supports-color@10.0.0)(typescript@4.6.4)(uglify-js@3.13.3)':
+  '@angular-devkit/build-angular@14.2.13(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(chokidar@3.6.0)(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(debug@4.4.3(supports-color@10.0.0))(html-minifier-terser@6.1.0)(html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)))(lightningcss@1.33.0)(ng-packagr@14.3.0(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(@types/node@14.18.63)(supports-color@10.0.0)(tslib@2.8.1)(typescript@4.6.4))(supports-color@10.0.0)(typescript@4.6.4)(uglify-js@3.13.3)':
     dependencies:
       '@ampproject/remapping': 2.2.0
       '@angular-devkit/architect': 0.1402.13(chokidar@3.6.0)
-      '@angular-devkit/build-webpack': 0.1402.13(chokidar@3.6.0)(webpack-dev-server@4.11.0(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
+      '@angular-devkit/build-webpack': 0.1402.13(chokidar@3.6.0)(webpack-dev-server@4.11.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       '@angular-devkit/core': 14.2.13(chokidar@3.6.0)
       '@angular/compiler-cli': 14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4)
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -19827,9 +19872,9 @@ snapshots:
       typescript: 4.6.4
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
       webpack-dev-middleware: 5.3.3(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
-      webpack-dev-server: 4.11.0(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
+      webpack-dev-server: 4.11.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       webpack-merge: 5.8.0
-      webpack-subresource-integrity: 5.1.0(html-webpack-plugin@5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
+      webpack-subresource-integrity: 5.1.0(html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
     optionalDependencies:
       esbuild: 0.15.5
       ng-packagr: 14.3.0(@angular/compiler-cli@14.3.0(@angular/compiler@14.3.0(@angular/core@14.3.0(rxjs@7.8.2)(zone.js@0.12.0)))(supports-color@10.0.0)(typescript@4.6.4))(@types/node@14.18.63)(supports-color@10.0.0)(tslib@2.8.1)(typescript@4.6.4)
@@ -19856,12 +19901,12 @@ snapshots:
       - utf-8-validate
       - webpack-cli
 
-  '@angular-devkit/build-webpack@0.1402.13(chokidar@3.6.0)(webpack-dev-server@4.11.0(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))':
+  '@angular-devkit/build-webpack@0.1402.13(chokidar@3.6.0)(webpack-dev-server@4.11.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))':
     dependencies:
       '@angular-devkit/architect': 0.1402.13(chokidar@3.6.0)
       rxjs: 6.6.7
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
-      webpack-dev-server: 4.11.0(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
+      webpack-dev-server: 4.11.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
     transitivePeerDependencies:
       - chokidar
 
@@ -19982,7 +20027,7 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
-  '@apm-js-collab/code-transformer-bundler-plugins@0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@apm-js-collab/code-transformer-bundler-plugins@0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.18.1
       es-module-lexer: 2.1.0
@@ -19991,8 +20036,8 @@ snapshots:
     optionalDependencies:
       esbuild: 0.28.1
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      webpack: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   '@apm-js-collab/code-transformer@0.18.1':
     dependencies:
@@ -22465,12 +22510,12 @@ snapshots:
     optionalDependencies:
       workerd: 1.20260426.1
 
-  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))':
+  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))':
     dependencies:
       '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)
       miniflare: 4.20260426.0
       unenv: 2.0.0-rc.24
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
       ws: 8.18.0
     transitivePeerDependencies:
@@ -22736,17 +22781,17 @@ snapshots:
 
   '@discoveryjs/json-ext@0.5.7': {}
 
-  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@dxup/unimport': 0.1.2
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/compiler-dom': 3.5.44
       chokidar: 5.0.0
       knitwork: 1.3.0
       magic-string: 1.1.0
       pathe: 2.0.3
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@nuxt/schema'
@@ -22776,7 +22821,7 @@ snapshots:
   '@effect/vitest@4.0.0(effect@4.0.0)(vitest@4.1.11)':
     dependencies:
       effect: 4.0.0
-      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   '@ember-data/rfc395-data@0.0.4': {}
 
@@ -22944,7 +22989,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@embroider/core': 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
@@ -22961,8 +23006,8 @@ snapshots:
       jsdom: 25.0.1(supports-color@10.0.0)
       send: 1.2.1(supports-color@10.0.0)
       source-map-url: 0.4.1
-      terser: 5.43.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      terser: 5.51.2
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@glint/template'
       - bufferutil
@@ -24583,11 +24628,11 @@ snapshots:
 
   '@nuxt/devalue@2.0.2': {}
 
-  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       execa: 8.0.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@nuxt/schema'
       - confbox
@@ -24611,11 +24656,11 @@ snapshots:
       pkg-types: 2.3.1
       semver: 7.8.5
 
-  '@nuxt/devtools@3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@nuxt/devtools@3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
-      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@nuxt/devtools-wizard': 3.4.1
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/devtools-core': 8.2.1(vue@3.5.44(typescript@7.0.2))
       '@vue/devtools-kit': 8.2.1
       birpc: 4.1.0
@@ -24642,9 +24687,9 @@ snapshots:
       structured-clone-es: 2.0.1
       tinyglobby: 0.2.17
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
-      vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       which: 6.0.1
       ws: 8.21.3
     transitivePeerDependencies:
@@ -24708,7 +24753,7 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -24726,7 +24771,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -24741,7 +24786,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -24759,7 +24804,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -24774,7 +24819,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -24792,7 +24837,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -24807,7 +24852,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -24821,11 +24866,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -24881,7 +24926,7 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -24895,11 +24940,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -24976,12 +25021,12 @@ snapshots:
       rc9: 3.1.0
       std-env: 4.3.0
 
-  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
+  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
     dependencies:
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
-      '@vitejs/plugin-vue': 6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
-      '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@vitejs/plugin-vue': 6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       autoprefixer: 10.5.4(postcss@8.5.31)
       consola: 3.4.2
       cssnano: 7.1.9(postcss@8.5.31)
@@ -24996,7 +25041,7 @@ snapshots:
       magic-string: 0.30.21
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 3.21.11(955174819940f662d7743f134f0d89c6)
+      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
       nypm: 0.6.9
       ohash: 2.0.11
       pathe: 2.0.3
@@ -25007,9 +25052,9 @@ snapshots:
       std-env: 4.3.0
       ufo: 1.6.4
       unenv: 2.0.0-rc.24
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-node: 5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-plugin-checker: 0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-node: 5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-plugin-checker: 0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       vue: 3.5.44(typescript@7.0.2)
       vue-bundle-renderer: 2.3.2
     optionalDependencies:
@@ -25815,7 +25860,7 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@react-router/dev@7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
+  '@react-router/dev@7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/generator': 7.29.8
@@ -25845,8 +25890,8 @@ snapshots:
       semver: 7.8.5
       tinyglobby: 0.2.17
       valibot: 1.4.2(typescript@6.0.3)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     optionalDependencies:
       typescript: 6.0.3
       wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
@@ -26174,7 +26219,7 @@ snapshots:
     dependencies:
       serialize-javascript: 6.0.2
       smob: 1.4.1
-      terser: 5.43.1
+      terser: 5.51.2
     optionalDependencies:
       rollup: 4.62.3
 
@@ -26182,7 +26227,7 @@ snapshots:
     dependencies:
       serialize-javascript: 7.0.5
       smob: 1.4.1
-      terser: 5.43.1
+      terser: 5.51.2
     optionalDependencies:
       rollup: 4.62.3
 
@@ -26379,13 +26424,14 @@ snapshots:
     dependencies:
       size-limit: 12.1.0(jiti@2.7.0)
 
-  '@size-limit/webpack@12.1.0(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(size-limit@12.1.0(jiti@2.7.0))(uglify-js@3.13.3)':
+  '@size-limit/webpack@12.1.0(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(size-limit@12.1.0(jiti@2.7.0))(svgo@4.1.0)(uglify-js@3.13.3)':
     dependencies:
       nanoid: 5.1.9
       size-limit: 12.1.0(jiti@2.7.0)
-      webpack: 5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
     transitivePeerDependencies:
       - '@minify-html/node'
+      - '@napi-rs/image'
       - '@swc/core'
       - '@swc/css'
       - '@swc/html'
@@ -26394,8 +26440,11 @@ snapshots:
       - csso
       - esbuild
       - html-minifier-terser
+      - imagemin
       - lightningcss
       - postcss
+      - sharp
+      - svgo
       - uglify-js
       - webpack-cli
 
@@ -26784,11 +26833,11 @@ snapshots:
     dependencies:
       solid-js: 1.9.11
 
-  '@solidjs/start@1.3.2(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@solidjs/start@1.3.2(a3d6e0cbce53af562c34fef3544b2a36)':
     dependencies:
-      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
-      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       cookie-es: 2.0.1
       defu: 6.1.7
       error-stack-parser: 2.1.4
@@ -26800,8 +26849,8 @@ snapshots:
       source-map-js: 1.2.2
       terracotta: 1.0.5(solid-js@1.9.11)
       tinyglobby: 0.2.17
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
-      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
       - solid-js
@@ -26856,11 +26905,11 @@ snapshots:
     dependencies:
       acorn: 8.18.0
 
-  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@sveltejs/acorn-typescript': 1.0.9(acorn@8.18.0)
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@types/cookie': 0.6.0
       acorn: 8.18.0
       cookie: 0.6.0
@@ -26872,21 +26921,21 @@ snapshots:
       set-cookie-parser: 3.0.1
       sirv: 3.0.2
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
       typescript: 6.0.3
 
-  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
@@ -26894,22 +26943,22 @@ snapshots:
       magic-string: 0.26.7
       svelte: 3.59.2
       svelte-hmr: 0.15.3(svelte@3.59.2)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
       kleur: 4.1.5
       magic-string: 0.30.21
       svelte: 4.2.8
       svelte-hmr: 0.16.0(svelte@4.2.8)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
@@ -26917,7 +26966,7 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -26926,7 +26975,7 @@ snapshots:
       '@tanstack/router-utils': 1.154.7(supports-color@10.0.0)
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -26963,7 +27012,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -26972,7 +27021,7 @@ snapshots:
       '@babel/template': 7.29.7
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
       '@babel/types': 7.29.8
-      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
@@ -27205,11 +27254,11 @@ snapshots:
   '@types/eslint-scope@3.7.7':
     dependencies:
       '@types/eslint': 8.2.1
-      '@types/estree': 1.0.9
+      '@types/estree': 0.0.51
 
   '@types/eslint@8.2.1':
     dependencies:
-      '@types/estree': 1.0.9
+      '@types/estree': 0.0.51
       '@types/json-schema': 7.0.15
 
   '@types/estree@0.0.39': {}
@@ -27741,7 +27790,7 @@ snapshots:
       untun: 0.1.3
       uqr: 0.1.3
 
-  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
       '@babel/parser': 7.29.9
       acorn: 8.18.0
@@ -27752,35 +27801,35 @@ snapshots:
       magicast: 0.2.11
       recast: 0.23.11
       tslib: 2.8.1
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       acorn: 8.18.0
       acorn-loose: 8.4.0
       acorn-typescript: 1.4.13(acorn@8.18.0)
       astring: 1.9.0
       magicast: 0.2.11
       recast: 0.23.11
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/plugin-transform-typescript': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
       '@rolldown/pluginutils': 1.0.1
       '@vue/babel-plugin-jsx': 2.0.1(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-vue@6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@vitejs/plugin-vue@6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
       '@rolldown/pluginutils': 1.0.1
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
 
   '@vitest/coverage-v8@4.1.11(vitest@4.1.11)':
@@ -27795,7 +27844,7 @@ snapshots:
       obug: 2.1.4
       std-env: 4.3.0
       tinyrainbow: 3.1.1
-      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   '@vitest/expect@4.1.11':
     dependencies:
@@ -27806,13 +27855,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.1
 
-  '@vitest/mocker@4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.11
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
   '@vitest/pretty-format@4.1.11':
     dependencies:
@@ -28223,10 +28272,6 @@ snapshots:
     dependencies:
       acorn: 8.18.0
 
-  acorn-import-phases@1.0.4(acorn@8.18.0):
-    dependencies:
-      acorn: 8.18.0
-
   acorn-jsx@5.3.2(acorn@8.18.0):
     dependencies:
       acorn: 8.18.0
@@ -28306,7 +28351,7 @@ snapshots:
 
   ajv-formats@2.1.1:
     dependencies:
-      ajv: 8.20.0
+      ajv: 8.11.0
 
   ajv-formats@3.0.1:
     dependencies:
@@ -28554,7 +28599,7 @@ snapshots:
 
   astring@1.9.0: {}
 
-  astro@4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(typescript@7.0.2):
+  astro@4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(typescript@7.0.2):
     dependencies:
       '@astrojs/compiler': 2.13.1
       '@astrojs/internal-helpers': 0.4.1
@@ -28610,8 +28655,8 @@ snapshots:
       tsconfck: 3.1.6(typescript@7.0.2)
       unist-util-visit: 5.0.0
       vfile: 6.0.3
-      vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)
-      vitefu: 1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1))
+      vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)
+      vitefu: 1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2))
       which-pm: 3.0.1
       xxhash-wasm: 1.1.0
       yargs-parser: 21.1.1
@@ -28748,12 +28793,12 @@ snapshots:
 
   babel-import-util@3.0.1: {}
 
-  babel-loader@10.1.1(@babel/core@7.29.7(supports-color@10.0.0))(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  babel-loader@10.1.1(@babel/core@7.29.7(supports-color@10.0.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       find-up: 5.0.0
     optionalDependencies:
-      webpack: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   babel-loader@8.2.5(@babel/core@7.18.10(supports-color@10.0.0))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
@@ -29743,7 +29788,7 @@ snapshots:
       glob-parent: 6.0.2
       globby: 13.2.2
       normalize-path: 3.0.0
-      schema-utils: 4.3.3
+      schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       serialize-javascript: 6.0.2
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
@@ -30518,7 +30563,7 @@ snapshots:
     dependencies:
       once: 1.4.0
 
-  enhanced-resolve@5.24.0:
+  enhanced-resolve@5.26.0:
     dependencies:
       graceful-fs: 4.2.11
       tapable: 2.3.3
@@ -31365,7 +31410,7 @@ snapshots:
 
   externality@1.0.2:
     dependencies:
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
       mlly: 1.8.2
       pathe: 1.1.2
       ufo: 1.6.4
@@ -31548,7 +31593,7 @@ snapshots:
     dependencies:
       app-module-path: 2.2.0
       commander: 12.1.0
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
       module-definition: 6.0.1
       module-lookup-amd: 9.0.5
       resolve: 1.22.12
@@ -32388,13 +32433,13 @@ snapshots:
       he: 1.2.0
       param-case: 3.0.4
       relateurl: 0.2.7
-      terser: 5.43.1
+      terser: 5.51.2
 
   html-to-image@1.11.11: {}
 
   html-void-elements@3.0.0: {}
 
-  html-webpack-plugin@5.6.0(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@types/html-minifier-terser': 6.1.0
       html-minifier-terser: 6.1.0
@@ -32402,9 +32447,10 @@ snapshots:
       pretty-error: 4.0.0
       tapable: 2.3.3
     optionalDependencies:
-      webpack: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)
+    optional: true
 
-  html-webpack-plugin@5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@types/html-minifier-terser': 6.1.0
       html-minifier-terser: 6.1.0
@@ -32412,8 +32458,7 @@ snapshots:
       pretty-error: 4.0.0
       tapable: 2.3.3
     optionalDependencies:
-      webpack: 5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
-    optional: true
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   htmlparser2@6.1.0:
     dependencies:
@@ -32488,7 +32533,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  http-proxy-middleware@2.0.10(@types/express@4.17.21):
+  http-proxy-middleware@2.0.10(@types/express@4.17.21)(debug@4.4.3(supports-color@10.0.0)):
     dependencies:
       '@types/http-proxy': 1.17.14
       http-proxy: 1.18.1(debug@4.4.3(supports-color@10.0.0))
@@ -32622,12 +32667,12 @@ snapshots:
 
   import-meta-resolve@4.2.0: {}
 
-  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       es-module-lexer: 2.1.0
       pathe: 2.0.3
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     transitivePeerDependencies:
       - '@farmfe/core'
@@ -33513,7 +33558,7 @@ snapshots:
 
   license-webpack-plugin@4.0.2(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
-      webpack-sources: 3.5.0
+      webpack-sources: 3.6.0
     optionalDependencies:
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
@@ -34263,7 +34308,7 @@ snapshots:
 
   mini-css-extract-plugin@2.6.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
-      schema-utils: 4.3.3
+      schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
   miniflare@4.20260124.0:
@@ -34326,6 +34371,45 @@ snapshots:
 
   minimist@1.2.8: {}
 
+  minimizer-webpack-plugin@5.13.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)):
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      jest-worker: 27.5.1
+      schema-utils: 4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3))
+      terser: 5.51.2
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)
+    optionalDependencies:
+      clean-css: 5.2.2
+      cssnano: 7.1.9(postcss@8.5.31)
+      csso: 5.0.5
+      esbuild: 0.28.1
+      html-minifier-terser: 6.1.0
+      lightningcss: 1.33.0
+      postcss: 8.5.31
+      sharp: 0.35.5(@types/node@14.18.63)
+      svgo: 4.1.0
+      uglify-js: 3.13.3
+    optional: true
+
+  minimizer-webpack-plugin@5.13.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      jest-worker: 27.5.1
+      schema-utils: 4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      terser: 5.51.2
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
+    optionalDependencies:
+      clean-css: 5.2.2
+      cssnano: 7.1.9(postcss@8.5.31)
+      csso: 5.0.5
+      esbuild: 0.28.1
+      html-minifier-terser: 6.1.0
+      lightningcss: 1.33.0
+      postcss: 8.5.31
+      sharp: 0.35.5(@types/node@20.19.43)
+      svgo: 4.1.0
+      uglify-js: 3.13.3
+
   minipass-collect@1.0.2:
     dependencies:
       minipass: 3.3.6
@@ -34703,7 +34787,7 @@ snapshots:
       node-gyp-build: 4.6.0
     optional: true
 
-  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -34724,7 +34808,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -34756,7 +34840,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -34777,7 +34861,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -34809,7 +34893,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -34874,7 +34958,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -34918,7 +35002,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -34983,7 +35067,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35027,7 +35111,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35092,7 +35176,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35344,16 +35428,16 @@ snapshots:
 
   nuxi@3.25.1: {}
 
-  nuxt@3.21.11(955174819940f662d7743f134f0d89c6):
+  nuxt@3.21.11(51972c16778dadf3035cea341382f655):
     dependencies:
-      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)
-      '@nuxt/devtools': 3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@nuxt/devtools': 3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
-      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema': 3.21.11
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))
-      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(955174819940f662d7743f134f0d89c6))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
+      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       c12: 3.3.4(magicast@0.5.4)
@@ -35370,7 +35454,7 @@ snapshots:
       h3: 1.15.11
       hookable: 5.5.3
       ignore: 7.0.12
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       jiti: 2.7.0
       klona: 2.0.6
       knitwork: 1.3.0
@@ -35397,8 +35481,8 @@ snapshots:
       ultrahtml: 1.7.0
       uncrypto: 0.1.3
       unctx: 2.5.0
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-vue-router: 0.19.2(@vue/compiler-sfc@3.5.44)(vue-router@4.6.4(vue@3.5.44(typescript@7.0.2)))(vue@3.5.44(typescript@7.0.2))
       untyped: 2.0.0
       vue: 3.5.44(typescript@7.0.2)
@@ -37980,7 +38064,7 @@ snapshots:
   sass-lookup@6.1.0:
     dependencies:
       commander: 12.1.0
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
 
   sass@1.54.4:
     dependencies:
@@ -38018,12 +38102,33 @@ snapshots:
       ajv: 6.12.6
       ajv-keywords: 3.5.2(ajv@6.12.6)
 
-  schema-utils@4.3.3:
+  schema-utils@4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@types/json-schema': 7.0.15
       ajv: 8.20.0
-      ajv-formats: 2.1.1
+      ajv-formats: 3.0.1
       ajv-keywords: 5.1.0(ajv@8.20.0)
+    optionalDependencies:
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)
+    optional: true
+
+  schema-utils@4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+    dependencies:
+      '@types/json-schema': 7.0.15
+      ajv: 8.20.0
+      ajv-formats: 3.0.1
+      ajv-keywords: 5.1.0(ajv@8.20.0)
+    optionalDependencies:
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
+
+  schema-utils@4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
+    dependencies:
+      '@types/json-schema': 7.0.15
+      ajv: 8.20.0
+      ajv-formats: 3.0.1
+      ajv-keywords: 5.1.0(ajv@8.20.0)
+    optionalDependencies:
+      webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
   scslre@0.3.0:
     dependencies:
@@ -38255,6 +38360,40 @@ snapshots:
       '@img/sharp-win32-ia32': 0.34.5
       '@img/sharp-win32-x64': 0.34.5
 
+  sharp@0.35.5(@types/node@14.18.63):
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.8.5
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.35.5
+      '@img/sharp-darwin-x64': 0.35.5
+      '@img/sharp-freebsd-wasm32': 0.35.5
+      '@img/sharp-libvips-darwin-arm64': 1.3.4
+      '@img/sharp-libvips-darwin-x64': 1.3.4
+      '@img/sharp-libvips-linux-arm': 1.3.4
+      '@img/sharp-libvips-linux-arm64': 1.3.4
+      '@img/sharp-libvips-linux-ppc64': 1.3.4
+      '@img/sharp-libvips-linux-riscv64': 1.3.4
+      '@img/sharp-libvips-linux-s390x': 1.3.4
+      '@img/sharp-libvips-linux-x64': 1.3.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.4
+      '@img/sharp-linux-arm': 0.35.5
+      '@img/sharp-linux-arm64': 0.35.5
+      '@img/sharp-linux-ppc64': 0.35.5
+      '@img/sharp-linux-riscv64': 0.35.5
+      '@img/sharp-linux-s390x': 0.35.5
+      '@img/sharp-linux-x64': 0.35.5
+      '@img/sharp-linuxmusl-arm64': 0.35.5
+      '@img/sharp-linuxmusl-x64': 0.35.5
+      '@img/sharp-webcontainers-wasm32': 0.35.5
+      '@img/sharp-win32-arm64': 0.35.5
+      '@img/sharp-win32-ia32': 0.35.5
+      '@img/sharp-win32-x64': 0.35.5
+      '@types/node': 14.18.63
+    optional: true
+
   sharp@0.35.5(@types/node@20.19.43):
     dependencies:
       '@img/colour': 1.1.0
@@ -38942,8 +39081,8 @@ snapshots:
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       jest-worker: 27.5.1
-      schema-utils: 4.3.3
-      terser: 5.43.1
+      schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
+      terser: 5.51.2
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
     optionalDependencies:
       clean-css: 5.2.2
@@ -38955,40 +39094,6 @@ snapshots:
       postcss: 8.4.31
       uglify-js: 3.13.3
 
-  terser-webpack-plugin@5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
-    dependencies:
-      '@jridgewell/trace-mapping': 0.3.31
-      jest-worker: 27.5.1
-      schema-utils: 4.3.3
-      terser: 5.43.1
-      webpack: 5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
-    optionalDependencies:
-      clean-css: 5.2.2
-      cssnano: 7.1.9(postcss@8.5.31)
-      csso: 5.0.5
-      esbuild: 0.28.1
-      html-minifier-terser: 6.1.0
-      lightningcss: 1.33.0
-      postcss: 8.5.31
-      uglify-js: 3.13.3
-
-  terser-webpack-plugin@5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
-    dependencies:
-      '@jridgewell/trace-mapping': 0.3.31
-      jest-worker: 27.5.1
-      schema-utils: 4.3.3
-      terser: 5.43.1
-      webpack: 5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
-    optionalDependencies:
-      clean-css: 5.2.2
-      cssnano: 7.1.9(postcss@8.5.31)
-      csso: 5.0.5
-      esbuild: 0.28.1
-      html-minifier-terser: 6.1.0
-      lightningcss: 1.33.0
-      postcss: 8.5.31
-      uglify-js: 3.13.3
-
   terser@5.14.2:
     dependencies:
       '@jridgewell/source-map': 0.3.5
@@ -38996,7 +39101,7 @@ snapshots:
       commander: 2.20.3
       source-map-support: 0.5.21
 
-  terser@5.43.1:
+  terser@5.51.2:
     dependencies:
       '@jridgewell/source-map': 0.3.5
       acorn: 8.18.0
@@ -39362,26 +39467,26 @@ snapshots:
       magic-string: 0.30.21
       unplugin: 2.3.11
 
-  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 0.30.21
       oxc-parser: 0.143.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.143.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.152.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
   undefsafe@2.0.5: {}
 
@@ -39445,7 +39550,7 @@ snapshots:
       trough: 2.1.0
       vfile: 6.0.3
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -39459,7 +39564,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.143.0
@@ -39474,7 +39579,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -39488,7 +39593,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
@@ -39503,7 +39608,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -39517,7 +39622,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
@@ -39644,7 +39749,7 @@ snapshots:
       picomatch: 4.0.7
       webpack-virtual-modules: 0.6.2
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
@@ -39653,10 +39758,10 @@ snapshots:
       esbuild: 0.28.1
       rolldown: 1.2.11
       rollup: 4.62.3
-      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      webpack: 5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
@@ -39665,8 +39770,8 @@ snapshots:
       esbuild: 0.28.1
       rolldown: 1.2.11
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      webpack: 5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   unstorage@1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0)):
     dependencies:
@@ -39844,7 +39949,7 @@ snapshots:
       '@types/unist': 3.0.0
       vfile-message: 4.0.3
 
-  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))(yaml@2.9.0):
+  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
@@ -39865,7 +39970,7 @@ snapshots:
       hookable: 5.5.3
       http-proxy: 1.18.1(debug@4.4.3(supports-color@10.0.0))
       micromatch: 4.0.8
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-fetch-native: 1.6.7
       path-to-regexp: 6.3.0
       pathe: 1.1.2
@@ -39878,7 +39983,7 @@ snapshots:
       unctx: 2.5.0
       unenv: 1.10.0
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
-      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@azure/app-configuration'
@@ -39931,23 +40036,23 @@ snapshots:
       - xml2js
       - yaml
 
-  vite-dev-rpc@2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-dev-rpc@2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       birpc: 4.1.0
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-hot-client: 2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-hot-client: 2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
 
-  vite-hot-client@2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-hot-client@2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
-  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3(supports-color@10.0.0)
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -39962,13 +40067,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite-node@5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       es-module-lexer: 2.1.0
       obug: 2.1.4
       pathe: 2.0.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -39982,7 +40087,7 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plugin-checker@0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-checker@0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       '@babel/code-frame': 7.29.7
       chokidar: 5.0.0
@@ -39991,14 +40096,14 @@ snapshots:
       picomatch: 4.0.7
       proper-lockfile: 4.1.2
       tiny-invariant: 1.3.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
     optionalDependencies:
       meow: 13.2.0
       optionator: 0.9.4
       oxlint: 1.89.0(oxlint-tsgolint@7.0.2004)
       typescript: 7.0.2
 
-  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       ansis: 4.3.1
       error-stack-parser-es: 1.0.5
@@ -40008,12 +40113,12 @@ snapshots:
       perfect-debounce: 2.1.0
       sirv: 3.0.2
       unplugin-utils: 0.3.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vite-dev-rpc: 2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite-dev-rpc: 2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
     optionalDependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
 
-  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@types/babel__core': 7.20.5
@@ -40021,24 +40126,24 @@ snapshots:
       merge-anything: 5.1.7
       solid-js: 1.9.11
       solid-refresh: 0.6.3(solid-js@1.9.11)(supports-color@10.0.0)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vitefu: 1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
     optionalDependencies:
       '@testing-library/jest-dom': 6.9.1
     transitivePeerDependencies:
       - supports-color
 
-  vite-plugin-vue-tracer@1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
+  vite-plugin-vue-tracer@1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
     dependencies:
       estree-walker: 3.0.3
       exsolve: 1.1.3
       magic-string: 1.1.0
       pathe: 2.0.3
       source-map-js: 1.2.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
 
-  vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1):
+  vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2):
     dependencies:
       esbuild: 0.21.5
       postcss: 8.5.31
@@ -40050,9 +40155,9 @@ snapshots:
       lightningcss: 1.33.0
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
-      terser: 5.43.1
+      terser: 5.51.2
 
-  vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       esbuild: 0.25.12
       fdir: 6.5.0(picomatch@4.0.7)
@@ -40068,11 +40173,11 @@ snapshots:
       lightningcss: 1.33.0
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
-      terser: 5.43.1
+      terser: 5.51.2
       tsx: 4.23.0
       yaml: 2.9.0
 
-  vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.7)
@@ -40088,11 +40193,11 @@ snapshots:
       lightningcss: 1.33.0
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
-      terser: 5.43.1
+      terser: 5.51.2
       tsx: 4.23.0
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
@@ -40107,11 +40212,11 @@ snapshots:
       less: 4.2.0(supports-color@10.0.0)
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
-      terser: 5.43.1
+      terser: 5.51.2
       tsx: 4.23.0
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
@@ -40126,26 +40231,26 @@ snapshots:
       less: 4.2.0(supports-color@8.1.1)
       sass: 1.72.0
       stylus: 0.59.0(supports-color@8.1.1)
-      terser: 5.43.1
+      terser: 5.51.2
       tsx: 4.23.0
       yaml: 2.9.0
 
-  vitefu@0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vitefu@0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
-  vitefu@1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)):
+  vitefu@1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)):
     optionalDependencies:
-      vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)
+      vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)
 
-  vitefu@1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)):
+  vitefu@1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
 
-  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -40162,7 +40267,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
@@ -40183,10 +40288,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0):
+  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -40203,7 +40308,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.43.1)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
@@ -40349,9 +40454,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  watchpack@2.5.1:
+  watchpack@2.6.3:
     dependencies:
-      glob-to-regexp: 0.4.1
       graceful-fs: 4.2.11
 
   wbuf@1.7.3:
@@ -40384,10 +40488,10 @@ snapshots:
       memfs: 3.6.0
       mime-types: 2.1.35
       range-parser: 1.2.1
-      schema-utils: 4.3.3
+      schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
-  webpack-dev-server@4.11.0(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
+  webpack-dev-server@4.11.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
       '@types/bonjour': 3.5.13
       '@types/connect-history-api-fallback': 1.5.4
@@ -40406,12 +40510,12 @@ snapshots:
       express: 4.22.1(supports-color@10.0.0)
       graceful-fs: 4.2.11
       html-entities: 2.5.2
-      http-proxy-middleware: 2.0.10(@types/express@4.17.21)
+      http-proxy-middleware: 2.0.10(@types/express@4.17.21)(debug@4.4.3(supports-color@10.0.0))
       ipaddr.js: 2.4.0
       open: 8.4.0
       p-retry: 4.6.2
       rimraf: 3.0.2
-      schema-utils: 4.3.3
+      schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       selfsigned: 2.4.1
       serve-index: 1.9.1(supports-color@10.0.0)
       sockjs: 0.3.24
@@ -40430,46 +40534,39 @@ snapshots:
       clone-deep: 4.0.1
       wildcard: 2.0.0
 
-  webpack-sources@3.5.0: {}
+  webpack-sources@3.6.0: {}
 
-  webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
+  webpack-subresource-integrity@5.1.0(html-webpack-plugin@5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)))(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
       typed-assert: 1.0.9
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
     optionalDependencies:
-      html-webpack-plugin: 5.6.0(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
+      html-webpack-plugin: 5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3))
 
   webpack-virtual-modules@0.6.2: {}
 
-  webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3):
+  webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3):
     dependencies:
-      '@types/eslint-scope': 3.7.7
       '@types/estree': 1.0.9
       '@types/json-schema': 7.0.15
       '@webassemblyjs/ast': 1.14.1
       '@webassemblyjs/wasm-edit': 1.14.1
       '@webassemblyjs/wasm-parser': 1.14.1
-      acorn: 8.18.0
-      acorn-import-phases: 1.0.4(acorn@8.18.0)
       browserslist: 4.29.0
       chrome-trace-event: 1.0.2
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
       es-module-lexer: 2.1.0
-      eslint-scope: 5.1.1
       events: 3.3.0
-      glob-to-regexp: 0.4.1
       graceful-fs: 4.2.11
-      json-parse-even-better-errors: 2.3.1
-      loader-runner: 4.3.2
-      mime-types: 2.1.35
-      neo-async: 2.6.2
-      schema-utils: 4.3.3
+      mime-db: 1.54.0
+      minimizer-webpack-plugin: 5.13.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3))
+      schema-utils: 4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@14.18.63))(svgo@4.1.0)(uglify-js@3.13.3))
       tapable: 2.3.3
-      terser-webpack-plugin: 5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)(webpack@5.104.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      watchpack: 2.5.1
-      webpack-sources: 3.5.0
+      watchpack: 2.6.3
+      webpack-sources: 3.6.0
     transitivePeerDependencies:
       - '@minify-html/node'
+      - '@napi-rs/image'
       - '@swc/core'
       - '@swc/css'
       - '@swc/html'
@@ -40478,37 +40575,36 @@ snapshots:
       - csso
       - esbuild
       - html-minifier-terser
+      - imagemin
       - lightningcss
       - postcss
+      - sharp
+      - svgo
       - uglify-js
+    optional: true
 
-  webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3):
+  webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3):
     dependencies:
       '@types/estree': 1.0.9
       '@types/json-schema': 7.0.15
       '@webassemblyjs/ast': 1.14.1
       '@webassemblyjs/wasm-edit': 1.14.1
       '@webassemblyjs/wasm-parser': 1.14.1
-      acorn: 8.18.0
-      acorn-import-phases: 1.0.4(acorn@8.18.0)
       browserslist: 4.29.0
       chrome-trace-event: 1.0.2
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
       es-module-lexer: 2.1.0
-      eslint-scope: 5.1.1
       events: 3.3.0
-      glob-to-regexp: 0.4.1
       graceful-fs: 4.2.11
-      loader-runner: 4.3.2
       mime-db: 1.54.0
-      neo-async: 2.6.2
-      schema-utils: 4.3.3
+      minimizer-webpack-plugin: 5.13.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      schema-utils: 4.8.1(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       tapable: 2.3.3
-      terser-webpack-plugin: 5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3)(webpack@5.107.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(uglify-js@3.13.3))
-      watchpack: 2.5.1
-      webpack-sources: 3.5.0
+      watchpack: 2.6.3
+      webpack-sources: 3.6.0
     transitivePeerDependencies:
       - '@minify-html/node'
+      - '@napi-rs/image'
       - '@swc/core'
       - '@swc/css'
       - '@swc/html'
@@ -40517,8 +40613,11 @@ snapshots:
       - csso
       - esbuild
       - html-minifier-terser
+      - imagemin
       - lightningcss
       - postcss
+      - sharp
+      - svgo
       - uglify-js
 
   webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3):
@@ -40532,7 +40631,7 @@ snapshots:
       acorn-import-assertions: 1.8.0(acorn@8.18.0)
       browserslist: 4.29.0
       chrome-trace-event: 1.0.2
-      enhanced-resolve: 5.24.0
+      enhanced-resolve: 5.26.0
       es-module-lexer: 0.9.3
       eslint-scope: 5.1.1
       events: 3.3.0
@@ -40545,8 +40644,8 @@ snapshots:
       schema-utils: 3.3.0
       tapable: 2.3.3
       terser-webpack-plugin: 5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
-      watchpack: 2.5.1
-      webpack-sources: 3.5.0
+      watchpack: 2.6.3
+      webpack-sources: 3.6.0
     transitivePeerDependencies:
       - '@minify-html/node'
       - '@swc/core'

From a36d4b78edc46f9910e8f7e501787370ffd9f6df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Peer=20St=C3=B6cklmair?= <jan.peer@sentry.io>
Date: Thu, 29 Oct 2026 11:37:58 -0600
Subject: [PATCH 044/169] fix(server-utils): Fix orchestrion source maps of
 instrumented modules (#25772)

closes #25329
closes [JS-3928](https://linear.app/getsentry/issue/JS-3928)

## Description

This bumps `@apm-js-collab/code-transformer-bundler-plugins` to 0.7.5,
which has the upstream fix
(apm-js-collab/code-transformer-bundler-plugins#50,
nodejs/orchestrion-js#104). The source map of an instrumented module now
names its real file in `node_modules`, with `sourcesContent`. Before,
Vite 8 and webpack builds had a `<package>/<file>` source that does not
exist (for example `ioredis/built/Redis.js`), and source map flattening
in `@sentry/sveltekit` failed for that chunk.

## Type decisions

code-transformer 0.19.0 also allows a function in the `transform` field
of an instrumentation. I cast `serializeInstrumentations` to our
vendored types, so the public `transform` type stays `string`. The
alternative is to also allow a function in the vendored type.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
---
 .../server-runtime-injection/package.json     |  4 +-
 packages/server-utils/package.json            |  2 +-
 .../src/orchestrion/bundler/webpack.ts        |  7 ++-
 .../test/orchestrion/config.test.ts           |  2 +-
 .../test/orchestrion/sourcemap.test.ts        | 59 +++++++++++++++++++
 pnpm-lock.yaml                                | 34 +++++------
 6 files changed, 85 insertions(+), 23 deletions(-)
 create mode 100644 packages/server-utils/test/orchestrion/sourcemap.test.ts

diff --git a/packages/server-runtime-injection/package.json b/packages/server-runtime-injection/package.json
index b6285ac2060a..7fbbce3d0db6 100644
--- a/packages/server-runtime-injection/package.json
+++ b/packages/server-runtime-injection/package.json
@@ -49,8 +49,8 @@
     "@sentry/server-utils": "11.10.0"
   },
   "devDependencies": {
-    "@apm-js-collab/code-transformer": "^0.18.1",
-    "@apm-js-collab/tracing-hooks": "^0.13.3",
+    "@apm-js-collab/code-transformer": "^0.19.0",
+    "@apm-js-collab/tracing-hooks": "^0.14.0",
     "@sentry-internal/rollup-utils": "11.10.0",
     "@types/node": "^20.19.0",
     "@vercel/nft": "^1.11.0",
diff --git a/packages/server-utils/package.json b/packages/server-utils/package.json
index 64bca0f41e4d..0b0307509a36 100644
--- a/packages/server-utils/package.json
+++ b/packages/server-utils/package.json
@@ -101,7 +101,7 @@
     "@sentry/core": "11.10.0"
   },
   "devDependencies": {
-    "@apm-js-collab/code-transformer-bundler-plugins": "^0.7.4",
+    "@apm-js-collab/code-transformer-bundler-plugins": "^0.7.5",
     "@neondatabase/serverless": "1.2.0",
     "@sentry-internal/rollup-utils": "11.10.0",
     "@types/node": "^20.19.0",
diff --git a/packages/server-utils/src/orchestrion/bundler/webpack.ts b/packages/server-utils/src/orchestrion/bundler/webpack.ts
index 4aed6df60460..dec13a661026 100644
--- a/packages/server-utils/src/orchestrion/bundler/webpack.ts
+++ b/packages/server-utils/src/orchestrion/bundler/webpack.ts
@@ -16,8 +16,11 @@ import { externalEntryMatchesModule, externalizedModulesWarning, orchestrionTran
 
 // Explicitly annotated with the vendored types so the emitted declaration doesn't reference
 // `@apm-js-collab/code-transformer-bundler-plugins` — a bundled devDependency consumers don't have.
-export const serializeInstrumentations: (configs: AnyInstrumentationConfig[]) => SerializableInstrumentationConfig[] =
-  serializeInstrumentationsImpl;
+// Upstream also allows a function in `transform`. The vendored configs only allow a string there,
+// and the serializer copies `transform` unchanged, so its output only contains strings too.
+export const serializeInstrumentations = serializeInstrumentationsImpl as (
+  configs: AnyInstrumentationConfig[],
+) => SerializableInstrumentationConfig[];
 export type { SerializableInstrumentationConfig } from '../apmTypes';
 
 export { getOrchestrionLoaderPath, resolveOrchestrionRuntimeRequest };
diff --git a/packages/server-utils/test/orchestrion/config.test.ts b/packages/server-utils/test/orchestrion/config.test.ts
index 3d9a76415b9c..0385405c1573 100644
--- a/packages/server-utils/test/orchestrion/config.test.ts
+++ b/packages/server-utils/test/orchestrion/config.test.ts
@@ -1,4 +1,4 @@
-import type { InstrumentationConfig } from '@apm-js-collab/code-transformer-bundler-plugins/core';
+import type { InstrumentationConfig } from '../../src/orchestrion/apmTypes';
 import { describe, expect, it } from 'vitest';
 import {
   getInstrumentedModuleNames,
diff --git a/packages/server-utils/test/orchestrion/sourcemap.test.ts b/packages/server-utils/test/orchestrion/sourcemap.test.ts
new file mode 100644
index 000000000000..6b9a2d738994
--- /dev/null
+++ b/packages/server-utils/test/orchestrion/sourcemap.test.ts
@@ -0,0 +1,59 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { build, type Plugin, type Rollup } from 'vite';
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import type { InstrumentationConfig } from '../../src/orchestrion/apmTypes';
+import { sentryOrchestrionPlugin as sentryOrchestrionRollupPlugin } from '../../src/orchestrion/bundler/rollup';
+import { sentryOrchestrionPlugin as sentryOrchestrionVitePlugin } from '../../src/orchestrion/bundler/vite';
+
+const instrumentations: InstrumentationConfig[] = [
+  {
+    channelName: 'query',
+    module: { name: 'fake-db', versionRange: '>=1.0.0', filePath: 'index.js' },
+    functionQuery: { expressionName: 'query', kind: 'Sync' },
+  },
+];
+
+describe('orchestrion bundler plugins source maps', () => {
+  let root: string;
+
+  beforeAll(() => {
+    root = mkdtempSync(join(tmpdir(), 'orchestrion-sourcemap-'));
+    const packageDir = join(root, 'node_modules', 'fake-db');
+    mkdirSync(packageDir, { recursive: true });
+    writeFileSync(join(packageDir, 'package.json'), JSON.stringify({ name: 'fake-db', version: '1.0.0' }));
+    writeFileSync(join(packageDir, 'index.js'), 'exports.query = function query(sql) {\n  return sql;\n};\n');
+    writeFileSync(
+      join(root, 'server.js'),
+      "import { query } from 'fake-db';\nexport const run = () => query('SELECT 1');\n",
+    );
+  });
+
+  afterAll(() => rmSync(root, { recursive: true, force: true }));
+
+  // https://github.com/getsentry/sentry-javascript/issues/25329
+  it.each([
+    ['vite', () => sentryOrchestrionVitePlugin({ instrumentations })],
+    ['rollup', () => sentryOrchestrionRollupPlugin({ instrumentations }) as Plugin],
+  ])('maps the transformed module only to its file in node_modules (%s plugin)', async (_name, createPlugin) => {
+    const output = (await build({
+      root,
+      configFile: false,
+      logLevel: 'silent',
+      plugins: [createPlugin()],
+      ssr: { noExternal: ['fake-db'] },
+      build: {
+        ssr: 'server.js',
+        sourcemap: true,
+        write: false,
+        rollupOptions: { external: ['@sentry/server-utils'] },
+      },
+    })) as Rollup.RollupOutput;
+
+    const chunk = output.output[0];
+
+    expect(chunk.code).toContain('orchestrion:fake-db:query');
+    expect(chunk.map?.sources).toEqual(['../node_modules/fake-db/index.js', '../server.js']);
+  });
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d8ed6712cf3a..e197899faf36 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2176,11 +2176,11 @@ importers:
         version: link:../server-utils
     devDependencies:
       '@apm-js-collab/code-transformer':
-        specifier: ^0.18.1
-        version: 0.18.1
+        specifier: ^0.19.0
+        version: 0.19.0
       '@apm-js-collab/tracing-hooks':
-        specifier: ^0.13.3
-        version: 0.13.3(supports-color@7.2.0)
+        specifier: ^0.14.0
+        version: 0.14.0(supports-color@7.2.0)
       '@sentry-internal/rollup-utils':
         specifier: 11.10.0
         version: link:../../dev-packages/rollup-utils
@@ -2210,8 +2210,8 @@ importers:
         version: link:../core
     devDependencies:
       '@apm-js-collab/code-transformer-bundler-plugins':
-        specifier: ^0.7.4
-        version: 0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        specifier: ^0.7.5
+        version: 0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@neondatabase/serverless':
         specifier: 1.2.0
         version: 1.2.0
@@ -2788,8 +2788,8 @@ packages:
       zod:
         optional: true
 
-  '@apm-js-collab/code-transformer-bundler-plugins@0.7.4':
-    resolution: {integrity: sha512-nAfOeZPSUAQvJa1iFT/5oCrTm5YQhMMrfCNthNnaXHZiOQhu1KGuLoIx7HtbAi3wfwaBYLaICPIeenIaEwcXIg==}
+  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5':
+    resolution: {integrity: sha512-/nmTAee5mBly9QiIQSGIKITv9TcEyLTQJFbYjfyWCEfYofxQgurMrT5fLDIRneSPqICucRTxgPMHmc6/q7cgfw==}
     engines: {node: '>=18.0.0'}
     peerDependencies:
       esbuild: '*'
@@ -2806,12 +2806,12 @@ packages:
       webpack:
         optional: true
 
-  '@apm-js-collab/code-transformer@0.18.1':
-    resolution: {integrity: sha512-u1Hb6bHjWtkSpiprwVP6YaHC1DTN4RAU3zYkUDUe7WMnJwdyU1pwTL9dFKiSJB9IiLue/EQovmyx6xhU7FFtAQ==}
+  '@apm-js-collab/code-transformer@0.19.0':
+    resolution: {integrity: sha512-KGR8dyF4L5dIbnfW2a7n3WQiUxIvR+Zs5IPVXJKNL6XVR9oWR9lm6N/AQXtnimiUDiURlwrZOIlpbGgQ3hU6yQ==}
     hasBin: true
 
-  '@apm-js-collab/tracing-hooks@0.13.3':
-    resolution: {integrity: sha512-l/ScKzA7sg1hZKc3QMtbnA3blVkTteN3Yq97AejfFrEiR0S0lay3KmyJJ44p45EEVIGP85fLfki4a6OD/7Jb8w==}
+  '@apm-js-collab/tracing-hooks@0.14.0':
+    resolution: {integrity: sha512-6QM7NohS/sfIsPDjK/0BlJ00I90VZrGUEA+bhEL3Ul/BoUWCBLfr9oCEcQYPhVZBDPfno5sSjMK8pFpno5gddQ==}
 
   '@apollo/cache-control-types@1.0.3':
     resolution: {integrity: sha512-F17/vCp7QVwom9eG7ToauIKdAxpSoadsJnqIfyryLFSkLSOEqu+eC5Z3N8OXcUVStuOMcNHlyraRsA6rRICu4g==}
@@ -20027,9 +20027,9 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
-  '@apm-js-collab/code-transformer-bundler-plugins@0.7.4(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
-      '@apm-js-collab/code-transformer': 0.18.1
+      '@apm-js-collab/code-transformer': 0.19.0
       es-module-lexer: 2.1.0
       magic-string: 0.30.21
       module-details-from-path: 1.0.4
@@ -20039,7 +20039,7 @@ snapshots:
       vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
-  '@apm-js-collab/code-transformer@0.18.1':
+  '@apm-js-collab/code-transformer@0.19.0':
     dependencies:
       '@types/estree': 1.0.9
       astring: 1.9.0
@@ -20048,9 +20048,9 @@ snapshots:
       semifies: 1.0.0
       source-map: 0.6.1
 
-  '@apm-js-collab/tracing-hooks@0.13.3(supports-color@7.2.0)':
+  '@apm-js-collab/tracing-hooks@0.14.0(supports-color@7.2.0)':
     dependencies:
-      '@apm-js-collab/code-transformer': 0.18.1
+      '@apm-js-collab/code-transformer': 0.19.0
       debug: 4.4.3(supports-color@7.2.0)
       module-details-from-path: 1.0.4
     transitivePeerDependencies:

From 30cfb4cbafd193973d818adb1905d67f132a4a94 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Peer=20St=C3=B6cklmair?= <jan.peer@sentry.io>
Date: Thu, 29 Oct 2026 11:37:59 -0600
Subject: [PATCH 045/169] fix(cloudflare): Run build-time instrumentation in
 vite dev (#25777)

part of #25765
part of [JS-4010](https://linear.app/getsentry/issue/JS-4010)

## Description

This runs the orchestrion transform in the Vite dependency optimizer, so
integrations that are added at build time (for example `hono` and
`graphql`) also send spans in `vite dev` on Cloudflare.
`@cloudflare/vite-plugin` pre-bundles the Worker dependencies into
`node_modules/.vite/deps_*`, and before, the transform did not run on
these files. The plugin adds a Rolldown plugin for Vite 8 and an esbuild
plugin for Vite 6 and 7.

The new `transformOptimizedDeps` plugin option turns this on, and
`sentryCloudflareVitePlugin` sets it. Node servers do not need it,
because the runtime hook instruments the dependencies that Node loads.

The Cloudflare variant of the `hono-4` e2e app now also runs its tests
in `vite dev`.

## Known issues

- A package that is excluded from `optimizeDeps` is still not
instrumented in `vite dev`: its module id ends with `?v=<hash>`, and the
file matcher of `@apm-js-collab/code-transformer-bundler-plugins` does
not remove the query
(apm-js-collab/code-transformer-bundler-plugins#52).

## Sentry traces

Before (11.9.0), `/graphql` in `vite dev`, no `graphql` spans:
https://sentry-sdks.sentry.io/explore/traces/trace/9221590d886f4648b401eded8a996046/
After, `/graphql` in `vite dev`, with `graphql` spans:
https://sentry-sdks.sentry.io/explore/traces/trace/2aea20834d3d4fa38e39d37166273e14/
Before (11.9.0), `/hono/users/1` in `vite dev`, span name `GET
/hono/users/1`:
https://sentry-sdks.sentry.io/explore/traces/trace/b8e5b8dba83b4b5aba45bdfdf40b307c/
After, `/hono/users/1` in `vite dev`, span name `GET /hono/users/:id`
from the Hono route:
https://sentry-sdks.sentry.io/explore/traces/trace/20b2a5dcfe6a4dbfb7e68eb3037bf3b2/

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 dev-packages/e2e-tests/README.md              |   6 +
 .../test-applications/hono-4/package.json     |   4 +-
 .../hono-4/playwright.config.ts               |   6 +-
 packages/cloudflare/src/vite/index.ts         |   1 +
 .../src/orchestrion/bundler/options.ts        |   7 +
 .../src/orchestrion/bundler/vite.ts           | 166 +++++++++++++----
 .../test/orchestrion/bundler.test.ts          | 174 +++++++++++++++++-
 .../test/orchestrion/viteDepOptimizer.test.ts |  60 ++++++
 8 files changed, 374 insertions(+), 50 deletions(-)
 create mode 100644 packages/server-utils/test/orchestrion/viteDepOptimizer.test.ts

diff --git a/dev-packages/e2e-tests/README.md b/dev-packages/e2e-tests/README.md
index 400d227bc864..426b274da2d0 100644
--- a/dev-packages/e2e-tests/README.md
+++ b/dev-packages/e2e-tests/README.md
@@ -193,6 +193,12 @@ is the reference setup.
   because workerd does not allow it. `nextjs-16` has no Vite build: its Cloudflare variant builds with
   `opennextjs-cloudflare build --config wrangler.opennext.jsonc` and wraps the generated Worker in `worker.ts` with
   `withSentry` from `@sentry/nextjs/cloudflare`.
+- **Cloudflare in `vite dev`**: to run the Worker in `vite dev` (for example the dev tests of the `hono-4` Cloudflare
+  variant), start it with `CLOUDFLARE_INCLUDE_PROCESS_ENV=true vite dev`. The runner gives `E2E_TEST_DSN` to the app
+  only as a process env var. `wrangler dev` adds it to the Worker `env` with `--var "E2E_TEST_DSN:$E2E_TEST_DSN"`, but
+  `@cloudflare/vite-plugin` has no such option. It fills the Worker `env` from the `vars` of the wrangler config and
+  from `.dev.vars` or `.env`, and adds process env vars only when `CLOUDFLARE_INCLUDE_PROCESS_ENV` is `true`. Without
+  it, `env.E2E_TEST_DSN` is `undefined`, the SDK sends no events, and the tests fail.
 - **Build flavors**: a variant can also build the same app with another tool, for example `nextjs-16 (vinext)` builds
   `nextjs-16` with vinext. A build flavor is not a runtime: its assert script sets its own env var (`VINEXT=1`, read by
   `tests/isVinext.ts`). It sets `runtime` only to run on another runtime, for example `nextjs-16 (vinext, bun)`.
diff --git a/dev-packages/e2e-tests/test-applications/hono-4/package.json b/dev-packages/e2e-tests/test-applications/hono-4/package.json
index 008be0636b19..baf473e3471e 100644
--- a/dev-packages/e2e-tests/test-applications/hono-4/package.json
+++ b/dev-packages/e2e-tests/test-applications/hono-4/package.json
@@ -8,14 +8,16 @@
     "dev:bun": "bun run dist/entry.bun.js",
     "dev:deno": "deno run --allow-net --allow-env --allow-read --preload=npm:@sentry/deno/import src/entry.deno.ts",
     "dev:cloudflare": "wrangler dev --config ./dist/hono_4/wrangler.json --var \"E2E_TEST_DSN:$E2E_TEST_DSN\" --log-level=$(test $CI && echo 'none' || echo 'log')",
+    "dev:cloudflare:vite": "CLOUDFLARE_INCLUDE_PROCESS_ENV=true vite dev",
     "test:build": "pnpm install && pnpm typecheck",
     "typecheck": "tsc --noEmit -p tsconfig.typecheck.json",
     "test": "TEST_ENV=production playwright test",
+    "test:dev": "TEST_ENV=development playwright test",
     "test:assert": "pnpm test:assert:node",
     "test:assert:node": "RUNTIME=node pnpm test",
     "test:assert:bun": "bun run build-bun.ts && RUNTIME=bun pnpm test",
     "test:assert:deno": "RUNTIME=deno pnpm test",
-    "test:assert:cloudflare": "vite build && RUNTIME=cloudflare pnpm test"
+    "test:assert:cloudflare": "vite build && RUNTIME=cloudflare pnpm test && RUNTIME=cloudflare pnpm test:dev"
   },
   "dependencies": {
     "@sentry/bun": "latest || *",
diff --git a/dev-packages/e2e-tests/test-applications/hono-4/playwright.config.ts b/dev-packages/e2e-tests/test-applications/hono-4/playwright.config.ts
index 475e082970af..5b40a1bd48a0 100644
--- a/dev-packages/e2e-tests/test-applications/hono-4/playwright.config.ts
+++ b/dev-packages/e2e-tests/test-applications/hono-4/playwright.config.ts
@@ -10,7 +10,11 @@ if (!testEnv) {
 const APP_PORT = 8787;
 
 const startCommands: Record<Runtime, string> = {
-  cloudflare: `pnpm dev:cloudflare --port ${APP_PORT}`,
+  // `vite dev` pre-bundles `hono` with its Rolldown dependency optimizer, so this also tests the transform there.
+  cloudflare:
+    testEnv === 'development'
+      ? `pnpm dev:cloudflare:vite --port ${APP_PORT} --strictPort`
+      : `pnpm dev:cloudflare --port ${APP_PORT}`,
   node: `pnpm dev:node`,
   bun: `pnpm dev:bun`,
   deno: `pnpm dev:deno`,
diff --git a/packages/cloudflare/src/vite/index.ts b/packages/cloudflare/src/vite/index.ts
index d6005250d9ee..a0a4b91fecdc 100644
--- a/packages/cloudflare/src/vite/index.ts
+++ b/packages/cloudflare/src/vite/index.ts
@@ -90,6 +90,7 @@ export function sentryCloudflareVitePlugin(options: SentryCloudflareVitePluginOp
       // Route the injected `tracingChannel` imports through the workerd-safe façade so a
       // dependency wrapped at module scope (`const app = new Hono()`) doesn't throw on workerd.
       dcModule: '@sentry/cloudflare/orchestrion-diagnostics-channel',
+      transformOptimizedDeps: true,
     }),
     sentryMastraObservabilityProviderPlugin(),
     sentryFlueRuntimeProviderPlugin(),
diff --git a/packages/server-utils/src/orchestrion/bundler/options.ts b/packages/server-utils/src/orchestrion/bundler/options.ts
index ad6439cd5962..0d9aec844d59 100644
--- a/packages/server-utils/src/orchestrion/bundler/options.ts
+++ b/packages/server-utils/src/orchestrion/bundler/options.ts
@@ -36,6 +36,13 @@ export type PluginOptions = {
    * routing every channel through it is harmless.
    */
   dcModule?: string;
+  /**
+   * When `true`, the Vite plugin also runs the transform in the dependency optimizer of server environments in
+   * `vite dev`. Needed for `@cloudflare/vite-plugin`, which pre-bundles the dependencies of a Worker there.
+   *
+   * @default false
+   */
+  transformOptimizedDeps?: boolean;
 };
 
 /**
diff --git a/packages/server-utils/src/orchestrion/bundler/vite.ts b/packages/server-utils/src/orchestrion/bundler/vite.ts
index 16e642dc76fd..d1a40295c9ee 100644
--- a/packages/server-utils/src/orchestrion/bundler/vite.ts
+++ b/packages/server-utils/src/orchestrion/bundler/vite.ts
@@ -1,33 +1,34 @@
+import esbuildCodeTransformer from '@apm-js-collab/code-transformer-bundler-plugins/esbuild';
 import codeTransformer from '@apm-js-collab/code-transformer-bundler-plugins/vite';
-import type { ConfigEnv, Plugin, ResolvedConfig, UserConfig } from 'vite';
+import type { Plugin as EsbuildPlugin } from 'esbuild';
+import type { ConfigEnv, ConfigPluginContext, EnvironmentOptions, Plugin, ResolvedConfig, UserConfig } from 'vite';
 
 export type { Plugin as VitePlugin } from 'vite';
 import { instrumentedModuleNames } from '../config';
 import type { PluginOptions } from './options';
 import { externalEntryMatchesModule, externalizedModulesWarning, orchestrionTransformOptions } from './options';
 import { createExternalRequireResolver } from './externalRequire';
-import { resolveOrchestrionRuntimeRequest, SNIPPET_IMPORT_SPECIFIER } from './resolve';
+import { resolveOrchestrionRuntimeRequest, SNIPPET_IMPORT_SPECIFIER, SNIPPET_IMPORT_SPECIFIER_FILTER } from './resolve';
 
 type TransformHandler = (this: unknown, code: string, id: string, opts?: { ssr?: boolean }) => unknown;
+type ResolveIdHandler = Extract<NonNullable<Plugin['resolveId']>, (...args: never[]) => unknown>;
 
 // Key of a property on the plugin object. Its value is an object that is unique to each `sentryOrchestrionPlugin()`
 // call. An SDK that wraps the plugin with an object spread (`@sentry/remix`) copies the property, so `configResolved`
 // can find the first instance in a build also through a wrapper.
 const INSTANCE_KEY = '__sentryOrchestrionInstance';
 
-type OrchestrionVitePlugin = Plugin & { [INSTANCE_KEY]?: object };
+type OrchestrionInstance = { transformOptimizedDeps: boolean };
 
-// On Vite >= 6 `applyToEnvironment` (below) keeps the whole plugin out of
-// client environments. Vite 5 (e.g. Remix v2) ignores that hook, so without
-// this gate the transform would also run in the CLIENT build — where modules
-// like `@remix-run/server-runtime` sit in the client graph, and the injected
-// snippet's import of the subscriber factories (which import
-// `node:diagnostics_channel`) breaks against Vite's browser builtin shim. Gate
-// on the `ssr` flag, which Vite passes on both major versions.
-function ssrOnlyTransform(transform: Plugin['transform'], isDuplicate: () => boolean): Plugin['transform'] {
+type OrchestrionVitePlugin = Plugin & { [INSTANCE_KEY]?: OrchestrionInstance };
+
+function gateTransform(
+  transform: Plugin['transform'],
+  skip: (opts?: { ssr?: boolean }) => boolean,
+): Plugin['transform'] {
   const gate = (handler: TransformHandler): TransformHandler =>
     function (code, id, opts) {
-      if (!opts?.ssr || isDuplicate()) {
+      if (skip(opts)) {
         return null;
       }
       return handler.call(this, code, id, opts);
@@ -47,6 +48,74 @@ function toEsmEntry(id: string): string {
   return id.replace(/([/\\])build[/\\]cjs[/\\]index\.js$/, '$1build$1esm$1index.js');
 }
 
+// The module-injected snippet imports `@sentry/server-utils` from INSIDE
+// transformed `node_modules` files. Under isolated installs (pnpm) that bare
+// specifier doesn't resolve from an instrumented package's location, so when
+// normal resolution fails, fall back to this package's own resolution so it
+// gets bundled from its real on-disk path.
+//
+// Always bundle the ESM entry. In a CommonJS module the snippet `require()`s the specifier,
+// which resolves to the CJS build. Vite 5-7 turn that build's `require()`s of external
+// packages into default imports, and `@sentry/core` has no default export, so the server
+// crashes at startup. Vite 8 keeps the `require()`s, which loads a second copy of `@sentry/core`.
+async function resolveSnippetImport(
+  this: ThisParameterType<ResolveIdHandler>,
+  ...[source, importer, resolveOptions]: Parameters<ResolveIdHandler>
+): Promise<Awaited<ReturnType<ResolveIdHandler>>> {
+  const resolved = await this.resolve(source, importer, { ...resolveOptions, skipSelf: true });
+  if (resolved) {
+    return resolved.external ? resolved : { ...resolved, id: toEsmEntry(resolved.id) };
+  }
+  const fallback = resolveOrchestrionRuntimeRequest(source);
+  return fallback ? toEsmEntry(fallback) : null;
+}
+
+// Rolldown plugin for the dependency optimizer of Vite 8.
+function depOptimizerRolldownPlugin(options: PluginOptions, isDuplicate: () => boolean): Plugin {
+  const upstream = codeTransformer(orchestrionTransformOptions(options));
+  return {
+    ...upstream,
+    name: 'sentry-orchestrion-dep-optimizer',
+    transform: gateTransform(upstream.transform, isDuplicate),
+    resolveId(source, importer, resolveOptions) {
+      return source === SNIPPET_IMPORT_SPECIFIER
+        ? resolveSnippetImport.call(this, source, importer, resolveOptions)
+        : null;
+    },
+  };
+}
+
+// esbuild plugin for the dependency optimizer of Vite 6 and 7.
+function depOptimizerEsbuildPlugin(options: PluginOptions, isDuplicate: () => boolean): EsbuildPlugin {
+  const upstream = esbuildCodeTransformer(orchestrionTransformOptions(options));
+  return {
+    name: 'sentry-orchestrion-dep-optimizer',
+    setup(build) {
+      if (isDuplicate()) {
+        return;
+      }
+      // Same resolution as `resolveSnippetImport`. The `pluginData` marker stops the recursion back into this callback.
+      build.onResolve({ filter: SNIPPET_IMPORT_SPECIFIER_FILTER }, async args => {
+        if (args.pluginData === 'sentry-orchestrion-resolving') {
+          return null;
+        }
+        const resolved = await build.resolve(args.path, {
+          resolveDir: args.resolveDir,
+          importer: args.importer,
+          kind: args.kind,
+          pluginData: 'sentry-orchestrion-resolving',
+        });
+        if (resolved.errors.length === 0) {
+          return resolved.external ? resolved : { ...resolved, path: toEsmEntry(resolved.path) };
+        }
+        const fallback = resolveOrchestrionRuntimeRequest(args.path);
+        return fallback ? { path: toEsmEntry(fallback) } : null;
+      });
+      return upstream.setup(build);
+    },
+  };
+}
+
 /**
  * Vite plugin that runs the orchestrion code transform on the bundled output.
  *
@@ -76,38 +145,30 @@ export function sentryOrchestrionPlugin(options: PluginOptions = {}): Plugin {
   ];
   const resolveExternalRequire = createExternalRequireResolver(noExternalModules());
 
-  const instance = {};
+  const instance: OrchestrionInstance = { transformOptimizedDeps: options.transformOptimizedDeps === true };
   // `true` when an earlier instance of this plugin is in the same build, which then transforms the modules alone.
   let isDuplicate = false;
+  // `true` when an earlier instance with `transformOptimizedDeps` is in the same build, which then transforms the
+  // pre-bundled dependencies alone.
+  let isDuplicateOptimizer = false;
 
   const plugin: OrchestrionVitePlugin = {
     ...upstream,
     [INSTANCE_KEY]: instance,
-    transform: ssrOnlyTransform(upstream.transform, () => isDuplicate),
-    // The module-injected snippet imports `@sentry/server-utils` from INSIDE
-    // transformed `node_modules` files. Under isolated installs (pnpm) that bare
-    // specifier doesn't resolve from an instrumented package's location, so when
-    // normal resolution fails, fall back to this package's own resolution so it
-    // gets bundled from its real on-disk path. SSR-gated like the transform: the
-    // specifier only appears in SSR modules.
-    //
-    // Always bundle the ESM entry. In a CommonJS module the snippet `require()`s the specifier,
-    // which resolves to the CJS build. Vite 5-7 turn that build's `require()`s of external
-    // packages into default imports, and `@sentry/core` has no default export, so the server
-    // crashes at startup. Vite 8 keeps the `require()`s, which loads a second copy of `@sentry/core`.
+    // On Vite >= 6 `applyToEnvironment` (below) keeps the whole plugin out of
+    // client environments. Vite 5 (e.g. Remix v2) ignores that hook, so without
+    // this gate the transform would also run in the CLIENT build — where modules
+    // like `@remix-run/server-runtime` sit in the client graph, and the injected
+    // snippet's import of the subscriber factories (which import
+    // `node:diagnostics_channel`) breaks against Vite's browser builtin shim. Gate
+    // on the `ssr` flag, which Vite passes on both major versions.
+    transform: gateTransform(upstream.transform, opts => !opts?.ssr || isDuplicate),
+    // SSR-gated like the transform: the specifier only appears in SSR modules.
     async resolveId(source, importer, resolveOptions) {
       if (source !== SNIPPET_IMPORT_SPECIFIER) {
         return resolveExternalRequire.call(this, source, importer, resolveOptions);
       }
-      if (!resolveOptions?.ssr) {
-        return null;
-      }
-      const resolved = await this.resolve(source, importer, { ...resolveOptions, skipSelf: true });
-      if (resolved) {
-        return resolved.external ? resolved : { ...resolved, id: toEsmEntry(resolved.id) };
-      }
-      const fallback = resolveOrchestrionRuntimeRequest(source);
-      return fallback ? toEsmEntry(fallback) : null;
+      return resolveOptions?.ssr ? resolveSnippetImport.call(this, source, importer, resolveOptions) : null;
     },
     applyToEnvironment(environment) {
       // Orchestrion splices `node:diagnostics_channel` calls into instrumented modules, which only
@@ -136,21 +197,50 @@ export function sentryOrchestrionPlugin(options: PluginOptions = {}): Plugin {
       },
     },
     configEnvironment(
+      // Vite 6 calls this hook without a context.
+      this: ConfigPluginContext | undefined,
       name: string,
       config: { consumer?: 'client' | 'server' },
       env?: ConfigEnv,
-    ): { resolve: { noExternal: string[] } } | null {
-      if (env?.command === 'serve' || (config.consumer ?? (name === 'client' ? 'client' : 'server')) !== 'server') {
+    ): EnvironmentOptions | null {
+      if ((config.consumer ?? (name === 'client' ? 'client' : 'server')) !== 'server') {
         return null;
       }
 
+      // `@cloudflare/vite-plugin` pre-bundles the dependencies of a Worker in `serve`. The dependency
+      // optimizer runs no Vite plugins, so the transform has to run inside it. A Node server loads its
+      // dependencies with Node, where the runtime hook instruments them.
+      if (env?.command === 'serve') {
+        if (!options.transformOptimizedDeps) {
+          return null;
+        }
+        if (this?.meta?.rolldownVersion) {
+          return {
+            optimizeDeps: {
+              rolldownOptions: { plugins: [depOptimizerRolldownPlugin(options, () => isDuplicateOptimizer)] },
+            },
+          };
+        }
+        return {
+          optimizeDeps: {
+            // Vite 6 and 7 have no `rolldownOptions`.
+            // oxlint-disable-next-line typescript/no-deprecated
+            esbuildOptions: { plugins: [depOptimizerEsbuildPlugin(options, () => isDuplicateOptimizer)] },
+          },
+        };
+      }
+
       return { resolve: { noExternal: noExternalModules() } };
     },
     configResolved(config: ResolvedConfig): void {
       // Two Sentry Vite plugins can each add this plugin to one build, for example `sentryCloudflareVitePlugin` and
       // `sentryReactRouter`. A module transformed twice declares the injected snippet twice and fails the build.
-      const first = (config.plugins as readonly OrchestrionVitePlugin[]).find(p => p[INSTANCE_KEY]);
-      isDuplicate = first !== undefined && first[INSTANCE_KEY] !== instance;
+      const instances = (config.plugins as readonly OrchestrionVitePlugin[]).flatMap(p => p[INSTANCE_KEY] ?? []);
+      isDuplicate = instances[0] !== undefined && instances[0] !== instance;
+      // The first instance can be one without `transformOptimizedDeps`, for example the one of `sentryReactRouter`
+      // before `sentryCloudflareVitePlugin`.
+      const firstOptimizer = instances.find(i => i.transformOptimizedDeps);
+      isDuplicateOptimizer = firstOptimizer !== undefined && firstOptimizer !== instance;
 
       // Nothing is force-bundled in `serve`, so an externalized module is expected there.
       if (isDuplicate || config.command === 'serve') {
diff --git a/packages/server-utils/test/orchestrion/bundler.test.ts b/packages/server-utils/test/orchestrion/bundler.test.ts
index b0690ab74903..33abf914aa74 100644
--- a/packages/server-utils/test/orchestrion/bundler.test.ts
+++ b/packages/server-utils/test/orchestrion/bundler.test.ts
@@ -1,8 +1,8 @@
 import { existsSync } from 'node:fs';
 import { isAbsolute } from 'node:path';
-import type { OnStartResult, PluginBuild } from 'esbuild';
+import type { OnResolveArgs, OnResolveResult, OnStartResult, Plugin as EsbuildPlugin, PluginBuild } from 'esbuild';
 import type { NormalizedInputOptions, PluginContext } from 'rollup';
-import type { ResolvedConfig } from 'vite';
+import type { ResolvedConfig, Plugin as VitePlugin } from 'vite';
 import type { Compiler } from 'webpack';
 import { describe, expect, it, vi } from 'vitest';
 import { sentryOrchestrionPlugin as bunPlugin } from '../../src/orchestrion/bundler/bun';
@@ -245,18 +245,34 @@ describe('sentryOrchestrionPlugin (vite)', () => {
     return config.handler.call(plugin, userConfig, { command, mode: 'production' });
   }
 
+  type EnvironmentConfigResult = {
+    resolve?: { noExternal: string[] };
+    optimizeDeps?: {
+      esbuildOptions?: { plugins: EsbuildPlugin[] };
+      rolldownOptions?: { plugins: VitePlugin[] };
+    };
+  } | null;
+
   function runConfigEnvironment(
     name: string,
     environmentConfig: Record<string, unknown>,
-    command: 'build' | 'serve' = 'build',
-  ): { resolve: { noExternal: string[] } } | null {
-    const plugin = vitePlugin();
+    {
+      command = 'build',
+      context,
+      plugin = vitePlugin(),
+    }: {
+      command?: 'build' | 'serve';
+      // Vite 6 passes no context, Vite 8 passes `rolldownVersion`.
+      context?: { meta: { rolldownVersion?: string } };
+      plugin?: VitePlugin;
+    } = {},
+  ): EnvironmentConfigResult {
     const configEnvironment = plugin.configEnvironment as (
       name: string,
       config: unknown,
       env: unknown,
-    ) => { resolve: { noExternal: string[] } } | null;
-    return configEnvironment.call(plugin, name, environmentConfig, { command, mode: 'production' });
+    ) => EnvironmentConfigResult;
+    return configEnvironment.call(context, name, environmentConfig, { command, mode: 'production' });
   }
 
   it('warns when instrumented modules are listed in ssr.external', () => {
@@ -286,7 +302,145 @@ describe('sentryOrchestrionPlugin (vite)', () => {
   it('does not force-bundle instrumented modules on the dev server', () => {
     // Inlined in dev, the CommonJS drivers throw `exports is not defined` on import.
     expect(runConfig('serve')).toBeNull();
-    expect(runConfigEnvironment('ssr', {}, 'serve')).toBeNull();
+    expect(
+      runConfigEnvironment('ssr', {}, { command: 'serve', plugin: vitePlugin({ transformOptimizedDeps: true }) })
+        ?.resolve,
+    ).toBeUndefined();
+  });
+
+  it('does not change the dependency optimizer on the dev server without transformOptimizedDeps', () => {
+    // A Node server loads its dependencies with Node, where the runtime hook instruments them.
+    expect(runConfigEnvironment('ssr', {}, { command: 'serve' })).toBeNull();
+    expect(
+      runConfigEnvironment(
+        'worker',
+        { consumer: 'server' },
+        { command: 'serve', context: { meta: { rolldownVersion: '1.2.14' } } },
+      ),
+    ).toBeNull();
+  });
+
+  it('runs the transform in the dependency optimizer of server environments with transformOptimizedDeps', () => {
+    const plugin = vitePlugin({ transformOptimizedDeps: true });
+    const context = { meta: { rolldownVersion: '1.2.14' } };
+
+    expect(runConfigEnvironment('ssr', {}, { command: 'serve', plugin })).toEqual({
+      optimizeDeps: {
+        esbuildOptions: { plugins: [expect.objectContaining({ name: 'sentry-orchestrion-dep-optimizer' })] },
+      },
+    });
+    expect(runConfigEnvironment('worker', { consumer: 'server' }, { command: 'serve', context, plugin })).toEqual({
+      optimizeDeps: {
+        rolldownOptions: { plugins: [expect.objectContaining({ name: 'sentry-orchestrion-dep-optimizer' })] },
+      },
+    });
+    expect(runConfigEnvironment('client', {}, { command: 'serve', plugin })).toBeNull();
+    expect(runConfigEnvironment('browser', { consumer: 'client' }, { command: 'serve', context, plugin })).toBeNull();
+  });
+
+  it('transforms in the Rolldown dependency optimizer without the ssr flag, only in the first instance with transformOptimizedDeps', () => {
+    // For example the instance of `sentryReactRouter` before the one of `sentryCloudflareVitePlugin`.
+    const other = vitePlugin();
+    const first = vitePlugin({ transformOptimizedDeps: true });
+    const second = vitePlugin({ transformOptimizedDeps: true });
+    const config = {
+      command: 'serve',
+      plugins: [other, first, second],
+      ssr: {},
+      logger: { warn: vi.fn() },
+    } as unknown as ResolvedConfig;
+    const context = { meta: { rolldownVersion: '1.2.14' } };
+    const firstOptimizerPlugin = runConfigEnvironment('worker', {}, { command: 'serve', context, plugin: first })
+      ?.optimizeDeps?.rolldownOptions?.plugins[0];
+    const secondOptimizerPlugin = runConfigEnvironment('worker', {}, { command: 'serve', context, plugin: second })
+      ?.optimizeDeps?.rolldownOptions?.plugins[0];
+
+    (other.configResolved as (config: unknown) => void)(config);
+    (first.configResolved as (config: unknown) => void)(config);
+    (second.configResolved as (config: unknown) => void)(config);
+
+    const firstTransform = firstOptimizerPlugin?.transform as (this: unknown, code: string, id: string) => unknown;
+    const secondTransform = secondOptimizerPlugin?.transform as (this: unknown, code: string, id: string) => unknown;
+    expect(firstTransform.call({}, 'code', 'id')).toBe('transformed');
+    expect(secondTransform.call({}, 'code', 'id')).toBeNull();
+  });
+
+  it('resolves the snippet import to the ESM entry in the Rolldown dependency optimizer', async () => {
+    const optimizerPlugin = runConfigEnvironment(
+      'worker',
+      {},
+      {
+        command: 'serve',
+        context: { meta: { rolldownVersion: '1.2.14' } },
+        plugin: vitePlugin({ transformOptimizedDeps: true }),
+      },
+    )?.optimizeDeps?.rolldownOptions?.plugins[0];
+    const resolveId = optimizerPlugin?.resolveId as (
+      this: unknown,
+      source: string,
+      importer: string,
+      opts: { kind: string },
+    ) => unknown;
+    const resolve = vi.fn().mockResolvedValue({ id: '/app/node_modules/@sentry/server-utils/build/cjs/index.js' });
+
+    await expect(
+      resolveId.call({ resolve }, '@sentry/server-utils', '/app/node_modules/mysql/index.js', { kind: 'require-call' }),
+    ).resolves.toEqual({ id: '/app/node_modules/@sentry/server-utils/build/esm/index.js' });
+    expect(resolveId.call({ resolve }, 'mysql', '/app/src/index.ts', { kind: 'import-statement' })).toBeNull();
+    expect(resolve).toHaveBeenCalledTimes(1);
+  });
+
+  it('resolves the snippet import to the ESM entry in the esbuild dependency optimizer', async () => {
+    const optimizerPlugin = runConfigEnvironment(
+      'ssr',
+      {},
+      { command: 'serve', plugin: vitePlugin({ transformOptimizedDeps: true }) },
+    )?.optimizeDeps?.esbuildOptions?.plugins[0];
+    const onResolve = vi.fn();
+    const resolve = vi.fn().mockResolvedValue({
+      errors: [],
+      path: '/app/node_modules/@sentry/server-utils/build/cjs/index.js',
+    });
+    await optimizerPlugin?.setup({ onResolve, resolve } as unknown as PluginBuild);
+
+    expect(onResolve).toHaveBeenCalledWith({ filter: /^@sentry\/server-utils$/ }, expect.any(Function));
+    const callback = onResolve.mock.lastCall?.[1] as (args: Partial<OnResolveArgs>) => Promise<OnResolveResult | null>;
+    await expect(
+      callback({ path: '@sentry/server-utils', importer: '/app/node_modules/mysql/index.js', kind: 'require-call' }),
+    ).resolves.toEqual({ errors: [], path: '/app/node_modules/@sentry/server-utils/build/esm/index.js' });
+
+    // When it fails (pnpm isolation), fall back to this package's own resolution.
+    resolve.mockResolvedValueOnce({ errors: [{ text: 'Could not resolve' }] });
+    const fallback = await callback({ path: '@sentry/server-utils', importer: '/x.js', kind: 'require-call' });
+    expect(fallback?.path).toMatch(/[/\\]build[/\\]esm[/\\]index\.js$/);
+  });
+
+  it('sets up the esbuild dependency optimizer plugin only in the first instance with transformOptimizedDeps', async () => {
+    const other = vitePlugin();
+    const first = vitePlugin({ transformOptimizedDeps: true });
+    const second = vitePlugin({ transformOptimizedDeps: true });
+    const config = {
+      command: 'serve',
+      plugins: [other, first, second],
+      ssr: {},
+      logger: { warn: vi.fn() },
+    } as unknown as ResolvedConfig;
+    const firstOptimizerPlugin = runConfigEnvironment('ssr', {}, { command: 'serve', plugin: first })?.optimizeDeps
+      ?.esbuildOptions?.plugins[0];
+    const secondOptimizerPlugin = runConfigEnvironment('ssr', {}, { command: 'serve', plugin: second })?.optimizeDeps
+      ?.esbuildOptions?.plugins[0];
+
+    (other.configResolved as (config: unknown) => void)(config);
+    (first.configResolved as (config: unknown) => void)(config);
+    (second.configResolved as (config: unknown) => void)(config);
+
+    const firstOnResolve = vi.fn();
+    const secondOnResolve = vi.fn();
+    await firstOptimizerPlugin?.setup({ onResolve: firstOnResolve } as unknown as PluginBuild);
+    await secondOptimizerPlugin?.setup({ onResolve: secondOnResolve } as unknown as PluginBuild);
+
+    expect(firstOnResolve).toHaveBeenCalledTimes(1);
+    expect(secondOnResolve).not.toHaveBeenCalled();
   });
 
   it('adds the top-level ssr option only when the config already has ssr or build.ssr', () => {
@@ -296,10 +450,10 @@ describe('sentryOrchestrionPlugin (vite)', () => {
   });
 
   it('force-bundles instrumented modules in server environments', () => {
-    expect(runConfigEnvironment('ssr', {})?.resolve.noExternal).toEqual(
+    expect(runConfigEnvironment('ssr', {})?.resolve?.noExternal).toEqual(
       expect.arrayContaining(['mysql', '@sentry/server-utils']),
     );
-    expect(runConfigEnvironment('worker', { consumer: 'server' })?.resolve.noExternal).toContain('mysql');
+    expect(runConfigEnvironment('worker', { consumer: 'server' })?.resolve?.noExternal).toContain('mysql');
     expect(runConfigEnvironment('client', {})).toBeNull();
     expect(runConfigEnvironment('browser', { consumer: 'client' })).toBeNull();
   });
diff --git a/packages/server-utils/test/orchestrion/viteDepOptimizer.test.ts b/packages/server-utils/test/orchestrion/viteDepOptimizer.test.ts
new file mode 100644
index 000000000000..d8ca916ede5a
--- /dev/null
+++ b/packages/server-utils/test/orchestrion/viteDepOptimizer.test.ts
@@ -0,0 +1,60 @@
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { createServer, type ViteDevServer } from 'vite';
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import type { InstrumentationConfig } from '../../src/orchestrion/apmTypes';
+import { sentryOrchestrionPlugin } from '../../src/orchestrion/bundler/vite';
+
+const instrumentations: InstrumentationConfig[] = [
+  {
+    channelName: 'query',
+    module: { name: 'fake-db', versionRange: '>=1.0.0', filePath: 'index.js' },
+    functionQuery: { functionName: 'query', kind: 'Sync' },
+  },
+];
+
+describe('sentryOrchestrionPlugin (vite) in the Rolldown dependency optimizer', () => {
+  let root: string;
+  let server: ViteDevServer;
+
+  beforeAll(async () => {
+    root = mkdtempSync(join(tmpdir(), 'orchestrion-dep-optimizer-'));
+    const packageDir = join(root, 'node_modules', 'fake-db');
+    mkdirSync(packageDir, { recursive: true });
+    writeFileSync(
+      join(packageDir, 'package.json'),
+      JSON.stringify({ name: 'fake-db', version: '1.0.0', type: 'module' }),
+    );
+    writeFileSync(join(packageDir, 'index.js'), 'export function query(sql) {\n  return sql;\n}\n');
+
+    server = await createServer({
+      root,
+      configFile: false,
+      logLevel: 'silent',
+      plugins: [sentryOrchestrionPlugin({ instrumentations, transformOptimizedDeps: true })],
+      server: { middlewareMode: true, ws: false, watch: null },
+      environments: {
+        ssr: {
+          optimizeDeps: { include: ['fake-db'], rolldownOptions: { external: ['@sentry/server-utils'] } },
+        },
+      },
+    });
+    await server.environments.ssr.depsOptimizer?.init();
+  });
+
+  afterAll(async () => {
+    await server.close();
+    rmSync(root, { recursive: true, force: true });
+  });
+
+  it('transforms a pre-bundled dependency and maps it only to its file in node_modules', () => {
+    const file = server.environments.ssr.depsOptimizer?.metadata.optimized['fake-db']?.file;
+    expect(file).toBeDefined();
+
+    expect(readFileSync(file!, 'utf8')).toContain('orchestrion:fake-db:query');
+    const map = JSON.parse(readFileSync(`${file}.map`, 'utf8')) as { sources: string[] };
+    // `node_modules/.vite/deps_ssr/fake-db.js` -> `node_modules/fake-db/index.js`
+    expect(map.sources).toEqual(['../../fake-db/index.js']);
+  });
+});

From cbab405d51b17e34c332cce0bb8852342a321767 Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Thu, 29 Oct 2026 12:48:32 -0700
Subject: [PATCH 046/169] feat(nestjs): Derive SentryCron monitor config from
 @Cron (#25013)

Part of a series adding automatic Crons monitoring for the most-used job
schedulers in each SDK. Check-ins for a monitor that doesn't exist yet
are dropped, so today each monitor has to be created by hand with its
schedule copied from the code. Sending the job's schedule as the monitor
config lets Sentry create the monitor and keep it in sync.

`@SentryCron` now sends the schedule and time zone of the method's
`@Cron()` decorator with its check-ins, so Sentry creates the monitor on
the first run. It's on by default; pass `fromCronDecorator: false` to
send no config. A config with its own `schedule` is used as is. Monitors
created this way are billed, and their schedule and time zone are
overwritten from `@Cron()` on each check-in.

```ts
@Cron('0 30 9 * * 1-5', { timeZone: 'Europe/Vienna' })
@SentryCron('daily-report', { checkinMargin: 2 })
async dailyReport() {}
```

Without a `timeZone`, the server's local time zone is sent. Schedules
Sentry would read differently from `@nestjs/schedule` (sub-minute,
numeric months, some day-field combinations, fixed UTC offsets) check in
without a config.

Docs: https://github.com/getsentry/sentry-docs/pull/19782

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: isaacs <i@izs.me>
---
 CHANGELOG.md                                  |   6 +
 .../nestjs-basic/src/app.controller.ts        |   6 +
 .../nestjs-basic/src/app.service.ts           |   7 +
 .../nestjs-basic/tests/cron-decorator.test.ts |  29 ++
 packages/nestjs/src/decorators.ts             | 256 ++++++++++++++-
 packages/nestjs/src/index.ts                  |   1 +
 packages/nestjs/src/integrations/helpers.ts   |  22 ++
 .../integrations/orchestrion-subscriber.ts    |  13 +-
 packages/nestjs/test/decorators.test.ts       | 292 +++++++++++++++++-
 9 files changed, 616 insertions(+), 16 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 29fecaa4a5ad..eac3bceb49b1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+### Important Changes
+
+- **feat(nestjs): Derive SentryCron monitor config from @Cron ([#25013](https://github.com/getsentry/sentry-javascript/pull/25013))**
+
+  `@SentryCron` now sends the schedule and time zone from the method's `@Cron()` decorator, so Sentry creates the monitor on the first run. If you use `@SentryCron` without a `schedule`, Sentry now creates missing monitors, which are billed, and overwrites schedules and time zones set by hand. Pass `fromCronDecorator: false` to turn this off.
+
 Work in this release was contributed by @lazerg and @chiliec. Thank you for your contributions!
 
 ## 11.10.0
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
index 9ffc328a2c30..33584dea5e78 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
@@ -86,6 +86,12 @@ export class AppController {
     return { result: await this.appService.testSpanDecoratorSync() };
   }
 
+  @Get('test-derived-cron')
+  async testDerivedCron() {
+    await this.appService.testDerivedCron();
+    return {};
+  }
+
   @Get('kill-test-cron/:job')
   async killTestCron(@Param('job') job: string) {
     this.appService.killTestCron(job);
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
index a7b91b7b3d98..e9bb0c7f69c6 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
@@ -113,6 +113,13 @@ export class AppService {
     throw new Error('Test error from cron sync job');
   }
 
+  // Disabled so it only runs through the `test-derived-cron` endpoint, without waiting for the schedule.
+  @Cron('0 30 9 * * 1-5', { name: 'test-derived-cron', timeZone: 'Europe/Vienna', disabled: true })
+  @SentryCron('test-derived-cron-slug', { checkinMargin: 2 })
+  async testDerivedCron() {
+    console.log('Test derived cron!');
+  }
+
   async killTestCron(job: string) {
     this.schedulerRegistry.deleteCronJob(job);
   }
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
index 6aeeae723a64..e1d006ccdb5d 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
@@ -62,6 +62,35 @@ test('Cron job triggers send of in_progress envelope', async ({ baseURL }) => {
   await fetch(`${baseURL}/kill-test-cron/test-cron-job`);
 });
 
+test('Sends the schedule and time zone of @Cron with the check-in', async ({ baseURL }) => {
+  const inProgressEnvelopePromise = waitForEnvelopeItem('nestjs-basic', envelope => {
+    return (
+      envelope[0].type === 'check_in' &&
+      envelope[1]['monitor_slug'] === 'test-derived-cron-slug' &&
+      envelope[1]['status'] === 'in_progress'
+    );
+  });
+
+  await fetch(`${baseURL}/test-derived-cron`);
+
+  const inProgressEnvelope = await inProgressEnvelopePromise;
+
+  expect(inProgressEnvelope[1]).toEqual(
+    expect.objectContaining({
+      monitor_slug: 'test-derived-cron-slug',
+      status: 'in_progress',
+      monitor_config: {
+        schedule: {
+          type: 'crontab',
+          value: '30 9 * * 1-5',
+        },
+        timezone: 'Europe/Vienna',
+        checkin_margin: 2,
+      },
+    }),
+  );
+});
+
 test('Sends exceptions to Sentry on error in async cron job', async ({ baseURL }) => {
   const errorEventPromise = waitForError('nestjs-basic', event => {
     return (
diff --git a/packages/nestjs/src/decorators.ts b/packages/nestjs/src/decorators.ts
index 4d5762481d2f..ead5d10338f0 100644
--- a/packages/nestjs/src/decorators.ts
+++ b/packages/nestjs/src/decorators.ts
@@ -1,34 +1,268 @@
 import type { MonitorConfig } from '@sentry/core';
 import { CODE_FUNCTION_NAME, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
-import { captureException } from '@sentry/core';
+import { captureException, debug } from '@sentry/core';
 import * as Sentry from '@sentry/node';
 import { startSpan } from '@sentry/node';
+import { DEBUG_BUILD } from './debug-build';
 import { isExpectedError } from './helpers';
-import { copyReflectMetadata } from './integrations/helpers';
+import type { ReflectWithMetadata } from './integrations/helpers';
+import { copyReflectMetadata, getNestScheduleVersion } from './integrations/helpers';
+
+/**
+ * Monitor settings for `@SentryCron` whose schedule and time zone come from the `@Cron()` decorator
+ * of `@nestjs/schedule` on the same method. Set `fromCronDecorator: false` to not send them.
+ */
+export type SentryCronMonitorSettings = Omit<MonitorConfig, 'schedule' | 'timezone'> & {
+  schedule?: never;
+  timezone?: never;
+  fromCronDecorator?: boolean;
+};
 
 /**
  * A decorator wrapping the native nest Cron decorator, sending check-ins to Sentry.
+ *
+ * Unless a monitor config with a `schedule` is passed, the schedule and time zone of the method's
+ * `@Cron()` decorator are sent with each check-in, so Sentry can create the monitor on the first run.
  */
-export const SentryCron = (monitorSlug: string, monitorConfig?: MonitorConfig): MethodDecorator => {
+export const SentryCron = (
+  monitorSlug: string,
+  monitorConfig?: (MonitorConfig & { fromCronDecorator?: never }) | SentryCronMonitorSettings,
+): MethodDecorator => {
   return (target: unknown, propertyKey, descriptor: PropertyDescriptor) => {
     const originalMethod = descriptor.value as (...args: unknown[]) => Promise<unknown>;
 
-    descriptor.value = function (...args: unknown[]) {
-      return Sentry.withMonitor(
-        monitorSlug,
-        () => {
-          return originalMethod.apply(this, args);
-        },
-        monitorConfig,
-      );
+    let resolvedMonitorConfig: MonitorConfig | undefined;
+    let isolateTraceWithoutConfig = false;
+    let resolved = false;
+
+    const wrappedMethod = function (this: unknown, ...args: unknown[]): unknown {
+      if (!resolved) {
+        resolved = true;
+        // A `@Cron()` applied after `@SentryCron()` puts its metadata on this wrapper, so read it at call time.
+        resolvedMonitorConfig = resolveMonitorConfig(monitorSlug, monitorConfig, [
+          wrappedMethod,
+          (target as Record<PropertyKey, unknown> | undefined)?.[propertyKey],
+        ]);
+        isolateTraceWithoutConfig = !resolvedMonitorConfig && !!monitorConfig?.isolateTrace;
+      }
+
+      const runWithMonitor = (): unknown =>
+        Sentry.withMonitor(
+          monitorSlug,
+          () => {
+            return originalMethod.apply(this, args);
+          },
+          resolvedMonitorConfig,
+        );
+
+      // `withMonitor` reads `isolateTrace` from the monitor config, which is not sent without a schedule.
+      return isolateTraceWithoutConfig ? Sentry.startNewTrace(runWithMonitor) : runWithMonitor();
     };
 
+    descriptor.value = wrappedMethod;
+
     copyFunctionNameAndMetadata({ originalMethod, descriptor });
 
     return descriptor;
   };
 };
 
+function resolveMonitorConfig(
+  monitorSlug: string,
+  monitorConfig: MonitorConfig | SentryCronMonitorSettings | undefined,
+  candidates: unknown[],
+): MonitorConfig | undefined {
+  if (monitorConfig?.schedule) {
+    return monitorConfig;
+  }
+
+  const { fromCronDecorator = true, ...monitorSettings } = monitorConfig || {};
+  const cronConfig = fromCronDecorator ? getMonitorConfigFromNestCron(candidates) : undefined;
+
+  if (!cronConfig) {
+    const { isolateTrace: _isolateTrace, ...unsentSettings } = monitorSettings;
+    if (DEBUG_BUILD && Object.keys(unsentSettings).length) {
+      const reason = fromCronDecorator
+        ? 'no schedule could be taken from @Cron()'
+        : 'fromCronDecorator is false and no schedule was passed';
+      debug.warn(
+        `[SentryCron] The monitor settings for "${monitorSlug}" are not sent, because ${reason}. A monitor config needs a schedule.`,
+      );
+    }
+    return undefined;
+  }
+
+  return { ...monitorSettings, ...cronConfig };
+}
+
+const SCHEDULE_CRON_OPTIONS = 'SCHEDULE_CRON_OPTIONS';
+
+// `cron` presets (case-insensitive). Sentry accepts only the first five, so the others are sent as crontabs.
+const CRON_PRESETS: Record<string, string | undefined> = {
+  '@yearly': '@yearly',
+  '@monthly': '@monthly',
+  '@weekly': '@weekly',
+  '@daily': '@daily',
+  '@hourly': '@hourly',
+  '@minutely': '* * * * *',
+  '@weekdays': '0 0 * * 1-5',
+  '@weekends': '0 0 * * 0,6',
+};
+
+interface NestCronOptions {
+  cronTime?: unknown;
+  timeZone?: unknown;
+  utcOffset?: unknown;
+}
+
+function getMonitorConfigFromNestCron(candidates: unknown[]): MonitorConfig | undefined {
+  const R = Reflect as ReflectWithMetadata;
+  if (typeof R.getMetadata !== 'function') {
+    return undefined;
+  }
+
+  for (const candidate of candidates) {
+    if (typeof candidate !== 'function') {
+      continue;
+    }
+    const cronOptions = R.getMetadata(SCHEDULE_CRON_OPTIONS, candidate);
+    if (cronOptions && typeof cronOptions === 'object') {
+      return nestCronOptionsToMonitorConfig(cronOptions, getNestScheduleVersion(cronOptions));
+    }
+  }
+
+  return undefined;
+}
+
+/**
+ * Converts the options `@Cron()` stores as metadata into a Sentry monitor config.
+ * Returns `undefined` for schedules Sentry can't represent.
+ */
+function nestCronOptionsToMonitorConfig(
+  cronOptions: NestCronOptions,
+  scheduleVersion: string | undefined,
+): MonitorConfig | undefined {
+  const { cronTime, timeZone, utcOffset } = cronOptions;
+
+  // A fixed UTC offset has no IANA time zone equivalent.
+  if (typeof cronTime !== 'string' || utcOffset != null) {
+    return undefined;
+  }
+
+  const fields = cronTime.trim().split(/\s+/);
+  let crontab: string | undefined;
+  if (fields.length === 1) {
+    crontab = CRON_PRESETS[(fields[0] as string).toLowerCase()];
+  } else if (fields.length === 5) {
+    crontab = isSupportedCrontab(fields, scheduleVersion) ? fields.join(' ') : undefined;
+  } else if (fields.length === 6 && /^\d+$/.test(fields[0] as string)) {
+    // Sentry schedules have minute granularity, so only a fixed second can be dropped.
+    crontab = isSupportedCrontab(fields.slice(1), scheduleVersion) ? fields.slice(1).join(' ') : undefined;
+  }
+
+  if (!crontab) {
+    return undefined;
+  }
+
+  // Without a `timeZone`, `cron` uses the server's time zone, but Sentry would assume UTC.
+  const timezone = toSentryTimeZone(typeof timeZone === 'string' && timeZone ? timeZone : getLocalTimeZone());
+  if (!timezone) {
+    return undefined;
+  }
+
+  return {
+    schedule: { type: 'crontab', value: crontab },
+    timezone,
+  };
+}
+
+/**
+ * Whether Sentry reads the 5 crontab fields the same way `cron` (used by `@nestjs/schedule`) runs them.
+ */
+function isSupportedCrontab(
+  [, , dayOfMonth = '', month = '', dayOfWeek = '']: string[],
+  scheduleVersion: string | undefined,
+): boolean {
+  // `cron` 2.x (`@nestjs/schedule` 2 and 3) counts months from 0. Steps don't depend on that.
+  const countsMonthsFromOne = parseInt(scheduleVersion ?? '', 10) >= 4;
+  if (!countsMonthsFromOne && /\d/.test(month.replace(/\/\d+/g, ''))) {
+    return false;
+  }
+
+  const daysOfMonth = countCronValues(dayOfMonth, 1, 31);
+  const daysOfWeek = countCronValues(dayOfWeek, 0, 7);
+  if (daysOfMonth === undefined || daysOfWeek === undefined) {
+    return false;
+  }
+
+  // `cron` ignores a day field that covers every day (like `1-31` or `sun-sat`) and runs on either day field
+  // otherwise. Sentry reads full ranges as they are and needs both day fields when one starts with `*` (like `*/2`).
+  const allDaysOfMonth = daysOfMonth === 31;
+  const allDaysOfWeek = daysOfWeek === 7;
+  const cronRunsOnEither = !allDaysOfMonth && !allDaysOfWeek;
+  const sentryRunsOnEither = !dayOfMonth.startsWith('*') && !dayOfWeek.startsWith('*');
+  return (allDaysOfMonth && allDaysOfWeek) || cronRunsOnEither === sentryRunsOnEither;
+}
+
+const DAY_NAMES: Record<string, number | undefined> = { sun: 0, mon: 1, tue: 2, wed: 3, thu: 4, fri: 5, sat: 6 };
+
+/**
+ * How many days a day field matches, expanded the way `cron` does it, or `undefined` if `cron` can't parse it.
+ * Day of week `7` is Sunday, like `0`.
+ */
+function countCronValues(field: string, low: number, high: number): number | undefined {
+  let unknownName = false;
+  const numericField = field.replace(/[a-z]{1,3}/gi, name => {
+    const value = DAY_NAMES[name.toLowerCase()];
+    unknownName ||= value === undefined;
+    return String(value);
+  });
+  if (unknownName) {
+    return undefined;
+  }
+
+  const values = new Set<number>();
+  for (const part of numericField.split(',')) {
+    const match = part.match(/^(?:(\*)|(\d+)(?:-(\d+))?)(?:\/(\d+))?$/);
+    if (!match) {
+      return undefined;
+    }
+    const [, wildcard, from, to, step] = match;
+    const lower = wildcard ? low : Number(from);
+    const upper = wildcard || (step && !to) ? high : Number(to ?? from);
+    const increment = Number(step ?? 1);
+    if (!increment || lower < low || upper > high || lower > upper) {
+      return undefined;
+    }
+    for (let value = lower; value <= upper; value += increment) {
+      values.add(high === 7 && value === 7 ? 0 : value);
+    }
+  }
+  return values.size;
+}
+
+/**
+ * The canonical IANA name of the time zone, or `undefined` if Sentry won't accept it (like `UTC+3`).
+ */
+function toSentryTimeZone(timezone: string | undefined): string | undefined {
+  if (!timezone || timezone === 'Etc/Unknown' || /^(?:utc|gmt)?[+-]/i.test(timezone)) {
+    return undefined;
+  }
+  try {
+    return new Intl.DateTimeFormat('en-US', { timeZone: timezone }).resolvedOptions().timeZone || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function getLocalTimeZone(): string | undefined {
+  try {
+    return Intl.DateTimeFormat().resolvedOptions().timeZone || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
 /**
  * A decorator usable to wrap arbitrary functions with spans.
  */
diff --git a/packages/nestjs/src/index.ts b/packages/nestjs/src/index.ts
index b96fb4c5390a..10a3400ee400 100644
--- a/packages/nestjs/src/index.ts
+++ b/packages/nestjs/src/index.ts
@@ -8,3 +8,4 @@ export { nestIntegration } from './integrations/nest';
 export { getDefaultIntegrations, init } from './sdk';
 
 export { SentryCron, SentryExceptionCaptured, SentryTraced } from './decorators';
+export type { SentryCronMonitorSettings } from './decorators';
diff --git a/packages/nestjs/src/integrations/helpers.ts b/packages/nestjs/src/integrations/helpers.ts
index 5056413e911a..8c2b5755d910 100644
--- a/packages/nestjs/src/integrations/helpers.ts
+++ b/packages/nestjs/src/integrations/helpers.ts
@@ -31,6 +31,28 @@ export function markWrapped(fn: AnyFn): void {
   (fn as AnyFn & Record<symbol, unknown>)[SENTRY_WRAPPED] = true;
 }
 
+// `@nestjs/schedule`'s metadata key for the `@Cron()` options.
+const SCHEDULE_CRON_OPTIONS = 'SCHEDULE_CRON_OPTIONS';
+
+const NEST_SCHEDULE_VERSIONS = new WeakMap<object, string>();
+
+/** Remembers the `@nestjs/schedule` version whose `@Cron()` stored the options on `method`. */
+export function setNestScheduleVersion(method: unknown, version: string | undefined): void {
+  const R = Reflect as ReflectWithMetadata;
+  if (typeof method !== 'function' || !version || typeof R.getMetadata !== 'function') {
+    return;
+  }
+  const cronOptions = R.getMetadata(SCHEDULE_CRON_OPTIONS, method);
+  if (cronOptions && typeof cronOptions === 'object') {
+    NEST_SCHEDULE_VERSIONS.set(cronOptions, version);
+  }
+}
+
+/** The `@nestjs/schedule` version that stored these `@Cron()` options, if the SDK saw the decorator run. */
+export function getNestScheduleVersion(cronOptions: object): string | undefined {
+  return NEST_SCHEDULE_VERSIONS.get(cronOptions);
+}
+
 /**
  * The subset of `reflect-metadata`'s `Reflect` augmentation that NestJS
  * relies on. Methods are optional because `reflect-metadata` may not be
diff --git a/packages/nestjs/src/integrations/orchestrion-subscriber.ts b/packages/nestjs/src/integrations/orchestrion-subscriber.ts
index 53e21dda735f..0f207438d716 100644
--- a/packages/nestjs/src/integrations/orchestrion-subscriber.ts
+++ b/packages/nestjs/src/integrations/orchestrion-subscriber.ts
@@ -5,7 +5,7 @@ import { bindTracingChannelToSpan } from '@sentry/server-utils';
 import { nestjsChannels as CHANNELS } from '@sentry/server-utils/orchestrion/config';
 import { DEBUG_BUILD } from '../debug-build';
 import type { AnyFn } from './helpers';
-import { isWrapped, markWrapped } from './helpers';
+import { isWrapped, markWrapped, setNestScheduleVersion } from './helpers';
 import type { CatchTarget, InjectableTarget, MinimalNestJsExecutionContext } from './types';
 import { patchCatchTarget, patchInjectableTarget } from './wrap-components';
 import {
@@ -184,9 +184,14 @@ export function subscribeToNestChannels(): void {
   subscribeDecoratorChannel<CatchTarget>(CHANNELS.NESTJS_CATCH, patchCatchTarget);
 
   // @Cron/@Interval/@Timeout (schedule), @OnEvent (event), @Processor (bullmq)
-  subscribeFactoryDecorator(CHANNELS.NESTJS_SCHEDULE_CRON, decorator =>
-    makeMethodDecorator(decorator, handler => wrapScheduleHandler(handler, MECHANISM_CRON)),
-  );
+  subscribeFactoryDecorator(CHANNELS.NESTJS_SCHEDULE_CRON, (decorator, data) => {
+    const cronDecorator = makeMethodDecorator(decorator, handler => wrapScheduleHandler(handler, MECHANISM_CRON));
+    return function (this: unknown, ...args: unknown[]): unknown {
+      const result = cronDecorator.apply(this, args);
+      setNestScheduleVersion((args[2] as PropertyDescriptor | undefined)?.value, data.moduleVersion);
+      return result;
+    };
+  });
   subscribeFactoryDecorator(CHANNELS.NESTJS_SCHEDULE_INTERVAL, decorator =>
     makeMethodDecorator(decorator, handler => wrapScheduleHandler(handler, MECHANISM_INTERVAL)),
   );
diff --git a/packages/nestjs/test/decorators.test.ts b/packages/nestjs/test/decorators.test.ts
index 661f00b89182..47bc07d14ab4 100644
--- a/packages/nestjs/test/decorators.test.ts
+++ b/packages/nestjs/test/decorators.test.ts
@@ -1,9 +1,14 @@
 import 'reflect-metadata';
+import { tracingChannel } from 'node:diagnostics_channel';
+import { SetMetadata } from '@nestjs/common';
 import { CODE_FUNCTION_NAME, SENTRY_OP, SENTRY_ORIGIN } from '@sentry/conventions/attributes';
 import * as core from '@sentry/core';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
+import type { OrchestrionChannelContext } from '@sentry/server-utils';
+import { nestjsChannels as CHANNELS } from '@sentry/server-utils/orchestrion/config';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import { SentryCron, SentryExceptionCaptured, SentryTraced } from '../src/decorators';
 import * as helpers from '../src/helpers';
+import { subscribeToNestChannels } from '../src/integrations/orchestrion-subscriber';
 
 describe('SentryTraced decorator', () => {
   beforeEach(() => {
@@ -258,6 +263,291 @@ describe('SentryCron decorator', () => {
   });
 });
 
+describe('SentryCron decorator with @Cron', () => {
+  // Mirrors `@Cron()` of `@nestjs/schedule`, which stores its options under this metadata key.
+  const Cron = (cronTime: unknown, options: Record<string, unknown> = {}): MethodDecorator =>
+    SetMetadata('SCHEDULE_CRON_OPTIONS', { ...options, cronTime });
+
+  // `@Cron()` as the SDK's instrumentation sees it, with the `@nestjs/schedule` version.
+  const VersionedCron = (cronTime: string, moduleVersion: string): MethodDecorator => {
+    subscribeToNestChannels();
+    const data: OrchestrionChannelContext = { arguments: [cronTime], moduleVersion };
+    tracingChannel<OrchestrionChannelContext>(CHANNELS.NESTJS_SCHEDULE_CRON).traceSync(() => Cron(cronTime), data);
+    return data.result as MethodDecorator;
+  };
+
+  // Mirrors the SDK's own `@Cron()` instrumentation, which swaps the method before nest stores the metadata.
+  const WrappingCron =
+    (cronTime: unknown): MethodDecorator =>
+    (target, propertyKey, descriptor) => {
+      const original = descriptor.value as unknown as (...args: unknown[]) => unknown;
+      (descriptor as PropertyDescriptor).value = function (this: unknown, ...args: unknown[]) {
+        return original.apply(this, args);
+      };
+      return Cron(cronTime)(target, propertyKey, descriptor);
+    };
+
+  // Applies decorators the way TypeScript does: listed top to bottom, applied bottom to top.
+  function decorate(...decorators: MethodDecorator[]): { job: () => Promise<string> } {
+    class Service {}
+    let descriptor: PropertyDescriptor = {
+      value: async () => 'done',
+      writable: true,
+      enumerable: false,
+      configurable: true,
+    };
+    for (const decorator of [...decorators].reverse()) {
+      descriptor = (decorator(Service.prototype, 'job', descriptor) as PropertyDescriptor | undefined) ?? descriptor;
+    }
+    Object.defineProperty(Service.prototype, 'job', descriptor);
+    return new Service() as { job: () => Promise<string> };
+  }
+
+  beforeEach(() => {
+    // `@Cron()` without a `timeZone` runs in the server's local time zone.
+    const DateTimeFormat = Intl.DateTimeFormat;
+    vi.spyOn(Intl, 'DateTimeFormat').mockImplementation(function (
+      locales?: string | string[],
+      options?: Intl.DateTimeFormatOptions,
+    ) {
+      return new DateTimeFormat(locales, { timeZone: 'Asia/Tokyo', ...options });
+    } as typeof Intl.DateTimeFormat);
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('derives the monitor config when @SentryCron is above @Cron', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron('0 * * * *'));
+
+    expect(await service.job()).toBe('done');
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '0 * * * *' },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it('derives the monitor config when @Cron is above @SentryCron', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(Cron('0 * * * *'), SentryCron('my-job'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '0 * * * *' },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it('derives the monitor config when @Cron replaces the method', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(WrappingCron('0 * * * *'), SentryCron('my-job'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '0 * * * *' },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it('drops a fixed seconds field and passes the time zone', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron('0 30 9 * * 1-5', { timeZone: 'Europe/Vienna' }));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '30 9 * * 1-5' },
+      timezone: 'Europe/Vienna',
+    });
+  });
+
+  it('sends the canonical time zone name', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron('0 * * * *', { timeZone: 'europe/vienna' }));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '0 * * * *' },
+      timezone: 'Europe/Vienna',
+    });
+  });
+
+  it.each([
+    ['a sub-minute schedule', Cron('*/5 * * * * *')],
+    ['a one-off date', Cron(new Date())],
+    ['an unknown preset', Cron('@reboot')],
+    ['a utc offset', Cron('0 * * * *', { utcOffset: 120 })],
+    ['a numeric month', Cron('0 9 1 5 *')],
+    ['a numeric month range', Cron('0 9 1 1-6 *')],
+    ['a numeric month list', Cron('0 9 1 1,7 *')],
+    ['a numeric month with a step', Cron('0 9 1 2/3 *')],
+    // `0 0 1 0 *` in `@nestjs/schedule` 3
+    ['CronExpression.EVERY_YEAR', Cron('0 0 1 1 *')],
+    ['a day-of-month step with a day of week', Cron('0 9 */2 * MON')],
+    ['a full day-of-month range with a day of week', Cron('0 9 1-31 * MON')],
+    ['a full day-of-week range with a day of month', Cron('0 9 1 * 0-6')],
+    ['a full 1-7 day-of-week range with a day of month', Cron('0 9 15 * 1-7')],
+    ['a full day-of-week name range with a day of month', Cron('0 9 1 * sun-sat')],
+    ['a full upper-case day-of-week name range with a day of month', Cron('0 9 1 * SUN-SAT')],
+    ['a full mon-sun day-of-week range with a day of month', Cron('0 9 1 * mon-sun')],
+    ['a full day-of-week list with a day of month', Cron('0 9 1 * 0,1,2,3,4,5,6')],
+    ['a full day-of-month range with a step of 1 and a day of week', Cron('0 9 1-31/1 * MON')],
+    ['an unknown day name', Cron('0 9 1 * sunday')],
+    ['an out-of-range day of month', Cron('0 9 32 * *')],
+    ['a numeric month from @nestjs/schedule 3', VersionedCron('0 9 1 5 *', '3.0.4')],
+    ['a fixed-offset time zone', Cron('0 * * * *', { timeZone: 'UTC+3' })],
+    ['an unknown time zone', Cron('0 * * * *', { timeZone: 'Mars/Olympus' })],
+  ])('sends no monitor config for %s', async (_, cronDecorator) => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), cronDecorator);
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), undefined);
+  });
+
+  it.each([
+    ['a month name', '0 9 1 MAY *'],
+    ['both day fields', '0 9 1-7 * MON'],
+    ['a day-of-week name list with a day of month', '0 9 1 * mon,fri'],
+    ['a full day-of-month range with a day-of-week step', '0 9 1-31 * */2'],
+    ['a day-of-month step of 1 with a day of week', '0 9 */1 * MON'],
+    ['both day fields covering every day', '0 9 1-31 * sun-sat'],
+    ['CronExpression.EVERY_QUARTER', '0 0 1 */3 *'],
+    ['CronExpression.EVERY_6_MONTHS', '0 0 1 */6 *'],
+  ])('sends a crontab with %s', async (_, crontab) => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron(crontab));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: crontab },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it.each([
+    ['a numeric month', '0 9 1 5 *'],
+    ['a numeric month range', '0 9 1 1-6 *'],
+    ['CronExpression.EVERY_YEAR', '0 0 1 1 *'],
+  ])('sends a crontab with %s from @nestjs/schedule 4 or later', async (_, crontab) => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), VersionedCron(crontab, '4.1.2'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: crontab },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it('sends no monitor config when the local time zone is unknown', async () => {
+    vi.mocked(Intl.DateTimeFormat).mockImplementation(function () {
+      return { resolvedOptions: () => ({ timeZone: 'Etc/Unknown' }) };
+    } as unknown as typeof Intl.DateTimeFormat);
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron('0 * * * *'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), undefined);
+  });
+
+  it.each([
+    ['@hourly', '@hourly'],
+    ['@daily', '@daily'],
+    ['@WEEKLY', '@weekly'],
+    ['@monthly', '@monthly'],
+    ['@yearly', '@yearly'],
+    ['@weekdays', '0 0 * * 1-5'],
+  ])('sends the preset %s as %s', async (preset, value) => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job'), Cron(preset));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value },
+      timezone: 'Asia/Tokyo',
+    });
+  });
+
+  it('warns when monitor settings are passed but no schedule can be derived', async () => {
+    const warnSpy = vi.spyOn(core.debug, 'warn').mockImplementation(() => undefined);
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor').mockImplementation((_, callback) => callback());
+    const service = decorate(SentryCron('my-job', { checkinMargin: 2 }), Cron('*/5 * * * * *'));
+
+    await service.job();
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), undefined);
+    expect(warnSpy).toHaveBeenCalledTimes(1);
+    expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('"my-job"'));
+  });
+
+  it('does not warn when no monitor settings are passed', async () => {
+    const warnSpy = vi.spyOn(core.debug, 'warn').mockImplementation(() => undefined);
+    vi.spyOn(core, 'withMonitor').mockImplementation((_, callback) => callback());
+    const service = decorate(SentryCron('my-job'), Cron('*/5 * * * * *'));
+
+    await service.job();
+    expect(warnSpy).not.toHaveBeenCalled();
+  });
+
+  it('sends no monitor config with fromCronDecorator: false', async () => {
+    const warnSpy = vi.spyOn(core.debug, 'warn').mockImplementation(() => undefined);
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job', { fromCronDecorator: false, checkinMargin: 2 }), Cron('0 * * * *'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), undefined);
+    expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('fromCronDecorator is false'));
+  });
+
+  it('isolates the trace without a monitor config', async () => {
+    const warnSpy = vi.spyOn(core.debug, 'warn').mockImplementation(() => undefined);
+    const traceIds: string[] = [];
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor').mockImplementation((_, callback) => {
+      traceIds.push(core.getCurrentScope().getPropagationContext().traceId);
+      return callback();
+    });
+    const service = decorate(SentryCron('my-job', { isolateTrace: true }), Cron('*/5 * * * * *'));
+    const parentTraceId = core.getCurrentScope().getPropagationContext().traceId;
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), undefined);
+    expect(traceIds).toHaveLength(1);
+    expect(traceIds[0]).not.toBe(parentTraceId);
+    expect(warnSpy).not.toHaveBeenCalled();
+  });
+
+  it('keeps the other monitor settings', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const service = decorate(SentryCron('my-job', { checkinMargin: 2, maxRuntime: 10 }), Cron('0 * * * *'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), {
+      schedule: { type: 'crontab', value: '0 * * * *' },
+      timezone: 'Asia/Tokyo',
+      checkinMargin: 2,
+      maxRuntime: 10,
+    });
+  });
+
+  it('uses an explicit monitor config as is', async () => {
+    const withMonitorSpy = vi.spyOn(core, 'withMonitor');
+    const monitorConfig: core.MonitorConfig = { schedule: { type: 'interval', value: 1, unit: 'hour' } };
+    const service = decorate(SentryCron('my-job', monitorConfig), Cron('0 * * * *'));
+
+    await service.job();
+    expect(withMonitorSpy).toHaveBeenCalledWith('my-job', expect.any(Function), monitorConfig);
+  });
+
+  it('does not accept a schedule or time zone together with fromCronDecorator', () => {
+    // @ts-expect-error - `fromCronDecorator` only applies to settings without a schedule
+    SentryCron('my-job', { schedule: { type: 'crontab', value: '0 * * * *' }, fromCronDecorator: false });
+    // @ts-expect-error - the time zone comes from `@Cron()`
+    SentryCron('my-job', { timezone: 'Europe/Vienna', checkinMargin: 2 });
+  });
+});
+
 describe('SentryExceptionCaptured decorator', () => {
   beforeEach(() => {
     vi.clearAllMocks();

From 9310b4de0d6b134994b137cd74b2a0d736b2a54c Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Thu, 29 Oct 2026 13:45:48 -0700
Subject: [PATCH 047/169] feat(node): Add nodeCronIntegration to monitor
 node-cron tasks (#25473)

Part of a series adding automatic Crons monitoring for the most-used job
schedulers in each SDK. Check-ins for a monitor that doesn't exist yet
are dropped, so today each monitor has to be created by hand with its
schedule copied from the code. Sending the job's schedule as the monitor
config lets Sentry create the monitor and keep it in sync.

Adds `nodeCronIntegration`, which sends check-ins for every named
`node-cron` task (3.x and 4.x) with its schedule and time zone as the
monitor config. Today each module has to be wrapped in
`Sentry.cron.instrumentNodeCron`; with this, adding the integration is
enough. It is not a default integration. Tasks without a `name` aren't
monitored.

```js
Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeCronIntegration({ excludeJobs: ['cleanup', /^debug-/] })],
});

cron.schedule('0 9 * * 1-5', sendReport, { name: 'daily-report', timezone: 'Europe/Vienna' });
```

Tasks with schedules Crons can't express, like every 10 seconds, aren't
monitored, and neither are node-cron 3 schedules with steps it reads
differently from standard cron, like `*/2` days. Tasks already wrapped
by `instrumentNodeCron` are skipped, so using both doesn't send
duplicate check-ins.

---------

Co-authored-by: Claude <noreply@anthropic.com>
---
 .../node-suites/excludes.ts                   |   1 +
 .../cron/node-cron/integration/instrument.mjs |   9 +
 .../cron/node-cron/integration/scenario.mjs   |  25 +++
 .../suites/cron/node-cron/integration/test.ts |  50 +++++
 packages/astro/src/index.server.ts            |   1 +
 packages/aws-serverless/src/index.ts          |   1 +
 packages/bun/src/index.ts                     |   1 +
 packages/deno/src/index.ts                    |   1 +
 packages/elysia/src/index.ts                  |   1 +
 packages/google-cloud-serverless/src/index.ts |   1 +
 packages/node/src/cron/node-cron.ts           |   5 +-
 packages/node/src/index.ts                    |   2 +
 packages/remix/src/server/index.ts            |   1 +
 packages/server-utils/src/index.ts            |   2 +
 .../src/integrations/node-cron.ts             | 104 ++++++++++
 .../server-utils/src/orchestrion/channels.ts  |   2 +
 .../src/orchestrion/config/index.ts           |   2 +
 .../src/orchestrion/config/node-cron.ts       |  52 +++++
 .../server-utils/src/utils/cronMonitoring.ts  | 190 ++++++++++++++++++
 .../test/integrations/node-cron.test.ts       |  66 ++++++
 .../moduleInjectedTransform.test.ts           |   4 +-
 .../test/utils/cronMonitoring.test.ts         | 174 ++++++++++++++++
 packages/solidstart/src/server/index.ts       |   1 +
 packages/sveltekit/src/server/index.ts        |   1 +
 24 files changed, 695 insertions(+), 2 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-cron/integration/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-cron/integration/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-cron/integration/test.ts
 create mode 100644 packages/server-utils/src/integrations/node-cron.ts
 create mode 100644 packages/server-utils/src/orchestrion/config/node-cron.ts
 create mode 100644 packages/server-utils/src/utils/cronMonitoring.ts
 create mode 100644 packages/server-utils/test/integrations/node-cron.test.ts
 create mode 100644 packages/server-utils/test/utils/cronMonitoring.test.ts

diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index 116d86d2634c..30c08744ef1d 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -64,6 +64,7 @@ const NO_FETCH_INSTRUMENTATION = [
 // instrumentation creates no spans. Apps must be built with `@sentry/bun/plugin`.
 // See https://github.com/getsentry/sentry-javascript/issues/23882
 export const NO_AUTO_INSTRUMENTATION = [
+  'suites/cron/node-cron/integration/test.ts',
   'suites/express/**',
   'suites/fs-instrumentation/test.ts',
   'suites/hono/test.ts',
diff --git a/dev-packages/node-integration-tests/suites/cron/node-cron/integration/instrument.mjs b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/instrument.mjs
new file mode 100644
index 000000000000..521d7bbe12ff
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/instrument.mjs
@@ -0,0 +1,9 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  transport: loggingTransport,
+  integrations: [Sentry.nodeCronIntegration({ excludeJobs: ['excluded-job'] })],
+});
diff --git a/dev-packages/node-integration-tests/suites/cron/node-cron/integration/scenario.mjs b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/scenario.mjs
new file mode 100644
index 000000000000..bee2fec76356
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/scenario.mjs
@@ -0,0 +1,25 @@
+import cron from 'node-cron';
+
+const excluded = cron.schedule('0 0 0 1 1 *', () => {}, { name: 'excluded-job' });
+const unnamed = cron.schedule('0 0 0 1 1 *', () => {});
+
+let runs = 0;
+const task = cron.schedule(
+  '0 0 0 1 1 *',
+  () => {
+    runs++;
+    if (runs > 1) {
+      throw new Error('Error in cron job');
+    }
+  },
+  { name: 'my-cron-job', timezone: 'America/New_York' },
+);
+
+// Run the tasks by hand. Their schedules can't fire during the test.
+excluded
+  .execute()
+  .then(() => unnamed.execute())
+  .then(() => task.execute())
+  .then(() => task.execute());
+
+setTimeout(() => process.exit(), 10_000);
diff --git a/dev-packages/node-integration-tests/suites/cron/node-cron/integration/test.ts b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/test.ts
new file mode 100644
index 000000000000..e90549ce84c8
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-cron/integration/test.ts
@@ -0,0 +1,50 @@
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../../utils/runner';
+
+const MONITOR_CONFIG = {
+  schedule: { type: 'crontab', value: '0 0 1 1 *' },
+  timezone: 'America/New_York',
+};
+
+describe('nodeCronIntegration', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('sends check-ins for named tasks', async () => {
+      await createRunner()
+        .ignore('event')
+        .expect({
+          check_in: { monitor_slug: 'my-cron-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-cron-job', status: 'ok', duration: expect.any(Number) } })
+        .expect({
+          check_in: { monitor_slug: 'my-cron-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-cron-job', status: 'error', duration: expect.any(Number) } })
+        .start()
+        .completed();
+    });
+
+    test('captures job errors', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          event: {
+            exception: {
+              values: [
+                {
+                  type: 'Error',
+                  value: 'Error in cron job',
+                  mechanism: { type: 'auto.function.node-cron', handled: false },
+                },
+              ],
+            },
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
+});
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index 58bcd049c076..0db5cfe2ef90 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -49,6 +49,7 @@ export {
   fsIntegration,
   functionToStringIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/aws-serverless/src/index.ts b/packages/aws-serverless/src/index.ts
index 41c0d0131184..9df4b06ff240 100644
--- a/packages/aws-serverless/src/index.ts
+++ b/packages/aws-serverless/src/index.ts
@@ -118,6 +118,7 @@ export {
   firebaseIntegration,
   fsIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/bun/src/index.ts b/packages/bun/src/index.ts
index 5ff613985c91..3f14e1c6da6f 100644
--- a/packages/bun/src/index.ts
+++ b/packages/bun/src/index.ts
@@ -143,6 +143,7 @@ export {
   // oxlint-disable-next-line typescript/no-deprecated
   setupKoaErrorHandler,
   genericPoolIntegration,
+  nodeCronIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/deno/src/index.ts b/packages/deno/src/index.ts
index d26507f6988a..52f2a040cd49 100644
--- a/packages/deno/src/index.ts
+++ b/packages/deno/src/index.ts
@@ -195,6 +195,7 @@ export {
   postgresIntegration,
   postgresJsIntegration,
   neonIntegration,
+  nodeCronIntegration,
   tediousIntegration,
   eveConversationHook,
   eveIntegration,
diff --git a/packages/elysia/src/index.ts b/packages/elysia/src/index.ts
index abe6212f2728..8a3da3bf62b5 100644
--- a/packages/elysia/src/index.ts
+++ b/packages/elysia/src/index.ts
@@ -117,6 +117,7 @@ export {
   // oxlint-disable-next-line typescript/no-deprecated
   setupKoaErrorHandler,
   genericPoolIntegration,
+  nodeCronIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/google-cloud-serverless/src/index.ts b/packages/google-cloud-serverless/src/index.ts
index f6abbb875256..35eddeb055a7 100644
--- a/packages/google-cloud-serverless/src/index.ts
+++ b/packages/google-cloud-serverless/src/index.ts
@@ -118,6 +118,7 @@ export {
   fastifyIntegration,
   firebaseIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/node/src/cron/node-cron.ts b/packages/node/src/cron/node-cron.ts
index db3445fe8471..ab3d935c1a89 100644
--- a/packages/node/src/cron/node-cron.ts
+++ b/packages/node/src/cron/node-cron.ts
@@ -1,4 +1,4 @@
-import { captureException, type MonitorConfig, withMonitor } from '@sentry/core';
+import { addNonEnumerableProperty, captureException, type MonitorConfig, withMonitor } from '@sentry/core';
 import { replaceCronNames } from './common';
 
 export interface NodeCronOptions {
@@ -78,6 +78,9 @@ export function instrumentNodeCron<T>(
               );
             };
 
+            // Tells `nodeCronIntegration` that this task is already monitored.
+            addNonEnumerableProperty(monitoredCallback, Symbol.for('sentry.cron.monitored'), true);
+
             return target.apply(thisArg, [expression, monitoredCallback, options]);
           },
         });
diff --git a/packages/node/src/index.ts b/packages/node/src/index.ts
index 183069ccbadf..5ddd71b4b9f4 100644
--- a/packages/node/src/index.ts
+++ b/packages/node/src/index.ts
@@ -12,6 +12,8 @@ export {
   type ExpressIntegrationOptions,
   firebaseIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
+  type NodeCronIntegrationOptions,
   googleGenAIIntegration,
   graphqlIntegration,
   groqIntegration,
diff --git a/packages/remix/src/server/index.ts b/packages/remix/src/server/index.ts
index a1aaa76b57aa..e7d3142e0be2 100644
--- a/packages/remix/src/server/index.ts
+++ b/packages/remix/src/server/index.ts
@@ -37,6 +37,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/server-utils/src/index.ts b/packages/server-utils/src/index.ts
index dacf7ff16b7f..acb0ffb47c75 100644
--- a/packages/server-utils/src/index.ts
+++ b/packages/server-utils/src/index.ts
@@ -38,6 +38,8 @@ export { anthropicAIIntegration } from './integrations/anthropic';
 export { awsIntegration } from './integrations/aws-sdk';
 export { dataloaderIntegration } from './integrations/dataloader';
 export { genericPoolIntegration } from './integrations/generic-pool';
+export { nodeCronIntegration } from './integrations/node-cron';
+export type { NodeCronIntegrationOptions } from './integrations/node-cron';
 export { googleGenAIIntegration } from './integrations/google-genai';
 export { graphqlIntegration } from './integrations/graphql';
 export { hapiIntegration } from './integrations/hapi';
diff --git a/packages/server-utils/src/integrations/node-cron.ts b/packages/server-utils/src/integrations/node-cron.ts
new file mode 100644
index 000000000000..330870117aca
--- /dev/null
+++ b/packages/server-utils/src/integrations/node-cron.ts
@@ -0,0 +1,104 @@
+import type { IntegrationFn, MonitorConfig } from '@sentry/core';
+import { defineIntegration } from '@sentry/core';
+import { CHANNELS } from '../orchestrion/channels';
+import { nodeCronModuleNames } from '../orchestrion/config/node-cron';
+import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
+import type { AnyFn } from '../utils/cronMonitoring';
+import {
+  cronExpressionToMonitorConfig,
+  shouldMonitorJob,
+  subscribeToJobCreation,
+  wrapScheduledJob,
+} from '../utils/cronMonitoring';
+
+const INTEGRATION_NAME = 'NodeCron' as const;
+
+export interface NodeCronIntegrationOptions {
+  /** Task names not to monitor. Strings must match the name exactly. */
+  excludeJobs?: Array<string | RegExp>;
+}
+
+const _nodeCronIntegration = ((options: NodeCronIntegrationOptions = {}) => {
+  return {
+    name: INTEGRATION_NAME,
+    setup(client) {
+      invokeOrchestrionInstrumentation(client, nodeCronModuleNames, subscribe, [options], {
+        // The binding only parents spans, and this integration creates none.
+        requiresTracingChannelBinding: false,
+      });
+    },
+  };
+}) satisfies IntegrationFn;
+
+/**
+ * Sends Crons check-ins for every named `node-cron` task, with its schedule as the monitor config.
+ * The monitor slug is the task's `name` option. Tasks without a name, or with a schedule Sentry can't express, are not
+ * monitored.
+ */
+export const nodeCronIntegration = defineIntegration(_nodeCronIntegration);
+
+function subscribe(options: NodeCronIntegrationOptions): void {
+  subscribeToJobCreation(CHANNELS.NODE_CRON_CREATE_TASK, INTEGRATION_NAME, args => wrapTask(args, options));
+  subscribeToJobCreation(CHANNELS.NODE_CRON_V4_CREATE_TASK, INTEGRATION_NAME, args =>
+    wrapTask(args, options, isReadAlikeByNodeCron4),
+  );
+  subscribeToJobCreation(CHANNELS.NODE_CRON_V3_CREATE_TASK, INTEGRATION_NAME, args =>
+    wrapTask(args, options, isReadAlikeByNodeCron3),
+  );
+}
+
+// `createTask(expression, func, options)`
+function wrapTask(
+  args: unknown[],
+  options: NodeCronIntegrationOptions,
+  isReadAlike?: (expression: string) => boolean,
+): void {
+  const [expression, func, taskOptions] = args;
+  const { name, timezone } = (taskOptions || {}) as { name?: unknown; timezone?: unknown };
+  if (!shouldMonitorJob(name, func, options.excludeJobs)) {
+    return;
+  }
+  const monitorConfig = getMonitorConfig(String(expression), timezone, isReadAlike);
+  args[1] = wrapScheduledJob(func as AnyFn, name, monitorConfig, 'auto.function.node-cron');
+}
+
+/** The monitor config for a task, or `undefined` if `isReadAlike` says this node-cron version reads it differently. */
+export function getMonitorConfig(
+  expression: string,
+  timezone: unknown,
+  isReadAlike?: (expression: string) => boolean,
+): MonitorConfig | undefined {
+  return isReadAlike && !isReadAlike(expression)
+    ? undefined
+    : cronExpressionToMonitorConfig(expression, timezone, 'and');
+}
+
+const NODE_CRON_3_FIELD_MINIMUMS = [0, 0, 1, 1, 0];
+
+/**
+ * node-cron before 4.6 reads `7` as `0` and swaps reversed ranges, so it runs `sat-sun`, `6-0` and `6-7` every day.
+ * Returns `false` for weekday ranges that could hit that.
+ */
+export function isReadAlikeByNodeCron4(expression: string): boolean {
+  const weekday = expression.trim().split(/\s+/).pop() || '';
+  return !(weekday.includes('-') && (weekday.includes('7') || /-(?:0|sun)/i.test(weekday)));
+}
+
+/**
+ * node-cron 3 keeps the values of a stepped field that are multiples of the step (`*\/2` days are 2, 4, ...)
+ * and reads weekday ranges like node-cron 4 before 4.6. Returns `false` where that differs from standard cron.
+ */
+export function isReadAlikeByNodeCron3(expression: string): boolean {
+  const fields = expression.trim().split(/\s+/);
+  const minimums = fields.length === 6 ? [0, ...NODE_CRON_3_FIELD_MINIMUMS] : NODE_CRON_3_FIELD_MINIMUMS;
+  return (
+    isReadAlikeByNodeCron4(expression) &&
+    fields.every((field, index) => {
+      if (!field.includes('/')) {
+        return true;
+      }
+      const match = /^(?:\*|(\d+)-\d+)\/(\d+)$/.exec(field);
+      return !!match && Number(match[1] ?? minimums[index]) % Number(match[2]) === 0;
+    })
+  );
+}
diff --git a/packages/server-utils/src/orchestrion/channels.ts b/packages/server-utils/src/orchestrion/channels.ts
index b5919b9eb071..81f9b34d2e27 100644
--- a/packages/server-utils/src/orchestrion/channels.ts
+++ b/packages/server-utils/src/orchestrion/channels.ts
@@ -26,6 +26,7 @@ import { mysql2Channels } from './config/mysql2';
 import { mysqlChannels } from './config/mysql';
 import { neonChannels } from './config/neon';
 import { nestjsChannels } from './config/nestjs';
+import { nodeCronChannels } from './config/node-cron';
 import { openaiChannels } from './config/openai';
 import { pgChannels } from './config/pg';
 import { piDurableChannels } from './config/pi-durable';
@@ -83,6 +84,7 @@ export const CHANNELS = {
   ...mysqlChannels,
   ...neonChannels,
   ...nestjsChannels,
+  ...nodeCronChannels,
   ...openaiChannels,
   ...pgChannels,
   ...piDurableChannels,
diff --git a/packages/server-utils/src/orchestrion/config/index.ts b/packages/server-utils/src/orchestrion/config/index.ts
index e60810315420..56b7bf008c56 100644
--- a/packages/server-utils/src/orchestrion/config/index.ts
+++ b/packages/server-utils/src/orchestrion/config/index.ts
@@ -33,6 +33,7 @@ import { mysqlConfig } from './mysql';
 import { neonConfig } from './neon';
 import { nestjsConfig } from './nestjs';
 import { nitroConfig } from './nitro';
+import { nodeCronConfig } from './node-cron';
 import { openaiConfig } from './openai';
 import { pgConfig } from './pg';
 import { postgresJsConfig } from './postgres';
@@ -91,6 +92,7 @@ export const SENTRY_INSTRUMENTATIONS: InstrumentationConfig[] = [
   ...neonConfig,
   ...nestjsConfig,
   ...nitroConfig,
+  ...nodeCronConfig,
   ...openaiConfig,
   ...pgConfig,
   ...piDurableConfig,
diff --git a/packages/server-utils/src/orchestrion/config/node-cron.ts b/packages/server-utils/src/orchestrion/config/node-cron.ts
new file mode 100644
index 000000000000..f0688dcc483d
--- /dev/null
+++ b/packages/server-utils/src/orchestrion/config/node-cron.ts
@@ -0,0 +1,52 @@
+import type { InstrumentationConfig } from '../apmTypes';
+import { getModuleNames } from './module-names';
+
+const createTask = { functionName: 'createTask', kind: 'Sync' } as const;
+
+// `schedule()` calls `createTask(expression, func, options)`, so wrapping `createTask` covers both.
+// Before 4.6, node-cron reads weekday ranges like `sat-sun` differently, so those versions get their own channel.
+export const nodeCronConfig = [
+  {
+    channelName: 'createTask',
+    module: { name: 'node-cron', versionRange: '>=4.6.0 <5', filePath: 'dist/node-cron.cjs' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'createTask',
+    module: { name: 'node-cron', versionRange: '>=4.6.0 <5', filePath: 'dist/node-cron.js' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'v4_createTask',
+    module: { name: 'node-cron', versionRange: '>=4.3.0 <4.6.0', filePath: 'dist/node-cron.cjs' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'v4_createTask',
+    module: { name: 'node-cron', versionRange: '>=4.0.0 <4.6.0', filePath: 'dist/node-cron.js' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'v4_createTask',
+    module: { name: 'node-cron', versionRange: '>=4.0.0 <4.3.0', filePath: 'dist/cjs/node-cron.js' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'v4_createTask',
+    module: { name: 'node-cron', versionRange: '>=4.0.0 <4.3.0', filePath: 'dist/esm/node-cron.js' },
+    functionQuery: createTask,
+  },
+  {
+    channelName: 'v3_createTask',
+    module: { name: 'node-cron', versionRange: '>=3.0.0 <4', filePath: 'src/node-cron.js' },
+    functionQuery: createTask,
+  },
+] satisfies InstrumentationConfig[];
+
+export const nodeCronModuleNames = getModuleNames(nodeCronConfig);
+
+export const nodeCronChannels = {
+  NODE_CRON_CREATE_TASK: 'orchestrion:node-cron:createTask',
+  NODE_CRON_V4_CREATE_TASK: 'orchestrion:node-cron:v4_createTask',
+  NODE_CRON_V3_CREATE_TASK: 'orchestrion:node-cron:v3_createTask',
+} as const;
diff --git a/packages/server-utils/src/utils/cronMonitoring.ts b/packages/server-utils/src/utils/cronMonitoring.ts
new file mode 100644
index 000000000000..975763d3c0a7
--- /dev/null
+++ b/packages/server-utils/src/utils/cronMonitoring.ts
@@ -0,0 +1,190 @@
+import type { MonitorConfig } from '@sentry/core';
+import {
+  captureException,
+  debug,
+  isThenable,
+  startNewTrace,
+  stringMatchesSomePattern,
+  withMonitor,
+} from '@sentry/core';
+import { DEBUG_BUILD } from '../debug-build';
+import * as diagnosticsChannel from './diagnosticsChannel';
+
+export type AnyFn = (this: unknown, ...args: unknown[]) => unknown;
+
+// Set by `Sentry.cron.instrumentNodeCron`, which already sends check-ins.
+const MONITORED = Symbol.for('sentry.cron.monitored');
+
+/**
+ * Calls `onJob` with the arguments of each call on a scheduler's job-creation channel, so it can wrap the job.
+ * Errors are logged and the job is created unmonitored.
+ */
+export function subscribeToJobCreation(
+  channelName: string,
+  integrationName: string,
+  onJob: (args: unknown[]) => void,
+): void {
+  diagnosticsChannel.tracingChannel<{ arguments: unknown[] }>(channelName).start.subscribe(message => {
+    try {
+      onJob((message as { arguments: unknown[] }).arguments);
+    } catch (e) {
+      DEBUG_BUILD && debug.error(`[${integrationName}] Failed to set up the cron monitor:`, e);
+    }
+  });
+}
+
+/** Whether a job is named, not excluded, and not already monitored by `Sentry.cron.instrumentNodeCron`. */
+export function shouldMonitorJob(
+  name: unknown,
+  job: unknown,
+  excludeJobs: Array<string | RegExp> | undefined,
+): name is string {
+  return (
+    typeof name === 'string' &&
+    !!name &&
+    typeof job === 'function' &&
+    !(job as { [MONITORED]?: boolean })[MONITORED] &&
+    !stringMatchesSomePattern(name, excludeJobs, true)
+  );
+}
+
+const NICKNAMES: Record<string, string> = {
+  '@yearly': '0 0 1 1 *',
+  '@annually': '0 0 1 1 *',
+  '@monthly': '0 0 1 * *',
+  '@weekly': '0 0 * * 0',
+  '@daily': '0 0 * * *',
+  '@midnight': '0 0 * * *',
+  '@hourly': '0 * * * *',
+};
+
+const MONTHS = ['jan', 'feb', 'mar', 'apr', 'may', 'jun', 'jul', 'aug', 'sep', 'oct', 'nov', 'dec'];
+const WEEKDAYS = ['sun', 'mon', 'tue', 'wed', 'thu', 'fri', 'sat'];
+
+/**
+ * How a scheduler combines a restricted day-of-month and day-of-week:
+ * - `and`: both must match (`node-cron`).
+ * - `or`: either matches, unless one is `*` or a full range (`cron-parser`, `cron`).
+ */
+export type DayFieldSemantics = 'and' | 'or';
+
+/**
+ * The Sentry monitor config for a cron expression, or `undefined` if Sentry would read it differently.
+ * Without a `timezone`, the server's time zone is used, like the schedulers do.
+ */
+export function cronExpressionToMonitorConfig(
+  expression: string,
+  timezone: unknown,
+  daySemantics: DayFieldSemantics,
+): MonitorConfig | undefined {
+  const trimmed = expression.trim();
+  const fields = (NICKNAMES[trimmed.toLowerCase()] || trimmed).split(/\s+/);
+
+  // Sentry schedules have minute granularity, so only a fixed second can be dropped.
+  if (fields.length === 6 && /^\d+$/.test(fields[0] as string)) {
+    fields.shift();
+  }
+  if (fields.length !== 5 || !fields.every(field => /^[\d*,/a-z-]+$/i.test(field))) {
+    return undefined;
+  }
+
+  const [minute, hour, dayOfMonth, month, dayOfWeek] = fields as [string, string, string, string, string];
+  if (!isSameDayMatching(dayOfMonth, dayOfWeek, daySemantics)) {
+    return undefined;
+  }
+
+  const crontab = [
+    minute,
+    hour,
+    dayOfMonth,
+    replaceNames(month, MONTHS, 1),
+    endRangesOnSundayAsSeven(replaceNames(dayOfWeek, WEEKDAYS, 0)),
+  ];
+  if (crontab.some(field => /[a-z]/i.test(field) || hasReversedRange(field))) {
+    return undefined;
+  }
+
+  const sentryTimezone = toSentryTimezone(typeof timezone === 'string' && timezone ? timezone : undefined);
+  if (!sentryTimezone) {
+    return undefined;
+  }
+
+  return { schedule: { type: 'crontab', value: crontab.join(' ') }, timezone: sentryTimezone };
+}
+
+// Sentry requires both day fields to match when one starts with `*`, and either otherwise.
+function isSameDayMatching(dayOfMonth: string, dayOfWeek: string, daySemantics: DayFieldSemantics): boolean {
+  if (dayOfMonth === '*' || dayOfWeek === '*') {
+    return true;
+  }
+  if (daySemantics === 'and') {
+    return dayOfMonth.startsWith('*') || dayOfWeek.startsWith('*');
+  }
+  return !(
+    dayOfMonth.startsWith('*') ||
+    dayOfWeek.startsWith('*') ||
+    dayOfMonth === '1-31' ||
+    ['0-6', '0-7', '1-7'].includes(dayOfWeek)
+  );
+}
+
+function replaceNames(field: string, names: string[], offset: number): string {
+  return field.replace(/[a-z]+/gi, word => {
+    const index = names.indexOf(word.slice(0, 3).toLowerCase());
+    return index === -1 ? word : String(index + offset);
+  });
+}
+
+// `sat-sun` is `6-0`, which node-cron 4.6+ runs on Saturday and Sunday. Sentry only accepts it as `6-7`.
+function endRangesOnSundayAsSeven(field: string): string {
+  return field.replace(/(\d+)-0(?!\d)/g, (range, start: string) => (Number(start) ? `${start}-7` : range));
+}
+
+// node-cron 4.6+ wraps these around (`22-2` hours), earlier versions swap them, the other schedulers reject them,
+// and so does Sentry.
+function hasReversedRange(field: string): boolean {
+  return field.split(',').some(part => {
+    const range = /^(\d+)-(\d+)/.exec(part);
+    return !!range && Number(range[1]) > Number(range[2]);
+  });
+}
+
+function toSentryTimezone(timezone: string | undefined): string | undefined {
+  if (timezone && /^(?:utc|gmt)?[+-]/i.test(timezone)) {
+    return undefined;
+  }
+  try {
+    const resolved = new Intl.DateTimeFormat('en-US', { timeZone: timezone }).resolvedOptions().timeZone;
+    return resolved && resolved !== 'Etc/Unknown' ? resolved : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * Wraps a scheduled job with check-ins. Errors are captured, because schedulers catch them, and rethrown.
+ * Jobs without a monitor config send no check-ins.
+ */
+export function wrapScheduledJob(
+  func: AnyFn,
+  monitorSlug: string,
+  monitorConfig: MonitorConfig | undefined,
+  mechanismType: string,
+): AnyFn {
+  const captureAndRethrow = (error: unknown): never => {
+    captureException(error, { mechanism: { handled: false, type: mechanismType } });
+    throw error;
+  };
+
+  return function (this: unknown, ...args: unknown[]): unknown {
+    const run = (): unknown => {
+      try {
+        const result: unknown = func.apply(this, args);
+        return isThenable(result) ? result.then(undefined, captureAndRethrow) : result;
+      } catch (e) {
+        return captureAndRethrow(e);
+      }
+    };
+    return startNewTrace(() => (monitorConfig ? withMonitor(monitorSlug, run, monitorConfig) : run()));
+  };
+}
diff --git a/packages/server-utils/test/integrations/node-cron.test.ts b/packages/server-utils/test/integrations/node-cron.test.ts
new file mode 100644
index 000000000000..c3c78dc701f9
--- /dev/null
+++ b/packages/server-utils/test/integrations/node-cron.test.ts
@@ -0,0 +1,66 @@
+import { describe, expect, it } from 'vitest';
+import { getMonitorConfig, isReadAlikeByNodeCron3, isReadAlikeByNodeCron4 } from '../../src/integrations/node-cron';
+
+describe('isReadAlikeByNodeCron3', () => {
+  it.each(['* * * * *', '*/15 * * * *', '0 */2 * * *', '0 8-18/2 * * *', '0 0 9 * * 1-5', '0 9 * * 7', '0 9 * * 0,7'])(
+    'is true for %s',
+    expression => {
+      expect(isReadAlikeByNodeCron3(expression)).toBe(true);
+    },
+  );
+
+  // node-cron 3 runs these on 2,4,...; 10,12,...; 3,6,...; Sunday-Monday; and every day but Saturday.
+  it.each([
+    '0 9 */2 * *',
+    '0 9-17/2 * * *',
+    '0 9 * */3 *',
+    '0 9 * * 1-7',
+    '0 9 * * 5-7',
+    '0 9 * * sat-sun',
+    '0 9 * * 6-0',
+    '0 9 * * fri-Sun',
+    '5/15 * * * *',
+    '0,30/15 * * * *',
+  ])('is false for %s', expression => {
+    expect(isReadAlikeByNodeCron3(expression)).toBe(false);
+  });
+});
+
+describe('isReadAlikeByNodeCron4', () => {
+  it.each(['* * * * *', '0 9 * * 1-5', '0 9 * * sun-tue', '0 9 * * 0,7', '0 9 */2 * *', '0 22-2 * * *'])(
+    'is true for %s',
+    expression => {
+      expect(isReadAlikeByNodeCron4(expression)).toBe(true);
+    },
+  );
+
+  it.each(['0 9 * * sat-sun', '0 9 * * 6-0', '0 9 * * 6-7', '0 9 * * 5-0/2', '0 9 * * 1-3,sat-sun'])(
+    'is false for %s',
+    expression => {
+      expect(isReadAlikeByNodeCron4(expression)).toBe(false);
+    },
+  );
+});
+
+describe('getMonitorConfig', () => {
+  // node-cron 4.6 runs these on the weekend; earlier versions run them every day.
+  it.each(['0 9 * * sat-sun', '0 9 * * 6-0'])('sends %s as 6-7 for node-cron 4.6', expression => {
+    expect(getMonitorConfig(expression, 'UTC')?.schedule).toEqual({ type: 'crontab', value: '0 9 * * 6-7' });
+  });
+
+  it.each(['0 9 * * sat-sun', '0 9 * * 6-0'])('sends no config for %s before node-cron 4.6', expression => {
+    expect(getMonitorConfig(expression, 'UTC', isReadAlikeByNodeCron4)).toBeUndefined();
+  });
+
+  it('sends no config for a reversed hour range', () => {
+    expect(getMonitorConfig('0 22-2 * * *', 'UTC')).toBeUndefined();
+    expect(getMonitorConfig('0 22-2 * * *', 'UTC', isReadAlikeByNodeCron4)).toBeUndefined();
+  });
+
+  it('sends the config for other ranges before node-cron 4.6', () => {
+    expect(getMonitorConfig('0 9 * * mon-fri', 'UTC', isReadAlikeByNodeCron4)?.schedule).toEqual({
+      type: 'crontab',
+      value: '0 9 * * 1-5',
+    });
+  });
+});
diff --git a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
index 750ffeaa8d19..5dac489035d1 100644
--- a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
+++ b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
@@ -43,8 +43,10 @@ describe('channel integration definitions', () => {
     const defined = new Set(CHANNEL_INTEGRATION_DEFINITIONS.flatMap(d => d.modules as readonly string[]));
 
     // `@nestjs/*` and `@remix-run/*` are covered by listeners in their own SDK packages.
+    // Each cron monitor is billed, so bundler-only SDKs must not install crons integrations for every app.
+    const optIn = new Set(['node-cron']);
     const uncovered = [...configured].filter(
-      name => !defined.has(name) && !name.startsWith('@nestjs/') && !name.startsWith('@remix-run/'),
+      name => !defined.has(name) && !optIn.has(name) && !name.startsWith('@nestjs/') && !name.startsWith('@remix-run/'),
     );
     expect(uncovered).toEqual([]);
   });
diff --git a/packages/server-utils/test/utils/cronMonitoring.test.ts b/packages/server-utils/test/utils/cronMonitoring.test.ts
new file mode 100644
index 000000000000..0950a592cc87
--- /dev/null
+++ b/packages/server-utils/test/utils/cronMonitoring.test.ts
@@ -0,0 +1,174 @@
+import { getCurrentScope, setCurrentClient } from '@sentry/core';
+import { describe, expect, it, vi } from 'vitest';
+import { cronExpressionToMonitorConfig, shouldMonitorJob, wrapScheduledJob } from '../../src/utils/cronMonitoring';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
+
+const toMonitorConfig = (expression: string, timezone: unknown) =>
+  cronExpressionToMonitorConfig(expression, timezone, 'and');
+
+describe('cronExpressionToMonitorConfig with node-cron day matching', () => {
+  it.each([
+    ['* * * * *', '* * * * *'],
+    ['0 30 9 * * 1-5', '30 9 * * 1-5'],
+    ['0 9 * jan,Jul mon-fri', '0 9 * 1,7 1-5'],
+    ['0 9 * * sunday', '0 9 * * 0'],
+    ['0 9 */2 * 1', '0 9 */2 * 1'],
+    ['@daily', '0 0 * * *'],
+    ['@Weekly', '0 0 * * 0'],
+    ['*/15 * * * *', '*/15 * * * *'],
+    ['0 9 * * sun', '0 9 * * 0'],
+    ['0 9 * * sat-sun', '0 9 * * 6-7'],
+    ['0 9 * * fri-sun', '0 9 * * 5-7'],
+    ['0 9 * * sun-tue', '0 9 * * 0-2'],
+    ['0 9 * * 6-7', '0 9 * * 6-7'],
+    ['0 9 * * 5-0', '0 9 * * 5-7'],
+    ['0 9 * * 5-0/2', '0 9 * * 5-7/2'],
+    ['0 9 * * 1-3,sat-sun', '0 9 * * 1-3,6-7'],
+  ])('sends %s as %s', (expression, crontab) => {
+    expect(toMonitorConfig(expression, 'Europe/Vienna')).toEqual({
+      schedule: { type: 'crontab', value: crontab },
+      timezone: 'Europe/Vienna',
+    });
+  });
+
+  it.each([
+    '* * * * * *',
+    '*/10 * * * * *',
+    '0 9 1 * 1',
+    '0 9 1-31 * 1',
+    '0 9 L * *',
+    '0 9 ? * 1',
+    '0 9 * * 1#2',
+    '* * * *',
+    '0 9 * foo *',
+    '0 9 * * tue-mon',
+    '0 9 * * 7-2',
+    '0 22-2 * * *',
+    '0 9 * nov-feb *',
+  ])('sends no config for %s', expression => {
+    expect(toMonitorConfig(expression, 'UTC')).toBeUndefined();
+  });
+
+  it('sends no config for fixed UTC offsets', () => {
+    expect(toMonitorConfig('* * * * *', 'GMT+5')).toBeUndefined();
+    expect(toMonitorConfig('* * * * *', 'Not/AZone')).toBeUndefined();
+  });
+
+  it('uses the canonical time zone name', () => {
+    expect(toMonitorConfig('* * * * *', 'europe/vienna')?.timezone).toBe('Europe/Vienna');
+  });
+
+  it('falls back to the local time zone', () => {
+    expect(toMonitorConfig('* * * * *', undefined)?.timezone).toBe(Intl.DateTimeFormat().resolvedOptions().timeZone);
+  });
+});
+
+describe('cronExpressionToMonitorConfig with cron-parser day matching', () => {
+  it.each([
+    ['0 9 1,15 * mon', '0 9 1,15 * 1'],
+    ['0 9 */2 * *', '0 9 */2 * *'],
+    ['0 9 * * 1-5', '0 9 * * 1-5'],
+  ])('sends %s as %s', (expression, crontab) => {
+    expect(cronExpressionToMonitorConfig(expression, 'UTC', 'or')?.schedule).toEqual({
+      type: 'crontab',
+      value: crontab,
+    });
+  });
+
+  it.each(['0 9 */2 * 1', '0 9 1 * */2', '0 9 1-31 * 1', '0 9 15 * 0-6', '0 9 15 * 1-7'])(
+    'sends no config for %s',
+    expression => {
+      expect(cronExpressionToMonitorConfig(expression, 'UTC', 'or')).toBeUndefined();
+    },
+  );
+});
+
+describe('shouldMonitorJob', () => {
+  const job = (): void => {};
+
+  it('monitors named jobs', () => {
+    expect(shouldMonitorJob('job', job, undefined)).toBe(true);
+  });
+
+  it('skips unnamed jobs and jobs that are not functions', () => {
+    expect(shouldMonitorJob(undefined, job, undefined)).toBe(false);
+    expect(shouldMonitorJob('', job, undefined)).toBe(false);
+    expect(shouldMonitorJob('job', './job.js', undefined)).toBe(false);
+  });
+
+  it('skips excluded jobs', () => {
+    expect(shouldMonitorJob('job', job, ['job'])).toBe(false);
+    expect(shouldMonitorJob('job-2', job, ['job'])).toBe(true);
+    expect(shouldMonitorJob('debug-job', job, [/^debug-/])).toBe(false);
+  });
+
+  it('skips jobs that `Sentry.cron.instrument*` already monitors', () => {
+    const monitored = Object.assign((): void => {}, { [Symbol.for('sentry.cron.monitored')]: true });
+    expect(shouldMonitorJob('job', monitored, undefined)).toBe(false);
+  });
+});
+
+describe('wrapScheduledJob', () => {
+  it('runs each job in its own trace', () => {
+    const job = wrapScheduledJob(
+      () => getCurrentScope().getPropagationContext().traceId,
+      'job',
+      toMonitorConfig('* * * * *', 'UTC'),
+      'auto.function.test',
+    );
+    const outerTraceId = getCurrentScope().getPropagationContext().traceId;
+    const firstTraceId = job();
+    const secondTraceId = job();
+
+    expect(firstTraceId).not.toBe(secondTraceId);
+    expect(firstTraceId).not.toBe(outerTraceId);
+  });
+
+  it('sends no check-ins for jobs without a monitor config', () => {
+    const client = new TestClient(getDefaultTestClientOptions());
+    setCurrentClient(client);
+    client.init();
+    const captureCheckIn = vi.fn(() => 'check-in-id');
+    Object.assign(client, { captureCheckIn });
+
+    const job = wrapScheduledJob(() => 'done', 'job', undefined, 'auto.function.test');
+
+    expect(job()).toBe('done');
+    expect(captureCheckIn).not.toHaveBeenCalled();
+
+    wrapScheduledJob(() => {}, 'job', toMonitorConfig('* * * * *', 'UTC'), 'auto.function.test')();
+    expect(captureCheckIn).toHaveBeenCalled();
+  });
+
+  it('captures errors from jobs without a monitor config', async () => {
+    const client = new TestClient(getDefaultTestClientOptions());
+    setCurrentClient(client);
+    client.init();
+    const captureCheckIn = vi.fn(() => 'check-in-id');
+    Object.assign(client, { captureCheckIn });
+    const captureException = vi.spyOn(client, 'captureException');
+
+    const syncError = new Error('sync');
+    const job = wrapScheduledJob(
+      () => {
+        throw syncError;
+      },
+      'job',
+      undefined,
+      'auto.function.test',
+    );
+    expect(() => job()).toThrow(syncError);
+
+    const asyncError = new Error('async');
+    const asyncJob = wrapScheduledJob(() => Promise.reject(asyncError), 'job', undefined, 'auto.function.test');
+    await expect(asyncJob()).rejects.toBe(asyncError);
+
+    expect(captureException).toHaveBeenCalledWith(
+      syncError,
+      expect.objectContaining({ mechanism: { handled: false, type: 'auto.function.test' } }),
+      expect.anything(),
+    );
+    expect(captureException).toHaveBeenCalledWith(asyncError, expect.anything(), expect.anything());
+    expect(captureCheckIn).not.toHaveBeenCalled();
+  });
+});
diff --git a/packages/solidstart/src/server/index.ts b/packages/solidstart/src/server/index.ts
index b2d128847df8..686ce210b2d7 100644
--- a/packages/solidstart/src/server/index.ts
+++ b/packages/solidstart/src/server/index.ts
@@ -40,6 +40,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/sveltekit/src/server/index.ts b/packages/sveltekit/src/server/index.ts
index 270abc2ae43c..7d55e5f41ec9 100644
--- a/packages/sveltekit/src/server/index.ts
+++ b/packages/sveltekit/src/server/index.ts
@@ -38,6 +38,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  nodeCronIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,

From 6d48bfa9491b97f0a1fae57f1c1c45b02e3956e9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 08:28:24 +0100
Subject: [PATCH 048/169] feat(deps): Bump dataloader from 2.2.2 to 2.2.3
 (#25891)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [dataloader](https://github.com/graphql/dataloader) from 2.2.2 to
2.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/graphql/dataloader/releases">dataloader's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>refactor: replace var statements with const or let statements by <a
href="https://github.com/shogo-nakano-desu"><code>@​shogo-nakano-desu</code></a>
in <a
href="https://redirect.github.com/graphql/dataloader/pull/337">graphql/dataloader#337</a></li>
<li>Fix correct path of function when click on mobile links by <a
href="https://github.com/adamward459"><code>@​adamward459</code></a> in
<a
href="https://redirect.github.com/graphql/dataloader/pull/351">graphql/dataloader#351</a></li>
<li>Update readme badge to use GitHub CI instead of unused Travis by <a
href="https://github.com/andrew-demb"><code>@​andrew-demb</code></a> in
<a
href="https://redirect.github.com/graphql/dataloader/pull/352">graphql/dataloader#352</a></li>
<li>Synchronized linting in README.md by <a
href="https://github.com/shevchenkonik"><code>@​shevchenkonik</code></a>
in <a
href="https://redirect.github.com/graphql/dataloader/pull/358">graphql/dataloader#358</a></li>
<li>perf: call cacheKeyFn only when it is needed (if caching) by <a
href="https://github.com/abendi"><code>@​abendi</code></a> in <a
href="https://redirect.github.com/graphql/dataloader/pull/342">graphql/dataloader#342</a></li>
<li>Update Green Donut link by <a
href="https://github.com/glen-84"><code>@​glen-84</code></a> in <a
href="https://redirect.github.com/graphql/dataloader/pull/361">graphql/dataloader#361</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/shogo-nakano-desu"><code>@​shogo-nakano-desu</code></a>
made their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/337">graphql/dataloader#337</a></li>
<li><a
href="https://github.com/adamward459"><code>@​adamward459</code></a>
made their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/351">graphql/dataloader#351</a></li>
<li><a
href="https://github.com/andrew-demb"><code>@​andrew-demb</code></a>
made their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/352">graphql/dataloader#352</a></li>
<li><a
href="https://github.com/shevchenkonik"><code>@​shevchenkonik</code></a>
made their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/358">graphql/dataloader#358</a></li>
<li><a href="https://github.com/abendi"><code>@​abendi</code></a> made
their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/342">graphql/dataloader#342</a></li>
<li><a href="https://github.com/glen-84"><code>@​glen-84</code></a> made
their first contribution in <a
href="https://redirect.github.com/graphql/dataloader/pull/361">graphql/dataloader#361</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/graphql/dataloader/compare/v2.2.2...v2.2.3">https://github.com/graphql/dataloader/compare/v2.2.2...v2.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/graphql/dataloader/blob/main/CHANGELOG.md">dataloader's
changelog</a>.</em></p>
<blockquote>
<h2>2.2.3</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/graphql/dataloader/pull/342">#342</a>
<a
href="https://github.com/graphql/dataloader/commit/38fedd4106e9e3e7eb77bd68e42abc088110bd43"><code>38fedd4</code></a>
Thanks <a href="https://github.com/abendi"><code>@​abendi</code></a>! -
Ensure <code>cacheKeyFn</code> is not called when caching is disabled,
since the key is not utilized in that case.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/graphql/dataloader/commit/5e851ce7d3ad4e4473fb4782ebfecb6b1290bd81"><code>5e851ce</code></a>
chore: update release instructions</li>
<li><a
href="https://github.com/graphql/dataloader/commit/35729a6d62914fc00c61e249dbc5625a6d830cb5"><code>35729a6</code></a>
ci: update codecov to use token (<a
href="https://redirect.github.com/graphql/dataloader/issues/370">#370</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/f65532eef28a23184fbc2d7b345a141d01554b2b"><code>f65532e</code></a>
ci: update node versions to run test on</li>
<li><a
href="https://github.com/graphql/dataloader/commit/f8cfc4d37d7e40998aa838e22ee2e8a1bb463d7c"><code>f8cfc4d</code></a>
Bump word-wrap from 1.2.3 to 1.2.4 (<a
href="https://redirect.github.com/graphql/dataloader/issues/345">#345</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/77c2cd7ca97e8795242018ebc212ce2487e729d2"><code>77c2cd7</code></a>
Update Green Donut link (<a
href="https://redirect.github.com/graphql/dataloader/issues/361">#361</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/38fedd4106e9e3e7eb77bd68e42abc088110bd43"><code>38fedd4</code></a>
perf: call cacheKeyFn only when it is needed (if caching) (<a
href="https://redirect.github.com/graphql/dataloader/issues/342">#342</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/18da9f3a4a52afe9d524038e61c08bb99b5c785d"><code>18da9f3</code></a>
Synchronized linting in README.md (<a
href="https://redirect.github.com/graphql/dataloader/issues/358">#358</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/003c0457e1543764682fa0af47da08b22c46e533"><code>003c045</code></a>
Update readme badge to use GitHub CI instead of unused Travis (<a
href="https://redirect.github.com/graphql/dataloader/issues/352">#352</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/55c33d480cdf429a0b24cf607ddd0e892521a35b"><code>55c33d4</code></a>
Fix correct path of function when click on mobile links (<a
href="https://redirect.github.com/graphql/dataloader/issues/351">#351</a>)</li>
<li><a
href="https://github.com/graphql/dataloader/commit/d336bd15282664e0be4b4a657cb796f09bafbc6b"><code>d336bd1</code></a>
Bump minimatch from 3.0.4 to 3.1.2 (<a
href="https://redirect.github.com/graphql/dataloader/issues/324">#324</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/graphql/dataloader/compare/v2.2.2...v2.2.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev-packages/node-integration-tests/package.json |  2 +-
 pnpm-lock.yaml                                   | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 2ea842433e12..691f60732c18 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -69,7 +69,7 @@
     "consola": "^3.2.3",
     "cors": "^2.8.5",
     "cron": "^3.1.6",
-    "dataloader": "2.2.2",
+    "dataloader": "2.2.3",
     "express": "^4.21.2",
     "fastify": "^5.12.7",
     "generic-pool": "^3.9.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e197899faf36..ca7ef98c28e0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -707,8 +707,8 @@ importers:
         specifier: ^3.1.6
         version: 3.1.6
       dataloader:
-        specifier: 2.2.2
-        version: 2.2.2
+        specifier: 2.2.3
+        version: 2.2.3
       express:
         specifier: ^4.21.2
         version: 4.22.1(supports-color@10.0.0)
@@ -11107,8 +11107,8 @@ packages:
     resolution: {integrity: sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==}
     engines: {node: '>= 0.4'}
 
-  dataloader@2.2.2:
-    resolution: {integrity: sha512-8YnDaaf7N3k/q5HnTJVuzSyLETjoZjVmHc4AeKAzOvKHEFQKcn64OKBfzHYtE9zGjctNM7V9I0MfnUVLpi7M5g==}
+  dataloader@2.2.3:
+    resolution: {integrity: sha512-y2krtASINtPFS1rSDjacrFgn1dcUuoREVabwlOGOe4SdxenREqwjwjElAdwvbGM7kgZz9a3KVicWR7vcz8rnzA==}
 
   dax-sh@0.43.2:
     resolution: {integrity: sha512-uULa1sSIHgXKGCqJ/pA0zsnzbHlVnuq7g8O2fkHokWFNwEGIhh5lAJlxZa1POG5En5ba7AU4KcBAvGQWMMf8rg==}
@@ -30040,7 +30040,7 @@ snapshots:
       es-errors: 1.3.0
       is-data-view: 1.0.2
 
-  dataloader@2.2.2: {}
+  dataloader@2.2.3: {}
 
   dax-sh@0.43.2:
     dependencies:

From 98965752b51ec08db3c340c3503c433048dd81f0 Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Fri, 30 Oct 2026 04:10:39 -0400
Subject: [PATCH 049/169] test(e2e): Rename nuxt-5 middleware files to avoid
 Nitro's dotted suffixes (#25923)

Nitro `3.0.261029-rc` treats the second dot in `01.first.ts` as a
reserved suffix (nitrojs/nitro#4845), which broke the nuxt-5 build and
kept the middleware from loading in dev.

I just renamed the middlewares to `01-first.ts` and so on to workaround
it.
---
 .../middleware/{01.first.ts => 01-first.ts}   |  0
 .../middleware/{02.second.ts => 02-second.ts} |  0
 .../middleware/{03.auth.ts => 03-auth.ts}     |  0
 .../middleware/{04.hooks.ts => 04-hooks.ts}   |  0
 .../{05.array-hooks.ts => 05-array-hooks.ts}  |  0
 ...erver-first.ts => 06-nuxt-server-first.ts} |  0
 ...-server-auth.ts => 07-nuxt-server-auth.ts} |  0
 .../nuxt-5/tests/middleware.test.ts           | 42 +++++++++----------
 8 files changed, 21 insertions(+), 21 deletions(-)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/{01.first.ts => 01-first.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/{02.second.ts => 02-second.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/{03.auth.ts => 03-auth.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/{04.hooks.ts => 04-hooks.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/{05.array-hooks.ts => 05-array-hooks.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/{06.nuxt-server-first.ts => 06-nuxt-server-first.ts} (100%)
 rename dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/{07.nuxt-server-auth.ts => 07-nuxt-server-auth.ts} (100%)

diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/01.first.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/01-first.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/01.first.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/01-first.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/02.second.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/02-second.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/02.second.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/02-second.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/03.auth.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/03-auth.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/03.auth.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/03-auth.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/04.hooks.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/04-hooks.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/04.hooks.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/04-hooks.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/05.array-hooks.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/05-array-hooks.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/05.array-hooks.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/05-array-hooks.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/06.nuxt-server-first.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/06-nuxt-server-first.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/06.nuxt-server-first.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/06-nuxt-server-first.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/07.nuxt-server-auth.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/07-nuxt-server-auth.ts
similarity index 100%
rename from dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/07.nuxt-server-auth.ts
rename to dev-packages/e2e-tests/test-applications/nuxt-5/server/middleware/nuxt-server/07-nuxt-server-auth.ts
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/tests/middleware.test.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/tests/middleware.test.ts
index e2c12def7864..8add88c82f06 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5/tests/middleware.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5/tests/middleware.test.ts
@@ -8,19 +8,19 @@ import { IMPORT_SURFACES } from './importSurfaces';
 // simple middleware has a copy.
 const MIDDLEWARE = {
   nitro: {
-    names: ['01.first', '02.second', '03.auth', '04.hooks', '05.array-hooks'],
-    simpleNames: ['01.first', '02.second', '03.auth'],
+    names: ['01-first', '02-second', '03-auth', '04-hooks', '05-array-hooks'],
+    simpleNames: ['01-first', '02-second', '03-auth'],
     // 3 simple + 2 hooks (middleware+handler) + 3 array hooks (2 middleware + 1 handler)
     spanCount: 8,
-    authName: '03.auth',
+    authName: '03-auth',
     authErrorQuery: 'throwError=true',
     authErrorMessage: 'Auth middleware error',
   },
   'nuxt/server': {
-    names: ['06.nuxt-server-first', '07.nuxt-server-auth'],
-    simpleNames: ['06.nuxt-server-first', '07.nuxt-server-auth'],
+    names: ['06-nuxt-server-first', '07-nuxt-server-auth'],
+    simpleNames: ['06-nuxt-server-first', '07-nuxt-server-auth'],
     spanCount: 2,
-    authName: '07.nuxt-server-auth',
+    authName: '07-nuxt-server-auth',
     authErrorQuery: 'throwNuxtServerError=true',
     authErrorMessage: 'nuxt/server auth middleware error',
   },
@@ -127,17 +127,17 @@ test.describe('Server Middleware Instrumentation (nitro hooks)', () => {
     expect(response.status()).toBe(200);
 
     const spans = await spansPromise;
-    const middlewareSpan = findMiddlewareSpan(spans, '04.hooks', 'middleware');
-    const handlerSpan = findMiddlewareSpan(spans, '04.hooks', 'handler');
+    const middlewareSpan = findMiddlewareSpan(spans, '04-hooks', 'middleware');
+    const handlerSpan = findMiddlewareSpan(spans, '04-hooks', 'handler');
 
     // h3 v2 has no `onBeforeResponse`, so a hooks object gives only `middleware` and `handler` spans.
-    expect(spans.filter(span => span.attributes['nuxt.middleware.name']?.value === '04.hooks')).toHaveLength(2);
+    expect(spans.filter(span => span.attributes['nuxt.middleware.name']?.value === '04-hooks')).toHaveLength(2);
 
-    expect(middlewareSpan?.name).toBe('04.hooks.middleware');
+    expect(middlewareSpan?.name).toBe('04-hooks.middleware');
     // h3 v2 always stores `middleware` as an array, so even a single hook has an index.
     expect(middlewareSpan?.attributes['nuxt.middleware.hook.index']?.value).toBe(0);
 
-    expect(handlerSpan?.name).toBe('04.hooks');
+    expect(handlerSpan?.name).toBe('04-hooks');
     expect(handlerSpan?.attributes['nuxt.middleware.hook.index']).toBeUndefined();
   });
 
@@ -148,15 +148,15 @@ test.describe('Server Middleware Instrumentation (nitro hooks)', () => {
     expect(response.status()).toBe(200);
 
     const spans = await spansPromise;
-    const arrayHooksSpans = spans.filter(span => span.attributes['nuxt.middleware.name']?.value === '05.array-hooks');
-    const middleware0Span = findMiddlewareSpan(spans, '05.array-hooks', 'middleware', 0);
-    const middleware1Span = findMiddlewareSpan(spans, '05.array-hooks', 'middleware', 1);
-    const handlerSpan = findMiddlewareSpan(spans, '05.array-hooks', 'handler');
+    const arrayHooksSpans = spans.filter(span => span.attributes['nuxt.middleware.name']?.value === '05-array-hooks');
+    const middleware0Span = findMiddlewareSpan(spans, '05-array-hooks', 'middleware', 0);
+    const middleware1Span = findMiddlewareSpan(spans, '05-array-hooks', 'middleware', 1);
+    const handlerSpan = findMiddlewareSpan(spans, '05-array-hooks', 'handler');
 
     expect(arrayHooksSpans).toHaveLength(3);
-    expect(middleware0Span?.name).toBe('05.array-hooks.middleware');
-    expect(middleware1Span?.name).toBe('05.array-hooks.middleware');
-    expect(handlerSpan?.name).toBe('05.array-hooks');
+    expect(middleware0Span?.name).toBe('05-array-hooks.middleware');
+    expect(middleware1Span?.name).toBe('05-array-hooks.middleware');
+    expect(handlerSpan?.name).toBe('05-array-hooks');
     expect(handlerSpan?.attributes['nuxt.middleware.hook.index']).toBeUndefined();
   });
 
@@ -171,7 +171,7 @@ test.describe('Server Middleware Instrumentation (nitro hooks)', () => {
 
     const [spans, errorEvent] = await Promise.all([spansPromise, errorEventPromise]);
 
-    expect(findMiddlewareSpan(spans, '04.hooks', 'middleware')?.status).toBe('error');
+    expect(findMiddlewareSpan(spans, '04-hooks', 'middleware')?.status).toBe('error');
     expect(errorEvent.exception?.values?.[0]?.value).toBe('OnRequest hook error');
   });
 
@@ -186,8 +186,8 @@ test.describe('Server Middleware Instrumentation (nitro hooks)', () => {
 
     const [spans, errorEvent] = await Promise.all([spansPromise, errorEventPromise]);
 
-    expect(findMiddlewareSpan(spans, '05.array-hooks', 'middleware', 0)?.status).toBe('ok');
-    expect(findMiddlewareSpan(spans, '05.array-hooks', 'middleware', 1)?.status).toBe('error');
+    expect(findMiddlewareSpan(spans, '05-array-hooks', 'middleware', 0)?.status).toBe('ok');
+    expect(findMiddlewareSpan(spans, '05-array-hooks', 'middleware', 1)?.status).toBe('error');
     expect(errorEvent.exception?.values?.[0]?.value).toBe('OnRequest[1] hook error');
   });
 });

From fb53f31370d1907141cf300c45cc0fb1a90aa230 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 09:40:11 +0100
Subject: [PATCH 050/169] chore(deps-dev): Bump @rollup/plugin-terser from
 0.4.4 to 1.0.2 (#25890)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser)
from 0.4.4 to 1.0.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md">@​rollup/plugin-terser's
changelog</a>.</em></p>
<blockquote>
<h2>v1.0.2</h2>
<p><em>2026-10-21</em></p>
<h3>Updates</h3>
<ul>
<li>terser: update terser to ^5.49.2 (<a
href="https://redirect.github.com/rollup/plugins/issues/2019">#2019</a>)</li>
</ul>
<h2>v1.0.1</h2>
<p><em>2026-10-21</em></p>
<h3>Bugfixes</h3>
<ul>
<li>terser: share nameCache between chunks by serializing minify tasks
(<a
href="https://redirect.github.com/rollup/plugins/issues/2020">#2020</a>)</li>
</ul>
<h2>v1.0.0</h2>
<p><em>2026-03-05</em></p>
<h3>Breaking Changes</h3>
<ul>
<li>terser!: upgrade serialize-javascript to v7 and node to v20 (<a
href="https://redirect.github.com/rollup/plugins/issues/1968">#1968</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/rollup/plugins/commits/beep-v1.0.2/packages/terser">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​rollup/plugin-terser</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@rollup/plugin-terser&package-manager=npm_and_yarn&previous-version=0.4.4&new-version=1.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
---
 package.json   |  2 +-
 pnpm-lock.yaml | 33 ++++++++-------------------------
 2 files changed, 9 insertions(+), 26 deletions(-)

diff --git a/package.json b/package.json
index 087310513a66..7e027c9b17a1 100644
--- a/package.json
+++ b/package.json
@@ -139,7 +139,7 @@
     "@rollup/plugin-json": "^6.1.0",
     "@rollup/plugin-node-resolve": "^16.0.3",
     "@rollup/plugin-replace": "^5.0.5",
-    "@rollup/plugin-terser": "^0.4.4",
+    "@rollup/plugin-terser": "^1.0.2",
     "@sentry-internal/node-integration-tests": "workspace:*",
     "@sentry/eslint-plugin-sdk": "workspace:*",
     "@sentry/sveltekit": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ca7ef98c28e0..4a44921bc39b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -187,8 +187,8 @@ importers:
         specifier: ^5.0.5
         version: 5.0.7(rollup@4.62.3)
       '@rollup/plugin-terser':
-        specifier: ^0.4.4
-        version: 0.4.4(rollup@4.62.3)
+        specifier: ^1.0.2
+        version: 1.0.2(rollup@4.62.3)
       '@sentry-internal/node-integration-tests':
         specifier: workspace:*
         version: link:dev-packages/node-integration-tests
@@ -8070,17 +8070,8 @@ packages:
       rollup:
         optional: true
 
-  '@rollup/plugin-terser@0.4.4':
-    resolution: {integrity: sha512-XHeJC5Bgvs8LfukDwWZp7yeqin6ns8RTl2B9avbejt6tZqsqvVoWI7ZTQrcNsfKEDWBTnTxM8nMDkO2IFFbd0A==}
-    engines: {node: '>=14.0.0'}
-    peerDependencies:
-      rollup: ^2.0.0||^3.0.0||^4.0.0
-    peerDependenciesMeta:
-      rollup:
-        optional: true
-
-  '@rollup/plugin-terser@1.0.0':
-    resolution: {integrity: sha512-FnCxhTBx6bMOYQrar6C8h3scPt8/JwIzw3+AJ2K++6guogH5fYaIFia+zZuhqv0eo1RN7W1Pz630SyvLbDjhtQ==}
+  '@rollup/plugin-terser@1.0.2':
+    resolution: {integrity: sha512-+UihHnuLnQDQ/9wog7ym+7oawCXkjTIo0WwkK7s//0mkktTN0VhYk6fGVxH+NtGzW064w5RCGgreMDxRVhHCzw==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       rollup: ^2.0.0||^3.0.0||^4.0.0
@@ -26215,15 +26206,7 @@ snapshots:
     optionalDependencies:
       rollup: 4.62.3
 
-  '@rollup/plugin-terser@0.4.4(rollup@4.62.3)':
-    dependencies:
-      serialize-javascript: 6.0.2
-      smob: 1.4.1
-      terser: 5.51.2
-    optionalDependencies:
-      rollup: 4.62.3
-
-  '@rollup/plugin-terser@1.0.0(rollup@4.62.3)':
+  '@rollup/plugin-terser@1.0.2(rollup@4.62.3)':
     dependencies:
       serialize-javascript: 7.0.5
       smob: 1.4.1
@@ -34902,7 +34885,7 @@ snapshots:
       '@rollup/plugin-json': 6.1.0(rollup@4.62.3)
       '@rollup/plugin-node-resolve': 16.0.3(rollup@4.62.3)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
-      '@rollup/plugin-terser': 1.0.0(rollup@4.62.3)
+      '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
       c12: 3.3.4(magicast@0.5.4)
@@ -35011,7 +34994,7 @@ snapshots:
       '@rollup/plugin-json': 6.1.0(rollup@4.62.3)
       '@rollup/plugin-node-resolve': 16.0.3(rollup@4.62.3)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
-      '@rollup/plugin-terser': 1.0.0(rollup@4.62.3)
+      '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
       c12: 3.3.4(magicast@0.5.4)
@@ -35120,7 +35103,7 @@ snapshots:
       '@rollup/plugin-json': 6.1.0(rollup@4.62.3)
       '@rollup/plugin-node-resolve': 16.0.3(rollup@4.62.3)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
-      '@rollup/plugin-terser': 1.0.0(rollup@4.62.3)
+      '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
       c12: 3.3.4(magicast@0.5.4)

From 365e7611eecfd26828a991732f02d9147bdd3cd0 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 10:22:23 +0100
Subject: [PATCH 051/169] ref(server-utils): Remove `requiresParentSpan` in
 favor of `onlyIfParent` (#25926)

**Why:** Use core's existing `onlyIfParent` option consistently instead
of a separate tracing-channel parent guard, so we get client reports for
spans dropped because of missing parents. Alternatively, we have
considered to simply add client reports to the existing
`requiresParentSpan` drop logic. However, this doesn't work because
`getSpan` can still decide afterwards to not create spans for certain
operations. This would result in dropped spans client reports for ops
that we do not even instrument.

**How to review:** The `requiresParentSpan` option is removed from the
implementation in `packages/server-utils/src/tracing-channel.ts`. The
rest of the PR is replacing any call sites with `onlyIfParent` from our
core span APIs and minor adjustments to unit tests. There should be no
behavioral change.

Closes #25875

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../server/integrations/tracing-channel.ts    |  4 +-
 .../remix/test/server/tracing-channel.test.ts |  5 +-
 .../src/integrations/dataloader.ts            | 10 +--
 .../src/integrations/hono/honoIntegration.ts  |  2 +-
 .../src/integrations/mongodb/index.ts         | 54 +++++-------
 .../src/integrations/mongodb/mongodb-span.ts  |  1 +
 .../src/integrations/mysql2/index.ts          | 49 +++++------
 .../mysql2/mysql2-dc-subscriber.ts            | 88 +++++++++----------
 .../server-utils/src/integrations/neon.ts     | 15 ++--
 .../src/integrations/postgres-js.ts           |  5 +-
 .../server-utils/src/integrations/postgres.ts |  6 +-
 .../src/integrations/prisma/orchestrion.ts    |  7 +-
 .../redis/ioredis-channel-subscriber.ts       | 30 +++----
 packages/server-utils/src/tracing-channel.ts  | 13 +--
 .../mysql2/mysql2-dc-subscriber.test.ts       |  7 +-
 .../test/integrations/neon.test.ts            |  4 +-
 .../integrations/postgres/postgres.test.ts    | 12 +--
 .../integrations/prisma-orchestrion.test.ts   |  4 +-
 18 files changed, 132 insertions(+), 184 deletions(-)

diff --git a/packages/remix/src/server/integrations/tracing-channel.ts b/packages/remix/src/server/integrations/tracing-channel.ts
index 8e93813a19dd..65e6bda2e463 100644
--- a/packages/remix/src/server/integrations/tracing-channel.ts
+++ b/packages/remix/src/server/integrations/tracing-channel.ts
@@ -192,6 +192,7 @@ function subscribeCallRouteLoader(): void {
         // With span streaming, a `function` span is named after the function it wraps. The route id
         // stays on `match.route.id`.
         name: client && hasSpanStreamingEnabled(client) ? 'loader' : description,
+        onlyIfParent: true,
         attributes: {
           [SENTRY_ORIGIN]: ORIGIN,
           [SENTRY_OP]: FUNCTION,
@@ -203,7 +204,6 @@ function subscribeCallRouteLoader(): void {
       });
     },
     {
-      requiresParentSpan: true,
       beforeSpanEnd: (span, data) => setResponseStatus(span, data.result),
     },
   );
@@ -231,6 +231,7 @@ function subscribeCallRouteAction(formDataCapture: FormDataCapture | undefined):
         // With span streaming, a `function` span is named after the function it wraps. The route id
         // stays on `match.route.id`.
         name: client && hasSpanStreamingEnabled(client) ? 'action' : description,
+        onlyIfParent: true,
         attributes: {
           [SENTRY_ORIGIN]: ORIGIN,
           [SENTRY_OP]: FUNCTION,
@@ -242,7 +243,6 @@ function subscribeCallRouteAction(formDataCapture: FormDataCapture | undefined):
       });
     },
     {
-      requiresParentSpan: true,
       beforeSpanEnd: (span, data) => setResponseStatus(span, data.result),
       // Hold the span end until the (already in-flight) form-data read resolves, then apply the
       // attributes and end (which sets the response status via `beforeSpanEnd`). On error, or when
diff --git a/packages/remix/test/server/tracing-channel.test.ts b/packages/remix/test/server/tracing-channel.test.ts
index c11200f643b1..f31f9c693439 100644
--- a/packages/remix/test/server/tracing-channel.test.ts
+++ b/packages/remix/test/server/tracing-channel.test.ts
@@ -27,7 +27,6 @@ describe('remixIntegration (Orchestrion-based)', () => {
   beforeEach(() => {
     span = makeSpan();
     startInactiveSpanSpy = vi.spyOn(SentryCore, 'startInactiveSpan').mockReturnValue(span);
-    // A truthy active span by default, so the `requiresParentSpan` gate passes.
     getActiveSpanSpy = vi.spyOn(SentryCore, 'getActiveSpan').mockReturnValue({} as Span);
   });
 
@@ -129,13 +128,13 @@ describe('remixIntegration (Orchestrion-based)', () => {
     expect(span.end).toHaveBeenCalledTimes(1);
   });
 
-  it('callRouteLoader: does not create a span without an active parent span', async () => {
+  it('callRouteLoader: does not create a recording span without an active parent span', async () => {
     getActiveSpanSpy.mockReturnValue(undefined);
     const ctx = { arguments: [{ routeId: 'x', request: makeRequest(), params: {} }] };
 
     await tracingChannel(remixChannels.REMIX_CALL_ROUTE_LOADER).tracePromise(async () => ({ status: 200 }), ctx);
 
-    expect(startInactiveSpanSpy).not.toHaveBeenCalled();
+    expect(startInactiveSpanSpy).toHaveBeenCalledWith(expect.objectContaining({ onlyIfParent: true }));
   });
 
   it('callRouteAction: builds an ACTION span and captures the configured form-data keys', async () => {
diff --git a/packages/server-utils/src/integrations/dataloader.ts b/packages/server-utils/src/integrations/dataloader.ts
index 5fb50a577325..63983e9b32b3 100644
--- a/packages/server-utils/src/integrations/dataloader.ts
+++ b/packages/server-utils/src/integrations/dataloader.ts
@@ -179,9 +179,7 @@ function subscribeConstruct(): void {
 function subscribeLoad(): void {
   const channel = diagnosticsChannel.tracingChannel<DataLoaderChannelContext>(CHANNELS.DATALOADER_LOAD);
 
-  bindTracingChannelToSpan(channel, data => startInactiveSpanFor(data.self, 'load', data.arguments[0]), {
-    requiresParentSpan: true,
-  });
+  bindTracingChannelToSpan(channel, data => startInactiveSpanFor(data.self, 'load', data.arguments[0]));
 
   channel.end.subscribe(message => {
     const data = message as TracingChannelPayloadWithSpan<DataLoaderChannelContext>;
@@ -194,10 +192,8 @@ function subscribeLoad(): void {
 }
 
 function subscribeSimpleOperation(channelName: ChannelName, operation: Operation): void {
-  bindTracingChannelToSpan(
-    diagnosticsChannel.tracingChannel<DataLoaderChannelContext>(channelName),
-    data => startInactiveSpanFor(data.self, operation, data.arguments[0]),
-    { requiresParentSpan: true },
+  bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<DataLoaderChannelContext>(channelName), data =>
+    startInactiveSpanFor(data.self, operation, data.arguments[0]),
   );
 }
 
diff --git a/packages/server-utils/src/integrations/hono/honoIntegration.ts b/packages/server-utils/src/integrations/hono/honoIntegration.ts
index 575462d6d018..d5ef285cdf62 100644
--- a/packages/server-utils/src/integrations/hono/honoIntegration.ts
+++ b/packages/server-utils/src/integrations/hono/honoIntegration.ts
@@ -111,13 +111,13 @@ function instrumentInternalRequests(): void {
       ).toUpperCase();
       return startInactiveSpan({
         name: `${method} ${extractPathname(input)}`,
+        onlyIfParent: true,
         attributes: {
           [SENTRY_OP]: HTTP_SERVER,
           [SENTRY_ORIGIN]: INTERNAL_REQUEST_ORIGIN,
         },
       });
     },
-    { requiresParentSpan: true },
   );
 }
 
diff --git a/packages/server-utils/src/integrations/mongodb/index.ts b/packages/server-utils/src/integrations/mongodb/index.ts
index 593638025c6f..b27a3c46c933 100644
--- a/packages/server-utils/src/integrations/mongodb/index.ts
+++ b/packages/server-utils/src/integrations/mongodb/index.ts
@@ -64,23 +64,17 @@ function instrumentMongodb(): void {
  * (both publish to this channel).
  */
 function subscribeV4Command(): void {
-  bindTracingChannelToSpan(
-    diagnosticsChannel.tracingChannel<MongoChannelContext>(CHANNELS.MONGODB_COMMAND),
-    data => {
-      const args = data.arguments ?? [];
-      const ns = args[0] as MongodbNamespace | undefined;
-      const cmd = args[1] as Record<string, unknown> | undefined;
-      // Skip handshake/heartbeat commands (matches otel).
-      if (!ns || !cmd || typeof cmd !== 'object' || cmd.ismaster || cmd.hello) {
-        return undefined;
-      }
-      const operation = Object.keys(cmd)[0];
-      return startMongoSpan(getV4SpanAttributes(data.self, ns, cmd, operation, ORIGIN));
-    },
-    // Matches otel's `shouldSkipInstrumentation`: only trace when there is
-    // an active parent span, to avoid emitting orphaned mongodb spans.
-    { requiresParentSpan: true },
-  );
+  bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<MongoChannelContext>(CHANNELS.MONGODB_COMMAND), data => {
+    const args = data.arguments ?? [];
+    const ns = args[0] as MongodbNamespace | undefined;
+    const cmd = args[1] as Record<string, unknown> | undefined;
+    // Skip handshake/heartbeat commands (matches otel).
+    if (!ns || !cmd || typeof cmd !== 'object' || cmd.ismaster || cmd.hello) {
+      return undefined;
+    }
+    const operation = Object.keys(cmd)[0];
+    return startMongoSpan(getV4SpanAttributes(data.self, ns, cmd, operation, ORIGIN));
+  });
 }
 
 /**
@@ -150,21 +144,17 @@ function subscribeV3Wireprotocol(): void {
 }
 
 function bindV3(channelName: string, extract: (args: unknown[]) => V3CallInfo | undefined): void {
-  bindTracingChannelToSpan(
-    diagnosticsChannel.tracingChannel<MongoChannelContext>(channelName),
-    data => {
-      const args = data.arguments;
-      if (!args) {
-        return undefined;
-      }
-      const info = extract(args);
-      if (!info || typeof info.ns !== 'string') {
-        return undefined;
-      }
-      return startMongoSpan(getV3SpanAttributes(info.ns, info.topology, info.command, info.operation, ORIGIN));
-    },
-    { requiresParentSpan: true },
-  );
+  bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<MongoChannelContext>(channelName), data => {
+    const args = data.arguments;
+    if (!args) {
+      return undefined;
+    }
+    const info = extract(args);
+    if (!info || typeof info.ns !== 'string') {
+      return undefined;
+    }
+    return startMongoSpan(getV3SpanAttributes(info.ns, info.topology, info.command, info.operation, ORIGIN));
+  });
 }
 
 /**
diff --git a/packages/server-utils/src/integrations/mongodb/mongodb-span.ts b/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
index 99d1778e758d..7c243081295c 100644
--- a/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
+++ b/packages/server-utils/src/integrations/mongodb/mongodb-span.ts
@@ -235,6 +235,7 @@ export function startMongoSpan(attributes: SpanAttributes): Span {
 
   return startInactiveSpan({
     name,
+    onlyIfParent: true,
     attributes: {
       [SENTRY_OP]: DB,
       [SENTRY_KIND]: 'client',
diff --git a/packages/server-utils/src/integrations/mysql2/index.ts b/packages/server-utils/src/integrations/mysql2/index.ts
index 5f337d21a41d..f8aa296266f9 100644
--- a/packages/server-utils/src/integrations/mysql2/index.ts
+++ b/packages/server-utils/src/integrations/mysql2/index.ts
@@ -74,34 +74,31 @@ function instrumentMysql2Orchestrion(): void {
 }
 
 function subscribeQueryChannel(channelName: ChannelName): void {
-  bindTracingChannelToSpan(
-    diagnosticsChannel.tracingChannel<Mysql2QueryChannelContext>(channelName),
-    data => {
-      const statement = getQueryText(data.arguments);
-      const connectionAttributes = getConnectionAttributes(data.self?.config);
-      const { queryText, querySummary } = sanitizeSqlQueryWithSummary(statement, 'mysql');
+  bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<Mysql2QueryChannelContext>(channelName), data => {
+    const statement = getQueryText(data.arguments);
+    const connectionAttributes = getConnectionAttributes(data.self?.config);
+    const { queryText, querySummary } = sanitizeSqlQueryWithSummary(statement, 'mysql');
 
-      const client = getClient();
-      const name =
-        client && hasSpanStreamingEnabled(client)
-          ? querySummary || (connectionAttributes[DB_NAMESPACE] as string | undefined) || DB_SYSTEM_VALUE_MYSQL
-          : (queryText ?? 'mysql2.query');
+    const client = getClient();
+    const name =
+      client && hasSpanStreamingEnabled(client)
+        ? querySummary || (connectionAttributes[DB_NAMESPACE] as string | undefined) || DB_SYSTEM_VALUE_MYSQL
+        : (queryText ?? 'mysql2.query');
 
-      return startInactiveSpan({
-        name,
-        attributes: {
-          [SENTRY_KIND]: 'client',
-          [SENTRY_ORIGIN]: ORIGIN,
-          [SENTRY_OP]: DB,
-          [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
-          [DB_QUERY_TEXT]: queryText || undefined,
-          [DB_QUERY_SUMMARY]: querySummary,
-          ...connectionAttributes,
-        },
-      });
-    },
-    { requiresParentSpan: true },
-  );
+    return startInactiveSpan({
+      name,
+      onlyIfParent: true,
+      attributes: {
+        [SENTRY_KIND]: 'client',
+        [SENTRY_ORIGIN]: ORIGIN,
+        [SENTRY_OP]: DB,
+        [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
+        [DB_QUERY_TEXT]: queryText || undefined,
+        [DB_QUERY_SUMMARY]: querySummary,
+        ...connectionAttributes,
+      },
+    });
+  });
 }
 
 /**
diff --git a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
index 72d065956713..2a5cc75fd56c 100644
--- a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
+++ b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
@@ -92,56 +92,50 @@ export function subscribeMysql2DiagnosticChannels(tracingChannel: MySQL2TracingC
 }
 
 function setupQueryChannel(tracingChannel: MySQL2TracingChannelFactory, channelName: string): void {
-  bindTracingChannelToSpan(
-    tracingChannel<MySQL2QueryData>(channelName),
-    data => {
-      // mysql2 does not sanitize its channel payload, so the statement may carry
-      // raw user values (on the `query` channel they are inlined). Strip every
-      // literal before it leaves the process; `values` is never attached.
-      const { queryText, querySummary } = sanitizeSqlQueryWithSummary(data.query, 'mysql');
-      const operation = queryText?.match(SQL_OPERATION_RE)?.[1]?.toUpperCase();
+  bindTracingChannelToSpan(tracingChannel<MySQL2QueryData>(channelName), data => {
+    // mysql2 does not sanitize its channel payload, so the statement may carry
+    // raw user values (on the `query` channel they are inlined). Strip every
+    // literal before it leaves the process; `values` is never attached.
+    const { queryText, querySummary } = sanitizeSqlQueryWithSummary(data.query, 'mysql');
+    const operation = queryText?.match(SQL_OPERATION_RE)?.[1]?.toUpperCase();
 
-      const client = getClient();
-      const name =
-        client && hasSpanStreamingEnabled(client)
-          ? querySummary || data.database || DB_SYSTEM_NAME_VALUE_MYSQL
-          : queryText || 'mysql2.query';
+    const client = getClient();
+    const name =
+      client && hasSpanStreamingEnabled(client)
+        ? querySummary || data.database || DB_SYSTEM_NAME_VALUE_MYSQL
+        : queryText || 'mysql2.query';
 
-      return startInactiveSpan({
-        name,
-        attributes: {
-          [SENTRY_ORIGIN]: ORIGIN,
-          [SENTRY_OP]: DB,
-          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
-          [DB_QUERY_TEXT]: queryText,
-          [DB_QUERY_SUMMARY]: querySummary,
-          [DB_OPERATION_NAME]: operation,
-          [DB_NAMESPACE]: data.database || undefined,
-          [SERVER_ADDRESS]: data.serverAddress,
-          [SERVER_PORT]: data.serverPort,
-        },
-      });
-    },
-    { requiresParentSpan: true },
-  );
+    return startInactiveSpan({
+      name,
+      onlyIfParent: true,
+      attributes: {
+        [SENTRY_ORIGIN]: ORIGIN,
+        [SENTRY_OP]: DB,
+        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
+        [DB_QUERY_TEXT]: queryText,
+        [DB_QUERY_SUMMARY]: querySummary,
+        [DB_OPERATION_NAME]: operation,
+        [DB_NAMESPACE]: data.database || undefined,
+        [SERVER_ADDRESS]: data.serverAddress,
+        [SERVER_PORT]: data.serverPort,
+      },
+    });
+  });
 }
 
 function setupConnectChannel(tracingChannel: MySQL2TracingChannelFactory, channelName: string, spanName: string): void {
-  bindTracingChannelToSpan(
-    tracingChannel<MySQL2ConnectData>(channelName),
-    data => {
-      return startInactiveSpan({
-        name: spanName,
-        attributes: {
-          [SENTRY_ORIGIN]: ORIGIN,
-          [SENTRY_OP]: DB,
-          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
-          [DB_NAMESPACE]: data.database || undefined,
-          [SERVER_ADDRESS]: data.serverAddress,
-          [SERVER_PORT]: data.serverPort,
-        },
-      });
-    },
-    { requiresParentSpan: true },
-  );
+  bindTracingChannelToSpan(tracingChannel<MySQL2ConnectData>(channelName), data => {
+    return startInactiveSpan({
+      name: spanName,
+      onlyIfParent: true,
+      attributes: {
+        [SENTRY_ORIGIN]: ORIGIN,
+        [SENTRY_OP]: DB,
+        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
+        [DB_NAMESPACE]: data.database || undefined,
+        [SERVER_ADDRESS]: data.serverAddress,
+        [SERVER_PORT]: data.serverPort,
+      },
+    });
+  });
 }
diff --git a/packages/server-utils/src/integrations/neon.ts b/packages/server-utils/src/integrations/neon.ts
index f7e66ff953a2..e4130d14942c 100644
--- a/packages/server-utils/src/integrations/neon.ts
+++ b/packages/server-utils/src/integrations/neon.ts
@@ -60,15 +60,11 @@ function instrumentNeon(): void {
   // the pg span shape.
   bindPgQueryChannel(CHANNELS.NEON_QUERY, { origin: ORIGIN });
 
-  bindTracingChannelToSpan(
-    diagnosticsChannel.tracingChannel<NeonHttpQueryContext>(CHANNELS.NEON_HTTP_QUERY),
-    data => {
-      const span = startInactiveSpan(httpQuerySpanOptions(data.arguments));
-      httpQuerySpans.add(span);
-      return span;
-    },
-    { requiresParentSpan: true },
-  );
+  bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<NeonHttpQueryContext>(CHANNELS.NEON_HTTP_QUERY), data => {
+    const span = startInactiveSpan(httpQuerySpanOptions(data.arguments));
+    httpQuerySpans.add(span);
+    return span;
+  });
 
   // The connection string is resolved inside the HTTP executor, so the query span is active
   // when this settles. The executor's own context never sees the string.
@@ -109,6 +105,7 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
 
   return {
     name,
+    onlyIfParent: true,
     attributes: {
       [SENTRY_OP]: DB,
       [SENTRY_ORIGIN]: ORIGIN,
diff --git a/packages/server-utils/src/integrations/postgres-js.ts b/packages/server-utils/src/integrations/postgres-js.ts
index c38616b0bf50..92e813e82ce3 100644
--- a/packages/server-utils/src/integrations/postgres-js.ts
+++ b/packages/server-utils/src/integrations/postgres-js.ts
@@ -267,8 +267,7 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
 
       // Opt out of re-entrant `handle()` calls (then/catch/finally re-invoke
       // it, guarded by `executed`) and queries already wrapped by the portable
-      // `instrumentPostgresJsSql`. The parent-span requirement is applied via
-      // `requiresParentSpan` below.
+      // `instrumentPostgresJsSql`.
       if (query.executed === true || (query as Record<symbol, unknown>)[QUERY_FROM_INSTRUMENTED_SQL]) {
         return undefined;
       }
@@ -292,6 +291,7 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
       // `sentry.kind: client` matches the mysql/pg channel subscribers.
       const span = startInactiveSpan({
         name,
+        onlyIfParent: requireParentSpan !== false,
         attributes: {
           [SENTRY_OP]: DB,
           [SENTRY_KIND]: 'client',
@@ -324,7 +324,6 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
       return span;
     },
     {
-      requiresParentSpan: requireParentSpan !== false,
       deferSpanEnd({ data }) {
         // `handle` is async: its promise settles on dispatch (asyncEnd), long
         // before the query does. The resolve/reject wrappers own the ending.
diff --git a/packages/server-utils/src/integrations/postgres.ts b/packages/server-utils/src/integrations/postgres.ts
index 6ef1346a5ee5..3231e0e60a06 100644
--- a/packages/server-utils/src/integrations/postgres.ts
+++ b/packages/server-utils/src/integrations/postgres.ts
@@ -141,6 +141,7 @@ function subscribeQueryLikeChannel(
       const spanOptions = getSpanOptions(data);
       return startInactiveSpan({
         ...spanOptions,
+        onlyIfParent: true,
         attributes: { ...spanOptions.attributes, [SENTRY_KIND]: 'client' },
       });
     },
@@ -151,9 +152,6 @@ function subscribeQueryLikeChannel(
     // `query` can return a streamable `Submittable`, so only it defers.
     deferStreamedResult
       ? {
-          // Only instrument under an active span, leaving the context untouched otherwise
-          // (e.g. connects issued during app startup).
-          requiresParentSpan: true,
           // Streamable `Submittable` (e.g. `client.query(new Query())`)
           // returns an emitter that orchestrion stores on `ctx.result` while
           // firing no async events; the query isn't done until the emitter
@@ -180,7 +178,7 @@ function subscribeQueryLikeChannel(
             return true;
           },
         }
-      : { requiresParentSpan: true },
+      : undefined,
   );
 }
 
diff --git a/packages/server-utils/src/integrations/prisma/orchestrion.ts b/packages/server-utils/src/integrations/prisma/orchestrion.ts
index de209f694d71..a9c3bea5ac6d 100644
--- a/packages/server-utils/src/integrations/prisma/orchestrion.ts
+++ b/packages/server-utils/src/integrations/prisma/orchestrion.ts
@@ -52,11 +52,7 @@ export function instrumentPrismaV8(options: PrismaV8InstrumentationOptions): voi
     bindTracingChannelToSpan<PrismaTerminalChannelContext>(
       diagnosticsChannel.tracingChannel<PrismaTerminalChannelContext>(channelName),
       data => startOperationSpan(method, data),
-      {
-        // A stray query outside a request must not become a segment of its own.
-        requiresParentSpan: true,
-        ...(isLazy ? { deferSpanEnd: deferSpanEndUntilConsumed } : {}),
-      },
+      isLazy ? { deferSpanEnd: deferSpanEndUntilConsumed } : undefined,
     );
   }
 }
@@ -72,6 +68,7 @@ function startOperationSpan(method: string, data: PrismaTerminalChannelContext):
 
   const span = startInactiveSpan({
     name: OPERATION_SPAN_NAME,
+    onlyIfParent: true,
     parentSpan,
     attributes: {
       [SENTRY_ORIGIN]: PRISMA_ORIGIN,
diff --git a/packages/server-utils/src/integrations/redis/ioredis-channel-subscriber.ts b/packages/server-utils/src/integrations/redis/ioredis-channel-subscriber.ts
index d918d080f749..9426e26c6add 100644
--- a/packages/server-utils/src/integrations/redis/ioredis-channel-subscriber.ts
+++ b/packages/server-utils/src/integrations/redis/ioredis-channel-subscriber.ts
@@ -93,6 +93,7 @@ export function startIORedisCommandSpan(
 
   return startInactiveSpan({
     name: cacheProperties?.name ?? streamedName ?? statement,
+    onlyIfParent: true,
     attributes: { ...attributes, ...cacheProperties?.attributes },
   });
 }
@@ -112,8 +113,6 @@ export function instrumentIoredis(options: RedisCacheOptions): void {
   );
 
   bindTracingChannelToSpan(commandChannel, data => startIORedisCommandSpan(data, options), {
-    // ioredis' `requireParentSpan` default: only create a span under an active span.
-    requiresParentSpan: true,
     beforeSpanEnd(span, data) {
       if (!('error' in data)) {
         applyCacheResponseAttributes(span, data.result);
@@ -121,19 +120,16 @@ export function instrumentIoredis(options: RedisCacheOptions): void {
     },
   });
 
-  bindTracingChannelToSpan(
-    connectChannel,
-    data => {
-      const { host, port } = getConnectionOptions(data.self);
-      return startInactiveSpan({
-        name: 'connect',
-        attributes: {
-          [SENTRY_KIND]: 'client',
-          ...connectionAttributes(host, port),
-          [SENTRY_OP]: DB,
-        },
-      });
-    },
-    { requiresParentSpan: true },
-  );
+  bindTracingChannelToSpan(connectChannel, data => {
+    const { host, port } = getConnectionOptions(data.self);
+    return startInactiveSpan({
+      name: 'connect',
+      onlyIfParent: true,
+      attributes: {
+        [SENTRY_KIND]: 'client',
+        ...connectionAttributes(host, port),
+        [SENTRY_OP]: DB,
+      },
+    });
+  });
 }
diff --git a/packages/server-utils/src/tracing-channel.ts b/packages/server-utils/src/tracing-channel.ts
index 075057f47c31..859b80738af7 100644
--- a/packages/server-utils/src/tracing-channel.ts
+++ b/packages/server-utils/src/tracing-channel.ts
@@ -8,7 +8,6 @@ import {
   SPAN_STATUS_ERROR,
   getAsyncContextStrategy,
   getMainCarrier,
-  getActiveSpan,
   spanIsIgnored,
   getRootSpan,
   withActiveSpan,
@@ -72,12 +71,6 @@ export interface TracingChannelLifeCycleOptions<TData extends object = object> {
     /** Ends the span: `end()` on success, `end(error)` on failure (which marks `data` as errored). Idempotent. */
     end: (error?: unknown) => void;
   }) => boolean;
-
-  /**
-   * Apply span/scope binding only if there is a parent span, similar to returning `undefined` in the `getSpan` callback.
-   * If you need to perform some conditional checking on the parent span before deciding, do it in the `getSpan` callback.
-   */
-  requiresParentSpan?: boolean;
 }
 
 /** Returned by {@link bindTracingChannelToSpan}: the bound channel plus a teardown handle. */
@@ -120,7 +113,7 @@ export function bindTracingChannelToSpan<TData extends object>(
   getSpan: (data: TracingChannelPayloadWithSpan<TData>) => Span | undefined,
   opts?: TracingChannelLifeCycleOptions<TData>,
 ): TracingChannelBindingHandle<TData> {
-  const handle = bindSpanToChannelStore(channel, getSpan, opts);
+  const handle = bindSpanToChannelStore(channel, getSpan);
 
   const beforeSpanEnd = opts?.beforeSpanEnd;
   const deferSpanEnd = opts?.deferSpanEnd;
@@ -224,7 +217,6 @@ export function bindTracingChannelToSpan<TData extends object>(
 export function bindSpanToChannelStore<TData extends object>(
   channel: TracingChannel<TData, TData>,
   getSpan: (data: TracingChannelPayloadWithSpan<TData>) => Span | undefined,
-  opts?: Pick<TracingChannelLifeCycleOptions, 'requiresParentSpan'>,
 ): TracingChannelBindingHandle<TData> {
   // Grabs the tracing channel binding defined by the AsyncContext strategy implementation
   const binding = getAsyncContextStrategy(getMainCarrier()).getTracingChannelBinding?.();
@@ -253,8 +245,7 @@ export function bindSpanToChannelStore<TData extends object>(
     // callback-style channels (see `_sentryCallerStore`).
     data._sentryCallerStore = asyncLocalStorage.getStore();
 
-    const shouldGetSpan = !opts?.requiresParentSpan || getActiveSpan();
-    const span = shouldGetSpan ? getSpan(data) : undefined;
+    const span = getSpan(data);
     if (!span) {
       // Leave the active context untouched so nested operations keep parenting to the enclosing span.
       return data._sentryCallerStore as TData;
diff --git a/packages/server-utils/test/integrations/mysql2/mysql2-dc-subscriber.test.ts b/packages/server-utils/test/integrations/mysql2/mysql2-dc-subscriber.test.ts
index f414f8ee1bf0..dec09eb63d28 100644
--- a/packages/server-utils/test/integrations/mysql2/mysql2-dc-subscriber.test.ts
+++ b/packages/server-utils/test/integrations/mysql2/mysql2-dc-subscriber.test.ts
@@ -102,7 +102,7 @@ function installTestAsyncContextStrategy(): void {
 
 /**
  * Drives a channel's `tracePromise` inside an enclosing span and captures the span bound by the
- * subscriber. The subscriber only creates a span when there is an enclosing active span, so the
+ * subscriber. The subscriber only creates a recording span when there is an enclosing active span, so the
  * helper always establishes one and returns its id for parenting assertions.
  */
 async function traceOperation(
@@ -168,7 +168,7 @@ describe('subscribeMysql2DiagnosticChannels', () => {
     vi.clearAllMocks();
   });
 
-  it('does not create a span when there is no enclosing active span', async () => {
+  it('does not create a recording span when there is no enclosing active span', async () => {
     const channel = tracingChannel(MYSQL2_DC_CHANNEL_QUERY);
     let span: Span | undefined;
 
@@ -179,7 +179,8 @@ describe('subscribeMysql2DiagnosticChannels', () => {
       { query: 'SELECT 1' },
     );
 
-    expect(span).toBeUndefined();
+    expect(span).toBeDefined();
+    expect(span?.isRecording()).toBe(false);
   });
 
   describe('query channel', () => {
diff --git a/packages/server-utils/test/integrations/neon.test.ts b/packages/server-utils/test/integrations/neon.test.ts
index 661a65cc7389..6c5ac05fe9d0 100644
--- a/packages/server-utils/test/integrations/neon.test.ts
+++ b/packages/server-utils/test/integrations/neon.test.ts
@@ -154,13 +154,13 @@ describe('neonIntegration', () => {
       expect(span.end).toHaveBeenCalledTimes(1);
     });
 
-    it('does not start a span without a parent span', async () => {
+    it('does not create a recording span without a parent span', async () => {
       getActiveSpanSpy.mockReturnValue(undefined);
       const ctx: ChannelContext = { arguments: ['SELECT 1'], self: { connectionParameters: CONNECTION } };
 
       await tracingChannel(CHANNELS.NEON_QUERY).tracePromise(async () => ({ rows: [] }), ctx);
 
-      expect(startInactiveSpanSpy).not.toHaveBeenCalled();
+      expect(startInactiveSpanSpy).toHaveBeenCalledWith(expect.objectContaining({ onlyIfParent: true }));
     });
   });
 
diff --git a/packages/server-utils/test/integrations/postgres/postgres.test.ts b/packages/server-utils/test/integrations/postgres/postgres.test.ts
index db64ef9e137c..9af1c1a5c851 100644
--- a/packages/server-utils/test/integrations/postgres/postgres.test.ts
+++ b/packages/server-utils/test/integrations/postgres/postgres.test.ts
@@ -63,13 +63,6 @@ function installTestAsyncContextStrategy(): void {
   });
 }
 
-// The subscriber builds spans via `startInactiveSpan` and gates on
-// `getActiveSpan`. We spy both: `getActiveSpan` to satisfy the
-// requireParentSpan gate, and `startInactiveSpan` to capture the span
-// options the subscriber builds (name + raw attributes) and to track the
-// span's lifecycle. The final `db` op / SQL description come from the
-// SDK's `inferDbSpanData` processor, which isn't wired up here. That's
-// covered by the integration test.
 function makeSpan(): Span {
   return { end: vi.fn(), setStatus: vi.fn(), setAttributes: vi.fn() } as unknown as Span;
 }
@@ -98,7 +91,6 @@ describe('postgresIntegration', () => {
   beforeEach(() => {
     span = makeSpan();
     startInactiveSpanSpy = vi.spyOn(SentryCore, 'startInactiveSpan').mockReturnValue(span);
-    // A truthy active span by default, so the requireParentSpan gate passes.
     getActiveSpanSpy = vi.spyOn(SentryCore, 'getActiveSpan').mockReturnValue({} as Span);
   });
 
@@ -251,12 +243,12 @@ describe('postgresIntegration', () => {
     );
   });
 
-  it('requireParentSpan: does not create a span when there is no active span', async () => {
+  it('does not create a recording span without an active parent span', async () => {
     getActiveSpanSpy.mockReturnValue(undefined);
     const ctx: OrchestrionChannelContext = { arguments: ['SELECT 1'], self: { connectionParameters: CONNECTION } };
 
     await tracingChannel(CHANNELS.PG_QUERY).tracePromise(async () => ({ rows: [] }), ctx);
 
-    expect(startInactiveSpanSpy).not.toHaveBeenCalled();
+    expect(startInactiveSpanSpy).toHaveBeenCalledWith(expect.objectContaining({ onlyIfParent: true }));
   });
 });
diff --git a/packages/server-utils/test/integrations/prisma-orchestrion.test.ts b/packages/server-utils/test/integrations/prisma-orchestrion.test.ts
index 78a1e3bf1988..cbc8cc142c6c 100644
--- a/packages/server-utils/test/integrations/prisma-orchestrion.test.ts
+++ b/packages/server-utils/test/integrations/prisma-orchestrion.test.ts
@@ -206,13 +206,13 @@ describe('instrumentPrismaV8', () => {
     expect(span.end).toHaveBeenCalledTimes(1);
   });
 
-  it('does not open a span without a parent', async () => {
+  it('does not create a recording span without a parent', async () => {
     await tracingChannel(CHANNELS.PRISMA_CREATE).tracePromise(async () => ({ id: 1 }), {
       arguments: [],
       self: { modelName: 'User' },
     });
 
-    expect(startInactiveSpanSpy).not.toHaveBeenCalled();
+    expect(startInactiveSpanSpy).toHaveBeenCalledWith(expect.objectContaining({ onlyIfParent: true }));
   });
 
   it('async terminal: marks the span as errored when the promise rejects', async () => {

From b0560b7beac0249b1d736767ff3b7f6e08a8a5eb Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 12:06:53 +0100
Subject: [PATCH 052/169] ref: Pass optional span attributes directly instead
 of conditional spreads (#25878)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** `SentrySpan.setAttribute` drops `undefined` values, and
`SpanAttributes` already allows `undefined`. That makes patterns like
`...(provider ? { [GEN_AI_PROVIDER_NAME]: provider } : {})` unnecessary
when the attributes are passed at span creation, so this passes the
value directly. It also trims the browser bundle a little.

I only changed attribute objects passed when a span is created, where
the condition just checks the value itself. I left these alone on
purpose:
- `setAttributes` on spans that already exist. There, `undefined`
*deletes* the attribute (for example the nextjs/ember/tanstack route
updates and the MCP `initialize` update).
- `sentry.op` / `sentry.origin` / `sentry.segment.name.source`. An
explicit `undefined` overrides the core defaults (the effect tracer
already has a comment about this).
- Values typed `string | null` (sveltekit `route.id`). `null` is not a
valid attribute value.
- Ember route names and Angular decorator component names, where `''` is
a real case that should stay omitted. Ember has tests for this.
- Non-attribute objects (envelope headers, HTTP headers, MCP helpers
typed `Record<string, string | number>`) and conditions on something
other than the value, like `hasSpanStreaming`, `recordInputs` or `source
=== 'route'`.

**Unsure about:** a falsy check like `x ? {…} : {}` also skipped `''`.
Now an empty string would be set as an attribute. I don't think that can
happen at the sites I changed, but it's worth a quick look.

<!-- junior-request-attribution:start -->
via **Francesco Gringl-Novy**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AD0CA8FXFXAS%3A1793278469.396419 -->

--

[View Junior
Session](https://junior-prod.sentry.dev/conversations/slack%3AD0CA8FXFXAS%3A1793278469.396419)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AD0CA8FXFXAS%3A1793278469.396419/?project=4510944073809921)

<!-- junior-session-footer:end -->

---------

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Francesco Gringl-Novy <francesco.novy@sentry.io>
---
 packages/angular/src/tracing.ts               |  4 +---
 .../src/performance/interactions.ts           |  8 ++++----
 .../src/tracing/browserTracingIntegration.ts  |  2 +-
 .../worker/instrumentQueueProducer.ts         |  2 +-
 .../instrumentations/worker/instrumentR2.ts   |  2 +-
 .../appRouterRoutingInstrumentation.ts        |  8 ++++----
 .../pagesRouterRoutingInstrumentation.ts      |  2 +-
 .../src/server/createServerInstrumentation.ts |  2 +-
 packages/react/src/profiler.tsx               | 10 +++++-----
 packages/react/src/tanstackrouter.ts          |  4 ++--
 .../v3/client/browserTracingIntegration.ts    |  2 +-
 packages/server-utils/src/ai/flue/index.ts    |  4 ++--
 packages/server-utils/src/ai/flue/utils.ts    |  8 ++++----
 .../server-utils/src/ai/pi-durable/models.ts  | 12 ++++++------
 .../server-utils/src/ai/pi-durable/tools.ts   |  4 ++--
 .../server-utils/src/ai/typesafe/index.ts     |  2 +-
 .../integrations/express/instrumentation.ts   |  2 +-
 .../server-utils/src/integrations/mysql.ts    |  6 +++---
 .../vercel-ai/vercel-ai-dc-subscriber.ts      | 19 ++++++++++---------
 packages/solid/src/tanstackrouter.ts          |  4 ++--
 packages/svelte/src/performance.ts            |  4 ++--
 packages/vue/src/tanstackrouter.ts            |  4 ++--
 packages/vue/src/tracing.ts                   |  4 ++--
 23 files changed, 59 insertions(+), 60 deletions(-)

diff --git a/packages/angular/src/tracing.ts b/packages/angular/src/tracing.ts
index 3a50bf232339..c5884695121c 100644
--- a/packages/angular/src/tracing.ts
+++ b/packages/angular/src/tracing.ts
@@ -159,9 +159,7 @@ export class TraceService implements OnDestroy {
                 [SENTRY_OP]: ROUTER,
                 [SENTRY_ORIGIN]: 'auto.ui.angular',
                 [URL_FULL]: strippedUrl,
-                ...(navigationEvent.navigationTrigger && {
-                  navigationTrigger: navigationEvent.navigationTrigger,
-                }),
+                navigationTrigger: navigationEvent.navigationTrigger,
               },
             }),
           ) || null;
diff --git a/packages/browser-utils/src/performance/interactions.ts b/packages/browser-utils/src/performance/interactions.ts
index 33913a40c619..3112c7b6a4ac 100644
--- a/packages/browser-utils/src/performance/interactions.ts
+++ b/packages/browser-utils/src/performance/interactions.ts
@@ -217,10 +217,10 @@ function registerInteractionListener(
             [SENTRY_SEGMENT_NAME_SOURCE]: hasSpanStreaming ? streamedNameSource : latestRoute.source || 'url',
             [SENTRY_ORIGIN]: 'auto.browser.interactions',
             ...(hasSpanStreaming && { [SENTRY_SEGMENT_NAME]: streamedName }),
-            ...(latestRoute.routeId && { [ROUTER_NAVIGATION_ROUTE_ID]: latestRoute.routeId }),
-            ...(latestRoute.urlTemplate && { [URL_TEMPLATE]: latestRoute.urlTemplate }),
-            ...(latestRoute.httpRoute && { [HTTP_ROUTE]: latestRoute.httpRoute }),
-            ...(latestRoute.urlPath && { [URL_PATH]: latestRoute.urlPath }),
+            [ROUTER_NAVIGATION_ROUTE_ID]: latestRoute.routeId,
+            [URL_TEMPLATE]: latestRoute.urlTemplate,
+            [HTTP_ROUTE]: latestRoute.httpRoute,
+            [URL_PATH]: latestRoute.urlPath,
             ...(latestRoute.urlFull && { [URL_FULL]: filterCollectedUrl(latestRoute.urlFull) }),
           },
         },
diff --git a/packages/browser/src/tracing/browserTracingIntegration.ts b/packages/browser/src/tracing/browserTracingIntegration.ts
index b02a5d5ebcca..e21b40a86f27 100644
--- a/packages/browser/src/tracing/browserTracingIntegration.ts
+++ b/packages/browser/src/tracing/browserTracingIntegration.ts
@@ -367,7 +367,7 @@ export const browserTracingIntegration = ((options: Partial<BrowserTracingOption
     const urlObject = parseStringToURLObject(url || getLocationHref());
 
     const attributes = {
-      ...(urlObject?.pathname && { [URL_PATH]: urlObject.pathname }),
+      [URL_PATH]: urlObject?.pathname,
       ...(urlObject && !isURLObjectRelative(urlObject) && { [URL_FULL]: filterCollectedUrl(urlObject.href) }),
       ...finalStartSpanOptions.attributes,
     };
diff --git a/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts b/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
index 866e50e3e4dd..804cf3119d51 100644
--- a/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
+++ b/packages/cloudflare/src/instrumentations/worker/instrumentQueueProducer.ts
@@ -32,7 +32,7 @@ function startPublishSpan<T>(
         [MESSAGING_DESTINATION_NAME]: bindingName,
         [MESSAGING_OPERATION_TYPE]: 'send',
         [MESSAGING_OPERATION_NAME]: 'send',
-        ...(messageCount !== undefined && { [MESSAGING_BATCH_MESSAGE_COUNT]: messageCount }),
+        [MESSAGING_BATCH_MESSAGE_COUNT]: messageCount,
         [MESSAGING_MESSAGE_BODY_SIZE]: bodySize,
         [SENTRY_OP]: QUEUE_PUBLISH,
         [SENTRY_ORIGIN]: ORIGIN,
diff --git a/packages/cloudflare/src/instrumentations/worker/instrumentR2.ts b/packages/cloudflare/src/instrumentations/worker/instrumentR2.ts
index a2ffdf72e50a..afc740cc250f 100644
--- a/packages/cloudflare/src/instrumentations/worker/instrumentR2.ts
+++ b/packages/cloudflare/src/instrumentations/worker/instrumentR2.ts
@@ -64,7 +64,7 @@ function createSpanOptions(bindingName: string, r2Op: R2OperationKey, key?: stri
     attributes: {
       [CLOUDFLARE_R2_OPERATION]: operation,
       [CLOUDFLARE_R2_BUCKET]: bindingName,
-      ...(requestKey !== undefined && { [CLOUDFLARE_R2_REQUEST_KEY]: requestKey }),
+      [CLOUDFLARE_R2_REQUEST_KEY]: requestKey,
       ...(isR2ListOptions(key) && key.prefix !== undefined && { [CLOUDFLARE_R2_REQUEST_PREFIX]: key.prefix }),
       ...(isR2ListOptions(key) && key.delimiter !== undefined && { [CLOUDFLARE_R2_REQUEST_DELIMITER]: key.delimiter }),
       [SENTRY_OP]: op,
diff --git a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
index ba6e5c88986e..d48f48cde5ea 100644
--- a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
+++ b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
@@ -150,7 +150,7 @@ export function appRouterInstrumentPageLoad(client: Client): void {
       [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
       [URL_PATH]: WINDOW.location.pathname,
       [URL_FULL]: documentUrl,
-      ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
+      [URL_TEMPLATE]: parameterizedPathname,
     },
   };
 
@@ -258,7 +258,7 @@ export function appRouterInstrumentNavigation(client: Client): void {
             [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
             // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
             [NAVIGATION_TYPE]: `router.${navigationType}`,
-            ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
+            [URL_TEMPLATE]: parameterizedPathname,
           },
         },
         { url: getAbsoluteUrl(normalizedHref) },
@@ -296,7 +296,7 @@ export function appRouterInstrumentNavigation(client: Client): void {
             [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
             // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
             [NAVIGATION_TYPE]: traversal?.navigationType ?? 'browser.popstate',
-            ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
+            [URL_TEMPLATE]: parameterizedPathname,
           },
         },
         // The full location rather than just the pathname, so the span's `url.full` keeps the
@@ -394,7 +394,7 @@ function patchRouter(client: Client, router: NextRouter, currentNavigationSpanRe
                 [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
                 // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
                 [NAVIGATION_TYPE]: `router.${routerFunctionName}`,
-                ...(parameterizedPathname && { [URL_TEMPLATE]: parameterizedPathname }),
+                [URL_TEMPLATE]: parameterizedPathname,
               },
             },
             { url: getAbsoluteUrl(normalizedHref) },
diff --git a/packages/nextjs/src/client/routing/pagesRouterRoutingInstrumentation.ts b/packages/nextjs/src/client/routing/pagesRouterRoutingInstrumentation.ts
index 7335d0465bda..c37599e69fcb 100644
--- a/packages/nextjs/src/client/routing/pagesRouterRoutingInstrumentation.ts
+++ b/packages/nextjs/src/client/routing/pagesRouterRoutingInstrumentation.ts
@@ -109,7 +109,7 @@ export function pagesRouterInstrumentPageLoad(client: Client): void {
         [SENTRY_OP]: PAGELOAD,
         [SENTRY_ORIGIN]: 'auto.pageload.nextjs.pages_router_instrumentation',
         [SENTRY_SEGMENT_NAME_SOURCE]: route ? 'route' : 'url',
-        ...(route && { [URL_TEMPLATE]: route }),
+        [URL_TEMPLATE]: route,
         ...(params && { ...params }),
       },
     },
diff --git a/packages/react-router/src/server/createServerInstrumentation.ts b/packages/react-router/src/server/createServerInstrumentation.ts
index ebf16d85c87d..892663c37a46 100644
--- a/packages/react-router/src/server/createServerInstrumentation.ts
+++ b/packages/react-router/src/server/createServerInstrumentation.ts
@@ -240,7 +240,7 @@ export function createSentryServerInstrumentation(
                 [SENTRY_ORIGIN]: 'auto.function.react_router.instrumentation_api',
                 'react_router.route.id': routeId,
                 [HTTP_ROUTE]: routePattern,
-                ...(middlewareName && { 'react_router.middleware.name': middlewareName }),
+                'react_router.middleware.name': middlewareName,
                 'react_router.middleware.index': middlewareIndex,
               },
             },
diff --git a/packages/react/src/profiler.tsx b/packages/react/src/profiler.tsx
index 508d9e508bdf..a81a50199c7a 100644
--- a/packages/react/src/profiler.tsx
+++ b/packages/react/src/profiler.tsx
@@ -66,7 +66,7 @@ class Profiler extends React.Component<ProfilerProps> {
       attributes: {
         [SENTRY_OP]: UI_MOUNT,
         [SENTRY_ORIGIN]: 'auto.ui.react.profiler',
-        ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+        [UI_COMPONENT_NAME]: componentName || undefined,
         ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
       },
     });
@@ -102,7 +102,7 @@ class Profiler extends React.Component<ProfilerProps> {
             attributes: {
               [SENTRY_OP]: UI_UPDATE,
               [SENTRY_ORIGIN]: 'auto.ui.react.profiler',
-              ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+              [UI_COMPONENT_NAME]: componentName || undefined,
               'ui.react.changed_props': changedProps,
               ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
             },
@@ -142,7 +142,7 @@ class Profiler extends React.Component<ProfilerProps> {
           attributes: {
             [SENTRY_OP]: UI_RENDER,
             [SENTRY_ORIGIN]: 'auto.ui.react.profiler',
-            ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+            [UI_COMPONENT_NAME]: componentName || undefined,
             ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
           },
         });
@@ -229,7 +229,7 @@ function useProfiler(
       attributes: {
         [SENTRY_OP]: UI_MOUNT,
         [SENTRY_ORIGIN]: 'auto.ui.react.profiler',
-        ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+        [UI_COMPONENT_NAME]: componentName || undefined,
         ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
       },
     });
@@ -257,7 +257,7 @@ function useProfiler(
           attributes: {
             [SENTRY_OP]: UI_RENDER,
             [SENTRY_ORIGIN]: 'auto.ui.react.profiler',
-            ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+            [UI_COMPONENT_NAME]: componentName || undefined,
             ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
           },
         });
diff --git a/packages/react/src/tanstackrouter.ts b/packages/react/src/tanstackrouter.ts
index 41eec4694aae..e7f1c20f8e2e 100644
--- a/packages/react/src/tanstackrouter.ts
+++ b/packages/react/src/tanstackrouter.ts
@@ -106,7 +106,7 @@ export function tanstackRouterBrowserTracingIntegration(
             [SENTRY_OP]: PAGELOAD,
             [SENTRY_ORIGIN]: 'auto.pageload.react.tanstack_router',
             [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-            ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+            [URL_TEMPLATE]: routeMatch?.routeId,
             ...routeMatchToParamSpanAttributes(routeMatch),
           },
         });
@@ -163,7 +163,7 @@ export function tanstackRouterBrowserTracingIntegration(
                 [SENTRY_OP]: NAVIGATION,
                 [SENTRY_ORIGIN]: 'auto.navigation.react.tanstack_router',
                 [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-                ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+                [URL_TEMPLATE]: routeMatch?.routeId,
                 ...routeMatchToParamSpanAttributes(routeMatch),
               },
             },
diff --git a/packages/remix/src/v3/client/browserTracingIntegration.ts b/packages/remix/src/v3/client/browserTracingIntegration.ts
index 5e07ca200934..3142c834c966 100644
--- a/packages/remix/src/v3/client/browserTracingIntegration.ts
+++ b/packages/remix/src/v3/client/browserTracingIntegration.ts
@@ -107,7 +107,7 @@ function instrumentNavigationApi(client: Client): void {
         name: route ?? (hasSpanStreamingEnabled(client) ? NAVIGATION_SPAN_NAME_FALLBACK : pathname),
         attributes: {
           [SENTRY_SEGMENT_NAME_SOURCE]: route ? 'route' : 'url',
-          ...(route && { [URL_TEMPLATE]: route }),
+          [URL_TEMPLATE]: route,
           [SENTRY_ORIGIN]: 'auto.navigation.remix_v3',
         },
       },
diff --git a/packages/server-utils/src/ai/flue/index.ts b/packages/server-utils/src/ai/flue/index.ts
index d4856f95f2ac..b5f969c8a16e 100644
--- a/packages/server-utils/src/ai/flue/index.ts
+++ b/packages/server-utils/src/ai/flue/index.ts
@@ -144,8 +144,8 @@ export function createFlueInstrumentation(options: FlueOptions = {}): FlueInstru
             attributes: {
               [SENTRY_ORIGIN]: FLUE_ORIGIN,
               [GEN_AI_OPERATION_NAME]: 'invoke_agent',
-              ...(ctx.agentName ? { [GEN_AI_AGENT_NAME]: ctx.agentName } : {}),
-              ...(ctx.conversationId ? { [GEN_AI_CONVERSATION_ID]: ctx.conversationId } : {}),
+              [GEN_AI_AGENT_NAME]: ctx.agentName,
+              [GEN_AI_CONVERSATION_ID]: ctx.conversationId,
             },
           },
           async (span: Span) => {
diff --git a/packages/server-utils/src/ai/flue/utils.ts b/packages/server-utils/src/ai/flue/utils.ts
index 7f22256bf319..399a2aec3580 100644
--- a/packages/server-utils/src/ai/flue/utils.ts
+++ b/packages/server-utils/src/ai/flue/utils.ts
@@ -123,10 +123,10 @@ export function startTurnSpan(observation: FlueObservation, turnSpans: SpanTrack
       attributes: {
         [SENTRY_ORIGIN]: FLUE_ORIGIN,
         [GEN_AI_OPERATION_NAME]: 'chat',
-        ...(observation.conversationId ? { [GEN_AI_CONVERSATION_ID]: observation.conversationId } : {}),
+        [GEN_AI_CONVERSATION_ID]: observation.conversationId,
         // No conventional attribute for this; it is the only way to tell a compaction turn from a
         // user-facing one.
-        ...(observation.purpose ? { 'flue.turn.purpose': observation.purpose } : {}),
+        'flue.turn.purpose': observation.purpose,
       },
     }),
   );
@@ -207,8 +207,8 @@ export function startToolSpan(observation: FlueObservation, toolSpans: SpanTrack
       attributes: {
         [SENTRY_ORIGIN]: FLUE_ORIGIN,
         [GEN_AI_OPERATION_NAME]: 'execute_tool',
-        ...(toolName ? { [GEN_AI_TOOL_NAME]: toolName } : {}),
-        ...(observation.conversationId ? { [GEN_AI_CONVERSATION_ID]: observation.conversationId } : {}),
+        [GEN_AI_TOOL_NAME]: toolName,
+        [GEN_AI_CONVERSATION_ID]: observation.conversationId,
         ...(recordInputs && observation.args !== undefined
           ? { [GEN_AI_TOOL_CALL_ARGUMENTS]: stringify(observation.args) }
           : {}),
diff --git a/packages/server-utils/src/ai/pi-durable/models.ts b/packages/server-utils/src/ai/pi-durable/models.ts
index b50a5cdb0420..196973159d70 100644
--- a/packages/server-utils/src/ai/pi-durable/models.ts
+++ b/packages/server-utils/src/ai/pi-durable/models.ts
@@ -117,14 +117,14 @@ function traceModelRequest(
       attributes: {
         [SENTRY_ORIGIN]: PI_DURABLE_ORIGIN,
         [GEN_AI_OPERATION_NAME]: 'chat',
-        ...(model.provider ? { [GEN_AI_PROVIDER_NAME]: model.provider } : {}),
-        ...(model.id ? { [GEN_AI_REQUEST_MODEL]: model.id } : {}),
-        ...(conversationId ? { [GEN_AI_CONVERSATION_ID]: conversationId } : {}),
+        [GEN_AI_PROVIDER_NAME]: model.provider,
+        [GEN_AI_REQUEST_MODEL]: model.id,
+        [GEN_AI_CONVERSATION_ID]: conversationId,
         ...getServerAttributes(model),
         ...(streaming ? { [GEN_AI_RESPONSE_STREAMING]: true } : {}),
-        ...(callOptions?.temperature !== undefined ? { [GEN_AI_REQUEST_TEMPERATURE]: callOptions.temperature } : {}),
-        ...(callOptions?.maxTokens !== undefined ? { [GEN_AI_REQUEST_MAX_TOKENS]: callOptions.maxTokens } : {}),
-        ...(callOptions?.reasoning ? { [GEN_AI_REQUEST_REASONING_LEVEL]: callOptions.reasoning } : {}),
+        [GEN_AI_REQUEST_TEMPERATURE]: callOptions?.temperature,
+        [GEN_AI_REQUEST_MAX_TOKENS]: callOptions?.maxTokens,
+        [GEN_AI_REQUEST_REASONING_LEVEL]: callOptions?.reasoning,
         ...(recordInputs && context ? getRequestContentAttributes(context) : {}),
       },
     },
diff --git a/packages/server-utils/src/ai/pi-durable/tools.ts b/packages/server-utils/src/ai/pi-durable/tools.ts
index 8ccf21155549..6a6ced8f8787 100644
--- a/packages/server-utils/src/ai/pi-durable/tools.ts
+++ b/packages/server-utils/src/ai/pi-durable/tools.ts
@@ -122,8 +122,8 @@ export function instrumentTool(tool: PiTool, runs: PiRuns, options: GenAiOptions
           [SENTRY_ORIGIN]: PI_DURABLE_ORIGIN,
           [GEN_AI_OPERATION_NAME]: 'execute_tool',
           [GEN_AI_TOOL_NAME]: tool.name,
-          ...(tool.description ? { [GEN_AI_TOOL_DESCRIPTION]: tool.description } : {}),
-          ...(api?.callId ? { [GEN_AI_TOOL_CALL_ID_ATTRIBUTE]: api.callId } : {}),
+          [GEN_AI_TOOL_DESCRIPTION]: tool.description,
+          [GEN_AI_TOOL_CALL_ID_ATTRIBUTE]: api?.callId,
           ...(api?.conversationId !== undefined
             ? { [GEN_AI_CONVERSATION_ID]: toSentryConversationId(runs, api.conversationId) }
             : {}),
diff --git a/packages/server-utils/src/ai/typesafe/index.ts b/packages/server-utils/src/ai/typesafe/index.ts
index 65d24e6fc3f8..7bffea993239 100644
--- a/packages/server-utils/src/ai/typesafe/index.ts
+++ b/packages/server-utils/src/ai/typesafe/index.ts
@@ -50,7 +50,7 @@ function getRequestAttributes(
     [SENTRY_ORIGIN]: TYPESAFE_ORIGIN,
     [GEN_AI_OPERATION_NAME]: 'decide',
     [GEN_AI_PROVIDER_NAME]: TYPESAFE_PROVIDER_NAME,
-    ...(model ? { [GEN_AI_REQUEST_MODEL]: model } : {}),
+    [GEN_AI_REQUEST_MODEL]: model,
     ...(recordInputs ? { [GEN_AI_INPUT_MESSAGES]: getEvaluationInputMessages(request) } : {}),
   };
 }
diff --git a/packages/server-utils/src/integrations/express/instrumentation.ts b/packages/server-utils/src/integrations/express/instrumentation.ts
index a3d079c6bd2b..cac3ede931ff 100644
--- a/packages/server-utils/src/integrations/express/instrumentation.ts
+++ b/packages/server-utils/src/integrations/express/instrumentation.ts
@@ -344,7 +344,7 @@ function getSpanForLayer(data: HandleChannelContext, options: ExpressIntegration
       [SENTRY_OP]: EXPRESS_TYPE_TO_SPAN_OP[type],
       [ATTR_EXPRESS_NAME]: name,
       [ATTR_EXPRESS_TYPE]: type,
-      ...(matchedRoute ? { [HTTP_ROUTE]: matchedRoute } : {}),
+      [HTTP_ROUTE]: matchedRoute,
     },
   });
 
diff --git a/packages/server-utils/src/integrations/mysql.ts b/packages/server-utils/src/integrations/mysql.ts
index de538d52afd7..1a68350361e6 100644
--- a/packages/server-utils/src/integrations/mysql.ts
+++ b/packages/server-utils/src/integrations/mysql.ts
@@ -98,9 +98,9 @@ function instrumentMysql(): void {
           [SENTRY_ORIGIN]: 'auto.db.mysql',
           // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
           [DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
-          ...(database ? { [DB_NAMESPACE]: database } : {}),
-          ...(user ? { [DB_USER]: user } : {}),
-          ...(queryText ? { [DB_QUERY_TEXT]: queryText } : {}),
+          [DB_NAMESPACE]: database,
+          [DB_USER]: user,
+          [DB_QUERY_TEXT]: queryText,
           [DB_QUERY_SUMMARY]: querySummary,
           [SERVER_ADDRESS]: host,
           [SERVER_PORT]: portIsNumber ? portNumber : undefined,
diff --git a/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts b/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
index 2943aa7dddb2..f7525a94e9dd 100644
--- a/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
+++ b/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
@@ -453,10 +453,11 @@ export function createSpanFromMessage(
   const baseAttributes: SpanAttributes = {
     [SENTRY_ORIGIN]: ORIGIN,
     ...telemetryMetadataAttributes(event.telemetryMetadata),
-    ...(provider ? { [GEN_AI_PROVIDER_NAME]: provider, [VERCEL_AI_MODEL_PROVIDER_ATTRIBUTE]: provider } : {}),
-    ...(modelId ? { [GEN_AI_REQUEST_MODEL]: modelId } : {}),
-    ...(maxRetries !== undefined ? { [VERCEL_AI_SETTINGS_MAX_RETRIES_ATTRIBUTE]: maxRetries } : {}),
-    ...(conversationId ? { [GEN_AI_CONVERSATION_ID]: conversationId } : {}),
+    [GEN_AI_PROVIDER_NAME]: provider,
+    [VERCEL_AI_MODEL_PROVIDER_ATTRIBUTE]: provider,
+    [GEN_AI_REQUEST_MODEL]: modelId,
+    [VERCEL_AI_SETTINGS_MAX_RETRIES_ATTRIBUTE]: maxRetries,
+    [GEN_AI_CONVERSATION_ID]: conversationId,
   };
 
   switch (type) {
@@ -547,7 +548,7 @@ function buildInvokeAgentSpan(
     ...baseAttributes,
     [VERCEL_AI_OPERATION_ID_ATTRIBUTE]: operationId,
     [GEN_AI_RESPONSE_STREAMING]: isStream,
-    ...(functionId ? { [GEN_AI_FUNCTION_ID]: functionId } : {}),
+    [GEN_AI_FUNCTION_ID]: functionId,
     ...(recordInputs ? buildInputMessageAttributes(event) : {}),
   });
   if (isStream && callId) {
@@ -591,11 +592,11 @@ function buildToolSpan(
     recordInputs && toolName ? resolveToolDescription(asString(event.callId), toolName, event.tools) : undefined;
   return startGenAiSpan('execute_tool', toolName, {
     [SENTRY_ORIGIN]: ORIGIN,
-    ...(toolName ? { [GEN_AI_TOOL_NAME]: toolName } : {}),
-    ...(toolCallId ? { [GEN_AI_TOOL_CALL_ID_ATTRIBUTE]: toolCallId } : {}),
-    ...(description ? { [GEN_AI_TOOL_DESCRIPTION]: description } : {}),
+    [GEN_AI_TOOL_NAME]: toolName,
+    [GEN_AI_TOOL_CALL_ID_ATTRIBUTE]: toolCallId,
+    [GEN_AI_TOOL_DESCRIPTION]: description,
     ...(recordInputs && toolInput !== undefined ? { [GEN_AI_TOOL_CALL_ARGUMENTS]: stringify(toolInput) } : {}),
-    ...(conversationId ? { [GEN_AI_CONVERSATION_ID]: conversationId } : {}),
+    [GEN_AI_CONVERSATION_ID]: conversationId,
   });
 }
 
diff --git a/packages/solid/src/tanstackrouter.ts b/packages/solid/src/tanstackrouter.ts
index fd64dce25235..ae8d8eb278a6 100644
--- a/packages/solid/src/tanstackrouter.ts
+++ b/packages/solid/src/tanstackrouter.ts
@@ -99,7 +99,7 @@ export function tanstackRouterBrowserTracingIntegration<R extends AnyRouter>(
             [SENTRY_OP]: PAGELOAD,
             [SENTRY_ORIGIN]: 'auto.pageload.solid.tanstack_router',
             [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-            ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+            [URL_TEMPLATE]: routeMatch?.routeId,
             ...routeMatchToParamSpanAttributes(routeMatch),
           },
         });
@@ -158,7 +158,7 @@ export function tanstackRouterBrowserTracingIntegration<R extends AnyRouter>(
                 [SENTRY_OP]: NAVIGATION,
                 [SENTRY_ORIGIN]: 'auto.navigation.solid.tanstack_router',
                 [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-                ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+                [URL_TEMPLATE]: routeMatch?.routeId,
                 ...routeMatchToParamSpanAttributes(routeMatch),
               },
             },
diff --git a/packages/svelte/src/performance.ts b/packages/svelte/src/performance.ts
index 59f7c1b8174a..d05bd8f92f02 100644
--- a/packages/svelte/src/performance.ts
+++ b/packages/svelte/src/performance.ts
@@ -65,7 +65,7 @@ function recordInitSpan(componentName: string | undefined, description: string):
     attributes: {
       [SENTRY_OP]: UI_MOUNT,
       [SENTRY_ORIGIN]: 'auto.ui.svelte',
-      ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+      [UI_COMPONENT_NAME]: componentName || undefined,
       ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
     },
   });
@@ -87,7 +87,7 @@ function recordUpdateSpans(componentName: string | undefined, description: strin
       attributes: {
         [SENTRY_OP]: UI_UPDATE,
         [SENTRY_ORIGIN]: 'auto.ui.svelte',
-        ...(componentName && { [UI_COMPONENT_NAME]: componentName }),
+        [UI_COMPONENT_NAME]: componentName || undefined,
         ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
       },
     });
diff --git a/packages/vue/src/tanstackrouter.ts b/packages/vue/src/tanstackrouter.ts
index f485c6cb3fd3..3d704405041f 100644
--- a/packages/vue/src/tanstackrouter.ts
+++ b/packages/vue/src/tanstackrouter.ts
@@ -105,7 +105,7 @@ export function tanstackRouterBrowserTracingIntegration<R extends AnyRouter>(
             [SENTRY_OP]: PAGELOAD,
             [SENTRY_ORIGIN]: 'auto.pageload.vue.tanstack_router',
             [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-            ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+            [URL_TEMPLATE]: routeMatch?.routeId,
             ...routeMatchToParamSpanAttributes(routeMatch),
           },
         });
@@ -165,7 +165,7 @@ export function tanstackRouterBrowserTracingIntegration<R extends AnyRouter>(
                 [SENTRY_OP]: NAVIGATION,
                 [SENTRY_ORIGIN]: 'auto.navigation.vue.tanstack_router',
                 [SENTRY_SEGMENT_NAME_SOURCE]: routeMatch ? 'route' : 'url',
-                ...(routeMatch && { [URL_TEMPLATE]: routeMatch.routeId }),
+                [URL_TEMPLATE]: routeMatch?.routeId,
                 ...routeMatchToParamSpanAttributes(routeMatch),
               },
             },
diff --git a/packages/vue/src/tracing.ts b/packages/vue/src/tracing.ts
index 822ef2909a45..a447828e6c11 100644
--- a/packages/vue/src/tracing.ts
+++ b/packages/vue/src/tracing.ts
@@ -146,7 +146,7 @@ export const createTracingMixins = (options: Partial<TracingOptions> = {}): Mixi
               attributes: {
                 [SENTRY_OP]: UI_RENDER,
                 [SENTRY_ORIGIN]: 'auto.ui.vue',
-                ...(conventionComponentName && { [UI_COMPONENT_NAME]: conventionComponentName }),
+                [UI_COMPONENT_NAME]: conventionComponentName || undefined,
                 ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
               },
               onlyIfParent: true,
@@ -197,7 +197,7 @@ export const createTracingMixins = (options: Partial<TracingOptions> = {}): Mixi
               attributes: {
                 [SENTRY_OP]: VUE_OPERATION_TO_SPAN_OP[operation],
                 [SENTRY_ORIGIN]: 'auto.ui.vue',
-                ...(conventionComponentName && { [UI_COMPONENT_NAME]: conventionComponentName }),
+                [UI_COMPONENT_NAME]: conventionComponentName || undefined,
                 ...(hasSpanStreaming && { [SENTRY_DESCRIPTION]: description }),
               },
               // UI spans should only be created if there is an active root span (transaction)

From 8e61e32371e346b36bb22884fccb9ea5866c2907 Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Fri, 30 Oct 2026 13:11:46 +0100
Subject: [PATCH 053/169] test(node-integration-tests): Install single-version
 suite dependencies as package dependencies (#25936)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The typesafe, Bedrock and MCP SDK v1 suites each test a single
version that doesn't conflict with anything at the package root. For
them, the unlocked per-call `npm install` into a tmp dir (network on
every run, unpinned ranges, retries) buys nothing. Installing them once
through pnpm makes them locked and faster. It's the same change as
#25933 for Flue and pi-durable.

For mcp v1, we do not need additional dependencies either, because the
package names are actually different for v1 and v2 so we can just
install them side-by-side.

**How to review:** Hide whitespace. Dropping the options argument
re-indents the test bodies, and the assertions are unchanged.

**Unsure about:**
- `pnpm dedupe` (enforced in CI) moves the shared `@aws-sdk` internals
forward a few patches (`@aws-sdk/core` 3.978.1 → 3.978.7, `@smithy/core`
3.35.2 → 3.37.0), because the Bedrock client needs newer ones.
- `@google/genai`'s optional `@modelcontextprotocol/sdk` peer now
resolves to 1.30.0 instead of 1.32.2.
- The aws-serverless unit tests and the aws-serverless, MCP and
google-genai suites pass.
- `tedious` stays per-suite: the suite tests both the root v19 and v20,
so it is a multi-version suite.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../node-integration-tests/package.json       |   3 +
 .../suites/aws-serverless/bedrock/test.ts     |  16 +-
 .../tracing/mcp-handler-exact-once/test.ts    |   5 +-
 .../mcp-server/manual-instrumentation/test.ts |  16 +-
 .../suites/tracing/mcp-server/v1/test.ts      |  92 ++--
 .../suites/tracing/typesafe/test.ts           | 220 ++++----
 pnpm-lock.yaml                                | 480 ++++++++++--------
 7 files changed, 436 insertions(+), 396 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 691f60732c18..563b661fed20 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -27,6 +27,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "0.133.0",
     "@apollo/server": "^5.5.0",
+    "@aws-sdk/client-bedrock-runtime": "^3.1046.0",
     "@aws-sdk/client-dynamodb": "^3.1046.0",
     "@aws-sdk/client-kinesis": "^3.1146.0",
     "@aws-sdk/client-lambda": "^3.1046.0",
@@ -46,6 +47,7 @@
     "@langchain/openai": "^0.5.0",
     "@mistralai/mistralai": "3.3.0",
     "@modelcontextprotocol/client": "^2.0.0",
+    "@modelcontextprotocol/sdk": "1.32.2",
     "@modelcontextprotocol/server": "^2.0.0",
     "@nestjs/common": "^11",
     "@nestjs/core": "^11",
@@ -62,6 +64,7 @@
     "@types/mongodb": "^3.6.20",
     "@types/mysql": "^2.15.21",
     "@types/pg": "^8.6.5",
+    "@typesafe-ai/sdk": "^0.6.0",
     "ai": "^4.3.16",
     "amqplib": "^0.10.9",
     "body-parser": "^2.3.0",
diff --git a/dev-packages/node-integration-tests/suites/aws-serverless/bedrock/test.ts b/dev-packages/node-integration-tests/suites/aws-serverless/bedrock/test.ts
index 0a86d5232552..018326729159 100644
--- a/dev-packages/node-integration-tests/suites/aws-serverless/bedrock/test.ts
+++ b/dev-packages/node-integration-tests/suites/aws-serverless/bedrock/test.ts
@@ -57,15 +57,9 @@ describe('awsIntegration - Bedrock', () => {
     cleanupChildProcesses();
   });
 
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario.mjs',
-    'instrument.mjs',
-    (createTestRunner, test) => {
-      test('auto-instruments Bedrock Converse and InvokeModel', { timeout: 90_000 }, async () => {
-        await createTestRunner().ignore('event').expect({ span: assertBedrockSpans }).start().completed();
-      });
-    },
-    { additionalDependencies: { '@aws-sdk/client-bedrock-runtime': '^3.1046.0' } },
-  );
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createTestRunner, test) => {
+    test('auto-instruments Bedrock Converse and InvokeModel', { timeout: 90_000 }, async () => {
+      await createTestRunner().ignore('event').expect({ span: assertBedrockSpans }).start().completed();
+    });
+  });
 });
diff --git a/dev-packages/node-integration-tests/suites/tracing/mcp-handler-exact-once/test.ts b/dev-packages/node-integration-tests/suites/tracing/mcp-handler-exact-once/test.ts
index 61c403f602ce..341d26feea75 100644
--- a/dev-packages/node-integration-tests/suites/tracing/mcp-handler-exact-once/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/mcp-handler-exact-once/test.ts
@@ -34,9 +34,6 @@ describe.each(['v1', 'v2'])('MCP TypeScript SDK %s', sdk => {
         expect(root?.attributes['test.mcp.handlers_verified']).toEqual({ type: 'integer', value: 4 });
       });
     },
-    {
-      additionalDependencies: sdk === 'v1' ? { '@modelcontextprotocol/sdk': '1.30.0' } : undefined,
-      copyPaths: ['run.cjs'],
-    },
+    { copyPaths: ['run.cjs'] },
   );
 });
diff --git a/dev-packages/node-integration-tests/suites/tracing/mcp-server/manual-instrumentation/test.ts b/dev-packages/node-integration-tests/suites/tracing/mcp-server/manual-instrumentation/test.ts
index ecf2f6e2ef7c..be7a77eb0065 100644
--- a/dev-packages/node-integration-tests/suites/tracing/mcp-server/manual-instrumentation/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/mcp-server/manual-instrumentation/test.ts
@@ -73,15 +73,9 @@ describe('MCP server spans (streamed, manual instrumentation)', () => {
     });
   });
 
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-v1.mjs',
-    'instrument.mjs',
-    (createTestRunner, test) => {
-      test('captures an MCP v1 initialize request queued before transport start once', async () => {
-        await createTestRunner().unordered().expect({ span: assertInitializeSpan }).start().completed();
-      });
-    },
-    { additionalDependencies: { '@modelcontextprotocol/sdk': '1.30.0' } },
-  );
+  createEsmAndCjsTests(__dirname, 'scenario-v1.mjs', 'instrument.mjs', (createTestRunner, test) => {
+    test('captures an MCP v1 initialize request queued before transport start once', async () => {
+      await createTestRunner().unordered().expect({ span: assertInitializeSpan }).start().completed();
+    });
+  });
 });
diff --git a/dev-packages/node-integration-tests/suites/tracing/mcp-server/v1/test.ts b/dev-packages/node-integration-tests/suites/tracing/mcp-server/v1/test.ts
index 178858873426..2d0e427ddb36 100644
--- a/dev-packages/node-integration-tests/suites/tracing/mcp-server/v1/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/mcp-server/v1/test.ts
@@ -25,55 +25,49 @@ describe('MCP server spans (streamed, auto-instrumentation, v1)', () => {
     cleanupChildProcesses();
   });
 
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario.mjs',
-    'instrument.mjs',
-    (createTestRunner, test) => {
-      test('auto-instruments the initialize handshake', async () => {
-        await createTestRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const initialize = mcpSpan(container, 'initialize');
-              expect(initialize.name).toBe('initialize');
-              expect(initialize.attributes['sentry.origin']).toEqual({
-                type: 'string',
-                value: 'auto.function.mcp_server',
-              });
-            },
-          })
-          .start()
-          .completed();
-      });
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createTestRunner, test) => {
+    test('auto-instruments the initialize handshake', async () => {
+      await createTestRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const initialize = mcpSpan(container, 'initialize');
+            expect(initialize.name).toBe('initialize');
+            expect(initialize.attributes['sentry.origin']).toEqual({
+              type: 'string',
+              value: 'auto.function.mcp_server',
+            });
+          },
+        })
+        .start()
+        .completed();
+    });
 
-      test('auto-instruments a resource read', async () => {
-        await createTestRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const resource = mcpSpan(container, 'resources/read');
-              expect(resource.name).toBe('resources/read');
-              expect(resource.attributes['mcp.resource.uri']?.value).toBe('echo://foobar');
-            },
-          })
-          .start()
-          .completed();
-      });
+    test('auto-instruments a resource read', async () => {
+      await createTestRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const resource = mcpSpan(container, 'resources/read');
+            expect(resource.name).toBe('resources/read');
+            expect(resource.attributes['mcp.resource.uri']?.value).toBe('echo://foobar');
+          },
+        })
+        .start()
+        .completed();
+    });
 
-      test('auto-instruments a tool call', async () => {
-        await createTestRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const tool = mcpSpan(container, 'tools/call');
-              expect(tool.name).toBe('tools/call echo');
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    { additionalDependencies: { '@modelcontextprotocol/sdk': '1.30.0' } },
-  );
+    test('auto-instruments a tool call', async () => {
+      await createTestRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const tool = mcpSpan(container, 'tools/call');
+            expect(tool.name).toBe('tools/call echo');
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
 });
diff --git a/dev-packages/node-integration-tests/suites/tracing/typesafe/test.ts b/dev-packages/node-integration-tests/suites/tracing/typesafe/test.ts
index 0640f7282c7d..ab0b4b68bae2 100644
--- a/dev-packages/node-integration-tests/suites/tracing/typesafe/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/typesafe/test.ts
@@ -24,135 +24,113 @@ describe('TypeSafe integration', () => {
     ['automatic', 'scenario.mjs', 'instrument.mjs', 'instrument-no-recording.mjs'],
     ['manual', 'scenario-manual.mjs', 'instrument-manual.mjs', 'instrument-manual-no-recording.mjs'],
   ])('%s instrumentation', (_, scenarioFile, instrumentFile, noRecordingInstrumentFile) => {
-    createEsmAndCjsTests(
-      __dirname,
-      scenarioFile,
-      instrumentFile,
-      (createRunner, test) => {
-        test('creates decide spans for systemOne', async () => {
-          await createRunner()
-            .unordered()
-            .expect({
-              span: container => {
-                const decideSpans = container.items.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_DECIDE);
-                expect(decideSpans).toHaveLength(4);
-                for (const span of decideSpans) {
-                  expect(span.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.typesafe');
-                  expect(span.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('decide');
-                  expect(span.attributes[GEN_AI_PROVIDER_NAME]?.value).toBe('typesafe');
-                }
+    createEsmAndCjsTests(__dirname, scenarioFile, instrumentFile, (createRunner, test) => {
+      test('creates decide spans for systemOne', async () => {
+        await createRunner()
+          .unordered()
+          .expect({
+            span: container => {
+              const decideSpans = container.items.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_DECIDE);
+              expect(decideSpans).toHaveLength(4);
+              for (const span of decideSpans) {
+                expect(span.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.typesafe');
+                expect(span.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('decide');
+                expect(span.attributes[GEN_AI_PROVIDER_NAME]?.value).toBe('typesafe');
+              }
 
-                const defaultModelSpan = decideSpans.find(span => span.name === 'decide jev-latest')!;
-                expect(defaultModelSpan).toBeDefined();
-                expect(defaultModelSpan.status).toBe('ok');
-                expect(defaultModelSpan.attributes[GEN_AI_REQUEST_MODEL]?.value).toBe('jev-latest');
-                expect(defaultModelSpan.attributes[GEN_AI_RESPONSE_MODEL]?.value).toBe('jev-1.13.0');
-                expect(defaultModelSpan.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBe(275);
-                expect(defaultModelSpan.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBe(20);
-                expect(defaultModelSpan.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBe(295);
-                expect(JSON.parse(defaultModelSpan.attributes[GEN_AI_INPUT_MESSAGES]?.value as string)).toEqual([
-                  {
-                    type: 'evaluation',
-                    state: 'I cannot log in, and I also want a refund for last month.',
-                    questions: {
-                      authIssue: { type: 'noul', instructions: 'Is there a login problem?' },
-                      department: {
-                        type: 'choice',
-                        instructions: 'Which team should handle this?',
-                        criteria: { billing: 'Charges and refunds', technical: 'Bugs and outages' },
-                      },
-                      urgency: {
-                        type: 'score',
-                        instructions: 'How urgent is this ticket?',
-                        criteria: ['low', 'medium', 'high'],
-                      },
+              const defaultModelSpan = decideSpans.find(span => span.name === 'decide jev-latest')!;
+              expect(defaultModelSpan).toBeDefined();
+              expect(defaultModelSpan.status).toBe('ok');
+              expect(defaultModelSpan.attributes[GEN_AI_REQUEST_MODEL]?.value).toBe('jev-latest');
+              expect(defaultModelSpan.attributes[GEN_AI_RESPONSE_MODEL]?.value).toBe('jev-1.13.0');
+              expect(defaultModelSpan.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBe(275);
+              expect(defaultModelSpan.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBe(20);
+              expect(defaultModelSpan.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBe(295);
+              expect(JSON.parse(defaultModelSpan.attributes[GEN_AI_INPUT_MESSAGES]?.value as string)).toEqual([
+                {
+                  type: 'evaluation',
+                  state: 'I cannot log in, and I also want a refund for last month.',
+                  questions: {
+                    authIssue: { type: 'noul', instructions: 'Is there a login problem?' },
+                    department: {
+                      type: 'choice',
+                      instructions: 'Which team should handle this?',
+                      criteria: { billing: 'Charges and refunds', technical: 'Bugs and outages' },
+                    },
+                    urgency: {
+                      type: 'score',
+                      instructions: 'How urgent is this ticket?',
+                      criteria: ['low', 'medium', 'high'],
                     },
                   },
-                ]);
-                expect(JSON.parse(defaultModelSpan.attributes[GEN_AI_OUTPUT_MESSAGES]?.value as string)).toEqual([
-                  {
-                    type: 'evaluation',
-                    answers: {
-                      authIssue: { type: 'noul', noul: 0.98 },
-                      department: {
-                        type: 'choice',
-                        choice: 'billing',
-                        confidence: 0.28,
-                        probabilities: { billing: 0.64, technical: 0.36 },
-                      },
-                      urgency: {
-                        type: 'score',
-                        score: 1.58,
-                        confidence: 0.9,
-                        legend: { 0: 'low', 1: 'medium', 2: 'high' },
-                        probabilities: { 0: 0, 1: 0.42, 2: 0.58 },
-                      },
+                },
+              ]);
+              expect(JSON.parse(defaultModelSpan.attributes[GEN_AI_OUTPUT_MESSAGES]?.value as string)).toEqual([
+                {
+                  type: 'evaluation',
+                  answers: {
+                    authIssue: { type: 'noul', noul: 0.98 },
+                    department: {
+                      type: 'choice',
+                      choice: 'billing',
+                      confidence: 0.28,
+                      probabilities: { billing: 0.64, technical: 0.36 },
+                    },
+                    urgency: {
+                      type: 'score',
+                      score: 1.58,
+                      confidence: 0.9,
+                      legend: { 0: 'low', 1: 'medium', 2: 'high' },
+                      probabilities: { 0: 0, 1: 0.42, 2: 0.58 },
                     },
                   },
-                ]);
+                },
+              ]);
 
-                const asResponseSpan = decideSpans.find(span => span.name === 'decide jev-1.13')!;
-                expect(asResponseSpan).toBeDefined();
-                expect(asResponseSpan.status).toBe('ok');
-                expect(asResponseSpan.attributes[GEN_AI_RESPONSE_MODEL]?.value).toBe('jev-1.13.0');
+              const asResponseSpan = decideSpans.find(span => span.name === 'decide jev-1.13')!;
+              expect(asResponseSpan).toBeDefined();
+              expect(asResponseSpan.status).toBe('ok');
+              expect(asResponseSpan.attributes[GEN_AI_RESPONSE_MODEL]?.value).toBe('jev-1.13.0');
 
-                const errorSpan = decideSpans.find(span => span.name === 'decide error-model')!;
-                expect(errorSpan).toBeDefined();
-                expect(errorSpan.status).toBe('error');
-                expect(errorSpan.attributes[GEN_AI_RESPONSE_MODEL]).toBeUndefined();
-                expect(errorSpan.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
+              const errorSpan = decideSpans.find(span => span.name === 'decide error-model')!;
+              expect(errorSpan).toBeDefined();
+              expect(errorSpan.status).toBe('error');
+              expect(errorSpan.attributes[GEN_AI_RESPONSE_MODEL]).toBeUndefined();
+              expect(errorSpan.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
 
-                const validationErrorSpan = decideSpans.find(span => span.name === 'decide validation-error')!;
-                expect(validationErrorSpan).toBeDefined();
-                expect(validationErrorSpan.status).toBe('error');
-                expect(validationErrorSpan.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
-              },
-            })
-            .start()
-            .completed();
-        });
-      },
-      {
-        additionalDependencies: {
-          '@typesafe-ai/sdk': '^0.6.0',
-        },
-      },
-    );
+              const validationErrorSpan = decideSpans.find(span => span.name === 'decide validation-error')!;
+              expect(validationErrorSpan).toBeDefined();
+              expect(validationErrorSpan.status).toBe('error');
+              expect(validationErrorSpan.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
+            },
+          })
+          .start()
+          .completed();
+      });
+    });
 
-    createEsmAndCjsTests(
-      __dirname,
-      scenarioFile,
-      noRecordingInstrumentFile,
-      (createRunner, test) => {
-        test('does not record inputs or outputs when recording is off', async () => {
-          await createRunner()
-            .unordered()
-            .expect({
-              span: container => {
-                const decideSpans = container.items.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_DECIDE);
-                expect(decideSpans).toHaveLength(4);
-                expect(decideSpans.filter(span => span.status === 'error')).toHaveLength(2);
-                for (const span of decideSpans) {
-                  expect(span.attributes[GEN_AI_INPUT_MESSAGES]).toBeUndefined();
-                  expect(span.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
-                  // State, questions and answers must not come back through another attribute (e.g. an error message).
-                  // Only the attributes are checked (timestamps could match a number), and `probabilities` only
-                  // occurs in answers.
-                  expect(JSON.stringify(span.attributes)).not.toMatch(
-                    /cannot log in|Charges and refunds|probabilities/,
-                  );
-                }
-              },
-            })
-            .start()
-            .completed();
-        });
-      },
-      {
-        additionalDependencies: {
-          '@typesafe-ai/sdk': '^0.6.0',
-        },
-      },
-    );
+    createEsmAndCjsTests(__dirname, scenarioFile, noRecordingInstrumentFile, (createRunner, test) => {
+      test('does not record inputs or outputs when recording is off', async () => {
+        await createRunner()
+          .unordered()
+          .expect({
+            span: container => {
+              const decideSpans = container.items.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_DECIDE);
+              expect(decideSpans).toHaveLength(4);
+              expect(decideSpans.filter(span => span.status === 'error')).toHaveLength(2);
+              for (const span of decideSpans) {
+                expect(span.attributes[GEN_AI_INPUT_MESSAGES]).toBeUndefined();
+                expect(span.attributes[GEN_AI_OUTPUT_MESSAGES]).toBeUndefined();
+                // State, questions and answers must not come back through another attribute (e.g. an error message).
+                // Only the attributes are checked (timestamps could match a number), and `probabilities` only
+                // occurs in answers.
+                expect(JSON.stringify(span.attributes)).not.toMatch(/cannot log in|Charges and refunds|probabilities/);
+              }
+            },
+          })
+          .start()
+          .completed();
+      });
+    });
   });
 });
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4a44921bc39b..f0fecf4b4ca2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -462,7 +462,7 @@ importers:
         version: 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
       '@langchain/openai':
         specifier: ^1.6.2
-        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.84)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)
+        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.90)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)
       '@langchain/typesafe':
         specifier: ^0.0.2
         version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))
@@ -580,6 +580,9 @@ importers:
       '@apollo/server':
         specifier: ^5.5.0
         version: 5.5.0(graphql@16.12.0)(supports-color@10.0.0)
+      '@aws-sdk/client-bedrock-runtime':
+        specifier: ^3.1046.0
+        version: 3.1159.0
       '@aws-sdk/client-dynamodb':
         specifier: ^3.1046.0
         version: 3.1068.0
@@ -637,6 +640,9 @@ importers:
       '@modelcontextprotocol/client':
         specifier: ^2.0.0
         version: 2.0.0
+      '@modelcontextprotocol/sdk':
+        specifier: 1.32.2
+        version: 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
       '@modelcontextprotocol/server':
         specifier: ^2.0.0
         version: 2.0.0
@@ -685,6 +691,9 @@ importers:
       '@types/pg':
         specifier: ^8.6.5
         version: 8.20.0
+      '@typesafe-ai/sdk':
+        specifier: ^0.6.0
+        version: 0.6.0
       ai:
         specifier: ^4.3.16
         version: 4.3.16(react@18.3.1)(zod@4.6.7)
@@ -2946,6 +2955,10 @@ packages:
     resolution: {integrity: sha512-zOXUUnilC6lgCsQtp77p/QNPmRlTES9Xi6tlDwbR6kfC/kz5PCzZckgHWm5z+8DskdwuMAbFDq61x3zr10GEEQ==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/client-bedrock-runtime@3.1159.0':
+    resolution: {integrity: sha512-Zj744tR9wNs+jjvb7C8zDBDxjJhGJSMwIHnOc9zdsDdrRirai4CtR5iQ5BMP1qfazjH6jYKCxGpZC1BOUnslKg==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/client-cognito-identity@3.980.0':
     resolution: {integrity: sha512-nLgMW2drTzv+dTo3ORCcotQPcrUaTQ+xoaDTdSaUXdZO7zbbVyk7ysE5GDTnJdZWcUjHOSB8xfNQhOTTNVPhFw==}
     engines: {node: '>=20.0.0'}
@@ -2986,44 +2999,44 @@ packages:
     resolution: {integrity: sha512-hatCfVf61RsSO5Qjrf7JKln4KiPDprXNJhpx9DNOmyeW1v+i7KNhbawk4d1wAnQ72YciOfhAhyRFec6UZqcnzQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/core@3.978.1':
-    resolution: {integrity: sha512-LbY9aGsEiznDWmUc30Nwv3aIX/+dbwTx8KfS0yOC3NPYMO+O91e6jkT1azf34FwjOndq8/Q+RcVVZz5xnerwdg==}
+  '@aws-sdk/core@3.978.7':
+    resolution: {integrity: sha512-QsYdn5xhvEBzcDC6bgKuvPv87kFtXK/3f5NqKfR+eok5AAn7RaZnkgBKncX+UW3ZMcjSELyAMATN0iqgZmvWVg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-provider-cognito-identity@3.972.3':
     resolution: {integrity: sha512-dW/DqTk90XW7hIngqntAVtJJyrkS51wcLhGz39lOMe0TlSmZl+5R/UGnAZqNbXmWuJHLzxe+MLgagxH41aTsAQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-env@3.972.72':
-    resolution: {integrity: sha512-xTKO/FWJPozTIXbozVnVGoNBhaGba8TBcx+KyUjRVeOlXE+dUc7GTR1cLvu0uTdIdmemzaFbqqCshXeZA1fZew==}
+  '@aws-sdk/credential-provider-env@3.972.78':
+    resolution: {integrity: sha512-d8V47OxkM/FKe7bVfk5Rga4aNGUaQNk3ip1PFIYhxtup9r8SuNIHLs4HfBAmHT25ZbzowluMHp833UXfFMQbhA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-http@3.972.74':
-    resolution: {integrity: sha512-u91E/hT8f4d1xy0Jl7VG4nVKJ3lxbrZkoBTeSVoJdWBiSEUMwMS/9+e0H/aJVQV//Lt5wuzP+E69v4aRSsNTmw==}
+  '@aws-sdk/credential-provider-http@3.972.80':
+    resolution: {integrity: sha512-OQqanXiRhnl/wBIJc3TtA7TYmnN7VO0mP95eVoHsLXtPwHz6HeccMpi7cqtnhHw+K7p6VIoAt2IK4M9Ixd9uGg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-ini@3.973.17':
-    resolution: {integrity: sha512-ged4KXdBkvIC81bLvNHHuQKdKak/VXhQTR1NWYTTqW0474nlmsxy9O/vlgTIohDDWH3xpBdtVMZRyjb+DnocDA==}
+  '@aws-sdk/credential-provider-ini@3.973.23':
+    resolution: {integrity: sha512-pTTRK7xoi8NNbrcjVUSd9YdMTUxiWEPfk8newBQCzV+VS5STh5sDPAy3iO29fSqipqNuCpILJcD6wAawxHvG+w==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-login@3.972.79':
-    resolution: {integrity: sha512-L+Z85anONJd8MaiuraO4wRxATCdEejBZ3K3eymzWI5JPXa9sOS9CkIm72PBKqXKX+Z9p9NGMX5AIMXm0LEflgw==}
+  '@aws-sdk/credential-provider-login@3.972.85':
+    resolution: {integrity: sha512-UHjnTeS+5OBFfRL+BQwCGJPJvnzjhGD6dIwncBJDa+ziyQjPUte9Q0I4BCkybGrHotnyiiluXj13bgelP14J5Q==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-node@3.972.84':
-    resolution: {integrity: sha512-oHt854odINVwzwsh+c5x69j0ajm4DbqqqVJ+O1ECsCIZeMDAbzFpXItaqP7UZstJj/ATdTk/KFSH0LaNAgV+kA==}
+  '@aws-sdk/credential-provider-node@3.972.90':
+    resolution: {integrity: sha512-+McgOQuAUze95AumVmoOBRp++Z8IjsZ0qOASb6+igHdKNzA0FiIf5kbTFaZ64txfd9KTBDpgvlEDGQE41lSq/A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-process@3.972.72':
-    resolution: {integrity: sha512-rLIp2xbMjX/k9/od7APpqq1ZgXXnV0pOL1Th3ZsL8Wu0TRtBsDTVS8iPqcfRFcHakFxPvR04OSTv2ka2qOb/2A==}
+  '@aws-sdk/credential-provider-process@3.972.78':
+    resolution: {integrity: sha512-bzB92SriflYf6LVRJcDv/a9I87tmkdmdE8hAqT1oRGKFkEH2rxxHeHZVK/4vsiRsFi44cUj0J9+bUSmqYX+26w==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-sso@3.973.16':
-    resolution: {integrity: sha512-IGihaJfFZYacJJr/odqILCoK7W/mvrZ7cuK7ECn3sAu4vLC6u0V8bS7mCGbdugJ8Aum2tnvqmx0F2MRFp2rn9g==}
+  '@aws-sdk/credential-provider-sso@3.973.22':
+    resolution: {integrity: sha512-MXUkWHgcf6G+TowL+QPvn4kJTEYKd9qHKMV6eNGXSA5lilDgGRrP3EXPHChZ3eZ7z+oprn/ZvOovLoS2WR3D8g==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-web-identity@3.972.78':
-    resolution: {integrity: sha512-/y9WvNtlcPBGLR0qc1a+9J/xtYZfVczvLUOuXaVWylzttH7ewsxwHtjmiJSolNrVSDorIxHGHMU61CbonRkmwA==}
+  '@aws-sdk/credential-provider-web-identity@3.972.84':
+    resolution: {integrity: sha512-6I3zYcDHt5ZM0J4gEuRgCHgN505k5haUiiPM46iIQgrHm2p70zpnssHFVYqHYfgJe3Mf+a5+nsF3BZmW4xcZNg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-providers@3.983.0':
@@ -3038,10 +3051,18 @@ packages:
     resolution: {integrity: sha512-LkwS3ZOUNL5kHzmz3dDx8lE3HOhZmf2VGjbJ/tMUZJYWWl3J0RJTZM7RFz1MLt06WDVvlShcAjY/RzhYlqLL7g==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/eventstream-handler-node@3.972.39':
+    resolution: {integrity: sha512-V+AvQ+KFWApgm9134igy78cgoCEAFfV8K3KmlVi511vjkRWAgvy0tGUePrZsER+9EvrmUWEsrA2NBQspiGVBMQ==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/middleware-endpoint-discovery@3.972.18':
     resolution: {integrity: sha512-1vKJt/6MBB/MBMRM3qzCMdW70syJY8u2DH+dq7yCnPn7wVJmyeAzAa/sK1lIbbYh8BVLbM5FspsT4zbe885gOw==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/middleware-eventstream@3.972.35':
+    resolution: {integrity: sha512-JAyjfoYxHCXNnCXtbTviEpb1+gxe8tsWQ3URwZIT1Bqhrm4fgDDuCA72n4HVnHMNutBhZLXnYgc97ehkhfGpMA==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/middleware-flexible-checksums@3.974.30':
     resolution: {integrity: sha512-OaIhub+3yTgfFWPzKO8OzOZFIMUoJaiS5v67y3spQg7SoULGoMx4jKVBbE+uhnzkiZXQ+rEDS0RqrK4/aD1yJw==}
     engines: {node: '>=20.0.0'}
@@ -3070,28 +3091,32 @@ packages:
     resolution: {integrity: sha512-iz+B29TXcAZsJpwB+AwG/TTGA5l/VnmMZ2UxtiySOZjI6gCdmviXPwdgzcmuazMy16rXoPY4mYCGe7zdNKfx5A==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/middleware-websocket@3.972.60':
+    resolution: {integrity: sha512-IgxzXK1c0r/2yjC/qJc06OZPzQ3FSxuIc/Au6chqMb0H60k1+sHIOgjcqsxl1BxUTGQr//BU5A3niytx0IvICA==}
+    engines: {node: '>= 14.0.0'}
+
   '@aws-sdk/nested-clients@3.983.0':
     resolution: {integrity: sha512-4bUzDkJlSPwfegO23ZSBrheuTI8UyAgNzptm1K6fZAIOIc1vnFl12TonecbssAfmM0/UdyTn5QDomwEfIdmJkQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/nested-clients@3.997.46':
-    resolution: {integrity: sha512-oRxtBcka/JGHGs9l9p9IVajGoTP8vTPmoAzdHGy4Qcy9P5vPnDf6nhIeM/COQNY9k/OahImTRaLkHftoXvfcmQ==}
+  '@aws-sdk/nested-clients@3.997.52':
+    resolution: {integrity: sha512-/bNl6b3VEoWQg3Z8yHt3gzYjSFoOOv7+eUglzITmGP8H7jovN8c9NoOI+6bU25+lSLvyRpJOs4n8YSaX+BcUPg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/region-config-resolver@3.972.13':
     resolution: {integrity: sha512-CvJ2ZIjK/jVD/lbOpowBVElJyC1YxLTIJ13yM0AEo0t2v7swOzGjSA6lJGH+DwZXQhcjUjoYwc8bVYCX5MDr1A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/signature-v4-multi-region@3.996.47':
-    resolution: {integrity: sha512-Zk08macMvQTHzQJCLJVkOlviVoqwYMrpXv4lmLN7b7sAbiMoOK7Go0NYdR5UeF+MW8LIbRmwrNy9u/5VvX1U5g==}
+  '@aws-sdk/signature-v4-multi-region@3.996.50':
+    resolution: {integrity: sha512-Ob9GCZ3YnGPws696zTYW/rLFYHa9QLh6DgTCnkHb+0jhHNBgHWM8Ui2b+yrIjkfDsRVsglyrOey6tOOG/VWxMA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/token-providers@3.1138.0':
-    resolution: {integrity: sha512-GpyAr0DD63YOEmYFM6Df+gJuIgC92MMTiBK4FTKfxii5MJ9ge20epR7LyroulscYlG89J+ZB2ivFDPjvfQhzdw==}
+  '@aws-sdk/token-providers@3.1159.0':
+    resolution: {integrity: sha512-IJvghXXcEpqTWGjrjJwxBdEecHeXp+t9FaybRf8Zf0wYW84KN1snXBsYOdfDBBx78ChwfJxH8KIHqmhNZuDLcw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/types@3.974.6':
-    resolution: {integrity: sha512-v/clNZzZnDxGyvpHMOGpJKVXFAExJzUNAAjaWGdcx8QAcXLGwTaOkw33p5SHAi0YAioK32xB3hWwOekRVfmfKg==}
+  '@aws-sdk/types@3.975.0':
+    resolution: {integrity: sha512-WQlhs6juByzWOzj5fwxOx0mPJaEqMcG/sDpl3Id61B3XhKE63xY+0QWcnG+sWR/sCfprmreyUo1lM7IKZmHMzw==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/util-endpoints@3.980.0':
@@ -3122,8 +3147,8 @@ packages:
       aws-crt:
         optional: true
 
-  '@aws-sdk/xml-builder@3.972.41':
-    resolution: {integrity: sha512-ctjVSyCMegrWfXlx6VqzSBFI6UqmQ5ZlnfMhdLIiWmhoH8UAQxSCP5N3OpG7X3k4LnS7ou74C4mt20+bfTW2aQ==}
+  '@aws-sdk/xml-builder@3.972.42':
+    resolution: {integrity: sha512-smX8/gNP8Kjq+CWTBMZQLQ912vOQjiWExzwzvMO+eujPB5RY8IbtF0AGdUUXHKN7KoDWK9dIcuW0WG269kiP6w==}
     engines: {node: '>=20.0.0'}
 
   '@aws/lambda-invoke-store@0.2.3':
@@ -8326,8 +8351,8 @@ packages:
     resolution: {integrity: sha512-TzDZcAnhTyAHbXVxWZo7/tEcrIeFq20IBk8So3OLOetWpR8EwY/yEqBMBFaJMeyEiREDq4NfEl+qO3OAUD+vbQ==}
     engines: {node: '>=18.0.0'}
 
-  '@smithy/core@3.35.2':
-    resolution: {integrity: sha512-ejTukBuP/Pg3t9N8Ux+0zKsXeHWm7p6W3HbXFOyltKasSxZwCFmvTut7kBdZSCF3m9y1bXXyVu6p2xuMFcsTyQ==}
+  '@smithy/core@3.37.0':
+    resolution: {integrity: sha512-97imTcCyiPd8k0e9+ts/Sp0W65Dn9Ti357J7M09Ov4tI8Q1JDJVFSoAJtjEVKqfHEr3Pdo2jfolqKCaaiszH0g==}
     engines: {node: '>=18.0.0'}
 
   '@smithy/credential-provider-imds@4.5.2':
@@ -8382,6 +8407,10 @@ packages:
     resolution: {integrity: sha512-ThMkboGeONWXAelq9FvGsuJC4rOi+qyC4/zhUF58xYpxUg5sQKx2VXZYJmtNjr4dSuBJ1HeJXETQILCz3wOHvw==}
     engines: {node: '>=18.0.0'}
 
+  '@smithy/node-http-handler@4.13.0':
+    resolution: {integrity: sha512-/GGcPoNJ2nzGytdAanpbx7mpp9Coa8LP+/Rpmbktr8YeLuIXs9B0SEz+X3AeonHdyzOIFJdKbN7jOZ+Tj+pMGw==}
+    engines: {node: '>=18.0.0'}
+
   '@smithy/property-provider@4.2.14':
     resolution: {integrity: sha512-WuM31CgfsnQ/10i7NYr0PyxqknD72Y5uMfUMVSniPjbEPceiTErb4eIqJQ+pdxNEAUEWrewrGjIRjVbVHsxZiQ==}
     engines: {node: '>=18.0.0'}
@@ -9075,6 +9104,10 @@ packages:
   '@types/yargs@15.0.19':
     resolution: {integrity: sha512-2XUaGVmyQjgyAZldf0D0c14vvo/yv0MhQBSTJcejMMaitsn3nxCB6TmH4G0ZQf+uxROOa9mpanoSm8h6SG/1ZA==}
 
+  '@typesafe-ai/sdk@0.6.0':
+    resolution: {integrity: sha512-IddX+Q0XM+VagOUZFeP7wZjaO4SHMdvnh2zEBdrZZnXedWI3BNK1lKhMx3ayrkFWvVLbVcUHJy6AVZlY+e6Jaw==}
+    engines: {node: '>=20'}
+
   '@typescript-eslint/eslint-plugin@5.62.0':
     resolution: {integrity: sha512-TiZzBSJja/LbhNPvk6yc0JrX9XqhQ0hdh6M2svYfsHGejaKFIAGd9MQ+ERIMzLGlN/kZoYIgdxFV0PuljTKXag==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -20210,20 +20243,20 @@ snapshots:
   '@aws-crypto/crc32@5.2.0':
     dependencies:
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       tslib: 2.8.1
 
   '@aws-crypto/crc32c@5.2.0':
     dependencies:
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       tslib: 2.8.1
 
   '@aws-crypto/sha1-browser@5.2.0':
     dependencies:
       '@aws-crypto/supports-web-crypto': 5.2.0
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-locate-window': 3.535.0
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
@@ -20233,7 +20266,7 @@ snapshots:
       '@aws-crypto/sha256-js': 5.2.0
       '@aws-crypto/supports-web-crypto': 5.2.0
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-locate-window': 3.535.0
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
@@ -20241,7 +20274,7 @@ snapshots:
   '@aws-crypto/sha256-js@5.2.0':
     dependencies:
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       tslib: 2.8.1
 
   '@aws-crypto/supports-web-crypto@5.2.0':
@@ -20250,7 +20283,7 @@ snapshots:
 
   '@aws-crypto/util@5.2.0':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
 
@@ -20259,9 +20292,24 @@ snapshots:
       '@aws-crypto/crc32': 5.2.0
       '@aws-crypto/crc32c': 5.2.0
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
+  '@aws-sdk/client-bedrock-runtime@3.1159.0':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/eventstream-handler-node': 3.972.39
+      '@aws-sdk/middleware-eventstream': 3.972.35
+      '@aws-sdk/middleware-websocket': 3.972.60
+      '@aws-sdk/token-providers': 3.1159.0
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/fetch-http-handler': 5.8.0
+      '@smithy/node-http-handler': 4.13.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20269,19 +20317,19 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
       '@aws-sdk/middleware-user-agent': 3.972.38
       '@aws-sdk/region-config-resolver': 3.972.13
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.980.0
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20314,19 +20362,19 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
       '@aws-sdk/middleware-user-agent': 3.972.38
       '@aws-sdk/region-config-resolver': 3.972.13
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.983.0
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20359,12 +20407,12 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@aws-sdk/dynamodb-codec': 3.973.20
       '@aws-sdk/middleware-endpoint-discovery': 3.972.18
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20372,10 +20420,10 @@ snapshots:
 
   '@aws-sdk/client-kinesis@3.1146.0':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20385,10 +20433,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20399,13 +20447,13 @@ snapshots:
       '@aws-crypto/sha1-browser': 5.2.0
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@aws-sdk/middleware-flexible-checksums': 3.974.30
       '@aws-sdk/middleware-sdk-s3': 3.972.51
-      '@aws-sdk/signature-v4-multi-region': 3.996.47
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20415,10 +20463,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20428,10 +20476,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20441,10 +20489,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20454,22 +20502,22 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@aws-sdk/middleware-sdk-sqs': 3.972.30
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/core@3.978.1':
+  '@aws-sdk/core@3.978.7':
     dependencies:
-      '@aws-sdk/types': 3.974.6
-      '@aws-sdk/xml-builder': 3.972.41
+      '@aws-sdk/types': 3.975.0
+      '@aws-sdk/xml-builder': 3.972.42
       '@aws/lambda-invoke-store': 0.3.0
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/signature-v4': 5.7.4
       '@smithy/types': 4.19.0
       bowser: 2.11.0
@@ -20478,7 +20526,7 @@ snapshots:
   '@aws-sdk/credential-provider-cognito-identity@3.972.3':
     dependencies:
       '@aws-sdk/client-cognito-identity': 3.980.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/property-provider': 4.2.14
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -20486,107 +20534,107 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/credential-provider-env@3.972.72':
+  '@aws-sdk/credential-provider-env@3.972.78':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-http@3.972.74':
+  '@aws-sdk/credential-provider-http@3.972.80':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.13.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-ini@3.973.17':
-    dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/credential-provider-env': 3.972.72
-      '@aws-sdk/credential-provider-http': 3.972.74
-      '@aws-sdk/credential-provider-login': 3.972.79
-      '@aws-sdk/credential-provider-process': 3.972.72
-      '@aws-sdk/credential-provider-sso': 3.973.16
-      '@aws-sdk/credential-provider-web-identity': 3.972.78
-      '@aws-sdk/nested-clients': 3.997.46
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+  '@aws-sdk/credential-provider-ini@3.973.23':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-env': 3.972.78
+      '@aws-sdk/credential-provider-http': 3.972.80
+      '@aws-sdk/credential-provider-login': 3.972.85
+      '@aws-sdk/credential-provider-process': 3.972.78
+      '@aws-sdk/credential-provider-sso': 3.973.22
+      '@aws-sdk/credential-provider-web-identity': 3.972.84
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-login@3.972.79':
+  '@aws-sdk/credential-provider-login@3.972.85':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/nested-clients': 3.997.46
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-node@3.972.84':
+  '@aws-sdk/credential-provider-node@3.972.90':
     dependencies:
-      '@aws-sdk/credential-provider-env': 3.972.72
-      '@aws-sdk/credential-provider-http': 3.972.74
-      '@aws-sdk/credential-provider-ini': 3.973.17
-      '@aws-sdk/credential-provider-process': 3.972.72
-      '@aws-sdk/credential-provider-sso': 3.973.16
-      '@aws-sdk/credential-provider-web-identity': 3.972.78
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/credential-provider-env': 3.972.78
+      '@aws-sdk/credential-provider-http': 3.972.80
+      '@aws-sdk/credential-provider-ini': 3.973.23
+      '@aws-sdk/credential-provider-process': 3.972.78
+      '@aws-sdk/credential-provider-sso': 3.973.22
+      '@aws-sdk/credential-provider-web-identity': 3.972.84
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-process@3.972.72':
+  '@aws-sdk/credential-provider-process@3.972.78':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-sso@3.973.16':
+  '@aws-sdk/credential-provider-sso@3.973.22':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/nested-clients': 3.997.46
-      '@aws-sdk/token-providers': 3.1138.0
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/token-providers': 3.1159.0
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-web-identity@3.972.78':
+  '@aws-sdk/credential-provider-web-identity@3.972.84':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/nested-clients': 3.997.46
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/credential-providers@3.983.0':
     dependencies:
       '@aws-sdk/client-cognito-identity': 3.983.0
-      '@aws-sdk/core': 3.978.1
+      '@aws-sdk/core': 3.978.7
       '@aws-sdk/credential-provider-cognito-identity': 3.972.3
-      '@aws-sdk/credential-provider-env': 3.972.72
-      '@aws-sdk/credential-provider-http': 3.972.74
-      '@aws-sdk/credential-provider-ini': 3.973.17
-      '@aws-sdk/credential-provider-login': 3.972.79
-      '@aws-sdk/credential-provider-node': 3.972.84
-      '@aws-sdk/credential-provider-process': 3.972.72
-      '@aws-sdk/credential-provider-sso': 3.973.16
-      '@aws-sdk/credential-provider-web-identity': 3.972.78
+      '@aws-sdk/credential-provider-env': 3.972.78
+      '@aws-sdk/credential-provider-http': 3.972.80
+      '@aws-sdk/credential-provider-ini': 3.973.23
+      '@aws-sdk/credential-provider-login': 3.972.85
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/credential-provider-process': 3.972.78
+      '@aws-sdk/credential-provider-sso': 3.973.22
+      '@aws-sdk/credential-provider-web-identity': 3.972.84
       '@aws-sdk/nested-clients': 3.983.0
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/node-config-provider': 4.3.14
       '@smithy/property-provider': 4.2.14
@@ -20598,8 +20646,8 @@ snapshots:
 
   '@aws-sdk/dynamodb-codec@3.973.20':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20608,11 +20656,25 @@ snapshots:
       mnemonist: 0.38.3
       tslib: 2.8.1
 
+  '@aws-sdk/eventstream-handler-node@3.972.39':
+    dependencies:
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@aws-sdk/middleware-endpoint-discovery@3.972.18':
     dependencies:
       '@aws-sdk/endpoint-cache': 3.972.7
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
+  '@aws-sdk/middleware-eventstream@3.972.35':
+    dependencies:
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20623,7 +20685,7 @@ snapshots:
 
   '@aws-sdk/middleware-host-header@3.972.10':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -20631,14 +20693,14 @@ snapshots:
 
   '@aws-sdk/middleware-logger@3.972.10':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
     optional: true
 
   '@aws-sdk/middleware-recursion-detection@3.972.11':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws/lambda-invoke-store': 0.2.3
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
@@ -20647,48 +20709,58 @@ snapshots:
 
   '@aws-sdk/middleware-sdk-s3@3.972.51':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/signature-v4-multi-region': 3.996.47
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/middleware-sdk-sqs@3.972.30':
     dependencies:
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/middleware-user-agent@3.972.38':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.996.8
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
       '@smithy/util-retry': 4.3.8
       tslib: 2.8.1
     optional: true
 
+  '@aws-sdk/middleware-websocket@3.972.60':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/fetch-http-handler': 5.8.0
+      '@smithy/signature-v4': 5.7.4
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@aws-sdk/nested-clients@3.983.0':
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.1
+      '@aws-sdk/core': 3.978.7
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
       '@aws-sdk/middleware-user-agent': 3.972.38
       '@aws-sdk/region-config-resolver': 3.972.13
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.983.0
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20717,50 +20789,50 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/nested-clients@3.997.46':
+  '@aws-sdk/nested-clients@3.997.52':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/signature-v4-multi-region': 3.996.47
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.13.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/region-config-resolver@3.972.13':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/config-resolver': 4.4.17
       '@smithy/node-config-provider': 4.3.14
       '@smithy/types': 4.19.0
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/signature-v4-multi-region@3.996.47':
+  '@aws-sdk/signature-v4-multi-region@3.996.50':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/signature-v4': 5.7.4
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/token-providers@3.1138.0':
+  '@aws-sdk/token-providers@3.1159.0':
     dependencies:
-      '@aws-sdk/core': 3.978.1
-      '@aws-sdk/nested-clients': 3.997.46
-      '@aws-sdk/types': 3.974.6
-      '@smithy/core': 3.35.2
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/types@3.974.6':
+  '@aws-sdk/types@3.975.0':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/util-endpoints@3.980.0':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/types': 4.19.0
       '@smithy/url-parser': 4.2.14
       '@smithy/util-endpoints': 3.4.2
@@ -20769,7 +20841,7 @@ snapshots:
 
   '@aws-sdk/util-endpoints@3.983.0':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/types': 4.19.0
       '@smithy/url-parser': 4.2.14
       '@smithy/util-endpoints': 3.4.2
@@ -20778,7 +20850,7 @@ snapshots:
 
   '@aws-sdk/util-endpoints@3.996.8':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/types': 4.19.0
       '@smithy/url-parser': 4.2.14
       '@smithy/util-endpoints': 3.4.2
@@ -20791,7 +20863,7 @@ snapshots:
 
   '@aws-sdk/util-user-agent-browser@3.972.10':
     dependencies:
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/types': 4.19.0
       bowser: 2.11.0
       tslib: 2.8.1
@@ -20800,14 +20872,14 @@ snapshots:
   '@aws-sdk/util-user-agent-node@3.973.24':
     dependencies:
       '@aws-sdk/middleware-user-agent': 3.972.38
-      '@aws-sdk/types': 3.974.6
+      '@aws-sdk/types': 3.975.0
       '@smithy/node-config-provider': 4.3.14
       '@smithy/types': 4.19.0
       '@smithy/util-config-provider': 4.2.2
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/xml-builder@3.972.41':
+  '@aws-sdk/xml-builder@3.972.42':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -24267,11 +24339,11 @@ snapshots:
     transitivePeerDependencies:
       - ws
 
-  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.84)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)':
+  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.90)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)':
     dependencies:
       '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
       js-tiktoken: 1.0.21
-      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
@@ -26441,20 +26513,20 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@smithy/core@3.35.2':
+  '@smithy/core@3.37.0':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/credential-provider-imds@4.5.2':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/fetch-http-handler@5.8.0':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -26490,7 +26562,7 @@ snapshots:
 
   '@smithy/middleware-endpoint@4.4.32':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/middleware-serde': 4.2.20
       '@smithy/node-config-provider': 4.3.14
       '@smithy/shared-ini-file-loader': 4.4.9
@@ -26502,7 +26574,7 @@ snapshots:
 
   '@smithy/middleware-retry@4.5.7':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/node-config-provider': 4.3.14
       '@smithy/protocol-http': 5.3.14
       '@smithy/service-error-classification': 4.3.1
@@ -26516,7 +26588,7 @@ snapshots:
 
   '@smithy/middleware-serde@4.2.20':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -26538,7 +26610,13 @@ snapshots:
 
   '@smithy/node-http-handler@4.12.1':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
+  '@smithy/node-http-handler@4.13.0':
+    dependencies:
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -26573,13 +26651,13 @@ snapshots:
 
   '@smithy/signature-v4@5.7.4':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/smithy-client@4.12.13':
     dependencies:
-      '@smithy/core': 3.35.2
+      '@smithy/core': 3.37.0
       '@smithy/middleware-endpoint': 4.4.32
       '@smithy/middleware-stack': 4.2.14
       '@smithy/protocol-http': 5.3.14
@@ -27477,6 +27555,8 @@ snapshots:
     dependencies:
       '@types/yargs-parser': 21.0.3
 
+  '@typesafe-ai/sdk@0.6.0': {}
+
   '@typescript-eslint/eslint-plugin@5.62.0(@typescript-eslint/parser@5.62.0(eslint@8.57.0(supports-color@10.0.0))(supports-color@10.0.0)(typescript@7.0.2))(eslint@8.57.0(supports-color@10.0.0))(supports-color@10.0.0)(typescript@7.0.2)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
@@ -35817,9 +35897,9 @@ snapshots:
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
-      '@aws-sdk/credential-provider-node': 3.972.84
+      '@aws-sdk/credential-provider-node': 3.972.90
       '@smithy/signature-v4': 5.7.4
       undici: 7.24.8
       ws: 8.21.3

From 8592e7ef59ad96315608992d2ba6fcf3c6c42e05 Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Fri, 30 Oct 2026 13:12:55 +0100
Subject: [PATCH 054/169] test(e2e): Move OpenAI and Anthropic send-to-sentry
 cases into gen-ai-libraries (#25841)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The test that sends what some ai integrations send to sentry
are not really necessary. most of this is covered elsewhere already.
Streaming is the one case where the real wire format matters, so only
the streamed OpenAI and Anthropic chats are moved to the existing
gen-ai-libraries E2E test, and they now run on Cloudflare too.

In addition, an optional "latest" variant is added for this too to test
all the genai libraries in their latest version.

**How to review:** Start with `tests/chat-stream.test.ts`. The
`[DONE]`-frame workaround in `libraries.ts` comes from the Anthropic
app. Anthropic SDK 0.136+ needs it when going through OpenRouter.

**Unsure about:** `@anthropic-ai/sdk` 1.x isn't instrumented yet (the
orchestrion config covers `<1`), so `(latest)` pins Anthropic to the
newest 0.x and every other SDK uses `@latest`. The pin can go once
#25750 lands.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../gen-ai-libraries/package.json             |  10 +-
 .../gen-ai-libraries/src/entry.cloudflare.ts  |  19 +-
 .../gen-ai-libraries/src/entry.node.ts        |  12 ++
 .../gen-ai-libraries/src/libraries.ts         |  92 +++++++++-
 .../tests/chat-stream.test.ts                 |  59 ++++++
 .../node-anthropic-send-to-sentry/.gitignore  |   5 -
 .../package.json                              |  36 ----
 .../playwright.config.ts                      |  28 ---
 .../pnpm-workspace.yaml                       |   1 -
 .../node-anthropic-send-to-sentry/src/app.ts  | 165 -----------------
 .../src/instrument.ts                         |  10 -
 .../tests/send-to-sentry.test.ts              | 151 ---------------
 .../tests/utils/sentry-api.ts                 | 131 -------------
 .../tsconfig.json                             |  13 --
 .../node-openai-send-to-sentry/.gitignore     |   5 -
 .../node-openai-send-to-sentry/package.json   |  38 ----
 .../playwright.config.ts                      |  24 ---
 .../pnpm-workspace.yaml                       |   1 -
 .../node-openai-send-to-sentry/src/app.ts     | 151 ---------------
 .../src/instrument.ts                         |  10 -
 .../tests/send-to-sentry.test.ts              | 172 ------------------
 .../node-openai-send-to-sentry/tsconfig.json  |  13 --
 22 files changed, 181 insertions(+), 965 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/gen-ai-libraries/tests/chat-stream.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/.gitignore
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/package.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/playwright.config.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/pnpm-workspace.yaml
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/app.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/instrument.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/send-to-sentry.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/utils/sentry-api.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tsconfig.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/.gitignore
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/package.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/playwright.config.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/pnpm-workspace.yaml
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/app.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/instrument.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tests/send-to-sentry.test.ts
 delete mode 100644 dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tsconfig.json

diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/package.json b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/package.json
index 35f5df09e3e3..3d0ff3e11d38 100644
--- a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/package.json
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/package.json
@@ -1,6 +1,6 @@
 {
   "name": "gen-ai-libraries",
-  "description": "Real gen_ai spans for every instrumented AI library (OpenAI, Anthropic, Mistral, Together, Vercel AI), each driven through OpenRouter with a chat query and a tool call, on Node and on Cloudflare",
+  "description": "Real gen_ai spans for every instrumented AI library (OpenAI, Anthropic, Mistral, Together, Vercel AI), each driven through OpenRouter with a chat query and a tool call, plus streamed OpenAI and Anthropic chats, on Node and on Cloudflare",
   "version": "1.0.0",
   "private": true,
   "type": "module",
@@ -13,7 +13,8 @@
     "test:build": "pnpm install",
     "test:build:cloudflare": "pnpm install && vite build",
     "test:assert": "pnpm test",
-    "test:assert:cloudflare": "RUNTIME=cloudflare pnpm test"
+    "test:assert:cloudflare": "RUNTIME=cloudflare pnpm test",
+    "test:build-latest": "pnpm install && pnpm add openai@latest together-ai@latest ai@latest @openrouter/ai-sdk-provider@latest '@anthropic-ai/sdk@<1' @mistralai/mistralai@latest"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "0.63.0",
@@ -32,6 +33,7 @@
     "@cloudflare/workers-types": "^4.20260426.0",
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
+    "@sentry/conventions": "0.30.0",
     "@types/express": "^4.17.21",
     "@types/node": "^18.19.1",
     "tsx": "4.21.0",
@@ -46,6 +48,10 @@
         "build-command": "pnpm test:build:cloudflare",
         "assert-command": "pnpm test:assert:cloudflare",
         "label": "gen-ai-libraries (cloudflare)"
+      },
+      {
+        "build-command": "pnpm test:build-latest",
+        "label": "gen-ai-libraries (latest)"
       }
     ]
   }
diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.cloudflare.ts b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.cloudflare.ts
index 265b8122f0df..10ddd8d13a03 100644
--- a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.cloudflare.ts
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.cloudflare.ts
@@ -1,10 +1,24 @@
 // The Cloudflare variant: the same libraries and routes as the Node entry, but instrumented by the
 // `@sentry/cloudflare/vite` bundler plugin (build-time channel injection) and run on workerd.
 import * as Sentry from '@sentry/cloudflare';
+import type { Library } from './libraries';
 import { libraries } from './libraries';
 
 const byId = new Map(libraries.map(library => [library.id, library]));
 
+function getCall(library: Library, action: string | undefined): ((apiKey: string) => Promise<unknown>) | undefined {
+  switch (action) {
+    case 'chat':
+      return library.chat;
+    case 'tools':
+      return library.tools;
+    case 'chat-stream':
+      return library.chatStream;
+    default:
+      return undefined;
+  }
+}
+
 export default Sentry.withSentry(
   (env: Env) => ({
     dsn: env.E2E_TEST_DSN,
@@ -17,8 +31,9 @@ export default Sentry.withSentry(
       const url = new URL(request.url);
       const [, id, action] = url.pathname.split('/');
       const library = id ? byId.get(id) : undefined;
+      const call = library && getCall(library, action);
 
-      if (!library || (action !== 'chat' && action !== 'tools')) {
+      if (!call) {
         return new Response('Not found', { status: 404 });
       }
 
@@ -29,7 +44,7 @@ export default Sentry.withSentry(
 
       try {
         const spanName = action === 'tools' ? 'ai-tool-workflow' : 'ai-workflow';
-        const result = await Sentry.startSpan({ name: spanName, op: 'function' }, () => library[action](apiKey));
+        const result = await Sentry.startSpan({ name: spanName, op: 'function' }, () => call(apiKey));
         return Response.json({ result });
       } catch (error) {
         return Response.json({ message: (error as Error).message }, { status: 500 });
diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.node.ts b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.node.ts
index 726924dbd69d..95a405dfa4d0 100644
--- a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.node.ts
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/entry.node.ts
@@ -33,6 +33,18 @@ for (const library of libraries) {
       next(error);
     }
   });
+
+  const chatStream = library.chatStream;
+  if (chatStream) {
+    app.get(`/${library.id}/chat-stream`, async (_req, res, next) => {
+      try {
+        const answer = await Sentry.startSpan({ name: 'ai-workflow', op: 'function' }, () => chatStream(apiKey));
+        res.send({ answer });
+      } catch (error) {
+        next(error);
+      }
+    });
+  }
 }
 
 Sentry.setupExpressErrorHandler(app);
diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
index 1b1490e7e9b4..dd002c976962 100644
--- a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
@@ -60,6 +60,51 @@ export interface Library {
   origin?: string;
   chat: (apiKey: string) => Promise<unknown>;
   tools: (apiKey: string) => Promise<unknown>;
+  /** A streamed chat query; only set for the libraries whose streaming is tested. */
+  chatStream?: (apiKey: string) => Promise<unknown>;
+}
+
+const openAiClient = (apiKey: string): OpenAI => new OpenAI({ apiKey, baseURL: OPENROUTER_V1 });
+
+// OpenRouter's Anthropic skin authenticates with a bearer token, so the key goes in `authToken`
+// (Authorization: Bearer) rather than `apiKey` (x-api-key).
+const anthropicClient = (apiKey: string): Anthropic =>
+  new Anthropic({ authToken: apiKey, baseURL: OPENROUTER_BASE, fetch: fetchWithoutDone });
+
+/**
+ * OpenRouter ends each stream with an `event: data` / `data: [DONE]` frame, which is not part of
+ * Anthropic's protocol. Since 0.136.0 the SDK JSON-parses every named event, so this frame
+ * makes it throw. Drop the frame before the SDK sees it.
+ */
+async function fetchWithoutDone(input: string | URL | Request, init?: RequestInit): Promise<Response> {
+  const response = await fetch(input, init);
+  if (!response.body || !response.headers.get('content-type')?.includes('text/event-stream')) {
+    return response;
+  }
+
+  let buffer = '';
+  const keepFrame = (frame: string): boolean => !/^data: \[DONE\]$/m.test(frame);
+  const body = response.body.pipeThrough(new TextDecoderStream()).pipeThrough(
+    new TransformStream<string, string>({
+      transform(chunk, controller) {
+        buffer += chunk;
+        const frames = buffer.split(/(?<=\r?\n\r?\n)/);
+        buffer = /\r?\n\r?\n$/.test(frames[frames.length - 1] ?? '') ? '' : (frames.pop() ?? '');
+        controller.enqueue(frames.filter(keepFrame).join(''));
+      },
+      flush(controller) {
+        if (keepFrame(buffer)) {
+          controller.enqueue(buffer);
+        }
+      },
+    }),
+  );
+
+  return new Response(body.pipeThrough(new TextEncoderStream()), {
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers,
+  });
 }
 
 /** Chat + forced tool call for an OpenAI-compatible chat-completions client (OpenAI, Together). */
@@ -100,7 +145,28 @@ function openAiCompatible(
 }
 
 export const libraries: Library[] = [
-  openAiCompatible('openai', 'openai', 'auto.ai.openai', apiKey => new OpenAI({ apiKey, baseURL: OPENROUTER_V1 })),
+  {
+    ...openAiCompatible('openai', 'openai', 'auto.ai.openai', openAiClient),
+    chatStream: async apiKey => {
+      const stream = await openAiClient(apiKey).chat.completions.create({
+        model: MODEL,
+        messages: [
+          { role: 'system', content: SYSTEM },
+          { role: 'user', content: CHAT_PROMPT },
+        ],
+        temperature: 0,
+        max_tokens: 32,
+        stream: true,
+        // Ask for the usage in the final chunk, so the streamed span carries token counts.
+        stream_options: { include_usage: true },
+      });
+      let answer = '';
+      for await (const chunk of stream) {
+        answer += chunk.choices[0]?.delta.content ?? '';
+      }
+      return answer;
+    },
+  },
   openAiCompatible(
     'together',
     'together_ai',
@@ -146,10 +212,7 @@ export const libraries: Library[] = [
     provider: 'anthropic',
     origin: 'auto.ai.anthropic',
     chat: async apiKey => {
-      // OpenRouter's Anthropic skin authenticates with a bearer token, so the key goes in `authToken`
-      // (Authorization: Bearer) rather than `apiKey` (x-api-key).
-      const client = new Anthropic({ authToken: apiKey, baseURL: OPENROUTER_BASE });
-      const message = await client.messages.create({
+      const message = await anthropicClient(apiKey).messages.create({
         model: MODEL,
         max_tokens: 32,
         temperature: 0,
@@ -160,8 +223,7 @@ export const libraries: Library[] = [
       return first && first.type === 'text' ? first.text : '';
     },
     tools: async apiKey => {
-      const client = new Anthropic({ authToken: apiKey, baseURL: OPENROUTER_BASE });
-      const message = await client.messages.create({
+      const message = await anthropicClient(apiKey).messages.create({
         model: MODEL,
         max_tokens: 64,
         messages: [{ role: 'user', content: WEATHER_PROMPT }],
@@ -180,6 +242,22 @@ export const libraries: Library[] = [
       });
       return (message.content ?? []).filter(block => block.type === 'tool_use');
     },
+    chatStream: async apiKey => {
+      const stream = await anthropicClient(apiKey).messages.create({
+        model: MODEL,
+        max_tokens: 32,
+        system: SYSTEM,
+        messages: [{ role: 'user', content: CHAT_PROMPT }],
+        stream: true,
+      });
+      let answer = '';
+      for await (const event of stream) {
+        if (event.type === 'content_block_delta' && event.delta.type === 'text_delta') {
+          answer += event.delta.text;
+        }
+      }
+      return answer;
+    },
   },
 
   {
diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/tests/chat-stream.test.ts b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/tests/chat-stream.test.ts
new file mode 100644
index 000000000000..2a68b3f6e5f4
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/tests/chat-stream.test.ts
@@ -0,0 +1,59 @@
+import { expect, test } from '@playwright/test';
+import {
+  GEN_AI_PROVIDER_NAME,
+  GEN_AI_RESPONSE_FINISH_REASONS,
+  GEN_AI_RESPONSE_STREAMING,
+  GEN_AI_USAGE_OUTPUT_TOKENS,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import type { SerializedStreamedSpan } from '@sentry-internal/test-utils';
+import { collectStreamedSpans } from '@sentry-internal/test-utils';
+import { APP } from './constants';
+import type { LibraryUnderTest } from './utils';
+import { attr, describeTree, expectCommonChatAttributes, isModelCallSpan, LIBRARIES } from './utils';
+
+// Streaming is where OpenRouter's real wire format can diverge from the mocked responses in
+// node-integration-tests, so it is only covered here.
+
+const OPENAI = LIBRARIES.find(library => library.id === 'openai')!;
+const ANTHROPIC = LIBRARIES.find(library => library.id === 'anthropic')!;
+
+const isStreamedModelCallSpan = (span: SerializedStreamedSpan, library: LibraryUnderTest): boolean =>
+  isModelCallSpan(span, library) && attr(span, GEN_AI_RESPONSE_STREAMING) === true;
+
+async function requestChatStream(
+  baseURL: string | undefined,
+  library: LibraryUnderTest,
+): Promise<SerializedStreamedSpan> {
+  const spansPromise = collectStreamedSpans(APP, spansOfTrace =>
+    spansOfTrace.some(span => isStreamedModelCallSpan(span, library)),
+  );
+
+  const response = await fetch(`${baseURL}/${library.id}/chat-stream`);
+  expect(response.status, await response.text()).toBe(200);
+
+  const spans = await spansPromise;
+  const modelSpan = spans.find(span => isStreamedModelCallSpan(span, library));
+  expect(modelSpan, `expected a streamed ${library.op} span in:\n${describeTree(spans)}`).toBeDefined();
+  return modelSpan!;
+}
+
+test('openai: a streamed chat completion records its token usage', async ({ baseURL }) => {
+  const span = await requestChatStream(baseURL, OPENAI);
+
+  // The usage only arrives in the final chunk, which the streaming instrumentation has to pick up.
+  expectCommonChatAttributes(span, OPENAI);
+  expect(attr(span, GEN_AI_RESPONSE_FINISH_REASONS)).toContain('stop');
+});
+
+test('anthropic: a streamed message records its output usage', async ({ baseURL }) => {
+  const span = await requestChatStream(baseURL, ANTHROPIC);
+
+  // Not `expectCommonChatAttributes`: the instrumentation takes the input usage from `message_start`,
+  // where OpenRouter reports 0, and ignores the real count in `message_delta`.
+  expect(span.status).toBe('ok');
+  expect(attr(span, GEN_AI_USAGE_OUTPUT_TOKENS)).toBeGreaterThan(0);
+  expect(attr(span, GEN_AI_RESPONSE_FINISH_REASONS)).toContain('end_turn');
+  expect(attr(span, GEN_AI_PROVIDER_NAME)).toBe(ANTHROPIC.provider);
+  expect(attr(span, SENTRY_ORIGIN)).toBe(ANTHROPIC.origin);
+});
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/.gitignore b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/.gitignore
deleted file mode 100644
index 795f6b6d40d1..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/.gitignore
+++ /dev/null
@@ -1,5 +0,0 @@
-node_modules
-pnpm-lock.yaml
-dist
-test-results
-playwright-report
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/package.json
deleted file mode 100644
index 9f7d8ae4fa75..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/package.json
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  "name": "node-anthropic-send-to-sentry",
-  "description": "The Anthropic integration as a user runs it: a plain Sentry.init on an express app, real chat, streaming, stream-helper and tool-call requests through OpenRouter, and the gen_ai spans read back from a real Sentry project",
-  "version": "1.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "build": "tsc",
-    "start": "node --import ./dist/instrument.js dist/app.js",
-    "test": "playwright test",
-    "clean": "npx rimraf node_modules dist pnpm-lock.yaml",
-    "test:build": "pnpm install && pnpm build",
-    "test:build-latest": "pnpm install && pnpm add @anthropic-ai/sdk@latest && pnpm build",
-    "test:assert": "pnpm test"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "0.63.0",
-    "@sentry/node": "file:../../packed/sentry-node-packed.tgz",
-    "express": "^4.21.2"
-  },
-  "devDependencies": {
-    "@playwright/test": "1.64.1",
-    "@types/express": "^4.17.21",
-    "@types/node": "^24.0.0",
-    "typescript": "~5.9.0"
-  },
-  "sentryTest": {
-    "optional": true,
-    "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-latest",
-        "label": "node-anthropic-send-to-sentry (latest)"
-      }
-    ]
-  }
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/playwright.config.ts b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/playwright.config.ts
deleted file mode 100644
index ef4764ce8d73..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/playwright.config.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { defineConfig } from '@playwright/test';
-
-const port = 3030;
-
-export default defineConfig({
-  testDir: './tests',
-  /*
-   * Spans take ~2min to become queryable via the trace endpoint, and each poll has its own 180s
-   * budget. The first test polls twice in a row (the model span, then its parent), so the ceiling
-   * has to hold two polls back to back.
-   */
-  timeout: 400_000,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: 0,
-  // Every test spends most of its time polling Sentry, so run them all at once.
-  workers: '100%',
-  reporter: process.env.CI ? [['list'], ['junit', { outputFile: 'results.junit.xml' }]] : 'list',
-  use: {
-    baseURL: `http://localhost:${port}`,
-  },
-  webServer: {
-    command: 'pnpm start',
-    port,
-    stdout: 'pipe',
-    stderr: 'pipe',
-  },
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/pnpm-workspace.yaml
deleted file mode 100644
index a1c031fc3310..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/pnpm-workspace.yaml
+++ /dev/null
@@ -1 +0,0 @@
-minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/app.ts b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/app.ts
deleted file mode 100644
index 693f1ef4f3b3..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/app.ts
+++ /dev/null
@@ -1,165 +0,0 @@
-// `instrument.ts` is preloaded via `node --import`, so Sentry is already initialised here.
-import * as Sentry from '@sentry/node';
-import Anthropic from '@anthropic-ai/sdk';
-import express from 'express';
-
-const apiKey = process.env.E2E_OPENROUTER_API_KEY;
-if (!apiKey) {
-  throw new Error('E2E_OPENROUTER_API_KEY is not set');
-}
-
-// OpenRouter serves an Anthropic-compatible `/api/v1/messages`, so the stock client only needs a
-// different base URL. It authenticates with a bearer token, so the key goes in `authToken`
-// (Authorization: Bearer) rather than `apiKey` (x-api-key). The model is incidental: what is under
-// test is the SDK's own request/response code path, which is what Sentry instruments.
-const client = new Anthropic({ authToken: apiKey, baseURL: 'https://openrouter.ai/api', fetch: fetchWithoutDone });
-
-/**
- * OpenRouter ends each stream with an OpenAI-style `data: [DONE]` frame, which is not part of
- * Anthropic's protocol. Since 0.136.0 the SDK JSON-parses every named event, so this frame
- * makes it throw. Drop the frame before the SDK sees it.
- */
-async function fetchWithoutDone(input: string | URL | Request, init?: RequestInit): Promise<Response> {
-  const response = await fetch(input, init);
-  if (!response.body || !response.headers.get('content-type')?.includes('text/event-stream')) {
-    return response;
-  }
-
-  let buffer = '';
-  const keepFrame = (frame: string): boolean => !/^data: \[DONE\]$/m.test(frame);
-  const body = response.body.pipeThrough(new TextDecoderStream()).pipeThrough(
-    new TransformStream<string, string>({
-      transform(chunk, controller) {
-        buffer += chunk;
-        const frames = buffer.split(/(?<=\r?\n\r?\n)/);
-        buffer = /\r?\n\r?\n$/.test(frames[frames.length - 1] ?? '') ? '' : (frames.pop() ?? '');
-        controller.enqueue(frames.filter(keepFrame).join(''));
-      },
-      flush(controller) {
-        if (keepFrame(buffer)) {
-          controller.enqueue(buffer);
-        }
-      },
-    }),
-  );
-
-  return new Response(body.pipeThrough(new TextEncoderStream()), {
-    status: response.status,
-    statusText: response.statusText,
-    headers: response.headers,
-  });
-}
-
-const MODEL = 'openai/gpt-4o-mini';
-
-const SHORT_ANSWER = 'Answer in at most five words.';
-const CHAT_PROMPT = `What is the capital of France? ${SHORT_ANSWER}`;
-// Deliberately does not name the tool: `tool_choice` forces the call.
-const WEATHER_PROMPT = `What is the weather in Paris? ${SHORT_ANSWER}`;
-const SYSTEM = 'You are a helpful assistant used by an automated test.';
-
-const WEATHER_TOOL = {
-  name: 'get_weather',
-  description: 'Get the current weather for a city.',
-  input_schema: {
-    type: 'object' as const,
-    properties: { city: { type: 'string', description: 'The city name' } },
-    required: ['city'],
-  },
-};
-
-const app = express();
-
-/** The trace this request is recorded under, so the test can look its spans up in Sentry. */
-function currentTraceId(): string | undefined {
-  return Sentry.getActiveSpan()?.spanContext().traceId;
-}
-
-/** The text of a message's first text block. */
-function textOf(message: Anthropic.Message): string {
-  const first = message.content[0];
-  return first?.type === 'text' ? first.text : '';
-}
-
-// Each route makes one call through the `@anthropic-ai/sdk` client and answers with the trace id, so
-// the test can find the request's spans in Sentry.
-
-app.get('/chat', async (_req, res, next) => {
-  try {
-    const message = await client.messages.create({
-      model: MODEL,
-      max_tokens: 32,
-      system: SYSTEM,
-      messages: [{ role: 'user', content: CHAT_PROMPT }],
-    });
-    res.send({ traceId: currentTraceId(), answer: textOf(message) });
-  } catch (error) {
-    next(error);
-  }
-});
-
-// `messages.create({ stream: true })` returns an async iterable of events the caller drains.
-app.get('/chat-stream', async (_req, res, next) => {
-  try {
-    const stream = await client.messages.create({
-      model: MODEL,
-      max_tokens: 32,
-      system: SYSTEM,
-      messages: [{ role: 'user', content: CHAT_PROMPT }],
-      stream: true,
-    });
-
-    let answer = '';
-    for await (const event of stream) {
-      if (event.type === 'content_block_delta' && event.delta.type === 'text_delta') {
-        answer += event.delta.text;
-      }
-    }
-    res.send({ traceId: currentTraceId(), answer });
-  } catch (error) {
-    next(error);
-  }
-});
-
-// `messages.stream()` is the SDK's streaming helper: it accumulates the events into the final
-// message, and the integration instruments it separately from `create`.
-app.get('/stream-helper', async (_req, res, next) => {
-  try {
-    const message = await client.messages
-      .stream({
-        model: MODEL,
-        max_tokens: 32,
-        system: SYSTEM,
-        messages: [{ role: 'user', content: CHAT_PROMPT }],
-      })
-      .finalMessage();
-    res.send({ traceId: currentTraceId(), answer: textOf(message) });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.get('/tools', async (_req, res, next) => {
-  try {
-    const message = await client.messages.create({
-      model: MODEL,
-      max_tokens: 64,
-      messages: [{ role: 'user', content: WEATHER_PROMPT }],
-      tools: [WEATHER_TOOL],
-      tool_choice: { type: 'tool', name: 'get_weather' },
-    });
-    res.send({ traceId: currentTraceId(), toolUse: message.content.filter(block => block.type === 'tool_use') });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.use((error: Error, _req: express.Request, res: express.Response, _next: express.NextFunction) => {
-  res.status(500).send({ message: error.message });
-});
-
-const port = Number(process.env.PORT ?? 3030);
-app.listen(port, () => {
-  // eslint-disable-next-line no-console
-  console.log(`node-anthropic-send-to-sentry listening on port ${port}`);
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/instrument.ts b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/instrument.ts
deleted file mode 100644
index 7d031b0e6d8e..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/src/instrument.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import * as Sentry from '@sentry/node';
-
-// The setup from the docs, nothing more: preloaded with `node --import`, no tunnel, so the spans go to
-// the real Sentry project behind `E2E_TEST_DSN`, where the tests read them back. The Anthropic integration
-// is on by default; its runtime channel injection is what picks up the `@anthropic-ai/sdk` client in app.ts.
-Sentry.init({
-  dsn: process.env.E2E_TEST_DSN,
-  environment: 'qa', // dynamic sampling bias to keep transactions
-  tracesSampleRate: 1,
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/send-to-sentry.test.ts b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/send-to-sentry.test.ts
deleted file mode 100644
index e7a135c2368c..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/send-to-sentry.test.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-import { expect, test } from '@playwright/test';
-import type { TraceItem } from './utils/sentry-api';
-import {
-  EVENT_POLLING_OPTIONS,
-  fetchSpanAttributes,
-  fetchTrace,
-  findSpanInTrace,
-  flattenTrace,
-} from './utils/sentry-api';
-
-// Mirrors src/app.ts.
-const MODEL = 'openai/gpt-4o-mini';
-
-type Attributes = Record<string, unknown>;
-
-/** Sends one request to the app and returns the trace its request span was recorded under. */
-async function requestTrace(baseURL: string | undefined, path: string): Promise<string> {
-  const response = await fetch(`${baseURL}${path}`);
-  const body = await response.text();
-  expect(response.status, `${path} answered ${response.status}: ${body}`).toBe(200);
-
-  const { traceId } = JSON.parse(body) as { traceId?: string };
-  expect(traceId, `${path} did not report a trace id: ${body}`).toMatch(/^[0-9a-f]{32}$/);
-
-  console.log(`${path}: https://${process.env.E2E_TEST_SENTRY_ORG_SLUG}.sentry.io/explore/traces/trace/${traceId}/`);
-  return traceId!;
-}
-
-/**
- * Polls Sentry until the trace holds a span with `op`, then returns that span and its attributes. The
- * trace endpoint only carries the span's op, name and place in the tree; the attributes need a second
- * lookup, which is polled as well since the two can land apart.
- */
-async function waitForSpan(traceId: string, op: string): Promise<{ span: TraceItem; attributes: Attributes }> {
-  let found: { span: TraceItem; attributes: Attributes } | undefined;
-
-  await expect
-    .poll(async () => {
-      const span = await findSpanInTrace(traceId, op);
-      const attributes = span?.event_id ? await fetchSpanAttributes(traceId, span.event_id) : undefined;
-      found = span && attributes ? { span, attributes } : undefined;
-      return found;
-    }, EVENT_POLLING_OPTIONS)
-    .toBeDefined();
-
-  return found!;
-}
-
-/** Whether the model-call span sits somewhere below the request span (`http.server`) of the trace. */
-async function isModelSpanUnderRequestSpan(traceId: string, modelSpanId: string): Promise<boolean> {
-  const requestSpan = flattenTrace(await fetchTrace(traceId)).find(item => item.op === 'http.server');
-  return flattenTrace(requestSpan?.children ?? []).some(item => item.event_id === modelSpanId);
-}
-
-/**
- * The attributes every successful model-call span carries once Sentry has stored it, whatever the
- * model answers. Model-dependent values (token counts, response id and model) are checked for shape,
- * not content. Note the names are the stored ones: `origin` and `span.status` rather than the
- * `sentry.*` attributes the SDK sends.
- */
-function expectModelCallAttributes(span: TraceItem, attributes: Attributes): void {
-  expect(span.description).toBe(`chat ${MODEL}`);
-  expect(attributes).toMatchObject({
-    'span.op': 'gen_ai.chat',
-    'span.status': 'ok',
-    origin: 'auto.ai.anthropic',
-    'gen_ai.operation.name': 'chat',
-    'gen_ai.provider.name': 'anthropic',
-    'gen_ai.request.model': MODEL,
-  });
-  expect(typeof attributes['gen_ai.response.id']).toBe('string');
-  expect(typeof attributes['gen_ai.response.model']).toBe('string');
-  expect(attributes['gen_ai.usage.output_tokens']).toBeGreaterThan(0);
-  expect(attributes['gen_ai.usage.total_tokens']).toBeGreaterThan(0);
-}
-
-/** The prompt and the answer, which the SDK records by default and which have to survive the trip. */
-function expectRecordedConversation(attributes: Attributes): void {
-  // The answer is sent as `gen_ai.response.text` and stored as `gen_ai.output.messages`.
-  expect(attributes['gen_ai.system_instructions']).toContain('automated test');
-  expect(attributes['gen_ai.input.messages']).toContain('capital of France');
-  expect(typeof attributes['gen_ai.output.messages']).toBe('string');
-}
-
-/** `gen_ai.response.finish_reasons` is a JSON array, only recorded for streamed calls. */
-function finishReasons(attributes: Attributes): string[] {
-  const raw = attributes['gen_ai.response.finish_reasons'];
-  expect(typeof raw, 'gen_ai.response.finish_reasons').toBe('string');
-  return JSON.parse(raw as string);
-}
-
-test('Sends a message to Sentry as a gen_ai.chat span under the request span', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/chat');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expectModelCallAttributes(span, attributes);
-  expect(attributes['gen_ai.usage.input_tokens']).toBeGreaterThan(0);
-  expect(attributes['gen_ai.response.streaming']).toBeUndefined();
-  expectRecordedConversation(attributes);
-
-  // The request span is the segment; it ends last, so it can land after its children.
-  await expect.poll(() => isModelSpanUnderRequestSpan(traceId, span.event_id!), EVENT_POLLING_OPTIONS).toBe(true);
-});
-
-test('Sends a streamed message to Sentry with its token usage', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/chat-stream');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expectModelCallAttributes(span, attributes);
-  expect(attributes['gen_ai.response.streaming']).toBe(true);
-  expect(finishReasons(attributes)).toContain('end_turn');
-  expectRecordedConversation(attributes);
-  // The input usage is not asserted: the instrumentation takes it from `message_start`, where
-  // OpenRouter reports 0, and ignores the real count OpenRouter (and the Anthropic API) put in
-  // `message_delta`. Output usage comes from `message_delta` and is covered by the shared checks.
-});
-
-test('Sends a message made with the stream helper to Sentry', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/stream-helper');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  // `messages.stream()` calls `create` underneath, which must not produce a second span. The parent
-  // lands last, so count after it; the short poll only rides out a dropped connection.
-  await expect.poll(() => isModelSpanUnderRequestSpan(traceId, span.event_id!), EVENT_POLLING_OPTIONS).toBe(true);
-  await expect
-    .poll(async () => flattenTrace(await fetchTrace(traceId)).filter(item => item.op === 'gen_ai.chat').length, {
-      timeout: 30_000,
-      intervals: [5_000],
-    })
-    .toBe(1);
-  expectModelCallAttributes(span, attributes);
-  expect(attributes['gen_ai.response.streaming']).toBe(true);
-  expect(finishReasons(attributes)).toContain('end_turn');
-  expectRecordedConversation(attributes);
-});
-
-test('Sends a message that returned a tool use to Sentry', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/tools');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expectModelCallAttributes(span, attributes);
-  expect(attributes['gen_ai.usage.input_tokens']).toBeGreaterThan(0);
-  expect(attributes['gen_ai.tool.definitions']).toContain('get_weather');
-  expect(attributes['gen_ai.input.messages']).toContain('weather in Paris');
-  // The SDK also sends the returned tool use as `gen_ai.response.tool_calls`, but that attribute is
-  // not stored under that name, and stop reasons are only recorded for streamed calls.
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/utils/sentry-api.ts b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/utils/sentry-api.ts
deleted file mode 100644
index 521b830eefcb..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tests/utils/sentry-api.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-const authToken = process.env.E2E_TEST_AUTH_TOKEN;
-const sentryTestOrgSlug = process.env.E2E_TEST_SENTRY_ORG_SLUG;
-const sentryTestProject = process.env.E2E_TEST_SENTRY_PROJECT;
-
-/**
- * Spans only become queryable once they have made it through to EAP, which takes
- * noticeably longer than the error pipeline (~2min vs ~20s when this was measured).
- */
-export const EVENT_POLLING_OPTIONS = { timeout: 180_000, intervals: [5_000] };
-
-/**
- * A node of the span tree returned by the organization trace endpoint. Spans, errors and
- * occurrences all share this shape and are discriminated by `event_type`.
- */
-export interface TraceItem {
-  /** On a span this is the span id. */
-  event_id?: string;
-  event_type?: 'span' | 'error' | 'occurrence' | 'uptime_check';
-  op?: string;
-  /** On a span this is the span name. */
-  description?: string;
-  children?: TraceItem[];
-  errors?: TraceItem[];
-  occurrences?: TraceItem[];
-}
-
-/**
- * One request to the Sentry API with the E2E token. Returns `undefined` when the connection
- * fails or drops mid-response: over the minutes a test polls, the API closes the odd
- * connection ("TypeError: terminated"), and an error thrown inside `expect.poll` fails the
- * test instead of letting it retry, so a network error is treated like a "not there yet".
- */
-async function fetchSentryApi(what: string, path: string): Promise<{ status: number; body: string } | undefined> {
-  try {
-    const response = await fetch(`https://sentry.io/api/0/${path}`, {
-      headers: { Authorization: `Bearer ${authToken}` },
-    });
-    return { status: response.status, body: await response.text() };
-  } catch (error) {
-    console.log(`${what} failed: ${error}`);
-    return undefined;
-  }
-}
-
-export async function fetchTrace(traceId: string): Promise<TraceItem[]> {
-  const what = `Trace lookup for ${traceId}`;
-  const response = await fetchSentryApi(what, `organizations/${sentryTestOrgSlug}/trace/${traceId}/?statsPeriod=1h`);
-  if (!response) {
-    return [];
-  }
-
-  // The trace endpoint is org scoped, so the auth token needs `org:read` on top of the
-  // project scopes the other assertions rely on. That never resolves by waiting, so fail
-  // loudly instead of polling until the timeout and reporting it as a missing event.
-  if (response.status === 401 || response.status === 403) {
-    throw new Error(
-      `${what} was rejected with ${response.status}: ${response.body}. ` +
-        'E2E_TEST_AUTH_TOKEN needs the `org:read` scope.',
-    );
-  }
-
-  // Empty traces and the occasional rate limit are expected while polling, so treat anything
-  // else that is not a success as "not there yet" -- but log it, since a rejected request and
-  // a trace that has not landed are otherwise indistinguishable.
-  if (response.status !== 200) {
-    console.log(`${what} returned ${response.status}: ${response.body}`);
-    return [];
-  }
-
-  return JSON.parse(response.body);
-}
-
-/**
- * Errors attach to whichever span was active when they were captured, and relocate from the
- * top level into that span once it lands, so a given event can surface at any depth.
- */
-export function flattenTrace(items: TraceItem[]): TraceItem[] {
-  return items.flatMap(item => [
-    item,
-    ...flattenTrace(item.children ?? []),
-    ...flattenTrace(item.errors ?? []),
-    ...flattenTrace(item.occurrences ?? []),
-  ]);
-}
-
-export async function findSpanInTrace(traceId: string, op: string): Promise<TraceItem | undefined> {
-  return flattenTrace(await fetchTrace(traceId)).find(item => item.op === op);
-}
-
-/**
- * The attributes of one span, keyed by name, as Sentry stores them. The trace endpoint only carries
- * a span's op, name and place in the tree; the attributes come from the project trace-items
- * endpoint. Returns `undefined` while the span has not landed.
- *
- * Ingest normalises what the SDK sent: `sentry.origin` comes back as `origin`, `sentry.op` as
- * `span.op`, `gen_ai.response.text` as `gen_ai.output.messages`, and some numbers are indexed as
- * tags (`tags[<name>,number]`). Integers are returned as strings and are converted here; everything
- * else is passed through as is.
- */
-export async function fetchSpanAttributes(
-  traceId: string,
-  spanId: string,
-): Promise<Record<string, unknown> | undefined> {
-  const what = `Span lookup for ${spanId}`;
-  const response = await fetchSentryApi(
-    what,
-    `projects/${sentryTestOrgSlug}/${sentryTestProject}/trace-items/${spanId}/?trace_id=${traceId}&item_type=spans`,
-  );
-  if (!response) {
-    return undefined;
-  }
-
-  if (response.status === 401 || response.status === 403) {
-    throw new Error(
-      `${what} was rejected with ${response.status}: ${response.body}. ` +
-        'E2E_TEST_AUTH_TOKEN needs the `org:read` scope.',
-    );
-  }
-
-  if (response.status !== 200) {
-    if (response.status !== 404) {
-      console.log(`${what} returned ${response.status}: ${response.body}`);
-    }
-    return undefined;
-  }
-
-  const { attributes } = JSON.parse(response.body) as { attributes?: { name: string; type: string; value: unknown }[] };
-  return Object.fromEntries(
-    (attributes ?? []).map(({ name, type, value }) => [name, type === 'int' ? Number(value) : value]),
-  );
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tsconfig.json b/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tsconfig.json
deleted file mode 100644
index 795574fd9df2..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-anthropic-send-to-sentry/tsconfig.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "es2022",
-    "module": "nodenext",
-    "moduleResolution": "nodenext",
-    "outDir": "dist",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "types": ["node"]
-  },
-  "include": ["src/**/*.ts"]
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/.gitignore b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/.gitignore
deleted file mode 100644
index 795f6b6d40d1..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/.gitignore
+++ /dev/null
@@ -1,5 +0,0 @@
-node_modules
-pnpm-lock.yaml
-dist
-test-results
-playwright-report
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/package.json
deleted file mode 100644
index f94e4d8cf2ba..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/package.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "name": "node-openai-send-to-sentry",
-  "description": "The OpenAI integration as a user runs it: a plain Sentry.init on an express app, real chat, streaming, tool-call, Responses API and embeddings requests through OpenRouter, and the gen_ai spans read back from a real Sentry project",
-  "version": "1.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "build": "tsc",
-    "start": "node --import ./dist/instrument.js dist/app.js",
-    "test": "playwright test",
-    "clean": "npx rimraf node_modules dist pnpm-lock.yaml",
-    "test:build": "pnpm install && pnpm build",
-    "test:build-latest": "pnpm install && pnpm add openai@latest && pnpm build",
-    "test:assert": "pnpm test"
-  },
-  "dependencies": {
-    "@sentry/node": "file:../../packed/sentry-node-packed.tgz",
-    "express": "^4.21.2",
-    "openai": "7.5.0"
-  },
-  "devDependencies": {
-    "@playwright/test": "1.64.1",
-    "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
-    "@types/express": "^4.17.21",
-    "@types/node": "^24.0.0",
-    "sentry": "~0.44.1",
-    "typescript": "~5.9.0"
-  },
-  "sentryTest": {
-    "optional": true,
-    "optionalVariants": [
-      {
-        "build-command": "pnpm test:build-latest",
-        "label": "node-openai-send-to-sentry (latest)"
-      }
-    ]
-  }
-}
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/playwright.config.ts b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/playwright.config.ts
deleted file mode 100644
index e7621a23cc8b..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/playwright.config.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { defineConfig } from '@playwright/test';
-
-const port = 3030;
-
-export default defineConfig({
-  testDir: './tests',
-  /* Each test runs two Sentry polls of up to 180s each, after a live model call. */
-  timeout: 400_000,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: 0,
-  // Every test spends most of its time polling Sentry, so run them all at once.
-  workers: '100%',
-  reporter: process.env.CI ? [['list'], ['junit', { outputFile: 'results.junit.xml' }]] : 'list',
-  use: {
-    baseURL: `http://localhost:${port}`,
-  },
-  webServer: {
-    command: 'pnpm start',
-    port,
-    stdout: 'pipe',
-    stderr: 'pipe',
-  },
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/pnpm-workspace.yaml
deleted file mode 100644
index a1c031fc3310..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/pnpm-workspace.yaml
+++ /dev/null
@@ -1 +0,0 @@
-minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/app.ts b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/app.ts
deleted file mode 100644
index ac99c6d18eeb..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/app.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-// `instrument.ts` is preloaded via `node --import`, so Sentry is already initialised here.
-import * as Sentry from '@sentry/node';
-import express from 'express';
-import OpenAI from 'openai';
-
-const apiKey = process.env.E2E_OPENROUTER_API_KEY;
-if (!apiKey) {
-  throw new Error('E2E_OPENROUTER_API_KEY is not set');
-}
-
-// OpenRouter serves the OpenAI API shape (chat completions, responses, embeddings), so the stock
-// client only needs a different base URL. The model is incidental: what is under test is the SDK's own
-// request/response code path, which is what Sentry instruments.
-const client = new OpenAI({ apiKey, baseURL: 'https://openrouter.ai/api/v1' });
-
-const CHAT_MODEL = 'openai/gpt-4o-mini';
-const EMBEDDINGS_MODEL = 'openai/text-embedding-3-small';
-
-const SHORT_ANSWER = 'Answer in at most five words.';
-const CHAT_PROMPT = `What is the capital of France? ${SHORT_ANSWER}`;
-// Deliberately does not name the tool: `tool_choice: 'required'` forces the call.
-const WEATHER_PROMPT = `What is the weather in Paris? ${SHORT_ANSWER}`;
-const SYSTEM = 'You are a helpful assistant used by an automated test.';
-
-const WEATHER_TOOL = {
-  type: 'function' as const,
-  function: {
-    name: 'get_weather',
-    description: 'Get the current weather for a city.',
-    parameters: {
-      type: 'object',
-      properties: { city: { type: 'string', description: 'The city name' } },
-      required: ['city'],
-    },
-  },
-};
-
-const app = express();
-
-/** The trace this request is recorded under, so the test can look its spans up in Sentry. */
-function currentTraceId(): string | undefined {
-  return Sentry.getActiveSpan()?.spanContext().traceId;
-}
-
-// Each route makes one call through the `openai` client and answers with the trace id, so the test can
-// find the request's spans in Sentry.
-
-app.get('/chat', async (_req, res, next) => {
-  try {
-    const completion = await client.chat.completions.create({
-      model: CHAT_MODEL,
-      messages: [
-        { role: 'system', content: SYSTEM },
-        { role: 'user', content: CHAT_PROMPT },
-      ],
-      temperature: 0,
-      max_tokens: 32,
-    });
-    res.send({
-      traceId: currentTraceId(),
-      answer: completion.choices[0]?.message.content ?? '',
-    });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.get('/chat-stream', async (_req, res, next) => {
-  try {
-    const stream = await client.chat.completions.create({
-      model: CHAT_MODEL,
-      messages: [
-        { role: 'system', content: SYSTEM },
-        { role: 'user', content: CHAT_PROMPT },
-      ],
-      temperature: 0,
-      max_tokens: 32,
-      stream: true,
-      // Ask for the usage in the final chunk, so the streamed span carries token counts.
-      stream_options: { include_usage: true },
-    });
-
-    let answer = '';
-    for await (const chunk of stream) {
-      answer += chunk.choices[0]?.delta.content ?? '';
-    }
-    res.send({ traceId: currentTraceId(), answer });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.get('/tools', async (_req, res, next) => {
-  try {
-    const completion = await client.chat.completions.create({
-      model: CHAT_MODEL,
-      messages: [{ role: 'user', content: WEATHER_PROMPT }],
-      tools: [WEATHER_TOOL],
-      tool_choice: 'required',
-      max_tokens: 64,
-    });
-    res.send({
-      traceId: currentTraceId(),
-      toolCalls: completion.choices[0]?.message.tool_calls ?? [],
-    });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.get('/responses', async (_req, res, next) => {
-  try {
-    const response = await client.responses.create({
-      model: CHAT_MODEL,
-      instructions: SYSTEM,
-      input: CHAT_PROMPT,
-      temperature: 0,
-      max_output_tokens: 32,
-    });
-    res.send({ traceId: currentTraceId(), answer: response.output_text });
-  } catch (error) {
-    next(error);
-  }
-});
-
-app.get('/embeddings', async (_req, res, next) => {
-  try {
-    const embedding = await client.embeddings.create({
-      model: EMBEDDINGS_MODEL,
-      input: 'The capital of France is Paris.',
-    });
-    res.send({
-      traceId: currentTraceId(),
-      dimensions: embedding.data[0]?.embedding.length ?? 0,
-    });
-  } catch (error) {
-    next(error);
-  }
-});
-
-Sentry.setupExpressErrorHandler(app);
-
-app.use((error: Error, _req: express.Request, res: express.Response, _next: express.NextFunction) => {
-  res.status(500).send({ message: error.message });
-});
-
-const port = Number(process.env.PORT ?? 3030);
-app.listen(port, () => {
-  // eslint-disable-next-line no-console
-  console.log(`node-openai-send-to-sentry listening on port ${port}`);
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/instrument.ts b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/instrument.ts
deleted file mode 100644
index c6c15df960cb..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/src/instrument.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import * as Sentry from '@sentry/node';
-
-// The setup from the docs, nothing more: preloaded with `node --import`, no tunnel, so the spans go to
-// the real Sentry project behind `E2E_TEST_DSN`, where the tests read them back. The OpenAI integration
-// is on by default; its runtime channel injection is what picks up the `openai` client in app.ts.
-Sentry.init({
-  dsn: process.env.E2E_TEST_DSN,
-  environment: 'qa', // dynamic sampling bias to keep transactions
-  tracesSampleRate: 1,
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tests/send-to-sentry.test.ts b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tests/send-to-sentry.test.ts
deleted file mode 100644
index eee3e75aeafb..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tests/send-to-sentry.test.ts
+++ /dev/null
@@ -1,172 +0,0 @@
-import { expect, test } from '@playwright/test';
-import type { TraceItem } from '@sentry-internal/test-utils/cli';
-import {
-  EVENT_POLLING_OPTIONS,
-  fetchSpanAttributes,
-  fetchTrace,
-  findSpanInTrace,
-  flattenTrace,
-} from '@sentry-internal/test-utils/cli';
-
-// Mirrors src/app.ts.
-const CHAT_MODEL = 'openai/gpt-4o-mini';
-const EMBEDDINGS_MODEL = 'openai/text-embedding-3-small';
-
-type Attributes = Record<string, unknown>;
-
-/** Sends one request to the app and returns the trace its request span was recorded under. */
-async function requestTrace(baseURL: string | undefined, path: string): Promise<string> {
-  const response = await fetch(`${baseURL}${path}`);
-  const body = await response.text();
-  expect(response.status, `${path} answered ${response.status}: ${body}`).toBe(200);
-
-  const { traceId } = JSON.parse(body) as { traceId?: string };
-  expect(traceId, `${path} did not report a trace id: ${body}`).toMatch(/^[0-9a-f]{32}$/);
-
-  console.log(`${path}: https://${process.env.E2E_TEST_SENTRY_ORG_SLUG}.sentry.io/explore/traces/trace/${traceId}/`);
-  return traceId!;
-}
-
-/**
- * Polls Sentry until the trace holds a span with `op`, then returns that span and its attributes. The
- * trace endpoint only carries the span's op, name and place in the tree; the attributes need a second
- * lookup, which is polled as well since the two can land apart.
- */
-async function waitForSpan(traceId: string, op: string): Promise<{ span: TraceItem; attributes: Attributes }> {
-  let found: { span: TraceItem; attributes: Attributes } | undefined;
-
-  await expect
-    .poll(() => {
-      const span = findSpanInTrace(traceId, op);
-      const attributes = span?.event_id ? fetchSpanAttributes(traceId, span.event_id) : undefined;
-      found = span && attributes ? { span, attributes } : undefined;
-      return found;
-    }, EVENT_POLLING_OPTIONS)
-    .toBeDefined();
-
-  return found!;
-}
-
-/** The ids of the spans with `op` below the request span (`http.server`) of the trace. */
-function spanIdsUnderRequestSpan(traceId: string, op: string): string[] {
-  const requestSpan = flattenTrace(fetchTrace(traceId)).find(item => item.op === 'http.server');
-  return flattenTrace(requestSpan?.children ?? [])
-    .filter(item => item.op === op)
-    .map(item => item.event_id!);
-}
-
-/**
- * The request span is the segment; it ends last, so it can land after its children. Expecting exactly
- * one span also catches the call being instrumented twice.
- */
-async function expectOnlySpanUnderRequestSpan(traceId: string, op: string, span: TraceItem): Promise<void> {
-  await expect.poll(() => spanIdsUnderRequestSpan(traceId, op), EVENT_POLLING_OPTIONS).toEqual([span.event_id]);
-}
-
-/**
- * The attributes every successful model-call span carries once Sentry has stored it, whatever the
- * model answers. Model-dependent values (token counts, response id and model) are checked for shape,
- * not content. Note the names are the stored ones: `origin` and `span.status` rather than the
- * `sentry.*` attributes the SDK sends.
- */
-function expectModelCallAttributes(attributes: Attributes, operation: 'chat' | 'embeddings', model: string): void {
-  expect(attributes).toMatchObject({
-    'span.op': `gen_ai.${operation}`,
-    'span.status': 'ok',
-    origin: 'auto.ai.openai',
-    'gen_ai.operation.name': operation,
-    'gen_ai.provider.name': 'openai',
-    'gen_ai.request.model': model,
-  });
-  // OpenAI embeddings responses carry no id, so only chat calls are guaranteed one.
-  if (operation === 'chat') {
-    expect(typeof attributes['gen_ai.response.id']).toBe('string');
-  }
-  expect(typeof attributes['gen_ai.response.model']).toBe('string');
-  // The Sentry API returns int attributes as strings.
-  expect(Number(attributes['gen_ai.usage.input_tokens'])).toBeGreaterThan(0);
-  expect(Number(attributes['gen_ai.usage.total_tokens'])).toBeGreaterThan(0);
-}
-
-/** `gen_ai.response.finish_reasons` is a JSON array; a streamed answer can repeat the reason per chunk. */
-function finishReasons(attributes: Attributes): string[] {
-  return JSON.parse(attributes['gen_ai.response.finish_reasons'] as string);
-}
-
-test('Sends a chat completion to Sentry as a gen_ai.chat span under the request span', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/chat');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expect(span.description).toBe(`chat ${CHAT_MODEL}`);
-  expectModelCallAttributes(attributes, 'chat', CHAT_MODEL);
-  expect(Number(attributes['gen_ai.usage.output_tokens'])).toBeGreaterThan(0);
-  expect(finishReasons(attributes)).toEqual(['stop']);
-  expect(attributes['gen_ai.response.streaming']).toBeUndefined();
-
-  // The SDK records prompts and answers by default, and they have to survive the trip to Sentry. The
-  // answer is sent as `gen_ai.response.text` and stored as `gen_ai.output.messages`.
-  expect(attributes['gen_ai.system_instructions']).toContain('automated test');
-  expect(attributes['gen_ai.input.messages']).toContain('capital of France');
-  expect(attributes['gen_ai.output.messages']).toMatch(/paris/i);
-
-  await expectOnlySpanUnderRequestSpan(traceId, 'gen_ai.chat', span);
-});
-
-test('Sends a streamed chat completion to Sentry with its token usage', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/chat-stream');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expect(span.description).toBe(`chat ${CHAT_MODEL}`);
-  expectModelCallAttributes(attributes, 'chat', CHAT_MODEL);
-  expect(attributes['gen_ai.response.streaming']).toBe(true);
-  // The usage only arrives in the final chunk, which the streaming instrumentation has to pick up.
-  expect(Number(attributes['gen_ai.usage.output_tokens'])).toBeGreaterThan(0);
-  expect(finishReasons(attributes)).toContain('stop');
-  expect(attributes['gen_ai.output.messages']).toMatch(/paris/i);
-
-  await expectOnlySpanUnderRequestSpan(traceId, 'gen_ai.chat', span);
-});
-
-test('Sends a chat completion that returned a tool call to Sentry', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/tools');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expectModelCallAttributes(attributes, 'chat', CHAT_MODEL);
-  expect(finishReasons(attributes)).toEqual(['tool_calls']);
-  expect(attributes['gen_ai.tool.definitions']).toContain('get_weather');
-  // The SDK also sends the returned call as `gen_ai.response.tool_calls`, but that attribute is not
-  // stored as such, so the finish reason is what proves the tool call made it.
-  // TODO: Assert the call in `gen_ai.output.messages` once the OpenAI integration records it there.
-
-  await expectOnlySpanUnderRequestSpan(traceId, 'gen_ai.chat', span);
-});
-
-test('Sends a Responses API call to Sentry as a gen_ai.chat span', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/responses');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.chat');
-
-  expect(span.description).toBe(`chat ${CHAT_MODEL}`);
-  expectModelCallAttributes(attributes, 'chat', CHAT_MODEL);
-  expect(Number(attributes['gen_ai.usage.output_tokens'])).toBeGreaterThan(0);
-  expect(finishReasons(attributes)).toEqual(['completed']);
-  expect(attributes['gen_ai.input.messages']).toContain('capital of France');
-  expect(attributes['gen_ai.output.messages']).toMatch(/paris/i);
-
-  await expectOnlySpanUnderRequestSpan(traceId, 'gen_ai.chat', span);
-});
-
-test('Sends an embeddings call to Sentry as a gen_ai.embeddings span', async ({ baseURL }) => {
-  const traceId = await requestTrace(baseURL, '/embeddings');
-
-  const { span, attributes } = await waitForSpan(traceId, 'gen_ai.embeddings');
-
-  expect(span.description).toBe(`embeddings ${EMBEDDINGS_MODEL}`);
-  expectModelCallAttributes(attributes, 'embeddings', EMBEDDINGS_MODEL);
-  expect(attributes['gen_ai.embeddings.input']).toContain('Paris');
-
-  await expectOnlySpanUnderRequestSpan(traceId, 'gen_ai.embeddings', span);
-});
diff --git a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tsconfig.json b/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tsconfig.json
deleted file mode 100644
index 795574fd9df2..000000000000
--- a/dev-packages/e2e-tests/test-applications/node-openai-send-to-sentry/tsconfig.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "es2022",
-    "module": "nodenext",
-    "moduleResolution": "nodenext",
-    "outDir": "dist",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "types": ["node"]
-  },
-  "include": ["src/**/*.ts"]
-}

From 9bc20868cb80b102dd42ac92c1fd0a4eaa99727b Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Fri, 30 Oct 2026 13:22:15 +0100
Subject: [PATCH 055/169] test(node-integration-tests): Install Flue and
 pi-durable as package dependencies (#25933)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The Flue and pi-durable suites installed their packages through
`additionalDependencies`: an unlocked `npm install` into a fresh tmp dir
for every `createEsmAndCjsTests` call. That is 3 installs for Flue and 9
for pi-durable, per run and Node version. Measured locally for Flue:
~16s cold / ~3s warm and 210 MB each time. The unpinned `^` ranges also
let upstream releases reach CI without review. As root devDependencies
they are installed once and pinned by the lockfile. They were kept out
because their `engines.node >= 22.19` broke `yarn install` on Node 20.
Under pnpm, without `engine-strict`, that is only a warning. Both suites
still skip below Node 22.

Additionally, we used to use `createEsmAndCjsTests` and then skip for
the cjs case. Instead, we can just use `createEsmTests` here.

This prepares the split of the pi-ai integration (#25869).

**How to review:** Best viewed with whitespace hidden. Dropping the
trailing options argument made the formatter re-indent both suites, and
switching to `createEsmTests` removed the hand-written CJS skips. No
assertions change. The `allowBuilds` entries are for `@google/genai` and
`protobufjs`, which the pi packages pull in.

**Unsure about:** `pnpm dedupe` (enforced in CI) moves the root
`@google/genai` from 1.20.0 to 1.52.0 and bumps some
`@aws-sdk`/`@smithy` packages, since pi-ai depends on newer versions.
The google-genai and aws-serverless suites pass locally.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../node-integration-tests/package.json       |    5 +
 .../suites/tracing/flue/test.ts               |  322 ++---
 .../suites/tracing/pi-durable/test.ts         | 1282 ++++++++---------
 pnpm-lock.yaml                                |  624 +++++++-
 pnpm-workspace.yaml                           |    2 +
 5 files changed, 1305 insertions(+), 930 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 563b661fed20..2965f6567c76 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -36,6 +36,10 @@
     "@aws-sdk/client-sfn": "^3.1046.0",
     "@aws-sdk/client-sns": "^3.1046.0",
     "@aws-sdk/client-sqs": "^3.1046.0",
+    "@earendil-works/chord": "^1.4.0",
+    "@earendil-works/pi-ai": "^1.4.0",
+    "@earendil-works/pi-durable": "^1.4.0",
+    "@flue/runtime": "2.0.3",
     "@google/genai": "^1.20.0",
     "@growthbook/growthbook": "^1.6.5",
     "@hapi/hapi": "^21.3.10",
@@ -113,6 +117,7 @@
     "srvx": "^0.11.22",
     "tedious": "^19.2.1",
     "unstorage": "2.0.0-alpha.7",
+    "valibot": "1.4.2",
     "winston": "^3.17.0",
     "ws": "^8.20.1",
     "yargs": "^16.2.0"
diff --git a/dev-packages/node-integration-tests/suites/tracing/flue/test.ts b/dev-packages/node-integration-tests/suites/tracing/flue/test.ts
index b750ee653e4f..83c73526b43e 100644
--- a/dev-packages/node-integration-tests/suites/tracing/flue/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/flue/test.ts
@@ -14,198 +14,156 @@ import {
   GEN_AI_USAGE_INPUT_TOKENS,
   GEN_AI_USAGE_OUTPUT_TOKENS,
   GEN_AI_USAGE_TOTAL_TOKENS,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
+import { GEN_AI_CHAT, GEN_AI_EXECUTE_TOOL, GEN_AI_INVOKE_AGENT } from '@sentry/conventions/op';
 import { afterAll, describe, expect } from 'vitest';
 import { supports } from '../../../utils';
-import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../utils/runner';
-
-// `@flue/runtime` declares `engines.node >= 22.19`, so it can't live in the package's root
-// `devDependencies` (that would break `yarn install` on the 20.19 CI matrix). Install it per-suite
-// instead, guarded by the `min: 22` skip below.
-const FLUE_DEPENDENCIES = {
-  additionalDependencies: {
-    '@flue/runtime': '2.0.3',
-    '@earendil-works/pi-ai': '0.85.1',
-    valibot: '1.1.0',
-  },
-};
+import { cleanupChildProcesses, createEsmTests } from '../../../utils/runner';
 
+// `@flue/runtime` declares `engines.node >= 22.19`.
 describe.runIf(supports({ min: 22 }))('Flue integration', () => {
   afterAll(() => {
     cleanupChildProcesses();
   });
 
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      // `@flue/runtime` is ESM-only — its `exports` map has no `require` condition, so there is no
-      // CJS variant of this scenario to run.
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('creates the invoke_agent / chat / execute_tool hierarchy', async () => {
-        await createRunner()
-          .expect({
-            span: container => {
-              const spans = container.items;
-
-              const root = spans.find(span => span.name === 'flue-test')!;
-              expect(root.is_segment).toBe(true);
-
-              // Counted rather than looked up: the interceptor skips the submission wrapper
-              // operation, so one dispatch opens exactly one agent span, and each turn and tool call
-              // is spanned once. `find` passes just as happily on a duplicate.
-              expect(spans.filter(span => span.attributes['sentry.origin']?.value === 'auto.ai.flue')).toHaveLength(4);
-
-              const agents = spans.filter(span => span.name === 'invoke_agent Hello');
-              const chats = spans.filter(span => span.name === 'chat faux-model');
-              const tools = spans.filter(span => span.name === 'execute_tool get_weather');
-              expect(agents).toHaveLength(1);
-              expect(tools).toHaveLength(1);
-              // One turn asks for the tool, the second answers with its result.
-              expect(chats).toHaveLength(2);
-
-              const agent = agents[0]!;
-              expect(agent.attributes['sentry.op']?.value).toBe('gen_ai.invoke_agent');
-              expect(agent.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('invoke_agent');
-              expect(agent.attributes[GEN_AI_AGENT_NAME]?.value).toBe('Hello');
-              expect(agent.parent_span_id).toBe(root.span_id);
-
-              const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
-              expect(conversationId).toEqual(expect.any(String));
-
-              // Both turns, not just the first: they leave the provider by different paths (a tool
-              // call, then a final answer) and resolve their parent through separate tracker lookups.
-              for (const chat of chats) {
-                expect(chat.attributes['sentry.op']?.value).toBe('gen_ai.chat');
-                expect(chat.attributes['sentry.origin']?.value).toBe('auto.ai.flue');
-                expect(chat.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('chat');
-                expect(chat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
-                expect(chat.parent_span_id).toBe(agent.span_id);
-                expect(chat.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBeGreaterThan(0);
-                expect(chat.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBeGreaterThan(0);
-                expect(chat.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBeGreaterThan(0);
-                // Flue computes cost itself; no provider SDK reports it. The faux provider prices
-                // every model at zero, so this only proves the attribute is mapped.
-                expect(chat.attributes[GEN_AI_COST_TOTAL_TOKENS]?.value).toEqual(expect.any(Number));
-              }
-
-              // pi-ai's `toolUse` is reported as the conventions' `tool_call`.
-              expect(chats.map(chat => chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).sort()).toEqual([
-                '["stop"]',
-                '["tool_call"]',
-              ]);
-
-              const tool = tools[0]!;
-              // The tool has to actually run: a schema mismatch still produces a correctly named and
-              // parented span, so only the status separates a real call from a rejected one.
-              expect(tool.status).toBe('ok');
-              expect(tool.attributes['sentry.op']?.value).toBe('gen_ai.execute_tool');
-              expect(tool.attributes['sentry.origin']?.value).toBe('auto.ai.flue');
-              expect(tool.attributes[GEN_AI_TOOL_NAME]?.value).toBe('get_weather');
-
-              // Tool spans are siblings of `chat` under the agent invocation, matching how Flue's
-              // own OpenTelemetry adapter projects them.
-              expect(tool.parent_span_id).toBe(agent.span_id);
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    FLUE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario.mjs',
-    'instrument-with-pii.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('records the messages of the turns in the gen_ai conventions shape', async () => {
-        await createRunner()
-          .expect({
-            span: container => {
-              const chats = container.items
-                .filter(span => span.name === 'chat faux-model')
-                .sort((a, b) => a.start_timestamp - b.start_timestamp);
-              expect(chats).toHaveLength(2);
-
-              // Flue sends pi-ai's shape (`toolResult`, `toolCall`); Sentry renders the conventions.
-              expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))).toEqual([
-                { role: 'user', parts: [{ type: 'text', content: 'What is the weather in Berlin?' }] },
-              ]);
-              expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_OUTPUT_MESSAGES]?.value))).toEqual([
-                {
-                  role: 'assistant',
-                  parts: [{ type: 'tool_call', id: 'call_1', name: 'get_weather', arguments: '{"city":"Berlin"}' }],
-                  finish_reason: 'tool_call',
-                },
-              ]);
-
-              const answerInput = JSON.parse(String(chats[1]!.attributes[GEN_AI_INPUT_MESSAGES]?.value));
-              expect(answerInput.map((message: { role: string }) => message.role)).toEqual([
-                'user',
-                'assistant',
-                'tool',
-              ]);
-              expect(answerInput[2].parts[0]).toMatchObject({
-                type: 'tool_call_response',
-                id: 'call_1',
-                name: 'get_weather',
-              });
-              expect(answerInput[2].parts[0].result).toContain('sunny in Berlin');
-              expect(chats[1]!.attributes[GEN_AI_SYSTEM_INSTRUCTIONS]?.value).toContain('You are a helpful assistant.');
-
-              // The tool span records the result the model receives, not Flue's internal wrapper.
-              const tool = container.items.find(span => span.name === 'execute_tool get_weather')!;
-              expect(tool.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"city":"Berlin"}');
-              expect(tool.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('sunny in Berlin');
-              expect(tool.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).not.toContain('details');
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    FLUE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-separate-requests.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('puts each dispatch in the trace of the request that admitted it', async () => {
-        const expectAgentUnder = (requestName: string) => ({
-          span: (container: SerializedStreamedSpanContainer) => {
-            const request = container.items.find(span => span.name === requestName)!;
-            expect(request.is_segment).toBe(true);
-
-            const agents = container.items.filter(span => span.name === 'invoke_agent Hello');
+  // `@flue/runtime` is ESM-only: its `exports` map has no `require` condition.
+  createEsmTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('creates the invoke_agent / chat / execute_tool hierarchy', async () => {
+      await createRunner()
+        .expect({
+          span: container => {
+            const spans = container.items;
+
+            const root = spans.find(span => span.name === 'flue-test')!;
+            expect(root.is_segment).toBe(true);
+
+            // Counted rather than looked up: the interceptor skips the submission wrapper
+            // operation, so one dispatch opens exactly one agent span, and each turn and tool call
+            // is spanned once. `find` passes just as happily on a duplicate.
+            expect(spans.filter(span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.flue')).toHaveLength(4);
+
+            const agents = spans.filter(span => span.name === 'invoke_agent Hello');
+            const chats = spans.filter(span => span.name === 'chat faux-model');
+            const tools = spans.filter(span => span.name === 'execute_tool get_weather');
             expect(agents).toHaveLength(1);
-            expect(agents[0]!.parent_span_id).toBe(request.span_id);
+            expect(tools).toHaveLength(1);
+            // One turn asks for the tool, the second answers with its result.
+            expect(chats).toHaveLength(2);
+
+            const agent = agents[0]!;
+            expect(agent.attributes[SENTRY_OP]?.value).toBe(GEN_AI_INVOKE_AGENT);
+            expect(agent.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('invoke_agent');
+            expect(agent.attributes[GEN_AI_AGENT_NAME]?.value).toBe('Hello');
+            expect(agent.parent_span_id).toBe(root.span_id);
+
+            const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
+            expect(conversationId).toEqual(expect.any(String));
+
+            // Both turns, not just the first: they leave the provider by different paths (a tool
+            // call, then a final answer) and resolve their parent through separate tracker lookups.
+            for (const chat of chats) {
+              expect(chat.attributes[SENTRY_OP]?.value).toBe(GEN_AI_CHAT);
+              expect(chat.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.flue');
+              expect(chat.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('chat');
+              expect(chat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
+              expect(chat.parent_span_id).toBe(agent.span_id);
+              expect(chat.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBeGreaterThan(0);
+              expect(chat.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBeGreaterThan(0);
+              expect(chat.attributes[GEN_AI_USAGE_TOTAL_TOKENS]?.value).toBeGreaterThan(0);
+              // Flue computes cost itself; no provider SDK reports it. The faux provider prices
+              // every model at zero, so this only proves the attribute is mapped.
+              expect(chat.attributes[GEN_AI_COST_TOTAL_TOKENS]?.value).toEqual(expect.any(Number));
+            }
+
+            // pi-ai's `toolUse` is reported as the conventions' `tool_call`.
+            expect(chats.map(chat => chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).sort()).toEqual([
+              '["stop"]',
+              '["tool_call"]',
+            ]);
+
+            const tool = tools[0]!;
+            // The tool has to actually run: a schema mismatch still produces a correctly named and
+            // parented span, so only the status separates a real call from a rejected one.
+            expect(tool.status).toBe('ok');
+            expect(tool.attributes[SENTRY_OP]?.value).toBe(GEN_AI_EXECUTE_TOOL);
+            expect(tool.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.flue');
+            expect(tool.attributes[GEN_AI_TOOL_NAME]?.value).toBe('get_weather');
+
+            // Tool spans are siblings of `chat` under the agent invocation, matching how Flue's
+            // own OpenTelemetry adapter projects them.
+            expect(tool.parent_span_id).toBe(agent.span_id);
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
+
+  createEsmTests(__dirname, 'scenario.mjs', 'instrument-with-pii.mjs', (createRunner, test) => {
+    test('records the messages of the turns in the gen_ai conventions shape', async () => {
+      await createRunner()
+        .expect({
+          span: container => {
+            const chats = container.items
+              .filter(span => span.name === 'chat faux-model')
+              .sort((a, b) => a.start_timestamp - b.start_timestamp);
+            expect(chats).toHaveLength(2);
+
+            // Flue sends pi-ai's shape (`toolResult`, `toolCall`); Sentry renders the conventions.
+            expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))).toEqual([
+              { role: 'user', parts: [{ type: 'text', content: 'What is the weather in Berlin?' }] },
+            ]);
+            expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_OUTPUT_MESSAGES]?.value))).toEqual([
+              {
+                role: 'assistant',
+                parts: [{ type: 'tool_call', id: 'call_1', name: 'get_weather', arguments: '{"city":"Berlin"}' }],
+                finish_reason: 'tool_call',
+              },
+            ]);
+
+            const answerInput = JSON.parse(String(chats[1]!.attributes[GEN_AI_INPUT_MESSAGES]?.value));
+            expect(answerInput.map((message: { role: string }) => message.role)).toEqual(['user', 'assistant', 'tool']);
+            expect(answerInput[2].parts[0]).toMatchObject({
+              type: 'tool_call_response',
+              id: 'call_1',
+              name: 'get_weather',
+            });
+            expect(answerInput[2].parts[0].result).toContain('sunny in Berlin');
+            expect(chats[1]!.attributes[GEN_AI_SYSTEM_INSTRUCTIONS]?.value).toContain('You are a helpful assistant.');
+
+            // The tool span records the result the model receives, not Flue's internal wrapper.
+            const tool = container.items.find(span => span.name === 'execute_tool get_weather')!;
+            expect(tool.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"city":"Berlin"}');
+            expect(tool.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('sunny in Berlin');
+            expect(tool.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).not.toContain('details');
           },
-        });
-
-        await createRunner()
-          .unordered()
-          .expect(expectAgentUnder('request-a'))
-          .expect(expectAgentUnder('request-b'))
-          .start()
-          .completed();
+        })
+        .start()
+        .completed();
+    });
+  });
+
+  createEsmTests(__dirname, 'scenario-separate-requests.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('puts each dispatch in the trace of the request that admitted it', async () => {
+      const expectAgentUnder = (requestName: string) => ({
+        span: (container: SerializedStreamedSpanContainer) => {
+          const request = container.items.find(span => span.name === requestName)!;
+          expect(request.is_segment).toBe(true);
+
+          const agents = container.items.filter(span => span.name === 'invoke_agent Hello');
+          expect(agents).toHaveLength(1);
+          expect(agents[0]!.parent_span_id).toBe(request.span_id);
+        },
       });
-    },
-    FLUE_DEPENDENCIES,
-  );
+
+      await createRunner()
+        .unordered()
+        .expect(expectAgentUnder('request-a'))
+        .expect(expectAgentUnder('request-b'))
+        .start()
+        .completed();
+    });
+  });
 });
diff --git a/dev-packages/node-integration-tests/suites/tracing/pi-durable/test.ts b/dev-packages/node-integration-tests/suites/tracing/pi-durable/test.ts
index 7bfd7947bb9f..f26aa34b63d7 100644
--- a/dev-packages/node-integration-tests/suites/tracing/pi-durable/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/pi-durable/test.ts
@@ -23,18 +23,7 @@ import { GEN_AI_CHAT, GEN_AI_EXECUTE_TOOL, GEN_AI_INVOKE_AGENT } from '@sentry/c
 import { afterAll, describe, expect } from 'vitest';
 import { GEN_AI_TOOL_CALL_ID_ATTRIBUTE } from '../../../../../packages/server-utils/src/ai/core/gen-ai-attributes';
 import { supports } from '../../../utils';
-import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../utils/runner';
-
-// The pi packages declare `engines.node >= 22.19`, so they can't live in the package's root
-// `devDependencies` (that would break `yarn install` on the 20.19 CI matrix). Install them per-suite
-// instead, guarded by the `min: 22` skip below.
-const PI_DURABLE_DEPENDENCIES = {
-  additionalDependencies: {
-    '@earendil-works/pi-durable': '^1.2.0',
-    '@earendil-works/pi-ai': '^1.2.0',
-    '@earendil-works/chord': '^1.2.0',
-  },
-};
+import { cleanupChildProcesses, createEsmTests } from '../../../utils/runner';
 
 // The provider session id that pi-durable stores with each conversation, a UUIDv7.
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -48,702 +37,613 @@ const CONTENT_ATTRIBUTES = [
   GEN_AI_TOOL_CALL_RESULT,
 ];
 
+// The pi packages declare `engines.node >= 22.19`.
 describe.runIf(supports({ min: 22 }))('pi-durable integration', () => {
   afterAll(() => {
     cleanupChildProcesses();
   });
 
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      // The pi packages are ESM-only: their `exports` maps have no `require` condition.
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('traces each run as its own invoke_agent trace with chat and execute_tool children', async () => {
-        let toolRunTraceId: string | undefined;
-        let brokenToolSpanId: string | undefined;
-        let errorTraceId: string | undefined;
-        let errorSpanId: string | undefined;
-        const conversationIds: unknown[] = [];
-
-        await createRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const agent = spans.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              expect(spans.filter(span => span.name === 'chat faux-model')).toHaveLength(2);
-              // One span per run, request and tool call: a tool wrapped twice would add a span.
-              expect(spans.filter(span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.pi_durable')).toHaveLength(
-                5,
-              );
-
-              expect(agent.attributes[SENTRY_OP]?.value).toBe(GEN_AI_INVOKE_AGENT);
-              expect(agent.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.pi_durable');
-              expect(agent.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('invoke_agent');
-              const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
-              expect(conversationId).toMatch(UUID);
-
-              const chats = spans
-                .filter(span => span.name === 'chat faux-model')
-                .sort((a, b) => a.start_timestamp - b.start_timestamp);
-              for (const chat of chats) {
-                expect(chat.parent_span_id).toBe(agent.span_id);
-                expect(chat.attributes[SENTRY_OP]?.value).toBe(GEN_AI_CHAT);
-                expect(chat.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.pi_durable');
-                expect(chat.attributes[GEN_AI_PROVIDER_NAME]?.value).toBe('faux');
-                expect(chat.attributes[GEN_AI_REQUEST_MODEL]?.value).toBe('faux-model');
-                expect(chat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
-                expect(chat.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBeGreaterThan(0);
-                expect(chat.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBeGreaterThan(0);
-                // pi-durable sends the prompt and the tools as positional system messages.
-                expect(chat.attributes[GEN_AI_SYSTEM_INSTRUCTIONS]?.value).toBe('You are a weather assistant.');
-                expect(
-                  JSON.parse(String(chat.attributes[GEN_AI_TOOL_DEFINITIONS]?.value)).map(
-                    (tool: { name: string }) => tool.name,
-                  ),
-                ).toEqual(['get_weather', 'broken']);
-              }
-
-              // Mapped from pi-ai's shape to the conventions: the tool calls and tool results the
-              // second request carries are what Sentry's conversation view renders.
-              expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))).toEqual([
-                { role: 'user', parts: [{ type: 'text', content: 'What is the weather in Berlin?' }] },
-              ]);
-              const answerInput = JSON.parse(String(chats[1]!.attributes[GEN_AI_INPUT_MESSAGES]?.value));
-              expect(answerInput.map((message: { role: string }) => message.role)).toEqual([
-                'user',
-                'assistant',
-                'tool',
-                'tool',
-              ]);
-              expect(answerInput[1].parts).toEqual([
-                { type: 'tool_call', id: 'call_1', name: 'get_weather', arguments: '{"city":"Berlin"}' },
-                { type: 'tool_call', id: 'call_2', name: 'broken', arguments: '{}' },
-              ]);
-              expect(answerInput[2].parts).toEqual([
-                {
-                  type: 'tool_call_response',
-                  id: 'call_1',
-                  name: 'get_weather',
-                  result: 'It is 21 degrees and sunny in Berlin.',
-                },
-              ]);
-              expect(chats.map(chat => chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).sort()).toEqual([
-                '["stop"]',
-                '["tool_call"]',
-              ]);
-              expect(chats.map(chat => chat.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).join()).toContain(
-                'It is 21 degrees and sunny in Berlin.',
-              );
-
-              const weather = spans.find(span => span.name === 'execute_tool get_weather')!;
-              expect(weather.parent_span_id).toBe(agent.span_id);
-              expect(weather.status).toBe('ok');
-              expect(weather.attributes[SENTRY_OP]?.value).toBe(GEN_AI_EXECUTE_TOOL);
-              expect(weather.attributes[GEN_AI_TOOL_NAME]?.value).toBe('get_weather');
-              expect(weather.attributes[GEN_AI_TOOL_DESCRIPTION]?.value).toBe('Get the current weather for a city.');
-              expect(weather.attributes[GEN_AI_TOOL_CALL_ID_ATTRIBUTE]?.value).toBe('call_1');
-              expect(weather.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"city":"Berlin"}');
-              expect(weather.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('sunny in Berlin');
-              expect(weather.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
-
-              const broken = spans.find(span => span.name === 'execute_tool broken')!;
-              expect(broken.parent_span_id).toBe(agent.span_id);
-              expect(broken.status).toBe('error');
-              // The error result pi-durable gives the model, not the thrown error.
-              expect(broken.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('[error] broken tool');
-
-              toolRunTraceId = agent.trace_id;
-              brokenToolSpanId = broken.span_id;
-              conversationIds.push(conversationId);
-            },
-          })
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const agent = spans.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              expect(spans).toHaveLength(2);
-
-              const chat = spans.find(span => span.name === 'chat faux-model')!;
+  // The pi packages are ESM-only: their `exports` maps have no `require` condition.
+  createEsmTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('traces each run as its own invoke_agent trace with chat and execute_tool children', async () => {
+      let toolRunTraceId: string | undefined;
+      let brokenToolSpanId: string | undefined;
+      let errorTraceId: string | undefined;
+      let errorSpanId: string | undefined;
+      const conversationIds: unknown[] = [];
+
+      await createRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const agent = spans.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            expect(spans.filter(span => span.name === 'chat faux-model')).toHaveLength(2);
+            // One span per run, request and tool call: a tool wrapped twice would add a span.
+            expect(spans.filter(span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.pi_durable')).toHaveLength(
+              5,
+            );
+
+            expect(agent.attributes[SENTRY_OP]?.value).toBe(GEN_AI_INVOKE_AGENT);
+            expect(agent.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.pi_durable');
+            expect(agent.attributes[GEN_AI_OPERATION_NAME]?.value).toBe('invoke_agent');
+            const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
+            expect(conversationId).toMatch(UUID);
+
+            const chats = spans
+              .filter(span => span.name === 'chat faux-model')
+              .sort((a, b) => a.start_timestamp - b.start_timestamp);
+            for (const chat of chats) {
               expect(chat.parent_span_id).toBe(agent.span_id);
-              expect(chat.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).toContain('Goodbye.');
-
-              conversationIds.push(agent.attributes[GEN_AI_CONVERSATION_ID]?.value);
-            },
-          })
-          .expect({
-            span: container => {
-              // The request that opened the Harness and submitted both inputs holds no agent work.
-              expect(container.items).toHaveLength(1);
-              expect(container.items[0]!.name).toBe('pi-durable-request');
-            },
-          })
-          .expect({
-            event: event => {
-              const exception = event.exception?.values?.[0];
-              expect(exception?.value).toBe('broken tool');
-              expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
-
-              errorTraceId = event.contexts?.trace?.trace_id;
-              errorSpanId = event.contexts?.trace?.span_id;
-            },
-          })
-          .start()
-          .completed();
-
-        // Both runs belong to the root conversation, so they share one conversation id.
-        expect(conversationIds).toHaveLength(2);
-        expect(conversationIds[0]).toBe(conversationIds[1]);
-        // The tool error is reported on the failing call's span, in the run's trace.
-        expect(errorTraceId).toBe(toolRunTraceId);
-        expect(errorSpanId).toBe(brokenToolSpanId);
-      });
-
-      test('records no message content when the client turns gen_ai recording off', async () => {
-        await createRunner()
-          .withEnv({ PI_DURABLE_RECORDING: 'off' })
-          .unordered()
-          .expect({
-            span: container => {
-              const spans = container.items;
-              expect(spans).toHaveLength(5);
-              for (const span of spans) {
-                for (const attribute of CONTENT_ATTRIBUTES) {
-                  expect(span.attributes[attribute]).toBeUndefined();
-                }
-              }
-              const weather = spans.find(span => span.name === 'execute_tool get_weather')!;
-              expect(weather.attributes[GEN_AI_TOOL_DESCRIPTION]?.value).toBe('Get the current weather for a city.');
+              expect(chat.attributes[SENTRY_OP]?.value).toBe(GEN_AI_CHAT);
+              expect(chat.attributes[SENTRY_ORIGIN]?.value).toBe('auto.ai.pi_durable');
+              expect(chat.attributes[GEN_AI_PROVIDER_NAME]?.value).toBe('faux');
+              expect(chat.attributes[GEN_AI_REQUEST_MODEL]?.value).toBe('faux-model');
+              expect(chat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
+              expect(chat.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value).toBeGreaterThan(0);
+              expect(chat.attributes[GEN_AI_USAGE_OUTPUT_TOKENS]?.value).toBeGreaterThan(0);
+              // pi-durable sends the prompt and the tools as positional system messages.
+              expect(chat.attributes[GEN_AI_SYSTEM_INSTRUCTIONS]?.value).toBe('You are a weather assistant.');
               expect(
-                spans.find(span => span.name === 'chat faux-model')!.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value,
-              ).toBeGreaterThan(0);
-            },
-          })
-          .expect({
-            span: container => {
-              expect(container.items).toHaveLength(2);
-              for (const span of container.items) {
-                for (const attribute of CONTENT_ATTRIBUTES) {
-                  expect(span.attributes[attribute]).toBeUndefined();
-                }
+                JSON.parse(String(chat.attributes[GEN_AI_TOOL_DEFINITIONS]?.value)).map(
+                  (tool: { name: string }) => tool.name,
+                ),
+              ).toEqual(['get_weather', 'broken']);
+            }
+
+            // Mapped from pi-ai's shape to the conventions: the tool calls and tool results the
+            // second request carries are what Sentry's conversation view renders.
+            expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))).toEqual([
+              { role: 'user', parts: [{ type: 'text', content: 'What is the weather in Berlin?' }] },
+            ]);
+            const answerInput = JSON.parse(String(chats[1]!.attributes[GEN_AI_INPUT_MESSAGES]?.value));
+            expect(answerInput.map((message: { role: string }) => message.role)).toEqual([
+              'user',
+              'assistant',
+              'tool',
+              'tool',
+            ]);
+            expect(answerInput[1].parts).toEqual([
+              { type: 'tool_call', id: 'call_1', name: 'get_weather', arguments: '{"city":"Berlin"}' },
+              { type: 'tool_call', id: 'call_2', name: 'broken', arguments: '{}' },
+            ]);
+            expect(answerInput[2].parts).toEqual([
+              {
+                type: 'tool_call_response',
+                id: 'call_1',
+                name: 'get_weather',
+                result: 'It is 21 degrees and sunny in Berlin.',
+              },
+            ]);
+            expect(chats.map(chat => chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).sort()).toEqual([
+              '["stop"]',
+              '["tool_call"]',
+            ]);
+            expect(chats.map(chat => chat.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).join()).toContain(
+              'It is 21 degrees and sunny in Berlin.',
+            );
+
+            const weather = spans.find(span => span.name === 'execute_tool get_weather')!;
+            expect(weather.parent_span_id).toBe(agent.span_id);
+            expect(weather.status).toBe('ok');
+            expect(weather.attributes[SENTRY_OP]?.value).toBe(GEN_AI_EXECUTE_TOOL);
+            expect(weather.attributes[GEN_AI_TOOL_NAME]?.value).toBe('get_weather');
+            expect(weather.attributes[GEN_AI_TOOL_DESCRIPTION]?.value).toBe('Get the current weather for a city.');
+            expect(weather.attributes[GEN_AI_TOOL_CALL_ID_ATTRIBUTE]?.value).toBe('call_1');
+            expect(weather.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"city":"Berlin"}');
+            expect(weather.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('sunny in Berlin');
+            expect(weather.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
+
+            const broken = spans.find(span => span.name === 'execute_tool broken')!;
+            expect(broken.parent_span_id).toBe(agent.span_id);
+            expect(broken.status).toBe('error');
+            // The error result pi-durable gives the model, not the thrown error.
+            expect(broken.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('[error] broken tool');
+
+            toolRunTraceId = agent.trace_id;
+            brokenToolSpanId = broken.span_id;
+            conversationIds.push(conversationId);
+          },
+        })
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const agent = spans.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            expect(spans).toHaveLength(2);
+
+            const chat = spans.find(span => span.name === 'chat faux-model')!;
+            expect(chat.parent_span_id).toBe(agent.span_id);
+            expect(chat.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).toContain('Goodbye.');
+
+            conversationIds.push(agent.attributes[GEN_AI_CONVERSATION_ID]?.value);
+          },
+        })
+        .expect({
+          span: container => {
+            // The request that opened the Harness and submitted both inputs holds no agent work.
+            expect(container.items).toHaveLength(1);
+            expect(container.items[0]!.name).toBe('pi-durable-request');
+          },
+        })
+        .expect({
+          event: event => {
+            const exception = event.exception?.values?.[0];
+            expect(exception?.value).toBe('broken tool');
+            expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
+
+            errorTraceId = event.contexts?.trace?.trace_id;
+            errorSpanId = event.contexts?.trace?.span_id;
+          },
+        })
+        .start()
+        .completed();
+
+      // Both runs belong to the root conversation, so they share one conversation id.
+      expect(conversationIds).toHaveLength(2);
+      expect(conversationIds[0]).toBe(conversationIds[1]);
+      // The tool error is reported on the failing call's span, in the run's trace.
+      expect(errorTraceId).toBe(toolRunTraceId);
+      expect(errorSpanId).toBe(brokenToolSpanId);
+    });
+
+    test('records no message content when the client turns gen_ai recording off', async () => {
+      await createRunner()
+        .withEnv({ PI_DURABLE_RECORDING: 'off' })
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            expect(spans).toHaveLength(5);
+            for (const span of spans) {
+              for (const attribute of CONTENT_ATTRIBUTES) {
+                expect(span.attributes[attribute]).toBeUndefined();
               }
-            },
-          })
-          .expect({
-            span: container => {
-              expect(container.items).toHaveLength(1);
-              expect(container.items[0]!.name).toBe('pi-durable-request');
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.exception?.values?.[0]?.value).toBe('broken tool');
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-tools.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('reports app tool failures but not failures of the built-in coding tools', async () => {
-        const appErrors: unknown[] = [];
-
-        // Ordered, with spans ignored: a captured failure of the built-in `bash` tool would be an
-        // extra event before the sentinel, which the scenario sends once everything else is sent.
-        // The two app failures are processed concurrently, so they may arrive in either order.
-        await createRunner()
-          .ignore('span')
-          .expect({
-            event: event => {
-              expect(['app read failed', 'Intentional pi-durable tool failure']).toContain(
-                event.exception?.values?.[0]?.value,
-              );
-              appErrors.push(event.exception?.values?.[0]?.value);
-            },
-          })
-          .expect({
-            event: event => {
-              expect(['app read failed', 'Intentional pi-durable tool failure']).toContain(
-                event.exception?.values?.[0]?.value,
-              );
-              appErrors.push(event.exception?.values?.[0]?.value);
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.message).toBe('pi-durable tools done');
-            },
-          })
-          .start()
-          .completed();
-
-        expect(appErrors.sort()).toEqual(['Intentional pi-durable tool failure', 'app read failed']);
-      });
-
-      test('records the tool result the model receives', async () => {
-        let errorSpanId: string | undefined;
-        let failingToolSpanId: string | undefined;
+            }
+            const weather = spans.find(span => span.name === 'execute_tool get_weather')!;
+            expect(weather.attributes[GEN_AI_TOOL_DESCRIPTION]?.value).toBe('Get the current weather for a city.');
+            expect(
+              spans.find(span => span.name === 'chat faux-model')!.attributes[GEN_AI_USAGE_INPUT_TOKENS]?.value,
+            ).toBeGreaterThan(0);
+          },
+        })
+        .expect({
+          span: container => {
+            expect(container.items).toHaveLength(2);
+            for (const span of container.items) {
+              for (const attribute of CONTENT_ATTRIBUTES) {
+                expect(span.attributes[attribute]).toBeUndefined();
+              }
+            }
+          },
+        })
+        .expect({
+          span: container => {
+            expect(container.items).toHaveLength(1);
+            expect(container.items[0]!.name).toBe('pi-durable-request');
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.exception?.values?.[0]?.value).toBe('broken tool');
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
 
-        await createRunner()
-          .unordered()
-          .expect({
-            event: event => {
-              const exception = event.exception?.values?.[0];
-              expect(exception?.value).toBe('Intentional pi-durable tool failure');
-              expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
-              errorSpanId = event.contexts?.trace?.span_id;
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.exception?.values?.[0]?.value).toBe('app read failed');
-            },
-          })
-          .expect({
-            span: container => {
-              const spans = container.items;
-
-              const bash = spans.find(span => span.name === 'execute_tool bash')!;
-              expect(bash.status).toBe('error');
-              expect(bash.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toMatch(/Command exited with code \d+/);
-
-              const read = spans.find(span => span.name === 'execute_tool read')!;
-              expect(read.status).toBe('error');
-              expect(read.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('app read failed');
-
-              // The streamed output becomes the result, since the tool returns no content.
-              const streamer = spans.find(span => span.name === 'execute_tool streamer')!;
-              expect(streamer.status).toBe('ok');
-              expect(streamer.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('line 1\nline 2\n');
-
-              const secret = spans.find(span => span.name === 'execute_tool secret')!;
-              expect(secret.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('redacted by afterTool');
-
-              const failNow = spans.find(span => span.name === 'execute_tool fail_now')!;
-              expect(failNow.status).toBe('error');
-              failingToolSpanId = failNow.span_id;
-            },
-          })
-          .start()
-          .completed();
+  createEsmTests(__dirname, 'scenario-tools.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('reports app tool failures but not failures of the built-in coding tools', async () => {
+      const appErrors: unknown[] = [];
+
+      // Ordered, with spans ignored: a captured failure of the built-in `bash` tool would be an
+      // extra event before the sentinel, which the scenario sends once everything else is sent.
+      // The two app failures are processed concurrently, so they may arrive in either order.
+      await createRunner()
+        .ignore('span')
+        .expect({
+          event: event => {
+            expect(['app read failed', 'Intentional pi-durable tool failure']).toContain(
+              event.exception?.values?.[0]?.value,
+            );
+            appErrors.push(event.exception?.values?.[0]?.value);
+          },
+        })
+        .expect({
+          event: event => {
+            expect(['app read failed', 'Intentional pi-durable tool failure']).toContain(
+              event.exception?.values?.[0]?.value,
+            );
+            appErrors.push(event.exception?.values?.[0]?.value);
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.message).toBe('pi-durable tools done');
+          },
+        })
+        .start()
+        .completed();
+
+      expect(appErrors.sort()).toEqual(['Intentional pi-durable tool failure', 'app read failed']);
+    });
+
+    test('records the tool result the model receives', async () => {
+      let errorSpanId: string | undefined;
+      let failingToolSpanId: string | undefined;
+
+      await createRunner()
+        .unordered()
+        .expect({
+          event: event => {
+            const exception = event.exception?.values?.[0];
+            expect(exception?.value).toBe('Intentional pi-durable tool failure');
+            expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
+            errorSpanId = event.contexts?.trace?.span_id;
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.exception?.values?.[0]?.value).toBe('app read failed');
+          },
+        })
+        .expect({
+          span: container => {
+            const spans = container.items;
+
+            const bash = spans.find(span => span.name === 'execute_tool bash')!;
+            expect(bash.status).toBe('error');
+            expect(bash.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toMatch(/Command exited with code \d+/);
+
+            const read = spans.find(span => span.name === 'execute_tool read')!;
+            expect(read.status).toBe('error');
+            expect(read.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toContain('app read failed');
+
+            // The streamed output becomes the result, since the tool returns no content.
+            const streamer = spans.find(span => span.name === 'execute_tool streamer')!;
+            expect(streamer.status).toBe('ok');
+            expect(streamer.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('line 1\nline 2\n');
+
+            const secret = spans.find(span => span.name === 'execute_tool secret')!;
+            expect(secret.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('redacted by afterTool');
+
+            const failNow = spans.find(span => span.name === 'execute_tool fail_now')!;
+            expect(failNow.status).toBe('error');
+            failingToolSpanId = failNow.span_id;
+          },
+        })
+        .start()
+        .completed();
+
+      expect(errorSpanId).toBe(failingToolSpanId);
+    });
+  });
 
-        expect(errorSpanId).toBe(failingToolSpanId);
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-reports.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('captures failures pi-durable does not propagate, and tags idle compaction with its conversation', async () => {
-        let runConversationId: unknown;
-        let compactionConversationId: unknown;
+  createEsmTests(__dirname, 'scenario-reports.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('captures failures pi-durable does not propagate, and tags idle compaction with its conversation', async () => {
+      let runConversationId: unknown;
+      let compactionConversationId: unknown;
+
+      await createRunner()
+        .unordered()
+        .expect({
+          event: event => {
+            const exception = event.exception?.values?.[0];
+            expect(exception?.value).toBe('afterResponse hook failed');
+            expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
+          },
+        })
+        .expect({
+          event: event => {
+            const exception = event.exception?.values?.[0];
+            expect(exception?.value).toBe('card declined');
+            expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
+          },
+        })
+        .expect({
+          span: container => {
+            const agent = container.items.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            runConversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
+          },
+        })
+        .expect({
+          span: container => {
+            // A compaction started while idle belongs to no run, so its request is a trace of its own.
+            expect(container.items).toHaveLength(1);
+            const summary = container.items[0]!;
+            expect(summary.is_segment).toBe(true);
+            expect(summary.attributes[SENTRY_OP]?.value).toBe(GEN_AI_CHAT);
+            compactionConversationId = summary.attributes[GEN_AI_CONVERSATION_ID]?.value;
+          },
+        })
+        .start()
+        .completed();
+
+      expect(runConversationId).toMatch(UUID);
+      expect(compactionConversationId).toBe(runConversationId);
+    });
+  });
 
-        await createRunner()
-          .unordered()
-          .expect({
-            event: event => {
-              const exception = event.exception?.values?.[0];
-              expect(exception?.value).toBe('afterResponse hook failed');
-              expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
-            },
-          })
-          .expect({
-            event: event => {
-              const exception = event.exception?.values?.[0];
-              expect(exception?.value).toBe('card declined');
-              expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
-            },
-          })
-          .expect({
-            span: container => {
-              const agent = container.items.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              runConversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
-            },
-          })
-          .expect({
-            span: container => {
-              // A compaction started while idle belongs to no run, so its request is a trace of its own.
-              expect(container.items).toHaveLength(1);
-              const summary = container.items[0]!;
-              expect(summary.is_segment).toBe(true);
-              expect(summary.attributes[SENTRY_OP]?.value).toBe(GEN_AI_CHAT);
-              compactionConversationId = summary.attributes[GEN_AI_CONVERSATION_ID]?.value;
-            },
-          })
-          .start()
-          .completed();
+  createEsmTests(__dirname, 'scenario-subagent.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('nests subagent runs under the tool call that started them', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const parent = spans.find(span => span.is_segment)!;
+            const delegate = spans.find(span => span.name === 'execute_tool delegate')!;
+            expect(parent.name).toBe('invoke_agent');
+            expect(delegate.parent_span_id).toBe(parent.span_id);
+
+            // The subagent's run is a child of the delegating call, in the same trace, on its own
+            // conversation.
+            const child = spans.find(span => span.name === 'invoke_agent' && !span.is_segment)!;
+            expect(child.parent_span_id).toBe(delegate.span_id);
+            const parentConversation = String(parent.attributes[GEN_AI_CONVERSATION_ID]?.value);
+            const childConversation = String(child.attributes[GEN_AI_CONVERSATION_ID]?.value);
+            expect(parentConversation).toMatch(UUID);
+            expect(childConversation).toMatch(UUID);
+            expect(childConversation).not.toBe(parentConversation);
+
+            const childChat = spans.find(span => span.parent_span_id === child.span_id)!;
+            expect(childChat.name).toBe('chat faux-model');
+            expect(childChat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(childConversation);
+            expect(delegate.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('Answer: Weather in Vienna?');
+          },
+        })
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const parent = spans.find(span => span.is_segment)!;
+            const fork = spans.find(span => span.name === 'execute_tool fork_delegate')!;
+            const child = spans.find(span => span.name === 'invoke_agent' && !span.is_segment)!;
+            expect(fork.parent_span_id).toBe(parent.span_id);
+            expect(child.parent_span_id).toBe(fork.span_id);
+            expect(fork.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('Answer: Forked task.');
+          },
+        })
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const batch = spans.find(span => span.name === 'execute_tool batch')!;
+            const inner = spans.find(span => span.name === 'execute_tool inner')!;
+            expect(batch.parent_span_id).toBe(spans.find(span => span.is_segment)!.span_id);
+            // A tool that runs another tool itself: the inner call ends with its own result.
+            expect(inner.parent_span_id).toBe(batch.span_id);
+            expect(inner.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('INNER RESULT');
+            expect(batch.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('OUTER RESULT');
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
 
-        expect(runConversationId).toMatch(UUID);
-        expect(compactionConversationId).toBe(runConversationId);
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-subagent.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('nests subagent runs under the tool call that started them', async () => {
-        await createRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const parent = spans.find(span => span.is_segment)!;
-              const delegate = spans.find(span => span.name === 'execute_tool delegate')!;
-              expect(parent.name).toBe('invoke_agent');
-              expect(delegate.parent_span_id).toBe(parent.span_id);
-
-              // The subagent's run is a child of the delegating call, in the same trace, on its own
-              // conversation.
-              const child = spans.find(span => span.name === 'invoke_agent' && !span.is_segment)!;
-              expect(child.parent_span_id).toBe(delegate.span_id);
-              const parentConversation = String(parent.attributes[GEN_AI_CONVERSATION_ID]?.value);
-              const childConversation = String(child.attributes[GEN_AI_CONVERSATION_ID]?.value);
-              expect(parentConversation).toMatch(UUID);
-              expect(childConversation).toMatch(UUID);
-              expect(childConversation).not.toBe(parentConversation);
-
-              const childChat = spans.find(span => span.parent_span_id === child.span_id)!;
-              expect(childChat.name).toBe('chat faux-model');
-              expect(childChat.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(childConversation);
-              expect(delegate.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('Answer: Weather in Vienna?');
-            },
-          })
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const parent = spans.find(span => span.is_segment)!;
-              const fork = spans.find(span => span.name === 'execute_tool fork_delegate')!;
-              const child = spans.find(span => span.name === 'invoke_agent' && !span.is_segment)!;
-              expect(fork.parent_span_id).toBe(parent.span_id);
-              expect(child.parent_span_id).toBe(fork.span_id);
-              expect(fork.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('Answer: Forked task.');
-            },
-          })
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const batch = spans.find(span => span.name === 'execute_tool batch')!;
-              const inner = spans.find(span => span.name === 'execute_tool inner')!;
-              expect(batch.parent_span_id).toBe(spans.find(span => span.is_segment)!.span_id);
-              // A tool that runs another tool itself: the inner call ends with its own result.
-              expect(inner.parent_span_id).toBe(batch.span_id);
-              expect(inner.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('INNER RESULT');
-              expect(batch.attributes[GEN_AI_TOOL_CALL_RESULT]?.value).toBe('OUTER RESULT');
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-retention.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      // Bun does not implement `v8.setFlagsFromString`, which the scenario needs to force GC.
-      test.runIf(supports({ runtimes: ['node', 'deno'] }))(
-        'does not keep the traces of tool calls alive for subagent conversations that never run',
-        async () => {
-          await createRunner()
-            .ignore('span')
-            .expect({ event: { message: 'pi-durable retention', extra: { toolCalls: 3, alive: 0 } } })
-            .start()
-            .completed();
-        },
-      );
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-restart-abort.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('starts no run for an abort handler in a Harness that never saw the run', async () => {
-        await createRunner()
-          .ignore('span')
-          .expect({
-            event: {
-              message: 'pi-durable restart abort',
-              extra: { status: 'unanswered', reason: 'aborted', runsStarted: 0 },
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-interrupted.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('reports a provider that throws as a fault, and nothing for failed, aborted or closed runs', async () => {
+  createEsmTests(__dirname, 'scenario-retention.mjs', 'instrument.mjs', (createRunner, test) => {
+    // Bun does not implement `v8.setFlagsFromString`, which the scenario needs to force GC.
+    test.runIf(supports({ runtimes: ['node', 'deno'] }))(
+      'does not keep the traces of tool calls alive for subagent conversations that never run',
+      async () => {
         await createRunner()
           .ignore('span')
-          .expect({
-            event: event => {
-              const exception = event.exception?.values?.[0];
-              expect(exception?.value).toBe('provider broke');
-              expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.message).toBe('pi-durable interrupted done');
-            },
-          })
+          .expect({ event: { message: 'pi-durable retention', extra: { toolCalls: 3, alive: 0 } } })
           .start()
           .completed();
-      });
+      },
+    );
+  });
 
-      test('ends every run that does not end with an answer', async () => {
-        await createRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              // 1. The model request failed: the run and the request are errors.
-              const chat = container.items.find(span => span.name === 'chat faux-model')!;
-              expect(chat.attributes[GEN_AI_INPUT_MESSAGES]?.value).toContain('Fail please.');
-              expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).toBe('["error"]');
-              expect(chat.status).toBe('error');
-              expect(chat.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
-              const agent = container.items.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              expect(agent.status).toBe('error');
-              expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('model_error');
-            },
-          })
-          .expect({
-            span: container => {
-              // 2. The provider threw: the generation faulted.
-              const chat = container.items.find(span => span.name === 'chat faux-model')!;
-              expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]).toBeUndefined();
-              expect(chat.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
-              const agent = container.items.find(span => span.is_segment)!;
-              expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
-            },
-          })
-          .expect({
-            span: container => {
-              // 3. Aborted while the tool ran: cancelled, which streamed spans report as ok.
-              const slow = container.items.find(span => span.name === 'execute_tool slow')!;
-              expect(slow.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"job":"abort"}');
-              expect(slow.status).toBe('ok');
-              expect(container.items.find(span => span.is_segment)!.status).toBe('ok');
-            },
-          })
-          .expect({
-            span: container => {
-              // 4. Aborted while the model request ran.
-              const chat = container.items.find(span => span.name === 'chat faux-model')!;
-              expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).toBe('["aborted"]');
-              expect(container.items).toHaveLength(2);
-            },
-          })
-          .expect({
-            span: container => {
-              // 5. The Harness closed while the tool ran: the run still ends, so the trace has a segment.
-              const slow = container.items.find(span => span.name === 'execute_tool slow')!;
-              expect(slow.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"job":"close"}');
-              const agent = container.items.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              expect(slow.parent_span_id).toBe(agent.span_id);
-            },
-          })
-          .expect({
-            span: container => {
-              // 6. The run failed, and the Harness closed right after `wait()`, before the commit that
-              // ended the run resolved: the run keeps its own status.
-              const chat = container.items.find(span => span.name === 'chat faux-model')!;
-              expect(chat.attributes[GEN_AI_INPUT_MESSAGES]?.value).toContain('Fail, then close.');
-              const agent = container.items.find(span => span.is_segment)!;
-              expect(agent.status).toBe('error');
-              expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('model_error');
-            },
-          })
-          .start()
-          .completed();
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-concurrent.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('keeps concurrent runs apart and out of the scopes of the requests that submitted them', async () => {
-        const runTraceIds = new Set<string>();
-        const errorTraceIds = new Set<string>();
+  createEsmTests(__dirname, 'scenario-restart-abort.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('starts no run for an abort handler in a Harness that never saw the run', async () => {
+      await createRunner()
+        .ignore('span')
+        .expect({
+          event: {
+            message: 'pi-durable restart abort',
+            extra: { status: 'unanswered', reason: 'aborted', runsStarted: 0 },
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
 
-        await createRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const agent = spans.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              const chats = spans.filter(span => span.name === 'chat faux-model');
-              expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))[0].parts[0].content).toBe(
-                'request A',
-              );
-              // The run's own conversation id, not the one the request set on its scope.
-              const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
-              expect(conversationId).toMatch(UUID);
-              for (const span of spans) {
-                expect(span.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
-                expect(span.attributes['request']).toBeUndefined();
-              }
-              expect(
-                spans.find(span => span.name === 'execute_tool work')!.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value,
-              ).toBe('{"tag":"request A"}');
-              runTraceIds.add(agent.trace_id);
-            },
-          })
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const agent = spans.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              const chats = spans.filter(span => span.name === 'chat faux-model');
-              expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))[0].parts[0].content).toBe(
-                'request B',
-              );
-              const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
-              expect(conversationId).toMatch(UUID);
-              for (const span of spans) {
-                expect(span.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
-                expect(span.attributes['request']).toBeUndefined();
-              }
-              expect(
-                spans.find(span => span.name === 'execute_tool work')!.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value,
-              ).toBe('{"tag":"request B"}');
-              runTraceIds.add(agent.trace_id);
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.exception?.values?.[0]?.value).toBe('work failed for request A');
-              expect(event.tags?.request).toBeUndefined();
-              errorTraceIds.add(String(event.contexts?.trace?.trace_id));
-            },
-          })
-          .expect({
-            event: event => {
-              expect(event.exception?.values?.[0]?.value).toBe('work failed for request B');
-              expect(event.tags?.request).toBeUndefined();
-              errorTraceIds.add(String(event.contexts?.trace?.trace_id));
-            },
-          })
-          .start()
-          .completed();
+  createEsmTests(__dirname, 'scenario-interrupted.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('reports a provider that throws as a fault, and nothing for failed, aborted or closed runs', async () => {
+      await createRunner()
+        .ignore('span')
+        .expect({
+          event: event => {
+            const exception = event.exception?.values?.[0];
+            expect(exception?.value).toBe('provider broke');
+            expect(exception?.mechanism).toEqual({ type: 'auto.ai.pi_durable', handled: false });
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.message).toBe('pi-durable interrupted done');
+          },
+        })
+        .start()
+        .completed();
+    });
+
+    test('ends every run that does not end with an answer', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            // 1. The model request failed: the run and the request are errors.
+            const chat = container.items.find(span => span.name === 'chat faux-model')!;
+            expect(chat.attributes[GEN_AI_INPUT_MESSAGES]?.value).toContain('Fail please.');
+            expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).toBe('["error"]');
+            expect(chat.status).toBe('error');
+            expect(chat.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
+            const agent = container.items.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            expect(agent.status).toBe('error');
+            expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('model_error');
+          },
+        })
+        .expect({
+          span: container => {
+            // 2. The provider threw: the generation faulted.
+            const chat = container.items.find(span => span.name === 'chat faux-model')!;
+            expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]).toBeUndefined();
+            expect(chat.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
+            const agent = container.items.find(span => span.is_segment)!;
+            expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('internal_error');
+          },
+        })
+        .expect({
+          span: container => {
+            // 3. Aborted while the tool ran: cancelled, which streamed spans report as ok.
+            const slow = container.items.find(span => span.name === 'execute_tool slow')!;
+            expect(slow.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"job":"abort"}');
+            expect(slow.status).toBe('ok');
+            expect(container.items.find(span => span.is_segment)!.status).toBe('ok');
+          },
+        })
+        .expect({
+          span: container => {
+            // 4. Aborted while the model request ran.
+            const chat = container.items.find(span => span.name === 'chat faux-model')!;
+            expect(chat.attributes[GEN_AI_RESPONSE_FINISH_REASONS]?.value).toBe('["aborted"]');
+            expect(container.items).toHaveLength(2);
+          },
+        })
+        .expect({
+          span: container => {
+            // 5. The Harness closed while the tool ran: the run still ends, so the trace has a segment.
+            const slow = container.items.find(span => span.name === 'execute_tool slow')!;
+            expect(slow.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value).toBe('{"job":"close"}');
+            const agent = container.items.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            expect(slow.parent_span_id).toBe(agent.span_id);
+          },
+        })
+        .expect({
+          span: container => {
+            // 6. The run failed, and the Harness closed right after `wait()`, before the commit that
+            // ended the run resolved: the run keeps its own status.
+            const chat = container.items.find(span => span.name === 'chat faux-model')!;
+            expect(chat.attributes[GEN_AI_INPUT_MESSAGES]?.value).toContain('Fail, then close.');
+            const agent = container.items.find(span => span.is_segment)!;
+            expect(agent.status).toBe('error');
+            expect(agent.attributes[SENTRY_STATUS_MESSAGE]?.value).toBe('model_error');
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
 
-        // Each tool error belongs to its run's trace.
-        expect(errorTraceIds).toEqual(runTraceIds);
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
-
-  createEsmAndCjsTests(
-    __dirname,
-    'scenario-compaction.mjs',
-    'instrument.mjs',
-    (createRunner, test, mode) => {
-      if (mode === 'cjs') {
-        return;
-      }
-
-      test('keeps a compaction that pi-durable starts for a run inside that run', async () => {
-        await createRunner()
-          .unordered()
-          .expect({
-            span: container => {
-              const spans = container.items;
-              const summary = spans.find(span =>
-                String(span.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).includes('Summary'),
-              )!;
-              const agent = spans.find(span => span.is_segment)!;
-              expect(agent.name).toBe('invoke_agent');
-              expect(summary.parent_span_id).toBe(agent.span_id);
-              // pi-durable completes the summary without streaming; the run's own request streams.
-              expect(summary.attributes[GEN_AI_RESPONSE_STREAMING]).toBeUndefined();
-              const answer = spans.find(span =>
-                String(span.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).includes('Third answer'),
-              )!;
-              expect(answer.parent_span_id).toBe(agent.span_id);
-              expect(answer.attributes[GEN_AI_RESPONSE_STREAMING]?.value).toBe(true);
-            },
-          })
-          .expect({
-            span: container => expect(container.items.find(span => span.is_segment)!.name).toBe('invoke_agent'),
-          })
-          .expect({
-            span: container => expect(container.items.find(span => span.is_segment)!.name).toBe('invoke_agent'),
-          })
-          .start()
-          .completed();
-      });
-    },
-    PI_DURABLE_DEPENDENCIES,
-  );
+  createEsmTests(__dirname, 'scenario-concurrent.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('keeps concurrent runs apart and out of the scopes of the requests that submitted them', async () => {
+      const runTraceIds = new Set<string>();
+      const errorTraceIds = new Set<string>();
+
+      await createRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const agent = spans.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            const chats = spans.filter(span => span.name === 'chat faux-model');
+            expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))[0].parts[0].content).toBe(
+              'request A',
+            );
+            // The run's own conversation id, not the one the request set on its scope.
+            const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
+            expect(conversationId).toMatch(UUID);
+            for (const span of spans) {
+              expect(span.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
+              expect(span.attributes['request']).toBeUndefined();
+            }
+            expect(
+              spans.find(span => span.name === 'execute_tool work')!.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value,
+            ).toBe('{"tag":"request A"}');
+            runTraceIds.add(agent.trace_id);
+          },
+        })
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const agent = spans.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            const chats = spans.filter(span => span.name === 'chat faux-model');
+            expect(JSON.parse(String(chats[0]!.attributes[GEN_AI_INPUT_MESSAGES]?.value))[0].parts[0].content).toBe(
+              'request B',
+            );
+            const conversationId = agent.attributes[GEN_AI_CONVERSATION_ID]?.value;
+            expect(conversationId).toMatch(UUID);
+            for (const span of spans) {
+              expect(span.attributes[GEN_AI_CONVERSATION_ID]?.value).toBe(conversationId);
+              expect(span.attributes['request']).toBeUndefined();
+            }
+            expect(
+              spans.find(span => span.name === 'execute_tool work')!.attributes[GEN_AI_TOOL_CALL_ARGUMENTS]?.value,
+            ).toBe('{"tag":"request B"}');
+            runTraceIds.add(agent.trace_id);
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.exception?.values?.[0]?.value).toBe('work failed for request A');
+            expect(event.tags?.request).toBeUndefined();
+            errorTraceIds.add(String(event.contexts?.trace?.trace_id));
+          },
+        })
+        .expect({
+          event: event => {
+            expect(event.exception?.values?.[0]?.value).toBe('work failed for request B');
+            expect(event.tags?.request).toBeUndefined();
+            errorTraceIds.add(String(event.contexts?.trace?.trace_id));
+          },
+        })
+        .start()
+        .completed();
+
+      // Each tool error belongs to its run's trace.
+      expect(errorTraceIds).toEqual(runTraceIds);
+    });
+  });
+
+  createEsmTests(__dirname, 'scenario-compaction.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('keeps a compaction that pi-durable starts for a run inside that run', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            const summary = spans.find(span =>
+              String(span.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).includes('Summary'),
+            )!;
+            const agent = spans.find(span => span.is_segment)!;
+            expect(agent.name).toBe('invoke_agent');
+            expect(summary.parent_span_id).toBe(agent.span_id);
+            // pi-durable completes the summary without streaming; the run's own request streams.
+            expect(summary.attributes[GEN_AI_RESPONSE_STREAMING]).toBeUndefined();
+            const answer = spans.find(span =>
+              String(span.attributes[GEN_AI_OUTPUT_MESSAGES]?.value).includes('Third answer'),
+            )!;
+            expect(answer.parent_span_id).toBe(agent.span_id);
+            expect(answer.attributes[GEN_AI_RESPONSE_STREAMING]?.value).toBe(true);
+          },
+        })
+        .expect({
+          span: container => expect(container.items.find(span => span.is_segment)!.name).toBe('invoke_agent'),
+        })
+        .expect({
+          span: container => expect(container.items.find(span => span.is_segment)!.name).toBe('invoke_agent'),
+        })
+        .start()
+        .completed();
+    });
+  });
 });
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f0fecf4b4ca2..ca8b7afe45e5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -453,7 +453,7 @@ importers:
         version: 0.133.0(zod@4.6.7)
       '@google/genai':
         specifier: ^1.20.0
-        version: 1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)
+        version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
       '@langchain/core':
         specifier: ^1.2.17
         version: 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
@@ -607,9 +607,21 @@ importers:
       '@aws-sdk/client-sqs':
         specifier: ^3.1046.0
         version: 3.1068.0
+      '@earendil-works/chord':
+        specifier: ^1.4.0
+        version: 1.4.0
+      '@earendil-works/pi-ai':
+        specifier: ^1.4.0
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-durable':
+        specifier: ^1.4.0
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@flue/runtime':
+        specifier: 2.0.3
+        version: 2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)
       '@google/genai':
         specifier: ^1.20.0
-        version: 1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)
+        version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
       '@growthbook/growthbook':
         specifier: ^1.6.5
         version: 1.6.5
@@ -838,6 +850,9 @@ importers:
       unstorage:
         specifier: 2.0.0-alpha.7
         version: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@3.7.4)(ofetch@1.5.1)
+      valibot:
+        specifier: 1.4.2
+        version: 1.4.2(typescript@7.0.2)
       winston:
         specifier: ^3.17.0
         version: 3.19.0
@@ -2157,7 +2172,7 @@ importers:
         version: 29.7.0
       jsdom-worker:
         specifier: ^0.3.0
-        version: 0.3.0(node-fetch@2.7.0(encoding@0.1.13))
+        version: 0.3.0(node-fetch@3.3.2)
 
   packages/replay-worker:
     dependencies:
@@ -2779,6 +2794,15 @@ packages:
       '@angular/platform-browser': 14.3.0
       rxjs: ^6.5.3 || ^7.4.0
 
+  '@anthropic-ai/sdk@0.129.0':
+    resolution: {integrity: sha512-MH7LB20kNpGLUpPTe2OG5XvL/KhX8HUO9XyBaFjgFk6TLS4Xjt0VPIuMKywe7POKKPslX+QxSlVok9e+8kG5Nw==}
+    hasBin: true
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      zod:
+        optional: true
+
   '@anthropic-ai/sdk@0.133.0':
     resolution: {integrity: sha512-jlqUN8p8ESTJj+GJnA4KjzbEfF1waEoGzRT8jwytlYGFFgv+/DUQOxlYGvYw10UzhD1kwLqYzxvA3FrTB2YWuQ==}
     hasBin: true
@@ -2797,6 +2821,15 @@ packages:
       zod:
         optional: true
 
+  '@anthropic-ai/sdk@0.91.1':
+    resolution: {integrity: sha512-LAmu761tSN9r66ixvmciswUj/ZC+1Q4iAfpedTfSVLeswRwnY3n2Nb6Tsk+cLPP28aLOPWeMgIuTuCcMC6W/iw==}
+    hasBin: true
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      zod:
+        optional: true
+
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5':
     resolution: {integrity: sha512-/nmTAee5mBly9QiIQSGIKITv9TcEyLTQJFbYjfyWCEfYofxQgurMrT5fLDIRneSPqICucRTxgPMHmc6/q7cgfw==}
     engines: {node: '>=18.0.0'}
@@ -2955,6 +2988,14 @@ packages:
     resolution: {integrity: sha512-zOXUUnilC6lgCsQtp77p/QNPmRlTES9Xi6tlDwbR6kfC/kz5PCzZckgHWm5z+8DskdwuMAbFDq61x3zr10GEEQ==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/client-bedrock-runtime@3.1048.0':
+    resolution: {integrity: sha512-u+NT61JZEkRFtpL0CAw1N1dwxnaLgwVXQl/zjJxTGgLyS/jTIdg2SdoEoCTHxgDyCnqa1HEi9QOoE9/pYRNpOQ==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/client-bedrock-runtime@3.1127.0':
+    resolution: {integrity: sha512-IDl/lrPb90aH+pZFHGNDmgH9nAUQj5PlZH1sJ3w7RikctyjHSnY3oNjZhrLoaBoQn/rNK0zsP6OHEqEhj2tdLA==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/client-bedrock-runtime@3.1159.0':
     resolution: {integrity: sha512-Zj744tR9wNs+jjvb7C8zDBDxjJhGJSMwIHnOc9zdsDdrRirai4CtR5iQ5BMP1qfazjH6jYKCxGpZC1BOUnslKg==}
     engines: {node: '>=20.0.0'}
@@ -3111,6 +3152,14 @@ packages:
     resolution: {integrity: sha512-Ob9GCZ3YnGPws696zTYW/rLFYHa9QLh6DgTCnkHb+0jhHNBgHWM8Ui2b+yrIjkfDsRVsglyrOey6tOOG/VWxMA==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/token-providers@3.1048.0':
+    resolution: {integrity: sha512-k0y/GcuesuSfWyUM0WamrGyeZmltRYaPbHO82UDA6mZ/doB+FOHKutikPAtSXMn/hDz970cF+iRuuiYO9VEbAA==}
+    engines: {node: '>=20.0.0'}
+
+  '@aws-sdk/token-providers@3.1127.0':
+    resolution: {integrity: sha512-Dv2TMWBshJ+tF6ahs2Sy5bh4Iabsd4GAQqVvE9XZmYmnoaVbpS2QKIKE/HRacc7bTtbjEEvP+laGzHvHlf1CiQ==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/token-providers@3.1159.0':
     resolution: {integrity: sha512-IJvghXXcEpqTWGjrjJwxBdEecHeXp+t9FaybRf8Zf0wYW84KN1snXBsYOdfDBBx78ChwfJxH8KIHqmhNZuDLcw==}
     engines: {node: '>=20.0.0'}
@@ -4389,6 +4438,36 @@ packages:
   '@dxup/unimport@0.1.2':
     resolution: {integrity: sha512-/B8YJGPzaYq1NbsQmwgP8EZqg40NpTw4ZB3suuI0TplbxKHeK94jeaawLmVhCv+YwUnOpiWEz9U6SeThku/8JQ==}
 
+  '@earendil-works/chord@1.4.0':
+    resolution: {integrity: sha512-dTbgyz4xgDS5KAUFx1bFENqj0Cr1N3tYxJJOYStc6g6HS78FSBZydyoCwLoddiQRF+VgRS0fpgAi+iKxjZ3BQA==}
+    engines: {node: '>=22.19.0'}
+
+  '@earendil-works/pi-agent-core@0.83.0':
+    resolution: {integrity: sha512-RorGp9OH5l3ElpuC5a5ZQ2eWcchZGXflXRzVGkV99y3y6tT+LLNyxoYIdVKvTKWEObwhExeQbTH0fI2tE4iX4g==}
+    engines: {node: '>=22.19.0'}
+
+  '@earendil-works/pi-ai@0.83.0':
+    resolution: {integrity: sha512-m3IZD4g3er0V8TC9+Vpgw/sjTKqcJlkcIBy/JvsgRubuuik3tAVzyugUg4rVrShIkkOT69mEd34NEqKUIsl6JQ==}
+    engines: {node: '>=22.19.0'}
+    hasBin: true
+
+  '@earendil-works/pi-ai@1.4.0':
+    resolution: {integrity: sha512-hQM/C4+1w8rHYACzDDf+0vQMnEnpzIop1tptIERVgR3ZeT/hHSzBNG8PaWPgxWQjqSeKCyBZSyp8uTT6eKK1pQ==}
+    engines: {node: '>=22.19.0'}
+    hasBin: true
+
+  '@earendil-works/pi-codemode@1.4.0':
+    resolution: {integrity: sha512-23CNAXpS9DuLzPMyYuvrXVVio46x4YhffCgCqaWmF7F5H8PooqjrQvX4ucF6M0BhUd+x2tV6r1J0dv8cCME4Cg==}
+    engines: {node: '>=22.19.0'}
+
+  '@earendil-works/pi-durable@1.4.0':
+    resolution: {integrity: sha512-EtIyXH1MBSXdJSkodmy+CYXuwfve3gPrD4GNCZ0XmuRWLPupwRlNQ7fdaXjRcLoKb6SWkT/yEzK+sMmrqvYK+Q==}
+    engines: {node: '>=22.19.0'}
+
+  '@earendil-works/pi-telemetry@1.4.0':
+    resolution: {integrity: sha512-MLIfowwUYIY65jSjMX82paZOrX/NTvLk6D08h+3Jq42a99RzUOewzuCR0zOlPul3D6UBfddat76VT6LvsHEs1w==}
+    engines: {node: '>=22.19.0'}
+
   '@edge-runtime/primitives@6.0.0':
     resolution: {integrity: sha512-FqoxaBT+prPBHBwE1WXS1ocnu/VLTQyZ6NMUBAdbP7N2hsFTTxMC/jMu2D/8GAlMQfxeuppcPuCUk/HO3fpIvA==}
     engines: {node: '>=18'}
@@ -5298,6 +5377,10 @@ packages:
   '@fastify/proxy-addr@5.1.0':
     resolution: {integrity: sha512-INS+6gh91cLUjB+PVHfu1UqcB76Sqtpyp7bnL+FYojhjygvOPA9ctiD/JDKsyD9Xgu4hUhCSJBPig/w7duNajw==}
 
+  '@flue/runtime@2.0.3':
+    resolution: {integrity: sha512-RfWyZG9x2hlDb1264XTESX42tzzG3AA8er3XjaTIxIMh28pTD91zKd9Jh6PFXKeTkZegLsGiJKDxmiCddlyeug==}
+    engines: {node: '>=22.19.0'}
+
   '@gar/promisify@1.1.3':
     resolution: {integrity: sha512-k2Ty1JcVojjJFwrg/ThKi2ujJ7XNLYaFGNB/bWT9wGR+oSMJHMa5w+CUq6p/pVrKeNNgA7pCqEcjSnHVoqJQFw==}
 
@@ -5349,11 +5432,20 @@ packages:
     resolution: {integrity: sha512-d4VSA86eL/AFTe5xtyZX+ePUjE8dIFu2T8zmdeNBSa5/kNgXPCx/o/wbFNHAGLJdGnk1vddRuMESD9HbOC8irw==}
     engines: {node: '>=10'}
 
-  '@google/genai@1.20.0':
-    resolution: {integrity: sha512-QdShxO9LX35jFogy3iKprQNqgKKveux4H2QjOnyIvyHRuGi6PHiz3fjNf8Y0VPY8o5V2fHqR2XqiSVoz7yZs0w==}
+  '@google/genai@1.52.0':
+    resolution: {integrity: sha512-gwSvbpiN/17O9TbsqSsE/OzZcpv5Fo4RQjdngGgogtuB9RsyJ8ZHhX5KjHj1bp5N9snN2eK8LDGXSaWW2hof8Q==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
-      '@modelcontextprotocol/sdk': ^1.11.4
+      '@modelcontextprotocol/sdk': ^1.25.2
+    peerDependenciesMeta:
+      '@modelcontextprotocol/sdk':
+        optional: true
+
+  '@google/genai@2.21.0':
+    resolution: {integrity: sha512-+PDtco2/Z0ONdzCGekCoCT+O1VJS9xJQNN4XzQpXG/t3El/SWWMkCWlFRO1KmivOHPa4Q0VjUYu1HBKCZ/v33Q==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      '@modelcontextprotocol/sdk': ^1.25.2
     peerDependenciesMeta:
       '@modelcontextprotocol/sdk':
         optional: true
@@ -6114,6 +6206,14 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  '@mistralai/mistralai@2.2.6':
+    resolution: {integrity: sha512-W8pX7zHxjJvMIpw8JMxeJEleapXX0Q9NPszdNzqkM3MIEoIGPObdodujj+WHteXEvGfaP/AMwlNyRfEzSY6dQQ==}
+    peerDependencies:
+      '@opentelemetry/api': ^1.9.0
+    peerDependenciesMeta:
+      '@opentelemetry/api':
+        optional: true
+
   '@mistralai/mistralai@3.3.0':
     resolution: {integrity: sha512-b5NSkQ8lFBxwZfA4Vj5oHxs7Jw7VrZRI2E9g95sigQiTi3NsQ//o6y3nDXjKUPWjksfagjH3STEFCYBg19SMvg==}
     peerDependencies:
@@ -8309,6 +8409,9 @@ packages:
   '@shikijs/vscode-textmate@10.0.2':
     resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
 
+  '@silvia-odwyer/photon@0.3.3':
+    resolution: {integrity: sha512-8BhUjEch4slwRe8uXnaA4vcA5uiiOTT90UMsxulOj2gN98X1p0q9Z4Ysk4DkD05uNgbR9XoSqtZ37w+33w4QKQ==}
+
   '@simple-dom/interface@1.4.0':
     resolution: {integrity: sha512-l5qumKFWU0S+4ZzMaLXFU8tQZsicHEMEyAxI5kDFGhJsRqDwe0a7/iPA/GdxlGyDKseQQAgIz5kzU7eXTrlSpA==}
 
@@ -8411,6 +8514,10 @@ packages:
     resolution: {integrity: sha512-/GGcPoNJ2nzGytdAanpbx7mpp9Coa8LP+/Rpmbktr8YeLuIXs9B0SEz+X3AeonHdyzOIFJdKbN7jOZ+Tj+pMGw==}
     engines: {node: '>=18.0.0'}
 
+  '@smithy/node-http-handler@4.7.3':
+    resolution: {integrity: sha512-/jPhevcTFPMVl6KNjbaI47iOg1zxC7IsnX4PQDGVZKMFceOXtB8IEYaB7a9VvkP/3oC60WzTeKocvSI7vLT0vA==}
+    engines: {node: '>=18.0.0'}
+
   '@smithy/property-provider@4.2.14':
     resolution: {integrity: sha512-WuM31CgfsnQ/10i7NYr0PyxqknD72Y5uMfUMVSniPjbEPceiTErb4eIqJQ+pdxNEAUEWrewrGjIRjVbVHsxZiQ==}
     engines: {node: '>=18.0.0'}
@@ -9356,6 +9463,11 @@ packages:
     peerDependencies:
       vue: '>=3.5.18'
 
+  '@valibot/to-json-schema@1.8.0':
+    resolution: {integrity: sha512-a0M+uwCuQZEPAo65NYkFSJ14O5c213KoSZmPdoCfuFvUhfULi4T2Z6Tpjv6lTVMW9RoLm74RpRAjNEa43KcN+g==}
+    peerDependencies:
+      valibot: ^1.5.0
+
   '@vercel/nft@1.11.0':
     resolution: {integrity: sha512-m1QFg+U+3yPOnP1xSYJ73UIRxLOXdts1JOhiOiyPYqEsALgrXFFINvgUaD6R6iNvaBFAjHllBCbkfx4FuOdpaA==}
     engines: {node: '>=20'}
@@ -9732,6 +9844,10 @@ packages:
     resolution: {integrity: sha512-jRR5wdylq8CkOe6hei19GGZnxM6rBGwFl3Bg0YItGDimvjGtAvdZk4Pu6Cl4u4Igsws4a1fd1Vq3ezrhn4KmFw==}
     engines: {node: '>= 14'}
 
+  agent-base@9.0.0:
+    resolution: {integrity: sha512-TQf59BsZnytt8GdJKLPfUZ54g/iaUL2OWDSFCCvMOhsHduDQxO8xC4PNeyIkVcA5KwL2phPSv0douC0fgWzmnA==}
+    engines: {node: '>= 20'}
+
   agentkeepalive@4.2.1:
     resolution: {integrity: sha512-Zn4cw2NEqd+9fiSVWMscnjyQ1a8Yfoc5oBajLeo5w+YBHgDUcEBY2hS4YpTz6iN5f/2zQiktcuM6tS8x1p9dpA==}
     engines: {node: '>= 8.0.0'}
@@ -9897,6 +10013,9 @@ packages:
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
+  argparse@3.0.4:
+    resolution: {integrity: sha512-fwWK3Zq22l4XJJjx5mcBHGikIk+hJqO+32dPm0Jur7+rtG5x1scOjSfdT9ZKeWHPpsya/l0HHK4tDImBkTrtvA==}
+
   args@5.0.3:
     resolution: {integrity: sha512-h6k/zfFgusnv3i5TU08KQkVKuCPBtL/PWQbWkHUxvJrZ2nAyeaUupneemcrgn1xmqxPQsPIzwkUhOpoqPDRZuA==}
     engines: {node: '>= 6.0.0'}
@@ -11111,6 +11230,10 @@ packages:
     resolution: {integrity: sha512-WboRycPNsVw3B3TL559F7kuBUM4d8CgMEvk6xEJlOp7OBPjt6G7z8WMWlD2rOFZLk6OYfFIUGsCOWzcQH9K2og==}
     engines: {node: '>= 6'}
 
+  data-uri-to-buffer@4.0.1:
+    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
+    engines: {node: '>= 12'}
+
   data-urls@4.0.0:
     resolution: {integrity: sha512-/mMTei/JXPqvFqQtfyTowxmJVwr2PVAeCcDxyFf6LhoOu/09TX2OX3kb2wzi4DMXcfj4OItwDOnhl5oziPnT6g==}
     engines: {node: '>=14'}
@@ -12407,6 +12530,10 @@ packages:
   fecha@4.2.3:
     resolution: {integrity: sha512-OP2IUU6HeYKJi3i0z4A19kHMQoLVs4Hc+DPqqxI2h/DPZHTm/vjsfC6P0b4jCMy14XizLBqvndQ+UilD7707Jw==}
 
+  fetch-blob@3.2.0:
+    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
+    engines: {node: ^12.20 || >= 14.13}
+
   fflate@0.4.9:
     resolution: {integrity: sha512-zdxgIEddhfsyCaWpJ2SdXEP8ZMrKJ6+5jl4OupODcywU0IhRk6gdXuVGcPICyfx2H97hVK7xmJtRLPjkxAX8Vw==}
 
@@ -12529,6 +12656,10 @@ packages:
     resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
     engines: {node: '>= 6'}
 
+  formdata-polyfill@4.0.10:
+    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
+    engines: {node: '>=12.20.0'}
+
   forwarded-parse@2.1.2:
     resolution: {integrity: sha512-alTFZZQDKMporBH77856pXgzhEzaUVmLCDk+egLgIgHst3Tpndzz8MnKe+GzRJRfvVdn69HhpW7cmXzvtLvJAw==}
 
@@ -12624,17 +12755,17 @@ packages:
     resolution: {integrity: sha512-Ms7fNifGv0XVU+6eIyL9LB7RVESeML9+cMvkwGS70xyD6w2Z80wl6RiqiJ9k1KFlJCUTQqFFc8tXmPQfSKUe8g==}
     engines: {node: '>=10'}
 
-  gaxios@6.7.1:
-    resolution: {integrity: sha512-LDODD4TMYx7XXdpwxAVRAIAuB0bzv0s+ywFonY46k126qzQHT9ygyoa9tncmOiQmmDrik65UYsEkv3lbfqQ3yQ==}
-    engines: {node: '>=14'}
+  gaxios@7.3.1:
+    resolution: {integrity: sha512-kB3rzJV7d9juLZh8/56QTXCwQfxyhdOMdyYk1HdQKFtF8TJTDTZQJtixWIwXdE9Jji91mC41DUNpjleo4L4eAQ==}
+    engines: {node: '>=18'}
 
   gcp-metadata@4.2.1:
     resolution: {integrity: sha512-tSk+REe5iq/N+K+SK1XjZJUrFPuDqGZVzCy2vocIHIGmPlTGsa8owXMJwGkrXr73NO0AzhPW4MF2DEHz7P2AVw==}
     engines: {node: '>=10'}
 
-  gcp-metadata@6.1.1:
-    resolution: {integrity: sha512-a4tiq7E0/5fTjxPAaH4jpjkSv/uCaU2p5KC6HVGrvl0cDjA8iBZv4vv1gyzlmK0ZUKqwpOyQMKzZQe3lTit77A==}
-    engines: {node: '>=14'}
+  gcp-metadata@8.1.2:
+    resolution: {integrity: sha512-zV/5HKTfCeKWnxG0Dmrw51hEWFGfcF2xiXqcA3+J90WDuP0SvoiSO5ORvcBsifmx/FoIjgQN3oNOGaQ5PhLFkg==}
+    engines: {node: '>=18'}
 
   generate-function@2.3.1:
     resolution: {integrity: sha512-eeB5GfMNeevm/GRYq20ShmsaGcmI81kIX2K9XQx5miC8KdHaC6Jm0qQ8ZNeGOi7wYB8OsdxKs+Y2oVuTFuVwKQ==}
@@ -12803,16 +12934,16 @@ packages:
     engines: {node: '>=0.6.0'}
     hasBin: true
 
+  google-auth-library@10.9.1:
+    resolution: {integrity: sha512-i1ydyHrqcIxXkWh/uBmVkzCvIuq5yiK2ATndIe5XxKholrG/MTYP9xGYka4sQhrbIAgGjL2B6NOE7rFaiF3fXw==}
+    engines: {node: '>=18'}
+
   google-auth-library@7.0.3:
     resolution: {integrity: sha512-6wJNYqY1QUr5I2lWaUkkzOT2b9OCNhNQrdFOt/bsBbGb7T7NCdEvrBsXraUm+KTUGk2xGlQ7m9RgUd4Llcw8NQ==}
     engines: {node: '>=10'}
 
-  google-auth-library@9.15.1:
-    resolution: {integrity: sha512-Jb6Z0+nvECVz+2lzSMt9u98UsoakXxA2HGHMCxh+so3n90XgYWkq5dur19JAJV7ONiJY22yBTyJB1TSkvPq9Ng==}
-    engines: {node: '>=14'}
-
-  google-logging-utils@0.0.2:
-    resolution: {integrity: sha512-NEgUnEcBiP5HrPzufUkBzJOD/Sxsco3rLNo1F1TNf7ieU8ryUzBhqba8r756CjLX7rn3fHl6iLEwPYuqpoKgQQ==}
+  google-logging-utils@1.1.3:
+    resolution: {integrity: sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==}
     engines: {node: '>=14'}
 
   google-p12-pem@3.1.4:
@@ -12853,10 +12984,6 @@ packages:
     resolution: {integrity: sha512-OY0BfPKe3QnMsY9MzTHTSKn+Vl2l1CcLe6BwDEQj00mbbkl5nyQ/7EUREstg4fQNZ8iYE7br4JJ7TdKeDOPWmw==}
     engines: {node: '>=10'}
 
-  gtoken@7.1.0:
-    resolution: {integrity: sha512-pCcEwRi+TKpMlxAQObHDQ56KawURgyAf6jtIY046fJ5tIv3zDe/LEIubckAO8fj6JnAxLdmWkUfNyulQ2iKdEw==}
-    engines: {node: '>=14.0.0'}
-
   gzip-size@7.0.0:
     resolution: {integrity: sha512-O1Ld7Dr+nqPnmGpdhzLmMTQ4vAsD+rHwMm1NLUmoUFFymBOMKxCCrtDxqdBRYXdeEPEi3SyoR4TizJLQrnKBNA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -13090,6 +13217,10 @@ packages:
     resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
     engines: {node: '>= 14'}
 
+  http-proxy-agent@9.1.0:
+    resolution: {integrity: sha512-2NxoveTT58mjYT4n3RPTEfCZGLMbidoO8XEieXfpSYxu+PQJ1qpx4ypwH6N+uF9twBPIvRRgvkvW5HUTYWENig==}
+    engines: {node: '>= 20'}
+
   http-proxy-middleware@2.0.10:
     resolution: {integrity: sha512-RKzRWNPxUZqbuk3BC5mGVJbBnWgr+diEnjJexIOytFbBzDy88Fbh/YvBr3DsNrl1jYAfjWfpATEv0NO35FDuPQ==}
     engines: {node: '>=12.0.0'}
@@ -13119,6 +13250,10 @@ packages:
     resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
     engines: {node: '>= 14'}
 
+  https-proxy-agent@9.1.0:
+    resolution: {integrity: sha512-ag87y7cJJ9/3+GxFr8Oy4O5faDsGRGnBGsJj/YjOSsSx/5eadKLYTMPlzuR6obgoCDDm0abAAZitXXQkMOPSpA==}
+    engines: {node: '>= 20'}
+
   httpxy@0.5.1:
     resolution: {integrity: sha512-JPhqYiixe1A1I+MXDewWDZqeudBGU8Q9jCHYN8ML+779RQzLjTi78HBvWz4jMxUD6h2/vUL12g4q/mFM0OUw1A==}
 
@@ -13683,6 +13818,10 @@ packages:
     resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
     hasBin: true
 
+  js-yaml@5.5.0:
+    resolution: {integrity: sha512-paNr4LFIFPjeeSmwNYdrb8FafLLG/Cr2Af3GjbsHJ5CxIjH4r0c2emlmRdAtpPAieP1gRVzk6buBbVP5gBMGAg==}
+    hasBin: true
+
   jsdoc-type-pratt-parser@4.1.0:
     resolution: {integrity: sha512-Hicd6JK5Njt2QB6XYFS7ok9e37O8AYk3jTcppG4YVQnYjOemymvTcmc7OWsmq/Qqj5TdRFO5/x/tIPmBeRtGHg==}
     engines: {node: '>=12.0.0'}
@@ -13948,6 +14087,9 @@ packages:
   launch-editor@2.14.1:
     resolution: {integrity: sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA==}
 
+  layerr@3.0.0:
+    resolution: {integrity: sha512-tv754Ki2dXpPVApOrjTyRo4/QegVb9eVFq4mjqp4+NM5NaX7syQvN5BBNfV/ZpAHCEHV24XdUVrBAoka4jt3pA==}
+
   lazystream@1.0.1:
     resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
     engines: {node: '>= 0.6.3'}
@@ -15107,6 +15249,11 @@ packages:
     resolution: {integrity: sha512-Si/bzYiKRHOB8/a99T2+SDGN582ONDMSTlJr5oCkT6GtnqPjZ2s10eoQRYkW9ZHwjVxONL+W8Fb+qR0AHMQsdg==}
     engines: {node: '>=20'}
 
+  node-domexception@1.0.0:
+    resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==}
+    engines: {node: '>=10.5.0'}
+    deprecated: Use your platform's native DOMException instead
+
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
@@ -15119,6 +15266,10 @@ packages:
       encoding:
         optional: true
 
+  node-fetch@3.3.2:
+    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   node-forge@1.4.0:
     resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
     engines: {node: '>= 6.13.0'}
@@ -15421,6 +15572,42 @@ packages:
       zod:
         optional: true
 
+  openai@6.26.0:
+    resolution: {integrity: sha512-zd23dbWTjiJ6sSAX6s0HrCZi41JwTA1bQVs0wLQPZ2/5o2gxOJA5wh7yOAUgwYybfhDXyhwlpeQf7Mlgx8EOCA==}
+    hasBin: true
+    peerDependencies:
+      ws: ^8.18.0
+      zod: ^3.25 || ^4.0
+    peerDependenciesMeta:
+      ws:
+        optional: true
+      zod:
+        optional: true
+
+  openai@7.19.0:
+    resolution: {integrity: sha512-MX2s3u2L5racTO0CC/SWpCOasJQBCJrqLKXK+l82cAhdeF8mPMBEe/gxMm0ZFa2xpKpOFLRjxv5afYEZbBXmbQ==}
+    engines: {node: '>=22.0.0'}
+    peerDependencies:
+      '@aws-sdk/credential-provider-node': '>=3.972.0 <4'
+      '@smithy/hash-node': '>=4.3.0 <5'
+      '@smithy/signature-v4': '>=5.4.0 <6'
+      undici: '>=5 <9'
+      ws: ^8.21.0
+      zod: ^3.25 || ^4.0
+    peerDependenciesMeta:
+      '@aws-sdk/credential-provider-node':
+        optional: true
+      '@smithy/hash-node':
+        optional: true
+      '@smithy/signature-v4':
+        optional: true
+      undici:
+        optional: true
+      ws:
+        optional: true
+      zod:
+        optional: true
+
   openai@7.31.0:
     resolution: {integrity: sha512-ZGAzauuYb0DdB53qVbIR+X8rdmNtWgiElrrMthbZCVreLcIsQJBwzAIWUbpB2FkQu2Cj6OJ9zJR1EKMUYn4/SQ==}
     engines: {node: '>=22.0.0'}
@@ -15700,6 +15887,9 @@ packages:
     resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
     engines: {node: '>= 0.8'}
 
+  partial-json@0.1.7:
+    resolution: {integrity: sha512-Njv/59hHaokb/hRUjce3Hdv12wd60MtM9Z5Olmn+nehe0QDAsRtRbJPvJ0Z91TusF0SuZRIvnM+S4l6EIP8leA==}
+
   pascal-case@3.1.2:
     resolution: {integrity: sha512-uWlGT3YSnK9x3BQJaOdcZwrnV6hPpd8jFH1/ucpiLRPh/2zCVJKS19E4GvYHvaCcACn3foXZ0cLB9Wrx1KGe5g==}
 
@@ -16496,10 +16686,23 @@ packages:
   property-information@7.1.0:
     resolution: {integrity: sha512-TwEZ+X+yCJmYfL7TPUOcvBZ4QfoT5YenQiJuX//0th53DE6w0xxLEtfK3iyryQFddXuvkIk51EEgrJQ0WJkOmQ==}
 
+  protobufjs@7.6.6:
+    resolution: {integrity: sha512-dYDWdjSl5RNb7SgPxGQcRU+GtvP7s2fpkrY0r432PcOIaZ0/rBcxEZnQN67iJhFuQiVw754JDoPruPCNdGsbjg==}
+    engines: {node: '>=12.0.0'}
+
   proxy-addr@2.0.8:
     resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==}
     engines: {node: '>= 0.10'}
 
+  proxy-agent-negotiate@1.1.0:
+    resolution: {integrity: sha512-N8IBcM3UgCVzz2L2Lqv8DVntDnnC8/hiV4nEDUPkqq72TPUgYWjQc+bdZlBPZK9LzPAvOY//gAt0S0DApoOXWQ==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      kerberos: ^2.0.0
+    peerDependenciesMeta:
+      kerberos:
+        optional: true
+
   proxy-from-env@2.1.0:
     resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
     engines: {node: '>=10'}
@@ -16554,6 +16757,9 @@ packages:
   quick-temp@0.1.8:
     resolution: {integrity: sha512-YsmIFfD9j2zaFwJkzI6eMG7y0lQP7YeWzgtFgNl38pGWZBSXJooZbOWwkcRot7Vt0Fg9L23pX0tqWU3VvLDsiA==}
 
+  quickjs-wasi@3.6.2:
+    resolution: {integrity: sha512-FCqGtGOrMgzUiIrMNMA2YnsOxCNwo31dzqXvclXUC6xeT35NJLKXQJsvbeCTjvoFAwZgEAPg8U6+KAPDGXn8Mg==}
+
   quote-unquote@1.0.0:
     resolution: {integrity: sha512-twwRO/ilhlG/FIgYeKGFqyHhoEhqgnKVkcmqMKi2r524gz3ZbDTcyFt38E9xjJI2vT+KbRNHVbnJ/e0I25Azwg==}
 
@@ -18304,6 +18510,12 @@ packages:
     resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
     engines: {node: '>= 18'}
 
+  typebox@1.3.27:
+    resolution: {integrity: sha512-zu+jc1pcy4UiNThxikUr36f0Rybk9PEeCg/NE6adeWr/SKsdNO4EzZHYRDlv2YCVAfj3Odq3dESSo/jNyoBXzA==}
+
+  typebox@1.3.7:
+    resolution: {integrity: sha512-meKuifc33Pccx0O6PdIzYMq3Og8zvP4TIi/a+Bw3AEMZMxOD0+RHGQvpglEe6Zdy3wZ8nqn/j95h8LUZLk/6Hg==}
+
   typed-array-buffer@1.0.3:
     resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
     engines: {node: '>= 0.4'}
@@ -18376,6 +18588,10 @@ packages:
     resolution: {integrity: sha512-ZPtzy0hu4cZjv3z5NW9gfKnNLjoz4y6uv4HlelAjDK7sY/xOkKZv9xK/WQpcsBB3jEybChz9DPC2U/+cusjJVQ==}
     engines: {node: '>=18'}
 
+  ulidx@2.4.1:
+    resolution: {integrity: sha512-xY7c8LPyzvhvew0Fn+Ek3wBC9STZAuDI/Y5andCKi9AX6/jvfaX45PhsDX8oxgPL0YFp0Jhr8qWMbS/p9375Xg==}
+    engines: {node: '>=16'}
+
   ultrahtml@1.7.0:
     resolution: {integrity: sha512-2xRd0VHoAQE4M+vF/DvFFB7pUV0ZxTW1TLi7lHQWnF/Sb5TPeEUV/l+hxcNnGO00ZXGnR0voCMmYRKQf+rvJ2g==}
 
@@ -20038,6 +20254,13 @@ snapshots:
       rxjs: 7.8.2
       tslib: 2.8.1
 
+  '@anthropic-ai/sdk@0.129.0(zod@4.6.7)':
+    dependencies:
+      json-schema-to-ts: 3.1.1
+      standardwebhooks: 1.1.1
+    optionalDependencies:
+      zod: 4.6.7
+
   '@anthropic-ai/sdk@0.133.0(zod@4.6.7)':
     dependencies:
       json-schema-to-ts: 3.1.1
@@ -20051,6 +20274,12 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
+  '@anthropic-ai/sdk@0.91.1(zod@4.6.7)':
+    dependencies:
+      json-schema-to-ts: 3.1.1
+    optionalDependencies:
+      zod: 4.6.7
+
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.19.0
@@ -20298,6 +20527,38 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
+  '@aws-sdk/client-bedrock-runtime@3.1048.0':
+    dependencies:
+      '@aws-crypto/sha256-browser': 5.2.0
+      '@aws-crypto/sha256-js': 5.2.0
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/eventstream-handler-node': 3.972.39
+      '@aws-sdk/middleware-eventstream': 3.972.35
+      '@aws-sdk/middleware-websocket': 3.972.60
+      '@aws-sdk/token-providers': 3.1048.0
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/fetch-http-handler': 5.8.0
+      '@smithy/node-http-handler': 4.12.1
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
+  '@aws-sdk/client-bedrock-runtime@3.1127.0':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/eventstream-handler-node': 3.972.39
+      '@aws-sdk/middleware-eventstream': 3.972.35
+      '@aws-sdk/middleware-websocket': 3.972.60
+      '@aws-sdk/token-providers': 3.1127.0
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/fetch-http-handler': 5.8.0
+      '@smithy/node-http-handler': 4.12.1
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@aws-sdk/client-bedrock-runtime@3.1159.0':
     dependencies:
       '@aws-sdk/core': 3.978.7
@@ -20816,6 +21077,24 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
+  '@aws-sdk/token-providers@3.1048.0':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
+  '@aws-sdk/token-providers@3.1127.0':
+    dependencies:
+      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@aws-sdk/token-providers@3.1159.0':
     dependencies:
       '@aws-sdk/core': 3.978.7
@@ -22875,6 +23154,100 @@ snapshots:
 
   '@dxup/unimport@0.1.2': {}
 
+  '@earendil-works/chord@1.4.0':
+    dependencies:
+      '@earendil-works/pi-telemetry': 1.4.0
+      typebox: 1.3.27
+
+  '@earendil-works/pi-agent-core@0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)':
+    dependencies:
+      '@earendil-works/pi-ai': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
+      diff: 8.0.4
+      ignore: 7.0.5
+      typebox: 1.3.7
+      yaml: 2.9.0
+    transitivePeerDependencies:
+      - '@modelcontextprotocol/sdk'
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+      - ws
+      - zod
+
+  '@earendil-works/pi-ai@0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)':
+    dependencies:
+      '@anthropic-ai/sdk': 0.91.1(zod@4.6.7)
+      '@aws-sdk/client-bedrock-runtime': 3.1048.0
+      '@google/genai': 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
+      '@mistralai/mistralai': 2.2.6(@opentelemetry/api@1.9.0)
+      '@opentelemetry/api': 1.9.0
+      '@smithy/node-http-handler': 4.7.3
+      http-proxy-agent: 7.0.2(supports-color@10.0.0)
+      https-proxy-agent: 7.0.6(supports-color@10.0.0)
+      openai: 6.26.0(ws@8.21.3)(zod@4.6.7)
+      partial-json: 0.1.7
+      typebox: 1.3.7
+    transitivePeerDependencies:
+      - '@modelcontextprotocol/sdk'
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+      - ws
+      - zod
+
+  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+    dependencies:
+      '@anthropic-ai/sdk': 0.129.0(zod@4.6.7)
+      '@aws-sdk/client-bedrock-runtime': 3.1127.0
+      '@earendil-works/pi-telemetry': 1.4.0
+      '@google/genai': 2.21.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
+      '@smithy/node-http-handler': 4.12.1
+      http-proxy-agent: 9.1.0(supports-color@10.0.0)
+      https-proxy-agent: 9.1.0(supports-color@10.0.0)
+      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      partial-json: 0.1.7
+      typebox: 1.3.27
+    transitivePeerDependencies:
+      - '@aws-sdk/credential-provider-node'
+      - '@modelcontextprotocol/sdk'
+      - '@smithy/hash-node'
+      - '@smithy/signature-v4'
+      - bufferutil
+      - kerberos
+      - supports-color
+      - undici
+      - utf-8-validate
+      - ws
+      - zod
+
+  '@earendil-works/pi-codemode@1.4.0':
+    dependencies:
+      quickjs-wasi: 3.6.2
+
+  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+    dependencies:
+      '@earendil-works/chord': 1.4.0
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-codemode': 1.4.0
+      '@earendil-works/pi-telemetry': 1.4.0
+      '@silvia-odwyer/photon': 0.3.3
+      diff: 8.0.4
+      typebox: 1.3.27
+    transitivePeerDependencies:
+      - '@aws-sdk/credential-provider-node'
+      - '@modelcontextprotocol/sdk'
+      - '@smithy/hash-node'
+      - '@smithy/signature-v4'
+      - bufferutil
+      - kerberos
+      - supports-color
+      - undici
+      - utf-8-validate
+      - ws
+      - zod
+
+  '@earendil-works/pi-telemetry@1.4.0': {}
+
   '@edge-runtime/primitives@6.0.0': {}
 
   '@edge-runtime/types@4.0.0':
@@ -23542,6 +23915,26 @@ snapshots:
       '@fastify/forwarded': 3.0.1
       ipaddr.js: 2.4.0
 
+  '@flue/runtime@2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)':
+    dependencies:
+      '@earendil-works/pi-agent-core': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
+      '@hono/node-server': 2.0.10(hono@4.13.11)
+      '@modelcontextprotocol/client': 2.0.0
+      '@valibot/to-json-schema': 1.8.0(valibot@1.4.2(typescript@7.0.2))
+      hono: 4.13.11
+      js-yaml: 5.5.0
+      ulidx: 2.4.1
+      valibot: 1.4.2(typescript@7.0.2)
+    transitivePeerDependencies:
+      - '@modelcontextprotocol/sdk'
+      - bufferutil
+      - supports-color
+      - typescript
+      - utf-8-validate
+      - ws
+      - zod
+
   '@gar/promisify@1.1.3': {}
 
   '@glimmer/env@0.1.7': {}
@@ -23634,15 +24027,29 @@ snapshots:
 
   '@google-cloud/promisify@2.0.3': {}
 
-  '@google/genai@1.20.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(encoding@0.1.13)(supports-color@10.0.0)':
+  '@google/genai@1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)':
     dependencies:
-      google-auth-library: 9.15.1(encoding@0.1.13)(supports-color@10.0.0)
+      google-auth-library: 10.9.1(supports-color@10.0.0)
+      p-retry: 4.6.2
+      protobufjs: 7.6.6
+      ws: 8.21.3
+    optionalDependencies:
+      '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
+  '@google/genai@2.21.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)':
+    dependencies:
+      google-auth-library: 10.9.1(supports-color@10.0.0)
+      p-retry: 4.6.2
+      protobufjs: 7.6.6
       ws: 8.21.3
     optionalDependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
     transitivePeerDependencies:
       - bufferutil
-      - encoding
       - supports-color
       - utf-8-validate
 
@@ -24391,6 +24798,18 @@ snapshots:
       - encoding
       - supports-color
 
+  '@mistralai/mistralai@2.2.6(@opentelemetry/api@1.9.0)':
+    dependencies:
+      '@opentelemetry/semantic-conventions': 1.43.0
+      ws: 8.21.3
+      zod: 4.6.7
+      zod-to-json-schema: 3.25.2(zod@4.6.7)
+    optionalDependencies:
+      '@opentelemetry/api': 1.9.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   '@mistralai/mistralai@3.3.0(@aws-sdk/client-s3@3.1068.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
     dependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
@@ -26455,6 +26874,8 @@ snapshots:
 
   '@shikijs/vscode-textmate@10.0.2': {}
 
+  '@silvia-odwyer/photon@0.3.3': {}
+
   '@simple-dom/interface@1.4.0': {}
 
   '@simple-git/args-pathspec@1.0.3': {}
@@ -26620,6 +27041,12 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
+  '@smithy/node-http-handler@4.7.3':
+    dependencies:
+      '@smithy/core': 3.37.0
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@smithy/property-provider@4.2.14':
     dependencies:
       '@smithy/types': 4.19.0
@@ -27793,6 +28220,10 @@ snapshots:
       unhead: 2.1.17
       vue: 3.5.44(typescript@7.0.2)
 
+  '@valibot/to-json-schema@1.8.0(valibot@1.4.2(typescript@7.0.2))':
+    dependencies:
+      valibot: 1.4.2(typescript@7.0.2)
+
   '@vercel/nft@1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)':
     dependencies:
       '@mapbox/node-pre-gyp': 2.0.3(encoding@0.1.13)(supports-color@10.0.0)
@@ -28379,6 +28810,8 @@ snapshots:
 
   agent-base@7.1.3: {}
 
+  agent-base@9.0.0: {}
+
   agentkeepalive@4.2.1(supports-color@10.0.0):
     dependencies:
       debug: 4.3.4(supports-color@10.0.0)
@@ -28550,6 +28983,8 @@ snapshots:
 
   argparse@2.0.1: {}
 
+  argparse@3.0.4: {}
+
   args@5.0.3:
     dependencies:
       camelcase: 5.0.0
@@ -30074,6 +30509,8 @@ snapshots:
 
   data-uri-to-buffer@3.0.1: {}
 
+  data-uri-to-buffer@4.0.1: {}
+
   data-urls@4.0.0:
     dependencies:
       abab: 2.0.6
@@ -31625,6 +32062,11 @@ snapshots:
 
   fecha@4.2.3: {}
 
+  fetch-blob@3.2.0:
+    dependencies:
+      node-domexception: 1.0.0
+      web-streams-polyfill: 3.3.3
+
   fflate@0.4.9: {}
 
   fflate@0.8.3: {}
@@ -31790,6 +32232,10 @@ snapshots:
       hasown: 2.0.4
       mime-types: 2.1.35
 
+  formdata-polyfill@4.0.10:
+    dependencies:
+      fetch-blob: 3.2.0
+
   forwarded-parse@2.1.2: {}
 
   forwarded@0.2.0: {}
@@ -31922,15 +32368,12 @@ snapshots:
       - encoding
       - supports-color
 
-  gaxios@6.7.1(encoding@0.1.13)(supports-color@10.0.0):
+  gaxios@7.3.1(supports-color@10.0.0):
     dependencies:
       extend: 3.0.2
       https-proxy-agent: 7.0.6(supports-color@10.0.0)
-      is-stream: 2.0.1
-      node-fetch: 2.7.0(encoding@0.1.13)
-      uuid: 9.0.1
+      node-fetch: 3.3.2
     transitivePeerDependencies:
-      - encoding
       - supports-color
 
   gcp-metadata@4.2.1(encoding@0.1.13)(supports-color@10.0.0):
@@ -31941,13 +32384,12 @@ snapshots:
       - encoding
       - supports-color
 
-  gcp-metadata@6.1.1(encoding@0.1.13)(supports-color@10.0.0):
+  gcp-metadata@8.1.2(supports-color@10.0.0):
     dependencies:
-      gaxios: 6.7.1(encoding@0.1.13)(supports-color@10.0.0)
-      google-logging-utils: 0.0.2
+      gaxios: 7.3.1(supports-color@10.0.0)
+      google-logging-utils: 1.1.3
       json-bigint: 1.0.0
     transitivePeerDependencies:
-      - encoding
       - supports-color
 
   generate-function@2.3.1:
@@ -32156,34 +32598,33 @@ snapshots:
     dependencies:
       minimist: 1.2.8
 
-  google-auth-library@7.0.3(encoding@0.1.13)(supports-color@10.0.0):
+  google-auth-library@10.9.1(supports-color@10.0.0):
     dependencies:
-      arrify: 2.0.1
       base64-js: 1.5.1
       ecdsa-sig-formatter: 1.0.11
-      fast-text-encoding: 1.0.3
-      gaxios: 4.2.0(encoding@0.1.13)(supports-color@10.0.0)
-      gcp-metadata: 4.2.1(encoding@0.1.13)(supports-color@10.0.0)
-      gtoken: 5.2.1(encoding@0.1.13)(supports-color@10.0.0)
+      gaxios: 7.3.1(supports-color@10.0.0)
+      gcp-metadata: 8.1.2(supports-color@10.0.0)
+      google-logging-utils: 1.1.3
       jws: 4.0.1
-      lru-cache: 6.0.0
     transitivePeerDependencies:
-      - encoding
       - supports-color
 
-  google-auth-library@9.15.1(encoding@0.1.13)(supports-color@10.0.0):
+  google-auth-library@7.0.3(encoding@0.1.13)(supports-color@10.0.0):
     dependencies:
+      arrify: 2.0.1
       base64-js: 1.5.1
       ecdsa-sig-formatter: 1.0.11
-      gaxios: 6.7.1(encoding@0.1.13)(supports-color@10.0.0)
-      gcp-metadata: 6.1.1(encoding@0.1.13)(supports-color@10.0.0)
-      gtoken: 7.1.0(encoding@0.1.13)(supports-color@10.0.0)
+      fast-text-encoding: 1.0.3
+      gaxios: 4.2.0(encoding@0.1.13)(supports-color@10.0.0)
+      gcp-metadata: 4.2.1(encoding@0.1.13)(supports-color@10.0.0)
+      gtoken: 5.2.1(encoding@0.1.13)(supports-color@10.0.0)
       jws: 4.0.1
+      lru-cache: 6.0.0
     transitivePeerDependencies:
       - encoding
       - supports-color
 
-  google-logging-utils@0.0.2: {}
+  google-logging-utils@1.1.3: {}
 
   google-p12-pem@3.1.4:
     dependencies:
@@ -32220,14 +32661,6 @@ snapshots:
       - encoding
       - supports-color
 
-  gtoken@7.1.0(encoding@0.1.13)(supports-color@10.0.0):
-    dependencies:
-      gaxios: 6.7.1(encoding@0.1.13)(supports-color@10.0.0)
-      jws: 4.0.1
-    transitivePeerDependencies:
-      - encoding
-      - supports-color
-
   gzip-size@7.0.0:
     dependencies:
       duplexer: 0.1.2
@@ -32596,6 +33029,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  http-proxy-agent@9.1.0(supports-color@10.0.0):
+    dependencies:
+      agent-base: 9.0.0
+      debug: 4.4.3(supports-color@10.0.0)
+      proxy-agent-negotiate: 1.1.0
+    transitivePeerDependencies:
+      - kerberos
+      - supports-color
+
   http-proxy-middleware@2.0.10(@types/express@4.17.21)(debug@4.4.3(supports-color@10.0.0)):
     dependencies:
       '@types/http-proxy': 1.17.14
@@ -32661,6 +33103,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  https-proxy-agent@9.1.0(supports-color@10.0.0):
+    dependencies:
+      agent-base: 9.0.0
+      debug: 4.4.3(supports-color@10.0.0)
+      proxy-agent-negotiate: 1.1.0
+    transitivePeerDependencies:
+      - kerberos
+      - supports-color
+
   httpxy@0.5.1: {}
 
   human-signals@1.1.1: {}
@@ -33199,14 +33650,18 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@5.5.0:
+    dependencies:
+      argparse: 3.0.4
+
   jsdoc-type-pratt-parser@4.1.0: {}
 
   jsdoc-type-pratt-parser@7.2.0: {}
 
-  jsdom-worker@0.3.0(node-fetch@2.7.0(encoding@0.1.13)):
+  jsdom-worker@0.3.0(node-fetch@3.3.2):
     dependencies:
       mitt: 3.0.1
-      node-fetch: 2.7.0(encoding@0.1.13)
+      node-fetch: 3.3.2
       uuid-v4: 0.1.0
 
   jsdom@21.1.2(supports-color@10.0.0):
@@ -33553,6 +34008,8 @@ snapshots:
       picocolors: 1.1.1
       shell-quote: 1.12.0
 
+  layerr@3.0.0: {}
+
   lazystream@1.0.1:
     dependencies:
       readable-stream: 2.3.8
@@ -35311,6 +35768,8 @@ snapshots:
 
   node-cron@4.6.0: {}
 
+  node-domexception@1.0.0: {}
+
   node-fetch-native@1.6.7: {}
 
   node-fetch@2.7.0(encoding@0.1.13):
@@ -35319,6 +35778,12 @@ snapshots:
     optionalDependencies:
       encoding: 0.1.13
 
+  node-fetch@3.3.2:
+    dependencies:
+      data-uri-to-buffer: 4.0.1
+      fetch-blob: 3.2.0
+      formdata-polyfill: 4.0.10
+
   node-forge@1.4.0: {}
 
   node-gyp-build-optional-packages@5.2.2:
@@ -35897,6 +36362,19 @@ snapshots:
       ws: 8.21.3
       zod: 4.6.7
 
+  openai@6.26.0(ws@8.21.3)(zod@4.6.7):
+    optionalDependencies:
+      ws: 8.21.3
+      zod: 4.6.7
+
+  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+    optionalDependencies:
+      '@aws-sdk/credential-provider-node': 3.972.90
+      '@smithy/signature-v4': 5.7.4
+      undici: 7.24.8
+      ws: 8.21.3
+      zod: 4.6.7
+
   openai@7.31.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
       '@aws-sdk/credential-provider-node': 3.972.90
@@ -36299,6 +36777,8 @@ snapshots:
 
   parseurl@1.3.3: {}
 
+  partial-json@0.1.7: {}
+
   pascal-case@3.1.2:
     dependencies:
       no-case: 3.0.4
@@ -37268,11 +37748,27 @@ snapshots:
 
   property-information@7.1.0: {}
 
+  protobufjs@7.6.6:
+    dependencies:
+      '@protobufjs/aspromise': 1.1.2
+      '@protobufjs/base64': 1.1.2
+      '@protobufjs/codegen': 2.0.5
+      '@protobufjs/eventemitter': 1.1.1
+      '@protobufjs/fetch': 1.1.1
+      '@protobufjs/float': 1.0.2
+      '@protobufjs/path': 1.1.2
+      '@protobufjs/pool': 1.1.0
+      '@protobufjs/utf8': 1.1.1
+      '@types/node': 20.19.43
+      long: 5.3.2
+
   proxy-addr@2.0.8:
     dependencies:
       forwarded: 0.2.0
       ipaddr.js: 1.9.1
 
+  proxy-agent-negotiate@1.1.0: {}
+
   proxy-from-env@2.1.0: {}
 
   proxy@2.1.1(supports-color@10.0.0):
@@ -37327,6 +37823,8 @@ snapshots:
       rimraf: 2.7.1
       underscore.string: 3.3.6
 
+  quickjs-wasi@3.6.2: {}
+
   quote-unquote@1.0.0: {}
 
   radix3@1.1.2: {}
@@ -39425,6 +39923,10 @@ snapshots:
       media-typer: 1.1.0
       mime-types: 3.0.2
 
+  typebox@1.3.27: {}
+
+  typebox@1.3.7: {}
+
   typed-array-buffer@1.0.3:
     dependencies:
       call-bound: 1.0.4
@@ -39512,6 +40014,10 @@ snapshots:
 
   uint8array-extras@1.4.0: {}
 
+  ulidx@2.4.1:
+    dependencies:
+      layerr: 3.0.0
+
   ultrahtml@1.7.0: {}
 
   unbox-primitive@1.1.0:
@@ -39978,6 +40484,10 @@ snapshots:
     optionalDependencies:
       typescript: 6.0.3
 
+  valibot@1.4.2(typescript@7.0.2):
+    optionalDependencies:
+      typescript: 7.0.2
+
   validate-html-nesting@1.2.2: {}
 
   validate-npm-package-license@3.0.4:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index f0da0985135e..69f59d9ab5e3 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -99,6 +99,7 @@ packageExtensions:
 # `false` only for scripts that just print a message.
 allowBuilds:
   '@apollo/protobufjs': true
+  '@google/genai': false
   '@nestjs/core': false
   '@parcel/watcher': true
   '@prisma/client': true
@@ -112,6 +113,7 @@ allowBuilds:
   nice-napi: true
   nx: true
   prisma: true
+  protobufjs: false
   sharp: true
   vue-demi: true
   workerd: true

From e1daae79b55337dc78789c5fb552c19a87876b10 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 13:37:27 +0100
Subject: [PATCH 056/169] chore: Remove unused test and build dependencies
 (#25945)

**Why:** Remove six unused dependencies left behind by deleted build
helpers and tests.

**How to review:** Six declarations across four packages, plus lockfile
pruning.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../browser-integration-tests/package.json    |   1 -
 dev-packages/rollup-utils/package.json        |   4 -
 .../size-limit-gh-action/package.json         |   2 -
 packages/replay-internal/package.json         |   1 -
 pnpm-lock.yaml                                | 101 ------------------
 5 files changed, 109 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index 714fe69a262f..00f833a08d8c 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -62,7 +62,6 @@
     "@sentry/rrweb": "2.45.0",
     "@sentry/browser": "11.10.0",
     "@sentry/replay": "11.10.0",
-    "@sentry/opentelemetry": "11.10.0",
     "@sentry/conventions": "0.30.0",
     "@supabase/supabase-js": "2.109.0",
     "axios": "1.20.0",
diff --git a/dev-packages/rollup-utils/package.json b/dev-packages/rollup-utils/package.json
index 2d94d1c9d467..1b6e8af1f86a 100644
--- a/dev-packages/rollup-utils/package.json
+++ b/dev-packages/rollup-utils/package.json
@@ -8,10 +8,6 @@
   "license": "MIT",
   "private": true,
   "main": "./index.mjs",
-  "dependencies": {
-    "acorn": "^8.7.0",
-    "recast": "^0.24.0"
-  },
   "devDependencies": {
     "eslint-plugin-regexp": "^3.1.0"
   },
diff --git a/dev-packages/size-limit-gh-action/package.json b/dev-packages/size-limit-gh-action/package.json
index 2fac041a0d7d..eddcb6c91547 100644
--- a/dev-packages/size-limit-gh-action/package.json
+++ b/dev-packages/size-limit-gh-action/package.json
@@ -18,8 +18,6 @@
     "@actions/core": "1.10.1",
     "@actions/exec": "1.1.1",
     "@actions/github": "^5.0.0",
-    "@actions/glob": "0.7.0",
-    "@actions/io": "3.0.2",
     "bytes-iec": "3.1.1",
     "markdown-table": "3.0.3"
   }
diff --git a/packages/replay-internal/package.json b/packages/replay-internal/package.json
index 1f766902b1d6..88cc236a18f2 100644
--- a/packages/replay-internal/package.json
+++ b/packages/replay-internal/package.json
@@ -78,7 +78,6 @@
     "@sentry/rrweb": "2.45.0",
     "@sentry/rrweb-snapshot": "2.45.0",
     "fflate": "0.8.3",
-    "jest-matcher-utils": "^29.0.0",
     "jsdom-worker": "^0.3.0"
   },
   "dependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ca8b7afe45e5..369bdf1cadad 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -300,9 +300,6 @@ importers:
       '@sentry/conventions':
         specifier: 0.30.0
         version: 0.30.0
-      '@sentry/opentelemetry':
-        specifier: 11.10.0
-        version: link:../../packages/opentelemetry
       '@sentry/replay':
         specifier: 11.10.0
         version: link:../../packages/replay-internal
@@ -928,13 +925,6 @@ importers:
         version: 3.0.3
 
   dev-packages/rollup-utils:
-    dependencies:
-      acorn:
-        specifier: ^8.7.0
-        version: 8.18.0
-      recast:
-        specifier: ^0.24.0
-        version: 0.24.0
     devDependencies:
       eslint-plugin-regexp:
         specifier: ^3.1.0
@@ -954,12 +944,6 @@ importers:
       '@actions/github':
         specifier: ^5.0.0
         version: 5.1.1(encoding@0.1.13)
-      '@actions/glob':
-        specifier: 0.7.0
-        version: 0.7.0
-      '@actions/io':
-        specifier: 3.0.2
-        version: 3.0.2
       bytes-iec:
         specifier: 3.1.1
         version: 3.1.1
@@ -2167,9 +2151,6 @@ importers:
       fflate:
         specifier: 0.8.3
         version: 0.8.3
-      jest-matcher-utils:
-        specifier: ^29.0.0
-        version: 29.7.0
       jsdom-worker:
         specifier: ^0.3.0
         version: 0.3.0(node-fetch@3.3.2)
@@ -2608,9 +2589,6 @@ packages:
   '@actions/github@9.0.0':
     resolution: {integrity: sha512-yJ0RoswsAaKcvkmpCE4XxBRiy/whH2SdTBHWzs0gi4wkqTDhXMChjSdqBz/F4AeiDlP28rQqL33iHb+kjAMX6w==}
 
-  '@actions/glob@0.7.0':
-    resolution: {integrity: sha512-+7s3wM+cXapDLmLL1NVWHawqcJOZzXZy2df/VhNn8DnZtS/x83iTCKaUn9F0llur4h3CII0AilvKKH4CMPL8Gw==}
-
   '@actions/http-client@2.2.3':
     resolution: {integrity: sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==}
 
@@ -6048,10 +6026,6 @@ packages:
     resolution: {integrity: sha512-n5H8QLDJ47QqbCNn5SuFjCRDrOLEZ0h8vAHCK5RL9Ls7Xa8AQLa/YxAc9UjFqoEDM48muwtBGjtMY5cr0PLDCw==}
     engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
 
-  '@jest/schemas@29.6.3':
-    resolution: {integrity: sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
   '@jest/types@26.6.2':
     resolution: {integrity: sha512-fC6QCp7Sc5sX6g8Tvbmj4XUTbyrik0akgRy03yjXbQaBWWNWGE7SGtJk98m0N8nzegD/7SggrUlivxo5ax4KWQ==}
     engines: {node: '>= 10.14.2'}
@@ -8421,9 +8395,6 @@ packages:
   '@simple-git/argv-parser@1.1.1':
     resolution: {integrity: sha512-Q9lBcfQ+VQCpQqGJFHe5yooOS5hGdLFFbJ5R+R5aDsnkPCahtn1hSkMcORX65J2Z5lxSkD0lQorMsncuBQxYUw==}
 
-  '@sinclair/typebox@0.27.8':
-    resolution: {integrity: sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==}
-
   '@sindresorhus/is@7.0.2':
     resolution: {integrity: sha512-d9xRovfKNz1SKieM0qJdO+PQonjnnIfSNWfHYnBSJ9hkjm0ZPw6HlxscDXYstp3z+7V2GOFHc+J0CYrYTjqCJw==}
     engines: {node: '>=18'}
@@ -11522,10 +11493,6 @@ packages:
   diff-match-patch@1.0.5:
     resolution: {integrity: sha512-IayShXAgj/QMXgB0IWmKx+rOPuGMhqm5w6jvFxmVenXKIzRqTAAsbBPT3kWQeGANj3jGgvcvv4yK6SxqYmikgw==}
 
-  diff-sequences@29.6.3:
-    resolution: {integrity: sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
   diff@5.2.2:
     resolution: {integrity: sha512-vtcDfH3TOjP8UekytvnHH1o1P4FcUdt4eQ1Y+Abap1tk/OB2MWQvcwS2ClCd1zuIhc3JKOx6p3kod8Vfys3E+A==}
     engines: {node: '>=0.3.1'}
@@ -13767,18 +13734,6 @@ packages:
     resolution: {integrity: sha512-kWmLKn2tRtfYMF/BakihVVRzBKOxz4gJMiL2Rj91WnAB5TPZumSH99R/Yf1qE1u4uRimvCSJfm6hnxohXeEXjQ==}
     engines: {node: '>=14'}
 
-  jest-diff@29.7.0:
-    resolution: {integrity: sha512-LMIgiIrhigmPrs03JHpxUh2yISK3vLFPkAodPeo0+BuF7wA2FoQbkEg1u8gBYBThncu7e1oEDUfIXVuTqLRUjw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
-  jest-get-type@29.6.3:
-    resolution: {integrity: sha512-zrteXnqYxfQh7l5FHyL38jL39di8H8rHoecLH3JNxH3BwOrBsNeabdap5e0I23lD4HHI8W5VFBZqG4Eaq5LNcw==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
-  jest-matcher-utils@29.7.0:
-    resolution: {integrity: sha512-sBkD+Xi9DtcChsI3L3u0+N0opgPYnCRPtGcQYrgXmR+hmt/fYfWAL0xRXYU8eWOdfuLgBe0YCW3AFtnRLagq/g==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
   jest-worker@27.5.1:
     resolution: {integrity: sha512-7vuh85V5cdDofPyxn58nrPjBktZo0u9x1g8WtjQol+jZDaE+fhN+cIvTj11GndBnMnyfrUOG1sZQxCdjKh+DKg==}
     engines: {node: '>= 10.13.0'}
@@ -16607,10 +16562,6 @@ packages:
     resolution: {integrity: sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==}
     engines: {node: ^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0}
 
-  pretty-format@29.7.0:
-    resolution: {integrity: sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==}
-    engines: {node: ^14.15.0 || ^16.10.0 || >=18.0.0}
-
   pretty-ms@7.0.1:
     resolution: {integrity: sha512-973driJZvxiGOQ5ONsFhOF/DtzPMOMtgC11kCpUrPGMTgqp2q/1gwzCquocrN33is0VZ5GFHXZYMM9l6h67v2Q==}
     engines: {node: '>=10'}
@@ -16808,9 +16759,6 @@ packages:
   react-is@17.0.2:
     resolution: {integrity: sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==}
 
-  react-is@18.3.1:
-    resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
-
   react-refresh@0.14.2:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
     engines: {node: '>=0.10.0'}
@@ -16920,10 +16868,6 @@ packages:
     resolution: {integrity: sha512-YTUo+Flmw4ZXiWfQKGcwwc11KnoRAYgzAE2E7mXKCjSviTKShtxBsN6YUUBB2gtaBzKzeKunxhUwNHQuRryhWA==}
     engines: {node: '>= 4'}
 
-  recast@0.24.0:
-    resolution: {integrity: sha512-dN08tw9Kl2i8oDBy16NhxBh6qOqsEqmGYpX1xaxPmgz6/6ukopSuysLfvLbieuDMY57jEz6eTmNz6lqH54kuqQ==}
-    engines: {node: '>= 22'}
-
   rechoir@0.8.0:
     resolution: {integrity: sha512-/vxpCXddiX8NGfGO/mTafwjq4aFa/71pvamip0++IQk3zG8cbCj0fifNPrjjF1XMXUne91jL9OoxmdykoEtifQ==}
     engines: {node: '>= 10.13.0'}
@@ -19960,11 +19904,6 @@ snapshots:
       '@octokit/request-error': 7.1.0
       undici: 6.24.1
 
-  '@actions/glob@0.7.0':
-    dependencies:
-      '@actions/core': 3.0.0
-      minimatch: 10.2.5
-
   '@actions/http-client@2.2.3':
     dependencies:
       tunnel: 0.0.6
@@ -24569,10 +24508,6 @@ snapshots:
 
   '@jest/diff-sequences@30.0.1': {}
 
-  '@jest/schemas@29.6.3':
-    dependencies:
-      '@sinclair/typebox': 0.27.8
-
   '@jest/types@26.6.2':
     dependencies:
       '@types/istanbul-lib-coverage': 2.0.6
@@ -26884,8 +26819,6 @@ snapshots:
     dependencies:
       '@simple-git/args-pathspec': 1.0.3
 
-  '@sinclair/typebox@0.27.8': {}
-
   '@sindresorhus/is@7.0.2': {}
 
   '@sindresorhus/merge-streams@4.0.0': {}
@@ -30790,8 +30723,6 @@ snapshots:
 
   diff-match-patch@1.0.5: {}
 
-  diff-sequences@29.6.3: {}
-
   diff@5.2.2: {}
 
   diff@8.0.4: {}
@@ -33601,22 +33532,6 @@ snapshots:
     optionalDependencies:
       '@pkgjs/parseargs': 0.11.0
 
-  jest-diff@29.7.0:
-    dependencies:
-      chalk: 4.1.2
-      diff-sequences: 29.6.3
-      jest-get-type: 29.6.3
-      pretty-format: 29.7.0
-
-  jest-get-type@29.6.3: {}
-
-  jest-matcher-utils@29.7.0:
-    dependencies:
-      chalk: 4.1.2
-      jest-diff: 29.7.0
-      jest-get-type: 29.6.3
-      pretty-format: 29.7.0
-
   jest-worker@27.5.1:
     dependencies:
       '@types/node': 20.19.43
@@ -37681,12 +37596,6 @@ snapshots:
       ansi-styles: 5.2.0
       react-is: 17.0.2
 
-  pretty-format@29.7.0:
-    dependencies:
-      '@jest/schemas': 29.6.3
-      ansi-styles: 5.2.0
-      react-is: 18.3.1
-
   pretty-ms@7.0.1:
     dependencies:
       parse-ms: 2.1.0
@@ -37881,8 +37790,6 @@ snapshots:
 
   react-is@17.0.2: {}
 
-  react-is@18.3.1: {}
-
   react-refresh@0.14.2: {}
 
   react-router-dom@6.30.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
@@ -38037,14 +37944,6 @@ snapshots:
       tiny-invariant: 1.3.3
       tslib: 2.8.1
 
-  recast@0.24.0:
-    dependencies:
-      ast-types: 0.16.1
-      esprima: 4.0.1
-      source-map: 0.6.1
-      tiny-invariant: 1.3.3
-      tslib: 2.8.1
-
   rechoir@0.8.0:
     dependencies:
       resolve: 1.22.12

From 2f5a2f93c7d63868bd773cb8e9407422e8a6fc97 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 13:41:32 +0100
Subject: [PATCH 057/169] chore(node-integration-tests): Remove unused
 dependencies (#25942)

**Why:** Noticed there is a bunch of leftover dependencies being
installed in our node integration suites that weren't cleaned out after
deleting suites or updating helpers etc, removing all of these so we can
safe some install time.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../node-integration-tests/package.json       |  14 -
 pnpm-lock.yaml                                | 362 ------------------
 2 files changed, 376 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 2965f6567c76..4b6af19c037d 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -53,9 +53,6 @@
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@modelcontextprotocol/server": "^2.0.0",
-    "@nestjs/common": "^11",
-    "@nestjs/core": "^11",
-    "@nestjs/platform-express": "^11",
     "@prisma/adapter-pg": "7.9.1",
     "@prisma/client": "6.15.0",
     "@sentry/aws-serverless": "11.10.0",
@@ -65,9 +62,6 @@
     "@sentry/server-runtime-injection": "11.10.0",
     "@sentry/server-utils": "11.10.0",
     "@smithy/node-http-handler": "4.12.1",
-    "@types/mongodb": "^3.6.20",
-    "@types/mysql": "^2.15.21",
-    "@types/pg": "^8.6.5",
     "@typesafe-ai/sdk": "^0.6.0",
     "ai": "^4.3.16",
     "amqplib": "^0.10.9",
@@ -85,7 +79,6 @@
     "h3": "2.0.1-rc.22",
     "graphql-tag": "^2.12.7",
     "hono": "^4.13.7",
-    "http-terminator": "^3.2.0",
     "ioredis": "5.10.1",
     "ioredis-5": "npm:ioredis@^5.11.0",
     "ioredis-6": "npm:ioredis@^6.0.0",
@@ -111,9 +104,7 @@
     "redis-4": "npm:redis@^4.6.14",
     "redis-5": "npm:redis@~5.11.0",
     "redis-5-tracing": "npm:redis@^5.12.0",
-    "reflect-metadata": "0.2.2",
     "together-ai": "0.54.0",
-    "rxjs": "^7.8.2",
     "srvx": "^0.11.22",
     "tedious": "^19.2.1",
     "unstorage": "2.0.0-alpha.7",
@@ -125,18 +116,13 @@
   "devDependencies": {
     "@hapi/boom": "^10.0.1",
     "@neondatabase/serverless": "1.2.0",
-    "@opentelemetry/instrumentation-http": "0.220.0",
     "@sentry-internal/rollup-utils": "11.10.0",
     "@sentry/conventions": "0.30.0",
     "@sentry-internal/test-utils": "11.10.0",
     "@sentry/node-native": "11.10.0",
-    "@types/amqplib": "^0.10.5",
     "@types/express": "^4.17.21",
-    "@types/node-cron": "^3.0.11",
     "@types/node-schedule": "^2.1.7",
     "esbuild": "0.28.1",
-    "eslint-plugin-regexp": "^3.1.0",
-    "globby": "11",
     "react": "^18.3.1",
     "winston-transport": "^4.9.0",
     "zod": "^4.6.7"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 369bdf1cadad..61e98910ce63 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -655,15 +655,6 @@ importers:
       '@modelcontextprotocol/server':
         specifier: ^2.0.0
         version: 2.0.0
-      '@nestjs/common':
-        specifier: ^11
-        version: 11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)
-      '@nestjs/core':
-        specifier: ^11
-        version: 11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/platform-express@11.1.19)(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      '@nestjs/platform-express':
-        specifier: ^11
-        version: 11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/core@11.1.19)(supports-color@10.0.0)
       '@prisma/adapter-pg':
         specifier: 7.9.1
         version: 7.9.1
@@ -691,15 +682,6 @@ importers:
       '@smithy/node-http-handler':
         specifier: 4.12.1
         version: 4.12.1
-      '@types/mongodb':
-        specifier: ^3.6.20
-        version: 3.6.20
-      '@types/mysql':
-        specifier: ^2.15.21
-        version: 2.15.27
-      '@types/pg':
-        specifier: ^8.6.5
-        version: 8.20.0
       '@typesafe-ai/sdk':
         specifier: ^0.6.0
         version: 0.6.0
@@ -751,9 +733,6 @@ importers:
       hono:
         specifier: ^4.13.7
         version: 4.13.11
-      http-terminator:
-        specifier: ^3.2.0
-        version: 3.2.0
       ioredis:
         specifier: 5.10.1
         version: 5.10.1(supports-color@10.0.0)
@@ -829,12 +808,6 @@ importers:
       redis-5-tracing:
         specifier: npm:redis@^5.12.0
         version: redis@5.12.1(@opentelemetry/api@1.9.0)
-      reflect-metadata:
-        specifier: 0.2.2
-        version: 0.2.2
-      rxjs:
-        specifier: ^7.8.2
-        version: 7.8.2
       srvx:
         specifier: ^0.11.22
         version: 0.11.22
@@ -866,9 +839,6 @@ importers:
       '@neondatabase/serverless':
         specifier: 1.2.0
         version: 1.2.0
-      '@opentelemetry/instrumentation-http':
-        specifier: 0.220.0
-        version: 0.220.0(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
       '@sentry-internal/rollup-utils':
         specifier: 11.10.0
         version: link:../rollup-utils
@@ -881,27 +851,15 @@ importers:
       '@sentry/node-native':
         specifier: 11.10.0
         version: link:../../packages/node-native
-      '@types/amqplib':
-        specifier: ^0.10.5
-        version: 0.10.5
       '@types/express':
         specifier: ^4.17.21
         version: 4.17.21
-      '@types/node-cron':
-        specifier: ^3.0.11
-        version: 3.0.11
       '@types/node-schedule':
         specifier: ^2.1.7
         version: 2.1.7
       esbuild:
         specifier: 0.28.1
         version: 0.28.1
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
-      globby:
-        specifier: '11'
-        version: 11.1.0
       react:
         specifier: ^18.3.1
         version: 18.3.1
@@ -6311,19 +6269,6 @@ packages:
       class-validator:
         optional: true
 
-  '@nestjs/common@11.1.19':
-    resolution: {integrity: sha512-qeiTt2tv+e5QyDKqG8HlVZb2wx64FEaSGFJouqTSRs+kG44iTfl3xlz1XqVped+rihx4hmjWgL5gkhtdK3E6+Q==}
-    peerDependencies:
-      class-transformer: '>=0.4.1'
-      class-validator: '>=0.13.2'
-      reflect-metadata: ^0.1.12 || ^0.2.0
-      rxjs: ^7.1.0
-    peerDependenciesMeta:
-      class-transformer:
-        optional: true
-      class-validator:
-        optional: true
-
   '@nestjs/core@10.4.15':
     resolution: {integrity: sha512-UBejmdiYwaH6fTsz2QFBlC1cJHM+3UDeLZN+CiP9I1fRv2KlBZsmozGLbV5eS1JAVWJB4T5N5yQ0gjN8ZvcS2w==}
     peerDependencies:
@@ -6341,30 +6286,6 @@ packages:
       '@nestjs/websockets':
         optional: true
 
-  '@nestjs/core@11.1.19':
-    resolution: {integrity: sha512-6nJkWa2efrYi+XlU686J9y5L7OvxpLVjT0T/sxRKE7Jvpffiihelup4WSvLvRhdHDjj/5SuoWEwqReXAaaeHmw==}
-    engines: {node: '>= 20'}
-    peerDependencies:
-      '@nestjs/common': ^11.0.0
-      '@nestjs/microservices': ^11.0.0
-      '@nestjs/platform-express': ^11.0.0
-      '@nestjs/websockets': ^11.0.0
-      reflect-metadata: ^0.1.12 || ^0.2.0
-      rxjs: ^7.1.0
-    peerDependenciesMeta:
-      '@nestjs/microservices':
-        optional: true
-      '@nestjs/platform-express':
-        optional: true
-      '@nestjs/websockets':
-        optional: true
-
-  '@nestjs/platform-express@11.1.19':
-    resolution: {integrity: sha512-Vpdv8jyCQdThfoTx+UTn+DRYr6H6X02YUqcpZ3qP6G3ZUwtVp7eS+hoQPGd4UuCnlnFG8Wqr2J9bGEzQdi1rIg==}
-    peerDependencies:
-      '@nestjs/common': ^11.0.0
-      '@nestjs/core': ^11.0.0
-
   '@next/env@15.5.28':
     resolution: {integrity: sha512-xxW5EBI8fMPuVTPBW7LL980IRbuDXlbkUAwp9DDhtb4Lnich3nJ13uYpvrX4VE74hWPf6AvHHAMmGCidcHjbfg==}
 
@@ -6551,11 +6472,6 @@ packages:
     peerDependencies:
       nuxt: ^3.21.11
 
-  '@nuxt/opencollective@0.4.1':
-    resolution: {integrity: sha512-GXD3wy50qYbxCJ652bDrDzgMr3NFEkIS374+IgFQKkCvk9yiYcLvX2XDYr7UyQxf4wK0e+yqDYRubZ0DtOxnmQ==}
-    engines: {node: ^14.18.0 || >=16.10.0, npm: '>=5.10.0'}
-    hasBin: true
-
   '@nuxt/schema@3.21.11':
     resolution: {integrity: sha512-5Couz53Pl/SgTwtMQ9jlxVIC6wZk9aAbWyeOD7D6D1UIP5DzV/yV5lPDY/kM0nmiqPSzJf9WLTdJgB2gNm0dOA==}
     engines: {node: ^14.18.0 || >=16.10.0}
@@ -6737,10 +6653,6 @@ packages:
   '@open-draft/until@2.1.0':
     resolution: {integrity: sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==}
 
-  '@opentelemetry/api-logs@0.220.0':
-    resolution: {integrity: sha512-CmVa4ImJ+ynfrPMNaAXHET6Bhb44SwzmfyVJFq9ni2jgXJR/l7C6gfVFddNmHP+ZOkP9cf4f9DBe68qVLTHc9w==}
-    engines: {node: '>=8.0.0'}
-
   '@opentelemetry/api@1.10.0':
     resolution: {integrity: sha512-lMkyes8iHrG+mk6WH7X70MdCLI2RS0FwNBY1PyQ8UemaijE2m5mv5A0Niy3HtbYTFrgkUEQjFMXmSAk2hQDuPQ==}
     engines: {node: '>=8.0.0'}
@@ -6749,24 +6661,6 @@ packages:
     resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
     engines: {node: '>=8.0.0'}
 
-  '@opentelemetry/core@2.9.0':
-    resolution: {integrity: sha512-m2nckMT80NnmjTYSPjJQObBJ+8dgkoajEOUbznL8AHZ3T3yHRk2P7gI1PhEBc1+lOnrYE9UWrWHqJDsmqjmNbw==}
-    engines: {node: ^18.19.0 || >=20.6.0}
-    peerDependencies:
-      '@opentelemetry/api': '>=1.0.0 <1.10.0'
-
-  '@opentelemetry/instrumentation-http@0.220.0':
-    resolution: {integrity: sha512-Szt4dO2Boz2CDr38DaSw/lnqwhwKl+IAdgNGEGgSm2Anb+fwPtIAGmIwkhsLLN69QQZQE96JxjMKYY4rlRkYKw==}
-    engines: {node: ^18.19.0 || >=20.6.0}
-    peerDependencies:
-      '@opentelemetry/api': ^1.3.0
-
-  '@opentelemetry/instrumentation@0.220.0':
-    resolution: {integrity: sha512-xQx3E2WxP1mDvKzxLxX+CTCtNLa560YJZ3087qYHerl2YmiKpv7AH+dAy7vmx+eVrZ5BwhfWUAVoKOoxCNHcpw==}
-    engines: {node: ^18.19.0 || >=20.6.0}
-    peerDependencies:
-      '@opentelemetry/api': ^1.3.0
-
   '@opentelemetry/semantic-conventions@1.43.0':
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
@@ -8906,9 +8800,6 @@ packages:
   '@tybys/wasm-util@0.9.0':
     resolution: {integrity: sha512-6+7nlbMVX/PVDCwaIQ8nTOPveOcFLSt8GcXdx8hD0bt39uWxYT88uXzqTd4fTvqta7oeUJqudepapKNt2DYJFw==}
 
-  '@types/amqplib@0.10.5':
-    resolution: {integrity: sha512-/cSykxROY7BWwDoi4Y4/jLAuZTshZxd8Ey1QYa/VaXriMotBDoou7V/twJiOSHzU6t1Kp1AHAUXGCgqq+6DNeg==}
-
   '@types/aria-query@4.2.1':
     resolution: {integrity: sha512-S6oPal772qJZHoRZLFc/XoZW2gFvwXusYUmXPXkgxJLuEk2vOt7jc4Yo6z/vtI0EBkbPBVrJJ0B+prLIKiWqHg==}
 
@@ -8942,10 +8833,6 @@ packages:
   '@types/braces@3.0.5':
     resolution: {integrity: sha512-SQFof9H+LXeWNz8wDe7oN5zu7ket0qwMu5vZubW4GCJ8Kkeh6nBWUz87+KTz/G3Kqsrp0j/W253XJb3KMEeg3w==}
 
-  '@types/bson@4.2.0':
-    resolution: {integrity: sha512-ELCPqAdroMdcuxqwMgUpifQyRoTpyYCNr1V9xKyF40VsBobsj+BbWNRvwGchMgBPGqkw655ypkjj2MEF5ywVwg==}
-    deprecated: This is a stub types definition. bson provides its own type definitions, so you do not need this installed.
-
   '@types/chai@5.2.2':
     resolution: {integrity: sha512-8kB30R7Hwqf40JPiKhVzodJs2Qc1ZJ5zuT3uzw5Hq/dhNCl3G3l83jfpdI1e20BP348+fV7VIL/+FxaXkqBmWg==}
 
@@ -9054,9 +8941,6 @@ packages:
   '@types/minimatch@3.0.5':
     resolution: {integrity: sha512-Klz949h02Gz2uZCMGwDUSDS1YBlTdDDgbWHi+81l29tQALUtvz4rAYi5uoVhE5Lagoq6DeqAUlbrHvW/mXDgdQ==}
 
-  '@types/mongodb@3.6.20':
-    resolution: {integrity: sha512-WcdpPJCakFzcWWD9juKoZbRtQxKIMYF/JIAM4JrNHrMcnJL6/a2NWjXxW7fo9hxboxxkg+icff8d7+WIEvKgYQ==}
-
   '@types/ms@0.7.32':
     resolution: {integrity: sha512-xPSg0jm4mqgEkNhowKgZFBNtwoEwF6gJ4Dhww+GFpm3IgtNseHQZ5IqdNwnquZEoANxyDAKDRAdVo4Z72VvD/g==}
 
@@ -9066,9 +8950,6 @@ packages:
   '@types/nlcst@2.0.3':
     resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==}
 
-  '@types/node-cron@3.0.11':
-    resolution: {integrity: sha512-0ikrnug3/IyneSHqCBeslAhlK2aBfYek1fGo4bP4QnZPmiqSGRK+Oy7ZMisLWkesffJvQ1cqAcBnJC+8+nxIAg==}
-
   '@types/node-fetch@2.6.13':
     resolution: {integrity: sha512-QGpRVpzSaUs30JBSGPjOg4Uveu384erbHBoT1zeONvyCfwQxIkUshLAOqN/k9EjGviPRmWTTe6aH2qySWKTVSw==}
 
@@ -9952,9 +9833,6 @@ packages:
   app-module-path@2.2.0:
     resolution: {integrity: sha512-gkco+qxENJV+8vFcDiiFhuoSvRXb2a/QPqpSoWhVz829VNJfOTnELbBmPmNKFxf3xdNnw4DWCkzkDaavcX/1YQ==}
 
-  append-field@1.0.0:
-    resolution: {integrity: sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==}
-
   aproba@2.0.0:
     resolution: {integrity: sha512-lYe4Gx7QT+MKGbDsA+Z+he/Wtef0BiwDOlK/XkBrdfsh9J/jPPXbX0tE9x9cl27Tmu5gg3QUbUrQYa/y+KOHPQ==}
 
@@ -10387,10 +10265,6 @@ packages:
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
-  boolean@3.2.0:
-    resolution: {integrity: sha512-d0II/GO9uf9lfUHH2BQsjxzRJZBdsjgsBiW4BvhWk/3qoKwQFjIDVN19PfX8F2D/r9PCMTtLWjYVCFrpeYUzsw==}
-    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
-
   bottleneck@2.19.5:
     resolution: {integrity: sha512-VHiNCbI1lKdl44tGrhNfU3lup0Tj/ZBMJB5/2ZbNXRCPuRCO7ed2mgcK4r17y+KB2EfuYuRaVlwNbAeaWGSpbw==}
 
@@ -10549,10 +10423,6 @@ packages:
     resolution: {integrity: sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==}
     engines: {node: '>=18'}
 
-  busboy@1.6.0:
-    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
-    engines: {node: '>=10.16.0'}
-
   bytes-iec@3.1.1:
     resolution: {integrity: sha512-fey6+4jDK7TFtFg/klGSvNKJctyU7n2aQdnM+CO0ruLPbqqMOM8Tio0Pc+deqUeVKX1tL5DQep1zQ7+37aTAsA==}
     engines: {node: '>= 0.8'}
@@ -10927,9 +10797,6 @@ packages:
   concat-map@0.0.1:
     resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
 
-  concat-stream@2.0.0:
-    resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
-
   confbox@0.1.8:
     resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
 
@@ -11372,10 +11239,6 @@ packages:
   defu@6.1.7:
     resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
 
-  delay@5.0.0:
-    resolution: {integrity: sha512-ReEBKkIfe4ya47wlPYf/gu5ib6yUG0/Aez0JQZQz94kiWtRQvZIQbTiehsnwHvLSWJnQdhVeqYue7Id1dKr0qw==}
-    engines: {node: '>=10'}
-
   delayed-stream@1.0.0:
     resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
     engines: {node: '>=0.4.0'}
@@ -12409,10 +12272,6 @@ packages:
   fast-json-stable-stringify@2.1.0:
     resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
 
-  fast-json-stringify@2.7.13:
-    resolution: {integrity: sha512-ar+hQ4+OIurUGjSJD1anvYSDcUflywhKjfxnsW4TBTD7+u0tJufv6DKRWoQk3vI6YBOWMoz0TQtfbe7dxbQmvA==}
-    engines: {node: '>= 10.0.0'}
-
   fast-json-stringify@6.4.0:
     resolution: {integrity: sha512-ibRCQ0GZKJIQ+P3Et1h0LhPgp3PMTYk0MH8O+kW3lNYsvmaQww5Nn3f1jf73Q0jR1Yz3a1CDP4/NZD3vOajWJQ==}
 
@@ -12426,10 +12285,6 @@ packages:
     resolution: {integrity: sha512-99jPl8JkCSCa4VlboNU1XuL98ijm74Pm9CGo6H4BoMVoVh1uhguQcvwLgXDT8Vkl2qj/UEQ0J9gD8beHjTFk1w==}
     hasBin: true
 
-  fast-printf@1.6.9:
-    resolution: {integrity: sha512-FChq8hbz65WMj4rstcQsFB0O7Cy++nmbNfLYnD9cYv2cRn8EG6k/MGn9kO/tjO66t09DLDugj3yL+V2o6Qftrg==}
-    engines: {node: '>=10.0'}
-
   fast-querystring@1.1.2:
     resolution: {integrity: sha512-g6KuKWmFXc0fID8WWH0jit4g0AGBoJhCkJMb1RmbsSEUNvQ+ZC8D6CUZ+GtF8nMzSPXnhiePyyqqipzNNEnHjg==}
 
@@ -12627,9 +12482,6 @@ packages:
     resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
     engines: {node: '>=12.20.0'}
 
-  forwarded-parse@2.1.2:
-    resolution: {integrity: sha512-alTFZZQDKMporBH77856pXgzhEzaUVmLCDk+egLgIgHst3Tpndzz8MnKe+GzRJRfvVdn69HhpW7cmXzvtLvJAw==}
-
   forwarded@0.2.0:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
     engines: {node: '>= 0.6'}
@@ -13205,10 +13057,6 @@ packages:
     resolution: {integrity: sha512-S9wWkJ/VSY9/k4qcjG318bqJNruzE4HySUhFYknwmu6LBP97KLLfwNf+n4V1BHurvFNkSKLFnK/RsuUnRTf9Vw==}
     engines: {iojs: '>= 1.0.0', node: '>= 0.12.0'}
 
-  http-terminator@3.2.0:
-    resolution: {integrity: sha512-JLjck1EzPaWjsmIf8bziM3p9fgR1Y3JoUKAkyYEbZmFrIvJM6I8vVJfBGWlEtV9IWOvzNnaTtjuwZeBY2kwB4g==}
-    engines: {node: '>=14'}
-
   https-proxy-agent@5.0.1:
     resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
     engines: {node: '>= 6'}
@@ -13301,10 +13149,6 @@ packages:
     resolution: {integrity: sha512-TR3KfrTZTYLPB6jUjfx6MF9WcWrHL9su5TObK4ZkYgBdWKPOFoSoQIdEuTuR82pmtxH2spWG9h6etwfr1pLBqQ==}
     engines: {node: '>=6'}
 
-  import-in-the-middle@3.0.0:
-    resolution: {integrity: sha512-OnGy+eYT7wVejH2XWgLRgbmzujhhVIATQH0ztIeRilwHBjTeG3pD+XnH3PKX0r9gJ0BuJmJ68q/oh9qgXnNDQg==}
-    engines: {node: '>=18'}
-
   import-meta-resolve@4.2.0:
     resolution: {integrity: sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg==}
 
@@ -14179,10 +14023,6 @@ packages:
       '@parcel/watcher':
         optional: true
 
-  load-esm@1.0.3:
-    resolution: {integrity: sha512-v5xlu8eHD1+6r8EHTg6hfmO97LN8ugKtiXcy5e6oN72iD2r6u0RPfLl6fxM+7Wnh2ZRq15o0russMst44WauPA==}
-    engines: {node: '>=13.2.0'}
-
   load-yaml-file@0.2.0:
     resolution: {integrity: sha512-OfCBkGEw4nN6JLtgRidPX6QxjBQGQf72q3si2uvqyFEMbycSFFHwAZeXx6cJgFM9wmLrf9zBwCP3Ivqa+LLZPw==}
     engines: {node: '>=6'}
@@ -14984,10 +14824,6 @@ packages:
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
-  multer@2.1.1:
-    resolution: {integrity: sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==}
-    engines: {node: '>= 10.16.0'}
-
   multicast-dns@7.2.5:
     resolution: {integrity: sha512-2eznPJP8z2BFLX50tf0LuODrpINqP1RVIm/CObbTcBRITQgmC/TjcREF1NeTBzIcR5XO/ukWo+YHOjBbFwIupg==}
     hasBin: true
@@ -15765,10 +15601,6 @@ packages:
     resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==}
     engines: {node: '>=6'}
 
-  p-wait-for@3.2.0:
-    resolution: {integrity: sha512-wpgERjNkLrBiFmkMEjuZJEWKKDrNfHCKA1OhyN1wg1FrLkULbviEy6py1AyJUgZ72YWFbZ38FIpnqvVqAlDUwA==}
-    engines: {node: '>=8'}
-
   package-json-from-dist@1.0.1:
     resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
 
@@ -17009,10 +16841,6 @@ packages:
     resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
     engines: {node: '>=0.10.0'}
 
-  require-in-the-middle@8.0.1:
-    resolution: {integrity: sha512-QT7FVMXfWOYFbeRBF6nu+I6tr2Tf3u0q8RIEjNob/heKY/nh7drD/k7eeMFmSQgnTtCzLDcCu/XEnpW2wk4xCQ==}
-    engines: {node: '>=9.3.0 || >=8.10.0 <9.0.0'}
-
   requirejs-config-file@4.0.0:
     resolution: {integrity: sha512-jnIre8cbWOyvr8a5F2KuqBnY+SDA4NXr/hzEZJG79Mxm2WiFQz2dzhC8ibtPJS7zkmBEl1mxSwp5HhC1W4qpxw==}
     engines: {node: '>=10.13.0'}
@@ -17144,10 +16972,6 @@ packages:
     engines: {node: 20 || >=22}
     hasBin: true
 
-  roarr@7.15.0:
-    resolution: {integrity: sha512-CV9WefQfUXTX6wr8CrEMhfNef3sjIt9wNhE/5PNu4tNWsaoDNDXqq+OGn/RW9A1UPb0qc7FQlswXRaJJJsqn8A==}
-    engines: {node: '>=12.0'}
-
   rolldown@1.2.11:
     resolution: {integrity: sha512-qpSwIyz0jHQq5qXBTNxFmE6664rJ7O+4TvPFOiOaBSrz8IOHc1koKKSqTM2H6u1UG1+TveuC6vaDHKXFOvb1Kw==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -17393,9 +17217,6 @@ packages:
   semifies@1.0.0:
     resolution: {integrity: sha512-xXR3KGeoxTNWPD4aBvL5NUpMTT7WMANr3EWnaS190QVkY52lqqcVRD7Q05UVbBhiWDGWMlJEUam9m7uFFGVScw==}
 
-  semver-compare@1.0.0:
-    resolution: {integrity: sha512-YM3/ITh2MJ5MtzaM429anh+x2jiLVjqILF4m4oyQB18W7Ggea7BfqdH/wGMK7dDiMghv/6WG7znWMwUDzJiXow==}
-
   semver@5.7.2:
     resolution: {integrity: sha512-cBznnQ9KjJqU67B52RMC65CMarK2600WFnbkcaiwWq3xy/5haFJlshgnpjovMVJ+Hff49d8GEn0b87C5pDQ10g==}
     hasBin: true
@@ -17842,10 +17663,6 @@ packages:
   stream-to-array@2.3.0:
     resolution: {integrity: sha512-UsZtOYEn4tWU2RGLOXr/o/xjRBftZRlG3dEWoaHr8j4GuypJ3isitGbVyjQKAuMu+xbiop8q224TjiZWc4XTZA==}
 
-  streamsearch@1.1.0:
-    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
-    engines: {node: '>=10.0.0'}
-
   streamx@2.22.1:
     resolution: {integrity: sha512-znKXEBxfatz2GBNK02kRnCXjV+AA4kjZIUxeWSr3UGirZMJfTE9uiwKHobnbgxWyL/JWro8tTq+vOqAK1/qbSA==}
 
@@ -17856,10 +17673,6 @@ packages:
     resolution: {integrity: sha512-R3f198pcvnB+5IpnBlRkphuE9n46WyVl8I39W/ZUTZLz4nqSP/oLYUrcnJrw462Ds8he4YKMov2efsTIw1BDGQ==}
     engines: {node: '>=0.10.0'}
 
-  string-similarity@4.0.4:
-    resolution: {integrity: sha512-/q/8Q4Bl4ZKAPjj8WerIBJWALKkaPRfrvhfF8k/B23i4nzrlRj2/go1m90In7nG/3XDSbOo0+pu6RvCTM9RGMQ==}
-    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
-
   string-width@2.1.1:
     resolution: {integrity: sha512-nOqH59deCq9SRHlxq1Aw85Jnt4w6KvLKqWVik6oA9ZklXLNIOlqg4F2yrT1MVaTjAqvVwdfeZ7w7aCvJD7ugkw==}
     engines: {node: '>=4'}
@@ -18434,10 +18247,6 @@ packages:
     resolution: {integrity: sha512-Ne2YiiGN8bmrmJJEuTWTLJR32nh/JdL1+PSicowtNb0WFpn59GK8/lfD61bVtzguz7b3PBt74nxpv/Pw5po5Rg==}
     engines: {node: '>=8'}
 
-  type-fest@2.19.0:
-    resolution: {integrity: sha512-RAH822pAdBgcNMAfWnCBU3CFZcfZ/i1eZjwFU/dsLKumyuuP3niueg2UAukXYF0E2AAoc82ZSSf9J0WQBinzHA==}
-    engines: {node: '>=12.20'}
-
   type-fest@4.41.0:
     resolution: {integrity: sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==}
     engines: {node: '>=16'}
@@ -18479,9 +18288,6 @@ packages:
   typed-assert@1.0.9:
     resolution: {integrity: sha512-KNNZtayBCtmnNmbo5mG47p1XsCyrx6iVqomjcZnec/1Y5GGARaxPs6r49RnSPeUP3YjNYiU9sQHAtY4BBvnZwg==}
 
-  typedarray@0.0.6:
-    resolution: {integrity: sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==}
-
   typesafe-path@0.2.2:
     resolution: {integrity: sha512-OJabfkAg1WLZSqJAJ0Z6Sdt3utnbzr/jh+NAHoyWHJe8CMSy79Gm085094M9nvTPy22KzTVn5Zq5mbapCI/hPA==}
 
@@ -24854,18 +24660,6 @@ snapshots:
       tslib: 2.8.1
       uid: 2.0.2
 
-  '@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)':
-    dependencies:
-      file-type: 21.3.4(supports-color@10.0.0)
-      iterare: 1.2.1
-      load-esm: 1.0.3
-      reflect-metadata: 0.2.2
-      rxjs: 7.8.2
-      tslib: 2.8.1
-      uid: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
   '@nestjs/core@10.4.15(@nestjs/common@10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2))(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
     dependencies:
       '@nestjs/common': 10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2)
@@ -24880,32 +24674,6 @@ snapshots:
     transitivePeerDependencies:
       - encoding
 
-  '@nestjs/core@11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/platform-express@11.1.19)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
-    dependencies:
-      '@nestjs/common': 11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)
-      '@nuxt/opencollective': 0.4.1
-      fast-safe-stringify: 2.1.1
-      iterare: 1.2.1
-      path-to-regexp: 8.4.2
-      reflect-metadata: 0.2.2
-      rxjs: 7.8.2
-      tslib: 2.8.1
-      uid: 2.0.2
-    optionalDependencies:
-      '@nestjs/platform-express': 11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/core@11.1.19)(supports-color@10.0.0)
-
-  '@nestjs/platform-express@11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/core@11.1.19)(supports-color@10.0.0)':
-    dependencies:
-      '@nestjs/common': 11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)
-      '@nestjs/core': 11.1.19(@nestjs/common@11.1.19(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(@nestjs/platform-express@11.1.19)(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      cors: 2.8.6
-      express: 5.2.1(supports-color@10.0.0)
-      multer: 2.1.1
-      path-to-regexp: 8.4.2
-      tslib: 2.8.1
-    transitivePeerDependencies:
-      - supports-color
-
   '@next/env@15.5.28': {}
 
   '@next/swc-darwin-arm64@15.5.28':
@@ -25417,10 +25185,6 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/opencollective@0.4.1':
-    dependencies:
-      consola: 3.4.2
-
   '@nuxt/schema@3.21.11':
     dependencies:
       '@vue/shared': 3.5.44
@@ -25673,38 +25437,10 @@ snapshots:
 
   '@open-draft/until@2.1.0': {}
 
-  '@opentelemetry/api-logs@0.220.0':
-    dependencies:
-      '@opentelemetry/api': 1.10.0
-
   '@opentelemetry/api@1.10.0': {}
 
   '@opentelemetry/api@1.9.0': {}
 
-  '@opentelemetry/core@2.9.0(@opentelemetry/api@1.9.0)':
-    dependencies:
-      '@opentelemetry/api': 1.9.0
-      '@opentelemetry/semantic-conventions': 1.43.0
-
-  '@opentelemetry/instrumentation-http@0.220.0(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
-    dependencies:
-      '@opentelemetry/api': 1.9.0
-      '@opentelemetry/core': 2.9.0(@opentelemetry/api@1.9.0)
-      '@opentelemetry/instrumentation': 0.220.0(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
-      '@opentelemetry/semantic-conventions': 1.43.0
-      forwarded-parse: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  '@opentelemetry/instrumentation@0.220.0(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
-    dependencies:
-      '@opentelemetry/api': 1.9.0
-      '@opentelemetry/api-logs': 0.220.0
-      import-in-the-middle: 3.0.0
-      require-in-the-middle: 8.0.1(supports-color@10.0.0)
-    transitivePeerDependencies:
-      - supports-color
-
   '@opentelemetry/semantic-conventions@1.43.0': {}
 
   '@oslojs/encoding@1.1.0': {}
@@ -27599,10 +27335,6 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@types/amqplib@0.10.5':
-    dependencies:
-      '@types/node': 20.19.43
-
   '@types/aria-query@4.2.1': {}
 
   '@types/aria-query@5.0.4': {}
@@ -27643,10 +27375,6 @@ snapshots:
 
   '@types/braces@3.0.5': {}
 
-  '@types/bson@4.2.0':
-    dependencies:
-      bson: 7.2.0
-
   '@types/chai@5.2.2':
     dependencies:
       '@types/deep-eql': 4.0.2
@@ -27769,11 +27497,6 @@ snapshots:
 
   '@types/minimatch@3.0.5': {}
 
-  '@types/mongodb@3.6.20':
-    dependencies:
-      '@types/bson': 4.2.0
-      '@types/node': 20.19.43
-
   '@types/ms@0.7.32': {}
 
   '@types/mysql@2.15.27':
@@ -27784,8 +27507,6 @@ snapshots:
     dependencies:
       '@types/unist': 3.0.0
 
-  '@types/node-cron@3.0.11': {}
-
   '@types/node-fetch@2.6.13':
     dependencies:
       '@types/node': 20.19.43
@@ -28877,8 +28598,6 @@ snapshots:
 
   app-module-path@2.2.0: {}
 
-  append-field@1.0.0: {}
-
   aproba@2.0.0: {}
 
   archiver-utils@5.0.2:
@@ -29478,8 +29197,6 @@ snapshots:
 
   boolbase@1.0.0: {}
 
-  boolean@3.2.0: {}
-
   bottleneck@2.19.5: {}
 
   bowser@2.11.0: {}
@@ -29731,10 +29448,6 @@ snapshots:
     dependencies:
       run-applescript: 7.0.0
 
-  busboy@1.6.0:
-    dependencies:
-      streamsearch: 1.1.0
-
   bytes-iec@3.1.1: {}
 
   bytes@3.1.2: {}
@@ -30130,13 +29843,6 @@ snapshots:
 
   concat-map@0.0.1: {}
 
-  concat-stream@2.0.0:
-    dependencies:
-      buffer-from: 1.1.2
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-      typedarray: 0.0.6
-
   confbox@0.1.8: {}
 
   confbox@0.2.4: {}
@@ -30614,8 +30320,6 @@ snapshots:
 
   defu@6.1.7: {}
 
-  delay@5.0.0: {}
-
   delayed-stream@1.0.0: {}
 
   delegates@1.0.0: {}
@@ -31870,13 +31574,6 @@ snapshots:
 
   fast-json-stable-stringify@2.1.0: {}
 
-  fast-json-stringify@2.7.13:
-    dependencies:
-      ajv: 6.12.6
-      deepmerge: 4.3.1
-      rfdc: 1.4.1
-      string-similarity: 4.0.4
-
   fast-json-stringify@6.4.0:
     dependencies:
       '@fastify/merge-json-schemas': 0.2.1
@@ -31901,10 +31598,6 @@ snapshots:
     dependencies:
       cac: 7.0.0
 
-  fast-printf@1.6.9:
-    dependencies:
-      boolean: 3.2.0
-
   fast-querystring@1.1.2:
     dependencies:
       fast-decode-uri-component: 1.0.1
@@ -32167,8 +31860,6 @@ snapshots:
     dependencies:
       fetch-blob: 3.2.0
 
-  forwarded-parse@2.1.2: {}
-
   forwarded@0.2.0: {}
 
   fraction.js@5.3.4: {}
@@ -32991,13 +32682,6 @@ snapshots:
 
   http-shutdown@1.2.2: {}
 
-  http-terminator@3.2.0:
-    dependencies:
-      delay: 5.0.0
-      p-wait-for: 3.2.0
-      roarr: 7.15.0
-      type-fest: 2.19.0
-
   https-proxy-agent@5.0.1(supports-color@10.0.0):
     dependencies:
       agent-base: 6.0.2(supports-color@10.0.0)
@@ -33103,13 +32787,6 @@ snapshots:
       parent-module: 1.0.1
       resolve-from: 4.0.0
 
-  import-in-the-middle@3.0.0:
-    dependencies:
-      acorn: 8.18.0
-      acorn-import-attributes: 1.9.5(acorn@8.18.0)
-      cjs-module-lexer: 2.2.0
-      module-details-from-path: 1.0.4
-
   import-meta-resolve@4.2.0: {}
 
   impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
@@ -34081,8 +33758,6 @@ snapshots:
     transitivePeerDependencies:
       - srvx
 
-  load-esm@1.0.3: {}
-
   load-yaml-file@0.2.0:
     dependencies:
       graceful-fs: 4.2.11
@@ -35061,13 +34736,6 @@ snapshots:
 
   muggle-string@0.4.1: {}
 
-  multer@2.1.1:
-    dependencies:
-      append-field: 1.0.0
-      busboy: 1.6.0
-      concat-stream: 2.0.0
-      type-is: 1.6.18
-
   multicast-dns@7.2.5:
     dependencies:
       dns-packet: 5.6.1
@@ -36591,10 +36259,6 @@ snapshots:
 
   p-try@2.2.0: {}
 
-  p-wait-for@3.2.0:
-    dependencies:
-      p-timeout: 3.2.0
-
   package-json-from-dist@1.0.1: {}
 
   package-manager-detector@1.9.0: {}
@@ -38158,13 +37822,6 @@ snapshots:
 
   require-from-string@2.0.2: {}
 
-  require-in-the-middle@8.0.1(supports-color@10.0.0):
-    dependencies:
-      debug: 4.4.3(supports-color@10.0.0)
-      module-details-from-path: 1.0.4
-    transitivePeerDependencies:
-      - supports-color
-
   requirejs-config-file@4.0.0:
     dependencies:
       esprima: 4.0.1
@@ -38302,15 +37959,6 @@ snapshots:
       glob: 13.0.6
       package-json-from-dist: 1.0.1
 
-  roarr@7.15.0:
-    dependencies:
-      boolean: 3.2.0
-      fast-json-stringify: 2.7.13
-      fast-printf: 1.6.9
-      globalthis: 1.0.4
-      safe-stable-stringify: 2.5.0
-      semver-compare: 1.0.0
-
   rolldown@1.2.11:
     dependencies:
       '@oxc-project/types': 0.151.0
@@ -38616,8 +38264,6 @@ snapshots:
 
   semifies@1.0.0: {}
 
-  semver-compare@1.0.0: {}
-
   semver@5.7.2: {}
 
   semver@6.3.1: {}
@@ -39215,8 +38861,6 @@ snapshots:
     dependencies:
       any-promise: 1.3.0
 
-  streamsearch@1.1.0: {}
-
   streamx@2.22.1:
     dependencies:
       fast-fifo: 1.3.2
@@ -39228,8 +38872,6 @@ snapshots:
 
   strict-uri-encode@1.1.0: {}
 
-  string-similarity@4.0.4: {}
-
   string-width@2.1.1:
     dependencies:
       is-fullwidth-code-point: 2.0.0
@@ -39803,8 +39445,6 @@ snapshots:
 
   type-fest@0.7.1: {}
 
-  type-fest@2.19.0: {}
-
   type-fest@4.41.0: {}
 
   type-fest@5.4.2:
@@ -39861,8 +39501,6 @@ snapshots:
 
   typed-assert@1.0.9: {}
 
-  typedarray@0.0.6: {}
-
   typesafe-path@0.2.2: {}
 
   typescript-auto-import-cache@0.3.6:

From 446679d18d434211b242b8c274860e93396d675b Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 13:50:43 +0100
Subject: [PATCH 058/169] chore: Remove unused eslint-plugin-regexp
 dependencies (#25944)

**Why:** Remove leftover eslint-plugin-regexp declarations from seven
packages now that linting uses Oxlint.

**How to review:** Manifest removals and regenerated lockfile only.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../browser-integration-tests/package.json    |  1 -
 .../clear-cache-gh-action/package.json        |  3 ---
 .../cloudflare-integration-tests/package.json |  1 -
 dev-packages/e2e-tests/package.json           |  1 -
 .../package.json                              |  3 ---
 dev-packages/rollup-utils/package.json        |  3 ---
 dev-packages/test-utils/package.json          |  3 +--
 pnpm-lock.yaml                                | 26 +------------------
 8 files changed, 2 insertions(+), 39 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index 00f833a08d8c..416639132e92 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -77,7 +77,6 @@
     "@sentry/rrweb-types": "^2.45.0",
     "@sentry/wasm": "11.10.0",
     "@types/node": "^20.19.0",
-    "eslint-plugin-regexp": "^3.1.0",
     "glob": "^13.0.6"
   }
 }
diff --git a/dev-packages/clear-cache-gh-action/package.json b/dev-packages/clear-cache-gh-action/package.json
index a6ffee8b7ba8..75ea139df37c 100644
--- a/dev-packages/clear-cache-gh-action/package.json
+++ b/dev-packages/clear-cache-gh-action/package.json
@@ -16,8 +16,5 @@
   "dependencies": {
     "@actions/core": "1.10.1",
     "@actions/github": "^5.0.0"
-  },
-  "devDependencies": {
-    "eslint-plugin-regexp": "^3.1.0"
   }
 }
diff --git a/dev-packages/cloudflare-integration-tests/package.json b/dev-packages/cloudflare-integration-tests/package.json
index 1b72feaa1ef7..1d336b48e677 100644
--- a/dev-packages/cloudflare-integration-tests/package.json
+++ b/dev-packages/cloudflare-integration-tests/package.json
@@ -37,7 +37,6 @@
     "@opentelemetry/api": "^1.9.1",
     "@sentry-internal/test-utils": "11.10.0",
     "@sentry/conventions": "0.30.0",
-    "eslint-plugin-regexp": "^3.1.0",
     "prisma": "6.15.0",
     "vite": "^8.3.1",
     "vitest": "^4.1.11",
diff --git a/dev-packages/e2e-tests/package.json b/dev-packages/e2e-tests/package.json
index af77f36a6fb6..8e25d9e26997 100644
--- a/dev-packages/e2e-tests/package.json
+++ b/dev-packages/e2e-tests/package.json
@@ -20,7 +20,6 @@
     "clean:pnpm": "pnpm store prune"
   },
   "devDependencies": {
-    "eslint-plugin-regexp": "^3.1.0",
     "rimraf": "^6.1.3"
   }
 }
diff --git a/dev-packages/external-contributor-gh-action/package.json b/dev-packages/external-contributor-gh-action/package.json
index 3a1b935b59ff..805b4fe96872 100644
--- a/dev-packages/external-contributor-gh-action/package.json
+++ b/dev-packages/external-contributor-gh-action/package.json
@@ -15,8 +15,5 @@
   },
   "dependencies": {
     "@actions/core": "1.10.1"
-  },
-  "devDependencies": {
-    "eslint-plugin-regexp": "^3.1.0"
   }
 }
diff --git a/dev-packages/rollup-utils/package.json b/dev-packages/rollup-utils/package.json
index 1b6e8af1f86a..9d5b1d2d0d60 100644
--- a/dev-packages/rollup-utils/package.json
+++ b/dev-packages/rollup-utils/package.json
@@ -8,8 +8,5 @@
   "license": "MIT",
   "private": true,
   "main": "./index.mjs",
-  "devDependencies": {
-    "eslint-plugin-regexp": "^3.1.0"
-  },
   "type": "module"
 }
diff --git a/dev-packages/test-utils/package.json b/dev-packages/test-utils/package.json
index c4a642459c0b..287581fbc397 100644
--- a/dev-packages/test-utils/package.json
+++ b/dev-packages/test-utils/package.json
@@ -69,7 +69,6 @@
     "@sentry-internal/rollup-utils": "11.10.0",
     "@sentry/core": "11.10.0",
     "@types/express": "^4.17.21",
-    "@types/ws": "^8.18.1",
-    "eslint-plugin-regexp": "^3.1.0"
+    "@types/ws": "^8.18.1"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 61e98910ce63..c58c9044d4b3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -343,9 +343,6 @@ importers:
       '@types/node':
         specifier: ^20.19.0
         version: 20.19.43
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
       glob:
         specifier: ^13.0.6
         version: 13.0.6
@@ -438,10 +435,6 @@ importers:
       '@actions/github':
         specifier: ^5.0.0
         version: 5.1.1(encoding@0.1.13)
-    devDependencies:
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
 
   dev-packages/cloudflare-integration-tests:
     dependencies:
@@ -509,9 +502,6 @@ importers:
       '@sentry/conventions':
         specifier: 0.30.0
         version: 0.30.0
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
       prisma:
         specifier: 6.15.0
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
@@ -552,9 +542,6 @@ importers:
 
   dev-packages/e2e-tests:
     devDependencies:
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
       rimraf:
         specifier: ^6.1.3
         version: 6.1.3
@@ -564,10 +551,6 @@ importers:
       '@actions/core':
         specifier: 1.10.1
         version: 1.10.1
-    devDependencies:
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
 
   dev-packages/node-integration-tests:
     dependencies:
@@ -882,11 +865,7 @@ importers:
         specifier: 3.0.3
         version: 3.0.3
 
-  dev-packages/rollup-utils:
-    devDependencies:
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
+  dev-packages/rollup-utils: {}
 
   dev-packages/size-limit-gh-action:
     dependencies:
@@ -933,9 +912,6 @@ importers:
       '@types/ws':
         specifier: ^8.18.1
         version: 8.18.1
-      eslint-plugin-regexp:
-        specifier: ^3.1.0
-        version: 3.1.0
 
   packages/angular:
     dependencies:

From f948bcf3e926845dff16174eb882fdd885754c2a Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 13:56:12 +0100
Subject: [PATCH 059/169] test(node-integration-tests): Install Prisma suite
 dependencies as package dependencies (#25943)

**Why:** Move the Prisma v8 runtime into locked package dependencies and
align the shared v7 adapter with the version its suite tests (the entry
we had before for this was dead).

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../node-integration-tests/package.json       |   3 +-
 .../suites/tracing/prisma-orm-v7/test.ts      |   1 -
 .../suites/tracing/prisma-orm-v8/test.ts      |   4 -
 pnpm-lock.yaml                                | 634 ++++++++++++++++--
 4 files changed, 594 insertions(+), 48 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 4b6af19c037d..39eb221ba423 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -53,8 +53,9 @@
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@modelcontextprotocol/server": "^2.0.0",
-    "@prisma/adapter-pg": "7.9.1",
+    "@prisma/adapter-pg": "7.2.0",
     "@prisma/client": "6.15.0",
+    "@prisma/orm-postgres": "8.0.0-rc.17",
     "@sentry/aws-serverless": "11.10.0",
     "@sentry/core": "11.10.0",
     "@sentry/hono": "11.10.0",
diff --git a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v7/test.ts b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v7/test.ts
index 9e11425ee539..8f6c8d78d34e 100644
--- a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v7/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v7/test.ts
@@ -106,7 +106,6 @@ describe('Prisma ORM v7 Tests', () => {
       },
       {
         additionalDependencies: {
-          '@prisma/adapter-pg': '7.2.0',
           '@prisma/client': '7.2.0',
           pg: '^8.11.0',
           prisma: '7.2.0',
diff --git a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v8/test.ts b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v8/test.ts
index 6831e3123397..17263c38c517 100644
--- a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v8/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v8/test.ts
@@ -33,7 +33,6 @@ function getOperationSpans(container: SerializedStreamedSpanContainer): Serializ
 
 // Prisma 8 has no tracing surface: the operation spans come from the orchestrion channels the runtime hook
 // injects, and the `pg` spans underneath stand in for v7's `db_query` spans.
-// Prisma 8 requires Node 22.12 (`engines` of its `@prisma/cli-engine` peer), and on Node 20 it does not install.
 describe.runIf(supports({ min: 22 }))('Prisma ORM v8 Tests', () => {
   describeWithDockerCompose('Prisma ORM v8', { workingDirectory: [__dirname] }, () => {
     createEsmAndCjsTests(
@@ -100,9 +99,6 @@ describe.runIf(supports({ min: 22 }))('Prisma ORM v8 Tests', () => {
         testInstrumentedOperations();
       },
       {
-        additionalDependencies: {
-          '@prisma/orm-postgres': '8.0.0-rc.17',
-        },
         copyPaths: ['prisma'],
       },
     );
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c58c9044d4b3..fa9e6df7f0b7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -379,7 +379,7 @@ importers:
         version: 2.15.27
       '@types/pg':
         specifier: ^8.20.0
-        version: 8.20.0
+        version: 8.20.4
       bun-types:
         specifier: ^1.2.9
         version: 1.2.9
@@ -639,11 +639,14 @@ importers:
         specifier: ^2.0.0
         version: 2.0.0
       '@prisma/adapter-pg':
-        specifier: 7.9.1
-        version: 7.9.1
+        specifier: 7.2.0
+        version: 7.2.0
       '@prisma/client':
         specifier: 6.15.0
         version: 6.15.0(prisma@6.15.0(magicast@0.3.5)(typescript@7.0.2))(typescript@7.0.2)
+      '@prisma/orm-postgres':
+        specifier: 8.0.0-rc.17
+        version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
       '@sentry/aws-serverless':
         specifier: 11.10.0
         version: link:../../packages/aws-serverless
@@ -2850,6 +2853,12 @@ packages:
     resolution: {integrity: sha512-aaxeavfJ+RHboh7c2ofO5HHtQobGX4AgUujXP4CXpREHp9fQ9jPi6K9T1jrAKe7HIipoP0OJ1gd6JamSkFIpvA==}
     engines: {node: '>=16'}
 
+  '@ark/schema@0.56.8':
+    resolution: {integrity: sha512-R05TOe85oQBGFFw2zKMuZpqkXibLKuC/aJt6VwFn5Cjc4x3NkWfhvGRpRDycNkj3ddcHnOPtIsmjVowJO9Yxdw==}
+
+  '@ark/util@0.56.8':
+    resolution: {integrity: sha512-XLiQyGfpJcws1zCtp2Cva8s1oheCdFn1Rt6JSyC4NnkDrpwCJnlaiawuuOc1Z97vMH+jEzW5vyyf0xOju5wUQA==}
+
   '@asamuzakjp/css-color@3.2.0':
     resolution: {integrity: sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==}
 
@@ -4499,6 +4508,12 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
+  '@esbuild/aix-ppc64@0.28.2':
+    resolution: {integrity: sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
   '@esbuild/android-arm64@0.21.5':
     resolution: {integrity: sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==}
     engines: {node: '>=12'}
@@ -4529,6 +4544,12 @@ packages:
     cpu: [arm64]
     os: [android]
 
+  '@esbuild/android-arm64@0.28.2':
+    resolution: {integrity: sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
   '@esbuild/android-arm@0.15.18':
     resolution: {integrity: sha512-5GT+kcs2WVGjVs7+boataCkO5Fg0y4kCjzkB5bAip7H4jfnOS3dA6KPiww9W1OEKTKeAcUVhdZGvgI65OXmUnw==}
     engines: {node: '>=12'}
@@ -4565,6 +4586,12 @@ packages:
     cpu: [arm]
     os: [android]
 
+  '@esbuild/android-arm@0.28.2':
+    resolution: {integrity: sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
   '@esbuild/android-x64@0.21.5':
     resolution: {integrity: sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==}
     engines: {node: '>=12'}
@@ -4595,6 +4622,12 @@ packages:
     cpu: [x64]
     os: [android]
 
+  '@esbuild/android-x64@0.28.2':
+    resolution: {integrity: sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
   '@esbuild/darwin-arm64@0.21.5':
     resolution: {integrity: sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==}
     engines: {node: '>=12'}
@@ -4625,6 +4658,12 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
+  '@esbuild/darwin-arm64@0.28.2':
+    resolution: {integrity: sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
   '@esbuild/darwin-x64@0.21.5':
     resolution: {integrity: sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==}
     engines: {node: '>=12'}
@@ -4655,6 +4694,12 @@ packages:
     cpu: [x64]
     os: [darwin]
 
+  '@esbuild/darwin-x64@0.28.2':
+    resolution: {integrity: sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
   '@esbuild/freebsd-arm64@0.21.5':
     resolution: {integrity: sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==}
     engines: {node: '>=12'}
@@ -4685,6 +4730,12 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
+  '@esbuild/freebsd-arm64@0.28.2':
+    resolution: {integrity: sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
   '@esbuild/freebsd-x64@0.21.5':
     resolution: {integrity: sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==}
     engines: {node: '>=12'}
@@ -4715,6 +4766,12 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
+  '@esbuild/freebsd-x64@0.28.2':
+    resolution: {integrity: sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
   '@esbuild/linux-arm64@0.21.5':
     resolution: {integrity: sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==}
     engines: {node: '>=12'}
@@ -4745,6 +4802,12 @@ packages:
     cpu: [arm64]
     os: [linux]
 
+  '@esbuild/linux-arm64@0.28.2':
+    resolution: {integrity: sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
   '@esbuild/linux-arm@0.21.5':
     resolution: {integrity: sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==}
     engines: {node: '>=12'}
@@ -4775,6 +4838,12 @@ packages:
     cpu: [arm]
     os: [linux]
 
+  '@esbuild/linux-arm@0.28.2':
+    resolution: {integrity: sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
   '@esbuild/linux-ia32@0.21.5':
     resolution: {integrity: sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==}
     engines: {node: '>=12'}
@@ -4805,6 +4874,12 @@ packages:
     cpu: [ia32]
     os: [linux]
 
+  '@esbuild/linux-ia32@0.28.2':
+    resolution: {integrity: sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
   '@esbuild/linux-loong64@0.15.18':
     resolution: {integrity: sha512-L4jVKS82XVhw2nvzLg/19ClLWg0y27ulRwuP7lcyL6AbUWB5aPglXY3M21mauDQMDfRLs8cQmeT03r/+X3cZYQ==}
     engines: {node: '>=12'}
@@ -4847,6 +4922,12 @@ packages:
     cpu: [loong64]
     os: [linux]
 
+  '@esbuild/linux-loong64@0.28.2':
+    resolution: {integrity: sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
   '@esbuild/linux-mips64el@0.21.5':
     resolution: {integrity: sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==}
     engines: {node: '>=12'}
@@ -4877,6 +4958,12 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
+  '@esbuild/linux-mips64el@0.28.2':
+    resolution: {integrity: sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
   '@esbuild/linux-ppc64@0.21.5':
     resolution: {integrity: sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==}
     engines: {node: '>=12'}
@@ -4907,6 +4994,12 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
+  '@esbuild/linux-ppc64@0.28.2':
+    resolution: {integrity: sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
   '@esbuild/linux-riscv64@0.21.5':
     resolution: {integrity: sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==}
     engines: {node: '>=12'}
@@ -4937,6 +5030,12 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
+  '@esbuild/linux-riscv64@0.28.2':
+    resolution: {integrity: sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
   '@esbuild/linux-s390x@0.21.5':
     resolution: {integrity: sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==}
     engines: {node: '>=12'}
@@ -4967,6 +5066,12 @@ packages:
     cpu: [s390x]
     os: [linux]
 
+  '@esbuild/linux-s390x@0.28.2':
+    resolution: {integrity: sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
   '@esbuild/linux-x64@0.21.5':
     resolution: {integrity: sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==}
     engines: {node: '>=12'}
@@ -4997,6 +5102,12 @@ packages:
     cpu: [x64]
     os: [linux]
 
+  '@esbuild/linux-x64@0.28.2':
+    resolution: {integrity: sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
   '@esbuild/netbsd-arm64@0.25.12':
     resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
     engines: {node: '>=18'}
@@ -5021,6 +5132,12 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
+  '@esbuild/netbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
   '@esbuild/netbsd-x64@0.21.5':
     resolution: {integrity: sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==}
     engines: {node: '>=12'}
@@ -5051,6 +5168,12 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
+  '@esbuild/netbsd-x64@0.28.2':
+    resolution: {integrity: sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
   '@esbuild/openbsd-arm64@0.25.12':
     resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
     engines: {node: '>=18'}
@@ -5075,6 +5198,12 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
+  '@esbuild/openbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
   '@esbuild/openbsd-x64@0.21.5':
     resolution: {integrity: sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==}
     engines: {node: '>=12'}
@@ -5105,6 +5234,12 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
+  '@esbuild/openbsd-x64@0.28.2':
+    resolution: {integrity: sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
   '@esbuild/openharmony-arm64@0.25.12':
     resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
     engines: {node: '>=18'}
@@ -5129,6 +5264,12 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
+  '@esbuild/openharmony-arm64@0.28.2':
+    resolution: {integrity: sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
   '@esbuild/sunos-x64@0.21.5':
     resolution: {integrity: sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==}
     engines: {node: '>=12'}
@@ -5159,6 +5300,12 @@ packages:
     cpu: [x64]
     os: [sunos]
 
+  '@esbuild/sunos-x64@0.28.2':
+    resolution: {integrity: sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
   '@esbuild/win32-arm64@0.21.5':
     resolution: {integrity: sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==}
     engines: {node: '>=12'}
@@ -5189,6 +5336,12 @@ packages:
     cpu: [arm64]
     os: [win32]
 
+  '@esbuild/win32-arm64@0.28.2':
+    resolution: {integrity: sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
   '@esbuild/win32-ia32@0.21.5':
     resolution: {integrity: sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==}
     engines: {node: '>=12'}
@@ -5219,6 +5372,12 @@ packages:
     cpu: [ia32]
     os: [win32]
 
+  '@esbuild/win32-ia32@0.28.2':
+    resolution: {integrity: sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
   '@esbuild/win32-x64@0.21.5':
     resolution: {integrity: sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==}
     engines: {node: '>=12'}
@@ -5249,6 +5408,12 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@esbuild/win32-x64@0.28.2':
+    resolution: {integrity: sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
   '@eslint-community/eslint-utils@4.9.0':
     resolution: {integrity: sha512-ayVFHdtZ+hsq1t2Dy24wCmGXGe4q9Gu3smhLYALJrr473ZH27MsnSL+LKUlimp4BWJqMDMLmPpx/Q9R3OAlL4g==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -6328,6 +6493,10 @@ packages:
   '@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1':
     resolution: {integrity: sha512-54/JRvkLIzzDWshCWfuhadfrfZVPiElY8Fcgmg1HroEly/EDSszzhBAsarCux+D/kOslTRquNzuyGSmUSTTHGg==}
 
+  '@noble/hashes@2.4.0':
+    resolution: {integrity: sha512-X5XaVWZIBCT7HHZGm5I7ZQXDwLG+bGXuSrMQAW+7Zvl87h1kmc1ZB1VSRJcpUfoUrGQp4Fkoxm5kZ+Ms+aW+eA==}
+    engines: {node: '>= 20.19.0'}
+
   '@nodable/entities@2.1.0':
     resolution: {integrity: sha512-nyT7T3nbMyBI/lvr6L5TyWbFJAI9FTgVRakNoBqCD+PmID8DzFrrNdLLtHMwMszOtqZa8PAOV24ZqDnQrhQINA==}
 
@@ -7545,8 +7714,8 @@ packages:
   '@prisma/adapter-d1@6.15.0':
     resolution: {integrity: sha512-ozsANVFfmPyxa4SBQnGITQLSQ2aOVaRRV75CXBaDrhWU+zB+0Df3QUPF4vURSgskhdfUyOo35pzUOf4msPoGuQ==}
 
-  '@prisma/adapter-pg@7.9.1':
-    resolution: {integrity: sha512-Ho2RK1KanQxLNSC0sR5bpiiVep10sWPLXCcxK+KXfI/Q69TMRbiafSvLPv3V9snimX72rMCqGlyJ4sBO4lKTAw==}
+  '@prisma/adapter-pg@7.2.0':
+    resolution: {integrity: sha512-euIdQ13cRB2wZ3jPsnDnFhINquo1PYFPCg6yVL8b2rp3EdinQHsX9EDdCtRr489D5uhphcRk463OdQAFlsCr0w==}
 
   '@prisma/client@6.15.0':
     resolution: {integrity: sha512-wR2LXUbOH4cL/WToatI/Y2c7uzni76oNFND7+23ypLllBmIS8e3ZHhO+nud9iXSXKFt1SoM3fTZvHawg63emZw==}
@@ -7566,14 +7735,14 @@ packages:
   '@prisma/debug@6.15.0':
     resolution: {integrity: sha512-y7cSeLuQmyt+A3hstAs6tsuAiVXSnw9T55ra77z0nbNkA8Lcq9rNcQg6PI00by/+WnE/aMRJ/W7sZWn2cgIy1g==}
 
-  '@prisma/debug@7.9.1':
-    resolution: {integrity: sha512-/cpVZ4itxtcgB8GHBvZtcmuEjq+lWsLrRJxFMbwZrT1RIdtuKmUm7PPGo/wzfbYpBrk+9WmmBE8CHJw2rybKDQ==}
+  '@prisma/debug@7.2.0':
+    resolution: {integrity: sha512-YSGTiSlBAVJPzX4ONZmMotL+ozJwQjRmZweQNIq/ER0tQJKJynNkRB3kyvt37eOfsbMCXk3gnLF6J9OJ4QWftw==}
 
   '@prisma/driver-adapter-utils@6.15.0':
     resolution: {integrity: sha512-tzcMG1eEBM3IJ8TBHo4jGeoUaalctqGXbrvxIoZb8jSEtgR82IUhdVyHHLVTlT8MdrHovcQJJ3jfcQfJARRnaQ==}
 
-  '@prisma/driver-adapter-utils@7.9.1':
-    resolution: {integrity: sha512-vmHehG7nn/heW32DXXpp13DxxAxVVe6n250oEt3dOL2E/4bt3olktKZN0mzSuxMMronyMSkbeW2uCOn3F4g8RQ==}
+  '@prisma/driver-adapter-utils@7.2.0':
+    resolution: {integrity: sha512-gzrUcbI9VmHS24Uf+0+7DNzdIw7keglJsD5m/MHxQOU68OhGVzlphQRobLiDMn8CHNA2XN8uugwKjudVtnfMVQ==}
 
   '@prisma/engines-version@6.15.0-5.85179d7826409ee107a6ba334b5e305ae3fba9fb':
     resolution: {integrity: sha512-a/46aK5j6L3ePwilZYEgYDPrhBQ/n4gYjLxT5YncUTJJNRnTCVjPF86QdzUOLRdYjCLfhtZp9aum90W0J+trrg==}
@@ -7587,6 +7756,52 @@ packages:
   '@prisma/get-platform@6.15.0':
     resolution: {integrity: sha512-Jbb+Xbxyp05NSR1x2epabetHiXvpO8tdN2YNoWoA/ZsbYyxxu/CO/ROBauIFuMXs3Ti+W7N7SJtWsHGaWte9Rg==}
 
+  '@prisma/orm-family-sql@8.0.0-rc.17':
+    resolution: {integrity: sha512-KbdapnNyIX44hwgxvBV9Zl8qjIbYAm6VgM7uW7u6fDlx1QP41L7s5INxaADdoceqgWTo/KUqVKLpMq7RcGByzg==}
+    peerDependencies:
+      typescript: '>=5.9'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  '@prisma/orm-framework@8.0.0-rc.17':
+    resolution: {integrity: sha512-KfircGILFXGoBPPg6I4caNF/tpVe+2UF6kMO+PF/KfOwMsFh11mR5nEijiSqy+5l7oVWGsT0GNz2inysbg+UWg==}
+    peerDependencies:
+      typescript: '>=5.9'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  '@prisma/orm-postgres@8.0.0-rc.17':
+    resolution: {integrity: sha512-1jwZH/APF9222PFufvvcBoQXcfEXjmXjqJ1uEU7PMUaxHbL1FwwDcFxHmjujSt9mFOopGSvr5b5BkIjNWbUinw==}
+    peerDependencies:
+      temporal-polyfill: ^1.0.4
+      typescript: '>=5.9'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  '@prisma/orm-target-postgres@8.0.0-rc.17':
+    resolution: {integrity: sha512-SAE42aFV8ulzNmkJFKk16zVa3CxjTroGllBTkGBgnC2zEiNnBebIXHo7DmSWC70iMM6qFSDL0g2pmwAMwDIGEg==}
+    peerDependencies:
+      temporal-polyfill: ^1.0.4
+      typescript: '>=5.9'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
+  '@prisma/orm-toolchain@8.0.0-rc.17':
+    resolution: {integrity: sha512-iG1knDO9Hg1/b5NOj74T7Bx5d2imJVq+qSrKDD94nwjOyvIZ5ygKSzVq2hb0KoAjae8PONgznSOBRMA8Kh+p4Q==}
+    peerDependencies:
+      '@prisma/cli-engine': 0.7.0
+      typescript: '>=5.9'
+      vite: ^7.0.0 || ^8.0.0
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+      vite:
+        optional: true
+
   '@protobuf-ts/plugin-framework@2.9.4':
     resolution: {integrity: sha512-9nuX1kjdMliv+Pes8dQCKyVhjKgNNfwxVHg+tx3fLXSfZZRcUHMc1PMwB9/vTvc6gBKt9QGz5ERqSqZc0++E9A==}
 
@@ -8941,11 +9156,14 @@ packages:
   '@types/node@20.19.43':
     resolution: {integrity: sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==}
 
+  '@types/node@26.1.2':
+    resolution: {integrity: sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==}
+
   '@types/parse-json@4.0.0':
     resolution: {integrity: sha512-//oorEZjL6sbPcKUaCdIGlIUeH26mgzimjBB77G6XRgnDl/L5wOnpyBGRe/Mmf5CVW3PwEBE1NjiMZ/ssFh4wA==}
 
-  '@types/pg@8.20.0':
-    resolution: {integrity: sha512-bEPFOaMAHTEP1EzpvHTbmwR8UsFyHSKsRisLIHVMXnpNefSbGA1bD6CVy+qKjGSqmZqNqBDV2azOBo8TgkcVow==}
+  '@types/pg@8.20.4':
+    resolution: {integrity: sha512-Jz7UDOlIiFJuacC0TlBoLyNtmwlA/wpIyPDd3tvUqlRM+HzkWy2xUgpFpaXtbfTAFF6sIGq5lsCDBdJnhky1Xg==}
 
   '@types/prop-types@15.7.3':
     resolution: {integrity: sha512-KfRL3PuHmqQLOG+2tGpRO26Ctg+Cq1E01D2DMriKEATHgWLfeNDmq9e29Q9WIky0dQ3NPkd1mzYH8Lm936Z9qw==}
@@ -9296,6 +9514,10 @@ packages:
     peerDependencies:
       valibot: ^1.5.0
 
+  '@vercel/detect-agent@1.2.7':
+    resolution: {integrity: sha512-5tWaC9V+u4SHcSMKBz9FQb3Dhl/1A2lQ6QqHovu8uQeb8dTyjEevpJMANm/uQEn/usYB63fpdjWYjkJ8/bGtjA==}
+    engines: {node: '>=14'}
+
   '@vercel/nft@1.11.0':
     resolution: {integrity: sha512-m1QFg+U+3yPOnP1xSYJ73UIRxLOXdts1JOhiOiyPYqEsALgrXFFINvgUaD6R6iNvaBFAjHllBCbkfx4FuOdpaA==}
     engines: {node: '>=20'}
@@ -9791,8 +10013,8 @@ packages:
     resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
     engines: {node: '>=10'}
 
-  ansi-styles@6.2.1:
-    resolution: {integrity: sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==}
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
     engines: {node: '>=12'}
 
   ansis@4.3.1:
@@ -9859,6 +10081,12 @@ packages:
     resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==}
     engines: {node: '>= 0.4'}
 
+  arkregex@0.0.14:
+    resolution: {integrity: sha512-G3I/uCtWE0IKQiPh0qqmmAFDdtjZKZQ5mNPR6gJBeAMZ7VqYCpoaDeXnLju2Zo6ywExtmxZJELeVFb0MPDjPyA==}
+
+  arktype@2.2.9:
+    resolution: {integrity: sha512-Cja0IMEn19rB35on9da1i1z6QMasuS7ULffXbetCry09jvCGYT8Bi1KgYiqri5FymF4nQAXkM90yksYkgSK2EA==}
+
   array-buffer-byte-length@1.0.2:
     resolution: {integrity: sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==}
     engines: {node: '>= 0.4'}
@@ -10612,6 +10840,9 @@ packages:
   client-only@0.0.1:
     resolution: {integrity: sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==}
 
+  clipanion@4.0.0-rc.4:
+    resolution: {integrity: sha512-CXkMQxU6s9GklO/1f714dkKBMu1lopS1WFF0B8o4AxPykR1hpozxSiUZ5ZUeBjfPgCWqbcNOtZVFhB8Lkfp1+Q==}
+
   clipboardy@4.0.0:
     resolution: {integrity: sha512-5mOlNS0mhX0707P2I0aZ2V/cmHUEO/fL7VFLqszkhUsxt7RwnmrInf/eEQKlf5GzvYeHIjT+Ov1HRfNmymlG0w==}
     engines: {node: '>=18'}
@@ -10635,6 +10866,9 @@ packages:
     resolution: {integrity: sha512-3Pe/CF1Nn94hyhIYpjtiLhdCoEoz0DqQ+988E9gmeEdQZlojxnOb74wctFyuwWQHzqyf9X7C7MG8juUpqBJT8w==}
     engines: {node: '>=0.8'}
 
+  closest-match@1.3.3:
+    resolution: {integrity: sha512-RSdHrZwNOvt2uMQgqJDJdM/I+5MlJ1tQJEXYrbRjSMXWiCRo06g2hwObJ7+WKt2J9ySK9/pJ0Q2vbL+BPkofDA==}
+
   clsx@2.1.1:
     resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
     engines: {node: '>=6'}
@@ -11964,6 +12198,11 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  esbuild@0.28.2:
+    resolution: {integrity: sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
@@ -12588,8 +12827,8 @@ packages:
     resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
     engines: {node: 6.* || 8.* || >= 10.*}
 
-  get-east-asian-width@1.4.0:
-    resolution: {integrity: sha512-QZjmEOC+IT1uk6Rx0sX22V6uHWVwbdbxf1faPqJ1QhLdGgsRGCZoyaQBm/piRdJy/D2um6hM1UP7ZEeQ4EkP+Q==}
+  get-east-asian-width@1.7.0:
+    resolution: {integrity: sha512-XjH1AECxf0giL2V1aU8vKyRR2ppRUb5c0EvT7zuJTokQ74bNo52zOtghqdWIqrhUD79fo3x0WfKZdOqxF6LG1Q==}
     engines: {node: '>=18'}
 
   get-intrinsic@1.3.0:
@@ -13705,6 +13944,9 @@ packages:
   jsonc-parser@3.2.0:
     resolution: {integrity: sha512-gfFQZrcTc8CnKXp6Y4/CBT3fTc0OVuDofpre4aEeEpSBPV5X5v4+Vmx+8snU7RLPrNHPKSgLxGo9YuQzz20o+w==}
 
+  jsonc-parser@3.3.1:
+    resolution: {integrity: sha512-HUgH65KyejrUFPvHFPbqOY0rsFip3Bo5wb4ngvdi1EpCYWUQDC5V+Y7mZws+DLkr4M//zQJoanu1SP+87Dv1oQ==}
+
   jsondiffpatch@0.6.0:
     resolution: {integrity: sha512-3QItJOXp2AP1uv7waBkao5nCvhEv+QmJAd38Ybq7wNI74Q+BBmnLn4EDKz6yI9xGAIQoUF87qHt+kc1IVxB4zQ==}
     engines: {node: ^18.0.0 || >=20.0.0}
@@ -15751,6 +15993,11 @@ packages:
   pg-connection-string@2.6.1:
     resolution: {integrity: sha512-w6ZzNu6oMmIzEAYVw+RLK0+nqHPt8K3ZnknKi+g48Ak2pr3dtljJW3o+D/n2zzCG07Zoe9VOX3aiKpj+BN0pjg==}
 
+  pg-cursor@2.22.1:
+    resolution: {integrity: sha512-X10ldv3wwBONQkOSwgWEbaEITMGLd92V2Zd+xsFPhDt3nhhU3hpAT08SERBChnIFmomczLax6lKXLJrHPPXfxA==}
+    peerDependencies:
+      pg: ^8
+
   pg-int8@1.0.1:
     resolution: {integrity: sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==}
     engines: {node: '>=4.0.0'}
@@ -16346,8 +16593,8 @@ packages:
     engines: {node: '>=10.13.0'}
     hasBin: true
 
-  prettier@3.8.1:
-    resolution: {integrity: sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg==}
+  prettier@3.9.10:
+    resolution: {integrity: sha512-skGHTH1Yb9QvaTC4hWnRTzEYtCpApF0UMBPz+t/0ZPzP8ihefo/btKd+QA7pUE0fEwA1SbS/NmhyEcstdXOIdA==}
     engines: {node: '>=14'}
     hasBin: true
 
@@ -17665,6 +17912,10 @@ packages:
     resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
     engines: {node: '>=18'}
 
+  string-width@8.3.0:
+    resolution: {integrity: sha512-ZbmZM0JCihQN91dWnxoipT2KOEyHqEyfRXUyjuRhW8b/xnqPDoq4gWEVApTVa9db2wN8mmoikgFBbjh71+cGeQ==}
+    engines: {node: '>=20'}
+
   string.prototype.trim@1.2.10:
     resolution: {integrity: sha512-Rs66F0P/1kedk5lyYyH9uBzuiI/kNRmwJAR9quK6VOtIpZ2G+hMZd+HQbbv25MgCA6gEffoMZYxlTod4WcdrKA==}
     engines: {node: '>= 0.4'}
@@ -17705,8 +17956,8 @@ packages:
     resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
     engines: {node: '>=8'}
 
-  strip-ansi@7.1.0:
-    resolution: {integrity: sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==}
+  strip-ansi@7.2.0:
+    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
     engines: {node: '>=12'}
 
   strip-bom-string@1.0.0:
@@ -18158,6 +18409,9 @@ packages:
     resolution: {integrity: sha512-XyLVuhBVvdJTJr2FJJV2L1pc4MwSjMhcunRVgDE9k4wbb2ee7ORYnPewxMWUav12vxyfUM686MSGsqnVRIInuw==}
     engines: {node: '>=18'}
 
+  ts-toolbelt@9.6.0:
+    resolution: {integrity: sha512-nsZd8ZeNUzukXPlJmTBwUAuABDe/9qtVDelJeT/qW0ow3ZS3BsQJtNkan1802aM9Uf68/Y8ljw86Hu0h5IUW3w==}
+
   tsconfck@3.1.6:
     resolution: {integrity: sha512-ks6Vjr/jEw0P1gmOVwutM3B7fWxoWBL2KRDb1JfqGVawBmO5UsvmWOQFGHBPl5yxYz4eERr19E6L7NMv+Fej4w==}
     engines: {node: ^18 || >=20}
@@ -18207,6 +18461,9 @@ packages:
   turbo-stream@2.4.1:
     resolution: {integrity: sha512-v8kOJXpG3WoTN/+at8vK7erSzo6nW6CIaeOvNOkHQVDajfz1ZVeSxCbc6tOH4hrGZW7VUCV0TOXd8CPzYnYkrw==}
 
+  typanion@3.14.0:
+    resolution: {integrity: sha512-ZW/lVMRabETuYCd9O9ZvMhAh8GslSqaUjxmK/JLPCh6l73CvLBiuXswj/+7LdnWOgYsQ130FqLzFz5aGT4I3Ug==}
+
   type-check@0.4.0:
     resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
     engines: {node: '>= 0.8.0'}
@@ -18360,6 +18617,9 @@ packages:
   undici-types@6.21.0:
     resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
+  undici-types@8.3.0:
+    resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
+
   undici@5.29.0:
     resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==}
     engines: {node: '>=14.0'}
@@ -18412,6 +18672,10 @@ packages:
   unified@11.0.5:
     resolution: {integrity: sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==}
 
+  uniku@0.5.0:
+    resolution: {integrity: sha512-giSrg7xqM5YWkSlyheulHgTTInhYh/m0cFZOOuChi/TO87hKlxmZLllETlvDw/lPB54NIs1iW/x2rr0y2yFXHg==}
+    engines: {node: '>=20.19.0'}
+
   unimport@6.4.0:
     resolution: {integrity: sha512-JJOOuNMFq8b4ZPBKwQUxEcba4MplskDzYI1Lvrf8rJfWphZTWvPNXWa493qsPngHUmub89w6C7j+SeLWTE/UIQ==}
     engines: {node: '>=18.12.0'}
@@ -19131,6 +19395,10 @@ packages:
   vscode-languageserver-types@3.18.0:
     resolution: {integrity: sha512-8TsGPNMIMiiBdkORgRSvLjuiEIiAFtO+KssmYWxQ+uSVvlf7RjK8YKCOjPzZ+YA04jXEV7+7LvkSmHkhpNS99g==}
 
+  vscode-languageserver@10.1.0:
+    resolution: {integrity: sha512-9gEWpXkYGXoqG7pBnE8O8hx/yP7+Aabn4+peQ3KDicQv6qunHSWyLTud3OF0w4S2+HfDD+5HqYKiXQW9HAU6mA==}
+    hasBin: true
+
   vscode-languageserver@9.0.1:
     resolution: {integrity: sha512-woByF3PDpkHFUreUa7Hos7+pUWdeWMXRd26+ZX2A8cFx6v/JPTtd4/uN0/jB6XQHYaOlHbio03NTHCqrgG5n7g==}
     hasBin: true
@@ -19457,6 +19725,10 @@ packages:
       '@cloudflare/workers-types':
         optional: true
 
+  wrap-ansi@10.0.2:
+    resolution: {integrity: sha512-6OLRNZqRntVGBm26ghZ5eZhCuWWyOkRCSn8XsOIuq5stpCE/tjLbdozd93naILZig0lmD8ANfRwnhn0DLeXGlg==}
+    engines: {node: '>=20'}
+
   wrap-ansi@7.0.0:
     resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
     engines: {node: '>=10'}
@@ -20137,6 +20409,12 @@ snapshots:
 
   '@apollo/utils.withrequired@3.0.0': {}
 
+  '@ark/schema@0.56.8':
+    dependencies:
+      '@ark/util': 0.56.8
+
+  '@ark/util@0.56.8': {}
+
   '@asamuzakjp/css-color@3.2.0':
     dependencies:
       '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
@@ -23213,6 +23491,9 @@ snapshots:
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
+  '@esbuild/aix-ppc64@0.28.2':
+    optional: true
+
   '@esbuild/android-arm64@0.21.5':
     optional: true
 
@@ -23228,6 +23509,9 @@ snapshots:
   '@esbuild/android-arm64@0.28.1':
     optional: true
 
+  '@esbuild/android-arm64@0.28.2':
+    optional: true
+
   '@esbuild/android-arm@0.15.18':
     optional: true
 
@@ -23246,6 +23530,9 @@ snapshots:
   '@esbuild/android-arm@0.28.1':
     optional: true
 
+  '@esbuild/android-arm@0.28.2':
+    optional: true
+
   '@esbuild/android-x64@0.21.5':
     optional: true
 
@@ -23261,6 +23548,9 @@ snapshots:
   '@esbuild/android-x64@0.28.1':
     optional: true
 
+  '@esbuild/android-x64@0.28.2':
+    optional: true
+
   '@esbuild/darwin-arm64@0.21.5':
     optional: true
 
@@ -23276,6 +23566,9 @@ snapshots:
   '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
+  '@esbuild/darwin-arm64@0.28.2':
+    optional: true
+
   '@esbuild/darwin-x64@0.21.5':
     optional: true
 
@@ -23291,6 +23584,9 @@ snapshots:
   '@esbuild/darwin-x64@0.28.1':
     optional: true
 
+  '@esbuild/darwin-x64@0.28.2':
+    optional: true
+
   '@esbuild/freebsd-arm64@0.21.5':
     optional: true
 
@@ -23306,6 +23602,9 @@ snapshots:
   '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
+  '@esbuild/freebsd-arm64@0.28.2':
+    optional: true
+
   '@esbuild/freebsd-x64@0.21.5':
     optional: true
 
@@ -23321,6 +23620,9 @@ snapshots:
   '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
+  '@esbuild/freebsd-x64@0.28.2':
+    optional: true
+
   '@esbuild/linux-arm64@0.21.5':
     optional: true
 
@@ -23336,6 +23638,9 @@ snapshots:
   '@esbuild/linux-arm64@0.28.1':
     optional: true
 
+  '@esbuild/linux-arm64@0.28.2':
+    optional: true
+
   '@esbuild/linux-arm@0.21.5':
     optional: true
 
@@ -23351,6 +23656,9 @@ snapshots:
   '@esbuild/linux-arm@0.28.1':
     optional: true
 
+  '@esbuild/linux-arm@0.28.2':
+    optional: true
+
   '@esbuild/linux-ia32@0.21.5':
     optional: true
 
@@ -23366,6 +23674,9 @@ snapshots:
   '@esbuild/linux-ia32@0.28.1':
     optional: true
 
+  '@esbuild/linux-ia32@0.28.2':
+    optional: true
+
   '@esbuild/linux-loong64@0.15.18':
     optional: true
 
@@ -23387,6 +23698,9 @@ snapshots:
   '@esbuild/linux-loong64@0.28.1':
     optional: true
 
+  '@esbuild/linux-loong64@0.28.2':
+    optional: true
+
   '@esbuild/linux-mips64el@0.21.5':
     optional: true
 
@@ -23402,6 +23716,9 @@ snapshots:
   '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
+  '@esbuild/linux-mips64el@0.28.2':
+    optional: true
+
   '@esbuild/linux-ppc64@0.21.5':
     optional: true
 
@@ -23417,6 +23734,9 @@ snapshots:
   '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
+  '@esbuild/linux-ppc64@0.28.2':
+    optional: true
+
   '@esbuild/linux-riscv64@0.21.5':
     optional: true
 
@@ -23432,6 +23752,9 @@ snapshots:
   '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
+  '@esbuild/linux-riscv64@0.28.2':
+    optional: true
+
   '@esbuild/linux-s390x@0.21.5':
     optional: true
 
@@ -23447,6 +23770,9 @@ snapshots:
   '@esbuild/linux-s390x@0.28.1':
     optional: true
 
+  '@esbuild/linux-s390x@0.28.2':
+    optional: true
+
   '@esbuild/linux-x64@0.21.5':
     optional: true
 
@@ -23462,6 +23788,9 @@ snapshots:
   '@esbuild/linux-x64@0.28.1':
     optional: true
 
+  '@esbuild/linux-x64@0.28.2':
+    optional: true
+
   '@esbuild/netbsd-arm64@0.25.12':
     optional: true
 
@@ -23474,6 +23803,9 @@ snapshots:
   '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
+  '@esbuild/netbsd-arm64@0.28.2':
+    optional: true
+
   '@esbuild/netbsd-x64@0.21.5':
     optional: true
 
@@ -23489,6 +23821,9 @@ snapshots:
   '@esbuild/netbsd-x64@0.28.1':
     optional: true
 
+  '@esbuild/netbsd-x64@0.28.2':
+    optional: true
+
   '@esbuild/openbsd-arm64@0.25.12':
     optional: true
 
@@ -23501,6 +23836,9 @@ snapshots:
   '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
+  '@esbuild/openbsd-arm64@0.28.2':
+    optional: true
+
   '@esbuild/openbsd-x64@0.21.5':
     optional: true
 
@@ -23516,6 +23854,9 @@ snapshots:
   '@esbuild/openbsd-x64@0.28.1':
     optional: true
 
+  '@esbuild/openbsd-x64@0.28.2':
+    optional: true
+
   '@esbuild/openharmony-arm64@0.25.12':
     optional: true
 
@@ -23528,6 +23869,9 @@ snapshots:
   '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
+  '@esbuild/openharmony-arm64@0.28.2':
+    optional: true
+
   '@esbuild/sunos-x64@0.21.5':
     optional: true
 
@@ -23543,6 +23887,9 @@ snapshots:
   '@esbuild/sunos-x64@0.28.1':
     optional: true
 
+  '@esbuild/sunos-x64@0.28.2':
+    optional: true
+
   '@esbuild/win32-arm64@0.21.5':
     optional: true
 
@@ -23558,6 +23905,9 @@ snapshots:
   '@esbuild/win32-arm64@0.28.1':
     optional: true
 
+  '@esbuild/win32-arm64@0.28.2':
+    optional: true
+
   '@esbuild/win32-ia32@0.21.5':
     optional: true
 
@@ -23573,6 +23923,9 @@ snapshots:
   '@esbuild/win32-ia32@0.28.1':
     optional: true
 
+  '@esbuild/win32-ia32@0.28.2':
+    optional: true
+
   '@esbuild/win32-x64@0.21.5':
     optional: true
 
@@ -23588,6 +23941,9 @@ snapshots:
   '@esbuild/win32-x64@0.28.1':
     optional: true
 
+  '@esbuild/win32-x64@0.28.2':
+    optional: true
+
   '@eslint-community/eslint-utils@4.9.0(eslint@8.57.0(supports-color@10.0.0))':
     dependencies:
       eslint: 8.57.0(supports-color@10.0.0)
@@ -24269,7 +24625,7 @@ snapshots:
     dependencies:
       string-width: 5.1.2
       string-width-cjs: string-width@4.2.3
-      strip-ansi: 7.1.0
+      strip-ansi: 7.2.0
       strip-ansi-cjs: strip-ansi@6.0.1
       wrap-ansi: 8.1.0
       wrap-ansi-cjs: wrap-ansi@7.0.0
@@ -24686,6 +25042,8 @@ snapshots:
     dependencies:
       eslint-scope: 5.1.1
 
+  '@noble/hashes@2.4.0': {}
+
   '@nodable/entities@2.1.0': {}
 
   '@nodelib/fs.scandir@2.1.5':
@@ -25892,10 +26250,9 @@ snapshots:
       '@prisma/driver-adapter-utils': 6.15.0
       ky: 1.7.5
 
-  '@prisma/adapter-pg@7.9.1':
+  '@prisma/adapter-pg@7.2.0':
     dependencies:
-      '@prisma/driver-adapter-utils': 7.9.1
-      '@types/pg': 8.20.0
+      '@prisma/driver-adapter-utils': 7.2.0
       pg: 8.20.0
       postgres-array: 3.0.4
     transitivePeerDependencies:
@@ -25917,15 +26274,15 @@ snapshots:
 
   '@prisma/debug@6.15.0': {}
 
-  '@prisma/debug@7.9.1': {}
+  '@prisma/debug@7.2.0': {}
 
   '@prisma/driver-adapter-utils@6.15.0':
     dependencies:
       '@prisma/debug': 6.15.0
 
-  '@prisma/driver-adapter-utils@7.9.1':
+  '@prisma/driver-adapter-utils@7.2.0':
     dependencies:
-      '@prisma/debug': 7.9.1
+      '@prisma/debug': 7.2.0
 
   '@prisma/engines-version@6.15.0-5.85179d7826409ee107a6ba334b5e305ae3fba9fb': {}
 
@@ -25946,6 +26303,101 @@ snapshots:
     dependencies:
       '@prisma/debug': 6.15.0
 
+  '@prisma/orm-family-sql@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+    dependencies:
+      '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@standard-schema/spec': 1.1.0
+      arktype: 2.2.9
+      pathe: 2.0.3
+      pluralize: 8.0.0
+      tinyglobby: 0.2.17
+      ts-toolbelt: 9.6.0
+    optionalDependencies:
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - '@prisma/cli-engine'
+      - magicast
+      - vite
+
+  '@prisma/orm-framework@8.0.0-rc.17(typescript@7.0.2)':
+    dependencies:
+      '@standard-schema/spec': 1.1.0
+      arktype: 2.2.9
+      pathe: 2.0.3
+      tinyglobby: 0.2.17
+      uniku: 0.5.0
+    optionalDependencies:
+      typescript: 7.0.2
+
+  '@prisma/orm-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+    dependencies:
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
+      '@prisma/orm-target-postgres': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@types/node': 26.1.2
+      '@types/pg': 8.20.4
+      arktype: 2.2.9
+      pathe: 2.0.3
+      pg: 8.22.0
+      tinyglobby: 0.2.17
+    optionalDependencies:
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - '@prisma/cli-engine'
+      - magicast
+      - pg-native
+      - vite
+
+  '@prisma/orm-target-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+    dependencies:
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@standard-schema/spec': 1.1.0
+      '@types/node': 26.1.2
+      '@types/pg': 8.20.4
+      arktype: 2.2.9
+      pathe: 2.0.3
+      pg: 8.22.0
+      pg-cursor: 2.22.1(pg@8.22.0)
+      postgres-array: 2.0.0
+    optionalDependencies:
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - '@prisma/cli-engine'
+      - magicast
+      - pg-native
+      - vite
+
+  '@prisma/orm-toolchain@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+    dependencies:
+      '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
+      '@vercel/detect-agent': 1.2.7
+      arktype: 2.2.9
+      c12: 3.3.4(magicast@0.3.5)
+      ci-info: 4.4.0
+      clipanion: 4.0.0-rc.4
+      closest-match: 1.3.3
+      colorette: 2.0.20
+      esbuild: 0.28.2
+      jsonc-parser: 3.3.1
+      package-manager-detector: 1.9.0
+      pathe: 2.0.3
+      prettier: 3.9.10
+      string-width: 8.3.0
+      strip-ansi: 7.2.0
+      tinyglobby: 0.2.17
+      vscode-languageserver: 10.1.0
+      vscode-languageserver-textdocument: 1.0.12
+      wrap-ansi: 10.0.2
+    optionalDependencies:
+      typescript: 7.0.2
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+    transitivePeerDependencies:
+      - magicast
+
   '@protobuf-ts/plugin-framework@2.9.4':
     dependencies:
       '@protobuf-ts/runtime': 2.9.4
@@ -26013,7 +26465,7 @@ snapshots:
       pathe: 1.1.2
       picocolors: 1.1.1
       pkg-types: 2.3.1
-      prettier: 3.8.1
+      prettier: 3.9.10
       react-refresh: 0.14.2
       react-router: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       semver: 7.8.5
@@ -27502,9 +27954,13 @@ snapshots:
     dependencies:
       undici-types: 6.21.0
 
+  '@types/node@26.1.2':
+    dependencies:
+      undici-types: 8.3.0
+
   '@types/parse-json@4.0.0': {}
 
-  '@types/pg@8.20.0':
+  '@types/pg@8.20.4':
     dependencies:
       '@types/node': 20.19.43
       pg-protocol: 1.15.0
@@ -27854,6 +28310,8 @@ snapshots:
     dependencies:
       valibot: 1.4.2(typescript@7.0.2)
 
+  '@vercel/detect-agent@1.2.7': {}
+
   '@vercel/nft@1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)':
     dependencies:
       '@mapbox/node-pre-gyp': 2.0.3(encoding@0.1.13)(supports-color@10.0.0)
@@ -28561,7 +29019,7 @@ snapshots:
 
   ansi-styles@5.2.0: {}
 
-  ansi-styles@6.2.1: {}
+  ansi-styles@6.2.3: {}
 
   ansis@4.3.1: {}
 
@@ -28635,6 +29093,16 @@ snapshots:
 
   aria-query@5.3.2: {}
 
+  arkregex@0.0.14:
+    dependencies:
+      '@ark/util': 0.56.8
+
+  arktype@2.2.9:
+    dependencies:
+      '@ark/schema': 0.56.8
+      '@ark/util': 0.56.8
+      arkregex: 0.0.14
+
   array-buffer-byte-length@1.0.2:
     dependencies:
       call-bound: 1.0.4
@@ -29445,6 +29913,23 @@ snapshots:
     optionalDependencies:
       magicast: 0.3.5
 
+  c12@3.3.4(magicast@0.3.5):
+    dependencies:
+      chokidar: 5.0.0
+      confbox: 0.2.4
+      defu: 6.1.7
+      dotenv: 17.4.2
+      exsolve: 1.1.3
+      giget: 3.3.1
+      jiti: 2.7.0
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.1
+      rc9: 3.1.0
+    optionalDependencies:
+      magicast: 0.3.5
+
   c12@3.3.4(magicast@0.5.4):
     dependencies:
       chokidar: 5.0.0
@@ -29669,6 +30154,10 @@ snapshots:
 
   client-only@0.0.1: {}
 
+  clipanion@4.0.0-rc.4:
+    dependencies:
+      typanion: 3.14.0
+
   clipboardy@4.0.0:
     dependencies:
       execa: 8.0.1
@@ -29697,6 +30186,8 @@ snapshots:
 
   clone@2.1.2: {}
 
+  closest-match@1.3.3: {}
+
   clsx@2.1.1: {}
 
   cluster-key-slot@1.1.1: {}
@@ -31154,6 +31645,35 @@ snapshots:
       '@esbuild/win32-ia32': 0.28.1
       '@esbuild/win32-x64': 0.28.1
 
+  esbuild@0.28.2:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.28.2
+      '@esbuild/android-arm': 0.28.2
+      '@esbuild/android-arm64': 0.28.2
+      '@esbuild/android-x64': 0.28.2
+      '@esbuild/darwin-arm64': 0.28.2
+      '@esbuild/darwin-x64': 0.28.2
+      '@esbuild/freebsd-arm64': 0.28.2
+      '@esbuild/freebsd-x64': 0.28.2
+      '@esbuild/linux-arm': 0.28.2
+      '@esbuild/linux-arm64': 0.28.2
+      '@esbuild/linux-ia32': 0.28.2
+      '@esbuild/linux-loong64': 0.28.2
+      '@esbuild/linux-mips64el': 0.28.2
+      '@esbuild/linux-ppc64': 0.28.2
+      '@esbuild/linux-riscv64': 0.28.2
+      '@esbuild/linux-s390x': 0.28.2
+      '@esbuild/linux-x64': 0.28.2
+      '@esbuild/netbsd-arm64': 0.28.2
+      '@esbuild/netbsd-x64': 0.28.2
+      '@esbuild/openbsd-arm64': 0.28.2
+      '@esbuild/openbsd-x64': 0.28.2
+      '@esbuild/openharmony-arm64': 0.28.2
+      '@esbuild/sunos-x64': 0.28.2
+      '@esbuild/win32-arm64': 0.28.2
+      '@esbuild/win32-ia32': 0.28.2
+      '@esbuild/win32-x64': 0.28.2
+
   escalade@3.2.0: {}
 
   escape-html@1.0.3: {}
@@ -32011,7 +32531,7 @@ snapshots:
 
   get-caller-file@2.0.5: {}
 
-  get-east-asian-width@1.4.0: {}
+  get-east-asian-width@1.7.0: {}
 
   get-intrinsic@1.3.0:
     dependencies:
@@ -33403,6 +33923,8 @@ snapshots:
 
   jsonc-parser@3.2.0: {}
 
+  jsonc-parser@3.3.1: {}
+
   jsondiffpatch@0.6.0:
     dependencies:
       '@types/diff-match-patch': 1.0.36
@@ -34840,7 +35362,7 @@ snapshots:
       find-cache-dir: 3.3.2
       glob: 8.1.0
       injection-js: 2.4.0
-      jsonc-parser: 3.2.0
+      jsonc-parser: 3.3.1
       less: 4.2.0(supports-color@10.0.0)
       ora: 5.4.1
       postcss: 8.5.31
@@ -35481,7 +36003,7 @@ snapshots:
 
   npm-run-all2@6.2.0:
     dependencies:
-      ansi-styles: 6.2.1
+      ansi-styles: 6.2.3
       cross-spawn: 7.0.6
       memorystream: 0.3.1
       minimatch: 9.0.9
@@ -35997,7 +36519,7 @@ snapshots:
       log-symbols: 6.0.0
       stdin-discarder: 0.2.2
       string-width: 7.2.0
-      strip-ansi: 7.1.0
+      strip-ansi: 7.2.0
 
   os-tmpdir@1.0.2: {}
 
@@ -36410,6 +36932,10 @@ snapshots:
 
   pg-connection-string@2.6.1: {}
 
+  pg-cursor@2.22.1(pg@8.22.0):
+    dependencies:
+      pg: 8.22.0
+
   pg-int8@1.0.1: {}
 
   pg-pool@3.14.0(pg@8.16.0):
@@ -37212,7 +37738,7 @@ snapshots:
 
   prettier@2.8.8: {}
 
-  prettier@3.8.1: {}
+  prettier@3.9.10: {}
 
   pretty-bytes@5.6.0: {}
 
@@ -38863,13 +39389,18 @@ snapshots:
     dependencies:
       eastasianwidth: 0.2.0
       emoji-regex: 9.2.2
-      strip-ansi: 7.1.0
+      strip-ansi: 7.2.0
 
   string-width@7.2.0:
     dependencies:
       emoji-regex: 10.6.0
-      get-east-asian-width: 1.4.0
-      strip-ansi: 7.1.0
+      get-east-asian-width: 1.7.0
+      strip-ansi: 7.2.0
+
+  string-width@8.3.0:
+    dependencies:
+      get-east-asian-width: 1.7.0
+      strip-ansi: 7.2.0
 
   string.prototype.trim@1.2.10:
     dependencies:
@@ -38927,7 +39458,7 @@ snapshots:
     dependencies:
       ansi-regex: 5.0.1
 
-  strip-ansi@7.1.0:
+  strip-ansi@7.2.0:
     dependencies:
       ansi-regex: 6.2.2
 
@@ -39371,6 +39902,8 @@ snapshots:
       '@ts-graphviz/common': 2.1.5
       '@ts-graphviz/core': 2.0.7
 
+  ts-toolbelt@9.6.0: {}
+
   tsconfck@3.1.6(typescript@7.0.2):
     optionalDependencies:
       typescript: 7.0.2
@@ -39411,6 +39944,8 @@ snapshots:
 
   turbo-stream@2.4.1: {}
 
+  typanion@3.14.0: {}
+
   type-check@0.4.0:
     dependencies:
       prelude-ls: 1.2.1
@@ -39581,6 +40116,8 @@ snapshots:
 
   undici-types@6.21.0: {}
 
+  undici-types@8.3.0: {}
+
   undici@5.29.0:
     dependencies:
       '@fastify/busboy': 2.0.0
@@ -39632,6 +40169,10 @@ snapshots:
       trough: 2.1.0
       vfile: 6.0.3
 
+  uniku@0.5.0:
+    dependencies:
+      '@noble/hashes': 2.4.0
+
   unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
@@ -40462,6 +41003,10 @@ snapshots:
 
   vscode-languageserver-types@3.18.0: {}
 
+  vscode-languageserver@10.1.0:
+    dependencies:
+      vscode-languageserver-protocol: 3.18.2
+
   vscode-languageserver@9.0.1:
     dependencies:
       vscode-languageserver-protocol: 3.17.5
@@ -40967,6 +41512,11 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
+  wrap-ansi@10.0.2:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 8.3.0
+
   wrap-ansi@7.0.0:
     dependencies:
       ansi-styles: 4.3.0
@@ -40975,15 +41525,15 @@ snapshots:
 
   wrap-ansi@8.1.0:
     dependencies:
-      ansi-styles: 6.2.1
+      ansi-styles: 6.2.3
       string-width: 5.1.2
-      strip-ansi: 7.1.0
+      strip-ansi: 7.2.0
 
   wrap-ansi@9.0.2:
     dependencies:
-      ansi-styles: 6.2.1
+      ansi-styles: 6.2.3
       string-width: 7.2.0
-      strip-ansi: 7.1.0
+      strip-ansi: 7.2.0
 
   wrappy@1.0.2: {}
 

From b52901e0d95415c2026dfa890bfe20be86fd54b8 Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Fri, 30 Oct 2026 14:15:51 +0100
Subject: [PATCH 060/169] feat(server-utils): Set `db.operation.name` on SQL
 spans (#25850)

I noticed this when bumping junior from v10 to v11, that we are not
setting these in some of our db instrumentation.

**Why:** pg, mysql, mysql2, tedious, neon, Prisma and Nuxt's db0 spans
had `db.query.summary` but no `db.operation.name`, while postgres.js,
knex, MongoDB, Redis etc. already set it. That made grouping/alerting by
operation inconsistent across DB integrations. The operation is parsed
from the sanitized query by a shared helper next to the summary logic,
keeping the original case as OTel recommends.

**How to review:** Start with `getSqlOperationName` in `utils/sql.ts`;
the integration changes are one-liners. Neon batches follow the OTel
rule (`BATCH <op>` if all statements share one operation, else `BATCH`).

**Unsure about:** For `WITH` queries I report the main statement's
keyword (the first one outside the parenthesized CTE bodies) rather than
`WITH`. Depth counting is safe because it runs on the sanitized query,
which has no literals or comments left. tedious `callProcedure` is left
without an operation. postgres.js still uppercases its value; I didn't
migrate it to avoid a behavior change here.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../suites/tracing/mysql/test.ts              |  2 +
 .../suites/tracing/neon/test.ts               | 42 +++++++--
 .../suites/tracing/postgres/test.ts           | 25 +++++
 .../src/runtime/utils/instrumentDatabase.ts   | 11 ++-
 .../server-utils/src/integrations/mysql.ts    |  4 +-
 .../src/integrations/mysql2/index.ts          |  4 +-
 .../server-utils/src/integrations/neon.ts     | 10 ++
 .../server-utils/src/integrations/postgres.ts |  4 +-
 .../src/integrations/prisma/tracing-helper.ts | 13 ++-
 .../server-utils/src/integrations/tedious.ts  |  8 +-
 packages/server-utils/src/utils/sql.ts        | 49 +++++++++-
 packages/server-utils/test/utils/sql.test.ts  | 93 +++++++++++++++++--
 12 files changed, 234 insertions(+), 31 deletions(-)

diff --git a/dev-packages/node-integration-tests/suites/tracing/mysql/test.ts b/dev-packages/node-integration-tests/suites/tracing/mysql/test.ts
index 2a9cb3c3010a..a83b218ec2da 100644
--- a/dev-packages/node-integration-tests/suites/tracing/mysql/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/mysql/test.ts
@@ -1,5 +1,6 @@
 import {
   DB_CONNECTION_STRING,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -129,6 +130,7 @@ describe('mysql auto instrumentation', () => {
         ...COMMON_ATTRIBUTES,
         [DB_QUERY_TEXT]: { type: 'string', value: queryText },
         [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+        [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
       },
       ...COMMON_SPAN_PROPS,
     });
diff --git a/dev-packages/node-integration-tests/suites/tracing/neon/test.ts b/dev-packages/node-integration-tests/suites/tracing/neon/test.ts
index 485e6dbfac26..531885d20d3e 100644
--- a/dev-packages/node-integration-tests/suites/tracing/neon/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/neon/test.ts
@@ -2,6 +2,7 @@ import type { SerializedStreamedSpan } from '@sentry/core';
 import {
   DB_NAMESPACE,
   DB_OPERATION_BATCH_SIZE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -34,11 +35,13 @@ const CONNECTION_ATTRIBUTES = {
 
 function expectedDbSpan({
   name,
+  operation,
   statement,
   status = 'ok',
   batchSize,
 }: {
   name: string;
+  operation: string;
   statement: string;
   status?: 'ok' | 'error';
   batchSize?: number;
@@ -51,6 +54,7 @@ function expectedDbSpan({
       [SENTRY_ORIGIN]: attr(ORIGIN),
       [DB_QUERY_TEXT]: attr(statement),
       [DB_QUERY_SUMMARY]: attr(name),
+      [DB_OPERATION_NAME]: attr(operation),
       ...(batchSize ? { [DB_OPERATION_BATCH_SIZE]: attr(batchSize, 'integer') } : {}),
     }),
     is_segment: false,
@@ -87,20 +91,30 @@ describeWithDockerCompose('neon auto instrumentation', { workingDirectory: [__di
         const neonSpans = getNeonSpans(spans);
         expect(neonSpans.every(span => span.parent_span_id === segment!.span_id)).toBe(true);
         expect(neonSpans).toEqual([
-          expectedDbSpan({ name: 'CREATE TABLE "User"', statement: CREATE_USER_TABLE_STATEMENT }),
-          expectedDbSpan({ name: 'INSERT "User"', statement: 'INSERT INTO "User" ("email", "name") VALUES ($1, $2)' }),
-          expectedDbSpan({ name: 'SELECT "User"', statement: 'SELECT * FROM "User" WHERE "name" = $1' }),
+          expectedDbSpan({ name: 'CREATE TABLE "User"', operation: 'CREATE', statement: CREATE_USER_TABLE_STATEMENT }),
+          expectedDbSpan({
+            name: 'INSERT "User"',
+            operation: 'INSERT',
+            statement: 'INSERT INTO "User" ("email", "name") VALUES ($1, $2)',
+          }),
+          expectedDbSpan({
+            name: 'SELECT "User"',
+            operation: 'SELECT',
+            statement: 'SELECT * FROM "User" WHERE "name" = $1',
+          }),
           expectedDbSpan({
             name: 'SELECT "User"; SELECT "User"',
+            operation: 'BATCH SELECT',
             statement: 'SELECT "email" FROM "User"; SELECT "name" FROM "User"',
             batchSize: 2,
           }),
           expectedDbSpan({
             name: 'SELECT "does_not_exist_table"',
+            operation: 'SELECT',
             statement: 'SELECT * FROM "does_not_exist_table"',
             status: 'error',
           }),
-          expectedDbSpan({ name: 'DROP TABLE "User"', statement: 'DROP TABLE "User"' }),
+          expectedDbSpan({ name: 'DROP TABLE "User"', operation: 'DROP', statement: 'DROP TABLE "User"' }),
         ]);
       });
     });
@@ -121,15 +135,20 @@ describeWithDockerCompose('neon auto instrumentation', { workingDirectory: [__di
         const neonSpans = getNeonSpans(spans);
         expect(neonSpans.every(span => span.parent_span_id === segment!.span_id)).toBe(true);
         expect(neonSpans).toEqual([
-          expectedDbSpan({ name: 'CREATE TABLE "User"', statement: CREATE_USER_TABLE_STATEMENT }),
-          expectedDbSpan({ name: 'INSERT "User"', statement: 'INSERT INTO "User" ("email", "name") VALUES ($1, $2)' }),
-          expectedDbSpan({ name: 'SELECT "User"', statement: 'SELECT * FROM "User"' }),
+          expectedDbSpan({ name: 'CREATE TABLE "User"', operation: 'CREATE', statement: CREATE_USER_TABLE_STATEMENT }),
+          expectedDbSpan({
+            name: 'INSERT "User"',
+            operation: 'INSERT',
+            statement: 'INSERT INTO "User" ("email", "name") VALUES ($1, $2)',
+          }),
+          expectedDbSpan({ name: 'SELECT "User"', operation: 'SELECT', statement: 'SELECT * FROM "User"' }),
           expectedDbSpan({
             name: 'SELECT "does_not_exist_table"',
+            operation: 'SELECT',
             statement: 'SELECT * FROM "does_not_exist_table"',
             status: 'error',
           }),
-          expectedDbSpan({ name: 'DROP TABLE "User"', statement: 'DROP TABLE "User"' }),
+          expectedDbSpan({ name: 'DROP TABLE "User"', operation: 'DROP', statement: 'DROP TABLE "User"' }),
         ]);
       });
     });
@@ -154,10 +173,15 @@ describeWithDockerCompose('neon auto instrumentation', { workingDirectory: [__di
         expect(neonSpans).toEqual([
           expectedDbSpan({
             name: 'SELECT pg_catalog.pg_user',
+            operation: 'SELECT',
             statement: 'SELECT "email", "name" FROM pg_catalog.pg_user LIMIT ?',
             status: 'error',
           }),
-          expectedDbSpan({ name: 'SELECT pg_catalog.pg_user', statement: 'SELECT "usename" FROM pg_catalog.pg_user' }),
+          expectedDbSpan({
+            name: 'SELECT pg_catalog.pg_user',
+            operation: 'SELECT',
+            statement: 'SELECT "usename" FROM pg_catalog.pg_user',
+          }),
         ]);
       });
     });
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgres/test.ts b/dev-packages/node-integration-tests/suites/tracing/postgres/test.ts
index 4dd383254d1f..ae2e256e33b1 100644
--- a/dev-packages/node-integration-tests/suites/tracing/postgres/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/postgres/test.ts
@@ -1,6 +1,7 @@
 import {
   DB_CONNECTION_STRING,
   DB_NAMESPACE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -87,6 +88,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
           },
           name: 'INSERT "User"',
           status: 'ok',
@@ -101,6 +103,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
           },
           name: 'SELECT "User"',
           status: 'ok',
@@ -114,6 +117,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
           }),
           name: 'SELECT "User"',
           status: 'ok',
@@ -126,6 +130,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "does_not_exist_table"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
           }),
           name: 'SELECT "does_not_exist_table"',
           status: 'error',
@@ -144,6 +149,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                 'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
             },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE' },
           },
         },
         {
@@ -156,6 +162,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "User"' },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "User"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DROP' },
           },
         },
       ]),
@@ -218,6 +225,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                       [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
                       [SENTRY_OP]: { type: 'string', value: DB },
                       [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+                      [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
                     },
                     name: 'INSERT "User"',
                     status: 'ok',
@@ -232,6 +240,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                       [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
                       [SENTRY_OP]: { type: 'string', value: DB },
                       [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+                      [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
                     },
                     name: 'SELECT "User"',
                     status: 'ok',
@@ -250,6 +259,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                           'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
                       },
                       [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+                      [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE' },
                     },
                   },
                   {
@@ -262,6 +272,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                       [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
                       [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "User"' },
                       [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "User"' },
+                      [DB_OPERATION_NAME]: { type: 'string', value: 'DROP' },
                     },
                   },
                 ]),
@@ -300,6 +311,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
           }),
           name: 'SELECT',
           status: 'ok',
@@ -359,6 +371,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
           }),
           name: 'SELECT',
           status: 'ok',
@@ -397,6 +410,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                       [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
                       [SENTRY_OP]: { type: 'string', value: DB },
                       [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+                      [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
                     }),
                     name: 'SELECT',
                     status: 'ok',
@@ -444,6 +458,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "NativeUser"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
             [SERVER_ADDRESS]: { type: 'string', value: '127.0.0.1' },
             [DB_CONNECTION_STRING]: {
               type: 'string',
@@ -463,6 +478,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [SENTRY_OP]: { type: 'string', value: DB },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "NativeUser"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
             [SERVER_ADDRESS]: { type: 'string', value: '127.0.0.1' },
             [DB_CONNECTION_STRING]: {
               type: 'string',
@@ -490,6 +506,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                 'CREATE TABLE "NativeUser" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
             },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "NativeUser"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE' },
           },
         },
         {
@@ -506,6 +523,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
             [SENTRY_ORIGIN]: { type: 'string', value: QUERY_ORIGIN },
             [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "NativeUser"' },
             [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "NativeUser"' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DROP' },
           },
         },
       ]),
@@ -568,6 +586,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
               [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
               [SENTRY_OP]: { type: 'string', value: DB },
               [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+              [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
             }),
             name: 'INSERT "User"',
             status: 'ok',
@@ -581,6 +600,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
               [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
               [SENTRY_OP]: { type: 'string', value: DB },
               [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+              [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
             }),
             name: 'SELECT "User"',
             status: 'ok',
@@ -592,6 +612,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
               [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
               [SENTRY_OP]: { type: 'string', value: DB },
               [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "does_not_exist_table"' },
+              [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
             }),
             name: 'SELECT "does_not_exist_table"',
             status: 'error',
@@ -629,6 +650,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
               [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
               [SENTRY_OP]: { type: 'string', value: DB },
               [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+              [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
             }),
             name: 'SELECT',
             status: 'ok',
@@ -700,6 +722,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                             [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
                             [SENTRY_OP]: { type: 'string', value: DB },
                             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT' },
+                            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
                           }),
                           name: 'SELECT',
                           status: 'ok',
@@ -747,6 +770,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                             [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
                             [SENTRY_OP]: { type: 'string', value: DB },
                             [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+                            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
                           }),
                           name: 'INSERT "User"',
                           status: 'ok',
@@ -759,6 +783,7 @@ describeWithDockerCompose('postgres auto instrumentation', { workingDirectory: [
                             [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
                             [SENTRY_OP]: { type: 'string', value: DB },
                             [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+                            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
                           }),
                           name: 'SELECT "User"',
                           status: 'ok',
diff --git a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
index 4c525e005869..5efa767e5b1d 100644
--- a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
@@ -16,7 +16,13 @@ import { flushIfServerless } from '@sentry/core/server';
 import { sanitizeSqlQuery, sanitizeSqlQueryWithSummary, type SqlDialect } from '@sentry/server-utils';
 import type { Database, PreparedStatement } from 'db0';
 import { type DatabaseConnectionConfig, type DatabaseSpanData, getDatabaseSpanData } from './database-span-data';
-import { DB_NAMESPACE, DB_QUERY_SUMMARY, DB_QUERY_TEXT, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 
 type MaybeInstrumentedDatabase = Database & {
   __sentry_instrumented__?: boolean;
@@ -261,7 +267,7 @@ function createStartSpanOptions(
   data: DatabaseSpanData,
   dialect: SqlDialect | undefined,
 ): StartSpanOptions {
-  const { queryText, querySummary } = sanitizeSqlQueryWithSummary(query, dialect);
+  const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(query, dialect);
 
   const client = getClient();
   const name =
@@ -274,6 +280,7 @@ function createStartSpanOptions(
     attributes: {
       [DB_QUERY_TEXT]: queryText,
       [DB_QUERY_SUMMARY]: querySummary,
+      [DB_OPERATION_NAME]: operationName,
       [SENTRY_ORIGIN]: NUXT_DATABASE_ORIGIN,
       [SENTRY_OP]: DB_QUERY,
       ...data,
diff --git a/packages/server-utils/src/integrations/mysql.ts b/packages/server-utils/src/integrations/mysql.ts
index 1a68350361e6..599edf59392f 100644
--- a/packages/server-utils/src/integrations/mysql.ts
+++ b/packages/server-utils/src/integrations/mysql.ts
@@ -1,6 +1,7 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -81,7 +82,7 @@ function instrumentMysql(): void {
       // handler with the caller's context lost. `deferSpanEnd` replays this scope onto the emitter.
       data._sentryCallerScope = getCurrentScope();
 
-      const { queryText, querySummary } = sanitizeSqlQueryWithSummary(sql, 'mysql');
+      const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(sql, 'mysql');
 
       const client = getClient();
       const name =
@@ -102,6 +103,7 @@ function instrumentMysql(): void {
           [DB_USER]: user,
           [DB_QUERY_TEXT]: queryText,
           [DB_QUERY_SUMMARY]: querySummary,
+          [DB_OPERATION_NAME]: operationName,
           [SERVER_ADDRESS]: host,
           [SERVER_PORT]: portIsNumber ? portNumber : undefined,
         },
diff --git a/packages/server-utils/src/integrations/mysql2/index.ts b/packages/server-utils/src/integrations/mysql2/index.ts
index f8aa296266f9..88bc7cb0ab98 100644
--- a/packages/server-utils/src/integrations/mysql2/index.ts
+++ b/packages/server-utils/src/integrations/mysql2/index.ts
@@ -18,6 +18,7 @@ import { mysql2ModuleNames } from '../../orchestrion/config/mysql2';
 import { invokeOrchestrionInstrumentation } from '../../orchestrion/instrumentation';
 import {
   DB_NAMESPACE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -77,7 +78,7 @@ function subscribeQueryChannel(channelName: ChannelName): void {
   bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<Mysql2QueryChannelContext>(channelName), data => {
     const statement = getQueryText(data.arguments);
     const connectionAttributes = getConnectionAttributes(data.self?.config);
-    const { queryText, querySummary } = sanitizeSqlQueryWithSummary(statement, 'mysql');
+    const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(statement, 'mysql');
 
     const client = getClient();
     const name =
@@ -95,6 +96,7 @@ function subscribeQueryChannel(channelName: ChannelName): void {
         [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
         [DB_QUERY_TEXT]: queryText || undefined,
         [DB_QUERY_SUMMARY]: querySummary,
+        [DB_OPERATION_NAME]: operationName,
         ...connectionAttributes,
       },
     });
diff --git a/packages/server-utils/src/integrations/neon.ts b/packages/server-utils/src/integrations/neon.ts
index e4130d14942c..349fb7d7ab84 100644
--- a/packages/server-utils/src/integrations/neon.ts
+++ b/packages/server-utils/src/integrations/neon.ts
@@ -1,6 +1,7 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_OPERATION_BATCH_SIZE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -101,6 +102,7 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
     .map(text => sanitizeSqlQueryWithSummary(text));
   const queryText = joinDefined(statements.map(s => s.queryText));
   const querySummary = joinDefined(statements.map(s => s.querySummary));
+  const operationName = batchSize === undefined ? statements[0]?.operationName : getBatchOperationName(statements);
   const name = querySummary || DB_SYSTEM_POSTGRESQL;
 
   return {
@@ -113,11 +115,19 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
       [DB_SYSTEM_NAME]: DB_SYSTEM_POSTGRESQL,
       [DB_QUERY_TEXT]: queryText || undefined,
       [DB_QUERY_SUMMARY]: querySummary,
+      [DB_OPERATION_NAME]: operationName,
       [DB_OPERATION_BATCH_SIZE]: batchSize,
     },
   };
 }
 
+// OTel names a batch `BATCH <op>` when every statement shares one operation, plain `BATCH` otherwise.
+function getBatchOperationName(statements: { operationName: string | undefined }[]): string {
+  const operations = new Set(statements.map(s => s.operationName?.toUpperCase()));
+  const [operation] = operations;
+  return operations.size === 1 && operation ? `BATCH ${operation}` : 'BATCH';
+}
+
 function joinDefined(parts: (string | undefined)[]): string | undefined {
   const defined = parts.filter((part): part is string => !!part);
   return defined.length ? defined.join('; ') : undefined;
diff --git a/packages/server-utils/src/integrations/postgres.ts b/packages/server-utils/src/integrations/postgres.ts
index 3231e0e60a06..ed39a15bf1c7 100644
--- a/packages/server-utils/src/integrations/postgres.ts
+++ b/packages/server-utils/src/integrations/postgres.ts
@@ -1,6 +1,7 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -189,7 +190,7 @@ function querySpanOptions(
   const params = (ctx.self as { connectionParameters?: PgConnectionParams } | undefined)?.connectionParameters ?? {};
   const queryConfig = extractQueryConfig(ctx.arguments);
   const client = getClient();
-  const { queryText, querySummary } = sanitizeSqlQueryWithSummary(queryConfig?.text);
+  const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(queryConfig?.text);
   const name =
     client && hasSpanStreamingEnabled(client)
       ? querySummary || params.database || DB_SYSTEM_POSTGRESQL
@@ -203,6 +204,7 @@ function querySpanOptions(
       [SENTRY_ORIGIN]: origin,
       [DB_QUERY_TEXT]: queryText || undefined,
       [DB_QUERY_SUMMARY]: querySummary,
+      [DB_OPERATION_NAME]: operationName,
       [ATTR_PG_PLAN]: typeof queryConfig?.name === 'string' ? queryConfig.name : undefined,
     },
   };
diff --git a/packages/server-utils/src/integrations/prisma/tracing-helper.ts b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
index 218e7c788134..8527efee244d 100644
--- a/packages/server-utils/src/integrations/prisma/tracing-helper.ts
+++ b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
@@ -26,6 +26,7 @@ import {
 import { DEBUG_BUILD } from '../../debug-build';
 import type { EngineSpan, ExtendedSpanOptions, SpanCallback, TracingHelper } from './types';
 import {
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_STATEMENT,
@@ -35,7 +36,13 @@ import {
   SENTRY_OP,
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
-import { getSqlQuerySummary, sanitizeSqlQuery, type SqlDialect, toSqlDialect } from '../../utils/sql';
+import {
+  getSqlOperationName,
+  getSqlQuerySummary,
+  sanitizeSqlQuery,
+  type SqlDialect,
+  toSqlDialect,
+} from '../../utils/sql';
 
 // Reading `process.env` can throw in runtimes that gate env access (e.g. Deno without `--allow-env`)
 // and `process` may be absent altogether (edge runtimes), so this degrades to `false` in those cases.
@@ -117,7 +124,9 @@ function buildSpanAttributes(name: string, attributes: Record<string, unknown> |
   if (statement) {
     // Sanitized before summarizing, so that a string literal containing `from`/`join` can't leak a
     // value into the summary.
-    merged[DB_QUERY_SUMMARY] = getSqlQuerySummary(sanitizeSqlQuery(statement, getSqlDialect(merged)));
+    const queryText = sanitizeSqlQuery(statement, getSqlDialect(merged));
+    merged[DB_QUERY_SUMMARY] = getSqlQuerySummary(queryText);
+    merged[DB_OPERATION_NAME] ??= getSqlOperationName(queryText);
   }
 
   return merged;
diff --git a/packages/server-utils/src/integrations/tedious.ts b/packages/server-utils/src/integrations/tedious.ts
index 825ababebd68..b584d8582699 100644
--- a/packages/server-utils/src/integrations/tedious.ts
+++ b/packages/server-utils/src/integrations/tedious.ts
@@ -14,6 +14,7 @@ import {
 } from '@sentry/core';
 import {
   DB_NAMESPACE,
+  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -29,7 +30,7 @@ import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { tediousModuleNames } from '../orchestrion/config/tedious';
 import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
-import { getSqlQuerySummary, sanitizeSqlQuery } from '../utils/sql';
+import { getSqlOperationName, getSqlQuerySummary, sanitizeSqlQuery } from '../utils/sql';
 
 // NOTE: this uses the same name as the OTel integration by design. When orchestrion injection is active,
 // `_init` swaps the OTel `Tedious` integration out of the defaults and appends this one (matched by name).
@@ -132,7 +133,9 @@ function subscribeQuery(channelName: string, operation: string): void {
     const databaseName = connection[currentDatabaseSymbol];
     const sql = extractSql(request);
     const queryText = sql ? sanitizeSqlQuery(sql, 'mssql') : undefined;
-    const querySummary = queryText && operation !== 'callProcedure' ? getSqlQuerySummary(queryText) : undefined;
+    const isProcedureCall = operation === 'callProcedure';
+    const querySummary = queryText && !isProcedureCall ? getSqlQuerySummary(queryText) : undefined;
+    const operationName = isProcedureCall ? undefined : getSqlOperationName(queryText);
 
     const attributes: SpanAttributes = {
       [SENTRY_OP]: DB,
@@ -144,6 +147,7 @@ function subscribeQuery(channelName: string, operation: string): void {
       [DB_USER]: connection.config?.userName ?? connection.config?.authentication?.options?.userName,
       [DB_QUERY_TEXT]: queryText,
       [DB_QUERY_SUMMARY]: querySummary,
+      [DB_OPERATION_NAME]: operationName,
       [ATTR_DB_SQL_TABLE]: request.table,
       [SERVER_ADDRESS]: connection.config?.server,
       [SERVER_PORT]: connection.config?.options?.port,
diff --git a/packages/server-utils/src/utils/sql.ts b/packages/server-utils/src/utils/sql.ts
index f8ecdb4a9078..22198b805a67 100644
--- a/packages/server-utils/src/utils/sql.ts
+++ b/packages/server-utils/src/utils/sql.ts
@@ -103,6 +103,43 @@ export function getSqlQuerySummary(query: string | undefined): string | undefine
   return truncate(query.trim().split(/\s+/)[0] ?? query);
 }
 
+const LEADING_KEYWORD_RE = /^\s*(?:\(\s*)*([A-Za-z]+)\b/;
+const CTE_MAIN_STATEMENT_RE = /\(|\)|\b(SELECT|INSERT|UPDATE|DELETE|MERGE|VALUES|TABLE)\b/gi;
+
+/**
+ * Derives `db.operation.name` from a SQL query: the first operation keyword, in its original case.
+ *
+ * @see https://opentelemetry.io/docs/specs/semconv/registry/attributes/db/#db-operation-name
+ */
+export function getSqlOperationName(query: string | undefined): string | undefined {
+  const match = query ? LEADING_KEYWORD_RE.exec(query) : null;
+  const keyword = match?.[1];
+  if (!query || !match || !keyword) {
+    return undefined;
+  }
+  // Scanned from after `WITH`, so parentheses wrapping the whole query don't shift the depth.
+  return keyword.toUpperCase() === 'WITH' ? getCteMainOperationName(query.slice(match[0].length)) : keyword;
+}
+
+/**
+ * The operation of a `WITH` query is its main statement: the first operation keyword outside the
+ * CTE bodies, which are all parenthesized. Counting parentheses is safe on a sanitized query, which
+ * has no literals or comments left.
+ */
+function getCteMainOperationName(query: string): string | undefined {
+  let depth = 0;
+  for (const match of query.matchAll(CTE_MAIN_STATEMENT_RE)) {
+    if (match[0] === '(') {
+      depth++;
+    } else if (match[0] === ')') {
+      depth--;
+    } else if (depth === 0) {
+      return match[1];
+    }
+  }
+  return undefined;
+}
+
 function extractTableNames(sql: string): string[] {
   const tables: string[] = [];
   TOKEN_RE.lastIndex = 0;
@@ -366,6 +403,7 @@ export function sanitizeSqlQuery(sqlQuery: string | undefined, dialect: SqlDiale
     // whether it is looking at SQL syntax or at a user-supplied value.
     stripLiteralsAndComments(sqlQuery, dialect)
       .replace(/;\s*$/, '') // Remove trailing semicolons
+      .replace(/^[\s;]+/, '') // Remove leading semicolons (T-SQL's `;WITH`)
       // Collapse whitespace to a single space (after removing comments)
       .replace(/\s+/g, ' ')
       .trim() // Remove extra spaces and trim
@@ -385,14 +423,15 @@ export function sanitizeSqlQuery(sqlQuery: string | undefined, dialect: SqlDiale
 }
 
 /**
- * Sanitizes a collected SQL statement and derives the matching `db.query.summary`, the pair the SQL
- * integrations attach to their spans. Both come back `undefined` when there is no statement, so an
- * empty query omits the attributes instead of reporting the sanitizer's fallback text.
+ * Sanitizes a collected SQL statement and derives the matching `db.query.summary` and
+ * `db.operation.name`, the attributes the SQL integrations attach to their spans. All come back
+ * `undefined` when there is no statement, so an empty query omits the attributes instead of
+ * reporting the sanitizer's fallback text.
  */
 export function sanitizeSqlQueryWithSummary(
   sqlQuery: string | undefined,
   dialect?: SqlDialect,
-): { queryText: string | undefined; querySummary: string | undefined } {
+): { queryText: string | undefined; querySummary: string | undefined; operationName: string | undefined } {
   const queryText = sqlQuery ? sanitizeSqlQuery(sqlQuery, dialect) : undefined;
-  return { queryText, querySummary: getSqlQuerySummary(queryText) };
+  return { queryText, querySummary: getSqlQuerySummary(queryText), operationName: getSqlOperationName(queryText) };
 }
diff --git a/packages/server-utils/test/utils/sql.test.ts b/packages/server-utils/test/utils/sql.test.ts
index 50ed62d4a50e..dfd1e2cbe814 100644
--- a/packages/server-utils/test/utils/sql.test.ts
+++ b/packages/server-utils/test/utils/sql.test.ts
@@ -1,5 +1,11 @@
 import { describe, expect, it } from 'vitest';
-import { getSqlQuerySummary, sanitizeSqlQuery, sanitizeSqlQueryWithSummary, toSqlDialect } from '../../src/utils/sql';
+import {
+  getSqlOperationName,
+  getSqlQuerySummary,
+  sanitizeSqlQuery,
+  sanitizeSqlQueryWithSummary,
+  toSqlDialect,
+} from '../../src/utils/sql';
 
 describe('getSqlQuerySummary', () => {
   it.each([undefined, ''])('returns undefined for %j', input => {
@@ -283,6 +289,39 @@ describe('getSqlQuerySummary', () => {
   });
 });
 
+describe('getSqlOperationName', () => {
+  it.each([undefined, '', '   ', '?'])('returns undefined for %j', input => {
+    expect(getSqlOperationName(input)).toBeUndefined();
+  });
+
+  it.each([
+    ['SELECT * FROM users WHERE id = ?', 'SELECT'],
+    ['select count(*) from orders', 'select'],
+    ['  INSERT INTO users (name) VALUES (?)', 'INSERT'],
+    ['UPDATE users SET name = ? WHERE id = ?', 'UPDATE'],
+    ['DELETE FROM users WHERE id = ?', 'DELETE'],
+    ['CREATE TABLE IF NOT EXISTS users (id INT)', 'CREATE'],
+    ['(SELECT * FROM users) UNION (SELECT * FROM admins)', 'SELECT'],
+    ['BEGIN', 'BEGIN'],
+    ['PRAGMA table_info(users)', 'PRAGMA'],
+  ])('%j => %j', (input, expected) => {
+    expect(getSqlOperationName(input)).toBe(expected);
+  });
+
+  it.each([
+    ['WITH active AS (SELECT * FROM users WHERE active = ?) SELECT * FROM active', 'SELECT'],
+    ['with moved AS (DELETE FROM queue RETURNING *) insert into archive SELECT * FROM moved', 'insert'],
+    ['WITH RECURSIVE t(n) AS (VALUES (?)) SELECT n FROM t', 'SELECT'],
+    ['WITH a AS (SELECT ?), b (x, y) AS (SELECT * FROM a) UPDATE t SET x = (SELECT x FROM b)', 'UPDATE'],
+    ['WITH x AS (VALUES (?)) TABLE x', 'TABLE'],
+    ['WITH x AS (SELECT ?)', undefined],
+    ['(WITH x AS (SELECT ?) SELECT * FROM x)', 'SELECT'],
+    ['( (with x AS (SELECT ?) delete FROM t WHERE id IN (SELECT * FROM x)) )', 'delete'],
+  ])('takes the main statement of a WITH query: %j => %j', (input, expected) => {
+    expect(getSqlOperationName(input)).toBe(expected);
+  });
+});
+
 describe('sanitizeSqlQuery', () => {
   describe('passthrough (no literals)', () => {
     it.each([
@@ -320,13 +359,20 @@ describe('sanitizeSqlQuery', () => {
     });
   });
 
-  describe('trailing semicolon removal', () => {
+  describe('semicolon removal', () => {
     it.each([
       ['SELECT * FROM users;', 'SELECT * FROM users'],
       ['SELECT * FROM users;   ', 'SELECT * FROM users'],
     ])('removes trailing semicolon: %p', (input, expected) => {
       expect(sanitizeSqlQuery(input)).toBe(expected);
     });
+
+    it.each([
+      [';SELECT * FROM users', 'SELECT * FROM users'],
+      [' ; ;WITH x AS (SELECT ?) SELECT * FROM x', 'WITH x AS (SELECT ?) SELECT * FROM x'],
+    ])('removes leading semicolons: %p', (input, expected) => {
+      expect(sanitizeSqlQuery(input)).toBe(expected);
+    });
   });
 
   describe('$n placeholder preservation (OTEL compliance)', () => {
@@ -853,6 +899,7 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE email = 'jane@example.com'")).toEqual({
       queryText: 'SELECT * FROM users WHERE email = ?',
       querySummary: 'SELECT users',
+      operationName: 'SELECT',
     });
   });
 
@@ -860,12 +907,30 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary('SELECT * FROM users WHERE email = "jane@example.com"', 'mysql')).toEqual({
       queryText: 'SELECT * FROM users WHERE email = ?',
       querySummary: 'SELECT users',
+      operationName: 'SELECT',
+    });
+  });
+
+  it("names the operation of T-SQL's `;WITH` queries", () => {
+    expect(
+      sanitizeSqlQueryWithSummary(";WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = 'a'", 'mssql'),
+    ).toMatchObject({
+      queryText: 'WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = ?',
+      operationName: 'SELECT',
     });
   });
 
-  it('returns undefined for both when there is no statement', () => {
-    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({ queryText: undefined, querySummary: undefined });
-    expect(sanitizeSqlQueryWithSummary('')).toEqual({ queryText: undefined, querySummary: undefined });
+  it('returns undefined for all when there is no statement', () => {
+    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({
+      queryText: undefined,
+      querySummary: undefined,
+      operationName: undefined,
+    });
+    expect(sanitizeSqlQueryWithSummary('')).toEqual({
+      queryText: undefined,
+      querySummary: undefined,
+      operationName: undefined,
+    });
   });
 });
 
@@ -891,6 +956,7 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE email = 'jane@example.com'")).toEqual({
       queryText: 'SELECT * FROM users WHERE email = ?',
       querySummary: 'SELECT users',
+      operationName: 'SELECT',
     });
   });
 
@@ -903,6 +969,7 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary(input, dialect)).toEqual({
       queryText: 'SELECT * FROM users WHERE email = ?',
       querySummary: 'SELECT users',
+      operationName: 'SELECT',
     });
   });
 
@@ -910,6 +977,7 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary("SELECT * FROM [users] WHERE [email] = 'jane@example.com'", 'mssql')).toEqual({
       queryText: 'SELECT * FROM [users] WHERE [email] = ?',
       querySummary: 'SELECT [users]',
+      operationName: 'SELECT',
     });
   });
 
@@ -917,11 +985,20 @@ describe('sanitizeSqlQueryWithSummary', () => {
     expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE bio = 'from secret_table'")).toEqual({
       queryText: 'SELECT * FROM users WHERE bio = ?',
       querySummary: 'SELECT users',
+      operationName: 'SELECT',
     });
   });
 
-  it('returns undefined for both when there is no statement', () => {
-    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({ queryText: undefined, querySummary: undefined });
-    expect(sanitizeSqlQueryWithSummary('')).toEqual({ queryText: undefined, querySummary: undefined });
+  it('returns undefined for all when there is no statement', () => {
+    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({
+      queryText: undefined,
+      querySummary: undefined,
+      operationName: undefined,
+    });
+    expect(sanitizeSqlQueryWithSummary('')).toEqual({
+      queryText: undefined,
+      querySummary: undefined,
+      operationName: undefined,
+    });
   });
 });

From 7aca628e78f89c852f449d5e15ba2b42c915b79a Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Fri, 30 Oct 2026 14:15:52 +0100
Subject: [PATCH 061/169] feat(server-utils): Move to new
 `getSqlQueryAttributes` helper for consistency (#25927)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** `sanitizeSqlQueryWithSummary` grew a third value with
`db.operation.name`, and every SQL integration copied the result into
the same three attributes by hand. `getSqlQueryAttributes` returns them
keyed by attribute name, so integrations spread it and the keys can't
drift. The mysql2 diagnostics-channel subscriber and postgres.js drop
their own operation regexes for the shared helper, so their
`db.operation.name` keeps the statement's case and resolves CTEs like
the other integrations (postgres.js still prefers the server-reported
command once a query succeeds). postgres.js also no longer reports the
sanitizer's `Unknown SQL Query` placeholder as `db.query.text` when
there is no query; its public `requestHook` gets `''` in that case.

**How to review:** Start with `utils/sql.ts`, then the Prisma tracing
helper. Prisma keeps its own `db.query.text`/`db.operation.name` and
only falls back to ours; `db.query.summary` is always ours, so the
streamed span name stays dialect-aware across Prisma versions. Prisma 5
only reports `db.statement`, so its spans now also get a sanitized
`db.query.text` (see the v5 test). Tedious clears the summary and
operation name for procedure calls, as before.

**Unsure about:** `@sentry/server-utils` exports the renamed helper, but
the package is internal (no SemVer guarantee) and Nuxt pins it exactly,
so I didn't keep an alias.

Stacked on #25850.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../suites/tracing/prisma-orm-v5/test.ts      |  26 +++--
 .../src/runtime/utils/instrumentDatabase.ts   |  20 ++--
 packages/server-utils/src/exports.ts          |   2 +-
 .../server-utils/src/integrations/knex.ts     |  11 +-
 .../server-utils/src/integrations/mysql.ts    |  13 +--
 .../src/integrations/mysql2/index.ts          |  15 ++-
 .../mysql2/mysql2-dc-subscriber.ts            |  17 +--
 .../server-utils/src/integrations/neon.ts     |  15 +--
 .../src/integrations/postgres-js.ts           |  21 ++--
 .../server-utils/src/integrations/postgres.ts |  13 +--
 .../src/integrations/postgresjs.ts            |  31 ++----
 .../src/integrations/prisma/tracing-helper.ts |  28 ++---
 .../server-utils/src/integrations/tedious.ts  |  21 ++--
 packages/server-utils/src/utils/sql.ts        |  26 +++--
 .../test/integrations/prisma.test.ts          |  64 +++++++++--
 packages/server-utils/test/utils/sql.test.ts  | 101 ++++++------------
 16 files changed, 205 insertions(+), 219 deletions(-)

diff --git a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v5/test.ts b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v5/test.ts
index 4c528b7c3aa5..66a5787cd6a1 100644
--- a/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v5/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/prisma-orm-v5/test.ts
@@ -1,5 +1,6 @@
 import {
   DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
   DB_STATEMENT,
   DB_SYSTEM,
   SENTRY_KIND,
@@ -15,6 +16,13 @@ afterAll(() => {
   cleanupChildProcesses();
 });
 
+// Prisma 5 only reports the raw `db.statement`; `db.query.text` is the SDK's sanitized copy of it.
+const INSERT_USER_QUERY_TEXT =
+  'INSERT INTO "public"."User" ("createdAt","email","name") VALUES ($1,$2,$3) RETURNING "public"."User"."id", "public"."User"."createdAt", "public"."User"."email", "public"."User"."name"';
+const SELECT_USER_QUERY_TEXT =
+  'SELECT "public"."User"."id", "public"."User"."createdAt", "public"."User"."email", "public"."User"."name" FROM "public"."User" WHERE ?=? OFFSET $1';
+const DELETE_USER_QUERY_TEXT = 'DELETE FROM "public"."User" WHERE "public"."User"."email"::text LIKE $1';
+
 const ADDITIONAL_DEPENDENCIES = {
   '@prisma/client': '5.22.0',
   prisma: '5.22.0',
@@ -82,6 +90,7 @@ function expectPrismaV5Spans(container: SerializedStreamedSpanContainer): void {
       expect.objectContaining({
         attributes: expect.objectContaining({
           [DB_STATEMENT]: { type: 'string', value: expect.stringContaining('INSERT INTO') },
+          [DB_QUERY_TEXT]: { type: 'string', value: INSERT_USER_QUERY_TEXT },
           [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "public"."User"' },
           [DB_SYSTEM]: { type: 'string', value: 'postgresql' },
           [SENTRY_KIND]: { type: 'string', value: 'client' },
@@ -94,6 +103,7 @@ function expectPrismaV5Spans(container: SerializedStreamedSpanContainer): void {
       expect.objectContaining({
         attributes: expect.objectContaining({
           [DB_STATEMENT]: { type: 'string', value: expect.stringContaining('SELECT') },
+          [DB_QUERY_TEXT]: { type: 'string', value: SELECT_USER_QUERY_TEXT },
           [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "public"."User"' },
           [DB_SYSTEM]: { type: 'string', value: 'postgresql' },
           [SENTRY_KIND]: { type: 'string', value: 'client' },
@@ -106,6 +116,7 @@ function expectPrismaV5Spans(container: SerializedStreamedSpanContainer): void {
       expect.objectContaining({
         attributes: expect.objectContaining({
           [DB_STATEMENT]: { type: 'string', value: expect.stringContaining('DELETE') },
+          [DB_QUERY_TEXT]: { type: 'string', value: DELETE_USER_QUERY_TEXT },
           [DB_QUERY_SUMMARY]: { type: 'string', value: 'DELETE "public"."User"' },
           [DB_SYSTEM]: { type: 'string', value: 'postgresql' },
           [SENTRY_KIND]: { type: 'string', value: 'client' },
@@ -124,15 +135,16 @@ function expectPrismaV5Spans(container: SerializedStreamedSpanContainer): void {
     querySpans.map(span => ({
       name: span.name,
       summary: span.attributes[DB_QUERY_SUMMARY]?.value,
+      text: span.attributes[DB_QUERY_TEXT]?.value,
     })),
   ).toEqual([
-    { name: 'INSERT "public"."User"', summary: 'INSERT "public"."User"' },
-    { name: 'SELECT "public"."User"', summary: 'SELECT "public"."User"' },
-    { name: 'BEGIN', summary: 'BEGIN' },
-    { name: 'INSERT "public"."User"', summary: 'INSERT "public"."User"' },
-    { name: 'SELECT "public"."User"', summary: 'SELECT "public"."User"' },
-    { name: 'COMMIT', summary: 'COMMIT' },
-    { name: 'DELETE "public"."User"', summary: 'DELETE "public"."User"' },
+    { name: 'INSERT "public"."User"', summary: 'INSERT "public"."User"', text: INSERT_USER_QUERY_TEXT },
+    { name: 'SELECT "public"."User"', summary: 'SELECT "public"."User"', text: SELECT_USER_QUERY_TEXT },
+    { name: 'BEGIN', summary: 'BEGIN', text: 'BEGIN' },
+    { name: 'INSERT "public"."User"', summary: 'INSERT "public"."User"', text: INSERT_USER_QUERY_TEXT },
+    { name: 'SELECT "public"."User"', summary: 'SELECT "public"."User"', text: SELECT_USER_QUERY_TEXT },
+    { name: 'COMMIT', summary: 'COMMIT', text: 'COMMIT' },
+    { name: 'DELETE "public"."User"', summary: 'DELETE "public"."User"', text: DELETE_USER_QUERY_TEXT },
   ]);
 
   // The raw engine span name must never leak through.
diff --git a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
index 5efa767e5b1d..946a09146723 100644
--- a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
@@ -13,16 +13,10 @@ import {
   type StartSpanOptions,
 } from '@sentry/core';
 import { flushIfServerless } from '@sentry/core/server';
-import { sanitizeSqlQuery, sanitizeSqlQueryWithSummary, type SqlDialect } from '@sentry/server-utils';
+import { getSqlQueryAttributes, sanitizeSqlQuery, type SqlDialect } from '@sentry/server-utils';
 import type { Database, PreparedStatement } from 'db0';
 import { type DatabaseConnectionConfig, type DatabaseSpanData, getDatabaseSpanData } from './database-span-data';
-import {
-  DB_NAMESPACE,
-  DB_OPERATION_NAME,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
-  DB_SYSTEM_NAME,
-} from '@sentry/conventions/attributes';
+import { DB_NAMESPACE, DB_QUERY_SUMMARY, DB_QUERY_TEXT, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
 
 type MaybeInstrumentedDatabase = Database & {
   __sentry_instrumented__?: boolean;
@@ -267,20 +261,18 @@ function createStartSpanOptions(
   data: DatabaseSpanData,
   dialect: SqlDialect | undefined,
 ): StartSpanOptions {
-  const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(query, dialect);
+  const queryAttributes = getSqlQueryAttributes(query, dialect);
 
   const client = getClient();
   const name =
     client && hasSpanStreamingEnabled(client)
-      ? querySummary || (data[DB_NAMESPACE] as string | undefined) || DB_SPAN_NAME_FALLBACK
-      : (queryText ?? DB_SPAN_NAME_FALLBACK);
+      ? queryAttributes[DB_QUERY_SUMMARY] || (data[DB_NAMESPACE] as string | undefined) || DB_SPAN_NAME_FALLBACK
+      : (queryAttributes[DB_QUERY_TEXT] ?? DB_SPAN_NAME_FALLBACK);
 
   return {
     name,
     attributes: {
-      [DB_QUERY_TEXT]: queryText,
-      [DB_QUERY_SUMMARY]: querySummary,
-      [DB_OPERATION_NAME]: operationName,
+      ...queryAttributes,
       [SENTRY_ORIGIN]: NUXT_DATABASE_ORIGIN,
       [SENTRY_OP]: DB_QUERY,
       ...data,
diff --git a/packages/server-utils/src/exports.ts b/packages/server-utils/src/exports.ts
index 799ed7c69d18..c22a5f605d68 100644
--- a/packages/server-utils/src/exports.ts
+++ b/packages/server-utils/src/exports.ts
@@ -5,7 +5,7 @@ export type { ServerRequestHandlerConfig } from './utils/wrapServerRequestHandle
 export { setAsyncLocalStorageAsyncContextStrategy } from './async-context';
 export { openTelemetryIntegration, getOtlpTracesEndpoint } from './opentelemetry';
 export * from './ai';
-export { getSqlQuerySummary, sanitizeSqlQuery, sanitizeSqlQueryWithSummary } from './utils/sql';
+export { getSqlQuerySummary, sanitizeSqlQuery, getSqlQueryAttributes } from './utils/sql';
 export type { SqlDialect } from './utils/sql';
 export { instrumentPostgresJsSql } from './integrations/postgresjs';
 export type { PostgresConnectionContext } from './integrations/postgresjs';
diff --git a/packages/server-utils/src/integrations/knex.ts b/packages/server-utils/src/integrations/knex.ts
index bdc3d4dac16f..4fce7d37673e 100644
--- a/packages/server-utils/src/integrations/knex.ts
+++ b/packages/server-utils/src/integrations/knex.ts
@@ -34,7 +34,7 @@ import { DEBUG_BUILD } from '../debug-build';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
-import { sanitizeSqlQueryWithSummary, toSqlDialect } from '../utils/sql';
+import { getSqlQueryAttributes, toSqlDialect } from '../utils/sql';
 
 // NOTE: this uses the same name as the OTel integration by design. `@sentry/node`'s `knexIntegration`
 // picks this subscriber over the vendored OTel path when orchestrion injection is active.
@@ -165,7 +165,7 @@ function subscribeQuery(): void {
       const dbSystem = mapSystem(client?.driverName);
 
       const dialect = toSqlDialect(client?.driverName);
-      const { queryText: dbStatement, querySummary } = sanitizeSqlQueryWithSummary(
+      const queryAttributes = getSqlQueryAttributes(
         query?.sql ? truncate(query.sql, MAX_QUERY_LENGTH) : undefined,
         dialect,
       );
@@ -173,6 +173,7 @@ function subscribeQuery(): void {
         [SENTRY_OP]: DB,
         [SENTRY_KIND]: 'client',
         [SENTRY_ORIGIN]: ORIGIN,
+        ...queryAttributes,
         'knex.version': data.moduleVersion,
         [DB_SYSTEM_NAME]: dbSystem,
         [ATTR_DB_SQL_TABLE]: table,
@@ -182,15 +183,13 @@ function subscribeQuery(): void {
         [SERVER_ADDRESS]: connection?.host ?? extractHostFromConnectionString(connectionString),
         [SERVER_PORT]: connection?.port ?? extractPortFromConnectionString(connectionString),
         [NETWORK_TRANSPORT]: connection?.filename === ':memory:' ? 'inproc' : undefined,
-        [DB_QUERY_TEXT]: dbStatement,
-        [DB_QUERY_SUMMARY]: querySummary,
       };
 
       const sentryClient = getClient();
       const spanName =
         sentryClient && hasSpanStreamingEnabled(sentryClient)
-          ? querySummary || getSecondaryStreamName(dbSystem, dbNameSpace, operation, table)
-          : (dbStatement ?? getName(dbNameSpace, operation, table) ?? 'knex.query');
+          ? queryAttributes[DB_QUERY_SUMMARY] || getSecondaryStreamName(dbSystem, dbNameSpace, operation, table)
+          : (queryAttributes[DB_QUERY_TEXT] ?? getName(dbNameSpace, operation, table) ?? 'knex.query');
 
       return startInactiveSpan({
         name: spanName,
diff --git a/packages/server-utils/src/integrations/mysql.ts b/packages/server-utils/src/integrations/mysql.ts
index 599edf59392f..2d7105005ec1 100644
--- a/packages/server-utils/src/integrations/mysql.ts
+++ b/packages/server-utils/src/integrations/mysql.ts
@@ -1,7 +1,6 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
-  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -24,7 +23,7 @@ import {
   hasSpanStreamingEnabled,
   startInactiveSpan,
 } from '@sentry/core';
-import { sanitizeSqlQueryWithSummary } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
@@ -82,13 +81,13 @@ function instrumentMysql(): void {
       // handler with the caller's context lost. `deferSpanEnd` replays this scope onto the emitter.
       data._sentryCallerScope = getCurrentScope();
 
-      const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(sql, 'mysql');
+      const queryAttributes = getSqlQueryAttributes(sql, 'mysql');
 
       const client = getClient();
       const name =
         client && hasSpanStreamingEnabled(client)
-          ? querySummary || database || DB_SYSTEM_NAME_VALUE_MYSQL
-          : (queryText ?? 'mysql.query');
+          ? queryAttributes[DB_QUERY_SUMMARY] || database || DB_SYSTEM_NAME_VALUE_MYSQL
+          : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql.query');
 
       return startInactiveSpan({
         name,
@@ -101,9 +100,7 @@ function instrumentMysql(): void {
           [DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
           [DB_NAMESPACE]: database,
           [DB_USER]: user,
-          [DB_QUERY_TEXT]: queryText,
-          [DB_QUERY_SUMMARY]: querySummary,
-          [DB_OPERATION_NAME]: operationName,
+          ...queryAttributes,
           [SERVER_ADDRESS]: host,
           [SERVER_PORT]: portIsNumber ? portNumber : undefined,
         },
diff --git a/packages/server-utils/src/integrations/mysql2/index.ts b/packages/server-utils/src/integrations/mysql2/index.ts
index 88bc7cb0ab98..45b04f1797c5 100644
--- a/packages/server-utils/src/integrations/mysql2/index.ts
+++ b/packages/server-utils/src/integrations/mysql2/index.ts
@@ -8,7 +8,7 @@ import {
   startInactiveSpan,
   waitForTracingChannelBinding,
 } from '@sentry/core';
-import { sanitizeSqlQueryWithSummary } from '../../utils/sql';
+import { getSqlQueryAttributes } from '../../utils/sql';
 import { subscribeMysql2DiagnosticChannels } from './mysql2-dc-subscriber';
 import type { OrchestrionChannelContext } from '../../orchestrion/types';
 import type { ChannelName } from '../../orchestrion/channels';
@@ -18,7 +18,6 @@ import { mysql2ModuleNames } from '../../orchestrion/config/mysql2';
 import { invokeOrchestrionInstrumentation } from '../../orchestrion/instrumentation';
 import {
   DB_NAMESPACE,
-  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -78,13 +77,15 @@ function subscribeQueryChannel(channelName: ChannelName): void {
   bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<Mysql2QueryChannelContext>(channelName), data => {
     const statement = getQueryText(data.arguments);
     const connectionAttributes = getConnectionAttributes(data.self?.config);
-    const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(statement, 'mysql');
+    const queryAttributes = getSqlQueryAttributes(statement, 'mysql');
 
     const client = getClient();
     const name =
       client && hasSpanStreamingEnabled(client)
-        ? querySummary || (connectionAttributes[DB_NAMESPACE] as string | undefined) || DB_SYSTEM_VALUE_MYSQL
-        : (queryText ?? 'mysql2.query');
+        ? queryAttributes[DB_QUERY_SUMMARY] ||
+          (connectionAttributes[DB_NAMESPACE] as string | undefined) ||
+          DB_SYSTEM_VALUE_MYSQL
+        : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql2.query');
 
     return startInactiveSpan({
       name,
@@ -94,9 +95,7 @@ function subscribeQueryChannel(channelName: ChannelName): void {
         [SENTRY_ORIGIN]: ORIGIN,
         [SENTRY_OP]: DB,
         [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
-        [DB_QUERY_TEXT]: queryText || undefined,
-        [DB_QUERY_SUMMARY]: querySummary,
-        [DB_OPERATION_NAME]: operationName,
+        ...queryAttributes,
         ...connectionAttributes,
       },
     });
diff --git a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
index 2a5cc75fd56c..2377c0681fd6 100644
--- a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
+++ b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
@@ -1,7 +1,6 @@
 import type { TracingChannel } from 'node:diagnostics_channel';
 import {
   DB_NAMESPACE,
-  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -13,7 +12,7 @@ import {
 import { DB } from '@sentry/conventions/op';
 import { getClient, hasSpanStreamingEnabled, startInactiveSpan } from '@sentry/core';
 import { bindTracingChannelToSpan } from '../../tracing-channel';
-import { sanitizeSqlQueryWithSummary } from '../../utils/sql';
+import { getSqlQueryAttributes } from '../../utils/sql';
 
 // Channel names published by mysql2 >= 3.20.0 (see mysql2 `lib/tracing.js`).
 // Hardcoded so the subscriber does not have to import mysql2 — the channels
@@ -26,9 +25,6 @@ export const MYSQL2_DC_CHANNEL_POOL_CONNECT = 'mysql2:pool:connect';
 const ORIGIN = 'auto.db.mysql2.native_channel';
 const DB_SYSTEM_NAME_VALUE_MYSQL = 'mysql';
 
-// Leading keyword of a SQL statement (SELECT, INSERT, …) → `db.operation.name`.
-const SQL_OPERATION_RE = /^\s*(\w+)/;
-
 /**
  * Shape of the context object mysql2 >= 3.20.0 publishes on its query/execute
  * tracing channels (see mysql2 `lib/base/connection.js`).
@@ -96,14 +92,13 @@ function setupQueryChannel(tracingChannel: MySQL2TracingChannelFactory, channelN
     // mysql2 does not sanitize its channel payload, so the statement may carry
     // raw user values (on the `query` channel they are inlined). Strip every
     // literal before it leaves the process; `values` is never attached.
-    const { queryText, querySummary } = sanitizeSqlQueryWithSummary(data.query, 'mysql');
-    const operation = queryText?.match(SQL_OPERATION_RE)?.[1]?.toUpperCase();
+    const queryAttributes = getSqlQueryAttributes(data.query, 'mysql');
 
     const client = getClient();
     const name =
       client && hasSpanStreamingEnabled(client)
-        ? querySummary || data.database || DB_SYSTEM_NAME_VALUE_MYSQL
-        : queryText || 'mysql2.query';
+        ? queryAttributes[DB_QUERY_SUMMARY] || data.database || DB_SYSTEM_NAME_VALUE_MYSQL
+        : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql2.query');
 
     return startInactiveSpan({
       name,
@@ -112,9 +107,7 @@ function setupQueryChannel(tracingChannel: MySQL2TracingChannelFactory, channelN
         [SENTRY_ORIGIN]: ORIGIN,
         [SENTRY_OP]: DB,
         [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
-        [DB_QUERY_TEXT]: queryText,
-        [DB_QUERY_SUMMARY]: querySummary,
-        [DB_OPERATION_NAME]: operation,
+        ...queryAttributes,
         [DB_NAMESPACE]: data.database || undefined,
         [SERVER_ADDRESS]: data.serverAddress,
         [SERVER_PORT]: data.serverPort,
diff --git a/packages/server-utils/src/integrations/neon.ts b/packages/server-utils/src/integrations/neon.ts
index 349fb7d7ab84..3a33aef801d7 100644
--- a/packages/server-utils/src/integrations/neon.ts
+++ b/packages/server-utils/src/integrations/neon.ts
@@ -12,7 +12,7 @@ import {
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Span } from '@sentry/core';
 import { defineIntegration, getActiveSpan, startInactiveSpan } from '@sentry/core';
-import { sanitizeSqlQueryWithSummary } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 import { CHANNELS } from '../orchestrion/channels';
 import { neonModuleNames } from '../orchestrion/config/neon';
 import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
@@ -99,10 +99,11 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
   const statements = (Array.isArray(queryData) ? queryData : [queryData])
     .map(getQueryText)
     .filter((text): text is string => !!text)
-    .map(text => sanitizeSqlQueryWithSummary(text));
-  const queryText = joinDefined(statements.map(s => s.queryText));
-  const querySummary = joinDefined(statements.map(s => s.querySummary));
-  const operationName = batchSize === undefined ? statements[0]?.operationName : getBatchOperationName(statements);
+    .map(text => getSqlQueryAttributes(text));
+  const queryText = joinDefined(statements.map(s => s[DB_QUERY_TEXT]));
+  const querySummary = joinDefined(statements.map(s => s[DB_QUERY_SUMMARY]));
+  const operationName =
+    batchSize === undefined ? statements[0]?.[DB_OPERATION_NAME] : getBatchOperationName(statements);
   const name = querySummary || DB_SYSTEM_POSTGRESQL;
 
   return {
@@ -122,8 +123,8 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
 }
 
 // OTel names a batch `BATCH <op>` when every statement shares one operation, plain `BATCH` otherwise.
-function getBatchOperationName(statements: { operationName: string | undefined }[]): string {
-  const operations = new Set(statements.map(s => s.operationName?.toUpperCase()));
+function getBatchOperationName(statements: ReturnType<typeof getSqlQueryAttributes>[]): string {
+  const operations = new Set(statements.map(s => s[DB_OPERATION_NAME]?.toUpperCase()));
   const [operation] = operations;
   return operations.size === 1 && operation ? `BATCH ${operation}` : 'BATCH';
 }
diff --git a/packages/server-utils/src/integrations/postgres-js.ts b/packages/server-utils/src/integrations/postgres-js.ts
index 92e813e82ce3..ab595d277c47 100644
--- a/packages/server-utils/src/integrations/postgres-js.ts
+++ b/packages/server-utils/src/integrations/postgres-js.ts
@@ -21,11 +21,10 @@ import {
   startInactiveSpan,
 } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQuerySummary, sanitizeSqlQuery } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 import {
   _buildConnectionContext,
   _getConnectionAttributes,
-  _getOperationName,
   _reconstructQuery,
   type PostgresConnectionContext,
 } from './postgresjs';
@@ -165,7 +164,7 @@ function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext):
  * there. Wrapping happens at handle-start because `reject` can fire
  * synchronously during dispatch and `cursor()` reassigns both before executing.
  */
-function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, sanitizedSqlQuery: string): void {
+function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operationName: string | undefined): void {
   const query = data.self;
   if (!query) {
     return;
@@ -184,7 +183,7 @@ function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, sanitized
       try {
         const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
         // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-        span.setAttribute(DB_OPERATION_NAME, _getOperationName(sanitizedSqlQuery, command));
+        span.setAttribute(DB_OPERATION_NAME, command || operationName);
         span.end();
       } catch (e) {
         DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in resolve:', e);
@@ -272,10 +271,8 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
         return undefined;
       }
 
-      const fullQuery = _reconstructQuery(query.strings);
-      const sanitizedSqlQuery = sanitizeSqlQuery(fullQuery);
-
-      const querySummary = getSqlQuerySummary(sanitizedSqlQuery);
+      const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
+      const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
 
       const client = getClient();
 
@@ -285,7 +282,7 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
 
       const name =
         client && hasSpanStreamingEnabled(client)
-          ? querySummary || context?.ATTR_DB_NAMESPACE || DB_SYSTEM_NAME_POSTGRES
+          ? queryAttributes[DB_QUERY_SUMMARY] || context?.ATTR_DB_NAMESPACE || DB_SYSTEM_NAME_POSTGRES
           : sanitizedSqlQuery || 'postgresjs.query';
 
       // `sentry.kind: client` matches the mysql/pg channel subscribers.
@@ -297,9 +294,7 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
           [SENTRY_KIND]: 'client',
           [SENTRY_ORIGIN]: ORIGIN,
           [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
-          [DB_QUERY_TEXT]: sanitizedSqlQuery,
-          [DB_QUERY_SUMMARY]: querySummary,
-          [DB_OPERATION_NAME]: _getOperationName(sanitizedSqlQuery),
+          ...queryAttributes,
         },
       });
 
@@ -319,7 +314,7 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
         }
       }
 
-      wrapQuerySettlement(data, span, sanitizedSqlQuery);
+      wrapQuerySettlement(data, span, queryAttributes[DB_OPERATION_NAME]);
 
       return span;
     },
diff --git a/packages/server-utils/src/integrations/postgres.ts b/packages/server-utils/src/integrations/postgres.ts
index ed39a15bf1c7..182d4f2752cf 100644
--- a/packages/server-utils/src/integrations/postgres.ts
+++ b/packages/server-utils/src/integrations/postgres.ts
@@ -1,7 +1,6 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
-  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
@@ -24,7 +23,7 @@ import {
   hasSpanStreamingEnabled,
   startInactiveSpan,
 } from '@sentry/core';
-import { sanitizeSqlQueryWithSummary } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
@@ -190,11 +189,11 @@ function querySpanOptions(
   const params = (ctx.self as { connectionParameters?: PgConnectionParams } | undefined)?.connectionParameters ?? {};
   const queryConfig = extractQueryConfig(ctx.arguments);
   const client = getClient();
-  const { queryText, querySummary, operationName } = sanitizeSqlQueryWithSummary(queryConfig?.text);
+  const queryAttributes = getSqlQueryAttributes(queryConfig?.text);
   const name =
     client && hasSpanStreamingEnabled(client)
-      ? querySummary || params.database || DB_SYSTEM_POSTGRESQL
-      : (queryText ?? SPAN_QUERY_FALLBACK);
+      ? queryAttributes[DB_QUERY_SUMMARY] || params.database || DB_SYSTEM_POSTGRESQL
+      : (queryAttributes[DB_QUERY_TEXT] ?? SPAN_QUERY_FALLBACK);
 
   return {
     name,
@@ -202,9 +201,7 @@ function querySpanOptions(
       [SENTRY_OP]: DB,
       ...(connectionString ? getPgConnectionAttributes(params) : getConnectionAttributes(params)),
       [SENTRY_ORIGIN]: origin,
-      [DB_QUERY_TEXT]: queryText || undefined,
-      [DB_QUERY_SUMMARY]: querySummary,
-      [DB_OPERATION_NAME]: operationName,
+      ...queryAttributes,
       [ATTR_PG_PLAN]: typeof queryConfig?.name === 'string' ? queryConfig.name : undefined,
     },
   };
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs.ts
index c8f11e709f48..3b42f0c80f50 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs.ts
@@ -15,7 +15,7 @@ import {
   startSpanManual,
 } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQuerySummary, sanitizeSqlQuery } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 import {
   DB_NAMESPACE,
   DB_OPERATION_NAME,
@@ -31,8 +31,6 @@ import {
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 
-const SQL_OPERATION_REGEX = /^(SELECT|INSERT|UPDATE|DELETE|CREATE|DROP|ALTER)/i;
-
 export type PostgresConnectionContext = {
   ATTR_DB_NAMESPACE?: string;
   ATTR_SERVER_ADDRESS?: string;
@@ -246,11 +244,10 @@ function _wrapSingleQueryHandle(
       return originalHandle.apply(this, args);
     }
 
-    const fullQuery = _reconstructQuery(query.strings);
-    const sanitizedSqlQuery = sanitizeSqlQuery(fullQuery);
+    const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
+    const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
 
     const client = getClient();
-    const querySummary = getSqlQuerySummary(sanitizedSqlQuery);
 
     const connectionContext = sqlInstance
       ? ((sqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as PostgresConnectionContext | undefined)
@@ -258,7 +255,7 @@ function _wrapSingleQueryHandle(
 
     const name =
       client && hasSpanStreamingEnabled(client)
-        ? querySummary || connectionContext?.ATTR_DB_NAMESPACE || 'postgres'
+        ? queryAttributes[DB_QUERY_SUMMARY] || connectionContext?.ATTR_DB_NAMESPACE || 'postgres'
         : sanitizedSqlQuery || 'postgresjs.query';
 
     return startSpanManual(
@@ -268,9 +265,7 @@ function _wrapSingleQueryHandle(
           [SENTRY_OP]: DB,
           [SENTRY_ORIGIN]: 'auto.db.postgresjs',
           [DB_SYSTEM_NAME]: 'postgres',
-          [DB_QUERY_TEXT]: sanitizedSqlQuery,
-          [DB_QUERY_SUMMARY]: querySummary,
-          [DB_OPERATION_NAME]: _getOperationName(sanitizedSqlQuery),
+          ...queryAttributes,
           ...(connectionContext && _getConnectionAttributes(connectionContext)),
         },
       },
@@ -293,7 +288,7 @@ function _wrapSingleQueryHandle(
           apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
             try {
               // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-              span.setAttribute(DB_OPERATION_NAME, _getOperationName(sanitizedSqlQuery, resolveArgs?.[0]?.command));
+              span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
               span.end();
             } catch (e) {
               DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
@@ -396,20 +391,6 @@ export function _getConnectionAttributes(connectionContext: PostgresConnectionCo
   return attributes;
 }
 
-/**
- * Extracts the DB operation name from a SQL query, preferring the server-reported `command`.
- *
- * @internal Exported for the diagnostics-channel integration.
- */
-export function _getOperationName(sanitizedQuery: string | undefined, command?: string): string | undefined {
-  if (command) {
-    return command;
-  }
-  // Fallback: extract operation from the SQL query
-  const operationMatch = sanitizedQuery?.match(SQL_OPERATION_REGEX);
-  return operationMatch?.[1]?.toUpperCase();
-}
-
 /**
  * Builds a {@link PostgresConnectionContext} from postgres.js' parsed options
  * (which store `host`/`port` as arrays). Defaults to 'localhost'/5432.
diff --git a/packages/server-utils/src/integrations/prisma/tracing-helper.ts b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
index 8527efee244d..9d26d09cf5b8 100644
--- a/packages/server-utils/src/integrations/prisma/tracing-helper.ts
+++ b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
@@ -26,7 +26,6 @@ import {
 import { DEBUG_BUILD } from '../../debug-build';
 import type { EngineSpan, ExtendedSpanOptions, SpanCallback, TracingHelper } from './types';
 import {
-  DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_STATEMENT,
@@ -36,13 +35,7 @@ import {
   SENTRY_OP,
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
-import {
-  getSqlOperationName,
-  getSqlQuerySummary,
-  sanitizeSqlQuery,
-  type SqlDialect,
-  toSqlDialect,
-} from '../../utils/sql';
+import { getSqlQueryAttributes, type SqlDialect, toSqlDialect } from '../../utils/sql';
 
 // Reading `process.env` can throw in runtimes that gate env access (e.g. Deno without `--allow-env`)
 // and `process` may be absent altogether (edge runtimes), so this degrades to `false` in those cases.
@@ -103,9 +96,17 @@ function registerPrismaSpan(id: string, span: Span): void {
  * Older Prisma versions emit `prisma:engine:db_query` spans without a db system, so it's backfilled here.
  */
 function buildSpanAttributes(name: string, attributes: Record<string, unknown> | undefined): SpanAttributes {
+  const spanAttributes: SpanAttributes = (attributes as SpanAttributes) || {};
+  const statement = getSqlStatement(name, spanAttributes);
+  const queryAttributes = getSqlQueryAttributes(statement, getSqlDialect(spanAttributes));
+
   const merged: SpanAttributes = {
-    ...(attributes as SpanAttributes | undefined),
+    ...queryAttributes,
+    ...spanAttributes,
     [SENTRY_ORIGIN]: PRISMA_ORIGIN,
+    // Always ours, so the summary (and the streamed span name built from it) is dialect-aware and
+    // consistent across Prisma versions, even if Prisma starts reporting its own.
+    [DB_QUERY_SUMMARY]: queryAttributes[DB_QUERY_SUMMARY],
   };
 
   // Prisma itself emits the deprecated `db.system` on older versions, so both spellings are checked
@@ -120,15 +121,6 @@ function buildSpanAttributes(name: string, attributes: Record<string, unknown> |
     merged[SENTRY_OP] = 'db';
   }
 
-  const statement = getSqlStatement(name, merged);
-  if (statement) {
-    // Sanitized before summarizing, so that a string literal containing `from`/`join` can't leak a
-    // value into the summary.
-    const queryText = sanitizeSqlQuery(statement, getSqlDialect(merged));
-    merged[DB_QUERY_SUMMARY] = getSqlQuerySummary(queryText);
-    merged[DB_OPERATION_NAME] ??= getSqlOperationName(queryText);
-  }
-
   return merged;
 }
 
diff --git a/packages/server-utils/src/integrations/tedious.ts b/packages/server-utils/src/integrations/tedious.ts
index b584d8582699..b75080aa7471 100644
--- a/packages/server-utils/src/integrations/tedious.ts
+++ b/packages/server-utils/src/integrations/tedious.ts
@@ -30,7 +30,7 @@ import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { tediousModuleNames } from '../orchestrion/config/tedious';
 import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
-import { getSqlOperationName, getSqlQuerySummary, sanitizeSqlQuery } from '../utils/sql';
+import { getSqlQueryAttributes } from '../utils/sql';
 
 // NOTE: this uses the same name as the OTel integration by design. When orchestrion injection is active,
 // `_init` swaps the OTel `Tedious` integration out of the defaults and appends this one (matched by name).
@@ -132,10 +132,12 @@ function subscribeQuery(channelName: string, operation: string): void {
 
     const databaseName = connection[currentDatabaseSymbol];
     const sql = extractSql(request);
-    const queryText = sql ? sanitizeSqlQuery(sql, 'mssql') : undefined;
-    const isProcedureCall = operation === 'callProcedure';
-    const querySummary = queryText && !isProcedureCall ? getSqlQuerySummary(queryText) : undefined;
-    const operationName = isProcedureCall ? undefined : getSqlOperationName(queryText);
+    const queryAttributes = getSqlQueryAttributes(sql, 'mssql');
+    if (operation === 'callProcedure') {
+      // `sql` is the procedure name here rather than a statement, so there is nothing to summarize.
+      queryAttributes[DB_QUERY_SUMMARY] = undefined;
+      queryAttributes[DB_OPERATION_NAME] = undefined;
+    }
 
     const attributes: SpanAttributes = {
       [SENTRY_OP]: DB,
@@ -145,9 +147,7 @@ function subscribeQuery(channelName: string, operation: string): void {
       [DB_NAMESPACE]: databaseName,
       // `>=4` uses the `authentication` object; older versions expose `userName` directly.
       [DB_USER]: connection.config?.userName ?? connection.config?.authentication?.options?.userName,
-      [DB_QUERY_TEXT]: queryText,
-      [DB_QUERY_SUMMARY]: querySummary,
-      [DB_OPERATION_NAME]: operationName,
+      ...queryAttributes,
       [ATTR_DB_SQL_TABLE]: request.table,
       [SERVER_ADDRESS]: connection.config?.server,
       [SERVER_PORT]: connection.config?.options?.port,
@@ -158,8 +158,9 @@ function subscribeQuery(channelName: string, operation: string): void {
     const span = startInactiveSpan({
       name:
         client && hasSpanStreamingEnabled(client)
-          ? querySummary || getLowCardinalitySecondarySpanName(operation, databaseName, sql, request.table)
-          : queryText || getSecondarySpanName(operation, databaseName, request.table),
+          ? queryAttributes[DB_QUERY_SUMMARY] ||
+            getLowCardinalitySecondarySpanName(operation, databaseName, sql, request.table)
+          : queryAttributes[DB_QUERY_TEXT] || getSecondarySpanName(operation, databaseName, request.table),
       attributes,
       onlyIfParent: true,
     });
diff --git a/packages/server-utils/src/utils/sql.ts b/packages/server-utils/src/utils/sql.ts
index 22198b805a67..7b7d0da67efc 100644
--- a/packages/server-utils/src/utils/sql.ts
+++ b/packages/server-utils/src/utils/sql.ts
@@ -1,3 +1,5 @@
+import { DB_OPERATION_NAME, DB_QUERY_SUMMARY, DB_QUERY_TEXT } from '@sentry/conventions/attributes';
+
 const MAX_SUMMARY_LENGTH = 255;
 
 // A single identifier: quoted (`"..."`, `'...'`, or MySQL backticks) or bare. The quoted forms have
@@ -423,15 +425,23 @@ export function sanitizeSqlQuery(sqlQuery: string | undefined, dialect: SqlDiale
 }
 
 /**
- * Sanitizes a collected SQL statement and derives the matching `db.query.summary` and
- * `db.operation.name`, the attributes the SQL integrations attach to their spans. All come back
- * `undefined` when there is no statement, so an empty query omits the attributes instead of
- * reporting the sanitizer's fallback text.
+ * Sanitizes a collected SQL statement into the query attributes the SQL integrations attach to
+ * their spans: `db.query.text`, `db.query.summary` and `db.operation.name`. All are `undefined`
+ * when there is no statement, so an empty query omits the attributes instead of reporting the
+ * sanitizer's fallback text.
  */
-export function sanitizeSqlQueryWithSummary(
+export function getSqlQueryAttributes(
   sqlQuery: string | undefined,
   dialect?: SqlDialect,
-): { queryText: string | undefined; querySummary: string | undefined; operationName: string | undefined } {
-  const queryText = sqlQuery ? sanitizeSqlQuery(sqlQuery, dialect) : undefined;
-  return { queryText, querySummary: getSqlQuerySummary(queryText), operationName: getSqlOperationName(queryText) };
+): {
+  [DB_QUERY_TEXT]: string | undefined;
+  [DB_QUERY_SUMMARY]: string | undefined;
+  [DB_OPERATION_NAME]: string | undefined;
+} {
+  const queryText = (sqlQuery && sanitizeSqlQuery(sqlQuery, dialect)) || undefined;
+  return {
+    [DB_QUERY_TEXT]: queryText,
+    [DB_QUERY_SUMMARY]: getSqlQuerySummary(queryText),
+    [DB_OPERATION_NAME]: getSqlOperationName(queryText),
+  };
 }
diff --git a/packages/server-utils/test/integrations/prisma.test.ts b/packages/server-utils/test/integrations/prisma.test.ts
index 2d02718b6d1e..967fcd9d827f 100644
--- a/packages/server-utils/test/integrations/prisma.test.ts
+++ b/packages/server-utils/test/integrations/prisma.test.ts
@@ -1,3 +1,11 @@
+import {
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_STATEMENT,
+  DB_SYSTEM,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
 import type { Span } from '@sentry/core';
 import { Client, createTransport, getCurrentScope, initAndBind, resolvedSyncPromise, spanToJSON } from '@sentry/core';
 import { afterEach, describe, expect, it } from 'vitest';
@@ -77,11 +85,11 @@ describe('instrumentPrisma', () => {
       instrumentPrisma();
 
       const span = runDbQuerySpan({
-        'db.system.name': 'postgresql',
-        'db.query.text': 'SELECT * FROM "public"."User" WHERE "bio" = $1',
+        [DB_SYSTEM_NAME]: 'postgresql',
+        [DB_QUERY_TEXT]: 'SELECT * FROM "public"."User" WHERE "bio" = $1',
       });
 
-      expect(spanToJSON(span).attributes['db.query.summary']).toBe('SELECT "public"."User"');
+      expect(spanToJSON(span).attributes[DB_QUERY_SUMMARY]).toBe('SELECT "public"."User"');
     });
 
     it.each(['mysql', 'mariadb'])('sanitizes double-quoted string literals as literals on %s', (system: string) => {
@@ -91,11 +99,55 @@ describe('instrumentPrisma', () => {
       // On MySQL `"..."` is a string literal, so treating it as a quoted identifier would let the
       // `FROM` inside a user-supplied value read as a second table.
       const span = runDbQuerySpan({
-        'db.system.name': system,
-        'db.query.text': 'SELECT * FROM `User` WHERE bio = "x FROM secret_table"',
+        [DB_SYSTEM_NAME]: system,
+        [DB_QUERY_TEXT]: 'SELECT * FROM `User` WHERE bio = "x FROM secret_table"',
       });
 
-      expect(spanToJSON(span).attributes['db.query.summary']).toBe('SELECT `User`');
+      expect(spanToJSON(span).attributes[DB_QUERY_SUMMARY]).toBe('SELECT `User`');
+    });
+
+    it('overrides a summary reported by Prisma with the one derived from the statement', () => {
+      initTestClient();
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({
+        [DB_SYSTEM_NAME]: 'postgresql',
+        [DB_QUERY_TEXT]: 'SELECT * FROM "public"."User" WHERE "bio" = $1',
+        [DB_QUERY_SUMMARY]: 'prisma summary',
+      });
+
+      expect(spanToJSON(span).attributes[DB_QUERY_SUMMARY]).toBe('SELECT "public"."User"');
+    });
+  });
+
+  describe('db.query.text', () => {
+    it('backfills the sanitized statement when Prisma only reports db.statement', () => {
+      initTestClient();
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({
+        [DB_SYSTEM]: 'postgresql',
+        [DB_STATEMENT]: 'SELECT * FROM "public"."User" WHERE "bio" = \'secret\' LIMIT 10',
+      });
+
+      expect(spanToJSON(span).attributes).toMatchObject({
+        [DB_STATEMENT]: 'SELECT * FROM "public"."User" WHERE "bio" = \'secret\' LIMIT 10',
+        [DB_QUERY_TEXT]: 'SELECT * FROM "public"."User" WHERE "bio" = ? LIMIT ?',
+        [DB_QUERY_SUMMARY]: 'SELECT "public"."User"',
+        [DB_OPERATION_NAME]: 'SELECT',
+      });
+    });
+
+    it("keeps Prisma's own db.query.text", () => {
+      initTestClient();
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({
+        [DB_SYSTEM_NAME]: 'postgresql',
+        [DB_QUERY_TEXT]: 'SELECT * FROM "public"."User" WHERE 1=1 OFFSET $1',
+      });
+
+      expect(spanToJSON(span).attributes[DB_QUERY_TEXT]).toBe('SELECT * FROM "public"."User" WHERE 1=1 OFFSET $1');
     });
   });
 
diff --git a/packages/server-utils/test/utils/sql.test.ts b/packages/server-utils/test/utils/sql.test.ts
index dfd1e2cbe814..580f1b4c847a 100644
--- a/packages/server-utils/test/utils/sql.test.ts
+++ b/packages/server-utils/test/utils/sql.test.ts
@@ -1,9 +1,10 @@
+import { DB_OPERATION_NAME, DB_QUERY_SUMMARY, DB_QUERY_TEXT } from '@sentry/conventions/attributes';
 import { describe, expect, it } from 'vitest';
 import {
   getSqlOperationName,
   getSqlQuerySummary,
+  getSqlQueryAttributes,
   sanitizeSqlQuery,
-  sanitizeSqlQueryWithSummary,
   toSqlDialect,
 } from '../../src/utils/sql';
 
@@ -894,46 +895,6 @@ describe('sanitizeSqlQuery', () => {
   });
 });
 
-describe('sanitizeSqlQueryWithSummary', () => {
-  it('returns the sanitized statement and its summary', () => {
-    expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE email = 'jane@example.com'")).toEqual({
-      queryText: 'SELECT * FROM users WHERE email = ?',
-      querySummary: 'SELECT users',
-      operationName: 'SELECT',
-    });
-  });
-
-  it('passes the dialect through to the sanitizer', () => {
-    expect(sanitizeSqlQueryWithSummary('SELECT * FROM users WHERE email = "jane@example.com"', 'mysql')).toEqual({
-      queryText: 'SELECT * FROM users WHERE email = ?',
-      querySummary: 'SELECT users',
-      operationName: 'SELECT',
-    });
-  });
-
-  it("names the operation of T-SQL's `;WITH` queries", () => {
-    expect(
-      sanitizeSqlQueryWithSummary(";WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = 'a'", 'mssql'),
-    ).toMatchObject({
-      queryText: 'WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = ?',
-      operationName: 'SELECT',
-    });
-  });
-
-  it('returns undefined for all when there is no statement', () => {
-    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({
-      queryText: undefined,
-      querySummary: undefined,
-      operationName: undefined,
-    });
-    expect(sanitizeSqlQueryWithSummary('')).toEqual({
-      queryText: undefined,
-      querySummary: undefined,
-      operationName: undefined,
-    });
-  });
-});
-
 describe('toSqlDialect', () => {
   it.each([
     ['mysql', 'mysql'],
@@ -951,12 +912,12 @@ describe('toSqlDialect', () => {
   });
 });
 
-describe('sanitizeSqlQueryWithSummary', () => {
+describe('getSqlQueryAttributes', () => {
   it('returns the sanitized statement and its summary', () => {
-    expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE email = 'jane@example.com'")).toEqual({
-      queryText: 'SELECT * FROM users WHERE email = ?',
-      querySummary: 'SELECT users',
-      operationName: 'SELECT',
+    expect(getSqlQueryAttributes("SELECT * FROM users WHERE email = 'jane@example.com'")).toEqual({
+      [DB_QUERY_TEXT]: 'SELECT * FROM users WHERE email = ?',
+      [DB_QUERY_SUMMARY]: 'SELECT users',
+      [DB_OPERATION_NAME]: 'SELECT',
     });
   });
 
@@ -966,39 +927,43 @@ describe('sanitizeSqlQueryWithSummary', () => {
     ['standard' as const, 'SELECT * FROM users WHERE email = $$jane@example.com$$'],
     ['standard' as const, "SELECT * FROM users WHERE email = N'jane@example.com'"],
   ])('passes the %s dialect through to the sanitizer: %p', (dialect, input) => {
-    expect(sanitizeSqlQueryWithSummary(input, dialect)).toEqual({
-      queryText: 'SELECT * FROM users WHERE email = ?',
-      querySummary: 'SELECT users',
-      operationName: 'SELECT',
+    expect(getSqlQueryAttributes(input, dialect)).toEqual({
+      [DB_QUERY_TEXT]: 'SELECT * FROM users WHERE email = ?',
+      [DB_QUERY_SUMMARY]: 'SELECT users',
+      [DB_OPERATION_NAME]: 'SELECT',
     });
   });
 
   it('passes the mssql dialect through, so a quote inside a bracketed name stays part of the name', () => {
-    expect(sanitizeSqlQueryWithSummary("SELECT * FROM [users] WHERE [email] = 'jane@example.com'", 'mssql')).toEqual({
-      queryText: 'SELECT * FROM [users] WHERE [email] = ?',
-      querySummary: 'SELECT [users]',
-      operationName: 'SELECT',
+    expect(getSqlQueryAttributes("SELECT * FROM [users] WHERE [email] = 'jane@example.com'", 'mssql')).toEqual({
+      [DB_QUERY_TEXT]: 'SELECT * FROM [users] WHERE [email] = ?',
+      [DB_QUERY_SUMMARY]: 'SELECT [users]',
+      [DB_OPERATION_NAME]: 'SELECT',
     });
   });
 
-  it('derives the summary from the sanitized statement, not the raw one', () => {
-    expect(sanitizeSqlQueryWithSummary("SELECT * FROM users WHERE bio = 'from secret_table'")).toEqual({
-      queryText: 'SELECT * FROM users WHERE bio = ?',
-      querySummary: 'SELECT users',
-      operationName: 'SELECT',
+  it("names the operation of T-SQL's `;WITH` queries", () => {
+    expect(
+      getSqlQueryAttributes(";WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = 'a'", 'mssql'),
+    ).toMatchObject({
+      [DB_QUERY_TEXT]: 'WITH x AS (SELECT name FROM users) SELECT * FROM x WHERE name = ?',
+      [DB_OPERATION_NAME]: 'SELECT',
     });
   });
 
-  it('returns undefined for all when there is no statement', () => {
-    expect(sanitizeSqlQueryWithSummary(undefined)).toEqual({
-      queryText: undefined,
-      querySummary: undefined,
-      operationName: undefined,
+  it('derives the summary from the sanitized statement, not the raw one', () => {
+    expect(getSqlQueryAttributes("SELECT * FROM users WHERE bio = 'from secret_table'")).toEqual({
+      [DB_QUERY_TEXT]: 'SELECT * FROM users WHERE bio = ?',
+      [DB_QUERY_SUMMARY]: 'SELECT users',
+      [DB_OPERATION_NAME]: 'SELECT',
     });
-    expect(sanitizeSqlQueryWithSummary('')).toEqual({
-      queryText: undefined,
-      querySummary: undefined,
-      operationName: undefined,
+  });
+
+  it.each([undefined, '', '   ', ';'])('returns undefined for all when there is no statement: %j', input => {
+    expect(getSqlQueryAttributes(input)).toEqual({
+      [DB_QUERY_TEXT]: undefined,
+      [DB_QUERY_SUMMARY]: undefined,
+      [DB_OPERATION_NAME]: undefined,
     });
   });
 });

From 0041bc69bcadae2082ef24ddf94133249497bb06 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Fri, 30 Oct 2026 15:28:56 +0100
Subject: [PATCH 062/169] feat(node): Add `awsLambdaWebIntegration` for Lambda
 Web Functions (#25355)

This adds a new `awsLambdaWebIntegration` to the Node SDK for
instrumenting [Lambda Web
Functions](https://docs.aws.amazon.com/lambda/latest/dg/web-functions.html).
Web Functions run standard Node HTTP servers like Express or Hono,
without Lambda-specific handlers or adapters.

Enriches event contexts and segment spans with AWS metadata, request
IDs, endpoint names, and cold-start information.

Closes #25317
conventions PR for new attributes:
https://github.com/getsentry/sentry-conventions/pull/715

---------

Co-authored-by: Codex <codex@openai.com>
---
 .../node-suites/excludes.ts                   |   1 +
 .../node-suites/excludes.ts                   |   9 +-
 .../scripts/consistentExports.ts              |   1 +
 .../aws-lambda-web/requests/instrument.mjs    |   8 +
 .../aws-lambda-web/requests/scenario.mjs      |  28 +++
 .../suites/aws-lambda-web/requests/test.ts    | 111 +++++++++++
 packages/astro/src/index.server.ts            |   1 +
 packages/aws-serverless/src/index.ts          |   1 +
 packages/google-cloud-serverless/src/index.ts |   1 +
 packages/node/src/index.ts                    |   1 +
 .../node/src/integrations/awsLambdaWeb.ts     |  76 ++++++++
 packages/node/src/integrations/context.ts     |   3 +-
 packages/node/src/sdk/index.ts                |   2 +
 .../test/integrations/awsLambdaWeb.test.ts    | 181 ++++++++++++++++++
 14 files changed, 421 insertions(+), 3 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/aws-lambda-web/requests/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/aws-lambda-web/requests/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/aws-lambda-web/requests/test.ts
 create mode 100644 packages/node/src/integrations/awsLambdaWeb.ts
 create mode 100644 packages/node/test/integrations/awsLambdaWeb.test.ts

diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index 30c08744ef1d..dff3e151b26e 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -7,6 +7,7 @@
 // `node:sqlite`, which `flue` needs, and the Vercel keep-alive, which needs `http.server.response.finish`.
 const NODE_ONLY = [
   'suites/anr/test.ts',
+  'suites/aws-lambda-web/**',
   'suites/aws-serverless/**',
   'suites/breadcrumbs/**',
   'suites/child-process/test.ts',
diff --git a/dev-packages/deno-integration-tests/node-suites/excludes.ts b/dev-packages/deno-integration-tests/node-suites/excludes.ts
index bed8f796a588..e6d5906bc2c8 100644
--- a/dev-packages/deno-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/deno-integration-tests/node-suites/excludes.ts
@@ -2,8 +2,13 @@
 // fails on Deno runs only on the other runtimes, with `test.runIf(supports({ runtimes }))` in the
 // Node suite, and is not listed here.
 
-// Node-only features: ANR and native thread watchdogs, child process and worker thread breadcrumbs.
-const NODE_ONLY = ['suites/anr/test.ts', 'suites/breadcrumbs/**', 'suites/thread-blocked-native/test.ts'];
+// Node-only features: ANR and native thread watchdogs, child process and worker thread breadcrumbs, and the AWS Lambda Node runtime.
+const NODE_ONLY = [
+  'suites/anr/test.ts',
+  'suites/aws-lambda-web/**',
+  'suites/breadcrumbs/**',
+  'suites/thread-blocked-native/test.ts',
+];
 
 // `@sentry/node` instruments `fetch` through undici's diagnostics channels, which Deno's `fetch`
 // does not publish. `@sentry/deno` has its own `fetchIntegration` for this. These suites check
diff --git a/dev-packages/e2e-tests/test-applications/node-exports-test-app/scripts/consistentExports.ts b/dev-packages/e2e-tests/test-applications/node-exports-test-app/scripts/consistentExports.ts
index 6bee27e997bc..446589a1db0c 100644
--- a/dev-packages/e2e-tests/test-applications/node-exports-test-app/scripts/consistentExports.ts
+++ b/dev-packages/e2e-tests/test-applications/node-exports-test-app/scripts/consistentExports.ts
@@ -51,6 +51,7 @@ const DEPENDENTS: Dependent[] = [
     exports: Object.keys(SentryBun),
     ignoreExports: [
       // not supported in bun:
+      'awsLambdaWebIntegration',
       'NodeClient',
       'NODE_VERSION',
       'childProcessIntegration',
diff --git a/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/instrument.mjs b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/instrument.mjs
new file mode 100644
index 000000000000..d5824acab7ba
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/instrument.mjs
@@ -0,0 +1,8 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@example.com/1',
+  tracesSampleRate: process.env.NO_TRACING ? undefined : 1,
+  transport: loggingTransport,
+});
diff --git a/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/scenario.mjs b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/scenario.mjs
new file mode 100644
index 000000000000..c3fea461fdd1
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/scenario.mjs
@@ -0,0 +1,28 @@
+import * as Sentry from '@sentry/node';
+import { startExpressServerAndSendPortToRunner } from '@sentry-internal/node-integration-tests';
+import express from 'express';
+
+const app = express();
+let releaseFirst;
+const secondRequestStarted = new Promise(resolve => {
+  releaseFirst = resolve;
+});
+
+app.get('/:request', async (req, res) => {
+  if (req.params.request === 'first') {
+    process.stdout.write('FIRST_STARTED\n');
+    await secondRequestStarted;
+  } else {
+    releaseFirst();
+  }
+
+  Sentry.captureException(new Error(req.params.request));
+  Sentry.logger.info('Request handled');
+  Sentry.metrics.count('request_count', 1);
+  res.send({ ok: true });
+  setImmediate(() => {
+    void Sentry.flush();
+  });
+});
+
+startExpressServerAndSendPortToRunner(app);
diff --git a/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/test.ts b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/test.ts
new file mode 100644
index 000000000000..270e9777f8d7
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/aws-lambda-web/requests/test.ts
@@ -0,0 +1,111 @@
+import {
+  AWS_LAMBDA_WEB_ENDPOINT_NAME,
+  CLOUD_PLATFORM,
+  CLOUD_PROVIDER,
+  CLOUD_REGION,
+  FAAS_COLDSTART,
+  FAAS_INVOCATION_ID,
+  FAAS_MAX_MEMORY,
+  SENTRY_OP,
+} from '@sentry/conventions/attributes';
+import { expect, vi } from 'vitest';
+import { createEsmAndCjsTests } from '../../../utils/runner';
+
+createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+  test.each([
+    { name: 'default tracing', tracing: true },
+    { name: 'tracing disabled', tracing: false },
+  ])('$name: isolates concurrent requests and leaves logs and metrics unenriched', async ({ tracing }) => {
+    const runner = createRunner()
+      .withEnv({
+        AWS_LAMBDA_HTTP_ENDPOINT: '0.0.0.0:3000',
+        AWS_REGION: 'us-east-1',
+        AWS_LAMBDA_FUNCTION_MEMORY_SIZE: '2048',
+        AWS_LAMBDA_INITIALIZATION_TYPE: 'native-http',
+        AWS_EXECUTION_ENV: 'AWS_Lambda_nodejs24.x-lite',
+        NO_TRACING: tracing ? '' : '1',
+      })
+      .unordered();
+
+    const spans = [];
+
+    for (const request of ['first', 'second']) {
+      runner.expect({
+        event: {
+          exception: { values: [expect.objectContaining({ value: request })] },
+          contexts: {
+            cloud_resource: {
+              [CLOUD_PROVIDER]: 'aws',
+              [CLOUD_PLATFORM]: 'aws_lambda',
+              [CLOUD_REGION]: 'us-east-1',
+            },
+            'aws.lambda': {
+              memory_size: 2_147_483_648,
+              initialization_type: 'native-http',
+              cold_start: request === 'first',
+              aws_request_id: request,
+              endpoint_name: `${request}-endpoint`,
+            },
+          },
+        },
+      });
+
+      if (tracing) {
+        spans.push({
+          request,
+          collected: runner.collectStreamedSpansUntilSegment(
+            span => span.attributes[FAAS_INVOCATION_ID]?.value === request,
+          ),
+        });
+      }
+    }
+
+    const assertUnenriched = (items: { attributes?: Record<string, unknown> }[]): void => {
+      expect(items).toHaveLength(2);
+      for (const item of items) {
+        expect(Object.keys(item.attributes || {}).filter(key => /^(aws\.lambda\.|faas\.|cloud\.)/.test(key))).toEqual(
+          [],
+        );
+      }
+    };
+
+    runner.expect({ log: container => assertUnenriched(container.items) });
+    runner.expect({ trace_metric: container => assertUnenriched(container.items) });
+
+    const running = runner.start();
+    const first = running.makeRequest('get', '/first', {
+      headers: { 'lambda-web-request-id': 'first', 'lambda-web-endpoint-name': 'first-endpoint' },
+    });
+    await vi.waitFor(() => expect(running.getLogs().join('\n')).toContain('FIRST_STARTED'), { timeout: 10_000 });
+
+    await Promise.all([
+      first,
+      running.makeRequest('get', '/second', {
+        headers: { 'lambda-web-request-id': 'second', 'lambda-web-endpoint-name': 'second-endpoint' },
+      }),
+    ]);
+    await running.completed();
+
+    const segmentSpans = [];
+
+    for (const { request, collected } of spans) {
+      const items = await collected;
+      segmentSpans.push(...items.filter(item => item.is_segment));
+
+      expect(items.find(item => item.is_segment)).toMatchObject({
+        name: 'GET /:request',
+        attributes: {
+          [SENTRY_OP]: { type: 'string', value: 'http.server' },
+          [CLOUD_PLATFORM]: { type: 'string', value: 'aws_lambda' },
+          [CLOUD_REGION]: { type: 'string', value: 'us-east-1' },
+          [FAAS_MAX_MEMORY]: { type: 'integer', value: 2_147_483_648 },
+          [FAAS_COLDSTART]: { type: 'boolean', value: request === 'first' },
+          [FAAS_INVOCATION_ID]: { type: 'string', value: request },
+          [AWS_LAMBDA_WEB_ENDPOINT_NAME]: { type: 'string', value: `${request}-endpoint` },
+        },
+      });
+    }
+
+    expect(segmentSpans).toHaveLength(tracing ? 2 : 0);
+  });
+});
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index 0db5cfe2ef90..a52a7477f6bc 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -95,6 +95,7 @@ export {
   nativeNodeFetchIntegration,
   NodeClient,
   nodeContextIntegration,
+  awsLambdaWebIntegration,
   onUncaughtExceptionIntegration,
   onUnhandledRejectionIntegration,
   mistralAIIntegration,
diff --git a/packages/aws-serverless/src/index.ts b/packages/aws-serverless/src/index.ts
index 9df4b06ff240..0803fca702f5 100644
--- a/packages/aws-serverless/src/index.ts
+++ b/packages/aws-serverless/src/index.ts
@@ -78,6 +78,7 @@ export {
   type NodeRuntimeMetricsOptions,
   contextLinesIntegration,
   nodeContextIntegration,
+  awsLambdaWebIntegration,
   localVariablesIntegration,
   requestDataIntegration,
   functionToStringIntegration,
diff --git a/packages/google-cloud-serverless/src/index.ts b/packages/google-cloud-serverless/src/index.ts
index 35eddeb055a7..1f6e6979bee0 100644
--- a/packages/google-cloud-serverless/src/index.ts
+++ b/packages/google-cloud-serverless/src/index.ts
@@ -78,6 +78,7 @@ export {
   type NodeRuntimeMetricsOptions,
   contextLinesIntegration,
   nodeContextIntegration,
+  awsLambdaWebIntegration,
   localVariablesIntegration,
   requestDataIntegration,
   fsIntegration,
diff --git a/packages/node/src/index.ts b/packages/node/src/index.ts
index 5ddd71b4b9f4..7fdeb4ab4df2 100644
--- a/packages/node/src/index.ts
+++ b/packages/node/src/index.ts
@@ -1,4 +1,5 @@
 export { httpIntegration } from './integrations/http';
+export { awsLambdaWebIntegration } from './integrations/awsLambdaWeb';
 export { nativeNodeFetchIntegration } from './integrations/node-fetch';
 export { fsIntegration } from './integrations/fs';
 // oxlint-disable-next-line typescript/no-deprecated
diff --git a/packages/node/src/integrations/awsLambdaWeb.ts b/packages/node/src/integrations/awsLambdaWeb.ts
new file mode 100644
index 000000000000..42b3c5e5d86e
--- /dev/null
+++ b/packages/node/src/integrations/awsLambdaWeb.ts
@@ -0,0 +1,76 @@
+import {
+  AWS_LAMBDA_INITIALIZATION_TYPE,
+  AWS_LAMBDA_WEB_ENDPOINT_NAME,
+  FAAS_COLDSTART,
+  FAAS_INVOCATION_ID,
+  FAAS_MAX_MEMORY,
+} from '@sentry/conventions/attributes';
+import type { IntegrationFn, SpanAttributes } from '@sentry/core';
+import { defineIntegration, getIsolationScope, safeSetSpanJSONAttributes } from '@sentry/core';
+
+const INTEGRATION_NAME = 'AwsLambdaWeb';
+
+let requestHandled = false;
+
+const _awsLambdaWebIntegration = (() => {
+  // Lambda Web Functions run ordinary HTTP servers without a Lambda handler to wrap.
+  // We read their request metadata through the `httpServerRequest` hook. Since this hook
+  // runs for all HTTP servers, we bail out early when we are not in a Lambda Web Function.
+  // https://docs.aws.amazon.com/lambda/latest/dg/web-functions-revisions-env-vars.html
+  if (!process.env.AWS_LAMBDA_HTTP_ENDPOINT) {
+    return { name: INTEGRATION_NAME };
+  }
+
+  const memory = Number(process.env.AWS_LAMBDA_FUNCTION_MEMORY_SIZE) * 1024 * 1024;
+  const lambdaContext = {
+    memory_size: Number.isFinite(memory) && memory > 0 ? memory : undefined,
+    initialization_type: process.env.AWS_LAMBDA_INITIALIZATION_TYPE,
+  };
+  const environmentAttributes = {
+    [FAAS_MAX_MEMORY]: lambdaContext.memory_size,
+    [AWS_LAMBDA_INITIALIZATION_TYPE]: lambdaContext.initialization_type,
+  };
+
+  return {
+    name: INTEGRATION_NAME,
+    setup(client) {
+      client.on('httpServerRequest', (_request, _response, request) => {
+        const coldStart = !requestHandled;
+        requestHandled = true;
+        const requestId = request.headers?.['lambda-web-request-id'];
+        const endpointName = request.headers?.['lambda-web-endpoint-name'];
+        const scope = getIsolationScope();
+        scope.setContext('aws.lambda', {
+          ...scope.getScopeData().contexts['aws.lambda'],
+          cold_start: coldStart,
+          aws_request_id: typeof requestId === 'string' ? requestId : undefined,
+          endpoint_name: typeof endpointName === 'string' ? endpointName : undefined,
+        });
+      });
+    },
+    processEvent(event) {
+      event.contexts = {
+        ...event.contexts,
+        'aws.lambda': { ...lambdaContext, ...event.contexts?.['aws.lambda'] },
+      };
+      return event;
+    },
+    processSegmentSpan(span) {
+      const requestContext = getIsolationScope().getScopeData().contexts['aws.lambda'];
+      const attributes: SpanAttributes = { ...environmentAttributes };
+      if (typeof requestContext?.cold_start === 'boolean') {
+        attributes[FAAS_COLDSTART] = requestContext.cold_start;
+      }
+      if (typeof requestContext?.aws_request_id === 'string') {
+        attributes[FAAS_INVOCATION_ID] = requestContext.aws_request_id;
+      }
+      if (typeof requestContext?.endpoint_name === 'string') {
+        attributes[AWS_LAMBDA_WEB_ENDPOINT_NAME] = requestContext.endpoint_name;
+      }
+      safeSetSpanJSONAttributes(span, attributes);
+    },
+  };
+}) satisfies IntegrationFn;
+
+/** Enrich AWS Lambda Web Function spans and error contexts with platform metadata. */
+export const awsLambdaWebIntegration = defineIntegration(_awsLambdaWebIntegration);
diff --git a/packages/node/src/integrations/context.ts b/packages/node/src/integrations/context.ts
index ef967476b57f..b1fa7d36598c 100644
--- a/packages/node/src/integrations/context.ts
+++ b/packages/node/src/integrations/context.ts
@@ -548,10 +548,11 @@ function getCloudResourceContext(): CloudResourceContext | undefined {
     };
   } else if (process.env.AWS_REGION) {
     // https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html
+    const executionEnv = process.env.AWS_EXECUTION_ENV;
     return {
       [CLOUD_PROVIDER]: 'aws',
       [CLOUD_REGION]: process.env.AWS_REGION,
-      [CLOUD_PLATFORM]: process.env.AWS_EXECUTION_ENV,
+      [CLOUD_PLATFORM]: executionEnv?.startsWith('AWS_Lambda') ? 'aws_lambda' : executionEnv,
     };
   } else if (process.env.GCP_PROJECT) {
     // https://cloud.google.com/composer/docs/how-to/managing/environment-variables#reserved_variables
diff --git a/packages/node/src/sdk/index.ts b/packages/node/src/sdk/index.ts
index 57cf3871256a..ccd4601bfc8b 100644
--- a/packages/node/src/sdk/index.ts
+++ b/packages/node/src/sdk/index.ts
@@ -20,6 +20,7 @@ import {
 import { isMainThread, parentPort } from 'node:worker_threads';
 import { detectOrchestrionSetup, getErrorIntegrations, getTracingIntegrations } from '@sentry/server-utils';
 import { DEBUG_BUILD } from '../debug-build';
+import { awsLambdaWebIntegration } from '../integrations/awsLambdaWeb';
 import { childProcessIntegration } from '../integrations/childProcess';
 import { consoleIntegration } from '../integrations/console';
 import { nodeContextIntegration } from '../integrations/context';
@@ -66,6 +67,7 @@ function getBaseDefaultIntegrations(): Integration[] {
     // Event Info
     contextLinesIntegration(),
     localVariablesIntegration(),
+    awsLambdaWebIntegration(),
     nodeContextIntegration(),
     childProcessIntegration(),
     workerThreadsIntegration(),
diff --git a/packages/node/test/integrations/awsLambdaWeb.test.ts b/packages/node/test/integrations/awsLambdaWeb.test.ts
new file mode 100644
index 000000000000..cd3b30c1b716
--- /dev/null
+++ b/packages/node/test/integrations/awsLambdaWeb.test.ts
@@ -0,0 +1,181 @@
+import {
+  AWS_LAMBDA_INITIALIZATION_TYPE,
+  AWS_LAMBDA_WEB_ENDPOINT_NAME,
+  CLOUD_REGION,
+  FAAS_COLDSTART,
+  FAAS_INVOCATION_ID,
+  FAAS_MAX_MEMORY,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import type { Integration } from '@sentry/core';
+import { getCurrentScope, getIsolationScope, SentrySpan, spanToJSON, withIsolationScope } from '@sentry/core';
+import { setAsyncLocalStorageAsyncContextStrategy } from '@sentry/server-utils';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { NodeClient } from '../../src/sdk/client';
+
+describe('awsLambdaWebIntegration', () => {
+  let integration: Integration;
+  let client: NodeClient;
+
+  beforeEach(async () => {
+    vi.resetModules();
+    setAsyncLocalStorageAsyncContextStrategy();
+    vi.stubEnv('AWS_LAMBDA_HTTP_ENDPOINT', '0.0.0.0:3000');
+    vi.stubEnv('AWS_REGION', 'us-east-1');
+    vi.stubEnv('AWS_LAMBDA_FUNCTION_MEMORY_SIZE', '2048');
+    vi.stubEnv('AWS_LAMBDA_INITIALIZATION_TYPE', 'native-http');
+    const { awsLambdaWebIntegration } = await import('../../src/integrations/awsLambdaWeb');
+    integration = awsLambdaWebIntegration();
+    client = new NodeClient({
+      dsn: 'https://public@example.com/1',
+      integrations: [],
+      stackParser: () => [],
+      transport: () => ({ send: () => Promise.resolve({}), flush: () => Promise.resolve(true) }),
+    });
+    getCurrentScope().setClient(client);
+  });
+
+  afterEach(async () => {
+    client.dispose();
+    vi.restoreAllMocks();
+    await client.close();
+    getCurrentScope().setClient(undefined);
+    getIsolationScope().setContext('aws.lambda', null);
+    vi.unstubAllEnvs();
+  });
+
+  it('is inert outside Web Functions', async () => {
+    vi.stubEnv('AWS_LAMBDA_HTTP_ENDPOINT', undefined);
+    const { awsLambdaWebIntegration } = await import('../../src/integrations/awsLambdaWeb');
+    const disabled = awsLambdaWebIntegration();
+
+    expect(disabled).toEqual({ name: 'AwsLambdaWeb' });
+  });
+
+  it('preserves request and user context while adding environment metadata', () => {
+    const event = {
+      contexts: { 'aws.lambda': { aws_request_id: 'request' }, cloud_resource: { [CLOUD_REGION]: 'custom' } },
+    };
+    expect(integration.processEvent!(event, {}, client)).toEqual({
+      contexts: {
+        'aws.lambda': { aws_request_id: 'request', memory_size: 2_147_483_648, initialization_type: 'native-http' },
+        cloud_resource: { [CLOUD_REGION]: 'custom' },
+      },
+    });
+  });
+
+  it('preserves existing Lambda context while replacing request-specific values', () => {
+    integration.setup!(client);
+
+    withIsolationScope(scope => {
+      scope.setContext('aws.lambda', {
+        function_name: 'checkout',
+        revision_id: 'rev-current',
+        aws_request_id: 'previous-request',
+        endpoint_name: 'previous-endpoint',
+        cold_start: false,
+      });
+      client.emit(
+        'httpServerRequest',
+        {},
+        {},
+        { headers: { 'lambda-web-request-id': 'current-request', 'lambda-web-endpoint-name': 'prod' } },
+      );
+
+      expect(scope.getScopeData().contexts['aws.lambda']).toEqual({
+        function_name: 'checkout',
+        revision_id: 'rev-current',
+        aws_request_id: 'current-request',
+        endpoint_name: 'prod',
+        cold_start: true,
+      });
+    });
+  });
+
+  it('preserves explicit root span attributes while filling missing metadata', () => {
+    integration.setup!(client);
+
+    withIsolationScope(() => {
+      client.emit('httpServerRequest', {}, {}, { headers: { 'lambda-web-request-id': 'request' } });
+      const span = new SentrySpan({
+        name: 'request',
+        attributes: { [CLOUD_REGION]: 'custom-region', [FAAS_COLDSTART]: false, [FAAS_MAX_MEMORY]: 0 },
+      });
+      const spanJSON = spanToJSON(span);
+      integration.processSegmentSpan!(spanJSON, client);
+
+      expect(spanJSON.attributes).toEqual({
+        [SENTRY_ORIGIN]: 'manual',
+        [CLOUD_REGION]: 'custom-region',
+        [FAAS_COLDSTART]: false,
+        [FAAS_INVOCATION_ID]: 'request',
+        [FAAS_MAX_MEMORY]: 0,
+        [AWS_LAMBDA_INITIALIZATION_TYPE]: 'native-http',
+      });
+    });
+  });
+
+  it('clears inherited request identifiers when headers are absent', () => {
+    integration.setup!(client);
+
+    withIsolationScope(scope => {
+      scope.setContext('aws.lambda', { revision_id: 'rev-current', aws_request_id: 'old', endpoint_name: 'old' });
+      client.emit('httpServerRequest', {}, {}, { headers: {} });
+      const span = new SentrySpan({ name: 'request' });
+      const spanJSON = spanToJSON(span);
+      integration.processSegmentSpan!(spanJSON, client);
+
+      expect(scope.getScopeData().contexts['aws.lambda']).toEqual({ revision_id: 'rev-current', cold_start: true });
+      expect(spanJSON.attributes).not.toHaveProperty([FAAS_INVOCATION_ID]);
+      expect(spanJSON.attributes).not.toHaveProperty([AWS_LAMBDA_WEB_ENDPOINT_NAME]);
+    });
+  });
+
+  it('adds static metadata to segment spans outside requests without overwriting attributes', () => {
+    const span = spanToJSON(new SentrySpan({ name: 'startup', attributes: { [CLOUD_REGION]: 'custom-region' } }));
+
+    integration.processSegmentSpan!(span, client);
+
+    expect(span.attributes).toEqual({
+      [SENTRY_ORIGIN]: 'manual',
+      [CLOUD_REGION]: 'custom-region',
+      [FAAS_MAX_MEMORY]: 2_147_483_648,
+      [AWS_LAMBDA_INITIALIZATION_TYPE]: 'native-http',
+    });
+  });
+
+  it.each([undefined, '', 'invalid', '0', '-1', 'Infinity', '1e308'])(
+    'omits invalid memory size %s from spans and error contexts',
+    async memory => {
+      vi.stubEnv('AWS_LAMBDA_FUNCTION_MEMORY_SIZE', memory);
+      const { awsLambdaWebIntegration } = await import('../../src/integrations/awsLambdaWeb');
+      const integration = awsLambdaWebIntegration();
+      const span = spanToJSON(new SentrySpan({ name: 'startup' }));
+      const event = { contexts: { 'aws.lambda': {} } };
+
+      integration.processSegmentSpan!(span, client);
+      integration.processEvent!(event, {}, client);
+
+      expect(span.attributes).not.toHaveProperty([FAAS_MAX_MEMORY]);
+      expect(event.contexts['aws.lambda']).toHaveProperty('memory_size', undefined);
+    },
+  );
+
+  it('omits unavailable metadata and does not infer function identity', async () => {
+    vi.stubEnv('AWS_REGION', undefined);
+    vi.stubEnv('AWS_LAMBDA_FUNCTION_MEMORY_SIZE', 'invalid');
+    vi.stubEnv('AWS_LAMBDA_INITIALIZATION_TYPE', undefined);
+    const { awsLambdaWebIntegration } = await import('../../src/integrations/awsLambdaWeb');
+    const minimal = awsLambdaWebIntegration();
+    minimal.setup!(client);
+    withIsolationScope(scope => {
+      client.emit('httpServerRequest', {}, {}, { headers: {} });
+      expect(scope.getScopeData().contexts['aws.lambda']).toEqual({ cold_start: true });
+    });
+    expect(minimal.processEvent!({}, {}, client)).toEqual({
+      contexts: {
+        'aws.lambda': {},
+      },
+    });
+  });
+});

From 1ed55d2a7c2f1359d76befd71e4019318a93b6ec Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Fri, 30 Oct 2026 15:30:41 +0100
Subject: [PATCH 063/169] feat(nextjs): Mark pageloads of cached pages (#25318)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

When Next.js serves a page from its cache (an ISR page, or a
`cacheComponents` shell that was prerendered at runtime), the pageload
starts its own trace and has no server span. That is correct, but in
Sentry it looks like missing server instrumentation.

While Next.js prerenders a document, the server now writes a
`sentry-cache-origin` meta tag with the `sentry-trace` value of the
prerender (instead of nothing). The client never continues it: it sets
`page.server_rendering.type` on the pageload (`static` when the whole
page came from the cache, `partially_static` when parts of it rendered
for this request) and links the prerender with a `cache_origin` link,
both at span start, so `tracesSampler` and `ignoreSpans` see them. Like
a `use cache` hit, the pageload links only a sampled prerender.

So the fixes of #25141 still hold: a cached page does not attach its
visitors to a request that was not theirs, and a `sampled=0` value in
the tag cannot drop their pageloads. Pages from `next build` get no tag,
because the SDK does not run during the build.

The attribute and the tag are named without Next.js in them on purpose:
other frameworks with prerendering (Nuxt, SvelteKit, Astro, React
Router) can set the same attribute. `page.server_rendering.type` is
being added to `@sentry/conventions` in
getsentry/sentry-conventions#740; `cache_origin` is already a documented
`sentry.link.type` value and is what the cache lifecycle view in Sentry
reads.

Refs JS-3886

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Co-authored-by: s1gr1d <32902192+s1gr1d@users.noreply.github.com>
---
 CHANGELOG.md                                  |   4 +
 .../app/runtime-shell/page.tsx                |  27 ++++
 .../app/slow-hole/page.tsx                    |  24 ++++
 .../nextjs-16-cacheComponents/package.json    |   1 +
 .../cacheOrigin-pageloadConnection.spec.ts    | 118 ++++++++++++++++--
 .../app/runtime-shell/page.tsx                |  27 ++++
 .../package.json                              |   1 +
 .../cacheOrigin-pageloadConnection.spec.ts    |  91 ++++++++++++--
 .../nextjs-16/tests/isr-routes.test.ts        |   3 +-
 .../src/client/browserTracingIntegration.ts   |   2 +-
 .../appRouterPageloadInstrumentation.ts       | 112 +++++++++++++++++
 .../appRouterRoutingInstrumentation.ts        |  95 +-------------
 .../routing/nextRoutingInstrumentation.ts     |   3 +-
 .../src/client/routing/traceMetaTags.ts       |  73 +++++++++--
 packages/nextjs/src/common/traceMetaTags.ts   |   6 +
 .../getFinalConfigObjectUtils.ts              |   4 +-
 .../nextjs/src/server/nextSentryPropagator.ts |  17 ++-
 .../appRouterRoutingInstrumentation.test.ts   | 116 +++++++++++++++--
 .../nextjs/test/client/traceMetaTags.test.ts  |  66 +++++++++-
 .../nextjs/test/cloudflare/withSentry.test.ts |   2 +-
 .../maybeSetClientTraceMetadataOption.test.ts |  13 +-
 .../nextRoutingInstrumentation.test.ts        |  11 +-
 .../test/server/nextSentryPropagator.test.ts  |  20 +--
 23 files changed, 676 insertions(+), 160 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/runtime-shell/page.tsx
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/slow-hole/page.tsx
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/app/runtime-shell/page.tsx
 create mode 100644 packages/nextjs/src/client/routing/appRouterPageloadInstrumentation.ts
 create mode 100644 packages/nextjs/src/common/traceMetaTags.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eac3bceb49b1..fff7847dd506 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,10 @@
 
   `@SentryCron` now sends the schedule and time zone from the method's `@Cron()` decorator, so Sentry creates the monitor on the first run. If you use `@SentryCron` without a `schedule`, Sentry now creates missing monitors, which are billed, and overwrites schedules and time zones set by hand. Pass `fromCronDecorator: false` to turn this off.
 
+- **feat(nextjs): Mark pageloads of cached pages ([#25318](https://github.com/getsentry/sentry-javascript/pull/25318))**
+
+  When Next.js serves a page from its cache, for example an ISR page or a `cacheComponents` shell, the pageload now has the `page.server_rendering.type` attribute. It is `static` if the whole page came from the cache, and `partially_static` if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.
+
 Work in this release was contributed by @lazerg and @chiliec. Thank you for your contributions!
 
 ## 11.10.0
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/runtime-shell/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/runtime-shell/page.tsx
new file mode 100644
index 000000000000..1cf4a1dd4663
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/runtime-shell/page.tsx
@@ -0,0 +1,27 @@
+import { cacheLife } from 'next/cache';
+import { headers } from 'next/headers';
+import { Suspense } from 'react';
+
+// The shell goes stale after a second, so a later visit makes the server prerender it again at
+// runtime. An `expire` below 5 minutes would make Next.js leave this out of the shell.
+async function RenderedAt() {
+  'use cache';
+  cacheLife({ revalidate: 1, expire: 3600 });
+  return <p id="rendered-at">{Date.now()}</p>;
+}
+
+async function RequestContent() {
+  await headers();
+  return <p id="request-content">Rendered for this request</p>;
+}
+
+export default function Page() {
+  return (
+    <>
+      <RenderedAt />
+      <Suspense fallback={<p>Loading...</p>}>
+        <RequestContent />
+      </Suspense>
+    </>
+  );
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/slow-hole/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/slow-hole/page.tsx
new file mode 100644
index 000000000000..201e4102cb0d
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/slow-hole/page.tsx
@@ -0,0 +1,24 @@
+import { headers } from 'next/headers';
+import Link from 'next/link';
+import { Suspense } from 'react';
+
+// The dynamic part, and with it the trace meta tag, streams in seconds after the shell, so a test
+// can navigate while the pageload still waits for the tag.
+async function SlowContent() {
+  await headers();
+  await new Promise(resolve => setTimeout(resolve, 4000));
+  return <p id="slow-content">Slow content</p>;
+}
+
+export default function Page() {
+  return (
+    <>
+      <Link id="navigate" href="/static-shell">
+        Static shell
+      </Link>
+      <Suspense fallback={<p id="slow-fallback">Loading...</p>}>
+        <SlowContent />
+      </Suspense>
+    </>
+  );
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
index eba44d444994..2534a55b6b69 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
@@ -35,6 +35,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
+    "@sentry/conventions": "0.27.0",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
index 900ce43679e9..f06c4da961cd 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
@@ -1,5 +1,6 @@
 import type { Page } from '@playwright/test';
 import { expect, test } from '@playwright/test';
+import { SENTRY_LINK_TYPE } from '@sentry/conventions/attributes';
 import { waitForTransaction } from '@sentry-internal/test-utils';
 
 const APP = 'nextjs-16-cacheComponents';
@@ -7,7 +8,8 @@ const APP = 'nextjs-16-cacheComponents';
 // The server only writes `sentry-trace` meta tags for a render that happened for the current request,
 // never while it prerenders a shell. So a tag in the document can always be continued; the only
 // question is when it arrives. The resumed part of a prerendered shell arrives after the SDK started,
-// which the pageload instrumentation waits for.
+// which the pageload instrumentation waits for. A shell prerendered at runtime carries a
+// `sentry-cache-origin` tag instead, which marks the pageload as static and links the prerender.
 
 test('connects the pageload trace to the runtime server request', async ({ page }) => {
   // The shell is prerendered, but the page's dynamic part (`DynamicContent` awaits `headers()`)
@@ -30,7 +32,6 @@ test('connects the pageload trace to the runtime server request', async ({ page
 
   expect(serverTx.contexts?.trace?.trace_id).toBeTruthy();
   expect(pageloadTx.contexts?.trace?.trace_id).toBe(serverTx.contexts?.trace?.trace_id);
-  expect(pageloadTx.contexts?.trace?.links).toBeUndefined();
 });
 
 test('connects the pageload trace to a blocking render', async ({ page }) => {
@@ -58,10 +59,11 @@ test('does not share a trace between visitors of a shell generated at request ti
   test.skip(process.env.TEST_ENV !== 'production', 'Shells are only cached in production builds');
 
   // `[id]` only lists `test` in `generateStaticParams`, so the first visit prerenders and caches the
-  // shell for this id. The prerender writes no trace tag, so every visitor starts a fresh trace.
+  // shell for this id. The prerender writes no trace tag, only a `sentry-cache-origin` tag with its own
+  // trace, so every visitor starts a fresh trace that links the prerender and is marked as static.
   const id = `shell-${Date.now()}`;
 
-  const visit = async (): Promise<{ traceId: string | undefined; links: unknown }> => {
+  const visit = async (): Promise<{ traceId: string | undefined; links: unknown; serverRenderingType: unknown }> => {
     const context = await browser.newContext();
     const page: Page = await context.newPage();
 
@@ -75,11 +77,16 @@ test('does not share a trace between visitors of a shell generated at request ti
     await page.goto(`/${id}`);
     await expect(page.locator('#result')).toHaveText(`Hello, ${id}!`);
     expect(await page.locator('meta[name="sentry-trace"]').count()).toBe(0);
+    expect(await page.locator('meta[name="sentry-cache-origin"]').count()).toBe(1);
 
     const pageloadTx = await pageloadTxPromise;
     await context.close();
 
-    return { traceId: pageloadTx.contexts?.trace?.trace_id, links: pageloadTx.contexts?.trace?.links };
+    return {
+      traceId: pageloadTx.contexts?.trace?.trace_id,
+      links: pageloadTx.contexts?.trace?.links,
+      serverRenderingType: pageloadTx.contexts?.trace?.data?.['page.server_rendering.type'],
+    };
   };
 
   const first = await visit();
@@ -88,8 +95,73 @@ test('does not share a trace between visitors of a shell generated at request ti
   expect(first.traceId).toBeTruthy();
   expect(second.traceId).toBeTruthy();
   expect(second.traceId).not.toBe(first.traceId);
-  expect(first.links).toBeUndefined();
-  expect(second.links).toBeUndefined();
+  expect(first.serverRenderingType).toBe('static');
+  expect(second.serverRenderingType).toBe('static');
+
+  // Both link the request that prerendered the shell, which is the first visitor's own request. The
+  // client cannot tell the first visit from later ones, so that pageload starts a fresh trace too.
+  const linkOf = (links: unknown): { trace_id: string; attributes?: Record<string, unknown> } => {
+    const link = (links as Array<{ trace_id: string; attributes?: Record<string, unknown> }>)[0];
+    expect(link?.attributes?.[SENTRY_LINK_TYPE]).toBe('cache_origin');
+    return link!;
+  };
+  expect(linkOf(first.links).trace_id).toBe(linkOf(second.links).trace_id);
+  expect(linkOf(second.links).trace_id).not.toBe(second.traceId);
+});
+
+test('continues the request trace on a shell prerendered at runtime and links the prerender', async ({
+  browser,
+  page,
+  baseURL,
+}) => {
+  test.skip(process.env.TEST_ENV !== 'production', 'Shells are only cached in production builds');
+
+  // The shell from the build carries no `sentry-cache-origin` tag. Wait until a visit serves the
+  // shell that the server prerendered again at runtime.
+  const warmup = await browser.newPage();
+  await warmup.goto('/runtime-shell');
+  const renderedAtBuild = await warmup.locator('#rendered-at').textContent();
+  await expect
+    .poll(
+      async () => {
+        await warmup.waitForTimeout(1500);
+        await warmup.goto('/runtime-shell');
+        return warmup.locator('#rendered-at').textContent();
+      },
+      { timeout: 30_000 },
+    )
+    .not.toBe(renderedAtBuild);
+  await warmup.close();
+
+  const pageloadTxPromise = waitForTransaction(APP, transactionEvent => {
+    return (
+      transactionEvent.contexts?.trace?.op === 'pageload' &&
+      transactionEvent.contexts?.trace?.data?.['url.full'] === `${baseURL}/runtime-shell?visit=last`
+    );
+  });
+
+  await page.goto('/runtime-shell?visit=last');
+  await expect(page.locator('#request-content')).toHaveText('Rendered for this request');
+  const [requestTraceId] = (await page.locator('meta[name="sentry-trace"]').getAttribute('content'))!.split('-');
+  const [prerenderTraceId, prerenderSpanId] = (await page
+    .locator('meta[name="sentry-cache-origin"]')
+    .getAttribute('content'))!.split('-');
+
+  const pageloadTx = await pageloadTxPromise;
+
+  // Only the shell came from the cache. The rest of the page rendered for this request, and the
+  // pageload continues that trace.
+  expect(pageloadTx.contexts?.trace?.trace_id).toBe(requestTraceId);
+  expect(pageloadTx.contexts?.trace?.data?.['page.server_rendering.type']).toBe('partially_static');
+  expect(pageloadTx.contexts?.trace?.links).toEqual([
+    {
+      trace_id: prerenderTraceId,
+      span_id: prerenderSpanId,
+      sampled: true,
+      attributes: { [SENTRY_LINK_TYPE]: 'cache_origin' },
+    },
+  ]);
+  expect(prerenderTraceId).not.toBe(requestTraceId);
 });
 
 test('starts a fresh trace on a fully static page', async ({ page }) => {
@@ -105,8 +177,38 @@ test('starts a fresh trace on a fully static page', async ({ page }) => {
 
   const pageloadTx = await pageloadTxPromise;
 
-  // A build-time shell carries no trace context at all.
+  // A build-time shell carries no trace context and no marker, the SDK does not run during the build.
   expect(await page.locator('meta[name="sentry-trace"]').count()).toBe(0);
+  expect(await page.locator('meta[name="sentry-cache-origin"]').count()).toBe(0);
   expect(pageloadTx.contexts?.trace?.trace_id).toBeTruthy();
   expect(pageloadTx.contexts?.trace?.links).toBeUndefined();
+  expect(pageloadTx.contexts?.trace?.data?.['page.server_rendering.type']).toBeUndefined();
+});
+
+test('keeps a navigation that starts while the pageload waits for the trace meta tag', async ({ page }) => {
+  test.skip(process.env.TEST_ENV !== 'production', 'Only a prerendered shell makes the trace meta tag arrive late');
+
+  const pageloadTxPromise = waitForTransaction(APP, transactionEvent => {
+    return transactionEvent.contexts?.trace?.op === 'pageload' && transactionEvent.transaction === '/slow-hole';
+  });
+
+  const navigationTxPromise = waitForTransaction(APP, transactionEvent => {
+    return transactionEvent.contexts?.trace?.op === 'navigation' && transactionEvent.transaction === '/static-shell';
+  });
+
+  await page.goto('/slow-hole', { waitUntil: 'commit' });
+  await page.waitForFunction(() => !!(window as { next?: { router?: unknown } }).next?.router);
+
+  // The resumed part, which carries the tag, has not arrived yet, so the pageload is still waiting.
+  await expect(page.locator('#slow-fallback')).toBeVisible();
+  expect(await page.locator('meta[name="sentry-trace"]').count()).toBe(0);
+
+  await page.locator('#navigate').click();
+  await expect(page.locator('#static-shell')).toHaveText('Static shell');
+
+  const [pageloadTx, navigationTx] = await Promise.all([pageloadTxPromise, navigationTxPromise]);
+
+  // The navigation ends the pageload like any pageload it interrupts, and runs to its own idle timeout.
+  expect(pageloadTx.contexts?.trace?.data?.['sentry.idle_span_finish_reason']).toBe('cancelled');
+  expect(navigationTx.contexts?.trace?.data?.['sentry.idle_span_finish_reason']).toBe('idleTimeout');
 });
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/app/runtime-shell/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/app/runtime-shell/page.tsx
new file mode 100644
index 000000000000..1cf4a1dd4663
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/app/runtime-shell/page.tsx
@@ -0,0 +1,27 @@
+import { cacheLife } from 'next/cache';
+import { headers } from 'next/headers';
+import { Suspense } from 'react';
+
+// The shell goes stale after a second, so a later visit makes the server prerender it again at
+// runtime. An `expire` below 5 minutes would make Next.js leave this out of the shell.
+async function RenderedAt() {
+  'use cache';
+  cacheLife({ revalidate: 1, expire: 3600 });
+  return <p id="rendered-at">{Date.now()}</p>;
+}
+
+async function RequestContent() {
+  await headers();
+  return <p id="request-content">Rendered for this request</p>;
+}
+
+export default function Page() {
+  return (
+    <>
+      <RenderedAt />
+      <Suspense fallback={<p>Loading...</p>}>
+        <RequestContent />
+      </Suspense>
+    </>
+  );
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
index 24c37deeba72..c78827f5595f 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
@@ -35,6 +35,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
+    "@sentry/conventions": "0.27.0",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
index 89f9dc32d26c..3d1512789f82 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/tests/cacheOrigin-pageloadConnection.spec.ts
@@ -1,5 +1,6 @@
 import type { Page } from '@playwright/test';
 import { expect, test } from '@playwright/test';
+import { SENTRY_LINK_TYPE } from '@sentry/conventions/attributes';
 import { getSpanOp, waitForStreamedSpan } from '@sentry-internal/test-utils';
 
 const APP = 'nextjs-16-streaming-cacheComponents';
@@ -7,7 +8,8 @@ const APP = 'nextjs-16-streaming-cacheComponents';
 // The server only writes `sentry-trace` meta tags for a render that happened for the current request,
 // never while it prerenders a shell. So a tag in the document can always be continued; the only
 // question is when it arrives. The resumed part of a prerendered shell arrives after the SDK started,
-// which the pageload instrumentation waits for.
+// which the pageload instrumentation waits for. A shell prerendered at runtime carries a
+// `sentry-cache-origin` tag instead, which marks the pageload as static and links the prerender.
 
 test('connects the pageload trace to the runtime server request', async ({ page }) => {
   // The shell is prerendered, but the page's dynamic part (`DynamicContent` awaits `headers()`)
@@ -28,7 +30,6 @@ test('connects the pageload trace to the runtime server request', async ({ page
 
   expect(serverSpan.trace_id).toBeTruthy();
   expect(pageloadSpan.trace_id).toBe(serverSpan.trace_id);
-  expect(pageloadSpan.links).toBeUndefined();
 });
 
 test('connects the pageload trace to a blocking render', async ({ page }) => {
@@ -56,10 +57,11 @@ test('does not share a trace between visitors of a shell generated at request ti
   test.skip(process.env.TEST_ENV !== 'production', 'Shells are only cached in production builds');
 
   // `[id]` only lists `test` in `generateStaticParams`, so the first visit prerenders and caches the
-  // shell for this id. The prerender writes no trace tag, so every visitor starts a fresh trace.
+  // shell for this id. The prerender writes no trace tag, only a `sentry-cache-origin` tag with its own
+  // trace, so every visitor starts a fresh trace that links the prerender and is marked as static.
   const id = `shell-${Date.now()}`;
 
-  const visit = async (): Promise<{ traceId: string | undefined; links: unknown }> => {
+  const visit = async (): Promise<{ traceId: string | undefined; links: unknown; serverRenderingType: unknown }> => {
     const context = await browser.newContext();
     const page: Page = await context.newPage();
 
@@ -70,11 +72,16 @@ test('does not share a trace between visitors of a shell generated at request ti
     await page.goto(`/${id}`);
     await expect(page.locator('#result')).toHaveText(`Hello, ${id}!`);
     expect(await page.locator('meta[name="sentry-trace"]').count()).toBe(0);
+    expect(await page.locator('meta[name="sentry-cache-origin"]').count()).toBe(1);
 
     const pageloadSpan = await pageloadSpanPromise;
     await context.close();
 
-    return { traceId: pageloadSpan.trace_id, links: pageloadSpan.links };
+    return {
+      traceId: pageloadSpan.trace_id,
+      links: pageloadSpan.links,
+      serverRenderingType: pageloadSpan.attributes['page.server_rendering.type']?.value,
+    };
   };
 
   const first = await visit();
@@ -83,8 +90,74 @@ test('does not share a trace between visitors of a shell generated at request ti
   expect(first.traceId).toBeTruthy();
   expect(second.traceId).toBeTruthy();
   expect(second.traceId).not.toBe(first.traceId);
-  expect(first.links).toBeUndefined();
-  expect(second.links).toBeUndefined();
+  expect(first.serverRenderingType).toBe('static');
+  expect(second.serverRenderingType).toBe('static');
+
+  // Both link the request that prerendered the shell, which is the first visitor's own request. The
+  // client cannot tell the first visit from later ones, so that pageload starts a fresh trace too.
+  const linkOf = (links: unknown): { trace_id: string; attributes?: Record<string, { value: unknown }> } => {
+    const link = (links as Array<{ trace_id: string; attributes?: Record<string, { value: unknown }> }>)[0];
+    expect(link?.attributes?.[SENTRY_LINK_TYPE]?.value).toBe('cache_origin');
+    return link!;
+  };
+  expect(linkOf(first.links).trace_id).toBe(linkOf(second.links).trace_id);
+  expect(linkOf(second.links).trace_id).not.toBe(second.traceId);
+});
+
+test('continues the request trace on a shell prerendered at runtime and links the prerender', async ({
+  browser,
+  page,
+  baseURL,
+}) => {
+  test.skip(process.env.TEST_ENV !== 'production', 'Shells are only cached in production builds');
+
+  // The shell from the build carries no `sentry-cache-origin` tag. Wait until a visit serves the
+  // shell that the server prerendered again at runtime.
+  const warmup = await browser.newPage();
+  await warmup.goto('/runtime-shell');
+  const renderedAtBuild = await warmup.locator('#rendered-at').textContent();
+  await expect
+    .poll(
+      async () => {
+        await warmup.waitForTimeout(1500);
+        await warmup.goto('/runtime-shell');
+        return warmup.locator('#rendered-at').textContent();
+      },
+      { timeout: 30_000 },
+    )
+    .not.toBe(renderedAtBuild);
+  await warmup.close();
+
+  const pageloadSpanPromise = waitForStreamedSpan(APP, span => {
+    return (
+      getSpanOp(span) === 'pageload' &&
+      span.is_segment &&
+      span.attributes['url.full']?.value === `${baseURL}/runtime-shell?visit=last`
+    );
+  });
+
+  await page.goto('/runtime-shell?visit=last');
+  await expect(page.locator('#request-content')).toHaveText('Rendered for this request');
+  const [requestTraceId] = (await page.locator('meta[name="sentry-trace"]').getAttribute('content'))!.split('-');
+  const [prerenderTraceId, prerenderSpanId] = (await page
+    .locator('meta[name="sentry-cache-origin"]')
+    .getAttribute('content'))!.split('-');
+
+  const pageloadSpan = await pageloadSpanPromise;
+
+  // Only the shell came from the cache. The rest of the page rendered for this request, and the
+  // pageload continues that trace.
+  expect(pageloadSpan.trace_id).toBe(requestTraceId);
+  expect(pageloadSpan.attributes['page.server_rendering.type']?.value).toBe('partially_static');
+  expect(pageloadSpan.links).toEqual([
+    {
+      trace_id: prerenderTraceId,
+      span_id: prerenderSpanId,
+      sampled: true,
+      attributes: { [SENTRY_LINK_TYPE]: { type: 'string', value: 'cache_origin' } },
+    },
+  ]);
+  expect(prerenderTraceId).not.toBe(requestTraceId);
 });
 
 test('starts a fresh trace on a fully static page', async ({ page }) => {
@@ -100,10 +173,12 @@ test('starts a fresh trace on a fully static page', async ({ page }) => {
 
   const pageloadSpan = await pageloadSpanPromise;
 
-  // A build-time shell carries no trace context at all.
+  // A build-time shell carries no trace context and no marker, the SDK does not run during the build.
   expect(await page.locator('meta[name="sentry-trace"]').count()).toBe(0);
+  expect(await page.locator('meta[name="sentry-cache-origin"]').count()).toBe(0);
   expect(pageloadSpan.trace_id).toBeTruthy();
   expect(pageloadSpan.links).toBeUndefined();
+  expect(pageloadSpan.attributes['page.server_rendering.type']).toBeUndefined();
 });
 
 test('keeps a navigation that starts while the pageload waits for the trace meta tag', async ({ page }) => {
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/isr-routes.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/isr-routes.test.ts
index 5a210e8426c6..98de20bf60f3 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/isr-routes.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/isr-routes.test.ts
@@ -51,7 +51,7 @@ test.describe('prerendered ISR pages', () => {
     await expect(page.locator('meta[name="baggage"]')).toHaveCount(0);
   });
 
-  test('does not carry trace meta tags on an ISR page that was prerendered again at runtime', async ({ page }) => {
+  test('carries only the cache origin on an ISR page that was prerendered again at runtime', async ({ page }) => {
     // The first visit serves the shell from the build. Once its revalidation window passed, a visit serves the stale
     // shell and makes the server prerender the page again, inside that request, with the SDK running. The visits after
     // that serve the shell from that prerender.
@@ -71,6 +71,7 @@ test.describe('prerendered ISR pages', () => {
 
     await expect(page.locator('meta[name="sentry-trace"]')).toHaveCount(0);
     await expect(page.locator('meta[name="baggage"]')).toHaveCount(0);
+    await expect(page.locator('meta[name="sentry-cache-origin"]')).toHaveCount(1);
   });
 });
 
diff --git a/packages/nextjs/src/client/browserTracingIntegration.ts b/packages/nextjs/src/client/browserTracingIntegration.ts
index acd961a77c8e..0ca0cbec4a15 100644
--- a/packages/nextjs/src/client/browserTracingIntegration.ts
+++ b/packages/nextjs/src/client/browserTracingIntegration.ts
@@ -1,6 +1,6 @@
 import type { Integration } from '@sentry/core';
 import { browserTracingIntegration as originalBrowserTracingIntegration, isBotUserAgent } from '@sentry/react';
-import { settlePendingPageloadWait } from './routing/appRouterRoutingInstrumentation';
+import { settlePendingPageloadWait } from './routing/appRouterPageloadInstrumentation';
 import { nextRouterInstrumentNavigation, nextRouterInstrumentPageLoad } from './routing/nextRoutingInstrumentation';
 
 /**
diff --git a/packages/nextjs/src/client/routing/appRouterPageloadInstrumentation.ts b/packages/nextjs/src/client/routing/appRouterPageloadInstrumentation.ts
new file mode 100644
index 000000000000..20e7a0e727e0
--- /dev/null
+++ b/packages/nextjs/src/client/routing/appRouterPageloadInstrumentation.ts
@@ -0,0 +1,112 @@
+import {
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  SENTRY_SEGMENT_NAME_SOURCE,
+  URL_FULL,
+  URL_PATH,
+  URL_TEMPLATE,
+} from '@sentry/conventions/attributes';
+import { PAGELOAD } from '@sentry/conventions/op';
+import type { Client, Span, StartSpanOptions } from '@sentry/core';
+import {
+  filterCollectedUrl,
+  getCurrentScope,
+  hasSpanStreamingEnabled,
+  PAGELOAD_SPAN_NAME_FALLBACK,
+} from '@sentry/core';
+import { resolveCurrentRoute, startBrowserTracingPageLoadSpan, WINDOW } from '@sentry/react';
+import { stripTrailingSlash } from './parameterization';
+import type { TraceMetaTagValues, TraceMetaTagWait } from './traceMetaTags';
+import {
+  addTraceMetaTagLink,
+  canWaitForTraceMetaTag,
+  readTraceMetaTags,
+  waitForTraceMetaTag,
+  withCacheOrigin,
+} from './traceMetaTags';
+
+/**
+ * How long the pageload start may wait for the resumed part of a Cache Components document. The wait
+ * normally ends with `DOMContentLoaded`; the cap only matters for a response the server keeps open.
+ */
+const PAGELOAD_TRACE_META_TAG_TIMEOUT_MS = 10_000;
+
+let pendingPageloadWait: TraceMetaTagWait | undefined;
+
+/**
+ * Starts a pageload that is still waiting for its trace meta tag with a fresh trace. Called when a
+ * navigation starts, before the navigation span is created, so the navigation ends the pageload like
+ * any pageload it interrupts, and the pageload is still recorded.
+ */
+export function settlePendingPageloadWait(): void {
+  pendingPageloadWait?.giveUp();
+}
+
+/**
+ * Starts the pageload span with the request data of the document. The span may start after a
+ * navigation already changed the location, so the browser SDK would otherwise read the new one.
+ */
+function startPageloadSpan(
+  client: Client,
+  spanOptions: StartSpanOptions,
+  documentUrl: string,
+  traceMetaTags?: TraceMetaTagValues,
+): Span | undefined {
+  const span = startBrowserTracingPageLoadSpan(client, withCacheOrigin(spanOptions, traceMetaTags), traceMetaTags);
+  const scope = getCurrentScope();
+  const { normalizedRequest } = scope.getScopeData().sdkProcessingMetadata;
+  if (normalizedRequest) {
+    scope.setSDKProcessingMetadata({ normalizedRequest: { ...normalizedRequest, url: documentUrl } });
+  }
+  return span;
+}
+
+/** Instruments the Next.js app router for pageloads. */
+export function appRouterInstrumentPageLoad(client: Client): void {
+  const documentUrl = filterCollectedUrl(WINDOW.location.href, client);
+  const pathname = stripTrailingSlash(WINDOW.location.pathname);
+  const parameterizedPathname = resolveCurrentRoute(client);
+  const spanOptions: StartSpanOptions = {
+    // With span streaming, span names have to be low cardinality, so we can't fall back to the URL.
+    name: parameterizedPathname ?? (hasSpanStreamingEnabled(client) ? PAGELOAD_SPAN_NAME_FALLBACK : pathname),
+    // pageload should always start at timeOrigin (and needs to be in s, not ms)
+    attributes: {
+      [SENTRY_OP]: PAGELOAD,
+      [SENTRY_ORIGIN]: 'auto.pageload.nextjs.app_router_instrumentation',
+      [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
+      [URL_PATH]: WINDOW.location.pathname,
+      [URL_FULL]: documentUrl,
+      [URL_TEMPLATE]: parameterizedPathname,
+    },
+  };
+
+  // A tag that is already in the document was rendered for this request and can be continued. A
+  // Cache Components document that resumes a prerendered shell gets its tag with the resumed part,
+  // which usually arrives after the SDK started. Waiting for it lets the pageload continue the server
+  // trace instead of linking it; the span's start is backdated to the time origin either way.
+  const traceMetaTags = readTraceMetaTags();
+  if (traceMetaTags || !canWaitForTraceMetaTag()) {
+    startPageloadSpan(client, spanOptions, documentUrl, traceMetaTags);
+    return;
+  }
+
+  pendingPageloadWait = waitForTraceMetaTag(
+    values => {
+      pendingPageloadWait = undefined;
+      startPageloadSpan(client, spanOptions, documentUrl, values);
+    },
+    () => {
+      pendingPageloadWait = undefined;
+      const span = startPageloadSpan(client, spanOptions, documentUrl);
+      // Only reachable through the cap or a navigation while the document still streams: a tag that
+      // shows up after this can no longer be continued, but the server request can still be linked.
+      if (span) {
+        waitForTraceMetaTag(
+          values => span.isRecording() && addTraceMetaTagLink(span, values),
+          () => undefined,
+        );
+      }
+    },
+    PAGELOAD_TRACE_META_TAG_TIMEOUT_MS,
+  );
+}
diff --git a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
index d48f48cde5ea..f2f933bc11bf 100644
--- a/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
+++ b/packages/nextjs/src/client/routing/appRouterRoutingInstrumentation.ts
@@ -1,25 +1,20 @@
-import type { Client, Span, StartSpanOptions } from '@sentry/core';
+import type { Client, Span } from '@sentry/core';
 import {
-  getCurrentScope,
   GLOBAL_OBJ,
   hasSpanStreamingEnabled,
   isObjectLike,
   NAVIGATION_SPAN_NAME_FALLBACK,
-  PAGELOAD_SPAN_NAME_FALLBACK,
   filterCollectedUrl,
   timestampInSeconds,
 } from '@sentry/core';
 import {
   startBrowserTracingNavigationSpan,
-  startBrowserTracingPageLoadSpan,
   WINDOW,
   getAbsoluteUrl,
   resolveCurrentRoute,
   resolveRoute,
 } from '@sentry/react';
 import { stripTrailingSlash } from './parameterization';
-import type { TraceMetaTagValues, TraceMetaTagWait } from './traceMetaTags';
-import { addTraceMetaTagLink, canWaitForTraceMetaTag, readTraceMetaTags, waitForTraceMetaTag } from './traceMetaTags';
 import {
   SENTRY_OP,
   SENTRY_SEGMENT_NAME_SOURCE,
@@ -29,7 +24,7 @@ import {
   SENTRY_ORIGIN,
   NAVIGATION_TYPE,
 } from '@sentry/conventions/attributes';
-import { NAVIGATION, PAGELOAD } from '@sentry/conventions/op';
+import { NAVIGATION } from '@sentry/conventions/op';
 
 function setNavigationSpanUrlAttributes(span: Span, urlPath: string, urlOrPath: string): void {
   span.setAttributes({
@@ -99,92 +94,6 @@ let navigationRoutingMode: 'router-patch' | 'transition-start-hook' = 'router-pa
 
 const currentRouterPatchingNavigationSpanRef: NavigationSpanRef = { current: undefined };
 
-/**
- * How long the pageload start may wait for the resumed part of a Cache Components document. The wait
- * normally ends with `DOMContentLoaded`; the cap only matters for a response the server keeps open.
- */
-const PAGELOAD_TRACE_META_TAG_TIMEOUT_MS = 10_000;
-
-let pendingPageloadWait: TraceMetaTagWait | undefined;
-
-/**
- * Starts a pageload that is still waiting for its trace meta tag with a fresh trace. Called when a
- * navigation starts, before the navigation span is created, so the navigation ends the pageload like
- * any pageload it interrupts, and the pageload is still recorded.
- */
-export function settlePendingPageloadWait(): void {
-  pendingPageloadWait?.giveUp();
-}
-
-/**
- * Starts the pageload span with the request data of the document. The span may start after a
- * navigation already changed the location, so the browser SDK would otherwise read the new one.
- */
-function startPageloadSpan(
-  client: Client,
-  spanOptions: StartSpanOptions,
-  documentUrl: string,
-  traceMetaTags?: TraceMetaTagValues,
-): Span | undefined {
-  const span = startBrowserTracingPageLoadSpan(client, spanOptions, traceMetaTags);
-  const scope = getCurrentScope();
-  const { normalizedRequest } = scope.getScopeData().sdkProcessingMetadata;
-  if (normalizedRequest) {
-    scope.setSDKProcessingMetadata({ normalizedRequest: { ...normalizedRequest, url: documentUrl } });
-  }
-  return span;
-}
-
-/** Instruments the Next.js app router for pageloads. */
-export function appRouterInstrumentPageLoad(client: Client): void {
-  const documentUrl = filterCollectedUrl(WINDOW.location.href, client);
-  const pathname = stripTrailingSlash(WINDOW.location.pathname);
-  const parameterizedPathname = resolveCurrentRoute(client);
-  const spanOptions: StartSpanOptions = {
-    // With span streaming, span names have to be low cardinality, so we can't fall back to the URL.
-    name: parameterizedPathname ?? (hasSpanStreamingEnabled(client) ? PAGELOAD_SPAN_NAME_FALLBACK : pathname),
-    // pageload should always start at timeOrigin (and needs to be in s, not ms)
-    attributes: {
-      [SENTRY_OP]: PAGELOAD,
-      [SENTRY_ORIGIN]: 'auto.pageload.nextjs.app_router_instrumentation',
-      [SENTRY_SEGMENT_NAME_SOURCE]: parameterizedPathname ? 'route' : 'url',
-      [URL_PATH]: WINDOW.location.pathname,
-      [URL_FULL]: documentUrl,
-      [URL_TEMPLATE]: parameterizedPathname,
-    },
-  };
-
-  // A tag that is already in the document was rendered for this request and can be continued. A
-  // Cache Components document that resumes a prerendered shell gets its tag with the resumed part,
-  // which usually arrives after the SDK started. Waiting for it lets the pageload continue the server
-  // trace instead of linking it; the span's start is backdated to the time origin either way.
-  const traceMetaTags = readTraceMetaTags();
-  if (traceMetaTags || !canWaitForTraceMetaTag()) {
-    startPageloadSpan(client, spanOptions, documentUrl, traceMetaTags);
-    return;
-  }
-
-  pendingPageloadWait = waitForTraceMetaTag(
-    values => {
-      pendingPageloadWait = undefined;
-      startPageloadSpan(client, spanOptions, documentUrl, values);
-    },
-    () => {
-      pendingPageloadWait = undefined;
-      const span = startPageloadSpan(client, spanOptions, documentUrl);
-      // Only reachable through the cap or a navigation while the document still streams: a tag that
-      // shows up after this can no longer be continued, but the server request can still be linked.
-      if (span) {
-        waitForTraceMetaTag(
-          values => span.isRecording() && addTraceMetaTagLink(span, values),
-          () => undefined,
-        );
-      }
-    },
-    PAGELOAD_TRACE_META_TAG_TIMEOUT_MS,
-  );
-}
-
 interface NavigationSpanRef {
   current: Span | undefined;
 }
diff --git a/packages/nextjs/src/client/routing/nextRoutingInstrumentation.ts b/packages/nextjs/src/client/routing/nextRoutingInstrumentation.ts
index f9a31f3f0e79..e453ac6e6871 100644
--- a/packages/nextjs/src/client/routing/nextRoutingInstrumentation.ts
+++ b/packages/nextjs/src/client/routing/nextRoutingInstrumentation.ts
@@ -1,6 +1,7 @@
 import type { Client } from '@sentry/core';
 import { WINDOW } from '@sentry/react';
-import { appRouterInstrumentNavigation, appRouterInstrumentPageLoad } from './appRouterRoutingInstrumentation';
+import { appRouterInstrumentNavigation } from './appRouterRoutingInstrumentation';
+import { appRouterInstrumentPageLoad } from './appRouterPageloadInstrumentation';
 import { pagesRouterInstrumentNavigation } from './pagesRouterNavigationInstrumentation';
 import { pagesRouterInstrumentPageLoad } from './pagesRouterRoutingInstrumentation';
 
diff --git a/packages/nextjs/src/client/routing/traceMetaTags.ts b/packages/nextjs/src/client/routing/traceMetaTags.ts
index 8e1138000ec5..0d85189e8b4b 100644
--- a/packages/nextjs/src/client/routing/traceMetaTags.ts
+++ b/packages/nextjs/src/client/routing/traceMetaTags.ts
@@ -1,7 +1,7 @@
 import { SENTRY_LINK_TYPE } from '@sentry/conventions/attributes';
-import type { Span } from '@sentry/core';
-import { extractTraceparentData } from '@sentry/core';
-import { GLOBAL_OBJ } from '@sentry/core';
+import type { Span, SpanLink, StartSpanOptions } from '@sentry/core';
+import { extractTraceparentData, GLOBAL_OBJ } from '@sentry/core';
+import { CACHE_ORIGIN_META_TAG_NAME } from '../../common/traceMetaTags';
 import { WINDOW } from '@sentry/react';
 
 // `@opentelemetry/api` `TraceFlags`, inlined because core does not export its copies.
@@ -9,12 +9,16 @@ const TRACE_FLAG_SAMPLED = 0x1;
 const TRACE_FLAG_NONE = 0x0;
 
 const SERVER_REQUEST_LINK_TYPE = 'server_request';
+const CACHE_ORIGIN_LINK_TYPE = 'cache_origin';
 
 export interface TraceMetaTagValues {
   sentryTrace: string;
   baggage: string | undefined;
 }
 
+// Not in `@sentry/conventions` yet: https://github.com/getsentry/sentry-conventions/pull/740
+const PAGE_SERVER_RENDERING_TYPE = 'page.server_rendering.type';
+
 function getDocument(): Document | undefined {
   return WINDOW.document;
 }
@@ -131,22 +135,65 @@ export function waitForTraceMetaTag(
   return { giveUp: () => settle(onGiveUp) };
 }
 
-/**
- * Adds a span link to the span described by a `sentry-trace` value. Used when the tag arrives after
- * the pageload span exists, which can only link the server request, not continue it.
- */
-export function addTraceMetaTagLink(span: Span, { sentryTrace }: TraceMetaTagValues): void {
+/** The span link to the span a `sentry-trace` value describes, if the value is one. */
+function traceMetaTagLink(sentryTrace: string, linkType: string): SpanLink | undefined {
   const traceparent = extractTraceparentData(sentryTrace);
   if (!traceparent?.traceId || !traceparent.parentSpanId) {
-    return;
+    return undefined;
   }
-
-  span.addLink({
+  return {
     context: {
       traceId: traceparent.traceId,
       spanId: traceparent.parentSpanId,
       traceFlags: traceparent.parentSampled ? TRACE_FLAG_SAMPLED : TRACE_FLAG_NONE,
     },
-    attributes: { [SENTRY_LINK_TYPE]: SERVER_REQUEST_LINK_TYPE },
-  });
+    attributes: { [SENTRY_LINK_TYPE]: linkType },
+  };
+}
+
+/**
+ * Adds a span link to the span described by a `sentry-trace` value. Used when the tag arrives after
+ * the pageload span exists, which can only link the server request, not continue it.
+ */
+export function addTraceMetaTagLink(span: Span, { sentryTrace }: TraceMetaTagValues): void {
+  const link = traceMetaTagLink(sentryTrace, SERVER_REQUEST_LINK_TYPE);
+  if (link) {
+    span.addLink(link);
+  }
+}
+
+/**
+ * How the server rendered a document with a `sentry-cache-origin` tag. With trace meta tags of this
+ * request, only the shell was reused. Unset while a resumed part can still bring those tags.
+ */
+function getServerRenderingType(traceMetaTags: TraceMetaTagValues | undefined): string | undefined {
+  if (traceMetaTags) {
+    return 'partially_static';
+  }
+  return canWaitForTraceMetaTag() ? undefined : 'static';
+}
+
+/**
+ * Marks a pageload whose document carries a `sentry-cache-origin` tag with how the server rendered
+ * it, and links the render that the page reuses. Applied at span start, so `tracesSampler` and
+ * `ignoreSpans` see both. Like a `use cache` hit, the pageload links only a sampled render.
+ */
+export function withCacheOrigin(spanOptions: StartSpanOptions, traceMetaTags?: TraceMetaTagValues): StartSpanOptions {
+  const document = getDocument();
+  const cacheOrigin = document && lastMetaContent(document, CACHE_ORIGIN_META_TAG_NAME);
+  if (!cacheOrigin) {
+    return spanOptions;
+  }
+
+  const link = traceMetaTagLink(cacheOrigin, CACHE_ORIGIN_LINK_TYPE);
+  const isSampled = link?.context.traceFlags === TRACE_FLAG_SAMPLED;
+  const serverRenderingType = getServerRenderingType(traceMetaTags);
+  return {
+    ...spanOptions,
+    attributes: {
+      ...spanOptions.attributes,
+      ...(serverRenderingType && { [PAGE_SERVER_RENDERING_TYPE]: serverRenderingType }),
+    },
+    links: link && isSampled ? [...(spanOptions.links ?? []), link] : spanOptions.links,
+  };
 }
diff --git a/packages/nextjs/src/common/traceMetaTags.ts b/packages/nextjs/src/common/traceMetaTags.ts
new file mode 100644
index 000000000000..90ae909bf962
--- /dev/null
+++ b/packages/nextjs/src/common/traceMetaTags.ts
@@ -0,0 +1,6 @@
+/**
+ * Name of the meta tag the server writes in place of `sentry-trace` while Next.js prerenders a document.
+ * Its content is the `sentry-trace` value of the prerender. The client turns it into a `cache_origin`
+ * link and never continues it, because the document is served to every later visitor.
+ */
+export const CACHE_ORIGIN_META_TAG_NAME = 'sentry-cache-origin';
diff --git a/packages/nextjs/src/config/withSentryConfig/getFinalConfigObjectUtils.ts b/packages/nextjs/src/config/withSentryConfig/getFinalConfigObjectUtils.ts
index 7ca66c51d1f7..a90529b8d24d 100644
--- a/packages/nextjs/src/config/withSentryConfig/getFinalConfigObjectUtils.ts
+++ b/packages/nextjs/src/config/withSentryConfig/getFinalConfigObjectUtils.ts
@@ -1,3 +1,4 @@
+import { CACHE_ORIGIN_META_TAG_NAME } from '../../common/traceMetaTags';
 import { debug, isMatchingPattern, parseSemver } from '@sentry/core';
 import { getSentryRelease } from '@sentry/node';
 import * as fs from 'fs';
@@ -194,12 +195,13 @@ export function maybeSetClientTraceMetadataOption(
       incomingUserNextConfigObject.experimental.clientTraceMetadata = [
         'baggage',
         'sentry-trace',
+        CACHE_ORIGIN_META_TAG_NAME,
         ...(incomingUserNextConfigObject.experimental?.clientTraceMetadata || []),
       ];
     }
   } else {
     getBuildLogger(silent).log(
-      "[@sentry/nextjs] The Sentry SDK was not able to determine your Next.js version. If you are using Next.js version 15 or greater, please add `experimental.clientTraceMetadata: ['sentry-trace', 'baggage']` to your Next.js config to enable pageload tracing for App Router.",
+      "[@sentry/nextjs] The Sentry SDK was not able to determine your Next.js version. If you are using Next.js version 15 or greater, please add `experimental.clientTraceMetadata: ['sentry-trace', 'baggage', 'sentry-cache-origin']` to your Next.js config to enable pageload tracing for App Router.",
     );
   }
 }
diff --git a/packages/nextjs/src/server/nextSentryPropagator.ts b/packages/nextjs/src/server/nextSentryPropagator.ts
index 1fd3c3438307..b583beff3465 100644
--- a/packages/nextjs/src/server/nextSentryPropagator.ts
+++ b/packages/nextjs/src/server/nextSentryPropagator.ts
@@ -1,12 +1,14 @@
 import type { Context, TextMapSetter, TracerProvider } from '@opentelemetry/api';
-import { propagation } from '@opentelemetry/api';
+import { defaultTextMapSetter, propagation } from '@opentelemetry/api';
 import { SentryPropagator } from '@sentry/opentelemetry';
+import { CACHE_ORIGIN_META_TAG_NAME } from '../common/traceMetaTags';
 import { isPrerenderContext, markPrerendersOnTracerProvider } from './prerenderContext';
 
 /**
  * A `SentryPropagator` that does not hand out the trace meta tags of a document while Next.js
  * prerenders it. Trace context baked into a prerendered shell would be replayed to every visitor the
- * shell is served to, so the browser could continue a trace that never handled its request.
+ * shell is served to, so the browser could continue a trace that never handled its request. The shell
+ * gets the prerender's trace in a `sentry-cache-origin` tag instead, which the client only links.
  *
  * The SDK registers it when it sets up OpenTelemetry. An app that sets up OpenTelemetry itself
  * registers it in place of `SentryPropagator` and calls `markPrerendersOnTracerProvider` with its
@@ -17,10 +19,17 @@ export class NextSentryPropagator extends SentryPropagator {
   public inject(ctx: Context, carrier: unknown, setter: TextMapSetter): void {
     // Next.js collects the meta tag values into an array; every other caller, such as the outgoing
     // request instrumentations, passes a headers object and keeps propagating during a prerender.
-    if (Array.isArray(carrier) && isPrerenderContext(ctx)) {
+    if (!Array.isArray(carrier) || !isPrerenderContext(ctx)) {
+      super.inject(ctx, carrier, setter);
       return;
     }
-    super.inject(ctx, carrier, setter);
+
+    const values: Record<string, string> = {};
+    super.inject(ctx, values, defaultTextMapSetter);
+    const sentryTrace = values['sentry-trace'];
+    if (sentryTrace) {
+      setter.set(carrier, CACHE_ORIGIN_META_TAG_NAME, sentryTrace);
+    }
   }
 }
 
diff --git a/packages/nextjs/test/client/appRouterRoutingInstrumentation.test.ts b/packages/nextjs/test/client/appRouterRoutingInstrumentation.test.ts
index 0d8bdded0e0d..25ecbfdd3f80 100644
--- a/packages/nextjs/test/client/appRouterRoutingInstrumentation.test.ts
+++ b/packages/nextjs/test/client/appRouterRoutingInstrumentation.test.ts
@@ -1,5 +1,5 @@
 // @vitest-environment jsdom
-import { SENTRY_OP, URL_FULL, URL_PATH } from '@sentry/conventions/attributes';
+import { SENTRY_LINK_TYPE, SENTRY_OP, URL_FULL, URL_PATH } from '@sentry/conventions/attributes';
 import { PAGELOAD } from '@sentry/conventions/op';
 import type { Client } from '@sentry/core';
 import type * as SentryCore from '@sentry/core';
@@ -12,13 +12,16 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import '@sentry/core';
 import '@sentry/react';
 import '../../src/client/routing/appRouterRoutingInstrumentation';
+import '../../src/client/routing/appRouterPageloadInstrumentation';
 import type * as AppRouterInstrumentation from '../../src/client/routing/appRouterRoutingInstrumentation';
+import type * as AppRouterPageload from '../../src/client/routing/appRouterPageloadInstrumentation';
 import type * as RouteProvider from '../../src/client/routing/routeProvider';
 import type { RouteManifest } from '../../src/config/manifest/types';
 
 type Core = typeof SentryCore;
 type React = typeof SentryReact;
 type Instrumentation = typeof AppRouterInstrumentation;
+type PageloadInstrumentation = typeof AppRouterPageload;
 type RouteProviderModule = typeof RouteProvider;
 
 interface NextRouter {
@@ -67,11 +70,16 @@ async function setup(traceLifecycle: 'stream' | 'static'): Promise<{
   router: NextRouter;
   client: Client;
   instrumentation: Instrumentation;
+  pageload: PageloadInstrumentation;
 }> {
   vi.resetModules();
   const core: Core = await import('@sentry/core');
+  // The scopes live on a global carrier that `vi.resetModules()` keeps, so the active span of an
+  // earlier test would otherwise become the parent of the spans of this one.
+  core.getMainCarrier().__SENTRY__ = undefined;
   const react: React = await import('@sentry/react');
   const instrumentation: Instrumentation = await import('../../src/client/routing/appRouterRoutingInstrumentation');
+  const pageload: PageloadInstrumentation = await import('../../src/client/routing/appRouterPageloadInstrumentation');
   const routeProvider: RouteProviderModule = await import('../../src/client/routing/routeProvider');
 
   const client = new react.BrowserClient({
@@ -93,7 +101,7 @@ async function setup(traceLifecycle: 'stream' | 'static'): Promise<{
   instrumentation.appRouterInstrumentNavigation(client);
   await vi.waitFor(() => expect(router.back).not.toBe(originalBack));
 
-  return { core, router, client, instrumentation };
+  return { core, router, client, instrumentation, pageload };
 }
 
 describe('appRouterInstrumentNavigation (router-patch mode)', () => {
@@ -269,11 +277,30 @@ describe('appRouterInstrumentNavigation with basePath', () => {
 
 describe('appRouterInstrumentPageLoad', () => {
   const originalReadyState = Object.getOwnPropertyDescriptor(Document.prototype, 'readyState');
+  const PRERENDER_TRACE_ID = '11111111111111111111111111111111';
+  const PRERENDER_SENTRY_TRACE = `${PRERENDER_TRACE_ID}-1111111111111111-1`;
+  const PRERENDER_LINK = {
+    trace_id: PRERENDER_TRACE_ID,
+    span_id: '1111111111111111',
+    sampled: true,
+    attributes: { [SENTRY_LINK_TYPE]: 'cache_origin' },
+  };
+
+  function setReadyState(value: DocumentReadyState): void {
+    Object.defineProperty(document, 'readyState', { value, configurable: true });
+  }
+
+  function appendMeta(parent: HTMLElement, name: string, content: string): void {
+    const meta = document.createElement('meta');
+    meta.setAttribute('name', name);
+    meta.setAttribute('content', content);
+    parent.appendChild(meta);
+  }
 
   beforeEach(() => {
     globalWithNext._sentryRouteManifest = JSON.stringify(manifest);
     window.history.replaceState({}, '', '/navigation?from=document');
-    Object.defineProperty(document, 'readyState', { value: 'loading', configurable: true });
+    setReadyState('loading');
     vi.spyOn(performance, 'getEntriesByType').mockReturnValue([]);
     vi.stubEnv('_sentryCacheComponents', 'true');
   });
@@ -281,6 +308,9 @@ describe('appRouterInstrumentPageLoad', () => {
   afterEach(() => {
     delete globalWithNext.next;
     delete globalWithNext._sentryRouteManifest;
+    document.head.innerHTML = '';
+    document.body.innerHTML = '';
+    vi.useRealTimers();
     // @ts-expect-error deleting the instance override restores the prototype getter
     delete document.readyState;
     if (originalReadyState) {
@@ -291,13 +321,13 @@ describe('appRouterInstrumentPageLoad', () => {
   });
 
   it('records the URL of the document when the pageload starts after a navigation changed it', async () => {
-    const { core, instrumentation } = await setup('static');
+    const { core, pageload } = await setup('static');
 
-    instrumentation.appRouterInstrumentPageLoad(core.getClient()!);
+    pageload.appRouterInstrumentPageLoad(core.getClient()!);
     const spanBeforeSettling = core.getActiveSpan();
 
     window.history.replaceState({}, '', '/navigation/42/router-back');
-    instrumentation.settlePendingPageloadWait();
+    pageload.settlePendingPageloadWait();
 
     const span = core.getActiveSpan();
     expect(span).toBeDefined();
@@ -325,14 +355,82 @@ describe('appRouterInstrumentPageLoad', () => {
     async ({ cacheComponents }) => {
       vi.stubEnv('_sentryCacheComponents', cacheComponents);
       window.history.replaceState({}, '', '/navigation?token=2c4f9e1b&from=document');
-      const { core, instrumentation } = await setup('static');
+      const { core, pageload } = await setup('static');
 
-      instrumentation.appRouterInstrumentPageLoad(core.getClient()!);
-      instrumentation.settlePendingPageloadWait();
+      pageload.appRouterInstrumentPageLoad(core.getClient()!);
+      pageload.settlePendingPageloadWait();
 
       const filteredUrl = 'http://localhost:3000/navigation?token=[Filtered]&from=document';
       expect(core.spanToJSON(core.getActiveSpan()!).attributes?.[URL_FULL]).toBe(filteredUrl);
       expect(core.getCurrentScope().getScopeData().sdkProcessingMetadata.normalizedRequest?.url).toBe(filteredUrl);
     },
   );
+
+  it('starts a new trace for a static page and links the prerender as cache origin', async () => {
+    const { core, pageload } = await setup('static');
+    setReadyState('complete');
+    appendMeta(document.head, 'sentry-cache-origin', PRERENDER_SENTRY_TRACE);
+
+    pageload.appRouterInstrumentPageLoad(core.getClient()!);
+
+    const spanJson = core.spanToJSON(core.getActiveSpan()!);
+    expect(spanJson.attributes?.[SENTRY_OP]).toBe(PAGELOAD);
+    expect(spanJson.attributes?.['page.server_rendering.type']).toBe('static');
+    expect(spanJson.trace_id).not.toBe(PRERENDER_TRACE_ID);
+    expect(spanJson.links).toEqual([PRERENDER_LINK]);
+  });
+
+  // A shell that was prerendered at runtime keeps its tag, and the part resumed for this request
+  // brings its own `sentry-trace` tag.
+  it('continues the server trace of a resumed cached shell and links the prerender as cache origin', async () => {
+    const { core, pageload } = await setup('static');
+    setReadyState('complete');
+    appendMeta(document.head, 'sentry-cache-origin', PRERENDER_SENTRY_TRACE);
+    appendMeta(document.body, 'sentry-trace', '22222222222222222222222222222222-2222222222222222-1');
+
+    pageload.appRouterInstrumentPageLoad(core.getClient()!);
+
+    const spanJson = core.spanToJSON(core.getActiveSpan()!);
+    expect(spanJson.trace_id).toBe('22222222222222222222222222222222');
+    expect(spanJson.parent_span_id).toBe('2222222222222222');
+    expect(spanJson.attributes?.['page.server_rendering.type']).toBe('partially_static');
+    expect(spanJson.links).toEqual([PRERENDER_LINK]);
+  });
+
+  it('links the prerender without a type when a navigation starts the pageload before the resumed part', async () => {
+    const { core, pageload } = await setup('static');
+    appendMeta(document.head, 'sentry-cache-origin', PRERENDER_SENTRY_TRACE);
+
+    pageload.appRouterInstrumentPageLoad(core.getClient()!);
+    pageload.settlePendingPageloadWait();
+
+    const spanJson = core.spanToJSON(core.getActiveSpan()!);
+    expect(spanJson.attributes?.[SENTRY_OP]).toBe(PAGELOAD);
+    expect(spanJson.attributes).not.toHaveProperty('page.server_rendering.type');
+    expect(spanJson.links).toEqual([PRERENDER_LINK]);
+  });
+
+  it('links the server request when its trace meta tag arrives after the wait gave up', async () => {
+    const { core, pageload } = await setup('static');
+    vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout'] });
+
+    pageload.appRouterInstrumentPageLoad(core.getClient()!);
+    vi.advanceTimersByTime(10_000);
+    const span = core.getActiveSpan()!;
+    appendMeta(document.body, 'sentry-trace', '22222222222222222222222222222222-2222222222222222-1');
+    // MutationObserver callbacks run as microtasks.
+    await Promise.resolve();
+
+    const spanJson = core.spanToJSON(span);
+    expect(spanJson.attributes?.[SENTRY_OP]).toBe(PAGELOAD);
+    expect(spanJson.trace_id).not.toBe('22222222222222222222222222222222');
+    expect(spanJson.links).toEqual([
+      {
+        trace_id: '22222222222222222222222222222222',
+        span_id: '2222222222222222',
+        sampled: true,
+        attributes: { [SENTRY_LINK_TYPE]: 'server_request' },
+      },
+    ]);
+  });
 });
diff --git a/packages/nextjs/test/client/traceMetaTags.test.ts b/packages/nextjs/test/client/traceMetaTags.test.ts
index 4b9fde700e92..695ad7c558bb 100644
--- a/packages/nextjs/test/client/traceMetaTags.test.ts
+++ b/packages/nextjs/test/client/traceMetaTags.test.ts
@@ -1,12 +1,14 @@
 // @vitest-environment jsdom
-import { SENTRY_LINK_TYPE } from '@sentry/conventions/attributes';
-import type { Span } from '@sentry/core';
+import { SENTRY_LINK_TYPE, SENTRY_OP } from '@sentry/conventions/attributes';
+import { PAGELOAD } from '@sentry/conventions/op';
+import type { Span, StartSpanOptions } from '@sentry/core';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import {
   addTraceMetaTagLink,
   canWaitForTraceMetaTag,
   readTraceMetaTags,
   waitForTraceMetaTag,
+  withCacheOrigin,
 } from '../../src/client/routing/traceMetaTags';
 
 const HEAD_TRACE = '11111111111111111111111111111111-1111111111111111-1';
@@ -219,3 +221,63 @@ describe('addTraceMetaTagLink', () => {
     expect(span.addLink).not.toHaveBeenCalled();
   });
 });
+
+describe('withCacheOrigin', () => {
+  const PAGELOAD_OPTIONS: StartSpanOptions = { name: '/products/:id', attributes: { [SENTRY_OP]: PAGELOAD } };
+  const PRERENDER_LINK = {
+    context: { traceId: '11111111111111111111111111111111', spanId: '1111111111111111', traceFlags: 1 },
+    attributes: { [SENTRY_LINK_TYPE]: 'cache_origin' },
+  };
+
+  it('returns the options unchanged for a document without a sentry-cache-origin tag', () => {
+    appendMeta(document.head, 'sentry-trace', HEAD_TRACE);
+
+    expect(withCacheOrigin(PAGELOAD_OPTIONS, { sentryTrace: HEAD_TRACE, baggage: undefined })).toBe(PAGELOAD_OPTIONS);
+  });
+
+  it('marks a fully reused page as static and links a sampled render as cache origin', () => {
+    appendMeta(document.head, 'sentry-cache-origin', HEAD_TRACE);
+
+    expect(withCacheOrigin(PAGELOAD_OPTIONS)).toEqual({
+      name: '/products/:id',
+      attributes: { [SENTRY_OP]: PAGELOAD, 'page.server_rendering.type': 'static' },
+      links: [PRERENDER_LINK],
+    });
+  });
+
+  it('marks a page as partially static when the pageload continues the trace of this request', () => {
+    appendMeta(document.head, 'sentry-cache-origin', HEAD_TRACE);
+
+    expect(withCacheOrigin(PAGELOAD_OPTIONS, { sentryTrace: BODY_TRACE, baggage: undefined })).toEqual({
+      name: '/products/:id',
+      attributes: { [SENTRY_OP]: PAGELOAD, 'page.server_rendering.type': 'partially_static' },
+      links: [PRERENDER_LINK],
+    });
+  });
+
+  // A navigation or the wait cap can start the pageload before the resumed part arrives.
+  it('leaves the type unset while a resumed part can still bring the trace of this request', () => {
+    appendMeta(document.head, 'sentry-cache-origin', HEAD_TRACE);
+    setReadyState('loading');
+    vi.spyOn(performance, 'getEntriesByType').mockReturnValue([]);
+
+    expect(withCacheOrigin(PAGELOAD_OPTIONS)).toEqual({
+      name: '/products/:id',
+      attributes: { [SENTRY_OP]: PAGELOAD },
+      links: [PRERENDER_LINK],
+    });
+  });
+
+  it.each([
+    { tag: 'holds an unsampled trace', content: '11111111111111111111111111111111-1111111111111111-0' },
+    { tag: 'holds a trace without a sampling decision', content: '11111111111111111111111111111111-1111111111111111' },
+    { tag: 'holds no sentry-trace value', content: 'prerendered' },
+  ])('marks the page without a link when the tag $tag', ({ content }) => {
+    appendMeta(document.head, 'sentry-cache-origin', content);
+
+    expect(withCacheOrigin(PAGELOAD_OPTIONS)).toEqual({
+      name: '/products/:id',
+      attributes: { [SENTRY_OP]: PAGELOAD, 'page.server_rendering.type': 'static' },
+    });
+  });
+});
diff --git a/packages/nextjs/test/cloudflare/withSentry.test.ts b/packages/nextjs/test/cloudflare/withSentry.test.ts
index d24bb75f3f61..46bc97e520be 100644
--- a/packages/nextjs/test/cloudflare/withSentry.test.ts
+++ b/packages/nextjs/test/cloudflare/withSentry.test.ts
@@ -287,7 +287,7 @@ describe('withSentry', () => {
       props: {},
     } as never);
 
-    expect(carrier).toEqual([]);
+    expect(carrier).toEqual([{ key: 'sentry-cache-origin', value: expect.stringMatching(/-1$/) }]);
     expect(requestCarrier['sentry-trace']).toMatch(/^[0-9a-f]{32}-[0-9a-f]{16}-1$/);
   });
 
diff --git a/packages/nextjs/test/config/maybeSetClientTraceMetadataOption.test.ts b/packages/nextjs/test/config/maybeSetClientTraceMetadataOption.test.ts
index 6de4a3a697fd..3dd60f97f848 100644
--- a/packages/nextjs/test/config/maybeSetClientTraceMetadataOption.test.ts
+++ b/packages/nextjs/test/config/maybeSetClientTraceMetadataOption.test.ts
@@ -3,22 +3,27 @@ import type { NextConfigObject } from '../../src/config/types';
 import { maybeSetClientTraceMetadataOption } from '../../src/config/withSentryConfig/getFinalConfigObjectUtils';
 
 describe('maybeSetClientTraceMetadataOption', () => {
-  it('adds sentry-trace and baggage to clientTraceMetadata on supported Next.js versions', () => {
+  it('adds baggage, sentry-trace, and sentry-cache-origin to clientTraceMetadata on supported Next.js versions', () => {
     const config: NextConfigObject = {};
     maybeSetClientTraceMetadataOption(config, '15.0.0');
-    expect(config.experimental?.clientTraceMetadata).toEqual(['baggage', 'sentry-trace']);
+    expect(config.experimental?.clientTraceMetadata).toEqual(['baggage', 'sentry-trace', 'sentry-cache-origin']);
   });
 
   it('preserves user-provided clientTraceMetadata entries', () => {
     const config: NextConfigObject = { experimental: { clientTraceMetadata: ['my-custom-key'] } };
     maybeSetClientTraceMetadataOption(config, '15.0.0');
-    expect(config.experimental?.clientTraceMetadata).toEqual(['baggage', 'sentry-trace', 'my-custom-key']);
+    expect(config.experimental?.clientTraceMetadata).toEqual([
+      'baggage',
+      'sentry-trace',
+      'sentry-cache-origin',
+      'my-custom-key',
+    ]);
   });
 
   it('enables trace meta tags when Cache Components is enabled', () => {
     // The server withholds the tags while it prerenders, see `nextSentryPropagator.ts`.
     const config: NextConfigObject = { cacheComponents: true };
     maybeSetClientTraceMetadataOption(config, '16.0.0');
-    expect(config.experimental?.clientTraceMetadata).toEqual(['baggage', 'sentry-trace']);
+    expect(config.experimental?.clientTraceMetadata).toEqual(['baggage', 'sentry-trace', 'sentry-cache-origin']);
   });
 });
diff --git a/packages/nextjs/test/performance/nextRoutingInstrumentation.test.ts b/packages/nextjs/test/performance/nextRoutingInstrumentation.test.ts
index 4b6b117e2117..bc107683f4ba 100644
--- a/packages/nextjs/test/performance/nextRoutingInstrumentation.test.ts
+++ b/packages/nextjs/test/performance/nextRoutingInstrumentation.test.ts
@@ -2,10 +2,8 @@ import type { Client } from '@sentry/core';
 import { WINDOW } from '@sentry/react';
 import { JSDOM } from 'jsdom';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import {
-  appRouterInstrumentNavigation,
-  appRouterInstrumentPageLoad,
-} from '../../src/client/routing/appRouterRoutingInstrumentation';
+import { appRouterInstrumentNavigation } from '../../src/client/routing/appRouterRoutingInstrumentation';
+import { appRouterInstrumentPageLoad } from '../../src/client/routing/appRouterPageloadInstrumentation';
 import {
   nextRouterInstrumentNavigation,
   nextRouterInstrumentPageLoad,
@@ -13,9 +11,12 @@ import {
 import { pagesRouterInstrumentNavigation } from '../../src/client/routing/pagesRouterNavigationInstrumentation';
 import { pagesRouterInstrumentPageLoad } from '../../src/client/routing/pagesRouterRoutingInstrumentation';
 
+vi.mock('../../src/client/routing/appRouterPageloadInstrumentation', () => ({
+  appRouterInstrumentPageLoad: vi.fn(),
+}));
+
 vi.mock('../../src/client/routing/appRouterRoutingInstrumentation', () => ({
   appRouterInstrumentNavigation: vi.fn(),
-  appRouterInstrumentPageLoad: vi.fn(),
 }));
 vi.mock('../../src/client/routing/pagesRouterNavigationInstrumentation', () => ({
   pagesRouterInstrumentNavigation: vi.fn(),
diff --git a/packages/nextjs/test/server/nextSentryPropagator.test.ts b/packages/nextjs/test/server/nextSentryPropagator.test.ts
index 03c2e40e4e2d..d437b1b8a164 100644
--- a/packages/nextjs/test/server/nextSentryPropagator.test.ts
+++ b/packages/nextjs/test/server/nextSentryPropagator.test.ts
@@ -82,32 +82,34 @@ describe('NextSentryPropagator', () => {
     });
   });
 
-  it('hands out nothing while a route is prerendered', () => {
+  it('hands out only the trace of the prerender as cache origin while a route is prerendered', () => {
     trace.getTracer('next.js').startActiveSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS, span => {
       expect(isPrerenderContext(context.active())).toBe(true);
-      expect(inject()).toEqual({});
+      expect(inject()).toEqual({
+        'sentry-cache-origin': `${span.spanContext().traceId}-${span.spanContext().spanId}-1`,
+      });
       span.end();
     });
   });
 
   it('keeps propagating to outgoing requests while a route is prerendered', () => {
     trace.getTracer('next.js').startActiveSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS, span => {
-      expect(inject()).toEqual({});
+      expect(inject()).toEqual({ 'sentry-cache-origin': expect.stringMatching(/-1$/) });
       expect(injectHeaders()['sentry-trace']).toBe(`${span.spanContext().traceId}-${span.spanContext().spanId}-1`);
       span.end();
     });
   });
 
-  it('hands out nothing inside a span nested in a prerender', () => {
+  it('hands out only the cache origin inside a span nested in a prerender', () => {
     trace.getTracer('next.js').startActiveSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS, span => {
       startSpan({ name: 'server component' }, () => {
-        expect(inject()).toEqual({});
+        expect(Object.keys(inject())).toEqual(['sentry-cache-origin']);
       });
       span.end();
     });
   });
 
-  it('hands out nothing while a route is prerendered in an unsampled trace', () => {
+  it('hands out only the cache origin while a route is prerendered in an unsampled trace', () => {
     setup(0);
 
     trace.getTracer('next.js').startActiveSpan('GET /[id]', span => {
@@ -118,7 +120,7 @@ describe('NextSentryPropagator', () => {
         .getTracer('next.js')
         .startActiveSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS, prerenderSpan => {
           expect(prerenderSpan.isRecording()).toBe(false);
-          expect(inject()).toEqual({});
+          expect(inject()).toEqual({ 'sentry-cache-origin': expect.stringMatching(/-0$/) });
           prerenderSpan.end();
         });
       span.end();
@@ -129,7 +131,7 @@ describe('NextSentryPropagator', () => {
     const span = trace.getTracer('next.js').startSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS);
     context.with(trace.setSpan(context.active(), span), () => {
       expect(isPrerenderContext(context.active())).toBe(true);
-      expect(inject()).toEqual({});
+      expect(Object.keys(inject())).toEqual(['sentry-cache-origin']);
     });
     span.end();
 
@@ -145,7 +147,7 @@ describe('NextSentryPropagator', () => {
       .getTracer('next.js')
       .startActiveSpan('prerender route (app) /[id]', PRERENDER_SPAN_OPTIONS, context.active(), span => {
         expect(isPrerenderContext(context.active())).toBe(true);
-        expect(inject()).toEqual({});
+        expect(Object.keys(inject())).toEqual(['sentry-cache-origin']);
         span.end();
       });
   });

From 214ac9ae665b86b6f8fe4a0f2b54d2ff31c4d344 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Fri, 30 Oct 2026 15:35:15 +0100
Subject: [PATCH 064/169] chore: Prune unused regexp dependencies from lockfile
 (#25948)

**Why:** Prune unused packages left behind by #25944 so the lockfile
deduplication check passes on develop.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 pnpm-lock.yaml | 55 --------------------------------------------------
 1 file changed, 55 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fa9e6df7f0b7..4bdc4bbc393f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10976,10 +10976,6 @@ packages:
     resolution: {integrity: sha512-buhp5kePrmda3vhc5B9t7pUQXAb2Tnd0qgpkIhPhkHXxJpiPJ11H0ZEU0oBpJ2QztSbzG/ZxMj/CHsYJqRHmyg==}
     engines: {node: '>= 12.0.0'}
 
-  comment-parser@1.4.7:
-    resolution: {integrity: sha512-0h+uSNtQGW3D98eQt3jJ8L06Fves8hncB4V/PKdw/Qb8Hnk19VaKuTr55UNRYiSoVa7WwrFls+rh3ux9agmkeQ==}
-    engines: {node: '>= 12.0.0'}
-
   commenting@1.1.0:
     resolution: {integrity: sha512-YeNK4tavZwtH7jEgK1ZINXzLKm6DZdEMfsaaieOsCAN0S8vsY7UeuO3Q7d/M018EFgE+IeUAuBOKkFccBZsUZA==}
 
@@ -12279,12 +12275,6 @@ packages:
     peerDependencies:
       eslint: ^7.0.0 || ^8.0.0 || ^9.0.0
 
-  eslint-plugin-regexp@3.1.0:
-    resolution: {integrity: sha512-qGXIC3DIKZHcK1H9A9+Byz9gmndY6TTSRkSMTZpNXdyCw2ObSehRgccJv35n9AdUakEjQp5VFNLas6BMXizCZg==}
-    engines: {node: ^20.19.0 || ^22.13.0 || >=24}
-    peerDependencies:
-      eslint: '>=9.38.0'
-
   eslint-plugin-simple-import-sort@14.0.0:
     resolution: {integrity: sha512-NUJO0+XFCkk+o5EsAJruTgnfMEpeWrPWeJS15UVF60GgXmqz1BJ9/3hzlvG7lkL8Bubzos5cCLptThbFfPnSMQ==}
     peerDependencies:
@@ -13840,10 +13830,6 @@ packages:
     resolution: {integrity: sha512-Hicd6JK5Njt2QB6XYFS7ok9e37O8AYk3jTcppG4YVQnYjOemymvTcmc7OWsmq/Qqj5TdRFO5/x/tIPmBeRtGHg==}
     engines: {node: '>=12.0.0'}
 
-  jsdoc-type-pratt-parser@7.2.0:
-    resolution: {integrity: sha512-dh140MMgjyg3JhJZY/+iEzW+NO5xR2gpbDFKHqotCmexElVntw7GjWjt511+C/Ef02RU5TKYrJo/Xlzk+OLaTw==}
-    engines: {node: '>=20.0.0'}
-
   jsdom-worker@0.3.0:
     resolution: {integrity: sha512-nlPmN0i93+e6vxzov8xqLMR+MBs/TAYeSviehivzqovHH0AgooVx9pQ/otrygASppPvdR+V9Jqx5SMe8+FcADg==}
     peerDependencies:
@@ -16953,10 +16939,6 @@ packages:
   redux@4.0.5:
     resolution: {integrity: sha512-VSz1uMAH24DM6MF72vcojpYPtrTUu3ByVWfPL1nPfVRb5mZVTve5GnNCUV53QM/BZ66xfWrm0CTWoM+Xlz8V1w==}
 
-  refa@0.12.1:
-    resolution: {integrity: sha512-J8rn6v4DBb2nnFqkqwy6/NnTYMcgLA+sLr0iIO41qpv0n+ngb7ksag2tMRl0inb1bbO/esUwzW1vbJi7K0sI0g==}
-    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
-
   reflect-metadata@0.1.13:
     resolution: {integrity: sha512-Ts1Y/anZELhSsjMcU605fU9RE4Oi3p5ORujwbIKXfWa+0Zxs510Qrmrce5/Jowq3cHSZSJqBjypxmHarc+vEWg==}
 
@@ -16992,10 +16974,6 @@ packages:
   regex@5.1.1:
     resolution: {integrity: sha512-dN5I359AVGPnwzJm2jN1k0W9LPZ+ePvoOeVMMfqIMFz53sSwXkxaJoxr50ptnsC771lK95BnTrVSZxq0b9yCGw==}
 
-  regexp-ast-analysis@0.7.1:
-    resolution: {integrity: sha512-sZuz1dYW/ZsfG17WSAG7eS85r5a0dDsvg+7BiiYR5o6lKCAtUrEwdmRmaGF6rwVj3LcmAeYkOWKEPlbPzN3Y3A==}
-    engines: {node: ^12.0.0 || ^14.0.0 || >=16.0.0}
-
   regexp.prototype.flags@1.5.4:
     resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
     engines: {node: '>= 0.4'}
@@ -17413,10 +17391,6 @@ packages:
       webpack:
         optional: true
 
-  scslre@0.3.0:
-    resolution: {integrity: sha512-3A6sD0WYP7+QrjbfNA2FN3FsOaGGFoekCVgTyypy53gPxhbkCIjtO6YWgdrfM+n/8sI8JeXZOIxsHjMTNxQ4nQ==}
-    engines: {node: ^14.0.0 || >=16.0.0}
-
   scule@1.3.0:
     resolution: {integrity: sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==}
 
@@ -30273,8 +30247,6 @@ snapshots:
 
   comment-parser@1.4.1: {}
 
-  comment-parser@1.4.7: {}
-
   commenting@1.1.0: {}
 
   common-ancestor-path@1.0.1: {}
@@ -31769,16 +31741,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-regexp@3.1.0:
-    dependencies:
-      '@eslint-community/eslint-utils': 4.9.0(eslint@8.57.0(supports-color@10.0.0))
-      '@eslint-community/regexpp': 4.12.2
-      comment-parser: 1.4.7
-      jsdoc-type-pratt-parser: 7.2.0
-      refa: 0.12.1
-      regexp-ast-analysis: 0.7.1
-      scslre: 0.3.0
-
   eslint-plugin-simple-import-sort@14.0.0(eslint@8.57.0(supports-color@10.0.0)):
     dependencies:
       eslint: 8.57.0(supports-color@10.0.0)
@@ -33744,8 +33706,6 @@ snapshots:
 
   jsdoc-type-pratt-parser@4.1.0: {}
 
-  jsdoc-type-pratt-parser@7.2.0: {}
-
   jsdom-worker@0.3.0(node-fetch@3.3.2):
     dependencies:
       mitt: 3.0.1
@@ -38160,10 +38120,6 @@ snapshots:
       loose-envify: 1.4.0
       symbol-observable: 1.2.0
 
-  refa@0.12.1:
-    dependencies:
-      '@eslint-community/regexpp': 4.12.2
-
   reflect-metadata@0.1.13: {}
 
   reflect-metadata@0.2.2: {}
@@ -38202,11 +38158,6 @@ snapshots:
     dependencies:
       regex-utilities: 2.3.0
 
-  regexp-ast-analysis@0.7.1:
-    dependencies:
-      '@eslint-community/regexpp': 4.12.2
-      refa: 0.12.1
-
   regexp.prototype.flags@1.5.4:
     dependencies:
       call-bind: 1.0.8
@@ -38740,12 +38691,6 @@ snapshots:
     optionalDependencies:
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
-  scslre@0.3.0:
-    dependencies:
-      '@eslint-community/regexpp': 4.12.2
-      refa: 0.12.1
-      regexp-ast-analysis: 0.7.1
-
   scule@1.3.0: {}
 
   section-matter@1.0.0:

From bcd480503ae3dd17307917c9f0a14418e1c666a8 Mon Sep 17 00:00:00 2001
From: Martin Sonnberger <martin.sonnberger@sentry.io>
Date: Fri, 30 Oct 2026 15:46:19 +0100
Subject: [PATCH 065/169] feat(nextjs): Add `applicationKeyExcludeDependencies`
 option (#25818)

Turbopack injects application-key metadata per module, so tagging
bundled dependencies adds repeated code to browser chunks. Add an opt-in
`applicationKeyExcludeDependencies` flag for Next.js 16+ Turbopack
builds, keeping dependency tagging enabled by default.

The option trades filtering coverage for lower bundle overhead:
dependency-only chunks may be untagged, so even `exclusively` behaviours
can misclassify errors whose stacks stay entirely within those chunks.
Document this limitation and discourage using the option with `contains`
behaviours.

Fixes #25754

---------

Co-authored-by: Codex <codex@openai.com>
---
 .../nextjs-16/app/third-party-filter/page.tsx | 44 ++++++++++----
 .../fixtures/metadata-dependency/index.d.ts   |  2 +
 .../fixtures/metadata-dependency/index.js     | 10 ++++
 .../fixtures/metadata-dependency/package.json |  7 +++
 .../nextjs-16/instrumentation-client.ts       |  5 +-
 .../nextjs-16/next.config.ts                  |  1 +
 .../test-applications/nextjs-16/package.json  |  6 ++
 .../nextjs-16/tests/build-output.test.ts      | 21 +++++++
 .../tests/third-party-filter.test.ts          | 47 ++++++++++++++-
 .../turbopack/constructTurbopackConfig.ts     | 23 ++++----
 packages/nextjs/src/config/types.ts           | 15 +++++
 .../withSentryConfig/getFinalConfigObject.ts  | 23 ++++++++
 .../constructTurbopackConfig.test.ts          | 59 +++++++++++++------
 .../test/config/withSentryConfig.test.ts      | 35 +++++++++++
 14 files changed, 256 insertions(+), 42 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.d.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.js
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/package.json

diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/app/third-party-filter/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16/app/third-party-filter/page.tsx
index b6b4bea80def..434d4ad3cada 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/app/third-party-filter/page.tsx
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/app/third-party-filter/page.tsx
@@ -8,17 +8,37 @@ function throwFirstPartyError(): void {
 
 export default function Page() {
   return (
-    <button
-      id="first-party-error-btn"
-      onClick={() => {
-        try {
-          throwFirstPartyError();
-        } catch (e) {
-          Sentry.captureException(e);
-        }
-      }}
-    >
-      Throw First Party Error
-    </button>
+    <>
+      <button
+        id="first-party-error-btn"
+        onClick={() => {
+          try {
+            throwFirstPartyError();
+          } catch (e) {
+            Sentry.captureException(e);
+          }
+        }}
+      >
+        Throw First Party Error
+      </button>
+      <button
+        id="dependency-error-btn"
+        onClick={async () => {
+          const { createDependencyError } = await import('sentry-metadata-test-dependency');
+          Sentry.captureException(createDependencyError());
+        }}
+      >
+        Capture Dependency Error
+      </button>
+      <button
+        id="dependency-only-error-btn"
+        onClick={async () => {
+          const { createAsyncDependencyError } = await import('sentry-metadata-test-dependency');
+          Sentry.captureException(await createAsyncDependencyError());
+        }}
+      >
+        Capture Dependency-Only Error
+      </button>
+    </>
   );
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.d.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.d.ts
new file mode 100644
index 000000000000..0071fa0b3ec2
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.d.ts
@@ -0,0 +1,2 @@
+export function createDependencyError(): Error;
+export function createAsyncDependencyError(): Promise<Error>;
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.js b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.js
new file mode 100644
index 000000000000..be62d583d1d3
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/index.js
@@ -0,0 +1,10 @@
+export function createDependencyError() {
+  return new Error('application-key-dependency-error');
+}
+
+export function createAsyncDependencyError() {
+  return new Promise(resolve => {
+    // Wait until the application's call stack has unwound so the error stack contains only a dependency frame.
+    queueMicrotask(() => resolve(new Error('application-key-dependency-only-error')));
+  });
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/package.json
new file mode 100644
index 000000000000..0811417bd955
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/fixtures/metadata-dependency/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "sentry-metadata-test-dependency",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "main": "index.js"
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
index d0f5b13bb555..f1ad74d2ea85 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
@@ -9,7 +9,10 @@ Sentry.init({
   integrations: [
     Sentry.thirdPartyErrorFilterIntegration({
       filterKeys: ['nextjs-16-e2e'],
-      behaviour: 'apply-tag-if-contains-third-party-frames',
+      behaviour:
+        process.env.NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES === '1'
+          ? 'apply-tag-if-exclusively-contains-third-party-frames'
+          : 'apply-tag-if-contains-third-party-frames',
     }),
   ],
   // Verify Log type is available
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/next.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/next.config.ts
index 6893bd77fdf7..aee951174d24 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/next.config.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/next.config.ts
@@ -19,6 +19,7 @@ const nextConfig: NextConfig = {
 export default withSentryConfig(nextConfig, {
   silent: true,
   applicationKey: 'nextjs-16-e2e',
+  applicationKeyExcludeDependencies: process.env.NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES === '1',
   reactComponentAnnotation: {
     enabled: true,
   },
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
index 4629e84a780d..330998a1e357 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
@@ -44,6 +44,7 @@
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "require-in-the-middle": "^8",
+    "sentry-metadata-test-dependency": "file:../../test-applications/nextjs-16/fixtures/metadata-dependency",
     "zod": "^3.22.4"
   },
   "devDependencies": {
@@ -66,6 +67,11 @@
   "sentryTest": {
     "runner": "namespace-profile-sentry-javascript",
     "variants": [
+      {
+        "build-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:build",
+        "label": "nextjs-16 (exclude application key dependencies)",
+        "assert-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:assert"
+      },
       {
         "build-command": "pnpm test:build-webpack",
         "label": "nextjs-16 (webpack)",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
index cc3dfde118af..613590b114ba 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
@@ -7,6 +7,27 @@ import { isVinext } from './isVinext';
 
 test.skip(isVinext, 'Checks the build output of Next.js');
 
+test('excludes dependency metadata while preserving application metadata', () => {
+  test.skip(isDevMode || process.env.NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES !== '1');
+
+  const staticDir = path.join(process.cwd(), '.next', 'static');
+  const chunks = fs
+    .readdirSync(staticDir, { recursive: true })
+    .filter(file => String(file).endsWith('.js'))
+    .map(file => fs.readFileSync(path.join(staticDir, String(file)), 'utf8'));
+  const dependencyChunks = chunks.filter(chunk => chunk.includes('application-key-dependency-error'));
+  const applicationChunks = chunks.filter(chunk => chunk.includes('first-party-error'));
+
+  expect(dependencyChunks.length).toBeGreaterThan(0);
+  expect(applicationChunks.length).toBeGreaterThan(0);
+  for (const chunk of dependencyChunks) {
+    expect(chunk).not.toContain('_sentryBundlerPluginAppKey:nextjs-16-e2e');
+  }
+  for (const chunk of applicationChunks) {
+    expect(chunk).toContain('_sentryBundlerPluginAppKey:nextjs-16-e2e');
+  }
+});
+
 test('emits no absolute-path imports into the server output', () => {
   const leaks = findAbsolutePathImports({ outputDir: path.join(process.cwd(), '.next', 'server') });
 
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/third-party-filter.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/third-party-filter.test.ts
index a89a8cf6645d..2c7104a2864d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/third-party-filter.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/third-party-filter.test.ts
@@ -1,5 +1,6 @@
 import test, { expect } from '@playwright/test';
 import { waitForError } from '@sentry-internal/test-utils';
+import { isDevMode } from './isDevMode';
 import { isVinext } from './isVinext';
 
 const isWebpackDev = process.env.TEST_ENV === 'development-webpack';
@@ -13,6 +14,7 @@ test('First-party error with React frames should not be tagged as third-party co
   });
 
   await page.goto('/third-party-filter');
+  await page.waitForFunction(() => '__SENTRY__' in window);
   await page.locator('#first-party-error-btn').click();
 
   const errorEvent = await errorPromise;
@@ -22,7 +24,7 @@ test('First-party error with React frames should not be tagged as third-party co
   // In production, TEST_ENV=production is shared by both turbopack and webpack variants.
   // Only assert when the build is actually turbopack.
   if (errorEvent.tags?.turbopack) {
-    // The integration uses `apply-tag-if-contains-third-party-frames` which tags errors
+    // By default, the integration uses `apply-tag-if-contains-third-party-frames` which tags errors
     // if ANY frame is third-party. This error is thrown inside a React onClick handler,
     // so the stack trace contains React frames from node_modules. These must NOT be
     // treated as third-party — the module metadata injection must cover node_modules too
@@ -30,3 +32,46 @@ test('First-party error with React frames should not be tagged as third-party co
     expect(errorEvent.tags?.third_party_code).toBeUndefined();
   }
 });
+
+test('retains application errors with dependency frames when dependency metadata is excluded', async ({ page }) => {
+  test.skip(process.env.NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES !== '1');
+
+  const errorPromise = waitForError('nextjs-16', event => {
+    return event.exception?.values?.some(value => value.value === 'application-key-dependency-error') ?? false;
+  });
+
+  await page.goto('/third-party-filter');
+  await page.waitForFunction(() => '__SENTRY__' in window);
+  await page.locator('#dependency-error-btn').click();
+
+  const event = await errorPromise;
+  const exception = event.exception?.values?.[0];
+  expect(exception?.value).toBe('application-key-dependency-error');
+  expect(exception?.mechanism).toEqual({ handled: true, type: 'generic' });
+  expect(event.tags?.third_party_code).toBeUndefined();
+  expect(event.tags?.turbopack).toBe(true);
+  expect(new Set(exception?.stacktrace?.frames?.map(frame => frame.filename)).size).toBeGreaterThan(1);
+});
+
+test('classifies dependency-only errors according to dependency metadata inclusion', async ({ page }) => {
+  test.skip(isVinext || isDevMode, 'Checks dependency-only chunks in production Next.js builds');
+
+  const errorPromise = waitForError('nextjs-16', event => {
+    return event.exception?.values?.some(value => value.value === 'application-key-dependency-only-error') ?? false;
+  });
+
+  await page.goto('/third-party-filter');
+  await page.waitForFunction(() => '__SENTRY__' in window);
+  await page.locator('#dependency-only-error-btn').click();
+
+  const event = await errorPromise;
+  const frames = event.exception?.values?.[0]?.stacktrace?.frames;
+  expect(frames).toHaveLength(1);
+
+  const filename = frames![0]!.filename;
+  const chunkResponse = await page.request.get(filename!.replace('app://', ''));
+  expect(await chunkResponse.text()).toContain('application-key-dependency-only-error');
+  expect(event.tags?.third_party_code).toBe(
+    process.env.NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES === '1' ? true : undefined,
+  );
+});
diff --git a/packages/nextjs/src/config/turbopack/constructTurbopackConfig.ts b/packages/nextjs/src/config/turbopack/constructTurbopackConfig.ts
index 391dee0e39f1..da0ca895c246 100644
--- a/packages/nextjs/src/config/turbopack/constructTurbopackConfig.ts
+++ b/packages/nextjs/src/config/turbopack/constructTurbopackConfig.ts
@@ -65,22 +65,25 @@ export function constructTurbopackConfig({
     newConfig.rules = safelyAddTurbopackRule(newConfig.rules, { matcher, rule });
   }
 
-  // Add module metadata injection loader for thirdPartyErrorFilterIntegration support.
-  // This loader tags modules with `_sentryModuleMetadata` so the integration can tell
-  // first-party code from third-party code. We intentionally do NOT use
-  // `condition: { not: 'foreign' }` so that node_modules are also tagged as first-party,
-  // matching the webpack plugin's BannerPlugin behavior (which injects into all chunks
-  // without excluding node_modules). The injected code is wrapped in a try-catch IIFE
-  // so it is safe even for node_modules with strict initialization order.
-  // We only exclude Next.js build polyfills which contain non-standard syntax that causes
-  // parse errors when any code is prepended (Turbopack re-parses the loader output).
+  // Tag modules so thirdPartyErrorFilterIntegration can identify first-party code. Dependencies
+  // are tagged by default to match webpack's BannerPlugin, which injects metadata into all chunks.
+  // Opting out with `applicationKeyExcludeDependencies` can leave dependency-only chunks untagged.
+  // The injected code is wrapped in a try-catch IIFE, so it is safe even for dependencies with
+  // strict initialization order. Next.js build polyfills are excluded because they contain
+  // non-standard syntax that causes parse errors when Turbopack re-parses the loader output.
   // Server and edge modules are skipped because only the browser reads these tags.
   const applicationKey = userSentryOptions?.applicationKey;
   if (applicationKey && nextJsVersion && supportsTurbopackRuleCondition(nextJsVersion)) {
     newConfig.rules = safelyAddTurbopackRule(newConfig.rules, {
       matcher: '*.{ts,tsx,js,jsx,mjs,cjs}',
       rule: {
-        condition: { all: ['browser', { not: { path: /next\/dist\/build\/polyfills/ } }] },
+        condition: {
+          all: [
+            'browser',
+            { not: { path: /next\/dist\/build\/polyfills/ } },
+            ...(userSentryOptions?.applicationKeyExcludeDependencies ? [{ not: 'foreign' as const }] : []),
+          ],
+        },
         loaders: [
           {
             loader: path.resolve(__dirname, '..', 'loaders', 'moduleMetadataInjectionLoader.js'),
diff --git a/packages/nextjs/src/config/types.ts b/packages/nextjs/src/config/types.ts
index 4e1e6bc2d9e3..7c990a480e51 100644
--- a/packages/nextjs/src/config/types.ts
+++ b/packages/nextjs/src/config/types.ts
@@ -225,6 +225,21 @@ export type SentryBuildOptions = Omit<
    */
   applicationKey?: string;
 
+  /**
+   * Skip application key metadata injection for dependencies in Turbopack builds with Next.js 16+.
+   * Uses Turbopack's `foreign` condition, which includes `node_modules` and some Next.js internals.
+   * Requires `applicationKey`. Has no effect on webpack builds.
+   *
+   * This reduces per-module injection overhead, but chunks containing only dependencies may no
+   * longer be tagged as first-party. Only use with `*-exclusively-contains-third-party-frames`
+   * behaviours of `thirdPartyErrorFilterIntegration`, and accept that errors whose stacks are
+   * entirely in untagged chunks can be dropped or tagged as third-party. With `*-contains-*`
+   * behaviours, even one frame from an untagged chunk can cause this misclassification.
+   *
+   * @default false
+   */
+  applicationKeyExcludeDependencies?: boolean;
+
   /**
    * Metadata that should be associated with the built application.
    *
diff --git a/packages/nextjs/src/config/withSentryConfig/getFinalConfigObject.ts b/packages/nextjs/src/config/withSentryConfig/getFinalConfigObject.ts
index e855041202e1..6a2e4b164bb9 100644
--- a/packages/nextjs/src/config/withSentryConfig/getFinalConfigObject.ts
+++ b/packages/nextjs/src/config/withSentryConfig/getFinalConfigObject.ts
@@ -1,6 +1,8 @@
+import { getBuildLogger } from '../buildLogger';
 import type { NextConfigObject, SentryBuildOptions } from '../types';
 import { getNextjsVersion } from '../util';
 import { setUpBuildTimeVariables } from './buildTime';
+import type { BundlerInfo } from './getFinalConfigObjectBundlerUtils';
 import {
   getBundlerInfo,
   getServerExternalPackagesPatch,
@@ -61,6 +63,7 @@ export function getFinalConfigObject(
   const bundlerInfo = getBundlerInfo(nextJsVersion);
   maybeWarnAboutUnsupportedTurbopack(nextJsVersion, bundlerInfo, userSentryOptions.silent);
   maybeWarnAboutTurbopackModuleMetadata(userSentryOptions, bundlerInfo);
+  maybeWarnAboutApplicationKeyExcludeDependencies(userSentryOptions, bundlerInfo);
   maybeWarnAboutUnsupportedRunAfterProductionCompileHook(nextJsVersion, userSentryOptions, bundlerInfo);
 
   const turboPackConfig = maybeConstructTurbopackConfig(
@@ -108,3 +111,23 @@ export function getFinalConfigObject(
     ...getTurbopackPatch(bundlerInfo, turboPackConfig),
   };
 }
+
+function maybeWarnAboutApplicationKeyExcludeDependencies(
+  userSentryOptions: SentryBuildOptions,
+  bundlerInfo: BundlerInfo,
+): void {
+  if (!userSentryOptions.applicationKeyExcludeDependencies) {
+    return;
+  }
+
+  const logger = getBuildLogger(userSentryOptions.silent);
+  if (!userSentryOptions.applicationKey) {
+    logger.warn(
+      '[@sentry/nextjs] `applicationKeyExcludeDependencies` requires `applicationKey` and has no effect without it.',
+    );
+  } else if (bundlerInfo.isWebpack) {
+    logger.warn(
+      '[@sentry/nextjs] `applicationKeyExcludeDependencies` only applies to Turbopack builds and has no effect on webpack builds.',
+    );
+  }
+}
diff --git a/packages/nextjs/test/config/turbopack/constructTurbopackConfig.test.ts b/packages/nextjs/test/config/turbopack/constructTurbopackConfig.test.ts
index 3670ff6244e7..39aa27f8760a 100644
--- a/packages/nextjs/test/config/turbopack/constructTurbopackConfig.test.ts
+++ b/packages/nextjs/test/config/turbopack/constructTurbopackConfig.test.ts
@@ -990,20 +990,40 @@ describe('moduleMetadataInjection with applicationKey', () => {
     expect(rule.loaders[0]!.options.applicationKey).toBe('my-top-level-key');
   });
 
-  it('should only tag browser modules and exclude Next.js polyfills, not all foreign modules', () => {
-    const userNextConfig: NextConfigObject = {};
+  it.each([undefined, false])(
+    'includes dependencies when applicationKeyExcludeDependencies is %s',
+    applicationKeyExcludeDependencies => {
+      const userNextConfig: NextConfigObject = {};
+
+      const result = constructTurbopackConfig({
+        userNextConfig,
+        userSentryOptions: { applicationKey: 'my-app', applicationKeyExcludeDependencies },
+        nextJsVersion: '16.0.0',
+      });
+
+      const rule = result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}'] as { condition?: unknown; loaders: unknown[] };
+      expect(rule.condition).toEqual({ all: ['browser', { not: { path: /next\/dist\/build\/polyfills/ } }] });
+    },
+  );
 
+  it('excludes dependencies from browser metadata injection when opted in', () => {
     const result = constructTurbopackConfig({
-      userNextConfig,
-      userSentryOptions: { applicationKey: 'my-app' },
+      userNextConfig: {},
+      userSentryOptions: { applicationKey: 'my-app', applicationKeyExcludeDependencies: true },
       nextJsVersion: '16.0.0',
     });
 
-    const rule = result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}'] as { condition?: unknown; loaders: unknown[] };
-    // Unlike component annotation (which uses { not: 'foreign' }), metadata injection
-    // must cover node_modules to match the webpack plugin's BannerPlugin behavior.
-    // Only Next.js build polyfills are excluded because they have non-standard syntax.
-    expect(rule.condition).toEqual({ all: ['browser', { not: { path: /next\/dist\/build\/polyfills/ } }] });
+    expect(result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}']).toEqual({
+      condition: {
+        all: ['browser', { not: { path: /next\/dist\/build\/polyfills/ } }, { not: 'foreign' }],
+      },
+      loaders: [
+        {
+          loader: '/mocked/path/to/moduleMetadataInjectionLoader.js',
+          options: { applicationKey: 'my-app' },
+        },
+      ],
+    });
   });
 
   it('should NOT add metadata loader rule when Next.js < 16', () => {
@@ -1018,17 +1038,20 @@ describe('moduleMetadataInjection with applicationKey', () => {
     expect(result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}']).toBeUndefined();
   });
 
-  it('should NOT add metadata loader rule when applicationKey is not set', () => {
-    const userNextConfig: NextConfigObject = {};
+  it.each([undefined, true])(
+    'does not inject metadata without applicationKey when exclusion is %s',
+    applicationKeyExcludeDependencies => {
+      const userNextConfig: NextConfigObject = {};
 
-    const result = constructTurbopackConfig({
-      userNextConfig,
-      userSentryOptions: {},
-      nextJsVersion: '16.0.0',
-    });
+      const result = constructTurbopackConfig({
+        userNextConfig,
+        userSentryOptions: { applicationKeyExcludeDependencies },
+        nextJsVersion: '16.0.0',
+      });
 
-    expect(result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}']).toBeUndefined();
-  });
+      expect(result.rules!['*.{ts,tsx,js,jsx,mjs,cjs}']).toBeUndefined();
+    },
+  );
 
   it('should NOT add metadata loader rule when nextJsVersion is undefined', () => {
     const userNextConfig: NextConfigObject = {};
diff --git a/packages/nextjs/test/config/withSentryConfig.test.ts b/packages/nextjs/test/config/withSentryConfig.test.ts
index cc749732eb35..9cec2cc71410 100644
--- a/packages/nextjs/test/config/withSentryConfig.test.ts
+++ b/packages/nextjs/test/config/withSentryConfig.test.ts
@@ -1302,6 +1302,41 @@ describe('withSentryConfig', () => {
     });
   });
 
+  describe('applicationKeyExcludeDependencies warnings', () => {
+    beforeEach(() => {
+      vi.spyOn(util, 'getNextjsVersion').mockReturnValue('16.0.0');
+    });
+
+    afterEach(() => {
+      vi.restoreAllMocks();
+    });
+
+    it('warns without applicationKey', () => {
+      vi.spyOn(util, 'detectActiveBundler').mockReturnValue('turbopack');
+      const consoleWarnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+
+      materializeFinalNextConfig(exportedNextConfig, undefined, { applicationKeyExcludeDependencies: true });
+
+      expect(consoleWarnSpy).toHaveBeenCalledWith(
+        '[@sentry/nextjs] `applicationKeyExcludeDependencies` requires `applicationKey` and has no effect without it.',
+      );
+    });
+
+    it('warns on webpack when applicationKey is set', () => {
+      vi.spyOn(util, 'detectActiveBundler').mockReturnValue('webpack');
+      const consoleWarnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+
+      materializeFinalNextConfig(exportedNextConfig, undefined, {
+        applicationKey: 'my-app',
+        applicationKeyExcludeDependencies: true,
+      });
+
+      expect(consoleWarnSpy).toHaveBeenCalledWith(
+        '[@sentry/nextjs] `applicationKeyExcludeDependencies` only applies to Turbopack builds and has no effect on webpack builds.',
+      );
+    });
+  });
+
   describe('turbopack version compatibility warnings', () => {
     const originalTurbopack = process.env.TURBOPACK;
     const originalNodeEnv = process.env.NODE_ENV;

From 24313af0d24a210431f70d985318ca85da497cdb Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Fri, 30 Oct 2026 15:46:40 +0100
Subject: [PATCH 066/169] chore(dependabot): Ignore major react-router updates
 (#25892)

## What

Dependabot no longer opens major version bumps for react-router
packages. Minor and patch bumps still come through.

## Why

We keep the react-router dev dependencies on v7 on purpose, so tests
cover the older major (see #25887).

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Co-authored-by: Martin Sonnberger <martin.sonnberger@sentry.io>
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f0fddbffa61e..dc6184d29f3b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -19,6 +19,13 @@ updates:
       # 2.110.0 raised the engine requirement to Node >=22, while this repo runs Node 20.
       - dependency-name: '@supabase/supabase-js'
         versions: ['>=2.110.0']
+      # Keep react-router dev dependencies on v7, so tests cover the older major.
+      - dependency-name: 'react-router'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'react-router-dom'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@react-router/*'
+        update-types: ['version-update:semver-major']
     groups:
       opentelemetry:
         patterns:

From bc8fdf170009cd3c474b158d9dcf169f1acb9741 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 15:53:29 +0100
Subject: [PATCH 067/169] ci(deps): Dedupe lockfile on Dependabot PRs (#25911)

Dependabot often updates `pnpm-lock.yaml` without deduping, causing
`Check lockfile` to fail. This workflow dedupes Dependabot PR lockfiles
and pushes the result back through a separate `workflow_run` job. The
job with no secrets runs pnpm against the PR; the push job runs no PR
code, validates the PR and lockfile artifact, then uses a narrowly
scoped Gitflow app token for a non-forced push.

This requires the Gitflow app to have write access to `dependabot/**`
branches; please confirm reusing it is acceptable.

<!-- junior-request-attribution:start -->
via **Charly Gomez**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AC092LQMHRJN%3A1793288263.606909 -->

--

[View Junior
Session](https://junior-prod.sentry.dev/conversations/slack%3AC092LQMHRJN%3A1793288263.606909)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AC092LQMHRJN%3A1793288263.606909/?project=4510944073809921)

<!-- junior-session-footer:end -->

---------

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
Co-authored-by: Charly Gomez <charly.gomez1310@gmail.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .github/workflows/build.yml                  |   7 +-
 .github/workflows/dependabot-dedupe-push.yml | 134 +++++++++++++++++++
 .github/workflows/dependabot-dedupe.yml      |  63 +++++++++
 3 files changed, 202 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/dependabot-dedupe-push.yml
 create mode 100644 .github/workflows/dependabot-dedupe.yml

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a546292a32ef..0d470f273e39 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1141,13 +1141,16 @@ jobs:
   #   them. optional-e2e.yml reports the results in a PR comment.
   job_optional_e2e_tests:
     name: E2E Tests (optional)
-    # We only run E2E tests for non-fork PRs because the E2E tests require secrets to work and they can't be accessed from forks
+    # We only run E2E tests for non-fork PRs because the E2E tests require secrets to work and they can't be accessed from forks.
+    # Dependabot PRs are skipped by author, not by `github.actor`: once the Gitflow app pushes the deduped lockfile
+    # (dependabot-dedupe-push.yml), the actor is the app and the run would otherwise get the E2E secrets.
     # We need to add the `always()` check here because the previous step has this as well :(
     # See: https://github.com/actions/runner/issues/2205
     if:
       always() && needs.job_get_metadata.outputs.is_release != 'true' && needs.job_build_tarballs.result == 'success' &&
       needs.job_build.outputs.e2e-matrix-optional != '{"include":[]}' && (github.event_name != 'pull_request' ||
-      github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
+      github.event.pull_request.head.repo.full_name == github.repository) && github.event.pull_request.user.login !=
+      'dependabot[bot]'
     needs: [job_get_metadata, job_build, job_build_tarballs]
     # This job only waits for optional-e2e.yml, which can take most of an hour. GitHub runners are free for public
     # repos and Namespace runners are paid per minute, so the wait runs here and the tests run on Namespace.
diff --git a/.github/workflows/dependabot-dedupe-push.yml b/.github/workflows/dependabot-dedupe-push.yml
new file mode 100644
index 000000000000..3fce5447b7ba
--- /dev/null
+++ b/.github/workflows/dependabot-dedupe-push.yml
@@ -0,0 +1,134 @@
+name: 'Dependabot: Push deduped lockfile'
+
+# Pushes the lockfile from `dependabot-dedupe.yml` to the Dependabot PR branch.
+#
+# This workflow holds the Gitflow app token, so it never runs code from the PR. Everything it
+# receives is untrusted: anyone with write access can push to a Dependabot branch, and the run that
+# produced the artifact used the PR's version of `dependabot-dedupe.yml`. So it looks the PR up
+# through the API, accepts only a single regular `pnpm-lock.yaml` file and commits nothing else.
+#
+# The app token is limited to `contents: write` on this repository, not to `dependabot/**` branches, so
+# nothing from the PR may run before it is minted. Pushing as the app also changes `github.actor` on the
+# PR's next CI run, so jobs that keep secrets away from Dependabot must check the PR author, not the actor.
+
+on:
+  workflow_run:
+    workflows: ['Dependabot: Dedupe lockfile']
+    types: [completed]
+
+permissions:
+  actions: read
+  contents: read
+  pull-requests: read
+
+concurrency:
+  group: dependabot-dedupe-push-${{ github.event.workflow_run.head_sha }}
+  cancel-in-progress: false
+
+jobs:
+  push:
+    name: Push deduped lockfile
+    if: |
+      github.event.workflow_run.conclusion == 'success'
+      && github.event.workflow_run.event == 'pull_request'
+      && github.event.workflow_run.head_repository.full_name == github.repository
+    runs-on: namespace-profile-sentry-javascript-small
+    timeout-minutes: 5
+    env:
+      GH_TOKEN: ${{ github.token }}
+      RUN_ID: ${{ github.event.workflow_run.id }}
+      HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
+    steps:
+      - name: Find artifact and Dependabot PR
+        id: pr
+        run: |
+          artifacts=$(gh api "repos/${GITHUB_REPOSITORY}/actions/runs/${RUN_ID}/artifacts" \
+            --jq '[.artifacts[] | select(.name == "pnpm-lock")] | length')
+          if [ "$artifacts" != "1" ]; then
+            echo "No deduped lockfile to push."
+            exit 0
+          fi
+
+          head_ref=$(gh api "repos/${GITHUB_REPOSITORY}/commits/${HEAD_SHA}/pulls" |
+            jq -r --arg repo "$GITHUB_REPOSITORY" --arg sha "$HEAD_SHA" '
+              [.[] | select(.state == "open"
+                and .base.ref == "develop"
+                and .user.login == "dependabot[bot]"
+                and .head.repo.full_name == $repo
+                and .head.sha == $sha)]
+              | if length == 1 then .[0].head.ref else empty end')
+          if [[ ! "$head_ref" =~ ^dependabot/[A-Za-z0-9._/@+-]+$ ]]; then
+            echo "::error::No open Dependabot PR into develop has head commit ${HEAD_SHA}."
+            exit 1
+          fi
+          echo "head_ref=${head_ref}" >> "$GITHUB_OUTPUT"
+
+      - name: Download deduped lockfile
+        if: steps.pr.outputs.head_ref
+        uses: actions/download-artifact@v8
+        with:
+          name: pnpm-lock
+          path: ${{ runner.temp }}/pnpm-lock
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ github.token }}
+
+      - name: Check out PR branch
+        if: steps.pr.outputs.head_ref
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.workflow_run.head_sha }}
+          persist-credentials: false
+
+      # Replace the file instead of writing through it, so a symlinked lockfile in the PR cannot redirect the write.
+      - name: Apply deduped lockfile
+        if: steps.pr.outputs.head_ref
+        id: apply
+        env:
+          LOCKFILE_DIR: ${{ runner.temp }}/pnpm-lock
+        run: |
+          if [ "$(find "$LOCKFILE_DIR" -mindepth 1 | wc -l)" != "1" ] || [ ! -f "$LOCKFILE_DIR/pnpm-lock.yaml" ] || [ -L "$LOCKFILE_DIR/pnpm-lock.yaml" ]; then
+            echo "::error::The artifact must contain exactly one regular file named pnpm-lock.yaml."
+            exit 1
+          fi
+          if [ "$(git ls-files --stage -- pnpm-lock.yaml | cut -d' ' -f1)" != "100644" ]; then
+            echo "::error::pnpm-lock.yaml in the PR is not a regular file."
+            exit 1
+          fi
+          rm pnpm-lock.yaml
+          cp "$LOCKFILE_DIR/pnpm-lock.yaml" pnpm-lock.yaml
+
+          changes=$(git status --porcelain)
+          if [ -z "$changes" ]; then
+            echo "Lockfile is already deduped."
+            exit 0
+          fi
+          if [ "$changes" != " M pnpm-lock.yaml" ]; then
+            echo "::error::Unexpected changes:"
+            echo "$changes"
+            exit 1
+          fi
+          echo "changed=true" >> "$GITHUB_OUTPUT"
+
+      # An app token is needed so the push triggers CI again; pushes made with GITHUB_TOKEN do not.
+      - name: Generate GitHub App token
+        if: steps.apply.outputs.changed == 'true'
+        id: app-token
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        with:
+          client-id: ${{ vars.GITFLOW_APP_ID }}
+          private-key: ${{ secrets.GITFLOW_APP_PRIVATE_KEY }}
+          permission-contents: write
+
+      # `[dependabot skip]` lets Dependabot keep rebasing the PR over this commit.
+      # The push is not forced, so it fails if the branch moved past HEAD_SHA in the meantime.
+      - name: Commit and push
+        if: steps.apply.outputs.changed == 'true'
+        env:
+          APP_TOKEN: ${{ steps.app-token.outputs.token }}
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
+          HEAD_REF: ${{ steps.pr.outputs.head_ref }}
+        run: |
+          git config user.name "${APP_SLUG}[bot]"
+          git config user.email "${APP_SLUG}[bot]@users.noreply.github.com"
+          git commit -m "chore(deps): Dedupe pnpm-lock.yaml [dependabot skip]" -- pnpm-lock.yaml
+          git push "https://x-access-token:${APP_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:refs/heads/${HEAD_REF}"
diff --git a/.github/workflows/dependabot-dedupe.yml b/.github/workflows/dependabot-dedupe.yml
new file mode 100644
index 000000000000..05fcf2f42448
--- /dev/null
+++ b/.github/workflows/dependabot-dedupe.yml
@@ -0,0 +1,63 @@
+name: 'Dependabot: Dedupe lockfile'
+
+# Dependabot updates pnpm-lock.yaml without deduping it, so `Check lockfile` (`pnpm dedupe --check`)
+# fails on most of its PRs. This job dedupes the lockfile and uploads it as an artifact. It runs on
+# `pull_request`, so it has no secrets, a read-only token and PR-scoped caches.
+# `dependabot-dedupe-push.yml` validates the result and pushes it to the PR branch.
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    branches:
+      - develop
+    paths:
+      - 'pnpm-lock.yaml'
+
+permissions:
+  contents: read
+
+concurrency:
+  group: dependabot-dedupe-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  dedupe:
+    name: Dedupe lockfile
+    # Only run on pushes made by Dependabot itself. The deduped commit pushed by `dependabot-dedupe-push.yml`
+    # also triggers `synchronize`, and a second full `pnpm dedupe` on it would only confirm there is nothing left to do.
+    if: |
+      github.event.pull_request.user.login == 'dependabot[bot]'
+      && github.actor == 'dependabot[bot]'
+      && github.event.pull_request.head.repo.full_name == github.repository
+    # PR code runs here, so keep its cache writes away from the cache used by develop, like the PR jobs in build.yml.
+    runs-on: namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript-pr
+    # `pnpm dedupe` fetches metadata for every package from npm.
+    timeout-minutes: 20
+    steps:
+      - name: Check out PR branch
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          persist-credentials: false
+
+      - name: Install pnpm
+        uses: ./.github/actions/install-pnpm
+
+      - name: Set up Node
+        uses: actions/setup-node@v7
+        with:
+          node-version-file: 'package.json'
+
+      - name: Dedupe lockfile
+        id: dedupe
+        run: |
+          pnpm dedupe --ignore-scripts --ignore-pnpmfile
+          git diff --quiet pnpm-lock.yaml || echo "changed=true" >> "$GITHUB_OUTPUT"
+
+      - name: Upload deduped lockfile
+        if: steps.dedupe.outputs.changed == 'true'
+        uses: actions/upload-artifact@v7
+        with:
+          name: pnpm-lock
+          path: pnpm-lock.yaml
+          retention-days: 1

From 299a3c3b9df53ee63604986620d4ab6bbeca099d Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Fri, 30 Oct 2026 10:55:53 -0400
Subject: [PATCH 068/169] fix(core): Call native toString without
 page-replaceable lookups in FunctionToString (#25921)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`FunctionToString` could overflow the stack, it happens when a page
hooks `Function.prototype.apply` or when `toString` gets a huge argument
list, this can be fixed by capturing a binding to the native call once
and passing no arguments.

**Why does a huge argument list trigger this?** V8 only fits so many
args on the stack. Our wrapper held two copies (the incoming call and
our call to native `toString`), so a huge list overflows where native's
single copy fits. This is mentioned on
[MDN](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Function/apply#:~:text=But%20beware%3A%20by%20using%20apply()%20(or%20the%20spread%20syntax)%20with%20an%20arbitrarily%20long%20arguments%20list%2C%20you%20run%20the%20risk%20of%20exceeding%20the%20JavaScript%20engine%27s%20argument%20length%20limit.).

I added tests for an apply hook that calls toString and a 100k argument
call, both overflow before the fix.

Related to #22515, which removed the same kind of re-entry through
`Reflect.apply`.

----

⚠️ This is a guess at best at an issue that was reported, no guarantee
it fixes it because it seems far fetched that this is what happened.
Feel free to close if this is too much.
---
 .../core/src/integrations/functiontostring.ts |  8 +++--
 .../lib/integrations/functiontostring.test.ts | 36 +++++++++++++++++++
 2 files changed, 42 insertions(+), 2 deletions(-)

diff --git a/packages/core/src/integrations/functiontostring.ts b/packages/core/src/integrations/functiontostring.ts
index c915e55d8c3f..2f3a8ce295d3 100644
--- a/packages/core/src/integrations/functiontostring.ts
+++ b/packages/core/src/integrations/functiontostring.ts
@@ -15,11 +15,15 @@ const _functionToStringIntegration = (() => {
     setupOnce() {
       // eslint-disable-next-line @typescript-eslint/unbound-method
       const originalFunctionToString = Function.prototype.toString;
+      // Bound once so calls neither look up a page-replaceable `apply` nor copy arguments, which native toString ignores
+      const callOriginalFunctionToString = Function.prototype.call.bind(originalFunctionToString) as (
+        thisArg: unknown,
+      ) => string;
 
       // intrinsics (like Function.prototype) might be immutable in some environments
       // e.g. Node with --frozen-intrinsics, XS (an embedded JavaScript engine) or SES (a JavaScript proposal)
       try {
-        Function.prototype.toString = function (this: WrappedFunction, ...args: unknown[]): string {
+        Function.prototype.toString = function (this: WrappedFunction): string {
           const originalFunction = getOriginalFunction(this);
           let unwrappedFunction: WrappedFunction | undefined;
 
@@ -33,7 +37,7 @@ const _functionToStringIntegration = (() => {
             // `toString` never throws here, so fall back to it to avoid turning harmless introspection into noise.
           }
 
-          return originalFunctionToString.apply(unwrappedFunction ?? this, args);
+          return callOriginalFunctionToString(unwrappedFunction ?? this);
         };
       } catch {
         // ignore errors here, just don't patch this
diff --git a/packages/core/test/lib/integrations/functiontostring.test.ts b/packages/core/test/lib/integrations/functiontostring.test.ts
index 99b54fa1c3ff..e42c83a77611 100644
--- a/packages/core/test/lib/integrations/functiontostring.test.ts
+++ b/packages/core/test/lib/integrations/functiontostring.test.ts
@@ -84,6 +84,42 @@ describe('FunctionToString', () => {
     expect(inspectedFunction.toString()).toBe(expected);
   });
 
+  it('does not recurse when Function.prototype.apply performs a function toString check', () => {
+    function inspectedFunction(): void {}
+
+    const fts = functionToStringIntegration();
+    getClient()?.addIntegration(fts);
+    const expected = inspectedFunction.toString();
+
+    const applySpy = vi.spyOn(Function.prototype, 'apply').mockImplementation(function (
+      this: Function,
+      thisArg: unknown,
+      args?: unknown[],
+    ) {
+      this.toString();
+      return Reflect.apply(this, thisArg, args ?? []);
+    });
+    let result: unknown;
+    try {
+      result = inspectedFunction.toString();
+    } catch (error) {
+      result = error;
+    }
+    applySpy.mockRestore();
+
+    expect(result).toBe(expected);
+  });
+
+  it('does not overflow the stack when called with many arguments', () => {
+    function inspectedFunction(): void {}
+
+    const fts = functionToStringIntegration();
+    getClient()?.addIntegration(fts);
+    const expected = inspectedFunction.toString();
+
+    expect(Reflect.apply(Function.prototype.toString, inspectedFunction, new Array(100_000))).toBe(expected);
+  });
+
   it('falls back to native toString and does not throw when the carrier read throws', () => {
     const foo = {
       bar(wat: boolean): boolean {

From de967f799ac748214a0f9704aabd1d971dc3f8ff Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 16:09:15 +0100
Subject: [PATCH 069/169] ci(deps): Bump anthropics/claude-code-action from
 1.0.236 to 1.0.264 (#25952)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[anthropics/claude-code-action](https://github.com/anthropics/claude-code-action)
from 1.0.236 to 1.0.264.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/claude-code-action/releases">anthropics/claude-code-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.264</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: use claude-plugins-official in plugin examples by <a
href="https://github.com/mhegazy"><code>@​mhegazy</code></a> in <a
href="https://redirect.github.com/anthropics/claude-code-action/pull/1932">anthropics/claude-code-action#1932</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.263...v1.0.264">https://github.com/anthropics/claude-code-action/compare/v1.0.263...v1.0.264</a></p>
<h2>v1.0.263</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.262...v1.0.263">https://github.com/anthropics/claude-code-action/compare/v1.0.262...v1.0.263</a></p>
<h2>v1.0.262</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: bump Bun to 1.4.4 by <a
href="https://github.com/dylan-conway"><code>@​dylan-conway</code></a>
in <a
href="https://redirect.github.com/anthropics/claude-code-action/pull/1916">anthropics/claude-code-action#1916</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/dylan-conway"><code>@​dylan-conway</code></a>
made their first contribution in <a
href="https://redirect.github.com/anthropics/claude-code-action/pull/1916">anthropics/claude-code-action#1916</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.261...v1.0.262">https://github.com/anthropics/claude-code-action/compare/v1.0.261...v1.0.262</a></p>
<h2>v1.0.261</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.260...v1.0.261">https://github.com/anthropics/claude-code-action/compare/v1.0.260...v1.0.261</a></p>
<h2>v1.0.260</h2>
<h2>What's Changed</h2>
<ul>
<li>Pin the PR version a run checks out by <a
href="https://github.com/OctavianGuzu"><code>@​OctavianGuzu</code></a>
in <a
href="https://redirect.github.com/anthropics/claude-code-action/pull/1915">anthropics/claude-code-action#1915</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.259...v1.0.260">https://github.com/anthropics/claude-code-action/compare/v1.0.259...v1.0.260</a></p>
<h2>v1.0.259</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.258...v1.0.259">https://github.com/anthropics/claude-code-action/compare/v1.0.258...v1.0.259</a></p>
<h2>v1.0.258</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.257...v1.0.258">https://github.com/anthropics/claude-code-action/compare/v1.0.257...v1.0.258</a></p>
<h2>v1.0.257</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.256...v1.0.257">https://github.com/anthropics/claude-code-action/compare/v1.0.256...v1.0.257</a></p>
<h2>v1.0.256</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.255...v1.0.256">https://github.com/anthropics/claude-code-action/compare/v1.0.255...v1.0.256</a></p>
<h2>v1.0.255</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.254...v1.0.255">https://github.com/anthropics/claude-code-action/compare/v1.0.254...v1.0.255</a></p>
<h2>v1.0.254</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.253...v1.0.254">https://github.com/anthropics/claude-code-action/compare/v1.0.253...v1.0.254</a></p>
<h2>v1.0.253</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.252...v1.0.253">https://github.com/anthropics/claude-code-action/compare/v1.0.252...v1.0.253</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/d70510b174a1244958df0b03166a54912811f3e6"><code>d70510b</code></a>
chore: bump Claude Code to 2.1.312 and Agent SDK to 0.3.312</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/98a9e39fe1e0e81f39cec7f8b24f04c3e39192ed"><code>98a9e39</code></a>
docs: use claude-plugins-official in plugin examples (<a
href="https://redirect.github.com/anthropics/claude-code-action/issues/1932">#1932</a>)</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/8041f1d17e0e7d2f2cfe35002962e9f26237c0bb"><code>8041f1d</code></a>
chore: bump Claude Code to 2.1.311 and Agent SDK to 0.3.311</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/925afb53776cf1a2b738c6bdbed37b4d4000ef13"><code>925afb5</code></a>
chore: bump Bun to 1.4.4 (<a
href="https://redirect.github.com/anthropics/claude-code-action/issues/1916">#1916</a>)</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/16f9f71ab9c490faf367f94dd294897edc25be33"><code>16f9f71</code></a>
chore: bump Claude Code to 2.1.310 and Agent SDK to 0.3.310</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/8d70a0dd265122bd65b8e09d3d959e65373ae2a1"><code>8d70a0d</code></a>
Pin the PR version a run checks out (<a
href="https://redirect.github.com/anthropics/claude-code-action/issues/1915">#1915</a>)</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/ae68417a745a5df4b2124873632bd73a2255e6f6"><code>ae68417</code></a>
chore: bump Claude Code to 2.1.309 and Agent SDK to 0.3.309</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/6b6870e649b5ff408753befeaee5fc7989d4e6a9"><code>6b6870e</code></a>
chore: bump Claude Code to 2.1.308 and Agent SDK to 0.3.308</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/aa8a7738e48bf30a40ee499ce818bef081c5ab5e"><code>aa8a773</code></a>
chore: bump Claude Code to 2.1.307 and Agent SDK to 0.3.307</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/a5a423f75c251dcbff8a74e99f83b2cb03c72bfa"><code>a5a423f</code></a>
chore: bump Claude Code to 2.1.306 and Agent SDK to 0.3.306</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/claude-code-action/compare/8ce9314fa9a404564fa7e954cd84f25bcba2b829...d70510b174a1244958df0b03166a54912811f3e6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anthropics/claude-code-action&package-manager=github_actions&previous-version=1.0.236&new-version=1.0.264)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/auto-fix-issue.yml          | 2 +-
 .github/workflows/dependabot-auto-triage.yml  | 4 ++--
 .github/workflows/track-framework-updates.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/auto-fix-issue.yml b/.github/workflows/auto-fix-issue.yml
index 8feb478c6edb..146ab59d415f 100644
--- a/.github/workflows/auto-fix-issue.yml
+++ b/.github/workflows/auto-fix-issue.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Try to fix the issue with Claude
         id: triage
-        uses: anthropics/claude-code-action@8ce9314fa9a404564fa7e954cd84f25bcba2b829 # v1
+        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
diff --git a/.github/workflows/dependabot-auto-triage.yml b/.github/workflows/dependabot-auto-triage.yml
index 56ebdfe42f2f..c3efead14345 100644
--- a/.github/workflows/dependabot-auto-triage.yml
+++ b/.github/workflows/dependabot-auto-triage.yml
@@ -155,7 +155,7 @@ jobs:
           git config user.email "${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
 
       - name: Open batched runtime fix PR via skill
-        uses: anthropics/claude-code-action@8ce9314fa9a404564fa7e954cd84f25bcba2b829 # v1
+        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
@@ -244,7 +244,7 @@ jobs:
           git config user.email "${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
 
       - name: Open batched dev fix PR via skill
-        uses: anthropics/claude-code-action@8ce9314fa9a404564fa7e954cd84f25bcba2b829 # v1
+        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
diff --git a/.github/workflows/track-framework-updates.yml b/.github/workflows/track-framework-updates.yml
index 3e0172884e7f..9b664d361078 100644
--- a/.github/workflows/track-framework-updates.yml
+++ b/.github/workflows/track-framework-updates.yml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Run Claude digest
         id: digest
-        uses: anthropics/claude-code-action@8ce9314fa9a404564fa7e954cd84f25bcba2b829 # v1
+        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:

From 7c6051950766f3bc39d32f80db6f95b1dd4f7eca Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 16:11:32 +0100
Subject: [PATCH 070/169] ci(deps): Bump getsentry/github-workflows/validate-pr
 from 36c729264d2edc29ebae61950c50e1e9f043ad7e to
 01bcb7fe69bb48bacd83e675840e3dc95b33c730 (#25954)

Bumps
[getsentry/github-workflows/validate-pr](https://github.com/getsentry/github-workflows)
from 36c729264d2edc29ebae61950c50e1e9f043ad7e to
01bcb7fe69bb48bacd83e675840e3dc95b33c730.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/github-workflows/blob/main/CHANGELOG.md">getsentry/github-workflows/validate-pr's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>Unreleased</h2>
<h3>Fixes</h3>
<ul>
<li>Validate PR - Skip PRs opened by bots of GitHub Apps owned by Sentry
(the <code>getsentry</code> organization or the <code>sentry</code>
enterprise), such as <code>sentry-junior[bot]</code>. App bot users are
never repo collaborators, so the write-access check couldn't recognize
them. (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/179">#179</a>)</li>
</ul>
<h2>3.4.1</h2>
<h3>Fixes</h3>
<ul>
<li>Danger - Add <code>skip-checkout</code> to preserve a caller's
prepared workspace, including generated custom Dangerfiles. Checkout
remains enabled by default. (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/175">#175</a>)</li>
<li>Updater - Preserve CMake and submodule pins ahead of the selected
release, while reporting divergent histories and Git errors (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/174">#174</a>)</li>
<li>Danger - Harden <code>extra-install-packages</code> handling: pass
the package list into the container via env var instead of host-shell
string interpolation (defense in depth) (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/169">#169</a>)</li>
<li>Updater - Avoid cleanup races in temporary ancestry repositories by
disabling background Git maintenance; preserve original Git errors if
cleanup also fails (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/177">#177</a>)</li>
<li>Sentry-CLI integration test action - Skip the reverse DNS lookup on
server start, which made each start take ~35 s on macOS (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/178">#178</a>)</li>
</ul>
<h2>3.4.0</h2>
<h3>Features</h3>
<ul>
<li>Validate PR - Action is advisory: it posts a single friendly comment
on community PRs that don't reference an issue with maintainer
discussion. PRs are not closed and no labels are applied. Recommended
trigger is <code>types: [opened]</code>.</li>
<li>Validate PR - Skip validation for PRs with fewer than 100 lines
changed, excluding common lock files (<code>Cargo.lock</code>,
<code>yarn.lock</code>, <code>package-lock.json</code>,
<code>Pipfile.lock</code>, etc.). Tiny PRs no longer go through the
issue-discussion loop.</li>
<li>Add validate-pr composite action for validating non-maintainer PRs
against contribution guidelines (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/153">#153</a>)</li>
</ul>
<h3>Fixes</h3>
<ul>
<li>Complete script injection hardening across all actions: move
remaining step outputs to env vars, validate Danger version against
semver (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/152">#152</a>)</li>
<li>Updater - Trigger CI for new PRs without changelog updates (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/166">#166</a>)</li>
<li>Updater - Select the first branch when multiple branches point at
<code>HEAD</code> (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/165">#165</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Bump Danger JS from v13.0.4 to v13.0.5 (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/160">#160</a>)
<ul>
<li><a
href="https://github.com/danger/danger-js/blob/main/CHANGELOG.md#1305">changelog</a></li>
<li><a
href="https://github.com/danger/danger-js/compare/13.0.4...13.0.5">diff</a></li>
</ul>
</li>
</ul>
<h2>3.3.0</h2>
<h3>Features</h3>
<ul>
<li>Updater - Support CMake <code>GIT_TAG</code> with variable
references like <code>${FOO_REF}</code>, resolving and updating the
corresponding <code>set()</code> definition (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/149">#149</a>)</li>
</ul>
<h2>3.2.1</h2>
<h3>Fixes</h3>
<ul>
<li>Sentry-CLI integration test action - Accept chunked ProGuard uploads
for compatibility with Sentry CLI 3.x (<a
href="https://redirect.github.com/getsentry/github-workflows/pull/140">#140</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/github-workflows/commit/01bcb7fe69bb48bacd83e675840e3dc95b33c730"><code>01bcb7f</code></a>
fix(validate-pr): Skip bots of Sentry-owned GitHub Apps (<a
href="https://redirect.github.com/getsentry/github-workflows/issues/179">#179</a>)</li>
<li>See full diff in <a
href="https://github.com/getsentry/github-workflows/compare/36c729264d2edc29ebae61950c50e1e9f043ad7e...01bcb7fe69bb48bacd83e675840e3dc95b33c730">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/validate-pr.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/validate-pr.yml b/.github/workflows/validate-pr.yml
index f3c9f955547f..0c19a310e8dc 100644
--- a/.github/workflows/validate-pr.yml
+++ b/.github/workflows/validate-pr.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: getsentry/github-workflows/validate-pr@36c729264d2edc29ebae61950c50e1e9f043ad7e
+      - uses: getsentry/github-workflows/validate-pr@01bcb7fe69bb48bacd83e675840e3dc95b33c730
         with:
           app-id: ${{ vars.SDK_MAINTAINER_BOT_APP_ID }}
           private-key: ${{ secrets.SDK_MAINTAINER_BOT_PRIVATE_KEY }}

From dcf06e93b1c09446a09bb9b81db661fe767f1b99 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 16:26:51 +0100
Subject: [PATCH 071/169] chore(deps): Enable pnpm autoDedupe (#25961)

**Why:** Dependabot updates `pnpm-lock.yaml` without deduping it, so
`Check lockfile` (`pnpm dedupe --check`) fails on most of its PRs. With
[`autoDedupe`](https://pnpm.io/settings/dependency-resolution#autodedupe)
(pnpm 12.6+), `pnpm install`/`add`/`update` dedupe whenever they write
the lockfile. Dependabot runs `pnpm update <dep> --lockfile-only -r`
plus `pnpm install --lockfile-only` with the pinned pnpm and this
`pnpm-workspace.yaml`, so its lockfiles should come out deduped already.
I reproduced this with pnpm 12.11.2 on a small workspace: without the
setting, those commands left a duplicate and `pnpm dedupe --check`
failed; with it, the check passed.

**How to review:** Just the setting. Running `pnpm install
--lockfile-only` with it on develop leaves the lockfile unchanged, and
`pnpm dedupe --check` passes.

**Unsure about:** Local `pnpm install`/`pnpm add` now dedupe the whole
workspace too, so lockfile diffs can be bigger. I'd keep the #25911
dedupe workflow as a backstop until a few Dependabot PRs pass `Check
lockfile` without its extra commit. Open Dependabot PRs only pick this
up after a rebase.

<!-- junior-request-attribution:start -->
via @msonnb.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AC02TB1YBNGJ%3A1793371893.509089 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Martin Sonnberger <26038247+msonnb@users.noreply.github.com>
---
 pnpm-workspace.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 69f59d9ab5e3..42cc03476a2d 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -69,6 +69,8 @@ strictPeerDependencies: false
 # The packages depend on each other by exact version, not with `workspace:`.
 # This links them from the workspace instead of installing them from npm.
 linkWorkspacePackages: true
+# Lockfiles written by Dependabot or `pnpm add` would otherwise fail `pnpm dedupe --check` in CI.
+autoDedupe: true
 
 overrides:
   nx>minimatch: 10.2.5

From a3dae70c311447963d73c33d05c6a54e939ea880 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 16:47:25 +0100
Subject: [PATCH 072/169] chore(deps-dev): Bump tsx from 4.23.0 to 4.23.15
 (#25958)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [tsx](https://github.com/privatenumber/tsx) from 4.23.0 to
4.23.15.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.15</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.14...v4.23.15">4.23.15</a>
(2026-09-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>exclude bare builtins from namespace inheritance (<a
href="https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a">38e1588</a>)</li>
<li>expose require.cache and require.extensions to tsImport CommonJS
modules (<a
href="https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a">2da3407</a>)</li>
<li>make namespaced register() overloads portable for declaration emit
(<a
href="https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15">562c434</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.15"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.14</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.14">4.23.14</a>
(2026-09-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>restore the CJS bridge namespace for Node 24 require(esm) under
tsImport() (<a
href="https://redirect.github.com/privatenumber/tsx/issues/802">#802</a>)
(<a
href="https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f">6e5236b</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.14"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.13</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.12...v4.23.13">4.23.13</a>
(2026-08-30)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cache:</strong> bound shared transform cache memory (<a
href="https://redirect.github.com/privatenumber/tsx/issues/835">#835</a>)
(<a
href="https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e">28e1f12</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.13"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.12</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.11...v4.23.12">4.23.12</a>
(2026-08-10)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>shim <code>import.meta</code> when tokens are split by comments or
newlines (<a
href="https://redirect.github.com/privatenumber/tsx/issues/829">#829</a>)
(<a
href="https://github.com/privatenumber/tsx/commit/ed9d33046a135de13a35fdfce12368b79d1b1518">ed9d330</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/828">#828</a></li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.12"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/privatenumber/tsx/commit/ca66105a17a2a4c6503fe3a12b5b9ec408286011"><code>ca66105</code></a>
test: fix drive-less file URLs in ESM resolver fixtures</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/2da34075afaed43e2b7fd0aca5fbebaaf337ff3a"><code>2da3407</code></a>
fix: expose require.cache and require.extensions to tsImport CommonJS
modules</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/38e158857e50bca311be7c232a5057e5a2e5347a"><code>38e1588</code></a>
fix: exclude bare builtins from namespace inheritance</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/562c434a5c8695e74327bbeb51cfeb9b86fc7e15"><code>562c434</code></a>
fix: make namespaced register() overloads portable for declaration
emit</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/edfb1f05a3f40b879a41a03a0801c2abd3a3ecf9"><code>edfb1f0</code></a>
build: upgrade pkgroll and externalize CJS loader reference</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/70e78284837c859f09b96cd10cd71d007aa4b795"><code>70e7828</code></a>
test: upgrade tinyspy for disposable API</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/9ed2022dfa9ea1be9511fe6abcde8110c25055a7"><code>9ed2022</code></a>
ci: avoid duplicate release notifications</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/872e77ffc5e96ca5c4727e74c0694debcb26219b"><code>872e77f</code></a>
refactor: use disposables for cleanup</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/6e5236b065738d3687a06396d064774cfede390f"><code>6e5236b</code></a>
fix: restore the CJS bridge namespace for Node 24 require(esm) under
tsImport...</li>
<li><a
href="https://github.com/privatenumber/tsx/commit/28e1f12d04cd2afe1db17f8555b14fe5fb567c6e"><code>28e1f12</code></a>
fix(cache): bound shared transform cache memory (<a
href="https://redirect.github.com/privatenumber/tsx/issues/835">#835</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.0...v4.23.15">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package.json   |   2 +-
 pnpm-lock.yaml | 715 ++++++++++++++++++++++++-------------------------
 2 files changed, 349 insertions(+), 368 deletions(-)

diff --git a/package.json b/package.json
index 7e027c9b17a1..dde3b52dcf3a 100644
--- a/package.json
+++ b/package.json
@@ -166,7 +166,7 @@
     "rollup-plugin-license": "^3.7.1",
     "size-limit": "~12.1.0",
     "tslib": "^2.4.1",
-    "tsx": "^4.23.0",
+    "tsx": "^4.23.15",
     "typescript": "~7.0.2",
     "vitest": "^4.1.11",
     "webpack": "^5.112.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4bdc4bbc393f..cb7ffdabb2c4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -268,14 +268,14 @@ importers:
         specifier: ^2.4.1
         version: 2.8.1
       tsx:
-        specifier: ^4.23.0
-        version: 4.23.0
+        specifier: ^4.23.15
+        version: 4.23.15
       typescript:
         specifier: ~7.0.2
         version: 7.0.2
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
@@ -385,7 +385,7 @@ importers:
         version: 1.2.9
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   dev-packages/bundler-plugin-integration-tests:
     dependencies:
@@ -404,7 +404,7 @@ importers:
         version: 6.0.3
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   dev-packages/bundler-tests:
     dependencies:
@@ -419,10 +419,10 @@ importers:
         version: 4.62.3
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
@@ -452,7 +452,7 @@ importers:
         version: 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
       '@langchain/openai':
         specifier: ^1.6.2
-        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.90)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)
+        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.89)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)
       '@langchain/typesafe':
         specifier: ^0.0.2
         version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))
@@ -486,7 +486,7 @@ importers:
     devDependencies:
       '@cloudflare/vite-plugin':
         specifier: 1.34.0
-        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))
+        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))
       '@cloudflare/workers-types':
         specifier: ^4.20260426.0
         version: 4.20260519.1
@@ -507,10 +507,10 @@ importers:
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler:
         specifier: 4.86.0
         version: 4.86.0(@cloudflare/workers-types@4.20260519.1)
@@ -538,7 +538,7 @@ importers:
         version: 0.30.0
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   dev-packages/e2e-tests:
     devDependencies:
@@ -562,7 +562,7 @@ importers:
         version: 5.5.0(graphql@16.12.0)(supports-color@10.0.0)
       '@aws-sdk/client-bedrock-runtime':
         specifier: ^3.1046.0
-        version: 3.1159.0
+        version: 3.1127.0
       '@aws-sdk/client-dynamodb':
         specifier: ^3.1046.0
         version: 3.1068.0
@@ -592,10 +592,10 @@ importers:
         version: 1.4.0
       '@earendil-works/pi-ai':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-durable':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@flue/runtime':
         specifier: 2.0.3
         version: 2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)
@@ -646,7 +646,7 @@ importers:
         version: 6.15.0(prisma@6.15.0(magicast@0.3.5)(typescript@7.0.2))(typescript@7.0.2)
       '@prisma/orm-postgres':
         specifier: 8.0.0-rc.17
-        version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@sentry/aws-serverless':
         specifier: 11.10.0
         version: link:../../packages/aws-serverless
@@ -1006,7 +1006,7 @@ importers:
         version: 4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(typescript@7.0.2)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/aws-serverless:
     dependencies:
@@ -1164,7 +1164,7 @@ importers:
         version: 1.2.11
       vitest:
         specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack:
         specifier: 5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
@@ -1204,7 +1204,7 @@ importers:
         version: 8.18.0
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler:
         specifier: 4.61.0
         version: 4.61.0(@cloudflare/workers-types@5.20260710.1)
@@ -1338,7 +1338,7 @@ importers:
         version: 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
       '@embroider/vite':
         specifier: ^1.7.2
-        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@glint/ember-tsc':
         specifier: ^1.5.0
         version: 1.10.0(ember-source@6.12.0(rsvp@4.8.5)(supports-color@10.0.0))(supports-color@10.0.0)(typescript@5.8.3)
@@ -1353,7 +1353,7 @@ importers:
         version: 5.8.3
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/esbuild-plugin:
     dependencies:
@@ -1666,7 +1666,7 @@ importers:
         version: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
       nitro:
         specifier: ^3.0.260415-beta
-        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       srvx:
         specifier: ^0.11.22
         version: 0.11.22
@@ -1728,7 +1728,7 @@ importers:
     dependencies:
       '@nuxt/kit':
         specifier: ^4.6.0
-        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../browser
@@ -1762,7 +1762,7 @@ importers:
         version: 4.20260519.1
       '@nuxt/nitro-server':
         specifier: ^3.21.11
-        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema':
         specifier: ^3.21.11
         version: 3.21.11
@@ -1777,22 +1777,22 @@ importers:
         version: 1.15.11
       nitro:
         specifier: ^3.0.260311-beta
-        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       nuxi:
         specifier: ^3.25.1
         version: 3.25.1
       nuxt:
         specifier: 3.21.11
-        version: 3.21.11(51972c16778dadf3035cea341382f655)
+        version: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
       unstorage:
         specifier: ^1.17.5
         version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue:
         specifier: ^3.5.41
         version: 3.5.44(typescript@7.0.2)
@@ -1943,7 +1943,7 @@ importers:
     devDependencies:
       '@react-router/dev':
         specifier: ^7.17.0
-        version: 7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
+        version: 7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
       '@react-router/node':
         specifier: ^7.15.0
         version: 7.18.1(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
@@ -1967,7 +1967,7 @@ importers:
         version: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/remix:
     dependencies:
@@ -2040,7 +2040,7 @@ importers:
         version: 7.8.5
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/replay-canvas:
     dependencies:
@@ -2153,7 +2153,7 @@ importers:
     devDependencies:
       '@apm-js-collab/code-transformer-bundler-plugins':
         specifier: ^0.7.5
-        version: 0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@neondatabase/serverless':
         specifier: 1.2.0
         version: 1.2.0
@@ -2168,7 +2168,7 @@ importers:
         version: 6.1.4
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
@@ -2211,10 +2211,10 @@ importers:
         version: 1.9.11
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/solidstart:
     dependencies:
@@ -2257,7 +2257,7 @@ importers:
         version: 1.0.0(solid-js@1.9.11)
       '@solidjs/start':
         specifier: ^1.3.2
-        version: 1.3.2(a3d6e0cbce53af562c34fef3544b2a36)
+        version: 1.3.2(8e43603e153b7398bba7d0637cae96a5)
       '@solidjs/testing-library':
         specifier: 0.8.5
         version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
@@ -2272,7 +2272,7 @@ importers:
         version: 20.19.43
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-mock-http:
         specifier: ^1.0.4
         version: 1.0.4
@@ -2281,13 +2281,13 @@ importers:
         version: 1.9.11
       vinxi:
         specifier: ^0.5.11
-        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/svelte:
     dependencies:
@@ -2309,7 +2309,7 @@ importers:
         version: link:../../dev-packages/rollup-utils
       '@sveltejs/vite-plugin-svelte':
         specifier: 1.4.0
-        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@testing-library/svelte':
         specifier: ^3.2.1
         version: 3.2.1(svelte@3.59.2)
@@ -2318,7 +2318,7 @@ importers:
         version: 3.59.2
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/sveltekit:
     dependencies:
@@ -2370,10 +2370,10 @@ importers:
         version: link:../browser
       '@sveltejs/kit':
         specifier: ^2.70.2
-        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@sveltejs/vite-plugin-svelte':
         specifier: ^3.0.0
-        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/node':
         specifier: ^20.19.0
         version: 20.19.43
@@ -2382,7 +2382,7 @@ importers:
         version: 4.2.8
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/tanstackstart-react:
     dependencies:
@@ -2422,7 +2422,7 @@ importers:
         version: 20.19.43
       vite:
         specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/typescript: {}
 
@@ -2917,10 +2917,6 @@ packages:
     resolution: {integrity: sha512-IDl/lrPb90aH+pZFHGNDmgH9nAUQj5PlZH1sJ3w7RikctyjHSnY3oNjZhrLoaBoQn/rNK0zsP6OHEqEhj2tdLA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-bedrock-runtime@3.1159.0':
-    resolution: {integrity: sha512-Zj744tR9wNs+jjvb7C8zDBDxjJhGJSMwIHnOc9zdsDdrRirai4CtR5iQ5BMP1qfazjH6jYKCxGpZC1BOUnslKg==}
-    engines: {node: '>=20.0.0'}
-
   '@aws-sdk/client-cognito-identity@3.980.0':
     resolution: {integrity: sha512-nLgMW2drTzv+dTo3ORCcotQPcrUaTQ+xoaDTdSaUXdZO7zbbVyk7ysE5GDTnJdZWcUjHOSB8xfNQhOTTNVPhFw==}
     engines: {node: '>=20.0.0'}
@@ -2961,44 +2957,44 @@ packages:
     resolution: {integrity: sha512-hatCfVf61RsSO5Qjrf7JKln4KiPDprXNJhpx9DNOmyeW1v+i7KNhbawk4d1wAnQ72YciOfhAhyRFec6UZqcnzQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/core@3.978.7':
-    resolution: {integrity: sha512-QsYdn5xhvEBzcDC6bgKuvPv87kFtXK/3f5NqKfR+eok5AAn7RaZnkgBKncX+UW3ZMcjSELyAMATN0iqgZmvWVg==}
+  '@aws-sdk/core@3.978.6':
+    resolution: {integrity: sha512-ykF/MiYoM15dgZwF/WLgjJXVbAK2wU6vjPigeEnOHwyUJ0rdlraO5uekecKNVPkvOnz+oju/5zljViQs1nI1FQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-provider-cognito-identity@3.972.3':
     resolution: {integrity: sha512-dW/DqTk90XW7hIngqntAVtJJyrkS51wcLhGz39lOMe0TlSmZl+5R/UGnAZqNbXmWuJHLzxe+MLgagxH41aTsAQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-env@3.972.78':
-    resolution: {integrity: sha512-d8V47OxkM/FKe7bVfk5Rga4aNGUaQNk3ip1PFIYhxtup9r8SuNIHLs4HfBAmHT25ZbzowluMHp833UXfFMQbhA==}
+  '@aws-sdk/credential-provider-env@3.972.77':
+    resolution: {integrity: sha512-CN6dQCDo32a8n2gvm2HBeqGV5BNI9noG96nTj5bGO2HWtt0Rucu/A8pcnJIqkzILOHSuilnCk0Do8/7h6SOXhQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-http@3.972.80':
-    resolution: {integrity: sha512-OQqanXiRhnl/wBIJc3TtA7TYmnN7VO0mP95eVoHsLXtPwHz6HeccMpi7cqtnhHw+K7p6VIoAt2IK4M9Ixd9uGg==}
+  '@aws-sdk/credential-provider-http@3.972.79':
+    resolution: {integrity: sha512-Netsu0nnmvP2HiN1ZFQBeUu+JehQIuubqz+j2kHDgeSE4HDzniCpIZ7RzoWABq+LTcbCi9W03hywifUagoVIWQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-ini@3.973.23':
-    resolution: {integrity: sha512-pTTRK7xoi8NNbrcjVUSd9YdMTUxiWEPfk8newBQCzV+VS5STh5sDPAy3iO29fSqipqNuCpILJcD6wAawxHvG+w==}
+  '@aws-sdk/credential-provider-ini@3.973.22':
+    resolution: {integrity: sha512-x7/5h58cqOoZR0RWUZC7v/cJOADQR42iSIQkvU+00HVHR4jh8ZpqEgRPGf2zei59iH5qP40lL3bkq49PuWl71g==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-login@3.972.85':
-    resolution: {integrity: sha512-UHjnTeS+5OBFfRL+BQwCGJPJvnzjhGD6dIwncBJDa+ziyQjPUte9Q0I4BCkybGrHotnyiiluXj13bgelP14J5Q==}
+  '@aws-sdk/credential-provider-login@3.972.84':
+    resolution: {integrity: sha512-G9Ty1uIV0laEvEp2KiMbEhsuBAjgaD3KYrwVjAM5VUxpcIuPBqQI5riA7/qzrnSgYiAKQbubbgkwcqCICKCIxg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-node@3.972.90':
-    resolution: {integrity: sha512-+McgOQuAUze95AumVmoOBRp++Z8IjsZ0qOASb6+igHdKNzA0FiIf5kbTFaZ64txfd9KTBDpgvlEDGQE41lSq/A==}
+  '@aws-sdk/credential-provider-node@3.972.89':
+    resolution: {integrity: sha512-O8xj7/sanrnXfFHu/LUujVBiiwn5mknYenU7xt1w6+yvhR1QoDZWXLFh1gLITaFVPtb1jWgEirC+kFNw+//tyw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-process@3.972.78':
-    resolution: {integrity: sha512-bzB92SriflYf6LVRJcDv/a9I87tmkdmdE8hAqT1oRGKFkEH2rxxHeHZVK/4vsiRsFi44cUj0J9+bUSmqYX+26w==}
+  '@aws-sdk/credential-provider-process@3.972.77':
+    resolution: {integrity: sha512-sWA8Jm+ASzkTxoqLizHWRbt8Gj3yZCmZ0hYdvg0uIxuLzWseYcfrDFzaSnkRWlEWSJV38rAWFimdrN0J4NR7Pg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-sso@3.973.22':
-    resolution: {integrity: sha512-MXUkWHgcf6G+TowL+QPvn4kJTEYKd9qHKMV6eNGXSA5lilDgGRrP3EXPHChZ3eZ7z+oprn/ZvOovLoS2WR3D8g==}
+  '@aws-sdk/credential-provider-sso@3.973.21':
+    resolution: {integrity: sha512-KV2LM8fbYUhDzGEBnPwb+ISNfNlhmnpLS+y6A6VsJpg1EI9aUJ0+dRTxh2GrGdneFH0T4TiuboHxz8i6+M38JA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-web-identity@3.972.84':
-    resolution: {integrity: sha512-6I3zYcDHt5ZM0J4gEuRgCHgN505k5haUiiPM46iIQgrHm2p70zpnssHFVYqHYfgJe3Mf+a5+nsF3BZmW4xcZNg==}
+  '@aws-sdk/credential-provider-web-identity@3.972.83':
+    resolution: {integrity: sha512-iekYilmo2Re51fC7gMkEfZ7jFDXwehSCmXjDESaYQsdgYhsLQFG7rTYr3GBvRIyj+Fkda2NxbZX7hAZDaFD0JQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-providers@3.983.0':
@@ -3021,8 +3017,8 @@ packages:
     resolution: {integrity: sha512-1vKJt/6MBB/MBMRM3qzCMdW70syJY8u2DH+dq7yCnPn7wVJmyeAzAa/sK1lIbbYh8BVLbM5FspsT4zbe885gOw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-eventstream@3.972.35':
-    resolution: {integrity: sha512-JAyjfoYxHCXNnCXtbTviEpb1+gxe8tsWQ3URwZIT1Bqhrm4fgDDuCA72n4HVnHMNutBhZLXnYgc97ehkhfGpMA==}
+  '@aws-sdk/middleware-eventstream@3.972.34':
+    resolution: {integrity: sha512-0IUoHM9N75uMaf70Tj2l+qmOSNw8HaDCsoghPRnewMaaPJjdSxzFaCpPBFDmSWuSlc0gBgv4CsvvvPGoBAD4Bg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/middleware-flexible-checksums@3.974.30':
@@ -3053,24 +3049,24 @@ packages:
     resolution: {integrity: sha512-iz+B29TXcAZsJpwB+AwG/TTGA5l/VnmMZ2UxtiySOZjI6gCdmviXPwdgzcmuazMy16rXoPY4mYCGe7zdNKfx5A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-websocket@3.972.60':
-    resolution: {integrity: sha512-IgxzXK1c0r/2yjC/qJc06OZPzQ3FSxuIc/Au6chqMb0H60k1+sHIOgjcqsxl1BxUTGQr//BU5A3niytx0IvICA==}
+  '@aws-sdk/middleware-websocket@3.972.59':
+    resolution: {integrity: sha512-lpLmEPrmRSG1ev+LqxkOn1JfVGclnS9b5hvGaSoBgS0JxW2u3QXsJuu+KTHvhdFrRohsqzl70cuiHhyUHFSjYQ==}
     engines: {node: '>= 14.0.0'}
 
   '@aws-sdk/nested-clients@3.983.0':
     resolution: {integrity: sha512-4bUzDkJlSPwfegO23ZSBrheuTI8UyAgNzptm1K6fZAIOIc1vnFl12TonecbssAfmM0/UdyTn5QDomwEfIdmJkQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/nested-clients@3.997.52':
-    resolution: {integrity: sha512-/bNl6b3VEoWQg3Z8yHt3gzYjSFoOOv7+eUglzITmGP8H7jovN8c9NoOI+6bU25+lSLvyRpJOs4n8YSaX+BcUPg==}
+  '@aws-sdk/nested-clients@3.997.51':
+    resolution: {integrity: sha512-DJK4iGIHWU8Jh8ODMvqFYcX9yGBMXV4tSZAvqlHF5EDd8hbmF3eFO9KIWOnA7wcQjPzEkyMMW1/FgZ9RU8oimQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/region-config-resolver@3.972.13':
     resolution: {integrity: sha512-CvJ2ZIjK/jVD/lbOpowBVElJyC1YxLTIJ13yM0AEo0t2v7swOzGjSA6lJGH+DwZXQhcjUjoYwc8bVYCX5MDr1A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/signature-v4-multi-region@3.996.50':
-    resolution: {integrity: sha512-Ob9GCZ3YnGPws696zTYW/rLFYHa9QLh6DgTCnkHb+0jhHNBgHWM8Ui2b+yrIjkfDsRVsglyrOey6tOOG/VWxMA==}
+  '@aws-sdk/signature-v4-multi-region@3.996.49':
+    resolution: {integrity: sha512-nvuAZNRrRRVCiARRKsYlQ0VnXiEQiq7vXPH+UA+LSo+kN3Djl9eo/V2r0udkw85PnsNshmv2Em1clld5M3j67w==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/token-providers@3.1048.0':
@@ -3081,8 +3077,8 @@ packages:
     resolution: {integrity: sha512-Dv2TMWBshJ+tF6ahs2Sy5bh4Iabsd4GAQqVvE9XZmYmnoaVbpS2QKIKE/HRacc7bTtbjEEvP+laGzHvHlf1CiQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/token-providers@3.1159.0':
-    resolution: {integrity: sha512-IJvghXXcEpqTWGjrjJwxBdEecHeXp+t9FaybRf8Zf0wYW84KN1snXBsYOdfDBBx78ChwfJxH8KIHqmhNZuDLcw==}
+  '@aws-sdk/token-providers@3.1157.0':
+    resolution: {integrity: sha512-AeAzcwWRP2uANO2TjFpKjRdvOCzgfIu6YQl9Ceibd6E0gnq5dfOzujFnq2aeqgbLg4wRtXbUZE4gekCCPrz/OQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/types@3.975.0':
@@ -3117,8 +3113,8 @@ packages:
       aws-crt:
         optional: true
 
-  '@aws-sdk/xml-builder@3.972.42':
-    resolution: {integrity: sha512-smX8/gNP8Kjq+CWTBMZQLQ912vOQjiWExzwzvMO+eujPB5RY8IbtF0AGdUUXHKN7KoDWK9dIcuW0WG269kiP6w==}
+  '@aws-sdk/xml-builder@3.972.41':
+    resolution: {integrity: sha512-ctjVSyCMegrWfXlx6VqzSBFI6UqmQ5ZlnfMhdLIiWmhoH8UAQxSCP5N3OpG7X3k4LnS7ou74C4mt20+bfTW2aQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws/lambda-invoke-store@0.2.3':
@@ -18423,8 +18419,8 @@ packages:
     peerDependencies:
       typescript: '>=2.8.0 || >= 3.2.0-dev || >= 3.3.0-dev || >= 3.4.0-dev || >= 3.5.0-dev || >= 3.6.0-dev || >= 3.6.0-beta || >= 3.7.0-dev || >= 3.7.0-beta'
 
-  tsx@4.23.0:
-    resolution: {integrity: sha512-eUdUIaCr963q2h5u3+QwvYp0+eqPvn+egeqZUm0hwERCqqx1E3kK5ehbGCvqSE5MQAULr67ww0cA3jKc3YkM1w==}
+  tsx@4.23.15:
+    resolution: {integrity: sha512-Yiex1Ovn8z2xPpOWckIiysV1SSyRMY9BkLF++q0yKiDxCqRhosKfMg3janKkiLBwZ5c/YryloKwGZcrEmtwxKw==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
@@ -20247,7 +20243,7 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
-  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.19.0
       es-module-lexer: 2.1.0
@@ -20256,7 +20252,7 @@ snapshots:
     optionalDependencies:
       esbuild: 0.28.1
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   '@apm-js-collab/code-transformer@0.19.0':
@@ -20494,7 +20490,7 @@ snapshots:
       '@aws-crypto/crc32': 5.2.0
       '@aws-crypto/crc32c': 5.2.0
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
@@ -20504,11 +20500,11 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/eventstream-handler-node': 3.972.39
-      '@aws-sdk/middleware-eventstream': 3.972.35
-      '@aws-sdk/middleware-websocket': 3.972.60
+      '@aws-sdk/middleware-eventstream': 3.972.34
+      '@aws-sdk/middleware-websocket': 3.972.59
       '@aws-sdk/token-providers': 3.1048.0
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
@@ -20519,11 +20515,11 @@ snapshots:
 
   '@aws-sdk/client-bedrock-runtime@3.1127.0':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/eventstream-handler-node': 3.972.39
-      '@aws-sdk/middleware-eventstream': 3.972.35
-      '@aws-sdk/middleware-websocket': 3.972.60
+      '@aws-sdk/middleware-eventstream': 3.972.34
+      '@aws-sdk/middleware-websocket': 3.972.59
       '@aws-sdk/token-providers': 3.1127.0
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
@@ -20532,27 +20528,12 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-bedrock-runtime@3.1159.0':
-    dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
-      '@aws-sdk/eventstream-handler-node': 3.972.39
-      '@aws-sdk/middleware-eventstream': 3.972.35
-      '@aws-sdk/middleware-websocket': 3.972.60
-      '@aws-sdk/token-providers': 3.1159.0
-      '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
-      '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.13.0
-      '@smithy/types': 4.19.0
-      tslib: 2.8.1
-
   '@aws-sdk/client-cognito-identity@3.980.0':
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -20596,8 +20577,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -20641,8 +20622,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/dynamodb-codec': 3.973.20
       '@aws-sdk/middleware-endpoint-discovery': 3.972.18
       '@aws-sdk/types': 3.975.0
@@ -20654,8 +20635,8 @@ snapshots:
 
   '@aws-sdk/client-kinesis@3.1146.0':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20667,8 +20648,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20681,11 +20662,11 @@ snapshots:
       '@aws-crypto/sha1-browser': 5.2.0
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/middleware-flexible-checksums': 3.974.30
       '@aws-sdk/middleware-sdk-s3': 3.972.51
-      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/signature-v4-multi-region': 3.996.49
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20697,8 +20678,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20710,8 +20691,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20723,8 +20704,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20736,8 +20717,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@aws-sdk/middleware-sdk-sqs': 3.972.30
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
@@ -20746,10 +20727,10 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/core@3.978.7':
+  '@aws-sdk/core@3.978.6':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@aws-sdk/xml-builder': 3.972.42
+      '@aws-sdk/xml-builder': 3.972.41
       '@aws/lambda-invoke-store': 0.3.0
       '@smithy/core': 3.37.0
       '@smithy/signature-v4': 5.7.4
@@ -20768,17 +20749,17 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/credential-provider-env@3.972.78':
+  '@aws-sdk/credential-provider-env@3.972.77':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-http@3.972.80':
+  '@aws-sdk/credential-provider-http@3.972.79':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20786,67 +20767,67 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-ini@3.973.23':
+  '@aws-sdk/credential-provider-ini@3.973.22':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/credential-provider-env': 3.972.78
-      '@aws-sdk/credential-provider-http': 3.972.80
-      '@aws-sdk/credential-provider-login': 3.972.85
-      '@aws-sdk/credential-provider-process': 3.972.78
-      '@aws-sdk/credential-provider-sso': 3.973.22
-      '@aws-sdk/credential-provider-web-identity': 3.972.84
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/credential-provider-env': 3.972.77
+      '@aws-sdk/credential-provider-http': 3.972.79
+      '@aws-sdk/credential-provider-login': 3.972.84
+      '@aws-sdk/credential-provider-process': 3.972.77
+      '@aws-sdk/credential-provider-sso': 3.973.21
+      '@aws-sdk/credential-provider-web-identity': 3.972.83
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-login@3.972.85':
+  '@aws-sdk/credential-provider-login@3.972.84':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-node@3.972.90':
+  '@aws-sdk/credential-provider-node@3.972.89':
     dependencies:
-      '@aws-sdk/credential-provider-env': 3.972.78
-      '@aws-sdk/credential-provider-http': 3.972.80
-      '@aws-sdk/credential-provider-ini': 3.973.23
-      '@aws-sdk/credential-provider-process': 3.972.78
-      '@aws-sdk/credential-provider-sso': 3.973.22
-      '@aws-sdk/credential-provider-web-identity': 3.972.84
+      '@aws-sdk/credential-provider-env': 3.972.77
+      '@aws-sdk/credential-provider-http': 3.972.79
+      '@aws-sdk/credential-provider-ini': 3.973.22
+      '@aws-sdk/credential-provider-process': 3.972.77
+      '@aws-sdk/credential-provider-sso': 3.973.21
+      '@aws-sdk/credential-provider-web-identity': 3.972.83
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-process@3.972.78':
+  '@aws-sdk/credential-provider-process@3.972.77':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-sso@3.973.22':
+  '@aws-sdk/credential-provider-sso@3.973.21':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
-      '@aws-sdk/token-providers': 3.1159.0
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/token-providers': 3.1157.0
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-web-identity@3.972.84':
+  '@aws-sdk/credential-provider-web-identity@3.972.83':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
@@ -20855,16 +20836,16 @@ snapshots:
   '@aws-sdk/credential-providers@3.983.0':
     dependencies:
       '@aws-sdk/client-cognito-identity': 3.983.0
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/credential-provider-cognito-identity': 3.972.3
-      '@aws-sdk/credential-provider-env': 3.972.78
-      '@aws-sdk/credential-provider-http': 3.972.80
-      '@aws-sdk/credential-provider-ini': 3.973.23
-      '@aws-sdk/credential-provider-login': 3.972.85
-      '@aws-sdk/credential-provider-node': 3.972.90
-      '@aws-sdk/credential-provider-process': 3.972.78
-      '@aws-sdk/credential-provider-sso': 3.973.22
-      '@aws-sdk/credential-provider-web-identity': 3.972.84
+      '@aws-sdk/credential-provider-env': 3.972.77
+      '@aws-sdk/credential-provider-http': 3.972.79
+      '@aws-sdk/credential-provider-ini': 3.973.22
+      '@aws-sdk/credential-provider-login': 3.972.84
+      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/credential-provider-process': 3.972.77
+      '@aws-sdk/credential-provider-sso': 3.973.21
+      '@aws-sdk/credential-provider-web-identity': 3.972.83
       '@aws-sdk/nested-clients': 3.983.0
       '@aws-sdk/types': 3.975.0
       '@smithy/config-resolver': 4.4.17
@@ -20880,7 +20861,7 @@ snapshots:
 
   '@aws-sdk/dynamodb-codec@3.973.20':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -20905,7 +20886,7 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/middleware-eventstream@3.972.35':
+  '@aws-sdk/middleware-eventstream@3.972.34':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
@@ -20943,8 +20924,8 @@ snapshots:
 
   '@aws-sdk/middleware-sdk-s3@3.972.51':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/signature-v4-multi-region': 3.996.49
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
@@ -20959,7 +20940,7 @@ snapshots:
 
   '@aws-sdk/middleware-user-agent@3.972.38':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.996.8
       '@smithy/core': 3.37.0
@@ -20969,9 +20950,9 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/middleware-websocket@3.972.60':
+  '@aws-sdk/middleware-websocket@3.972.59':
     dependencies:
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -20983,7 +20964,7 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.7
+      '@aws-sdk/core': 3.978.6
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -21023,10 +21004,10 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/nested-clients@3.997.52':
+  '@aws-sdk/nested-clients@3.997.51':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/signature-v4-multi-region': 3.996.50
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/signature-v4-multi-region': 3.996.49
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/fetch-http-handler': 5.8.0
@@ -21043,7 +21024,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/signature-v4-multi-region@3.996.50':
+  '@aws-sdk/signature-v4-multi-region@3.996.49':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/signature-v4': 5.7.4
@@ -21052,8 +21033,8 @@ snapshots:
 
   '@aws-sdk/token-providers@3.1048.0':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
@@ -21061,17 +21042,17 @@ snapshots:
 
   '@aws-sdk/token-providers@3.1127.0':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/token-providers@3.1159.0':
+  '@aws-sdk/token-providers@3.1157.0':
     dependencies:
-      '@aws-sdk/core': 3.978.7
-      '@aws-sdk/nested-clients': 3.997.52
+      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/nested-clients': 3.997.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.37.0
       '@smithy/types': 4.19.0
@@ -21131,7 +21112,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/xml-builder@3.972.42':
+  '@aws-sdk/xml-builder@3.972.41':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -22825,12 +22806,12 @@ snapshots:
     optionalDependencies:
       workerd: 1.20260426.1
 
-  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))':
+  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))':
     dependencies:
       '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)
       miniflare: 4.20260426.0
       unenv: 2.0.0-rc.24
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
       ws: 8.18.0
     transitivePeerDependencies:
@@ -23096,17 +23077,17 @@ snapshots:
 
   '@discoveryjs/json-ext@0.5.7': {}
 
-  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@dxup/unimport': 0.1.2
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/compiler-dom': 3.5.44
       chokidar: 5.0.0
       knitwork: 1.3.0
       magic-string: 1.1.0
       pathe: 2.0.3
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@nuxt/schema'
@@ -23168,7 +23149,7 @@ snapshots:
       - ws
       - zod
 
-  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
       '@anthropic-ai/sdk': 0.129.0(zod@4.6.7)
       '@aws-sdk/client-bedrock-runtime': 3.1127.0
@@ -23177,7 +23158,7 @@ snapshots:
       '@smithy/node-http-handler': 4.12.1
       http-proxy-agent: 9.1.0(supports-color@10.0.0)
       https-proxy-agent: 9.1.0(supports-color@10.0.0)
-      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       partial-json: 0.1.7
       typebox: 1.3.27
     transitivePeerDependencies:
@@ -23197,10 +23178,10 @@ snapshots:
     dependencies:
       quickjs-wasi: 3.6.2
 
-  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
       '@earendil-works/chord': 1.4.0
-      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.90)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-codemode': 1.4.0
       '@earendil-works/pi-telemetry': 1.4.0
       '@silvia-odwyer/photon': 0.3.3
@@ -23230,7 +23211,7 @@ snapshots:
   '@effect/vitest@4.0.0(effect@4.0.0)(vitest@4.1.11)':
     dependencies:
       effect: 4.0.0
-      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   '@ember-data/rfc395-data@0.0.4': {}
 
@@ -23398,7 +23379,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@embroider/core': 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
@@ -23416,7 +23397,7 @@ snapshots:
       send: 1.2.1(supports-color@10.0.0)
       source-map-url: 0.4.1
       terser: 5.51.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@glint/template'
       - bufferutil
@@ -24793,11 +24774,11 @@ snapshots:
     transitivePeerDependencies:
       - ws
 
-  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.90)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)':
+  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.89)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)':
     dependencies:
       '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
       js-tiktoken: 1.0.21
-      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
@@ -25121,11 +25102,11 @@ snapshots:
 
   '@nuxt/devalue@2.0.2': {}
 
-  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       execa: 8.0.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@nuxt/schema'
       - confbox
@@ -25149,11 +25130,11 @@ snapshots:
       pkg-types: 2.3.1
       semver: 7.8.5
 
-  '@nuxt/devtools@3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@nuxt/devtools@3.4.1(1d992770f562652d9788c4b38c5dfb97)':
     dependencies:
-      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@nuxt/devtools-wizard': 3.4.1
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/devtools-core': 8.2.1(vue@3.5.44(typescript@7.0.2))
       '@vue/devtools-kit': 8.2.1
       birpc: 4.1.0
@@ -25180,9 +25161,9 @@ snapshots:
       structured-clone-es: 2.0.1
       tinyglobby: 0.2.17
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
-      vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       which: 6.0.1
       ws: 8.21.3
     transitivePeerDependencies:
@@ -25246,7 +25227,7 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25264,7 +25245,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25279,7 +25260,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25297,7 +25278,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25312,7 +25293,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25330,7 +25311,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25345,7 +25326,7 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -25359,11 +25340,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -25419,7 +25400,7 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -25433,11 +25414,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -25510,12 +25491,12 @@ snapshots:
       rc9: 3.1.0
       std-env: 4.3.0
 
-  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
+  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
     dependencies:
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
-      '@vitejs/plugin-vue': 6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
-      '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@vitejs/plugin-vue': 6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       autoprefixer: 10.5.4(postcss@8.5.31)
       consola: 3.4.2
       cssnano: 7.1.9(postcss@8.5.31)
@@ -25530,7 +25511,7 @@ snapshots:
       magic-string: 0.30.21
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 3.21.11(51972c16778dadf3035cea341382f655)
+      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
       nypm: 0.6.9
       ohash: 2.0.11
       pathe: 2.0.3
@@ -25541,9 +25522,9 @@ snapshots:
       std-env: 4.3.0
       ufo: 1.6.4
       unenv: 2.0.0-rc.24
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-node: 5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-plugin-checker: 0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-node: 5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-plugin-checker: 0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       vue: 3.5.44(typescript@7.0.2)
       vue-bundle-renderer: 2.3.2
     optionalDependencies:
@@ -26277,10 +26258,10 @@ snapshots:
     dependencies:
       '@prisma/debug': 6.15.0
 
-  '@prisma/orm-family-sql@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@prisma/orm-family-sql@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@standard-schema/spec': 1.1.0
       arktype: 2.2.9
       pathe: 2.0.3
@@ -26304,12 +26285,12 @@ snapshots:
     optionalDependencies:
       typescript: 7.0.2
 
-  '@prisma/orm-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@prisma/orm-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-target-postgres': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-target-postgres': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/node': 26.1.2
       '@types/pg': 8.20.4
       arktype: 2.2.9
@@ -26324,11 +26305,11 @@ snapshots:
       - pg-native
       - vite
 
-  '@prisma/orm-target-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@prisma/orm-target-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@standard-schema/spec': 1.1.0
       '@types/node': 26.1.2
       '@types/pg': 8.20.4
@@ -26345,7 +26326,7 @@ snapshots:
       - pg-native
       - vite
 
-  '@prisma/orm-toolchain@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@prisma/orm-toolchain@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
       '@vercel/detect-agent': 1.2.7
@@ -26368,7 +26349,7 @@ snapshots:
       wrap-ansi: 10.0.2
     optionalDependencies:
       typescript: 7.0.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - magicast
 
@@ -26415,7 +26396,7 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@react-router/dev@7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
+  '@react-router/dev@7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/generator': 7.29.8
@@ -26445,8 +26426,8 @@ snapshots:
       semver: 7.8.5
       tinyglobby: 0.2.17
       valibot: 1.4.2(typescript@6.0.3)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       typescript: 6.0.3
       wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
@@ -27392,11 +27373,11 @@ snapshots:
     dependencies:
       solid-js: 1.9.11
 
-  '@solidjs/start@1.3.2(a3d6e0cbce53af562c34fef3544b2a36)':
+  '@solidjs/start@1.3.2(8e43603e153b7398bba7d0637cae96a5)':
     dependencies:
-      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
-      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       cookie-es: 2.0.1
       defu: 6.1.7
       error-stack-parser: 2.1.4
@@ -27408,8 +27389,8 @@ snapshots:
       source-map-js: 1.2.2
       terracotta: 1.0.5(solid-js@1.9.11)
       tinyglobby: 0.2.17
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
-      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
       - solid-js
@@ -27464,11 +27445,11 @@ snapshots:
     dependencies:
       acorn: 8.18.0
 
-  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@sveltejs/acorn-typescript': 1.0.9(acorn@8.18.0)
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/cookie': 0.6.0
       acorn: 8.18.0
       cookie: 0.6.0
@@ -27480,21 +27461,21 @@ snapshots:
       set-cookie-parser: 3.0.1
       sirv: 3.0.2
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
       typescript: 6.0.3
 
-  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
@@ -27502,22 +27483,22 @@ snapshots:
       magic-string: 0.26.7
       svelte: 3.59.2
       svelte-hmr: 0.15.3(svelte@3.59.2)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
       kleur: 4.1.5
       magic-string: 0.30.21
       svelte: 4.2.8
       svelte-hmr: 0.16.0(svelte@4.2.8)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
@@ -27525,7 +27506,7 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -27534,7 +27515,7 @@ snapshots:
       '@tanstack/router-utils': 1.154.7(supports-color@10.0.0)
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -27571,7 +27552,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -27580,7 +27561,7 @@ snapshots:
       '@babel/template': 7.29.7
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
       '@babel/types': 7.29.8
-      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
@@ -28346,7 +28327,7 @@ snapshots:
       untun: 0.1.3
       uqr: 0.1.3
 
-  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
       '@babel/parser': 7.29.9
       acorn: 8.18.0
@@ -28357,35 +28338,35 @@ snapshots:
       magicast: 0.2.11
       recast: 0.23.11
       tslib: 2.8.1
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       acorn: 8.18.0
       acorn-loose: 8.4.0
       acorn-typescript: 1.4.13(acorn@8.18.0)
       astring: 1.9.0
       magicast: 0.2.11
       recast: 0.23.11
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/plugin-transform-typescript': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
       '@rolldown/pluginutils': 1.0.1
       '@vue/babel-plugin-jsx': 2.0.1(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
     transitivePeerDependencies:
       - supports-color
 
-  '@vitejs/plugin-vue@6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
+  '@vitejs/plugin-vue@6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
       '@rolldown/pluginutils': 1.0.1
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
 
   '@vitest/coverage-v8@4.1.11(vitest@4.1.11)':
@@ -28400,7 +28381,7 @@ snapshots:
       obug: 2.1.4
       std-env: 4.3.0
       tinyrainbow: 3.1.1
-      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vitest: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   '@vitest/expect@4.1.11':
     dependencies:
@@ -28411,13 +28392,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.1
 
-  '@vitest/mocker@4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.11
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   '@vitest/pretty-format@4.1.11':
     dependencies:
@@ -33247,12 +33228,12 @@ snapshots:
 
   import-meta-resolve@4.2.0: {}
 
-  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       es-module-lexer: 2.1.0
       pathe: 2.0.3
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     transitivePeerDependencies:
       - '@farmfe/core'
@@ -35348,7 +35329,7 @@ snapshots:
       node-gyp-build: 4.6.0
     optional: true
 
-  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -35369,7 +35350,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -35401,7 +35382,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -35422,7 +35403,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -35454,7 +35435,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35519,7 +35500,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35563,7 +35544,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35628,7 +35609,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35672,7 +35653,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35737,7 +35718,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35997,16 +35978,16 @@ snapshots:
 
   nuxi@3.25.1: {}
 
-  nuxt@3.21.11(51972c16778dadf3035cea341382f655):
+  nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2):
     dependencies:
-      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)
-      '@nuxt/devtools': 3.4.1(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(supports-color@10.0.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@nuxt/devtools': 3.4.1(1d992770f562652d9788c4b38c5dfb97)
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
-      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema': 3.21.11
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))
-      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(51972c16778dadf3035cea341382f655))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
+      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       c12: 3.3.4(magicast@0.5.4)
@@ -36023,7 +36004,7 @@ snapshots:
       h3: 1.15.11
       hookable: 5.5.3
       ignore: 7.0.12
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       jiti: 2.7.0
       klona: 2.0.6
       knitwork: 1.3.0
@@ -36050,8 +36031,8 @@ snapshots:
       ultrahtml: 1.7.0
       uncrypto: 0.1.3
       unctx: 2.5.0
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-vue-router: 0.19.2(@vue/compiler-sfc@3.5.44)(vue-router@4.6.4(vue@3.5.44(typescript@7.0.2)))(vue@3.5.44(typescript@7.0.2))
       untyped: 2.0.0
       vue: 3.5.44(typescript@7.0.2)
@@ -36408,17 +36389,17 @@ snapshots:
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@smithy/signature-v4': 5.7.4
       undici: 7.24.8
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.90)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
-      '@aws-sdk/credential-provider-node': 3.972.90
+      '@aws-sdk/credential-provider-node': 3.972.89
       '@smithy/signature-v4': 5.7.4
       undici: 7.24.8
       ws: 8.21.3
@@ -39879,7 +39860,7 @@ snapshots:
       tslib: 1.14.1
       typescript: 7.0.2
 
-  tsx@4.23.0:
+  tsx@4.23.15:
     dependencies:
       esbuild: 0.28.1
     optionalDependencies:
@@ -40029,26 +40010,26 @@ snapshots:
       magic-string: 0.30.21
       unplugin: 2.3.11
 
-  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 0.30.21
       oxc-parser: 0.143.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.143.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.152.0
       rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
   undefsafe@2.0.5: {}
 
@@ -40118,7 +40099,7 @@ snapshots:
     dependencies:
       '@noble/hashes': 2.4.0
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40132,7 +40113,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.143.0
@@ -40147,7 +40128,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40161,7 +40142,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
@@ -40176,7 +40157,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40190,7 +40171,7 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
@@ -40317,7 +40298,7 @@ snapshots:
       picomatch: 4.0.7
       webpack-virtual-modules: 0.6.2
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
@@ -40326,10 +40307,10 @@ snapshots:
       esbuild: 0.28.1
       rolldown: 1.2.11
       rollup: 4.62.3
-      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
@@ -40338,7 +40319,7 @@ snapshots:
       esbuild: 0.28.1
       rolldown: 1.2.11
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   unstorage@1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0)):
@@ -40521,7 +40502,7 @@ snapshots:
       '@types/unist': 3.0.0
       vfile-message: 4.0.3
 
-  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0):
+  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
@@ -40542,7 +40523,7 @@ snapshots:
       hookable: 5.5.3
       http-proxy: 1.18.1(debug@4.4.3(supports-color@10.0.0))
       micromatch: 4.0.8
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-fetch-native: 1.6.7
       path-to-regexp: 6.3.0
       pathe: 1.1.2
@@ -40555,7 +40536,7 @@ snapshots:
       unctx: 2.5.0
       unenv: 1.10.0
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
-      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@azure/app-configuration'
@@ -40608,23 +40589,23 @@ snapshots:
       - xml2js
       - yaml
 
-  vite-dev-rpc@2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-dev-rpc@2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       birpc: 4.1.0
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-hot-client: 2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-hot-client: 2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
-  vite-hot-client@2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-hot-client@2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
-  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       debug: 4.4.3(supports-color@10.0.0)
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -40639,13 +40620,13 @@ snapshots:
       - tsx
       - yaml
 
-  vite-node@5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite-node@5.3.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       cac: 6.7.14
       es-module-lexer: 2.1.0
       obug: 2.1.4
       pathe: 2.0.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -40659,7 +40640,7 @@ snapshots:
       - tsx
       - yaml
 
-  vite-plugin-checker@0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-checker@0.14.5(meow@13.2.0)(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(typescript@7.0.2)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       '@babel/code-frame': 7.29.7
       chokidar: 5.0.0
@@ -40668,14 +40649,14 @@ snapshots:
       picomatch: 4.0.7
       proper-lockfile: 4.1.2
       tiny-invariant: 1.3.3
-      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       meow: 13.2.0
       optionator: 0.9.4
       oxlint: 1.89.0(oxlint-tsgolint@7.0.2004)
       typescript: 7.0.2
 
-  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       ansis: 4.3.1
       error-stack-parser-es: 1.0.5
@@ -40685,12 +40666,12 @@ snapshots:
       perfect-debounce: 2.1.0
       sirv: 3.0.2
       unplugin-utils: 0.3.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vite-dev-rpc: 2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-dev-rpc: 2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
 
-  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@types/babel__core': 7.20.5
@@ -40698,21 +40679,21 @@ snapshots:
       merge-anything: 5.1.7
       solid-js: 1.9.11
       solid-refresh: 0.6.3(solid-js@1.9.11)(supports-color@10.0.0)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
-      vitefu: 1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:
       '@testing-library/jest-dom': 6.9.1
     transitivePeerDependencies:
       - supports-color
 
-  vite-plugin-vue-tracer@1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
+  vite-plugin-vue-tracer@1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
     dependencies:
       estree-walker: 3.0.3
       exsolve: 1.1.3
       magic-string: 1.1.0
       pathe: 2.0.3
       source-map-js: 1.2.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
 
   vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2):
@@ -40729,7 +40710,7 @@ snapshots:
       stylus: 0.59.0(supports-color@10.0.0)
       terser: 5.51.2
 
-  vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       esbuild: 0.25.12
       fdir: 6.5.0(picomatch@4.0.7)
@@ -40746,10 +40727,10 @@ snapshots:
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
       terser: 5.51.2
-      tsx: 4.23.0
+      tsx: 4.23.15
       yaml: 2.9.0
 
-  vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.7)
@@ -40766,10 +40747,10 @@ snapshots:
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
       terser: 5.51.2
-      tsx: 4.23.0
+      tsx: 4.23.15
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
@@ -40785,10 +40766,10 @@ snapshots:
       sass: 1.72.0
       stylus: 0.59.0(supports-color@10.0.0)
       terser: 5.51.2
-      tsx: 4.23.0
+      tsx: 4.23.15
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
@@ -40804,25 +40785,25 @@ snapshots:
       sass: 1.72.0
       stylus: 0.59.0(supports-color@8.1.1)
       terser: 5.51.2
-      tsx: 4.23.0
+      tsx: 4.23.15
       yaml: 2.9.0
 
-  vitefu@0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vitefu@0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   vitefu@1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)):
     optionalDependencies:
       vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)
 
-  vitefu@1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)):
+  vitefu@1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
-  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -40839,7 +40820,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
@@ -40860,10 +40841,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0):
+  vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -40880,7 +40861,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.0)(yaml@2.9.0)
+      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0

From 9ea3abf419a90859451f5da095ab62be37d6e183 Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Fri, 30 Oct 2026 09:59:17 -0700
Subject: [PATCH 073/169] feat(node): Add nodeScheduleIntegration to monitor
 node-schedule jobs (#25474)

Part of a series adding automatic Crons monitoring for the most-used job
schedulers in each SDK. Check-ins for a monitor that doesn't exist yet
are dropped, so today each monitor has to be created by hand with its
schedule copied from the code. Sending the job's schedule as the monitor
config lets Sentry create the monitor and keep it in sync.

Adds `nodeScheduleIntegration`, which sends check-ins for every named
`scheduleJob` job (`node-schedule` 1.3+ and 2.x) with its cron string
and `tz` as the monitor config. It replaces wrapping the module in
`Sentry.cron.instrumentNodeSchedule`. Adding the integration is the
opt-in. Jobs without a name and one-off `Date` jobs aren't monitored.

```js
Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeScheduleIntegration({ excludeJobs: ['cleanup', /^debug-/] })],
});

schedule.scheduleJob('daily-report', { rule: '30 9 * * 1-5', tz: 'Europe/Vienna' }, sendReport);
```

Recurrence rules, rules with a `start` or `end`, and schedules Crons
can't express, like every 10 seconds, aren't monitored. Jobs already
wrapped by `instrumentNodeSchedule` are skipped.
---
 .../node-suites/excludes.ts                   |   1 +
 .../node-schedule-integration/instrument.mjs  |   9 ++
 .../node-schedule-integration/scenario.mjs    |  35 ++++
 .../cron/node-schedule-integration/test.ts    |  66 ++++++++
 packages/astro/src/index.server.ts            |   1 +
 packages/aws-serverless/src/index.ts          |   1 +
 packages/bun/src/index.ts                     |   1 +
 packages/deno/src/index.ts                    |   1 +
 packages/elysia/src/index.ts                  |   1 +
 packages/google-cloud-serverless/src/index.ts |   1 +
 packages/node/src/cron/node-schedule.ts       |   5 +-
 packages/node/src/index.ts                    |   2 +
 packages/node/test/cron.test.ts               |   9 ++
 packages/remix/src/server/index.ts            |   1 +
 packages/server-utils/src/index.ts            |   2 +
 .../src/integrations/node-schedule.ts         | 112 +++++++++++++
 .../server-utils/src/orchestrion/channels.ts  |   2 +
 .../src/orchestrion/config/index.ts           |   2 +
 .../src/orchestrion/config/node-schedule.ts   |  29 ++++
 .../server-utils/src/utils/cronMonitoring.ts  |  53 +++++-
 .../test/integrations/node-schedule.test.ts   | 151 ++++++++++++++++++
 .../moduleInjectedTransform.test.ts           |   2 +-
 packages/solidstart/src/server/index.ts       |   1 +
 packages/sveltekit/src/server/index.ts        |   1 +
 24 files changed, 483 insertions(+), 6 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-schedule-integration/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-schedule-integration/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/node-schedule-integration/test.ts
 create mode 100644 packages/server-utils/src/integrations/node-schedule.ts
 create mode 100644 packages/server-utils/src/orchestrion/config/node-schedule.ts
 create mode 100644 packages/server-utils/test/integrations/node-schedule.test.ts

diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index dff3e151b26e..0e868ffeba36 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -66,6 +66,7 @@ const NO_FETCH_INSTRUMENTATION = [
 // See https://github.com/getsentry/sentry-javascript/issues/23882
 export const NO_AUTO_INSTRUMENTATION = [
   'suites/cron/node-cron/integration/test.ts',
+  'suites/cron/node-schedule-integration/test.ts',
   'suites/express/**',
   'suites/fs-instrumentation/test.ts',
   'suites/hono/test.ts',
diff --git a/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/instrument.mjs b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/instrument.mjs
new file mode 100644
index 000000000000..a3011f204b5e
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/instrument.mjs
@@ -0,0 +1,9 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  transport: loggingTransport,
+  integrations: [Sentry.nodeScheduleIntegration({ excludeJobs: ['excluded-job'] })],
+});
diff --git a/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/scenario.mjs b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/scenario.mjs
new file mode 100644
index 000000000000..7cb179a7483a
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/scenario.mjs
@@ -0,0 +1,35 @@
+import schedule from 'node-schedule';
+
+const excluded = schedule.scheduleJob('excluded-job', '0 0 * * *', () => {});
+const unnamed = schedule.scheduleJob('0 0 * * *', () => {});
+const oneOff = schedule.scheduleJob('one-off-job', Date.now() + 86_400_000, () => {});
+const recurrenceRule = schedule.scheduleJob('rule-job', { hour: 3, minute: 0 }, () => {});
+const ending = schedule.scheduleJob('ending-job', { rule: '0 0 * * *', end: Date.now() + 86_400_000 }, () => {});
+const newJob = new schedule.Job('new-job', () => {});
+newJob.schedule({ rule: '0 0 * * *', tz: 'UTC' });
+
+let runs = 0;
+const job = schedule.scheduleJob('my-schedule-job', { rule: '30 9 * * 1-5', tz: 'Europe/Vienna' }, () => {
+  runs++;
+  if (runs === 2) {
+    throw new Error('Error in scheduled job');
+  }
+});
+
+// Run the jobs without waiting for their schedule.
+excluded.invoke();
+unnamed.invoke();
+oneOff.invoke();
+recurrenceRule.invoke();
+ending.invoke();
+newJob.invoke();
+job.invoke();
+try {
+  job.invoke();
+} catch {
+  // node-schedule catches errors when it runs the job itself
+}
+schedule.rescheduleJob(job, { rule: '0 8 * * *', tz: 'UTC' });
+job.invoke();
+
+setTimeout(() => process.exit(), 10_000);
diff --git a/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/test.ts b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/test.ts
new file mode 100644
index 000000000000..3a136ea82d02
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/node-schedule-integration/test.ts
@@ -0,0 +1,66 @@
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../utils/runner';
+
+const MONITOR_CONFIG = {
+  schedule: { type: 'crontab', value: '30 9 * * 1-5' },
+  timezone: 'Europe/Vienna',
+};
+
+describe('nodeScheduleIntegration', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('sends check-ins for named jobs', async () => {
+      await createRunner()
+        .ignore('event')
+        .expect({
+          check_in: {
+            monitor_slug: 'new-job',
+            status: 'in_progress',
+            monitor_config: { schedule: { type: 'crontab', value: '0 0 * * *' }, timezone: 'UTC' },
+          },
+        })
+        .expect({ check_in: { monitor_slug: 'new-job', status: 'ok' } })
+        .expect({
+          check_in: { monitor_slug: 'my-schedule-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-schedule-job', status: 'ok', duration: expect.any(Number) } })
+        .expect({
+          check_in: { monitor_slug: 'my-schedule-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-schedule-job', status: 'error', duration: expect.any(Number) } })
+        .expect({
+          check_in: {
+            monitor_slug: 'my-schedule-job',
+            status: 'in_progress',
+            monitor_config: { schedule: { type: 'crontab', value: '0 8 * * *' }, timezone: 'UTC' },
+          },
+        })
+        .expect({ check_in: { monitor_slug: 'my-schedule-job', status: 'ok', duration: expect.any(Number) } })
+        .start()
+        .completed();
+    });
+
+    test('captures job errors', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          event: {
+            exception: {
+              values: [
+                {
+                  type: 'Error',
+                  value: 'Error in scheduled job',
+                  mechanism: { type: 'auto.function.node-schedule', handled: false },
+                },
+              ],
+            },
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
+});
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index a52a7477f6bc..822464ade0e1 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -50,6 +50,7 @@ export {
   functionToStringIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/aws-serverless/src/index.ts b/packages/aws-serverless/src/index.ts
index 0803fca702f5..0e684c45dc2d 100644
--- a/packages/aws-serverless/src/index.ts
+++ b/packages/aws-serverless/src/index.ts
@@ -120,6 +120,7 @@ export {
   fsIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/bun/src/index.ts b/packages/bun/src/index.ts
index 3f14e1c6da6f..e33986f88bba 100644
--- a/packages/bun/src/index.ts
+++ b/packages/bun/src/index.ts
@@ -144,6 +144,7 @@ export {
   setupKoaErrorHandler,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/deno/src/index.ts b/packages/deno/src/index.ts
index 52f2a040cd49..9f2aac8b30cb 100644
--- a/packages/deno/src/index.ts
+++ b/packages/deno/src/index.ts
@@ -196,6 +196,7 @@ export {
   postgresJsIntegration,
   neonIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   tediousIntegration,
   eveConversationHook,
   eveIntegration,
diff --git a/packages/elysia/src/index.ts b/packages/elysia/src/index.ts
index 8a3da3bf62b5..014bd9145c4a 100644
--- a/packages/elysia/src/index.ts
+++ b/packages/elysia/src/index.ts
@@ -118,6 +118,7 @@ export {
   setupKoaErrorHandler,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/google-cloud-serverless/src/index.ts b/packages/google-cloud-serverless/src/index.ts
index 1f6e6979bee0..b92984d1b6b6 100644
--- a/packages/google-cloud-serverless/src/index.ts
+++ b/packages/google-cloud-serverless/src/index.ts
@@ -120,6 +120,7 @@ export {
   firebaseIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   graphqlIntegration,
   knexIntegration,
   kafkaIntegration,
diff --git a/packages/node/src/cron/node-schedule.ts b/packages/node/src/cron/node-schedule.ts
index f174ef7c904b..548f60ac48f8 100644
--- a/packages/node/src/cron/node-schedule.ts
+++ b/packages/node/src/cron/node-schedule.ts
@@ -1,4 +1,4 @@
-import { withMonitor } from '@sentry/core';
+import { addNonEnumerableProperty, withMonitor } from '@sentry/core';
 import { replaceCronNames } from './common';
 
 export interface NodeSchedule {
@@ -58,6 +58,9 @@ export function instrumentNodeSchedule<T>(lib: T & NodeSchedule): T {
               );
             }
 
+            // Tells `nodeScheduleIntegration` that this job is already monitored.
+            addNonEnumerableProperty(monitoredCallback, Symbol.for('sentry.cron.monitored'), true);
+
             return target.apply(thisArg, [monitorSlug, expression, monitoredCallback]);
           },
         });
diff --git a/packages/node/src/index.ts b/packages/node/src/index.ts
index 7fdeb4ab4df2..4cf8b6e4b9eb 100644
--- a/packages/node/src/index.ts
+++ b/packages/node/src/index.ts
@@ -15,6 +15,8 @@ export {
   genericPoolIntegration,
   nodeCronIntegration,
   type NodeCronIntegrationOptions,
+  nodeScheduleIntegration,
+  type NodeScheduleIntegrationOptions,
   googleGenAIIntegration,
   graphqlIntegration,
   groqIntegration,
diff --git a/packages/node/test/cron.test.ts b/packages/node/test/cron.test.ts
index bf1e83d315e5..f5178dc98e88 100644
--- a/packages/node/test/cron.test.ts
+++ b/packages/node/test/cron.test.ts
@@ -220,5 +220,14 @@ describe('cron check-ins', () => {
         "Automatic instrumentation of 'node-schedule' requires the first parameter of 'scheduleJob' to be a job name string and the second parameter to be a crontab string",
       );
     });
+
+    test('marks the callback as monitored, so nodeScheduleIntegration skips it', () => {
+      const scheduleWithCheckIn = cron.instrumentNodeSchedule({
+        scheduleJob: (_name: unknown, _expression: unknown, callback: unknown) => callback,
+      });
+
+      const callback = scheduleWithCheckIn.scheduleJob('my-cron-job', '* * * * *', () => {}) as Record<symbol, unknown>;
+      expect(callback[Symbol.for('sentry.cron.monitored')]).toBe(true);
+    });
   });
 });
diff --git a/packages/remix/src/server/index.ts b/packages/remix/src/server/index.ts
index e7d3142e0be2..10fc1a596daa 100644
--- a/packages/remix/src/server/index.ts
+++ b/packages/remix/src/server/index.ts
@@ -38,6 +38,7 @@ export {
   functionToStringIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/server-utils/src/index.ts b/packages/server-utils/src/index.ts
index acb0ffb47c75..005e8a4a8b79 100644
--- a/packages/server-utils/src/index.ts
+++ b/packages/server-utils/src/index.ts
@@ -40,6 +40,8 @@ export { dataloaderIntegration } from './integrations/dataloader';
 export { genericPoolIntegration } from './integrations/generic-pool';
 export { nodeCronIntegration } from './integrations/node-cron';
 export type { NodeCronIntegrationOptions } from './integrations/node-cron';
+export { nodeScheduleIntegration } from './integrations/node-schedule';
+export type { NodeScheduleIntegrationOptions } from './integrations/node-schedule';
 export { googleGenAIIntegration } from './integrations/google-genai';
 export { graphqlIntegration } from './integrations/graphql';
 export { hapiIntegration } from './integrations/hapi';
diff --git a/packages/server-utils/src/integrations/node-schedule.ts b/packages/server-utils/src/integrations/node-schedule.ts
new file mode 100644
index 000000000000..426c362d0021
--- /dev/null
+++ b/packages/server-utils/src/integrations/node-schedule.ts
@@ -0,0 +1,112 @@
+import type { IntegrationFn, MonitorConfig } from '@sentry/core';
+import { defineIntegration } from '@sentry/core';
+import { CHANNELS } from '../orchestrion/channels';
+import { nodeScheduleModuleNames } from '../orchestrion/config/node-schedule';
+import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
+import type { AnyFn, ScheduleChange } from '../utils/cronMonitoring';
+import {
+  cronExpressionToMonitorConfig,
+  shouldMonitorJob,
+  subscribeToScheduleChange,
+  updateMonitorConfig,
+  wrapScheduledJob,
+} from '../utils/cronMonitoring';
+
+const INTEGRATION_NAME = 'NodeSchedule' as const;
+
+export interface NodeScheduleIntegrationOptions {
+  /** Job names not to monitor. Strings must match the name exactly. */
+  excludeJobs?: Array<string | RegExp>;
+}
+
+const _nodeScheduleIntegration = ((options: NodeScheduleIntegrationOptions = {}) => {
+  return {
+    name: INTEGRATION_NAME,
+    setup(client) {
+      invokeOrchestrionInstrumentation(client, nodeScheduleModuleNames, subscribe, [options], {
+        requiresTracingChannelBinding: false,
+      });
+    },
+  };
+}) satisfies IntegrationFn;
+
+/**
+ * Sends Crons check-ins for every named `node-schedule` job, whether it's created with `scheduleJob` or `new Job()`.
+ * The monitor slug is the job name. Jobs without a name, one-off jobs, and jobs with a schedule Crons can't express
+ * are not monitored.
+ */
+export const nodeScheduleIntegration = defineIntegration(_nodeScheduleIntegration);
+
+function subscribe(options: NodeScheduleIntegrationOptions): void {
+  subscribeToScheduleChange(CHANNELS.NODE_SCHEDULE_SCHEDULE, INTEGRATION_NAME, onSchedule, change =>
+    beforeSchedule(change, options),
+  );
+}
+
+interface Job {
+  name?: unknown;
+  job?: unknown;
+  nextInvocation?: () => unknown;
+}
+
+// The name node-schedule gives jobs created without one.
+const ANONYMOUS_NAME = /^<Anonymous Job \d+[ >]/;
+
+// `job.schedule(spec)` calls that add to runs the job already has pending, rather than replace them.
+const addsToPendingRuns = new WeakSet<ScheduleChange>();
+
+/** Wraps a named job's method before `job.schedule(spec)` with a recurring spec, unless it's already wrapped. */
+export function beforeSchedule(change: ScheduleChange, options: NodeScheduleIntegrationOptions): void {
+  const job = change.self as Job | undefined;
+  if (!job) {
+    return;
+  }
+  if (typeof job.nextInvocation === 'function' && job.nextInvocation() != null) {
+    addsToPendingRuns.add(change);
+  }
+  const name = typeof job.name === 'string' && !ANONYMOUS_NAME.test(job.name) ? job.name : undefined;
+  if (isOneOffSpec(change.arguments[0]) || !shouldMonitorJob(name, job.job, options.excludeJobs)) {
+    return;
+  }
+  job.job = wrapScheduledJob(job.job as AnyFn, name, undefined, 'auto.function.node-schedule');
+}
+
+/**
+ * Sets the spec's config after `job.schedule(spec)`. Without one, from a spec Crons can't express or a job that also
+ * keeps runs from an earlier spec, the job doesn't check in.
+ */
+export function onSchedule(change: ScheduleChange): void {
+  // `schedule` returns false when it scheduled nothing, and `reschedule` then keeps the old schedule.
+  if (change.result === true) {
+    const job = change.self as Job | undefined;
+    updateMonitorConfig(job?.job, addsToPendingRuns.has(change) ? undefined : getMonitorConfig(change.arguments[0]));
+  }
+}
+
+/** Whether node-schedule runs a job with this spec once: a `Date`, a timestamp, or a date string. */
+export function isOneOffSpec(spec: unknown): boolean {
+  const { rule } = (spec || {}) as { rule?: unknown };
+  const when = typeof spec === 'object' && rule ? rule : spec;
+  if (typeof when === 'string') {
+    // `Date.parse` also accepts some crons, like `0 9 * * *`.
+    return !isCronShaped(when) && !Number.isNaN(Date.parse(when));
+  }
+  return when instanceof Date || typeof when === 'number';
+}
+
+function isCronShaped(value: string): boolean {
+  const fields = value.trim().split(/\s+/);
+  return (
+    /^@[a-z]+$/i.test(value.trim()) ||
+    ((fields.length === 5 || fields.length === 6) && fields.every(field => /^[\d*,/?#a-z-]+$/i.test(field)))
+  );
+}
+
+// Only cron strings convert; recurrence rules and rules limited by `start` or `end` don't.
+export function getMonitorConfig(spec: unknown): MonitorConfig | undefined {
+  if (typeof spec === 'string') {
+    return cronExpressionToMonitorConfig(spec, undefined, 'or');
+  }
+  const { rule, tz, start, end } = (spec || {}) as { rule?: unknown; tz?: unknown; start?: unknown; end?: unknown };
+  return typeof rule === 'string' && !start && !end ? cronExpressionToMonitorConfig(rule, tz, 'or') : undefined;
+}
diff --git a/packages/server-utils/src/orchestrion/channels.ts b/packages/server-utils/src/orchestrion/channels.ts
index 81f9b34d2e27..67a88bbb3825 100644
--- a/packages/server-utils/src/orchestrion/channels.ts
+++ b/packages/server-utils/src/orchestrion/channels.ts
@@ -27,6 +27,7 @@ import { mysqlChannels } from './config/mysql';
 import { neonChannels } from './config/neon';
 import { nestjsChannels } from './config/nestjs';
 import { nodeCronChannels } from './config/node-cron';
+import { nodeScheduleChannels } from './config/node-schedule';
 import { openaiChannels } from './config/openai';
 import { pgChannels } from './config/pg';
 import { piDurableChannels } from './config/pi-durable';
@@ -85,6 +86,7 @@ export const CHANNELS = {
   ...neonChannels,
   ...nestjsChannels,
   ...nodeCronChannels,
+  ...nodeScheduleChannels,
   ...openaiChannels,
   ...pgChannels,
   ...piDurableChannels,
diff --git a/packages/server-utils/src/orchestrion/config/index.ts b/packages/server-utils/src/orchestrion/config/index.ts
index 56b7bf008c56..bf2c4b50b178 100644
--- a/packages/server-utils/src/orchestrion/config/index.ts
+++ b/packages/server-utils/src/orchestrion/config/index.ts
@@ -34,6 +34,7 @@ import { neonConfig } from './neon';
 import { nestjsConfig } from './nestjs';
 import { nitroConfig } from './nitro';
 import { nodeCronConfig } from './node-cron';
+import { nodeScheduleConfig } from './node-schedule';
 import { openaiConfig } from './openai';
 import { pgConfig } from './pg';
 import { postgresJsConfig } from './postgres';
@@ -93,6 +94,7 @@ export const SENTRY_INSTRUMENTATIONS: InstrumentationConfig[] = [
   ...nestjsConfig,
   ...nitroConfig,
   ...nodeCronConfig,
+  ...nodeScheduleConfig,
   ...openaiConfig,
   ...pgConfig,
   ...piDurableConfig,
diff --git a/packages/server-utils/src/orchestrion/config/node-schedule.ts b/packages/server-utils/src/orchestrion/config/node-schedule.ts
new file mode 100644
index 000000000000..acb3733a1b69
--- /dev/null
+++ b/packages/server-utils/src/orchestrion/config/node-schedule.ts
@@ -0,0 +1,29 @@
+import type { InstrumentationConfig } from '../apmTypes';
+import { getModuleNames } from './module-names';
+
+// `scheduleJob`, `rescheduleJob` and `job.reschedule` all call `job.schedule(spec)`. `Job` moved from
+// `lib/schedule.js` to `lib/Job.js` in 2.0.0.
+const schedule = {
+  channelName: 'schedule',
+  astQuery:
+    "AssignmentExpression[left.object.property.name='prototype'][left.property.name='schedule'] > FunctionExpression",
+  // `methodName` gives subscribers `self` before the call, not just after. `astQuery` still picks the function.
+  functionQuery: { methodName: 'schedule', kind: 'Sync' },
+} as const;
+
+export const nodeScheduleConfig = [
+  {
+    ...schedule,
+    module: { name: 'node-schedule', versionRange: '>=1.3.0 <2', filePath: 'lib/schedule.js' },
+  },
+  {
+    ...schedule,
+    module: { name: 'node-schedule', versionRange: '>=2.0.0 <3', filePath: 'lib/Job.js' },
+  },
+] satisfies InstrumentationConfig[];
+
+export const nodeScheduleModuleNames = getModuleNames(nodeScheduleConfig);
+
+export const nodeScheduleChannels = {
+  NODE_SCHEDULE_SCHEDULE: 'orchestrion:node-schedule:schedule',
+} as const;
diff --git a/packages/server-utils/src/utils/cronMonitoring.ts b/packages/server-utils/src/utils/cronMonitoring.ts
index 975763d3c0a7..aa751eed9442 100644
--- a/packages/server-utils/src/utils/cronMonitoring.ts
+++ b/packages/server-utils/src/utils/cronMonitoring.ts
@@ -1,5 +1,6 @@
 import type { MonitorConfig } from '@sentry/core';
 import {
+  addNonEnumerableProperty,
   captureException,
   debug,
   isThenable,
@@ -12,7 +13,7 @@ import * as diagnosticsChannel from './diagnosticsChannel';
 
 export type AnyFn = (this: unknown, ...args: unknown[]) => unknown;
 
-// Set by `Sentry.cron.instrumentNodeCron`, which already sends check-ins.
+// Set by `Sentry.cron.instrumentNodeCron`, `Sentry.cron.instrumentNodeSchedule` and `wrapScheduledJob`, which already send check-ins.
 const MONITORED = Symbol.for('sentry.cron.monitored');
 
 /**
@@ -33,7 +34,38 @@ export function subscribeToJobCreation(
   });
 }
 
-/** Whether a job is named, not excluded, and not already monitored by `Sentry.cron.instrumentNodeCron`. */
+/** A call on a schedule-change channel: its arguments, the job it was called on, and what it returned. */
+export interface ScheduleChange {
+  arguments: unknown[];
+  self?: unknown;
+  result?: unknown;
+}
+
+/**
+ * Calls `onChange` after each call on a scheduler's schedule-change channel, so it can update the job's monitor config.
+ * `onStart` gets the same object before the call. Errors are logged and the job keeps its config.
+ */
+export function subscribeToScheduleChange(
+  channelName: string,
+  integrationName: string,
+  onChange: (change: ScheduleChange) => void,
+  onStart?: (change: ScheduleChange) => void,
+): void {
+  const channel = diagnosticsChannel.tracingChannel<ScheduleChange>(channelName);
+  const handle = (handler: (change: ScheduleChange) => void) => (message: unknown) => {
+    try {
+      handler(message as ScheduleChange);
+    } catch (e) {
+      DEBUG_BUILD && debug.error(`[${integrationName}] Failed to update the cron monitor:`, e);
+    }
+  };
+  if (onStart) {
+    channel.start.subscribe(handle(onStart));
+  }
+  channel.end.subscribe(handle(onChange));
+}
+
+/** Whether a job is named, not excluded, and not already monitored by `Sentry.cron.instrumentNode*` or `wrapScheduledJob`. */
 export function shouldMonitorJob(
   name: unknown,
   job: unknown,
@@ -161,6 +193,8 @@ function toSentryTimezone(timezone: string | undefined): string | undefined {
   }
 }
 
+const monitorConfigs = new WeakMap<AnyFn, MonitorConfig | undefined>();
+
 /**
  * Wraps a scheduled job with check-ins. Errors are captured, because schedulers catch them, and rethrown.
  * Jobs without a monitor config send no check-ins.
@@ -176,7 +210,7 @@ export function wrapScheduledJob(
     throw error;
   };
 
-  return function (this: unknown, ...args: unknown[]): unknown {
+  const wrapped = function (this: unknown, ...args: unknown[]): unknown {
     const run = (): unknown => {
       try {
         const result: unknown = func.apply(this, args);
@@ -185,6 +219,17 @@ export function wrapScheduledJob(
         return captureAndRethrow(e);
       }
     };
-    return startNewTrace(() => (monitorConfig ? withMonitor(monitorSlug, run, monitorConfig) : run()));
+    const currentConfig = monitorConfigs.get(wrapped);
+    return startNewTrace(() => (currentConfig ? withMonitor(monitorSlug, run, currentConfig) : run()));
   };
+  monitorConfigs.set(wrapped, monitorConfig);
+  addNonEnumerableProperty(wrapped, MONITORED, true);
+  return wrapped;
+}
+
+/** Sets the monitor config a job from `wrapScheduledJob` sends on its next runs. Other functions are ignored. */
+export function updateMonitorConfig(job: unknown, monitorConfig: MonitorConfig | undefined): void {
+  if (typeof job === 'function' && monitorConfigs.has(job as AnyFn)) {
+    monitorConfigs.set(job as AnyFn, monitorConfig);
+  }
 }
diff --git a/packages/server-utils/test/integrations/node-schedule.test.ts b/packages/server-utils/test/integrations/node-schedule.test.ts
new file mode 100644
index 000000000000..7071d955fc8b
--- /dev/null
+++ b/packages/server-utils/test/integrations/node-schedule.test.ts
@@ -0,0 +1,151 @@
+import type { MonitorConfig } from '@sentry/core';
+import { setCurrentClient } from '@sentry/core';
+import { beforeEach, describe, expect, it } from 'vitest';
+import { beforeSchedule, getMonitorConfig, isOneOffSpec, onSchedule } from '../../src/integrations/node-schedule';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
+
+describe('isOneOffSpec', () => {
+  it.each([
+    ['a Date', new Date()],
+    ['a timestamp', 1_793_527_200_000],
+    ['a date string', '2026-11-01T10:00:00Z'],
+    ['a long date string', 'Sun Nov 01 2026 10:00:00 GMT+0000'],
+    ['a Date rule', { rule: new Date(), tz: 'UTC' }],
+  ])('is true for %s', (_, spec) => {
+    expect(isOneOffSpec(spec)).toBe(true);
+  });
+
+  it.each([
+    ['a cron string', '0 9 * * *'],
+    ['a cron with names', '0 9 * jan mon-fri'],
+    ['a cron with seconds', '*/10 * * * * *'],
+    ['a nickname', '@daily'],
+    ['a cron rule', { rule: '0 9 * * *', tz: 'UTC' }],
+    ['a recurrence rule', { hour: 3, minute: 0 }],
+  ])('is false for %s', (_, spec) => {
+    expect(isOneOffSpec(spec)).toBe(false);
+  });
+});
+
+describe('getMonitorConfig', () => {
+  it('sends a cron rule with its time zone', () => {
+    expect(getMonitorConfig({ rule: '30 9 * * 1-5', tz: 'Europe/Vienna' })).toEqual({
+      schedule: { type: 'crontab', value: '30 9 * * 1-5' },
+      timezone: 'Europe/Vienna',
+    });
+  });
+
+  it('drops a fixed second', () => {
+    expect(getMonitorConfig({ rule: '0 30 9 * * *', tz: 'UTC' })?.schedule).toEqual({
+      type: 'crontab',
+      value: '30 9 * * *',
+    });
+  });
+
+  it.each([
+    ['a sub-minute cron', '*/10 * * * * *'],
+    ['a rule with a start', { rule: '0 9 * * *', start: Date.now() + 1000 }],
+    ['a rule with an end', { rule: '0 9 * * *', end: Date.now() + 1000 }],
+    ['a recurrence rule', { hour: 3, minute: 0 }],
+    ['a UTC offset', { rule: '0 9 * * *', tz: '+02:00' }],
+  ])('is undefined for %s', (_, spec) => {
+    expect(getMonitorConfig(spec)).toBeUndefined();
+  });
+});
+
+describe('job.schedule', () => {
+  let sentConfigs: Array<MonitorConfig | undefined>;
+
+  beforeEach(() => {
+    sentConfigs = [];
+    const client = new TestClient(getDefaultTestClientOptions());
+    client.captureCheckIn = (_checkIn, monitorConfig) => {
+      sentConfigs.push(monitorConfig);
+      return 'check-in-id';
+    };
+    setCurrentClient(client);
+  });
+
+  const createJob = (name = 'my-job') => {
+    let pending = false;
+    return {
+      name,
+      job: (() => {}) as unknown,
+      nextInvocation: () => (pending ? new Date() : null),
+      schedule(spec: unknown) {
+        const change = { arguments: [spec], self: this, result: undefined as unknown };
+        beforeSchedule(change, { excludeJobs: ['excluded-job'] });
+        change.result = spec !== 'not a spec';
+        pending ||= change.result === true;
+        onSchedule(change);
+        return change.result;
+      },
+      reschedule(spec: unknown) {
+        pending = false;
+        return this.schedule(spec);
+      },
+      run() {
+        (this.job as () => void)();
+      },
+    };
+  };
+
+  it('sends the schedule of a named job', () => {
+    const job = createJob();
+    job.schedule({ rule: '30 9 * * 1-5', tz: 'UTC' });
+    job.run();
+
+    expect(sentConfigs[0]).toEqual({ schedule: { type: 'crontab', value: '30 9 * * 1-5' }, timezone: 'UTC' });
+  });
+
+  it.each([
+    ['an unnamed job', createJob('<Anonymous Job 1 2026-10-28T00:00:00.000Z>'), '0 9 * * *'],
+    ['an excluded job', createJob('excluded-job'), '0 9 * * *'],
+    ['a one-off job', createJob(), new Date(Date.now() + 86_400_000)],
+    ['a job with a recurrence rule', createJob(), { hour: 3, minute: 0 }],
+  ])('does not monitor %s', (_, job, spec) => {
+    job.schedule(spec);
+    job.run();
+
+    expect(sentConfigs).toEqual([]);
+  });
+
+  it('wraps the job once and sends the new schedule after a reschedule', () => {
+    const job = createJob();
+    job.schedule('0 9 * * *');
+    const wrapped = job.job;
+    job.reschedule({ rule: '30 10 * * 1-5', tz: 'UTC' });
+    job.run();
+
+    expect(job.job).toBe(wrapped);
+    expect(sentConfigs).toHaveLength(2);
+    expect(sentConfigs[0]).toEqual({ schedule: { type: 'crontab', value: '30 10 * * 1-5' }, timezone: 'UTC' });
+  });
+
+  it('stops checking in after a reschedule to a spec it cannot convert', () => {
+    const job = createJob();
+    job.schedule('0 9 * * *');
+    job.reschedule({ hour: 3, minute: 0 });
+    job.run();
+
+    expect(sentConfigs).toEqual([]);
+  });
+
+  it('keeps the old schedule when the reschedule fails', () => {
+    const job = createJob();
+    job.schedule('0 9 * * *');
+    job.reschedule('not a spec');
+    job.run();
+
+    expect(sentConfigs[0]?.schedule).toEqual({ type: 'crontab', value: '0 9 * * *' });
+  });
+
+  it('stops checking in when a second schedule adds to the first', () => {
+    const job = createJob();
+    job.schedule('0 9 * * *');
+    job.schedule('0 18 * * *');
+    job.run();
+
+    expect(sentConfigs).toEqual([]);
+  });
+});
diff --git a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
index 5dac489035d1..0feac3d58b47 100644
--- a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
+++ b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
@@ -44,7 +44,7 @@ describe('channel integration definitions', () => {
 
     // `@nestjs/*` and `@remix-run/*` are covered by listeners in their own SDK packages.
     // Each cron monitor is billed, so bundler-only SDKs must not install crons integrations for every app.
-    const optIn = new Set(['node-cron']);
+    const optIn = new Set(['node-cron', 'node-schedule']);
     const uncovered = [...configured].filter(
       name => !defined.has(name) && !optIn.has(name) && !name.startsWith('@nestjs/') && !name.startsWith('@remix-run/'),
     );
diff --git a/packages/solidstart/src/server/index.ts b/packages/solidstart/src/server/index.ts
index 686ce210b2d7..4ac8bff68e34 100644
--- a/packages/solidstart/src/server/index.ts
+++ b/packages/solidstart/src/server/index.ts
@@ -41,6 +41,7 @@ export {
   functionToStringIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,
diff --git a/packages/sveltekit/src/server/index.ts b/packages/sveltekit/src/server/index.ts
index 7d55e5f41ec9..ff3d3ac7b5dd 100644
--- a/packages/sveltekit/src/server/index.ts
+++ b/packages/sveltekit/src/server/index.ts
@@ -39,6 +39,7 @@ export {
   functionToStringIntegration,
   genericPoolIntegration,
   nodeCronIntegration,
+  nodeScheduleIntegration,
   getActiveSpan,
   getAutoPerformanceIntegrations,
   getClient,

From b63640bbb5d9f42721b4108daa583b8eef7d91e6 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 19:11:26 +0100
Subject: [PATCH 074/169] Revert "ci(deps): Dedupe lockfile on Dependabot PRs
 (#25911)" (#25962)

**Why:** With `autoDedupe` enabled in #25961, Dependabot now writes an
already-deduped lockfile, so the dedupe workflow from #25911 has nothing
left to do. After #25961 merged, Dependabot rebased #25955, #25956 and
#25957. On all three, `pnpm dedupe` made no changes: the upload step was
skipped, no artifact was created and no dedupe commit was pushed. `Check
lockfile` passed on #25955 and #25957. #25956 fails `pnpm install` with
`ERR_PNPM_IGNORED_BUILDS`, which is a separate problem.

**How to review:** This is a clean `git revert` of bc8fdf1. It also
restores the optional E2E condition in `build.yml` to the `github.actor`
check, since the author-based check was only needed once the dedupe app
started pushing to Dependabot branches.

<!-- junior-request-attribution:start -->
via **Charly Gomez**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AC02TB1YBNGJ%3A1793371893.509089 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
---
 .github/workflows/build.yml                  |   7 +-
 .github/workflows/dependabot-dedupe-push.yml | 134 -------------------
 .github/workflows/dependabot-dedupe.yml      |  63 ---------
 3 files changed, 2 insertions(+), 202 deletions(-)
 delete mode 100644 .github/workflows/dependabot-dedupe-push.yml
 delete mode 100644 .github/workflows/dependabot-dedupe.yml

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0d470f273e39..a546292a32ef 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1141,16 +1141,13 @@ jobs:
   #   them. optional-e2e.yml reports the results in a PR comment.
   job_optional_e2e_tests:
     name: E2E Tests (optional)
-    # We only run E2E tests for non-fork PRs because the E2E tests require secrets to work and they can't be accessed from forks.
-    # Dependabot PRs are skipped by author, not by `github.actor`: once the Gitflow app pushes the deduped lockfile
-    # (dependabot-dedupe-push.yml), the actor is the app and the run would otherwise get the E2E secrets.
+    # We only run E2E tests for non-fork PRs because the E2E tests require secrets to work and they can't be accessed from forks
     # We need to add the `always()` check here because the previous step has this as well :(
     # See: https://github.com/actions/runner/issues/2205
     if:
       always() && needs.job_get_metadata.outputs.is_release != 'true' && needs.job_build_tarballs.result == 'success' &&
       needs.job_build.outputs.e2e-matrix-optional != '{"include":[]}' && (github.event_name != 'pull_request' ||
-      github.event.pull_request.head.repo.full_name == github.repository) && github.event.pull_request.user.login !=
-      'dependabot[bot]'
+      github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
     needs: [job_get_metadata, job_build, job_build_tarballs]
     # This job only waits for optional-e2e.yml, which can take most of an hour. GitHub runners are free for public
     # repos and Namespace runners are paid per minute, so the wait runs here and the tests run on Namespace.
diff --git a/.github/workflows/dependabot-dedupe-push.yml b/.github/workflows/dependabot-dedupe-push.yml
deleted file mode 100644
index 3fce5447b7ba..000000000000
--- a/.github/workflows/dependabot-dedupe-push.yml
+++ /dev/null
@@ -1,134 +0,0 @@
-name: 'Dependabot: Push deduped lockfile'
-
-# Pushes the lockfile from `dependabot-dedupe.yml` to the Dependabot PR branch.
-#
-# This workflow holds the Gitflow app token, so it never runs code from the PR. Everything it
-# receives is untrusted: anyone with write access can push to a Dependabot branch, and the run that
-# produced the artifact used the PR's version of `dependabot-dedupe.yml`. So it looks the PR up
-# through the API, accepts only a single regular `pnpm-lock.yaml` file and commits nothing else.
-#
-# The app token is limited to `contents: write` on this repository, not to `dependabot/**` branches, so
-# nothing from the PR may run before it is minted. Pushing as the app also changes `github.actor` on the
-# PR's next CI run, so jobs that keep secrets away from Dependabot must check the PR author, not the actor.
-
-on:
-  workflow_run:
-    workflows: ['Dependabot: Dedupe lockfile']
-    types: [completed]
-
-permissions:
-  actions: read
-  contents: read
-  pull-requests: read
-
-concurrency:
-  group: dependabot-dedupe-push-${{ github.event.workflow_run.head_sha }}
-  cancel-in-progress: false
-
-jobs:
-  push:
-    name: Push deduped lockfile
-    if: |
-      github.event.workflow_run.conclusion == 'success'
-      && github.event.workflow_run.event == 'pull_request'
-      && github.event.workflow_run.head_repository.full_name == github.repository
-    runs-on: namespace-profile-sentry-javascript-small
-    timeout-minutes: 5
-    env:
-      GH_TOKEN: ${{ github.token }}
-      RUN_ID: ${{ github.event.workflow_run.id }}
-      HEAD_SHA: ${{ github.event.workflow_run.head_sha }}
-    steps:
-      - name: Find artifact and Dependabot PR
-        id: pr
-        run: |
-          artifacts=$(gh api "repos/${GITHUB_REPOSITORY}/actions/runs/${RUN_ID}/artifacts" \
-            --jq '[.artifacts[] | select(.name == "pnpm-lock")] | length')
-          if [ "$artifacts" != "1" ]; then
-            echo "No deduped lockfile to push."
-            exit 0
-          fi
-
-          head_ref=$(gh api "repos/${GITHUB_REPOSITORY}/commits/${HEAD_SHA}/pulls" |
-            jq -r --arg repo "$GITHUB_REPOSITORY" --arg sha "$HEAD_SHA" '
-              [.[] | select(.state == "open"
-                and .base.ref == "develop"
-                and .user.login == "dependabot[bot]"
-                and .head.repo.full_name == $repo
-                and .head.sha == $sha)]
-              | if length == 1 then .[0].head.ref else empty end')
-          if [[ ! "$head_ref" =~ ^dependabot/[A-Za-z0-9._/@+-]+$ ]]; then
-            echo "::error::No open Dependabot PR into develop has head commit ${HEAD_SHA}."
-            exit 1
-          fi
-          echo "head_ref=${head_ref}" >> "$GITHUB_OUTPUT"
-
-      - name: Download deduped lockfile
-        if: steps.pr.outputs.head_ref
-        uses: actions/download-artifact@v8
-        with:
-          name: pnpm-lock
-          path: ${{ runner.temp }}/pnpm-lock
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ github.token }}
-
-      - name: Check out PR branch
-        if: steps.pr.outputs.head_ref
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ github.event.workflow_run.head_sha }}
-          persist-credentials: false
-
-      # Replace the file instead of writing through it, so a symlinked lockfile in the PR cannot redirect the write.
-      - name: Apply deduped lockfile
-        if: steps.pr.outputs.head_ref
-        id: apply
-        env:
-          LOCKFILE_DIR: ${{ runner.temp }}/pnpm-lock
-        run: |
-          if [ "$(find "$LOCKFILE_DIR" -mindepth 1 | wc -l)" != "1" ] || [ ! -f "$LOCKFILE_DIR/pnpm-lock.yaml" ] || [ -L "$LOCKFILE_DIR/pnpm-lock.yaml" ]; then
-            echo "::error::The artifact must contain exactly one regular file named pnpm-lock.yaml."
-            exit 1
-          fi
-          if [ "$(git ls-files --stage -- pnpm-lock.yaml | cut -d' ' -f1)" != "100644" ]; then
-            echo "::error::pnpm-lock.yaml in the PR is not a regular file."
-            exit 1
-          fi
-          rm pnpm-lock.yaml
-          cp "$LOCKFILE_DIR/pnpm-lock.yaml" pnpm-lock.yaml
-
-          changes=$(git status --porcelain)
-          if [ -z "$changes" ]; then
-            echo "Lockfile is already deduped."
-            exit 0
-          fi
-          if [ "$changes" != " M pnpm-lock.yaml" ]; then
-            echo "::error::Unexpected changes:"
-            echo "$changes"
-            exit 1
-          fi
-          echo "changed=true" >> "$GITHUB_OUTPUT"
-
-      # An app token is needed so the push triggers CI again; pushes made with GITHUB_TOKEN do not.
-      - name: Generate GitHub App token
-        if: steps.apply.outputs.changed == 'true'
-        id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
-        with:
-          client-id: ${{ vars.GITFLOW_APP_ID }}
-          private-key: ${{ secrets.GITFLOW_APP_PRIVATE_KEY }}
-          permission-contents: write
-
-      # `[dependabot skip]` lets Dependabot keep rebasing the PR over this commit.
-      # The push is not forced, so it fails if the branch moved past HEAD_SHA in the meantime.
-      - name: Commit and push
-        if: steps.apply.outputs.changed == 'true'
-        env:
-          APP_TOKEN: ${{ steps.app-token.outputs.token }}
-          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
-          HEAD_REF: ${{ steps.pr.outputs.head_ref }}
-        run: |
-          git config user.name "${APP_SLUG}[bot]"
-          git config user.email "${APP_SLUG}[bot]@users.noreply.github.com"
-          git commit -m "chore(deps): Dedupe pnpm-lock.yaml [dependabot skip]" -- pnpm-lock.yaml
-          git push "https://x-access-token:${APP_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" "HEAD:refs/heads/${HEAD_REF}"
diff --git a/.github/workflows/dependabot-dedupe.yml b/.github/workflows/dependabot-dedupe.yml
deleted file mode 100644
index 05fcf2f42448..000000000000
--- a/.github/workflows/dependabot-dedupe.yml
+++ /dev/null
@@ -1,63 +0,0 @@
-name: 'Dependabot: Dedupe lockfile'
-
-# Dependabot updates pnpm-lock.yaml without deduping it, so `Check lockfile` (`pnpm dedupe --check`)
-# fails on most of its PRs. This job dedupes the lockfile and uploads it as an artifact. It runs on
-# `pull_request`, so it has no secrets, a read-only token and PR-scoped caches.
-# `dependabot-dedupe-push.yml` validates the result and pushes it to the PR branch.
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened]
-    branches:
-      - develop
-    paths:
-      - 'pnpm-lock.yaml'
-
-permissions:
-  contents: read
-
-concurrency:
-  group: dependabot-dedupe-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  dedupe:
-    name: Dedupe lockfile
-    # Only run on pushes made by Dependabot itself. The deduped commit pushed by `dependabot-dedupe-push.yml`
-    # also triggers `synchronize`, and a second full `pnpm dedupe` on it would only confirm there is nothing left to do.
-    if: |
-      github.event.pull_request.user.login == 'dependabot[bot]'
-      && github.actor == 'dependabot[bot]'
-      && github.event.pull_request.head.repo.full_name == github.repository
-    # PR code runs here, so keep its cache writes away from the cache used by develop, like the PR jobs in build.yml.
-    runs-on: namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript-pr
-    # `pnpm dedupe` fetches metadata for every package from npm.
-    timeout-minutes: 20
-    steps:
-      - name: Check out PR branch
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          persist-credentials: false
-
-      - name: Install pnpm
-        uses: ./.github/actions/install-pnpm
-
-      - name: Set up Node
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: 'package.json'
-
-      - name: Dedupe lockfile
-        id: dedupe
-        run: |
-          pnpm dedupe --ignore-scripts --ignore-pnpmfile
-          git diff --quiet pnpm-lock.yaml || echo "changed=true" >> "$GITHUB_OUTPUT"
-
-      - name: Upload deduped lockfile
-        if: steps.dedupe.outputs.changed == 'true'
-        uses: actions/upload-artifact@v7
-        with:
-          name: pnpm-lock
-          path: pnpm-lock.yaml
-          retention-days: 1

From c16633ee7f8bb61eb32374f542764ad32524dc43 Mon Sep 17 00:00:00 2001
From: isaacs <i@izs.me>
Date: Fri, 30 Oct 2026 12:06:08 -0700
Subject: [PATCH 075/169] ref(cloudflare): Use the shared request handler
 wrapper (#25588)

Moves Cloudflare's `wrapRequestHandler` onto `wrapServerRequestHandler`,
which `Deno.serve` and `Bun.serve` use since the previous PRs.
Cloudflare keeps only what is unique to it: client init, the `cf` and
cloud resource contexts, the protocol from `cf.httpProtocol`, the
`isStreamingResponse` option, `captureErrors`, and the flush through
`waitUntil`, which skips the dispose for a 101 response. The helpers
that only the old code used (`captureIncomingRequestBody`,
`shouldCreateIncomingRequestSpan`, `getIncomingRequestSpanHooks` and
`addRequest`) are gone.

`wrapRequestHandler` must run on workers without the `nodejs_compat`
flag, such as Shopify Oxygen, and every `@sentry/server-utils` entry
loads `node:async_hooks`. So the wrapper moves to a new entry,
`@sentry/server-utils/request-handler`, with no Node.js imports. Deno
and Bun import it from there too. Cloudflare's module graph test allows
this one entry, and a new test in server-utils walks the entry's module
graph and fails on any Node.js import.

The wrapper gets three optional fields: `isStreamingResponse`, `onDone`
(called once when the request is done, with the response if there is
one), and a `mechanism` that can be left out to not capture errors.

For streamed responses, the shared stream monitor replaces Cloudflare's
`TransformStream`. Workers with a compatibility date before 2022-11-30
cannot construct a `ReadableStream` without the
`streams_enable_constructors` flag, so the wrapper then ends at handler
return, as the `TransformStream` fallback did. The monitor now locks the
source body only in `start()`, so the original response stays usable in
that case. The wrapper builds the new response from the original one,
which keeps `encodeBody: 'manual'`.

Visible changes for Cloudflare:

- Request spans set `client.address` from `CF-Connecting-IP` (or another
forwarding header), as on the other runtimes. This follows
`dataCollection.userInfo`, which is `true` by default.
- Request spans get the response header attributes, and events get the
`response` context.
- An error from the source of a streamed response is captured (unless
`captureErrors` is `false`), and the span gets an error status.
- If the user removed `httpServerIntegration`, request bodies follow
`dataCollection.httpBodies`. Before, the SDK attached no body.

The minified `withSentry` bundle grows by about 2.4 KB (212,385 to
214,853 bytes), under the 211 KiB limit. Most of it is the request
session and client address code, which Cloudflare now shares.

Fixes #25577
Fixes JS-3975

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  10 +
 .../suites/public-api/startSpan/test.ts       |  10 +
 .../subpath-request-handler/test.ts           |  13 +-
 packages/bun/src/integrations/bunserver.ts    |   2 +-
 .../cloudflare/src/integrations/httpServer.ts | 161 +++---------
 packages/cloudflare/src/scope-utils.ts        |   8 -
 .../src/wrapRequestHandlerWithInit.ts         | 235 +++---------------
 .../test/request-stack-strategy.test.ts       |  45 ++++
 packages/cloudflare/test/request.test.ts      |  20 +-
 .../test/requestModuleGraph.test.ts           |   7 +-
 .../deno/src/wrap-deno-request-handler.ts     |   2 +-
 packages/server-utils/package.json            |   5 +
 packages/server-utils/rollup.npm.config.mjs   |   1 +
 packages/server-utils/src/exports.ts          |   4 +-
 .../server-utils/src/index.request-handler.ts |   4 +
 .../server-utils/src/utils/monitorStream.ts   |  51 +++-
 .../src/utils/wrapServerRequestHandler.ts     | 109 ++++++--
 .../test/requestHandlerEntry.test.ts          |  53 ++++
 .../test/utils/monitorStream.test.ts          |  58 +++++
 .../utils/wrapServerRequestHandler.test.ts    |  70 +++++-
 20 files changed, 486 insertions(+), 382 deletions(-)
 create mode 100644 packages/cloudflare/test/request-stack-strategy.test.ts
 create mode 100644 packages/server-utils/src/index.request-handler.ts
 create mode 100644 packages/server-utils/test/requestHandlerEntry.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fff7847dd506..81399b6e6386 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+- **ref(cloudflare): Use the shared request handler wrapper**
+
+  Cloudflare Workers now use the same request handler wrapper as `Deno.serve` and `Bun.serve`. Changes for Cloudflare users:
+
+  - Request spans now set `client.address` from the `CF-Connecting-IP` header (or another forwarding header), as on the other runtimes. This follows `dataCollection.userInfo`, which is `true` by default. To leave it out, set `dataCollection: { userInfo: false }`.
+  - Request spans now have the response header attributes, and events have the `response` context with the status code.
+  - When the source of a streamed response fails, the SDK now captures the error and marks the span as failed. With `captureErrors: false`, it does not capture it.
+  - Request spans now list every `Set-Cookie` header of a response, as on Deno and Bun.
+  - Without `AsyncLocalStorage` (for example on Shopify Oxygen), events now also get the request URL and method.
+
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
 ### Important Changes
diff --git a/dev-packages/cloudflare-integration-tests/suites/public-api/startSpan/test.ts b/dev-packages/cloudflare-integration-tests/suites/public-api/startSpan/test.ts
index 0fa5d410368b..adf52419022f 100644
--- a/dev-packages/cloudflare-integration-tests/suites/public-api/startSpan/test.ts
+++ b/dev-packages/cloudflare-integration-tests/suites/public-api/startSpan/test.ts
@@ -1,5 +1,6 @@
 import { SDK_VERSION, SEMANTIC_ATTRIBUTE_SENTRY_SAMPLE_RATE } from '@sentry/core';
 import {
+  CLIENT_ADDRESS,
   SENTRY_SEGMENT_NAME_SOURCE,
   SENTRY_SDK_NAME,
   SENTRY_SDK_VERSION,
@@ -205,6 +206,15 @@ it('sends a streamed span envelope with correct spans for a manually started spa
         type: 'string',
         value: 'localhost',
       },
+      // From the `CF-Connecting-IP` header that `wrangler dev` sets.
+      [CLIENT_ADDRESS]: {
+        type: 'string',
+        value: '127.0.0.1',
+      },
+      'http.response.header.content-type': {
+        type: 'array',
+        value: ['text/plain;charset=UTF-8'],
+      },
       'url.full': {
         type: 'string',
         value: expect.stringMatching(/^http:\/\/localhost:.+$/),
diff --git a/dev-packages/cloudflare-integration-tests/suites/tracing/opentelemetry-tracer/subpath-request-handler/test.ts b/dev-packages/cloudflare-integration-tests/suites/tracing/opentelemetry-tracer/subpath-request-handler/test.ts
index 596ae6c6ef6d..27e35a07270f 100644
--- a/dev-packages/cloudflare-integration-tests/suites/tracing/opentelemetry-tracer/subpath-request-handler/test.ts
+++ b/dev-packages/cloudflare-integration-tests/suites/tracing/opentelemetry-tracer/subpath-request-handler/test.ts
@@ -1,16 +1,19 @@
-import type { Event } from '@sentry/core';
+import { HTTP_SERVER } from '@sentry/conventions/op';
 import { expect, it } from 'vitest';
 import { createRunner } from '../../../../runner';
+import { getSpanOp, getSpansFromEnvelope } from '../../../../spanUtils';
 
 it('does not capture spans emitted through @opentelemetry/api inside wrapRequestHandler from the /request subpath', async ({
   signal,
 }) => {
   const runner = createRunner(__dirname)
     .expect(envelope => {
-      const event = envelope[1]?.[0]?.[1] as Event;
-      expect(event.transaction).toBe('GET /');
-      expect(event.contexts?.trace?.op).toBe('http.server');
-      expect(event.spans).toEqual([]);
+      // Only the request's segment span. The OpenTelemetry span is not captured.
+      const spans = getSpansFromEnvelope(envelope);
+      expect(spans).toHaveLength(1);
+      expect(spans[0]?.is_segment).toBe(true);
+      expect(spans[0]?.name).toBe('GET /');
+      expect(getSpanOp(spans[0]!)).toBe(HTTP_SERVER);
     })
     .start(signal);
 
diff --git a/packages/bun/src/integrations/bunserver.ts b/packages/bun/src/integrations/bunserver.ts
index 887f9582466f..cfdca8dca964 100644
--- a/packages/bun/src/integrations/bunserver.ts
+++ b/packages/bun/src/integrations/bunserver.ts
@@ -2,7 +2,7 @@ import type { Client, Integration, IntegrationFn, MaxRequestBodySize, Span, Span
 import { debug, defineIntegration, getClient, withIsolationScope } from '@sentry/core';
 import type { AssertTrue, CheckServerRequestOptions, ServerRequestOptions } from '@sentry/core/server';
 import { URL_PATH_PARAMETER_KEY_BASE } from '@sentry/conventions/attributes';
-import { wrapServerRequestHandler } from '@sentry/server-utils';
+import { wrapServerRequestHandler } from '@sentry/server-utils/request-handler';
 import type { Server, ServeOptions } from 'bun';
 
 const INTEGRATION_NAME = 'BunServer' as const;
diff --git a/packages/cloudflare/src/integrations/httpServer.ts b/packages/cloudflare/src/integrations/httpServer.ts
index 1975f168819e..8f7afaacd29f 100644
--- a/packages/cloudflare/src/integrations/httpServer.ts
+++ b/packages/cloudflare/src/integrations/httpServer.ts
@@ -1,15 +1,6 @@
-import type { Client, IntegrationFn, MaxRequestBodySize, Span } from '@sentry/core';
-import {
-  captureBodyFromWinterCGRequest,
-  defineIntegration,
-  getIsolationScope,
-  hasSpansEnabled,
-  parseStringToURLObject,
-  safeCallback,
-} from '@sentry/core';
-import type { AssertTrue, CheckServerRequestOptions } from '@sentry/core/server';
-import { isStaticAssetRequest } from '@sentry/core/server';
-import { DEBUG_BUILD } from '../debug-build';
+import type { Client, Integration, IntegrationFn, MaxRequestBodySize, Span } from '@sentry/core';
+import { defineIntegration } from '@sentry/core';
+import type { AssertTrue, CheckServerRequestOptions, ServerRequestOptions } from '@sentry/core/server';
 
 const INTEGRATION_NAME = 'HttpServer' as const;
 
@@ -100,21 +91,46 @@ type _ServerRequestOptionsCheck = AssertTrue<
   >
 >;
 
-interface HttpServerIntegrationInstance extends HttpServerIntegrationOptions {
-  name: string;
-  maxRequestBodySize: MaxRequestBodySize | undefined;
+type SupportedServerRequestOptions = Omit<
+  ServerRequestOptions<Request, Response>,
+  'sessions' | 'sessionFlushingDelayMS'
+>;
+
+// Every supported shared option is a required key, so a new one fails to compile below until the
+// integration passes it on.
+type HttpServerRequestOptions = {
+  [K in keyof Required<SupportedServerRequestOptions>]: SupportedServerRequestOptions[K];
+};
+
+interface HttpServerIntegration extends Integration {
+  requestOptions: HttpServerRequestOptions;
+}
+
+/**
+ * The incoming request options of the client's `httpServerIntegration`. If the integration does not
+ * set `maxRequestBodySize`, `dataCollection.httpBodies` decides. Without the integration, the SDK
+ * attaches no request body.
+ */
+export function getHttpServerRequestOptions(client: Client): ServerRequestOptions<Request, Response> {
+  return (
+    client.getIntegrationByName<HttpServerIntegration>(INTEGRATION_NAME)?.requestOptions ?? {
+      maxRequestBodySize: 'none',
+    }
+  );
 }
 
-const _httpServerIntegration = ((options: HttpServerIntegrationOptions = {}): HttpServerIntegrationInstance => {
+const _httpServerIntegration = ((options: HttpServerIntegrationOptions = {}): HttpServerIntegration => {
   return {
     name: INTEGRATION_NAME,
-    maxRequestBodySize: options.maxRequestBodySize,
-    ignoreRequestBody: options.ignoreRequestBody,
-    ignoreIncomingRequests: options.ignoreIncomingRequests,
-    ignoreStaticAssets: options.ignoreStaticAssets ?? true,
-    spans: options.spans,
-    onSpanCreated: options.onSpanCreated,
-    onSpanEnd: options.onSpanEnd,
+    requestOptions: {
+      maxRequestBodySize: options.maxRequestBodySize,
+      ignoreRequestBody: options.ignoreRequestBody,
+      ignoreIncomingRequests: options.ignoreIncomingRequests,
+      ignoreStaticAssets: options.ignoreStaticAssets ?? true,
+      spans: options.spans,
+      onSpanCreated: options.onSpanCreated,
+      onSpanEnd: options.onSpanEnd,
+    },
   };
 }) satisfies IntegrationFn;
 
@@ -137,102 +153,3 @@ const _httpServerIntegration = ((options: HttpServerIntegrationOptions = {}): Ht
  * ```
  */
 export const httpServerIntegration = defineIntegration(_httpServerIntegration);
-
-/**
- * Capture the request body based on the HttpServer integration config.
- * Called internally by `wrapRequestHandler`.
- */
-export async function captureIncomingRequestBody(client: Client, request: Request): Promise<void> {
-  const integration = client.getIntegrationByName<HttpServerIntegrationInstance>(INTEGRATION_NAME);
-
-  if (!integration) {
-    return;
-  }
-
-  const configuredBodySize = integration.maxRequestBodySize;
-  const effectiveBodySize: MaxRequestBodySize =
-    configuredBodySize ??
-    (client.getDataCollectionOptions().httpBodies.includes('incomingRequest') ? 'medium' : 'none');
-
-  if (effectiveBodySize === 'none') {
-    return;
-  }
-
-  // Skip GET and HEAD requests - they don't have bodies
-  // Also skip OPTIONS, even if they may have a body, they might not give a lot of extra value
-  if (request.method === 'GET' || request.method === 'HEAD' || request.method === 'OPTIONS') {
-    return;
-  }
-
-  const ignoreRequestBody = integration.ignoreRequestBody;
-  if (
-    ignoreRequestBody &&
-    // If the filter throws, skip the body so it cannot leak data the filter was meant to hide.
-    safeCallback(
-      DEBUG_BUILD ? 'Error in `ignoreRequestBody`, skipping the body:' : '',
-      () => ignoreRequestBody(request.url, request),
-      () => true,
-    )
-  ) {
-    return;
-  }
-
-  const isolationScope = getIsolationScope();
-  await captureBodyFromWinterCGRequest(request, isolationScope, effectiveBodySize);
-}
-
-/**
- * Whether to create a span for the incoming request, based on the HttpServer integration config.
- * Called internally by `wrapRequestHandler`.
- */
-export function shouldCreateIncomingRequestSpan(client: Client | undefined, request: Request): boolean {
-  if (!client) {
-    return false;
-  }
-
-  const integration = client.getIntegrationByName<HttpServerIntegrationInstance>(INTEGRATION_NAME);
-  if (!(integration?.spans ?? hasSpansEnabled(client.getOptions()))) {
-    return false;
-  }
-
-  const urlObject = parseStringToURLObject(request.url);
-  const urlPath = urlObject ? `${urlObject.pathname}${urlObject.search}` : '/';
-  if (integration?.ignoreStaticAssets && request.method === 'GET' && isStaticAssetRequest(urlPath)) {
-    return false;
-  }
-
-  const ignoreIncomingRequests = integration?.ignoreIncomingRequests;
-  return !(
-    ignoreIncomingRequests &&
-    safeCallback(
-      DEBUG_BUILD ? 'Error in `ignoreIncomingRequests`, creating the span:' : '',
-      () => ignoreIncomingRequests(urlPath, request),
-      () => false,
-    )
-  );
-}
-
-/**
- * The `onSpanCreated` and `onSpanEnd` hooks of the HttpServer integration, guarded so that a hook
- * that throws does not fail the request. Called internally by `wrapRequestHandler`.
- */
-export function getIncomingRequestSpanHooks(client: Client | undefined): {
-  onSpanCreated: (span: Span, request: Request) => void;
-  onSpanEnd: (span: Span, request: Request, response: Response) => void;
-} {
-  const integration = client?.getIntegrationByName<HttpServerIntegrationInstance>(INTEGRATION_NAME);
-  return {
-    onSpanCreated: (span, request) =>
-      safeCallback(
-        DEBUG_BUILD ? 'Error in `onSpanCreated`:' : '',
-        () => integration?.onSpanCreated?.(span, request),
-        () => undefined,
-      ),
-    onSpanEnd: (span, request, response) =>
-      safeCallback(
-        DEBUG_BUILD ? 'Error in `onSpanEnd`:' : '',
-        () => integration?.onSpanEnd?.(span, request, response),
-        () => undefined,
-      ),
-  };
-}
diff --git a/packages/cloudflare/src/scope-utils.ts b/packages/cloudflare/src/scope-utils.ts
index 540a4589c1a5..22a3e05aebc7 100644
--- a/packages/cloudflare/src/scope-utils.ts
+++ b/packages/cloudflare/src/scope-utils.ts
@@ -1,7 +1,6 @@
 import { CLOUD_PROVIDER } from '@sentry/conventions/attributes';
 import type { CfProperties, IncomingRequestCfProperties } from '@cloudflare/workers-types';
 import type { Scope } from '@sentry/core';
-import { winterCGRequestToRequestData } from '@sentry/core';
 
 /**
  * Set cloud resource context on scope.
@@ -20,10 +19,3 @@ export function addCultureContext(scope: Scope, cf: IncomingRequestCfProperties
     timezone: cf.timezone,
   });
 }
-
-/**
- * Set request data on scope
- */
-export function addRequest(scope: Scope, request: Request): void {
-  scope.setSDKProcessingMetadata({ normalizedRequest: winterCGRequestToRequestData(request) });
-}
diff --git a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
index 9c2126b9add2..1f3ddde1dd6d 100644
--- a/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
+++ b/packages/cloudflare/src/wrapRequestHandlerWithInit.ts
@@ -1,39 +1,15 @@
 import type { CfProperties, IncomingRequestCfProperties } from '@cloudflare/workers-types';
-import {
-  NETWORK_PROTOCOL_NAME,
-  NETWORK_PROTOCOL_VERSION,
-  SENTRY_OP,
-  SENTRY_SEGMENT_NAME_SOURCE,
-  HTTP_REQUEST_BODY_SIZE,
-  USER_AGENT_ORIGINAL,
-} from '@sentry/conventions/attributes';
-import { HTTP_SERVER } from '@sentry/conventions/op';
-import type { Span } from '@sentry/core';
-import {
-  captureException,
-  continueTrace,
-  getHttpSpanDetailsFromUrlObject,
-  hasSpanStreamingEnabled,
-  httpHeadersToSpanAttributes,
-  HTTP_SPAN_NAME_FALLBACK,
-  parseStringToURLObject,
-  safeCallback,
-  setHttpStatus,
-  startSpanManual,
-  winterCGHeadersToDict,
-} from '@sentry/core';
-import { classifyResponseStreaming } from '@sentry/core/server';
+import { NETWORK_PROTOCOL_NAME, NETWORK_PROTOCOL_VERSION } from '@sentry/conventions/attributes';
+import type { SpanAttributes } from '@sentry/core';
+import { getIsolationScope, safeCallback } from '@sentry/core';
+import { wrapServerRequestHandler } from '@sentry/server-utils/request-handler';
 import { DEBUG_BUILD } from './debug-build';
-import {
-  captureIncomingRequestBody,
-  getIncomingRequestSpanHooks,
-  shouldCreateIncomingRequestSpan,
-} from './integrations/httpServer';
+import { getHttpServerRequestOptions } from './integrations/httpServer';
 import { flushDeferredChannelEvents } from './orchestrion-deferred-channels';
 import type { CloudflareClient, CloudflareOptions } from './client';
 import type { ExecutionContextCompat } from './executionContext';
 import { flushAndDispose, getOriginalWaitUntil } from './flush';
-import { addCloudResourceContext, addCultureContext, addRequest } from './scope-utils';
+import { addCloudResourceContext, addCultureContext } from './scope-utils';
 import { getInvocationState, getInvocationWaitUntil } from './utils/invocationContext';
 import { withInvocationIsolationScope } from './utils/invocationScope';
 
@@ -87,7 +63,6 @@ export function wrapRequestHandlerWithInit(
       : context
         ? getOriginalWaitUntil(context).bind(context)
         : undefined;
-    const errorMechanismType = getRequestErrorMechanismType(context);
 
     const client = initSdk({ ...options, ctx: context });
     isolationScope.setClient(client);
@@ -97,43 +72,8 @@ export function wrapRequestHandlerWithInit(
     // request, where workerd allows publish, and init() above has registered subscribers.
     flushDeferredChannelEvents();
 
-    const urlObject = parseStringToURLObject(request.url);
-    const [rawName, attributes] = getHttpSpanDetailsFromUrlObject(
-      urlObject,
-      'server',
-      'auto.http.cloudflare',
-      request,
-      undefined,
-      client,
-    );
-    // With span streaming, span names have to be low cardinality, so we can't fall back to the URL.
-    // A `route` source means the name already is (e.g. the `/` path), so it is kept as-is.
-    const name =
-      attributes[SENTRY_SEGMENT_NAME_SOURCE] === 'route' || !client || !hasSpanStreamingEnabled(client)
-        ? rawName
-        : request.method?.toUpperCase() || HTTP_SPAN_NAME_FALLBACK;
-
-    const contentLength = request.headers.get('content-length');
-    if (contentLength) {
-      attributes[HTTP_REQUEST_BODY_SIZE] = parseInt(contentLength, 10);
-    }
-
-    const userAgentHeader = request.headers.get('user-agent');
-    if (userAgentHeader) {
-      attributes[USER_AGENT_ORIGINAL] = userAgentHeader;
-    }
-
-    if (client) {
-      Object.assign(
-        attributes,
-        httpHeadersToSpanAttributes(winterCGHeadersToDict(request.headers), client.getDataCollectionOptions()),
-      );
-    }
-
-    attributes[SENTRY_OP] = HTTP_SERVER;
-
     addCloudResourceContext(isolationScope);
-    addRequest(isolationScope, request);
+    const attributes: SpanAttributes = {};
     if (request.cf) {
       addCultureContext(isolationScope, request.cf);
 
@@ -144,143 +84,50 @@ export function wrapRequestHandlerWithInit(
       }
     }
 
-    // Do not capture spans for OPTIONS and HEAD requests
-    if (request.method === 'OPTIONS' || request.method === 'HEAD') {
+    if (!client) {
       try {
         return await handler();
-      } catch (e) {
-        if (captureErrors) {
-          captureException(e, { mechanism: { handled: false, type: errorMechanismType } });
-        }
-        throw e;
       } finally {
         waitUntil?.(flushAndDispose(client));
       }
     }
 
-    if (client) {
-      await captureIncomingRequestBody(client, request);
-    }
-
-    const { onSpanCreated, onSpanEnd } = getIncomingRequestSpanHooks(client);
-
-    // Runs the handler. Ends the span (if any) and flushes when the response is done.
-    const respond = async (span: Span | undefined): Promise<Response> => {
-      let res: Response;
-
-      try {
-        res = await handler();
-        if (span) {
-          setHttpStatus(span, res.status);
-        }
-
-        // After the handler runs, the span name might have been updated by nested instrumentation
-        // (e.g., Remix parameterizing routes). The span should already have the correct name
-        // from that instrumentation, so we don't need to do anything here.
-      } catch (e) {
-        span?.end();
-        if (captureErrors) {
-          captureException(e, { mechanism: { handled: false, type: errorMechanismType } });
-        }
-        waitUntil?.(flushAndDispose(client));
-        throw e;
-      }
-
-      let ended = false;
-      const endSpan = (): void => {
-        if (ended) return;
-
-        ended = true;
-        if (span) {
-          onSpanEnd(span, request, res);
-          span.end();
-        }
-      };
-
-      const userClassification = safeCallback(
-        DEBUG_BUILD ? 'Error in `isStreamingResponse`, using the default classification:' : '',
-        () => options.isStreamingResponse?.(res, request),
-        () => undefined,
-      );
-      // An async callback returns a promise, which would otherwise count as `true`.
-      const isStreaming =
-        typeof userClassification === 'boolean' ? userClassification : classifyResponseStreaming(res).isStreaming;
-
-      if (isStreaming && res.body) {
-        try {
-          let transformerUsed = false;
-
-          const endSpanOnce = (): void => {
-            if (ended) return;
-
-            endSpan();
+    // Note: The span will not have a duration unless I/O happens in the handler. This is
+    // because of how the cloudflare workers runtime works.
+    // See: https://developers.cloudflare.com/workers/runtime-apis/performance/
+    return wrapServerRequestHandler(
+      {
+        request,
+        client,
+        // Without `AsyncLocalStorage`, `withInvocationIsolationScope` does not fork, and the scope it
+        // passes in is not the current one. The request data has to go on the current scope, where
+        // events captured in the handler read it.
+        isolationScope: getIsolationScope(),
+        options: getHttpServerRequestOptions(client),
+        origin: 'auto.http.cloudflare',
+        mechanism: captureErrors ? { handled: false, type: getRequestErrorMechanismType(context) } : undefined,
+        attributes,
+        isStreamingResponse: response => {
+          const classification = safeCallback(
+            DEBUG_BUILD ? 'Error in `isStreamingResponse`, using the default classification:' : '',
+            () => options.isStreamingResponse?.(response, request),
+            () => undefined,
+          );
+          // An async callback returns a promise, which would otherwise count as `true`.
+          return typeof classification === 'boolean' ? classification : undefined;
+        },
+        onDone: response => {
+          // Don't dispose for protocol upgrades (101 Switching Protocols) - the connection stays alive.
+          // This includes WebSocket upgrades where webSocketMessage/webSocketClose handlers
+          // will still be called and may need the client to capture errors.
+          if (response?.status === 101) {
+            waitUntil?.(client.flush(2000));
+          } else {
             waitUntil?.(flushAndDispose(client));
-          };
-
-          // Workers with a compatibility date before 2022-11-30 and without the
-          // `transformstream_enable_standard_constructor` flag (for example under older mini-oxygen
-          // releases) ignore the transformer, so `flush` and `cancel` would never end the span. Only a
-          // used transformer runs `start`.
-          const transform = new TransformStream({
-            start() {
-              transformerUsed = true;
-            },
-            flush() {
-              // Source stream completed normally.
-              endSpanOnce();
-            },
-            cancel() {
-              // Client disconnected (or downstream cancelled). The `cancel`
-              // is being called while the response is still considered
-              // active, so this is a safe place to end the span.
-              endSpanOnce();
-            },
-          });
-
-          if (transformerUsed) {
-            // Passing the original response as the init keeps `encodeBody: 'manual'`, which a
-            // Response does not expose as a property. Without it, workerd compresses a
-            // pre-compressed body a second time.
-            return new Response(res.body.pipeThrough(transform), res);
           }
-        } catch {
-          // Falls back to ending the span at handler return.
-        }
-      }
-
-      // Non-streaming response - end span immediately and return original
-      endSpan();
-
-      // Don't dispose for protocol upgrades (101 Switching Protocols) - the connection stays alive.
-      // This includes WebSocket upgrades where webSocketMessage/webSocketClose handlers
-      // will still be called and may need the client to capture errors.
-      if (res.status === 101) {
-        waitUntil?.(client?.flush(2000));
-      } else {
-        waitUntil?.(flushAndDispose(client));
-      }
-      return res;
-    };
-
-    const createSpan = shouldCreateIncomingRequestSpan(client, request);
-
-    return continueTrace(
-      { sentryTrace: request.headers.get('sentry-trace') || '', baggage: request.headers.get('baggage') },
-      () => {
-        if (!createSpan) {
-          return respond(undefined);
-        }
-
-        // Note: This span will not have a duration unless I/O happens in the handler. This is
-        // because of how the cloudflare workers runtime works.
-        // See: https://developers.cloudflare.com/workers/runtime-apis/performance/
-
-        // Use startSpanManual to control when span ends (needed for streaming responses)
-        return startSpanManual({ name, attributes }, span => {
-          onSpanCreated(span, request);
-          return respond(span);
-        });
+        },
       },
+      () => handler(),
     );
   }, wrapperOptions.context);
 }
diff --git a/packages/cloudflare/test/request-stack-strategy.test.ts b/packages/cloudflare/test/request-stack-strategy.test.ts
new file mode 100644
index 000000000000..3e3cda68c479
--- /dev/null
+++ b/packages/cloudflare/test/request-stack-strategy.test.ts
@@ -0,0 +1,45 @@
+// This file sets no async context strategy, so the SDK uses the stack fallback, as on runtimes
+// without `AsyncLocalStorage` (for example Shopify Oxygen, or Workers without `nodejs_compat`).
+
+import type { Event } from '@sentry/core';
+import * as SentryCore from '@sentry/core';
+import { expect, test, vi } from 'vitest';
+import { httpServerIntegration, wrapRequestHandler } from '../src/request';
+
+test('attaches the request data and body to events captured in the handler without AsyncLocalStorage', async () => {
+  let event: Event | undefined;
+  const body = JSON.stringify({ payload: 'x'.repeat(4_000) });
+
+  await wrapRequestHandler(
+    {
+      options: {
+        dsn: 'https://public@dsn.ingest.sentry.io/1337',
+        cacheClient: false,
+        integrations: [httpServerIntegration({ maxRequestBodySize: 'small' })],
+        beforeSend(captured) {
+          event = captured;
+          return null;
+        },
+      },
+      request: new Request('https://example.com/action', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body,
+      }),
+      context: { waitUntil: vi.fn(), passThroughOnException: vi.fn() } as never,
+    },
+    () => {
+      SentryCore.captureException(new Error('Action Error'));
+      return new Response('error', { status: 500 });
+    },
+  );
+
+  expect(event?.request).toEqual(
+    expect.objectContaining({
+      method: 'POST',
+      url: 'https://example.com/action',
+      // `maxRequestBodySize: 'small'` truncates at 1,000 bytes.
+      data: `${body.slice(0, 997)}...`,
+    }),
+  );
+});
diff --git a/packages/cloudflare/test/request.test.ts b/packages/cloudflare/test/request.test.ts
index 972180c62a8c..d05ad7420d44 100644
--- a/packages/cloudflare/test/request.test.ts
+++ b/packages/cloudflare/test/request.test.ts
@@ -677,6 +677,7 @@ describe('withSentry', () => {
           'http.response.status_code': 200,
           'http.request.body.size': 10,
           'http.request.header.content-length': ['10'],
+          'http.response.header.content-type': ['text/plain;charset=UTF-8'],
         },
         op: 'http.server',
         origin: 'auto.http.cloudflare',
@@ -1297,13 +1298,16 @@ describe('flushAndDispose', () => {
       },
     );
 
-    test('tears down at handler return when TransformStream ignores the transformer', async () => {
-      // workerd without `transformstream_enable_standard_constructor` returns an identity stream.
+    test('tears down at handler return when the ReadableStream constructor is not available', async () => {
+      const response = new Response('<div>shell</div>', {
+        headers: { 'content-type': 'text/x-component;charset=utf-8' },
+      });
+      // workerd before the 2022-11-30 compatibility date, without `streams_enable_constructors`.
       vi.stubGlobal(
-        'TransformStream',
-        class extends TransformStream {
+        'ReadableStream',
+        class {
           constructor() {
-            super();
+            throw new TypeError('To use the new ReadableStream() constructor, enable streams_enable_constructors.');
           }
         },
       );
@@ -1316,16 +1320,14 @@ describe('flushAndDispose', () => {
 
       const flushSpy = vi.spyOn(SentryCore.Client.prototype, 'flush').mockResolvedValue(true);
 
-      const response = new Response('<div>shell</div>', {
-        headers: { 'content-type': 'text/x-component;charset=utf-8' },
-      });
-
       const result = await wrapRequestHandler(
         { options, request: new Request('https://example.com'), context },
         () => response,
       );
 
       expect(result).toBe(response);
+      expect(result.bodyUsed).toBe(false);
+      expect(result.body?.locked).toBe(false);
       expect(waitUntil).toHaveBeenCalledTimes(1);
 
       flushSpy.mockRestore();
diff --git a/packages/cloudflare/test/requestModuleGraph.test.ts b/packages/cloudflare/test/requestModuleGraph.test.ts
index 64827ebc8b5c..8b021862a819 100644
--- a/packages/cloudflare/test/requestModuleGraph.test.ts
+++ b/packages/cloudflare/test/requestModuleGraph.test.ts
@@ -69,7 +69,12 @@ describe('module graph of `wrapRequestHandler`', () => {
   it('contains no package that depends on Node.js APIs', () => {
     // `@sentry/server-utils` subscribes to `node:diagnostics_channel` and `@sentry/node` needs Node.js
     // throughout. Both are only allowed in `sdk.ts`, `index.ts` and `vite/` (see `.oxlintrc.json`).
-    expect(externals.filter(specifier => /^@sentry\/(node|server-utils)(\/|$)/.test(specifier))).toEqual([]);
+    // The `request-handler` entry of `@sentry/server-utils` has no Node.js imports.
+    const nodePackages = externals.filter(
+      specifier =>
+        /^@sentry\/(node|server-utils)(\/|$)/.test(specifier) && specifier !== '@sentry/server-utils/request-handler',
+    );
+    expect(nodePackages).toEqual([]);
   });
 
   it('does not reach `async.ts`, the only shipped module importing `node:async_hooks`', () => {
diff --git a/packages/deno/src/wrap-deno-request-handler.ts b/packages/deno/src/wrap-deno-request-handler.ts
index 4d24405d58e4..e050c5523a2d 100644
--- a/packages/deno/src/wrap-deno-request-handler.ts
+++ b/packages/deno/src/wrap-deno-request-handler.ts
@@ -1,7 +1,7 @@
 import type { Client } from '@sentry/core';
 import { debug, getClient, withIsolationScope } from '@sentry/core';
 import type { ServerRequestOptions } from '@sentry/core/server';
-import { wrapServerRequestHandler } from '@sentry/server-utils';
+import { wrapServerRequestHandler } from '@sentry/server-utils/request-handler';
 
 export type RequestHandlerWrapperOptions<Addr extends Deno.Addr> = {
   request: Request;
diff --git a/packages/server-utils/package.json b/packages/server-utils/package.json
index 0b0307509a36..8a19ea2e4746 100644
--- a/packages/server-utils/package.json
+++ b/packages/server-utils/package.json
@@ -27,6 +27,11 @@
       "import": "./build/esm/index.no-diagnostic-channels.js",
       "require": "./build/cjs/index.no-diagnostic-channels.js"
     },
+    "./request-handler": {
+      "types": "./build/types/index.request-handler.d.ts",
+      "import": "./build/esm/index.request-handler.js",
+      "require": "./build/cjs/index.request-handler.js"
+    },
     "./orchestrion/config": {
       "types": "./build/types/orchestrion/config/index.d.ts",
       "import": "./build/esm/orchestrion/config/index.js",
diff --git a/packages/server-utils/rollup.npm.config.mjs b/packages/server-utils/rollup.npm.config.mjs
index ab0a51d3ef21..74f172ec5215 100644
--- a/packages/server-utils/rollup.npm.config.mjs
+++ b/packages/server-utils/rollup.npm.config.mjs
@@ -100,6 +100,7 @@ export default [
       entrypoints: [
         'src/index.ts',
         'src/index.no-diagnostic-channels.ts',
+        'src/index.request-handler.ts',
         'src/orchestrion/config/index.ts',
         'src/orchestrion/bundler/vite.ts',
         'src/orchestrion/bundler/rollup.ts',
diff --git a/packages/server-utils/src/exports.ts b/packages/server-utils/src/exports.ts
index c22a5f605d68..8cd8bf657c95 100644
--- a/packages/server-utils/src/exports.ts
+++ b/packages/server-utils/src/exports.ts
@@ -1,7 +1,5 @@
 // Shared exports not using diagnostics channels
 export { setHttpServerSpanRouteAttribute } from './utils/setHttpServerSpanRouteAttribute';
-export { wrapServerRequestHandler } from './utils/wrapServerRequestHandler';
-export type { ServerRequestHandlerConfig } from './utils/wrapServerRequestHandler';
 export { setAsyncLocalStorageAsyncContextStrategy } from './async-context';
 export { openTelemetryIntegration, getOtlpTracesEndpoint } from './opentelemetry';
 export * from './ai';
@@ -13,7 +11,7 @@ export type { PostgresConnectionContext } from './integrations/postgresjs';
 // Shared, runtime-agnostic Hono instrumentation re-used by the `@sentry/hono` SDK across all runtimes.
 // Sourced directly from their modules (not the `./integrations/hono` barrel, which also exports the
 // diagnostics-channel-based `honoIntegration`) so the non-Node adapters can import them from the
-// Node-free `@sentry/server-utils/no-diagnostic-channels` entry.
+// diagnostics_channel-free `@sentry/server-utils/no-diagnostic-channels` entry.
 export { applyHonoPatches, earlyPatchHono } from './integrations/hono/applyPatches';
 export { createHonoRequestMiddleware } from './integrations/hono/createHonoMiddleware';
 export type { CreateHonoRequestMiddlewareOptions } from './integrations/hono/createHonoMiddleware';
diff --git a/packages/server-utils/src/index.request-handler.ts b/packages/server-utils/src/index.request-handler.ts
new file mode 100644
index 000000000000..73e0902cc088
--- /dev/null
+++ b/packages/server-utils/src/index.request-handler.ts
@@ -0,0 +1,4 @@
+// The web `Request` handler wrapper, on its own entry with no Node.js imports, so Cloudflare can use
+// it on workers without the `nodejs_compat` compatibility flag.
+export { wrapServerRequestHandler } from './utils/wrapServerRequestHandler';
+export type { ServerRequestHandlerConfig } from './utils/wrapServerRequestHandler';
diff --git a/packages/server-utils/src/utils/monitorStream.ts b/packages/server-utils/src/utils/monitorStream.ts
index 6b4651f990d1..20a69a15e79a 100644
--- a/packages/server-utils/src/utils/monitorStream.ts
+++ b/packages/server-utils/src/utils/monitorStream.ts
@@ -1,39 +1,68 @@
-import { isError } from '@sentry/core';
+import { debug, isError } from '@sentry/core';
+import { DEBUG_BUILD } from '../debug-build';
 
-/** Monitor the source without reading ahead or treating cancellation as a source failure. */
+/**
+ * Monitor the source without reading ahead or treating cancellation as a source failure.
+ *
+ * `onDone` runs once, while the returned stream is still open: before it closes, before it errors,
+ * or when the consumer cancels it. A runtime can end the request when the response body closes
+ * (Cloudflare Workers then reject `waitUntil`), so work that `onDone` starts must begin first.
+ */
 export function monitorStream(
   stream: ReadableStream<Uint8Array>,
   onDone: () => void,
   onError: (error: unknown) => void,
 ): ReadableStream<Uint8Array> {
-  const reader = stream.getReader();
-  // A cancelled reader closes normally; only a source failure should be captured as an error.
-  // A source that stops on `request.signal` errors with an `AbortError` when the client
-  // disconnects, which is a cancellation too.
-  void reader.closed.then(onDone, error => {
-    if (!(isError(error) && error.name === 'AbortError')) {
-      onError(error);
+  let reader: ReadableStreamDefaultReader<Uint8Array>;
+  let finished = false;
+  const finish = (error?: { error: unknown }): void => {
+    if (finished) {
+      return;
     }
-    onDone();
-  });
+    finished = true;
+    // A callback that throws must not fail the response body.
+    try {
+      // A source that stops on `request.signal` errors with an `AbortError` when the client
+      // disconnects, which is a cancellation too.
+      if (error && !(isError(error.error) && error.error.name === 'AbortError')) {
+        onError(error.error);
+      }
+      onDone();
+    } catch (e) {
+      DEBUG_BUILD && debug.error('Error when a monitored stream finished:', e);
+    }
+  };
 
   return new ReadableStream<Uint8Array>(
     {
+      // Locks the source only once the stream exists, so a constructor that throws leaves it usable.
+      start() {
+        reader = stream.getReader();
+        // A source can fail while no one reads from it. A cancelled reader closes normally; only a
+        // source failure should be captured as an error.
+        void reader.closed.then(
+          () => finish(),
+          error => finish({ error }),
+        );
+      },
       async pull(controller) {
         try {
           const { done, value } = await reader.read();
           if (done) {
+            finish();
             controller.close();
             reader.releaseLock();
           } else {
             controller.enqueue(value);
           }
         } catch (error) {
+          finish({ error });
           controller.error(error);
           reader.releaseLock();
         }
       },
       async cancel(reason) {
+        finish();
         try {
           await reader.cancel(reason);
         } finally {
diff --git a/packages/server-utils/src/utils/wrapServerRequestHandler.ts b/packages/server-utils/src/utils/wrapServerRequestHandler.ts
index 447764ddf5e5..e519141b0de4 100644
--- a/packages/server-utils/src/utils/wrapServerRequestHandler.ts
+++ b/packages/server-utils/src/utils/wrapServerRequestHandler.ts
@@ -8,11 +8,12 @@ import {
   USER_AGENT_ORIGINAL,
 } from '@sentry/conventions/attributes';
 import { HTTP_SERVER } from '@sentry/conventions/op';
-import type { Client, Mechanism, Scope, Span, SpanAttributes } from '@sentry/core';
+import type { Client, Mechanism, Scope, SpanAttributes } from '@sentry/core';
 import {
   captureBodyFromWinterCGRequest,
   captureException,
   continueTrace,
+  getCurrentScope,
   getHttpSpanDetailsFromUrlObject,
   hasSpansEnabled,
   hasSpanStreamingEnabled,
@@ -25,6 +26,8 @@ import {
   startSpanManual,
   winterCGHeadersToDict,
   winterCGRequestToRequestData,
+  withIsolationScope,
+  withScope,
 } from '@sentry/core';
 import type { ServerRequestOptions } from '@sentry/core/server';
 import {
@@ -45,14 +48,21 @@ export interface ServerRequestHandlerConfig {
   options: ServerRequestOptions<Request, Response> | undefined;
   /** Origin of the span, e.g. `auto.http.deno`. */
   origin: string;
-  /** Mechanism of errors that the handler or the response stream throws. */
-  mechanism: Mechanism;
+  /** Mechanism of errors that the handler or the response stream throws. Omit to not capture them. */
+  mechanism?: Mechanism;
   /** The address and port of the socket, if the runtime knows them. */
   getSocketAddress?: () => { address: string; port?: number } | undefined;
   /** The matched route of the server framework, e.g. `/users/:id`. Sets `http.route` and the span name. */
   routeName?: string;
   /** Span attributes that only the runtime knows, e.g. the route parameters. */
   attributes?: SpanAttributes;
+  /** Whether the response streams. Return `undefined` to use the default classification. */
+  isStreamingResponse?: (response: Response) => boolean | undefined;
+  /**
+   * Called once when the request is done: when the response is returned, when a streamed body
+   * finishes, or when the handler throws (then without a response).
+   */
+  onDone?: (response: Response | undefined) => void;
 }
 
 /**
@@ -74,6 +84,11 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
 ): Promise<R> {
   const { request, client, isolationScope, options, mechanism } = config;
   const method = request.method.toUpperCase();
+  const captureError = (error: unknown): void => {
+    if (mechanism) {
+      captureException(error, { mechanism });
+    }
+  };
 
   const endSession = options?.sessions
     ? startRequestSession(client, {
@@ -81,21 +96,34 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
         sessionFlushingDelayMS: options.sessionFlushingDelayMS,
       })
     : undefined;
+  const finish = (response: Response | undefined): void => {
+    endSession?.();
+    config.onDone?.(response);
+  };
+  const isStreamingResponse = (response: Response): boolean => {
+    const classification = config.isStreamingResponse?.(response);
+    return typeof classification === 'boolean' ? classification : classifyResponseStreaming(response).isStreaming;
+  };
 
   const socketAddress = config.getSocketAddress?.();
+  // Without `AsyncLocalStorage`, all requests share one isolation scope, so clear what an earlier
+  // request left on it: the merge keeps its body, and its response context would stay set.
   isolationScope.setSDKProcessingMetadata({
-    normalizedRequest: winterCGRequestToRequestData(request),
+    normalizedRequest: { ...winterCGRequestToRequestData(request), data: undefined },
     ipAddress: socketAddress?.address,
   });
+  isolationScope.setContext('response', null);
 
   if (method === 'OPTIONS' || method === 'HEAD') {
+    let response: R | undefined;
     try {
-      return await handler();
+      response = await handler();
+      return response;
     } catch (e) {
-      captureException(e, { mechanism });
+      captureError(e);
       throw e;
     } finally {
-      endSession?.();
+      finish(response);
     }
   }
 
@@ -134,14 +162,20 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
         try {
           response = await handler();
         } catch (e) {
-          captureException(e, { mechanism });
-          endSession?.();
+          captureError(e);
+          finish(undefined);
           throw e;
         }
         if (response) {
           isolationScope.setContext('response', { status_code: response.status });
         }
-        return onResponseDone(response, mechanism, () => endSession?.());
+        const inRequestScope = bindToRequestScope(isolationScope);
+        return onResponseDone(
+          response,
+          !!response && isStreamingResponse(response),
+          inRequestScope(() => finish(response)),
+          inRequestScope(captureError),
+        );
       }
 
       const [rawName, attributes] = getHttpSpanDetailsFromUrlObject(
@@ -206,8 +240,8 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
         } catch (e) {
           span.setStatus({ code: SPAN_STATUS_ERROR, message: 'internal_error' });
           span.end();
-          captureException(e, { mechanism });
-          endSession?.();
+          captureError(e);
+          finish(undefined);
           throw e;
         }
 
@@ -219,10 +253,11 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
           );
         }
 
+        const inRequestScope = bindToRequestScope(isolationScope);
         return onResponseDone(
           response,
-          mechanism,
-          () => {
+          !!response && isStreamingResponse(response),
+          inRequestScope(() => {
             if (onSpanEnd && response) {
               safeCallback(
                 DEBUG_BUILD ? 'Error in `onSpanEnd`:' : '',
@@ -231,15 +266,35 @@ export async function wrapServerRequestHandler<R extends Response | undefined =
               );
             }
             span.end();
-            endSession?.();
-          },
-          span,
+            finish(response);
+          }),
+          inRequestScope((error: unknown) => {
+            span.setStatus({ code: SPAN_STATUS_ERROR, message: 'internal_error' });
+            captureError(error);
+          }),
         );
       });
     },
   );
 }
 
+/**
+ * Returns a function that binds a callback to the request's isolation scope and the current scope.
+ *
+ * A streamed body finishes after the handler returns. Without `AsyncLocalStorage` (Cloudflare
+ * Workers without `nodejs_compat`), its callbacks then run outside the request's scopes, where
+ * `getClient()` finds no client: the segment span would be sent as a transaction, and a captured
+ * error would not update the request session.
+ */
+function bindToRequestScope(
+  isolationScope: Scope,
+): <A extends unknown[]>(fn: (...args: A) => void) => (...args: A) => void {
+  const scope = getCurrentScope();
+  return fn =>
+    (...args) =>
+      withIsolationScope(isolationScope, () => withScope(scope, () => fn(...args)));
+}
+
 function shouldCreateSpan(
   client: Client,
   options: ServerRequestOptions<Request, Response> | undefined,
@@ -269,17 +324,19 @@ function shouldCreateSpan(
  */
 function onResponseDone<R extends Response | undefined>(
   response: R,
-  mechanism: Mechanism,
+  isStreaming: boolean,
   onDone: () => void,
-  span?: Span,
+  onStreamError: (error: unknown) => void,
 ): R {
-  if (response?.body && !response.body.locked && classifyResponseStreaming(response).isStreaming) {
-    const body = monitorStream(response.body, onDone, error => {
-      span?.setStatus({ code: SPAN_STATUS_ERROR, message: 'internal_error' });
-      captureException(error, { mechanism });
-    });
-    // Passing the original response as the init keeps its status, status text and headers.
-    return new Response(body, response) as R;
+  if (isStreaming && response?.body && !response.body.locked) {
+    try {
+      // Passing the original response as the init keeps its status, status text and headers, and
+      // on Cloudflare also `encodeBody: 'manual'`, so workerd does not compress a compressed body again.
+      return new Response(monitorStream(response.body, onDone, onStreamError), response) as R;
+    } catch {
+      // Workers with a compatibility date before 2022-11-30 and without the
+      // `streams_enable_constructors` flag cannot construct a `ReadableStream`, so end at once.
+    }
   }
   onDone();
   return response;
diff --git a/packages/server-utils/test/requestHandlerEntry.test.ts b/packages/server-utils/test/requestHandlerEntry.test.ts
new file mode 100644
index 000000000000..9df030fa3420
--- /dev/null
+++ b/packages/server-utils/test/requestHandlerEntry.test.ts
@@ -0,0 +1,53 @@
+import { builtinModules } from 'node:module';
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { describe, expect, it } from 'vitest';
+
+/**
+ * Cloudflare imports the `request-handler` entry on workers without the `nodejs_compat` compatibility
+ * flag, where any Node.js import fails at startup. Assert on the module graph itself rather than on
+ * any bundler's output.
+ */
+const ENTRY_POINT = resolve(__dirname, '../src/index.request-handler.ts');
+const IMPORT_SPECIFIER_REGEX = /\bfrom\s*['"]([^'"]+)['"]|\bimport\s*['"]([^'"]+)['"]/g;
+
+function collectExternals(entryPoint: string): string[] {
+  const modules = new Set<string>();
+  const externals = new Set<string>();
+  const queue = [entryPoint];
+
+  while (queue.length) {
+    const importer = queue.pop() as string;
+    if (modules.has(importer)) {
+      continue;
+    }
+    modules.add(importer);
+
+    for (const match of readFileSync(importer, 'utf8').matchAll(IMPORT_SPECIFIER_REGEX)) {
+      const specifier = match[1] ?? (match[2] as string);
+      if (specifier.startsWith('.')) {
+        const withoutExtension = join(dirname(importer), specifier);
+        const resolved = [`${withoutExtension}.ts`, join(withoutExtension, 'index.ts')].find(existsSync);
+        if (!resolved) {
+          throw new Error(`Could not resolve '${specifier}' imported from '${importer}'`);
+        }
+        queue.push(resolved);
+      } else {
+        externals.add(specifier);
+      }
+    }
+  }
+
+  return [...externals].sort();
+}
+
+describe('module graph of the `request-handler` entry', () => {
+  it('contains no Node.js built-in module and no package that needs Node.js', () => {
+    const externals = collectExternals(ENTRY_POINT);
+
+    expect(externals.filter(specifier => specifier.startsWith('node:') || builtinModules.includes(specifier))).toEqual(
+      [],
+    );
+    expect(externals.filter(specifier => /^@sentry\/(node|server-utils)(\/|$)/.test(specifier))).toEqual([]);
+  });
+});
diff --git a/packages/server-utils/test/utils/monitorStream.test.ts b/packages/server-utils/test/utils/monitorStream.test.ts
index fee33b3cec75..d0921d34833d 100644
--- a/packages/server-utils/test/utils/monitorStream.test.ts
+++ b/packages/server-utils/test/utils/monitorStream.test.ts
@@ -117,4 +117,62 @@ describe('monitorStream', () => {
     await vi.waitFor(() => expect(onDone).toHaveBeenCalledTimes(1));
     expect(onError).not.toHaveBeenCalled();
   });
+
+  it('calls onDone before the stream closes', async () => {
+    const calls: string[] = [];
+    const source = new ReadableStream<Uint8Array>({
+      start(controller) {
+        controller.enqueue(encode('a'));
+        controller.close();
+      },
+    });
+    const reader = monitorStream(
+      source,
+      () => calls.push('onDone'),
+      () => calls.push('onError'),
+    ).getReader();
+    void reader.closed.then(() => calls.push('closed'));
+
+    await reader.read();
+    await reader.read();
+    await new Promise(resolve => setTimeout(resolve, 0));
+
+    expect(calls).toEqual(['onDone', 'closed']);
+  });
+
+  it('calls onDone in the same task as the cancel', async () => {
+    const onDone = vi.fn();
+    const source = new ReadableStream<Uint8Array>({
+      start(controller) {
+        controller.enqueue(encode('a'));
+      },
+    });
+    const reader = monitorStream(source, onDone, vi.fn()).getReader();
+    await reader.read();
+
+    const cancelled = reader.cancel('client disconnected');
+    expect(onDone).toHaveBeenCalledTimes(1);
+
+    await cancelled;
+    await new Promise(resolve => setTimeout(resolve, 0));
+    expect(onDone).toHaveBeenCalledTimes(1);
+  });
+
+  it('still delivers the body when onDone throws', async () => {
+    const source = new ReadableStream<Uint8Array>({
+      start(controller) {
+        controller.enqueue(encode('ok'));
+        controller.close();
+      },
+    });
+    const body = monitorStream(
+      source,
+      () => {
+        throw new Error('waitUntil failed');
+      },
+      vi.fn(),
+    );
+
+    expect(await new Response(body).text()).toBe('ok');
+  });
 });
diff --git a/packages/server-utils/test/utils/wrapServerRequestHandler.test.ts b/packages/server-utils/test/utils/wrapServerRequestHandler.test.ts
index ff8cf8703fd1..e45e6163eddc 100644
--- a/packages/server-utils/test/utils/wrapServerRequestHandler.test.ts
+++ b/packages/server-utils/test/utils/wrapServerRequestHandler.test.ts
@@ -1,6 +1,6 @@
 import { HTTP_ROUTE, SENTRY_SEGMENT_NAME_SOURCE, URL_PATH_PARAMETER_KEY_BASE } from '@sentry/conventions/attributes';
 import type { Event } from '@sentry/core';
-import { getIsolationScope, setCurrentClient, withIsolationScope } from '@sentry/core';
+import { getIsolationScope, Scope, setCurrentClient, withIsolationScope } from '@sentry/core';
 import { beforeAll, describe, expect, it, vi } from 'vitest';
 import { setAsyncLocalStorageAsyncContextStrategy } from '../../src/async-context';
 import type { ServerRequestHandlerConfig } from '../../src/utils/wrapServerRequestHandler';
@@ -90,6 +90,30 @@ describe('wrapServerRequestHandler', () => {
     expect(data).toBeUndefined();
   });
 
+  it('clears the body and response of an earlier request from a shared isolation scope', async () => {
+    const isolationScope = new Scope();
+    const { serve } = setup({ maxRequestBodySize: 'medium' }, { isolationScope });
+
+    await serve(
+      new Request('https://example.com/login', { method: 'POST', body: '{"password":"hunter2"}' }),
+      () => new Response('no', { status: 418 }),
+    );
+    expect(isolationScope.getScopeData().sdkProcessingMetadata.normalizedRequest?.data).toBe('{"password":"hunter2"}');
+    expect(isolationScope.getScopeData().contexts.response).toEqual({ status_code: 418 });
+
+    let normalizedRequest: unknown;
+    let responseContext: unknown;
+    await serve(new Request('https://example.com/profile'), () => {
+      const { sdkProcessingMetadata, contexts } = isolationScope.getScopeData();
+      normalizedRequest = sdkProcessingMetadata.normalizedRequest;
+      responseContext = contexts.response;
+      return new Response('ok');
+    });
+
+    expect(normalizedRequest).toMatchObject({ method: 'GET', data: undefined });
+    expect(responseContext).toBeUndefined();
+  });
+
   it('calls onSpanEnd and ends the span when a streamed response finishes', async () => {
     const calls: string[] = [];
     const { transactions, serve } = setup({
@@ -220,4 +244,48 @@ describe('wrapServerRequestHandler', () => {
     const setCookie = transactions[0]?.contexts?.trace?.data?.['http.response.header.set-cookie'] as string[];
     expect(setCookie.map(cookie => cookie.split('=')[0])).toEqual(['first', 'second']);
   });
+
+  it('calls onDone once with the response, or without one when the handler throws', async () => {
+    const done: (number | undefined)[] = [];
+    const { serve } = setup({}, { onDone: response => done.push(response?.status) });
+
+    const response = await serve(new Request('https://example.com/ok'), () => new Response('ok', { status: 201 }));
+    await response.text();
+    await expect(
+      serve(new Request('https://example.com/throws'), () => {
+        throw new Error('handler failed');
+      }),
+    ).rejects.toThrow('handler failed');
+    await serve(new Request('https://example.com/cors', { method: 'OPTIONS' }), () => new Response(null));
+
+    expect(done).toEqual([201, undefined, 200]);
+  });
+
+  it('does not capture errors without a mechanism', async () => {
+    const { events, serve } = setup({}, { mechanism: undefined });
+
+    await expect(
+      serve(new Request('https://example.com/throws'), () => {
+        throw new Error('handler failed');
+      }),
+    ).rejects.toThrow('handler failed');
+
+    expect(events).toHaveLength(0);
+  });
+
+  it('calls onDone at once when isStreamingResponse returns false', async () => {
+    const onDone = vi.fn();
+    const { serve } = setup({}, { onDone, isStreamingResponse: () => false });
+    const source = new ReadableStream<Uint8Array>({
+      start() {
+        // never closes
+      },
+    });
+    const original = new Response(source, { headers: { 'content-type': 'text/event-stream' } });
+
+    const response = await serve(new Request('https://example.com/events'), () => original);
+
+    expect(response).toBe(original);
+    expect(onDone).toHaveBeenCalledTimes(1);
+  });
 });

From ef23ed52bc2a1dcc9748ece6dbafa3f5caafe75a Mon Sep 17 00:00:00 2001
From: isaacs <i@izs.me>
Date: Fri, 30 Oct 2026 12:08:40 -0700
Subject: [PATCH 076/169] feat(server-utils): Record AI SDK v7 runtime and tool
 context on Vercel AI spans (#25774)

On `ai` 7 the `telemetry.metadata` option is gone. Per-call metadata
goes in `runtimeContext`, and the app opts keys into telemetry with
`telemetry.includeRuntimeContext` (and `includeToolsContext` for tool
context). The channel subscriber did not read either field, so there was
no way to put request-level data on gen_ai spans.

The subscriber now records each included `runtimeContext` key as
`vercel.ai.settings.context.<key>` on the operation span and on its
`generate_content` and `execute_tool` child spans. It records each
included `toolContext` key as `vercel.ai.toolCall.context.<key>` on the
`execute_tool` span. The `runtimeContext` names match `@ai-sdk/otel`
(`ai.settings.context.*`) under the usual `ai.*` to `vercel.ai.*`
renaming.

`ai` before 7.0.114 published the full context to the channel and
ignored the include lists. A filtered context looks the same as an
unfiltered one, so the subscriber only reads context from events that
carry `aiVersion`, which `ai` added in 7.0.154. Older 7.x versions
record no context, so keys the app did not opt in never leave it.

Fixes #24706
Fixes JS-3788
Refs getsentry/sentry-conventions#756

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .../v6_v7/scenario-runtime-context.mjs        |  91 ++++++++++
 .../suites/tracing/vercelai/v6_v7/test.ts     |  66 ++++++-
 .../vercel-ai/vercel-ai-dc-subscriber.ts      |  40 +++-
 .../vercel-ai/runtime-context.test.ts         | 171 ++++++++++++++++++
 4 files changed, 366 insertions(+), 2 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/scenario-runtime-context.mjs
 create mode 100644 packages/server-utils/test/integrations/vercel-ai/runtime-context.test.ts

diff --git a/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/scenario-runtime-context.mjs b/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/scenario-runtime-context.mjs
new file mode 100644
index 000000000000..5cfef0834a8e
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/scenario-runtime-context.mjs
@@ -0,0 +1,91 @@
+import * as Sentry from '@sentry/node';
+import { generateText, stepCountIs, streamText, tool } from 'ai';
+import { MockLanguageModelV3, simulateReadableStream } from 'ai/test';
+import { z } from 'zod';
+
+const usage = {
+  inputTokens: { total: 10, noCache: 10, cached: 0 },
+  outputTokens: { total: 20, noCache: 20, cached: 0 },
+  totalTokens: { total: 30, noCache: 30, cached: 0 },
+};
+
+const tools = {
+  getWeather: tool({
+    description: 'Get the current weather for a location',
+    inputSchema: z.object({ location: z.string() }),
+    contextSchema: z.object({ units: z.string(), apiKey: z.string() }),
+    execute: async ({ location }) => `Weather in ${location}: Sunny`,
+  }),
+};
+
+async function run() {
+  await Sentry.startSpan({ op: 'function', name: 'main' }, async () => {
+    let callCount = 0;
+    await generateText({
+      model: new MockLanguageModelV3({
+        doGenerate: async () =>
+          callCount++ === 0
+            ? {
+                finishReason: { unified: 'tool-calls', raw: 'tool_calls' },
+                usage,
+                content: [
+                  {
+                    type: 'tool-call',
+                    toolCallId: 'call-1',
+                    toolName: 'getWeather',
+                    input: JSON.stringify({ location: 'Vienna' }),
+                  },
+                ],
+                warnings: [],
+              }
+            : {
+                finishReason: { unified: 'stop', raw: 'stop' },
+                usage,
+                content: [{ type: 'text', text: 'Sunny' }],
+                warnings: [],
+              },
+      }),
+      tools,
+      stopWhen: stepCountIs(3),
+      prompt: 'Weather in Vienna?',
+      runtimeContext: { requestId: 'req_generate', tenantId: 'acme', apiToken: 'secret-runtime' },
+      toolsContext: { getWeather: { units: 'metric', apiKey: 'secret-tool' } },
+      telemetry: {
+        isEnabled: true,
+        functionId: 'support-chat',
+        includeRuntimeContext: { requestId: true, tenantId: true },
+        includeToolsContext: { getWeather: { units: true } },
+      },
+    });
+
+    const result = streamText({
+      model: new MockLanguageModelV3({
+        doStream: async () => ({
+          stream: simulateReadableStream({
+            chunks: [
+              { type: 'stream-start', warnings: [] },
+              { type: 'text-start', id: '0' },
+              { type: 'text-delta', id: '0', delta: 'Hello!' },
+              { type: 'text-end', id: '0' },
+              { type: 'finish', finishReason: { unified: 'stop', raw: 'stop' }, usage },
+            ],
+          }),
+        }),
+      }),
+      prompt: 'Hi',
+      runtimeContext: { requestId: 'req_stream', apiToken: 'secret-runtime' },
+      telemetry: {
+        isEnabled: true,
+        functionId: 'support-stream',
+        includeRuntimeContext: { requestId: true },
+      },
+    });
+    for await (const _part of result.fullStream) {
+      void _part;
+    }
+  });
+
+  await Sentry.flush(2000);
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/test.ts b/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/test.ts
index ea89bf21ddaf..0ac372b9c59d 100644
--- a/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/vercelai/v6_v7/test.ts
@@ -26,7 +26,12 @@ import {
   SENTRY_OP,
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
-import { GEN_AI_DECIDE } from '@sentry/conventions/op';
+import {
+  GEN_AI_DECIDE,
+  GEN_AI_EXECUTE_TOOL,
+  GEN_AI_GENERATE_CONTENT,
+  GEN_AI_INVOKE_AGENT,
+} from '@sentry/conventions/op';
 import { GEN_AI_TOOL_CALL_ID_ATTRIBUTE } from '../../../../../../packages/server-utils/src/ai/core/gen-ai-attributes';
 import { cleanupChildProcesses, createEsmAndCjsTests, createEsmTests } from '../../../../utils/runner';
 
@@ -1429,3 +1434,62 @@ describe('Vercel AI telemetry metadata (v6)', () => {
     { additionalDependencies: { ai: '^6.0.0' } },
   );
 });
+
+describe('Vercel AI runtime and tool context (v7)', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmTests(
+    __dirname,
+    'scenario-runtime-context.mjs',
+    'instrument.mjs',
+    (createRunner, test) => {
+      test('records the context keys included in telemetry as span attributes', async () => {
+        await createRunner()
+          .expect({
+            span: container => {
+              const spans = container.items.filter(
+                span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.vercelai',
+              );
+              // Keys left out of `includeRuntimeContext`/`includeToolsContext` must not reach any span.
+              expect(JSON.stringify(spans)).not.toMatch(/secret-runtime|secret-tool|apiToken|apiKey/);
+
+              const generateSpans = spans.filter(
+                span => span.attributes['vercel.ai.settings.context.requestId']?.value === 'req_generate',
+              );
+              expect(generateSpans.map(span => span.attributes[SENTRY_OP]?.value).sort()).toEqual([
+                GEN_AI_EXECUTE_TOOL,
+                GEN_AI_GENERATE_CONTENT,
+                GEN_AI_GENERATE_CONTENT,
+                GEN_AI_INVOKE_AGENT,
+              ]);
+              for (const span of generateSpans) {
+                expect(span.attributes['vercel.ai.settings.context.tenantId']).toEqual({
+                  type: 'string',
+                  value: 'acme',
+                });
+              }
+
+              const toolSpan = generateSpans.find(span => span.attributes[SENTRY_OP]?.value === GEN_AI_EXECUTE_TOOL);
+              expect(toolSpan?.attributes['vercel.ai.tool_call.context.units']).toEqual({
+                type: 'string',
+                value: 'metric',
+              });
+
+              const streamSpans = spans.filter(
+                span => span.attributes['vercel.ai.settings.context.requestId']?.value === 'req_stream',
+              );
+              expect(streamSpans.map(span => span.attributes[SENTRY_OP]?.value).sort()).toEqual([
+                GEN_AI_GENERATE_CONTENT,
+                GEN_AI_INVOKE_AGENT,
+              ]);
+            },
+          })
+          .start()
+          .completed();
+      });
+    },
+    { additionalDependencies: { ai: '^7.0.154' } },
+  );
+});
diff --git a/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts b/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
index f7525a94e9dd..c1daaf73fc84 100644
--- a/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
+++ b/packages/server-utils/src/integrations/vercel-ai/vercel-ai-dc-subscriber.ts
@@ -86,6 +86,8 @@ const VERCEL_AI_OPERATION_ID_ATTRIBUTE = 'vercel.ai.operationId';
 const VERCEL_AI_MODEL_PROVIDER_ATTRIBUTE = 'vercel.ai.model.provider';
 const VERCEL_AI_SETTINGS_MAX_RETRIES_ATTRIBUTE = 'vercel.ai.settings.maxRetries';
 const VERCEL_AI_TELEMETRY_METADATA_ATTRIBUTE_PREFIX = 'vercel.ai.telemetry.metadata.';
+const VERCEL_AI_SETTINGS_CONTEXT_ATTRIBUTE_PREFIX = 'vercel.ai.settings.context.';
+const VERCEL_AI_TOOL_CALL_CONTEXT_ATTRIBUTE_PREFIX = 'vercel.ai.tool_call.context.';
 
 // Tracks the top-level operationId (and whether it streams) per `callId` so a model-call span can
 // name its `doGenerate`/`doStream` operation the same way the OTel integration does. `isStream` is
@@ -108,6 +110,10 @@ const toolDescriptionsByCallId = new Map<string, Map<string, string>>();
 // before the operation's own span ends. The running token sum lives on the span's own attributes.
 const invokeAgentSpanByCallId = new Map<string, Span>();
 
+// Only an operation's start event carries `runtimeContext`; its model-call and tool events copy the
+// resulting attributes from here. Cleared with the operation.
+const runtimeContextAttributesByCallId = new Map<string, SpanAttributes>();
+
 // Only top-level operations own the `callId` → operationId mapping; `step`/`languageModelCall`/
 // `executeTool` share the parent's `callId`, so they must not clear it.
 const ROOT_OPERATION_TYPES = new Set<ChannelEventType>([
@@ -140,6 +146,7 @@ export function clearOperationCallId(callId: string): void {
   operationIdByCallId.delete(callId);
   toolDescriptionsByCallId.delete(callId);
   invokeAgentSpanByCallId.delete(callId);
+  runtimeContextAttributesByCallId.delete(callId);
 }
 
 /**
@@ -450,9 +457,17 @@ export function createSpanFromMessage(
     getOpenAiConversationId(event.providerOptions) ??
     (ROOT_OPERATION_TYPES.has(type) ? undefined : getActiveSpanConversationId());
 
+  const runtimeContextAttributes =
+    (callId ? runtimeContextAttributesByCallId.get(callId) : undefined) ??
+    contextAttributes(event, event.runtimeContext, VERCEL_AI_SETTINGS_CONTEXT_ATTRIBUTE_PREFIX);
+  if (callId && ROOT_OPERATION_TYPES.has(type)) {
+    runtimeContextAttributesByCallId.set(callId, runtimeContextAttributes);
+  }
+
   const baseAttributes: SpanAttributes = {
     [SENTRY_ORIGIN]: ORIGIN,
     ...telemetryMetadataAttributes(event.telemetryMetadata),
+    ...runtimeContextAttributes,
     [GEN_AI_PROVIDER_NAME]: provider,
     [VERCEL_AI_MODEL_PROVIDER_ATTRIBUTE]: provider,
     [GEN_AI_REQUEST_MODEL]: modelId,
@@ -473,7 +488,7 @@ export function createSpanFromMessage(
 
       return buildModelCallSpan(event, baseAttributes, recordInputs, callId, modelId);
     case 'executeTool':
-      return buildToolSpan(event, recordInputs, conversationId);
+      return buildToolSpan(event, recordInputs, conversationId, runtimeContextAttributes);
     case 'embed':
     case 'embedMany': {
       // `embed` carries a single `value`; `embedMany` a `values` array — both map to the embeddings input.
@@ -520,6 +535,26 @@ function telemetryMetadataAttributes(metadata: unknown): Record<string, string>
   return attributes;
 }
 
+/**
+ * One string attribute per context key, as `<prefix><key>`. `ai` < 7.0.114 published the full context to the
+ * channel, ignoring `telemetry.includeRuntimeContext`/`includeToolsContext`, and a filtered context
+ * looks the same as an unfiltered one. `aiVersion` (added in 7.0.154) is the only reliable sign that
+ * the AI SDK filtered it, so without it we record nothing.
+ */
+function contextAttributes(event: Record<string, unknown>, context: unknown, prefix: string): SpanAttributes {
+  const attributes: SpanAttributes = {};
+  if (typeof event.aiVersion !== 'string' || !isObjectLike(context)) {
+    return attributes;
+  }
+  for (const [key, value] of Object.entries(context)) {
+    const attributeValue = stringify(value);
+    if (value !== null && attributeValue !== undefined) {
+      attributes[`${prefix}${key}`] = attributeValue;
+    }
+  }
+  return attributes;
+}
+
 /** Start a `gen_ai.<operation>` span named `<operation> <suffix>` (or just `<operation>` when no suffix). */
 function startGenAiSpan(operation: GenAiOperation, suffix: string | undefined, attributes: SpanAttributes): Span {
   return startInactiveSpan({
@@ -581,6 +616,7 @@ function buildToolSpan(
   event: Record<string, unknown>,
   recordInputs: boolean,
   conversationId: string | undefined,
+  runtimeContextAttributes: SpanAttributes,
 ): Span {
   const toolCall = isObjectLike(event.toolCall) ? event.toolCall : {};
   const toolName = asString(toolCall.toolName);
@@ -592,6 +628,8 @@ function buildToolSpan(
     recordInputs && toolName ? resolveToolDescription(asString(event.callId), toolName, event.tools) : undefined;
   return startGenAiSpan('execute_tool', toolName, {
     [SENTRY_ORIGIN]: ORIGIN,
+    ...runtimeContextAttributes,
+    ...contextAttributes(event, event.toolContext, VERCEL_AI_TOOL_CALL_CONTEXT_ATTRIBUTE_PREFIX),
     [GEN_AI_TOOL_NAME]: toolName,
     [GEN_AI_TOOL_CALL_ID_ATTRIBUTE]: toolCallId,
     [GEN_AI_TOOL_DESCRIPTION]: description,
diff --git a/packages/server-utils/test/integrations/vercel-ai/runtime-context.test.ts b/packages/server-utils/test/integrations/vercel-ai/runtime-context.test.ts
new file mode 100644
index 000000000000..e8cf74b37080
--- /dev/null
+++ b/packages/server-utils/test/integrations/vercel-ai/runtime-context.test.ts
@@ -0,0 +1,171 @@
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { getMainCarrier, setCurrentClient, spanToStaticSpanJSON } from '@sentry/core';
+import type { Span } from '@sentry/core';
+import {
+  clearOperationId,
+  createSpanFromMessage,
+  type VercelAiChannelMessage,
+} from '../../../src/integrations/vercel-ai/vercel-ai-dc-subscriber';
+import { getDefaultTestClientOptions, TestClient } from '../../mocks/client';
+
+describe('Vercel AI runtime and tool context', () => {
+  beforeEach(() => {
+    getMainCarrier().__SENTRY__ = undefined;
+  });
+
+  afterEach(() => {
+    getMainCarrier().__SENTRY__ = undefined;
+  });
+
+  function setupClient(): Span[] {
+    const client = new TestClient(
+      getDefaultTestClientOptions({
+        dsn: 'https://public@dsn.ingest.sentry.io/1337',
+        tracesSampleRate: 1,
+      }),
+    );
+    setCurrentClient(client);
+    client.init();
+
+    const endedSpans: Span[] = [];
+    client.on('spanEnd', span => endedSpans.push(span));
+    return endedSpans;
+  }
+
+  function spanData(message: VercelAiChannelMessage, endedSpans: Span[]): Record<string, unknown> {
+    createSpanFromMessage(message, {})?.end();
+    return spanToStaticSpanJSON(endedSpans.at(-1)!).data;
+  }
+
+  it('records runtimeContext keys as strings on the operation span', () => {
+    const endedSpans = setupClient();
+    const data = spanData(
+      {
+        type: 'generateText',
+        event: {
+          aiVersion: '7.0.154',
+          callId: 'call-1',
+          runtimeContext: {
+            requestId: 'req_1',
+            attempt: 2,
+            cached: false,
+            user: { id: 'u1' },
+            tags: ['a', 'b'],
+            empty: null,
+            missing: undefined,
+          },
+        },
+      },
+      endedSpans,
+    );
+
+    expect(data).toMatchObject({
+      'vercel.ai.settings.context.requestId': 'req_1',
+      'vercel.ai.settings.context.attempt': '2',
+      'vercel.ai.settings.context.cached': 'false',
+      'vercel.ai.settings.context.user': '{"id":"u1"}',
+      'vercel.ai.settings.context.tags': '["a","b"]',
+    });
+    expect(data).not.toHaveProperty('vercel.ai.settings.context.empty');
+    expect(data).not.toHaveProperty('vercel.ai.settings.context.missing');
+  });
+
+  it.each(['embed', 'embedMany', 'rerank', 'experimental_decide'] as const)(
+    'records runtimeContext on %s spans',
+    type => {
+      const endedSpans = setupClient();
+      const data = spanData(
+        { type, event: { aiVersion: '7.0.154', runtimeContext: { tenantId: 'acme' } } },
+        endedSpans,
+      );
+      expect(data['vercel.ai.settings.context.tenantId']).toBe('acme');
+    },
+  );
+
+  it('ignores runtimeContext from an ai version that does not report aiVersion', () => {
+    const endedSpans = setupClient();
+    const data = spanData(
+      {
+        type: 'generateText',
+        event: { callId: 'call-1', runtimeContext: { apiToken: 'secret' } },
+      },
+      endedSpans,
+    );
+
+    expect(JSON.stringify(data)).not.toContain('secret');
+  });
+
+  it('copies runtimeContext to model-call and tool spans of the same operation', () => {
+    const endedSpans = setupClient();
+    const root: VercelAiChannelMessage = {
+      type: 'generateText',
+      event: { aiVersion: '7.0.154', callId: 'call-copy', runtimeContext: { tenantId: 'acme' } },
+    };
+    const rootSpan = createSpanFromMessage(root, {});
+
+    const modelCallData = spanData(
+      { type: 'languageModelCall', event: { aiVersion: '7.0.154', callId: 'call-copy', modelId: 'm' } },
+      endedSpans,
+    );
+    const toolData = spanData(
+      {
+        type: 'executeTool',
+        event: {
+          aiVersion: '7.0.154',
+          callId: 'call-copy',
+          toolCall: { toolName: 'getWeather', toolCallId: 'tc-1' },
+        },
+      },
+      endedSpans,
+    );
+    expect(modelCallData['vercel.ai.settings.context.tenantId']).toBe('acme');
+    expect(toolData['vercel.ai.settings.context.tenantId']).toBe('acme');
+
+    clearOperationId(root);
+    rootSpan?.end();
+
+    const laterData = spanData(
+      { type: 'languageModelCall', event: { aiVersion: '7.0.154', callId: 'call-copy', modelId: 'm' } },
+      endedSpans,
+    );
+    expect(laterData).not.toHaveProperty('vercel.ai.settings.context.tenantId');
+  });
+
+  it('records toolContext keys on the tool span', () => {
+    const endedSpans = setupClient();
+    const data = spanData(
+      {
+        type: 'executeTool',
+        event: {
+          aiVersion: '7.0.154',
+          callId: 'call-1',
+          toolCall: { toolName: 'getWeather', toolCallId: 'tc-1' },
+          toolContext: { units: 'metric', region: { code: 'eu' } },
+        },
+      },
+      endedSpans,
+    );
+
+    expect(data).toMatchObject({
+      'vercel.ai.tool_call.context.units': 'metric',
+      'vercel.ai.tool_call.context.region': '{"code":"eu"}',
+    });
+  });
+
+  it('ignores toolContext from an ai version that does not report aiVersion', () => {
+    const endedSpans = setupClient();
+    const data = spanData(
+      {
+        type: 'executeTool',
+        event: {
+          callId: 'call-1',
+          toolCall: { toolName: 'getWeather', toolCallId: 'tc-1' },
+          toolContext: { apiKey: 'secret' },
+        },
+      },
+      endedSpans,
+    );
+
+    expect(JSON.stringify(data)).not.toContain('secret');
+  });
+});

From e201b4f92b7c930c5c2547328000d5e2e5c20762 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 20:17:36 +0100
Subject: [PATCH 077/169] feat(deps): Bump valibot from 1.4.2 to 1.5.0 (#25957)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [valibot](https://github.com/open-circle/valibot) from 1.4.2 to
1.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-circle/valibot/releases">valibot's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.0</h2>
<p>Many thanks to <a
href="https://github.com/tats-u"><code>@​tats-u</code></a>, <a
href="https://github.com/idleberg"><code>@​idleberg</code></a>, <a
href="https://github.com/yslpn"><code>@​yslpn</code></a>, <a
href="https://github.com/francisjohnjohnston-web"><code>@​francisjohnjohnston-web</code></a>,
<a
href="https://github.com/MaxFreedomPollard"><code>@​MaxFreedomPollard</code></a>,
<a href="https://github.com/mahirhir"><code>@​mahirhir</code></a>, <a
href="https://github.com/ItzXynx"><code>@​ItzXynx</code></a>, <a
href="https://github.com/LeSingh1"><code>@​LeSingh1</code></a>, <a
href="https://github.com/maxtaran2010"><code>@​maxtaran2010</code></a>,
<a href="https://github.com/ysknsid25"><code>@​ysknsid25</code></a>, <a
href="https://github.com/cyyynthia"><code>@​cyyynthia</code></a>, <a
href="https://github.com/spokodev"><code>@​spokodev</code></a> and <a
href="https://github.com/sanjibani"><code>@​sanjibani</code></a> for
contributing to this release.</p>
<ul>
<li>Add <code>codePoints</code>, <code>maxCodePoints</code>,
<code>minCodePoints</code> and <code>notCodePoints</code> validation
actions to validate the number of Unicode code points (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/888">#888</a>)</li>
<li>Add <code>ksuid</code> validation action to validate KSUIDs (pull
request <a
href="https://redirect.github.com/open-circle/valibot/issues/1370">#1370</a>)</li>
<li>Change Standard Schema properties to use eager initialization for
faster schema construction and replace internal
<code>_getStandardProps</code> utility with <code>_standardSchema</code>
(pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1534">#1534</a>)</li>
<li>Change <code>url</code> action to use <code>URL.canParse</code> when
available to avoid constructing URL objects (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1608">#1608</a>)</li>
<li>Fix <code>stringifyJson</code> action to preserve the dataset value
when <code>JSON.stringify</code> returns <code>undefined</code> (pull
request <a
href="https://redirect.github.com/open-circle/valibot/issues/1476">#1476</a>)</li>
<li>Fix <code>literal</code> schema and <code>value</code>,
<code>values</code>, <code>notValue</code> and <code>notValues</code>
actions to treat <code>NaN</code> as equal to itself (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1573">#1573</a>)</li>
<li>Fix <code>intersect</code> schema to merge matching <code>NaN</code>
values and invalid dates (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1573">#1573</a>)</li>
<li>Fix <code>cache</code> and <code>cacheAsync</code> methods to clone
the issues of a cached dataset, preventing parent schemas from adding
their path item to the same issue on every cache hit (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1620">#1620</a>)</li>
<li>Fix <code>strictObject</code>, <code>looseObject</code>,
<code>objectWithRest</code> and their async variants to correctly handle
unknown input keys that collide with <code>Object.prototype</code>
members (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1523">#1523</a>)</li>
<li>Fix <code>intersect</code> and <code>intersectAsync</code> schemas
to ignore inherited properties when merging objects and preserve own
properties without invoking inherited setters or changing the output
prototype (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1621">#1621</a>)</li>
<li>Fix <code>ulid</code> action to reject ULIDs that exceed the maximum
128-bit value (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1498">#1498</a>)</li>
<li>Fix <code>email</code> action to reject non-ASCII characters
accepted by Unicode case folding (pull request <a
href="https://redirect.github.com/open-circle/valibot/issues/1075">#1075</a>)</li>
</ul>
<h2>v1.5.0 (to-json-schema)</h2>
<ul>
<li>Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema
Object format</li>
<li>Add <code>propertyNames</code> support to record schemas for key
validation constraints</li>
<li>Add support for <code>toBigint</code>, <code>toBoolean</code>,
<code>toDate</code>, <code>toNumber</code> and <code>toString</code>
actions for <code>typeMode: 'input'</code></li>
<li>Add new <code>toStandardJsonSchema</code> function to convert
Valibot schemas to Standard JSON Schema format</li>
<li>Change return type from <code>JSONSchema7</code> to a custom
<code>JsonSchema</code> type</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-circle/valibot/commit/5016198907beb383f5a6d8bbcb4c7f1586d7c6a3"><code>5016198</code></a>
chore: prepare Valibot v1.5.0 release (<a
href="https://redirect.github.com/open-circle/valibot/issues/1627">#1627</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/1ffb03885b48074199fe24810288bb97effa5300"><code>1ffb038</code></a>
fix(intersect): skip inherited prototype props in _merge (<a
href="https://redirect.github.com/open-circle/valibot/issues/1621">#1621</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/1c4983f7f70f59a1095018296f9d6e4eb46b43e5"><code>1c4983f</code></a>
fix(ulid): restrict first character to 0-7 per ULID spec (<a
href="https://redirect.github.com/open-circle/valibot/issues/1498">#1498</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/5e449cdab745a6816c9e23931877cdaddcb1dfd6"><code>5e449cd</code></a>
perf(url): use URL.canParse for validation (<a
href="https://redirect.github.com/open-circle/valibot/issues/1608">#1608</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/4acda1b9979e80700c5a2c5f5bb6a34754d04f7a"><code>4acda1b</code></a>
Make sure that email validators don't match unintentional non-ASCII
local par...</li>
<li><a
href="https://github.com/open-circle/valibot/commit/95943abb417903dcc7c4bc42c2ef08263f8cf414"><code>95943ab</code></a>
fix: handle object keys that collide with Object.prototype in object
schemas ...</li>
<li><a
href="https://github.com/open-circle/valibot/commit/d65438c9054ed8f9b303d1f58166c85ca908a2ea"><code>d65438c</code></a>
fix(cache): clone cached issues to stop issue paths from accumulating
(<a
href="https://redirect.github.com/open-circle/valibot/issues/1620">#1620</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/3ed804a535329df1ca839ef94d34948d32fcf9a8"><code>3ed804a</code></a>
dependabot: bump the github-actions group across 1 directory with 2
updates (...</li>
<li><a
href="https://github.com/open-circle/valibot/commit/0681f437b4a6b64feeb646269c3d8e3363c28931"><code>0681f43</code></a>
fix: use SameValueZero equality for special numeric values (<a
href="https://redirect.github.com/open-circle/valibot/issues/1573">#1573</a>)</li>
<li><a
href="https://github.com/open-circle/valibot/commit/98ef8b4efc7858c210926c47cf515604b0c7a6f2"><code>98ef8b4</code></a>
Improve perf by changing ~standard implementation (<a
href="https://redirect.github.com/open-circle/valibot/issues/1534">#1534</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-circle/valibot/compare/v1.4.2...v1.5.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .../node-integration-tests/package.json       |  2 +-
 pnpm-lock.yaml                                | 22 +++++++++----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 39eb221ba423..e8bfe1572ff9 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -109,7 +109,7 @@
     "srvx": "^0.11.22",
     "tedious": "^19.2.1",
     "unstorage": "2.0.0-alpha.7",
-    "valibot": "1.4.2",
+    "valibot": "1.5.0",
     "winston": "^3.17.0",
     "ws": "^8.20.1",
     "yargs": "^16.2.0"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cb7ffdabb2c4..1adb0e8168ef 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -807,8 +807,8 @@ importers:
         specifier: 2.0.0-alpha.7
         version: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@3.7.4)(ofetch@1.5.1)
       valibot:
-        specifier: 1.4.2
-        version: 1.4.2(typescript@7.0.2)
+        specifier: 1.5.0
+        version: 1.5.0(typescript@7.0.2)
       winston:
         specifier: ^3.17.0
         version: 3.19.0
@@ -18988,8 +18988,8 @@ packages:
     deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
     hasBin: true
 
-  valibot@1.4.2:
-    resolution: {integrity: sha512-gjdCvJ6d3RyHAneqxMYMW9QMCwYMb3jpOO0IyHZV1bnRHFBHrX3VkIILt5XYR0WhwHiH7Mty8ovuPZ/O3gamrg==}
+  valibot@1.5.0:
+    resolution: {integrity: sha512-nil6AkP2TChWL43Z5uJ6GTxX01CUA+g8LWUM+N/rB9NBbkUMaUsi9PUNzlUPgoKASgmx9f7eGOYpJ04/fSa6FQ==}
     peerDependencies:
       typescript: '>=5'
     peerDependenciesMeta:
@@ -23953,11 +23953,11 @@ snapshots:
       '@earendil-works/pi-ai': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
       '@hono/node-server': 2.0.10(hono@4.13.11)
       '@modelcontextprotocol/client': 2.0.0
-      '@valibot/to-json-schema': 1.8.0(valibot@1.4.2(typescript@7.0.2))
+      '@valibot/to-json-schema': 1.8.0(valibot@1.5.0(typescript@7.0.2))
       hono: 4.13.11
       js-yaml: 5.5.0
       ulidx: 2.4.1
-      valibot: 1.4.2(typescript@7.0.2)
+      valibot: 1.5.0(typescript@7.0.2)
     transitivePeerDependencies:
       - '@modelcontextprotocol/sdk'
       - bufferutil
@@ -26425,7 +26425,7 @@ snapshots:
       react-router: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       semver: 7.8.5
       tinyglobby: 0.2.17
-      valibot: 1.4.2(typescript@6.0.3)
+      valibot: 1.5.0(typescript@6.0.3)
       vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
@@ -28261,9 +28261,9 @@ snapshots:
       unhead: 2.1.17
       vue: 3.5.44(typescript@7.0.2)
 
-  '@valibot/to-json-schema@1.8.0(valibot@1.4.2(typescript@7.0.2))':
+  '@valibot/to-json-schema@1.8.0(valibot@1.5.0(typescript@7.0.2))':
     dependencies:
-      valibot: 1.4.2(typescript@7.0.2)
+      valibot: 1.5.0(typescript@7.0.2)
 
   '@vercel/detect-agent@1.2.7': {}
 
@@ -40460,11 +40460,11 @@ snapshots:
 
   uuid@9.0.1: {}
 
-  valibot@1.4.2(typescript@6.0.3):
+  valibot@1.5.0(typescript@6.0.3):
     optionalDependencies:
       typescript: 6.0.3
 
-  valibot@1.4.2(typescript@7.0.2):
+  valibot@1.5.0(typescript@7.0.2):
     optionalDependencies:
       typescript: 7.0.2
 

From c9b4058f7ea9dc76a4e24bcfb524ec9f5ce0b24b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 20:18:22 +0100
Subject: [PATCH 078/169] chore(deps-dev): Bump the react-router group across 1
 directory with 3 updates (#25955)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the react-router group with 3 updates in the / directory:
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router),
[@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev)
and
[@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node).

Updates `react-router` from 7.18.5 to 7.18.4
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/react-router@7.18.4/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>v7.18.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>Correctly escape streamed RSC redirect locations in meta tag
attributes (<a
href="https://redirect.github.com/remix-run/react-router/pull/15492">#15492</a>)</li>
<li>Avoid unintended <code>document.startViewTransition</code> calls
during initial hydration and <code>router.revalidate()</code> calls (<a
href="https://redirect.github.com/remix-run/react-router/pull/15485">#15485</a>)</li>
</ul>
<h2>v7.18.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>Improve route matching performance for long paths (<a
href="https://redirect.github.com/remix-run/react-router/pull/15423">#15423</a>)</li>
<li>Improve validation of action request origins (<a
href="https://redirect.github.com/remix-run/react-router/pull/15420">#15420</a>)</li>
<li>Add additional URL validation on client side navigations/redirects
(<a
href="https://redirect.github.com/remix-run/react-router/pull/15446">#15446</a>)</li>
</ul>
<h2>v7.18.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Harden RSC CSRF codepaths. (<a
href="https://redirect.github.com/remix-run/react-router/pull/15353">#15353</a>)</li>
</ul>
<h2>v7.18.1</h2>
<h3>Patch Changes</h3>
<ul>
<li><em>No changes</em></li>
</ul>
<h2>v7.18.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Fix server handler prerender responses when using <code>ssr:
false</code> and <code>future.v8_trailingSlashAwareDataRequests:
true</code>. Avoids false positive &quot;SPA Mode&quot; detection when
serving prerendered paths (<a
href="https://redirect.github.com/remix-run/react-router/pull/15173">#15173</a>)</li>
<li>Use the <code>ServerRouter</code> nonce for nonce-aware SSR
components when they don't provide their own value so strict CSP pages
can load them. (<a
href="https://redirect.github.com/remix-run/react-router/pull/15170">#15170</a>)</li>
<li>Use <code>turbo-stream</code> to serialize and deserialize Framework
Mode hydration errors (<a
href="https://redirect.github.com/remix-run/react-router/pull/15175">#15175</a>)</li>
<li>Precompute route branch matchers to avoid recompiling route path
regexes during matching (<a
href="https://redirect.github.com/remix-run/react-router/pull/15186">#15186</a>)</li>
<li>Use the constructed request URL host when validating action request
origins. (<a
href="https://redirect.github.com/remix-run/react-router/pull/15185">#15185</a>)</li>
<li>Remove the un-documented custom error serialization logic from Data
Mode SSR built-in hydration flows (<a
href="https://redirect.github.com/remix-run/react-router/pull/15175">#15175</a>)</li>
<li>Validate protocols in RSC render redirects (<a
href="https://redirect.github.com/remix-run/react-router/pull/15177">#15177</a>)</li>
<li>Consolidate url normalization logic and better handle mixed slashes
(<a
href="https://redirect.github.com/remix-run/react-router/pull/15176">#15176</a>)</li>
</ul>
<h2>v7.17.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Ship a subset of the official documentation inside the
<code>react-router</code> package (<a
href="https://redirect.github.com/remix-run/react-router/pull/15121">#15121</a>)
<ul>
<li>Markdown docs are now available in
<code>node_modules/react-router/docs</code>, letting AI coding agents
and the React Router agent skills read official docs locally</li>
<li>Excludes auto-generated API docs (<code>api/</code>),
<code>community/</code> content, and tutorials
(<code>tutorials/</code>)</li>
</ul>
</li>
</ul>
<h2>v7.16.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/195a0d03c1417127ccee73853058c8521beb4fce"><code>195a0d0</code></a>
Release v7.17.0 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15145">#15145</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/963affeb924f2256bd20c0c5c87e4c4b4fcbd188"><code>963affe</code></a>
Merge branch 'main' into release</li>
<li><a
href="https://github.com/remix-run/react-router/commit/97ef91d6f97e883d2d830fd1aef35ed3ae55e3a1"><code>97ef91d</code></a>
chore: format</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/react-router@7.18.4/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />

Updates `@react-router/dev` from 7.17.0 to 7.18.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">@​react-router/dev's
releases</a>.</em></p>
<blockquote>
<h2>v7.18.4</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184</a></p>
<h2>v7.18.3</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183</a></p>
<h2>v7.18.2</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182</a></p>
<h2>v7.18.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181</a></p>
<h2>v7.18.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/@react-router/dev@7.18.4/packages/react-router-dev/CHANGELOG.md">@​react-router/dev's
changelog</a>.</em></p>
<blockquote>
<h2>v7.18.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.4"><code>react-router@7.18.4</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/node@7.18.4"><code>@react-router/node@7.18.4</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/serve@7.18.4"><code>@react-router/serve@7.18.4</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.3"><code>react-router@7.18.3</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/node@7.18.3"><code>@react-router/node@7.18.3</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/serve@7.18.3"><code>@react-router/serve@7.18.3</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.2"><code>react-router@7.18.2</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/node@7.18.2"><code>@react-router/node@7.18.2</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/serve@7.18.2"><code>@react-router/serve@7.18.2</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.1"><code>react-router@7.18.1</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/node@7.18.1"><code>@react-router/node@7.18.1</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@react-router/serve@7.18.1"><code>@react-router/serve@7.18.1</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Pass Vite <code>server.watch</code> config to child compiler in
development mode. (<a
href="https://redirect.github.com/remix-run/react-router/pull/15178">#15178</a>)</p>
</li>
<li>
<p>Ignore external Vite server environments in Framework Mode build
hooks (<a
href="https://redirect.github.com/remix-run/react-router/pull/14883">#14883</a>)</p>
<p>When <code>future.v8_viteEnvironmentApi</code> is enabled, React
Router previously treated any non-client Vite environment as its own
server build. This caused issues with integrations like Nitro, where
plugins can register additional environments.</p>
<p>Framework Mode build hooks now ignore external server environments
and only process the app's own server build.</p>
</li>
<li>
<p>Updated dependencies:</p>
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0"><code>react-router@7.18.0</code></a></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/1b1e0b0e79b21692ce907933475233babdd16e3e"><code>1b1e0b0</code></a>
Release v7.18.4 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15498">#15498</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/23166dfe7f61323f0d2775af67d2691f9ed0843d"><code>23166df</code></a>
Release v7.18.3 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15424">#15424</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/69a653ee6ab1ac95b13c917ec56c5f3dc17ca9c1"><code>69a653e</code></a>
Release v7.18.2 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15354">#15354</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/afdf85d3c15448a41017514caca2aca038d3e9ca"><code>afdf85d</code></a>
Release v7.18.1 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15253">#15253</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/24283e93971e3e4f9f909c0bae63583f173fcd52"><code>24283e9</code></a>
chore: format</li>
<li><a
href="https://github.com/remix-run/react-router/commit/6fb1e79f8304eddd8b78759edea83cb32389ebf5"><code>6fb1e79</code></a>
Release v7.18.0 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15187">#15187</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/18b5e998c9d35cb98798e81dec424902dabf8537"><code>18b5e99</code></a>
Migrate changeset for <code>server.watch</code> in child compiler (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/15178">#15178</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/f67ba21171680fe67440b254b022b879ecabaa7d"><code>f67ba21</code></a>
chore: format</li>
<li><a
href="https://github.com/remix-run/react-router/commit/8022829ceed91bd67ae4baf3e37380e96af501fa"><code>8022829</code></a>
Pass Vite <code>server.watch</code> config to child compiler in dev mode
(<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev/issues/14298">#14298</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/3927a948a6f0ad77358338eede8690ea91612715"><code>3927a94</code></a>
chore: format</li>
<li>Additional commits viewable in <a
href="https://github.com/remix-run/react-router/commits/@react-router/dev@7.18.4/packages/react-router-dev">compare
view</a></li>
</ul>
</details>
<br />

Updates `@react-router/node` from 7.18.1 to 7.18.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">@​react-router/node's
releases</a>.</em></p>
<blockquote>
<h2>v7.18.4</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184</a></p>
<h2>v7.18.3</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183</a></p>
<h2>v7.18.2</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/@react-router/node@7.18.4/packages/react-router-node/CHANGELOG.md">@​react-router/node's
changelog</a>.</em></p>
<blockquote>
<h2>v7.18.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.4"><code>react-router@7.18.4</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: Prevent client disconnects during streaming from crashing the
Node process (<a
href="https://redirect.github.com/remix-run/react-router/pull/15437">#15437</a>)</li>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.3"><code>react-router@7.18.3</code></a></li>
</ul>
</li>
</ul>
<h2>v7.18.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@7.18.2"><code>react-router@7.18.2</code></a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/1b1e0b0e79b21692ce907933475233babdd16e3e"><code>1b1e0b0</code></a>
Release v7.18.4 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node/issues/15498">#15498</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/23166dfe7f61323f0d2775af67d2691f9ed0843d"><code>23166df</code></a>
Release v7.18.3 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node/issues/15424">#15424</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/dd336cf6c1335259f950731dfee1268444f8563f"><code>dd336cf</code></a>
Prevent streaming disconnects from crashing Node (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node/issues/15437">#15437</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/69a653ee6ab1ac95b13c917ec56c5f3dc17ca9c1"><code>69a653e</code></a>
Release v7.18.2 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node/issues/15354">#15354</a>)</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/@react-router/node@7.18.4/packages/react-router-node">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 packages/react-router/package.json |  4 +-
 packages/react/package.json        |  2 +-
 pnpm-lock.yaml                     | 61 +++++++++++-------------------
 3 files changed, 25 insertions(+), 42 deletions(-)

diff --git a/packages/react-router/package.json b/packages/react-router/package.json
index ceb178065b5e..07d576d599b0 100644
--- a/packages/react-router/package.json
+++ b/packages/react-router/package.json
@@ -68,14 +68,14 @@
     "sentry": "^0.44.0"
   },
   "devDependencies": {
-    "@react-router/dev": "^7.17.0",
+    "@react-router/dev": "^7.18.4",
     "@react-router/node": "^7.15.0",
     "@sentry-internal/rollup-utils": "11.10.0",
     "@testing-library/react": "^15.0.5",
     "@types/node": "^20.19.0",
     "@types/react": "17.0.3",
     "react": "^18.3.1",
-    "react-router": "^7.18.0",
+    "react-router": "^7.18.4",
     "vite": "^8.3.1"
   },
   "peerDependencies": {
diff --git a/packages/react/package.json b/packages/react/package.json
index 9c25dd0d99a2..ad3180f80c6f 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -84,7 +84,7 @@
     "history-5": "npm:history@4.9.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "react-router": "^7.18.3",
+    "react-router": "^7.18.4",
     "react-router-3": "npm:react-router@3.2.0",
     "react-router-4": "npm:react-router@4.1.0",
     "react-router-5": "npm:react-router@5.3.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1adb0e8168ef..0af122f23499 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1887,8 +1887,8 @@ importers:
         specifier: ^18.3.1
         version: 18.3.1(react@18.3.1)
       react-router:
-        specifier: ^7.18.3
-        version: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+        specifier: ^7.18.4
+        version: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-router-3:
         specifier: npm:react-router@3.2.0
         version: react-router@3.2.0(react@18.3.1)
@@ -1942,11 +1942,11 @@ importers:
         version: 0.44.0
     devDependencies:
       '@react-router/dev':
-        specifier: ^7.17.0
-        version: 7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
+        specifier: ^7.18.4
+        version: 7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
       '@react-router/node':
         specifier: ^7.15.0
-        version: 7.18.1(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
+        version: 7.18.4(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
       '@sentry-internal/rollup-utils':
         specifier: 11.10.0
         version: link:../../dev-packages/rollup-utils
@@ -1963,8 +1963,8 @@ importers:
         specifier: ^18.3.1
         version: 18.3.1
       react-router:
-        specifier: ^7.18.0
-        version: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+        specifier: ^7.18.4
+        version: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       vite:
         specifier: ^8.3.1
         version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
@@ -7845,14 +7845,14 @@ packages:
   '@protobufjs/utf8@1.1.1':
     resolution: {integrity: sha512-oOAWABowe8EAbMyWKM0tYDKi8Yaox52D+HWZhAIJqQXbqe0xI/GV7FhLWqlEKreMkfDjshR5FKgi3mnle0h6Eg==}
 
-  '@react-router/dev@7.17.0':
-    resolution: {integrity: sha512-+ITMmv/1xUB+QF6ehCCOIVBNBDuKIEE+3JKCt+kTBvxDTk1s49qHbtCA4TzJYge41pNRGtFIiy5VAksLSVJheg==}
+  '@react-router/dev@7.18.4':
+    resolution: {integrity: sha512-4sxQa18Znjz1zw1MGK7f97zXjK4NVcNgESvWPPEYScRFAHJWq6Q3/oejDPfYjKWLygsX1yF9jboxbGLw+V9f+g==}
     engines: {node: '>=20.0.0'}
     hasBin: true
     peerDependencies:
-      '@react-router/serve': ^7.17.0
+      '@react-router/serve': ^7.18.4
       '@vitejs/plugin-rsc': ~0.5.21
-      react-router: ^7.17.0
+      react-router: ^7.18.4
       react-server-dom-webpack: ^19.2.3
       typescript: ^5.1.0 || ^6.0.0
       vite: ^5.1.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
@@ -7869,21 +7869,11 @@ packages:
       wrangler:
         optional: true
 
-  '@react-router/node@7.17.0':
-    resolution: {integrity: sha512-RYR47qM9gJ8zV8Ntial5Rkgcst2YnwWXt0Ai34FezzkDK6AILpxpVatEzFEhNRwbSh6JO6iweY7XhfM4/K5dBA==}
+  '@react-router/node@7.18.4':
+    resolution: {integrity: sha512-PXNpc4fi0xa5Vp+uaYDFbzIEr4ZmLgch/w25AvxGV2eW32BzDh/OLlpGG074M/FKKi2CzDMsTsU8D3cDH4jywg==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
-      react-router: 7.17.0
-      typescript: ^5.1.0 || ^6.0.0
-    peerDependenciesMeta:
-      typescript:
-        optional: true
-
-  '@react-router/node@7.18.1':
-    resolution: {integrity: sha512-2GhAwa90z/+GMFM8Q5HsgwzakYogbQcZpqpNonhN4YWDRjWkSz+t5jgwNAFvG8ENR8fKGEVEsOHIaNVDfW9Ouw==}
-    engines: {node: '>=20.0.0'}
-    peerDependencies:
-      react-router: 7.18.1
+      react-router: 7.18.4
       typescript: ^5.1.0 || ^6.0.0
     peerDependenciesMeta:
       typescript:
@@ -16828,8 +16818,8 @@ packages:
     peerDependencies:
       react: '>=16.8'
 
-  react-router@7.18.3:
-    resolution: {integrity: sha512-gyXgtdr5uACJ5b1Q4udzjVV+tb/rlHIMJKuJ0e89R4Kzgz47z/rgP0dIKxktqIEUhDHluGTPJJH/wRha7CyqsA==}
+  react-router@7.18.4:
+    resolution: {integrity: sha512-PUPQcMhMGRAslLcvtlPz/kmzBEWPhLdgLFrL7pLNepBL6dX0lWj4WD2cUYVgYCuT3jxvghYFg81cDTj44DhetQ==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       react: '>=18'
@@ -26396,7 +26386,7 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@react-router/dev@7.17.0(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
+  '@react-router/dev@7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/generator': 7.29.8
@@ -26405,7 +26395,7 @@ snapshots:
       '@babel/preset-typescript': 7.28.5(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
       '@babel/types': 7.29.8
-      '@react-router/node': 7.17.0(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
+      '@react-router/node': 7.18.4(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
       '@remix-run/node-fetch-server': 0.13.0
       arg: 5.0.2
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
@@ -26422,7 +26412,7 @@ snapshots:
       pkg-types: 2.3.1
       prettier: 3.9.10
       react-refresh: 0.14.2
-      react-router: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      react-router: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       semver: 7.8.5
       tinyglobby: 0.2.17
       valibot: 1.5.0(typescript@6.0.3)
@@ -26446,17 +26436,10 @@ snapshots:
       - tsx
       - yaml
 
-  '@react-router/node@7.17.0(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)':
-    dependencies:
-      '@mjackson/node-fetch-server': 0.2.0
-      react-router: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
-    optionalDependencies:
-      typescript: 6.0.3
-
-  '@react-router/node@7.18.1(react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)':
+  '@react-router/node@7.18.4(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)':
     dependencies:
       '@mjackson/node-fetch-server': 0.2.0
-      react-router: 7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      react-router: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
     optionalDependencies:
       typescript: 6.0.3
 
@@ -37946,7 +37929,7 @@ snapshots:
       '@remix-run/router': 1.23.3
       react: 18.3.1
 
-  react-router@7.18.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
+  react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
     dependencies:
       cookie: 1.1.1
       react: 18.3.1

From 73b7bb224ef6be750edf67516234545624647cd0 Mon Sep 17 00:00:00 2001
From: Lukas Stracke <lukas.stracke@sentry.io>
Date: Fri, 30 Oct 2026 22:07:30 +0100
Subject: [PATCH 079/169] chore(ci): Remove nightly sentry-lighthouse upload
 workflow (#25966)

As part of cleanup of an incident, we sunset sentry-lighthouse (at least
for the moment), hopefully to be replaced with Kiln in the long run.
Therefore stopping the upload of SDK builds to the now dead server.
---
 .github/workflows/lighthouse.yml              |  32 ----
 .../lighthouse-react/index.html               |  13 --
 .../lighthouse-react/package.json             |  37 -----
 .../lighthouse-react/pnpm-workspace.yaml      |   4 -
 .../lighthouse-react/public/logo.svg          |   6 -
 .../lighthouse-react/src/App.tsx              |  60 -------
 .../lighthouse-react/src/main.tsx             | 157 ------------------
 .../lighthouse-react/tsconfig.json            |  21 ---
 .../lighthouse-react/tsconfig.node.json       |  10 --
 .../lighthouse-react/vite.config.ts           |   6 -
 10 files changed, 346 deletions(-)
 delete mode 100644 .github/workflows/lighthouse.yml
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/index.html
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/package.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/pnpm-workspace.yaml
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/public/logo.svg
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/src/App.tsx
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/src/main.tsx
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.node.json
 delete mode 100644 dev-packages/e2e-tests/test-applications/lighthouse-react/vite.config.ts

diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml
deleted file mode 100644
index 1073b0c17b51..000000000000
--- a/.github/workflows/lighthouse.yml
+++ /dev/null
@@ -1,32 +0,0 @@
-name: 'Nightly: Lighthouse'
-
-# Nightly: builds the Lighthouse fixture app and uploads bundles to the
-# lighthouse.sentry.gg lab. Never blocks merges.
-
-on:
-  schedule:
-    - cron: '0 0 * * *'
-  workflow_dispatch:
-
-jobs:
-  build-and-upload:
-    name: Bundle and upload Lighthouse cells
-    runs-on: namespace-profile-sentry-javascript-large
-    timeout-minutes: 30
-    env:
-      LIGHTHOUSE_LAB_URL: ${{ secrets.LIGHTHOUSE_LAB_URL }}
-      LIGHTHOUSE_UPLOAD_TOKEN: ${{ secrets.LIGHTHOUSE_UPLOAD_TOKEN }}
-      VITE_E2E_TEST_DSN: 'https://username@domain/123'
-    steps:
-      - uses: actions/checkout@v7
-      - name: Install pnpm
-        uses: ./.github/actions/install-pnpm
-      - uses: actions/setup-node@v7
-        with:
-          node-version-file: 'package.json'
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run build:ci
-      - run: pnpm run build:tarball
-      - run: pnpm run test:prepare
-        working-directory: dev-packages/e2e-tests
-      - run: node scripts/lighthouse-bundle-and-upload.mjs
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/index.html b/dev-packages/e2e-tests/test-applications/lighthouse-react/index.html
deleted file mode 100644
index dbddfb003021..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/index.html
+++ /dev/null
@@ -1,13 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="/logo.svg" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Lighthouse Fixture</title>
-  </head>
-  <body>
-    <div id="root"></div>
-    <script type="module" src="/src/main.tsx"></script>
-  </body>
-</html>
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/package.json b/dev-packages/e2e-tests/test-applications/lighthouse-react/package.json
deleted file mode 100644
index b0a9d2858d57..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/package.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "name": "lighthouse-react-test-app",
-  "private": true,
-  "type": "module",
-  "sentryTest": {
-    "skip": true
-  },
-  "scripts": {
-    "build": "vite build",
-    "build:no-sentry": "vite build --mode no-sentry",
-    "build:init-only": "vite build --mode init-only",
-    "build:errors-only": "vite build --mode errors-only",
-    "build:minimal-integrations": "vite build --mode minimal-integrations",
-    "build:no-integrations": "vite build --mode no-integrations",
-    "build:no-browser-api-errors": "vite build --mode no-browser-api-errors",
-    "build:no-breadcrumbs": "vite build --mode no-breadcrumbs",
-    "build:no-browser-session": "vite build --mode no-browser-session",
-    "build:tracing": "vite build --mode tracing",
-    "build:tracing-lazy-import": "vite build --mode tracing-lazy-import",
-    "build:tracing-replay": "vite build --mode tracing-replay",
-    "preview": "vite preview",
-    "clean": "npx rimraf node_modules pnpm-lock.yaml dist",
-    "test:build": "pnpm install && pnpm build"
-  },
-  "dependencies": {
-    "@sentry/react": "file:../../packed/sentry-react-packed.tgz",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1"
-  },
-  "devDependencies": {
-    "@types/react": "^18.3.0",
-    "@types/react-dom": "^18.3.0",
-    "@vitejs/plugin-react-swc": "^3.7.0",
-    "typescript": "~5.4.0",
-    "vite": "^5.4.0"
-  }
-}
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/lighthouse-react/pnpm-workspace.yaml
deleted file mode 100644
index dafa2e7eca8c..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/pnpm-workspace.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-allowBuilds:
-  '@swc/core': true
-  esbuild: true
-minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/public/logo.svg b/dev-packages/e2e-tests/test-applications/lighthouse-react/public/logo.svg
deleted file mode 100644
index a1ee6ba8d243..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/public/logo.svg
+++ /dev/null
@@ -1,6 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 120" width="120" height="120">
-  <circle cx="60" cy="60" r="55" fill="#362d59" />
-  <circle cx="60" cy="60" r="35" fill="#6c5fc7" />
-  <circle cx="60" cy="60" r="15" fill="#ffffff" />
-  <path d="M60 5 L65 25 L60 20 L55 25 Z" fill="#e1567c" />
-</svg>
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/src/App.tsx b/dev-packages/e2e-tests/test-applications/lighthouse-react/src/App.tsx
deleted file mode 100644
index bf6e99e7419d..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/src/App.tsx
+++ /dev/null
@@ -1,60 +0,0 @@
-import { useEffect, useState } from 'react';
-
-const CARDS = [
-  { title: 'Performance', body: 'Measure and optimize your app render times and interaction latency.' },
-  { title: 'Accessibility', body: 'Ensure your interface is usable by everyone, including assistive technologies.' },
-  { title: 'Best Practices', body: 'Follow modern web development patterns for secure and maintainable code.' },
-  { title: 'SEO', body: 'Optimize discoverability with semantic markup and structured metadata.' },
-  { title: 'PWA', body: 'Add offline support and installability via service workers and manifests.' },
-  { title: 'Security', body: 'Protect users with CSP headers, HTTPS, and input validation.' },
-];
-
-export default function App() {
-  const [count, setCount] = useState(0);
-
-  useEffect(() => {
-    document.title = `Lighthouse Fixture (${count})`;
-  }, [count]);
-
-  return (
-    <main>
-      <header>
-        <nav>
-          <a href="/">Home</a>
-          <a href="/docs">Docs</a>
-          <a href="/about">About</a>
-        </nav>
-      </header>
-
-      <section className="hero">
-        <img src="/logo.svg" alt="Lighthouse logo" width={120} height={120} elementtiming="logo-svg" />
-        <h1>Lighthouse Fixture</h1>
-        <p>
-          This app exists to measure JavaScript bundle size and runtime cost across three Sentry instrumentation
-          configurations. Each build mode ships a different level of SDK integration.
-        </p>
-      </section>
-
-      <section className="cards">
-        {CARDS.map(card => (
-          <article key={card.title} className="card">
-            <h2>{card.title}</h2>
-            <p>{card.body}</p>
-          </article>
-        ))}
-      </section>
-
-      <form
-        onSubmit={e => {
-          e.preventDefault();
-          setCount(c => c + 1);
-        }}
-      >
-        <input type="text" name="name" placeholder="Name" aria-label="Name" />
-        <input type="email" name="email" placeholder="Email" aria-label="Email" />
-        <input type="text" name="message" placeholder="Message" aria-label="Message" />
-        <button type="submit">Submit ({count})</button>
-      </form>
-    </main>
-  );
-}
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/src/main.tsx b/dev-packages/e2e-tests/test-applications/lighthouse-react/src/main.tsx
deleted file mode 100644
index 352c53c7208b..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/src/main.tsx
+++ /dev/null
@@ -1,157 +0,0 @@
-import * as Sentry from '@sentry/react';
-import { createRoot } from 'react-dom/client';
-import App from './App';
-
-const sentryInitStart = performance.now();
-
-performance.measure('sentry-sdk-pre-init-duration', {
-  detail: { mode: import.meta.env.MODE ?? 'unknown_mode' },
-  start: 0,
-  end: sentryInitStart,
-});
-
-performance.mark('sentry-sdk-init-start', {
-  detail: { mode: import.meta.env.MODE ?? 'unknown_mode' },
-});
-
-if (import.meta.env.MODE === 'tracing-replay') {
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    integrations: [Sentry.browserTracingIntegration(), Sentry.replayIntegration()],
-    tracesSampleRate: 1.0,
-    replaysSessionSampleRate: 1.0,
-    replaysOnErrorSampleRate: 1.0,
-  });
-} else if (import.meta.env.MODE === 'tracing') {
-  // Tracing + errors, but no replay — isolates the replay integration's cost.
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    integrations: [Sentry.browserTracingIntegration()],
-    tracesSampleRate: 1.0,
-  });
-} else if (import.meta.env.MODE === 'tracing-lazy-import') {
-  // Tracing + errors, but browsertracing loaded lazily.
-  // (We don't recommend this setup anywhere and neither will it work well.
-  // this is purely for testing if it changes anything about overhead.)
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    tracesSampleRate: 1.0,
-  });
-
-  import('@sentry/react').then(lazySentry => {
-    Sentry.addIntegration(lazySentry.browserTracingIntegration());
-  });
-} else if (import.meta.env.MODE === 'errors-only') {
-  // Default integrations only — errors are always captured, no tracing or replay.
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-  });
-} else if (import.meta.env.MODE === 'minimal-integrations') {
-  // Minimal integratoins setup only (everything necessary to automatically get errors)
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    defaultIntegrations: false,
-    integrations: [
-      Sentry.globalHandlersIntegration(),
-      Sentry.linkedErrorsIntegration(),
-      Sentry.dedupeIntegration(),
-      // for good measure, let's include event filters since noise reduction is usually desired
-      // 99% of this integration's work is done in an event processor, so outside the hot path
-      Sentry.eventFiltersIntegration(),
-    ],
-  });
-} else if (import.meta.env.MODE === 'no-integrations') {
-  // DSN set but every integration disabled. Isolates the cost of the enabled
-  // client itself from the default instrumentation that wraps DOM/timer/network APIs.
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    defaultIntegrations: false,
-    integrations: [],
-  });
-} else if (import.meta.env.MODE === 'no-browser-api-errors') {
-  // Default integrations minus BrowserApiErrors, which wraps addEventListener/
-  // removeEventListener on ~32 prototypes plus setTimeout/setInterval/rAF/XHR.
-  // Isolates that global monkey-patching cost from the rest of the defaults.
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    integrations: defaultIntegrations =>
-      defaultIntegrations.filter(integration => integration.name !== 'BrowserApiErrors'),
-  });
-} else if (import.meta.env.MODE === 'no-breadcrumbs') {
-  // Default integrations minus Breadcrumbs, which adds a lot of monkey patching to
-  // DOM and Network APIs as well as event targets and listeners
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    integrations: defaultIntegrations => defaultIntegrations.filter(integration => integration.name !== 'Breadcrumbs'),
-  });
-} else if (import.meta.env.MODE === 'no-browser-session') {
-  // Default integrations minus Breadcrumbs, which adds a lot of monkey patching to
-  // DOM and Network APIs as well as event targets and listeners
-  Sentry.init({
-    dsn: import.meta.env.VITE_E2E_TEST_DSN as string | undefined,
-    release: 'lighthouse-fixture',
-    environment: 'qa',
-    integrations: defaultIntegrations =>
-      defaultIntegrations.filter(integration => integration.name !== 'BrowserSession'),
-  });
-} else if (import.meta.env.MODE === 'init-only') {
-  // enabled: false makes the SDK a guaranteed no-op (no transport allocation,
-  // no DSN warning). We're measuring pure SDK-loading + tree-shaking cost.
-  Sentry.init({ enabled: false });
-}
-
-performance.measure('sentry-sdk-init-duration', {
-  detail: { mode: import.meta.env.MODE ?? 'unknown_mode' },
-  start: sentryInitStart,
-  end: performance.now(),
-});
-performance.mark('sentry-sdk-init-end', {
-  detail: { mode: import.meta.env.MODE ?? 'unknown_mode' },
-});
-
-// 'no-sentry' mode: all branches above are statically dead, so Vite drops
-// the @sentry/react import entirely from the bundle.
-
-// Elements tagged with `elementtiming` (e.g. the hero logo) emit a
-// PerformanceElementTiming entry when painted. Re-emit each as a
-// performance.measure spanning time origin -> render so the element's render
-// duration lands on the same timeline as the SDK init marks.
-// `PerformanceElementTiming` isn't in this project's TS lib, so type it locally.
-type ElementTimingEntry = PerformanceEntry & {
-  identifier: string;
-  renderTime: number;
-  loadTime: number;
-};
-
-const elementTimingObserver = new PerformanceObserver(list => {
-  for (const entry of list.getEntries() as ElementTimingEntry[]) {
-    const renderEnd = entry.renderTime || entry.loadTime;
-
-    performance.measure(`element-timing-${entry.identifier}`, {
-      detail: { mode: import.meta.env.MODE ?? 'unknown_mode', identifier: entry.identifier },
-      start: 0,
-      end: renderEnd,
-    });
-  }
-});
-
-elementTimingObserver.observe({ type: 'element', buffered: true });
-
-const root = createRoot(document.getElementById('root')!);
-root.render(<App />);
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.json b/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.json
deleted file mode 100644
index 3934b8f6d676..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2020",
-    "useDefineForClassFields": true,
-    "lib": ["ES2020", "DOM", "DOM.Iterable"],
-    "module": "ESNext",
-    "skipLibCheck": true,
-    "moduleResolution": "bundler",
-    "allowImportingTsExtensions": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "noEmit": true,
-    "jsx": "react-jsx",
-    "strict": true,
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noFallthroughCasesInSwitch": true
-  },
-  "include": ["src"],
-  "references": [{ "path": "./tsconfig.node.json" }]
-}
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.node.json b/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.node.json
deleted file mode 100644
index 42872c59f5b0..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/tsconfig.node.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "compilerOptions": {
-    "composite": true,
-    "skipLibCheck": true,
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "allowSyntheticDefaultImports": true
-  },
-  "include": ["vite.config.ts"]
-}
diff --git a/dev-packages/e2e-tests/test-applications/lighthouse-react/vite.config.ts b/dev-packages/e2e-tests/test-applications/lighthouse-react/vite.config.ts
deleted file mode 100644
index 4f312acb1a84..000000000000
--- a/dev-packages/e2e-tests/test-applications/lighthouse-react/vite.config.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import { defineConfig } from 'vite';
-import react from '@vitejs/plugin-react-swc';
-
-export default defineConfig({
-  plugins: [react()],
-});

From d045e1c26d128f5b9f29e1f5d497bd0df12310eb Mon Sep 17 00:00:00 2001
From: isaacs <i@izs.me>
Date: Fri, 30 Oct 2026 14:08:01 -0700
Subject: [PATCH 080/169] test(bundler-tests): Guard server runtime entries
 against build-time tooling (#25724)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Build tooling keeps leaking into server runtime entries: bundler
plugins, orchestrion bundler transforms, Vite, Babel, WASM. Each time,
users find it in a different consumer, often in a production deploy
(#22794, #23034, #23243, #24775, #25470). Nothing stopped the same shape
from coming back.

The new test traces each server runtime entry with `@vercel/nft`, the
tracer behind Next standalone and the Vercel adapters. It resolves each
entry through a fixture, under the export conditions of each runtime, in
ESM and CJS. It fails if the trace reaches build-only code, and prints
the import chain to it.

The trace stops at the first build-time module and does not expand
globs. Without that, an entry that does reach build tooling walks all of
Vite and Babel, and globs the whole repo, which takes minutes instead of
seconds.

`@sentry/astro` and `@sentry/solidstart` are known violations: their
root entries also re-export the config-time `sentryAstro` and
`withSentry`, and must keep doing so until v12. The test fails if either
becomes clean, so the list cannot go stale.

Refs #25676

---

<sub>Stack created with <a
href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a
href="https://gh.io/stacks-feedback">Give Feedback 💬</a></sub>

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .cursor/BUGBOT.md                             |   1 +
 dev-packages/bundler-tests/package.json       |  16 +
 .../tests/runtime-entries.test.ts             | 278 ++++++++++++++++++
 pnpm-lock.yaml                                |  43 +++
 4 files changed, 338 insertions(+)
 create mode 100644 dev-packages/bundler-tests/tests/runtime-entries.test.ts

diff --git a/.cursor/BUGBOT.md b/.cursor/BUGBOT.md
index 7091a161f177..4a9d0bd65ef4 100644
--- a/.cursor/BUGBOT.md
+++ b/.cursor/BUGBOT.md
@@ -112,6 +112,7 @@ Keep reviews high-signal. Prefer actionable, high-confidence findings over specu
 - When any `setTimeout` or `setInterval` timers are started in a code path that can end up in server runtime packages (e.g. `@sentry/core` or `@sentry/node`), flag if neither `timeout.unref()` nor `safeUnref()` are called.
   Not unref'ing a timer can keep CLI-like applications or node scripts from exiting immediately, due to the process waiting on timers started by the SDK.
 - Flag Node-only imports (`fs`, `path`, `child_process`, `os`, `net`, `http`, `https`, `node:*`, etc.) in code paths that ship to non-Node runtimes (`@sentry/browser`, `@sentry/cloudflare`, `@sentry/deno`, `@sentry/bun`, or shared code in `@sentry/core` / `@sentry/browser-utils` reachable from those entry points). When the dependency is unavoidable, isolate it behind a runtime check, dynamic `import()`, or a Node-only entry point — never at the top level of a cross-runtime module.
+- Flag a new package, or a new `exports` entry in a `package.json` under `packages/`, that can load on a server runtime (Node, Bun, Deno, Cloudflare Workers, Vercel Edge) when its package has no entry in `CASES` or `BUILD_TIME_CASES` in `dev-packages/bundler-tests/tests/runtime-entries.test.ts`. That test checks that server runtime entries do not reach build-time tooling (bundler plugins, Vite, Babel, WASM). For packages it already covers, the test fails on its own when an export is not classified, so do not flag those. Recommend adding the package to `devDependencies` in `dev-packages/bundler-tests/package.json`, and each export to `CASES` (runtime), `BUILD_TIME_CASES` (build-time), or `CLIENT_ENTRIES` (browser). Do not flag browser-only packages.
 
 ## What NOT to Flag
 
diff --git a/dev-packages/bundler-tests/package.json b/dev-packages/bundler-tests/package.json
index 35d63991cbc8..200bc3ea9668 100644
--- a/dev-packages/bundler-tests/package.json
+++ b/dev-packages/bundler-tests/package.json
@@ -19,5 +19,21 @@
     "vitest": "^4.1.11",
     "webpack": "^5.112.2"
   },
+  "devDependencies": {
+    "@sentry/astro": "11.10.0",
+    "@sentry/bun": "11.10.0",
+    "@sentry/cloudflare": "11.10.0",
+    "@sentry/deno": "11.10.0",
+    "@sentry/nextjs": "11.10.0",
+    "@sentry/node": "11.10.0",
+    "@sentry/nuxt": "11.10.0",
+    "@sentry/react-router": "11.10.0",
+    "@sentry/remix": "11.10.0",
+    "@sentry/solidstart": "11.10.0",
+    "@sentry/sveltekit": "11.10.0",
+    "@sentry/tanstackstart-react": "11.10.0",
+    "@sentry/vercel-edge": "11.10.0",
+    "@vercel/nft": "^1.11.0"
+  },
   "type": "module"
 }
diff --git a/dev-packages/bundler-tests/tests/runtime-entries.test.ts b/dev-packages/bundler-tests/tests/runtime-entries.test.ts
new file mode 100644
index 000000000000..5b8d881d286d
--- /dev/null
+++ b/dev-packages/bundler-tests/tests/runtime-entries.test.ts
@@ -0,0 +1,278 @@
+import { describe, expect, test } from 'vitest';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+import { nodeFileTrace, resolve } from '@vercel/nft';
+
+/**
+ * Server runtime entries must not reach build-time tooling. When they do,
+ * the tooling ends up in server bundles and traced outputs (Next standalone,
+ * Nitro, workerd, ...), where it breaks in a different way for each
+ * consumer. `@vercel/nft` is the tracer that Next standalone and the Vercel
+ * adapters use, so it reports what those consumers would ship.
+ */
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ROOT_DIR = path.join(__dirname, '../../..');
+const FIXTURE_DIR = path.join(__dirname, '..', 'dist', 'runtime-entries');
+
+const BUILD_TIME_PATTERNS: RegExp[] = [
+  /(^|\/)packages\/bundler-plugins\//,
+  /(^|\/)node_modules\/@sentry\/bundler-plugins(\/|$)/,
+  /(^|\/)packages\/server-utils\/build\/[^/]+\/orchestrion\/bundler\//,
+  /(^|\/)node_modules\/(vite|webpack|rollup|esbuild|oxc-parser)\//,
+  /(^|\/)node_modules\/@(babel|rollup|oxc-parser)\//,
+  /\.wasm$/,
+];
+
+const KNOWN_VIOLATIONS = new Set([
+  // These root entries also re-export config-time code (`sentryAstro`,
+  // `withSentry`). They must keep it until v12 for backwards compatibility.
+  '@sentry/astro',
+  '@sentry/solidstart',
+  // Remix 3 has no bundler. Its asset server runs the orchestrion
+  // transform on browser modules at request time.
+  '@sentry/remix/v3',
+  '@sentry/remix/v3/node',
+]);
+
+type Format = 'esm' | 'cjs';
+
+interface Case {
+  specifier: string;
+  conditions: string[];
+  formats: Format[];
+}
+
+const NODE = ['node'];
+const WORKERD = ['workerd', 'worker'];
+const BOTH: Format[] = ['esm', 'cjs'];
+const ESM: Format[] = ['esm'];
+
+const CASES: Case[] = [
+  { specifier: '@sentry/node', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/node/import', conditions: NODE, formats: ESM },
+  { specifier: '@sentry/bun', conditions: ['bun', 'node'], formats: BOTH },
+  { specifier: '@sentry/deno', conditions: ['deno', 'node'], formats: ESM },
+  { specifier: '@sentry/vercel-edge', conditions: ['edge-light'], formats: BOTH },
+  { specifier: '@sentry/cloudflare', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/cloudflare', conditions: [...WORKERD, 'development'], formats: BOTH },
+  { specifier: '@sentry/cloudflare/request', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/cloudflare/orchestrion-diagnostics-channel', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/deno/import', conditions: ['deno', 'node'], formats: ESM },
+
+  { specifier: '@sentry/nextjs', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nextjs', conditions: ['edge-light'], formats: BOTH },
+  { specifier: '@sentry/nextjs', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/nextjs/cloudflare', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/nextjs/import', conditions: NODE, formats: ESM },
+  { specifier: '@sentry/nextjs/tunnel', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nextjs/tunnel', conditions: ['edge-light'], formats: BOTH },
+  { specifier: '@sentry/nextjs/async-storage-shim', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nextjs/orchestrion-runtime/index', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nextjs/orchestrion-runtime/register', conditions: NODE, formats: BOTH },
+
+  { specifier: '@sentry/nuxt', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nuxt/module/plugins', conditions: NODE, formats: ESM },
+
+  { specifier: '@sentry/sveltekit', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/sveltekit', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/sveltekit', conditions: ['worker'], formats: BOTH },
+  { specifier: '@sentry/sveltekit/opentelemetry-api', conditions: NODE, formats: BOTH },
+
+  { specifier: '@sentry/astro', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/astro/middleware', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/astro/import', conditions: NODE, formats: ESM },
+
+  { specifier: '@sentry/react-router', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/react-router', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/react-router/cloudflare', conditions: WORKERD, formats: BOTH },
+
+  { specifier: '@sentry/remix', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/remix', conditions: ['worker'], formats: BOTH },
+  { specifier: '@sentry/remix/cloudflare', conditions: WORKERD, formats: BOTH },
+  { specifier: '@sentry/remix/import', conditions: NODE, formats: ESM },
+  { specifier: '@sentry/remix/v3', conditions: NODE, formats: ESM },
+  { specifier: '@sentry/remix/v3/node', conditions: NODE, formats: ESM },
+
+  { specifier: '@sentry/solidstart', conditions: NODE, formats: BOTH },
+
+  { specifier: '@sentry/tanstackstart-react', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/tanstackstart-react/import', conditions: NODE, formats: ESM },
+];
+
+/**
+ * Build-time entries must reach build-time tooling. If one does not, then
+ * `BUILD_TIME_PATTERNS` no longer matches the tooling that we use.
+ */
+const BUILD_TIME_CASES: Case[] = [
+  { specifier: '@sentry/node/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/node/rollup', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/node/webpack', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/node/esbuild', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/bun/plugin', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/cloudflare/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nextjs/config', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/nuxt/module', conditions: NODE, formats: ESM },
+  { specifier: '@sentry/sveltekit/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/react-router/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/remix/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/solidstart/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/tanstackstart-react/vite', conditions: NODE, formats: BOTH },
+];
+
+/** Browser entries of the packages above. This test does not check them. */
+const CLIENT_ENTRIES = new Set([
+  '@sentry/sveltekit/browser-tracing-variant',
+  '@sentry/remix/v3/client',
+  '@sentry/solidstart/solidrouter',
+]);
+
+function writeFixture(specifier: string, conditions: string[], format: Format): string {
+  fs.mkdirSync(FIXTURE_DIR, { recursive: true });
+  const name = `${specifier.replace(/[@/]/g, '_')}-${conditions.join('_')}.${format === 'esm' ? 'mjs' : 'cjs'}`;
+  const file = path.join(FIXTURE_DIR, name);
+  fs.writeFileSync(file, format === 'esm' ? `import '${specifier}';\n` : `require('${specifier}');\n`);
+  return file;
+}
+
+function isBuildTime(file: string): boolean {
+  return BUILD_TIME_PATTERNS.some(pattern => pattern.test(file));
+}
+
+type Reasons = Awaited<ReturnType<typeof nodeFileTrace>>['reasons'];
+
+// Most entries share `@sentry/node` and its dependencies, so sharing the
+// file and analysis cache saves most of the work.
+const traceCache = {};
+
+/** The shortest import chain from `entry` to `file`, both relative to `ROOT_DIR`. */
+function importChain(reasons: Reasons, entry: string, file: string): string[] {
+  const importedBy = new Map<string, string>([[file, file]]);
+  const queue = [file];
+  while (queue.length) {
+    const current = queue.shift() as string;
+    if (current === entry) {
+      const chain = [current];
+      for (let link = current; link !== file;) {
+        link = importedBy.get(link) as string;
+        chain.push(link);
+      }
+      return chain;
+    }
+    for (const parent of reasons.get(current)?.parents ?? []) {
+      if (!importedBy.has(parent)) {
+        importedBy.set(parent, current);
+        queue.push(parent);
+      }
+    }
+  }
+  return [file];
+}
+
+/**
+ * Each place where a runtime module imports a build-time module, as the
+ * import chain from the entry.
+ */
+async function findBuildTimeImports(fixture: string, conditions: string[]): Promise<string[]> {
+  const imports: [importer: string, file: string][] = [];
+
+  const { fileList, reasons } = await nodeFileTrace([fixture], {
+    base: ROOT_DIR,
+    conditions,
+    cache: traceCache,
+    // A dynamic `fs` path in config code makes nft glob the whole repo.
+    // That is slow and finds user files, not package code.
+    analysis: { emitGlobs: false },
+    // Stop at the first build-time module, instead of tracing all of Vite
+    // or Babel. `.wasm` files are assets, so they stay in the trace with
+    // their importer.
+    ignore: file => isBuildTime(file) && !file.endsWith('.wasm'),
+    async resolve(id, parent, job, cjsResolve) {
+      const resolved = await resolve(id, parent, job, cjsResolve);
+      for (const file of [resolved].flat()) {
+        if (isBuildTime(file)) {
+          imports.push([path.relative(ROOT_DIR, parent), path.relative(ROOT_DIR, file)]);
+        }
+      }
+      return resolved;
+    },
+  });
+
+  for (const file of fileList) {
+    if (file.endsWith('.wasm')) {
+      for (const parent of reasons.get(file)?.parents ?? []) {
+        imports.push([parent, file]);
+      }
+    }
+  }
+
+  const entry = path.relative(ROOT_DIR, fixture);
+  const violations = imports.map(([importer, file]) =>
+    importChain(reasons, entry, importer).concat(file).join('\n  -> '),
+  );
+  return [...new Set(violations)].sort();
+}
+
+describe('server runtime entries do not reach build-time tooling', () => {
+  for (const { specifier, conditions, formats } of CASES) {
+    for (const format of formats) {
+      const name = `${specifier} (${format}, conditions: ${conditions.join(', ')})`;
+
+      if (KNOWN_VIOLATIONS.has(specifier)) {
+        test(`${name} is a known violation`, async () => {
+          const violations = await findBuildTimeImports(writeFixture(specifier, conditions, format), conditions);
+          // Remove the entry from KNOWN_VIOLATIONS when this fails.
+          expect(violations).not.toEqual([]);
+        });
+      } else {
+        test(name, async () => {
+          const violations = await findBuildTimeImports(writeFixture(specifier, conditions, format), conditions);
+          expect(violations).toEqual([]);
+        });
+      }
+    }
+  }
+});
+
+describe('build-time entries reach build-time tooling', () => {
+  for (const { specifier, conditions, formats } of BUILD_TIME_CASES) {
+    for (const format of formats) {
+      test(`${specifier} (${format}, conditions: ${conditions.join(', ')})`, async () => {
+        const violations = await findBuildTimeImports(writeFixture(specifier, conditions, format), conditions);
+        expect(violations).not.toEqual([]);
+      });
+    }
+  }
+});
+
+test('every export of a tested package is classified', () => {
+  const classified = new Set([...CASES, ...BUILD_TIME_CASES].map(({ specifier }) => specifier));
+  for (const specifier of CLIENT_ENTRIES) {
+    classified.add(specifier);
+  }
+  const packages = new Set([...classified].map(specifier => specifier.split('/').slice(0, 2).join('/')));
+
+  const unclassified: string[] = [];
+  for (const pkg of packages) {
+    const manifest = path.join(ROOT_DIR, 'packages', pkg.replace('@sentry/', ''), 'package.json');
+    const { exports } = JSON.parse(fs.readFileSync(manifest, 'utf8')) as { exports: Record<string, unknown> };
+    for (const subpath of Object.keys(exports)) {
+      if (subpath === './package.json') {
+        continue;
+      }
+      const specifier = pkg + subpath.slice(1);
+      const [prefix, suffix] = specifier.split('*');
+      const found =
+        suffix === undefined
+          ? classified.has(specifier)
+          : [...classified].some(s => s.startsWith(prefix as string) && s.endsWith(suffix));
+      if (!found) {
+        unclassified.push(specifier);
+      }
+    }
+  }
+  // Add each one to CASES, BUILD_TIME_CASES, or CLIENT_ENTRIES.
+  expect(unclassified).toEqual([]);
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0af122f23499..462fb89b83ca 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -426,6 +426,49 @@ importers:
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
+    devDependencies:
+      '@sentry/astro':
+        specifier: 11.10.0
+        version: link:../../packages/astro
+      '@sentry/bun':
+        specifier: 11.10.0
+        version: link:../../packages/bun
+      '@sentry/cloudflare':
+        specifier: 11.10.0
+        version: link:../../packages/cloudflare
+      '@sentry/deno':
+        specifier: 11.10.0
+        version: link:../../packages/deno
+      '@sentry/nextjs':
+        specifier: 11.10.0
+        version: link:../../packages/nextjs
+      '@sentry/node':
+        specifier: 11.10.0
+        version: link:../../packages/node
+      '@sentry/nuxt':
+        specifier: 11.10.0
+        version: link:../../packages/nuxt
+      '@sentry/react-router':
+        specifier: 11.10.0
+        version: link:../../packages/react-router
+      '@sentry/remix':
+        specifier: 11.10.0
+        version: link:../../packages/remix
+      '@sentry/solidstart':
+        specifier: 11.10.0
+        version: link:../../packages/solidstart
+      '@sentry/sveltekit':
+        specifier: 11.10.0
+        version: link:../../packages/sveltekit
+      '@sentry/tanstackstart-react':
+        specifier: 11.10.0
+        version: link:../../packages/tanstackstart-react
+      '@sentry/vercel-edge':
+        specifier: 11.10.0
+        version: link:../../packages/vercel-edge
+      '@vercel/nft':
+        specifier: ^1.11.0
+        version: 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
 
   dev-packages/clear-cache-gh-action:
     dependencies:

From 3e24a705c0f8cdff3b0fde88cdcfb524f4ada555 Mon Sep 17 00:00:00 2001
From: isaacs <i@izs.me>
Date: Fri, 30 Oct 2026 14:08:02 -0700
Subject: [PATCH 081/169] feat(solidstart): Export `withSentry` from
 `@sentry/solidstart/vite` (#25725)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`withSentry` wraps the SolidStart config at build time. The root entry
re-exports it, so the server runtime entry reaches
`@sentry/bundler-plugins` and the orchestrion rollup transform. Any tool
that traces or bundles the server entry then pulls that tooling in.

`withSentry` now also comes from `@sentry/solidstart/vite`, next to the
Vite plugin. The root export stays, deprecated, until the next major
version, so existing `app.config.ts` files keep working. The E2E apps
use the new path.

Refs #25676

---

<sub>Stack created with <a
href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a
href="https://gh.io/stacks-feedback">Give Feedback 💬</a></sub>

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .../solidstart-dynamic-import/app.config.ts              | 2 +-
 .../test-applications/solidstart-spa/app.config.ts       | 2 +-
 .../test-applications/solidstart-static/app.config.ts    | 2 +-
 .../solidstart-top-level-import/app.config.ts            | 2 +-
 .../e2e-tests/test-applications/solidstart/app.config.ts | 2 +-
 packages/solidstart/src/index.server.ts                  | 9 ++++++++-
 packages/solidstart/src/index.types.ts                   | 8 +++++++-
 packages/solidstart/src/vite/index.ts                    | 1 +
 8 files changed, 21 insertions(+), 7 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/solidstart-dynamic-import/app.config.ts b/dev-packages/e2e-tests/test-applications/solidstart-dynamic-import/app.config.ts
index f41b1cb186ef..9835b34f5592 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-dynamic-import/app.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-dynamic-import/app.config.ts
@@ -1,4 +1,4 @@
-import { withSentry } from '@sentry/solidstart';
+import { withSentry } from '@sentry/solidstart/vite';
 import { defineConfig } from '@solidjs/start/config';
 
 export default defineConfig(
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-spa/app.config.ts b/dev-packages/e2e-tests/test-applications/solidstart-spa/app.config.ts
index 103ecb09a469..447d859e9d34 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-spa/app.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-spa/app.config.ts
@@ -1,4 +1,4 @@
-import { withSentry } from '@sentry/solidstart';
+import { withSentry } from '@sentry/solidstart/vite';
 import { defineConfig } from '@solidjs/start/config';
 
 export default defineConfig(
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-static/app.config.ts b/dev-packages/e2e-tests/test-applications/solidstart-static/app.config.ts
index 71061cf25d96..f3d634978c16 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-static/app.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-static/app.config.ts
@@ -1,4 +1,4 @@
-import { withSentry } from '@sentry/solidstart';
+import { withSentry } from '@sentry/solidstart/vite';
 import { defineConfig } from '@solidjs/start/config';
 
 export default defineConfig(
diff --git a/dev-packages/e2e-tests/test-applications/solidstart-top-level-import/app.config.ts b/dev-packages/e2e-tests/test-applications/solidstart-top-level-import/app.config.ts
index e4e73e9fc570..f8211b6f0b52 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart-top-level-import/app.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart-top-level-import/app.config.ts
@@ -1,4 +1,4 @@
-import { withSentry } from '@sentry/solidstart';
+import { withSentry } from '@sentry/solidstart/vite';
 import { defineConfig } from '@solidjs/start/config';
 
 export default defineConfig(
diff --git a/dev-packages/e2e-tests/test-applications/solidstart/app.config.ts b/dev-packages/e2e-tests/test-applications/solidstart/app.config.ts
index be3bce2116a7..fb663eb94953 100644
--- a/dev-packages/e2e-tests/test-applications/solidstart/app.config.ts
+++ b/dev-packages/e2e-tests/test-applications/solidstart/app.config.ts
@@ -1,4 +1,4 @@
-import { withSentry } from '@sentry/solidstart';
+import { withSentry } from '@sentry/solidstart/vite';
 import { defineConfig } from '@solidjs/start/config';
 
 export default defineConfig(
diff --git a/packages/solidstart/src/index.server.ts b/packages/solidstart/src/index.server.ts
index 82b6fe6cbff4..f0ef7dbb60d6 100644
--- a/packages/solidstart/src/index.server.ts
+++ b/packages/solidstart/src/index.server.ts
@@ -1,2 +1,9 @@
+import { withSentry as _withSentry } from './config';
+
 export * from './server';
-export * from './config';
+
+/**
+ * @deprecated Import `withSentry` from `@sentry/solidstart/vite` instead.
+ * This export will be removed in the next major version.
+ */
+export const withSentry = _withSentry;
diff --git a/packages/solidstart/src/index.types.ts b/packages/solidstart/src/index.types.ts
index 3ff25e7fa679..b7e71168b171 100644
--- a/packages/solidstart/src/index.types.ts
+++ b/packages/solidstart/src/index.types.ts
@@ -7,11 +7,17 @@
 // exports in this file - which we do below.
 import type { Client, Integration, Options, StackParser } from '@sentry/core';
 import type * as clientSdk from './client';
+import type * as configSdk from './config';
 import type * as serverSdk from './server';
 
 export * from './client';
 export * from './server';
-export * from './config';
+
+/**
+ * @deprecated Import `withSentry` from `@sentry/solidstart/vite` instead.
+ * This export will be removed in the next major version.
+ */
+export declare const withSentry: typeof configSdk.withSentry;
 
 /** Initializes Sentry Solid Start SDK */
 export declare function init(options: Options | clientSdk.BrowserOptions | serverSdk.NodeOptions): Client | undefined;
diff --git a/packages/solidstart/src/vite/index.ts b/packages/solidstart/src/vite/index.ts
index b23359c06ba5..2289ae888f98 100644
--- a/packages/solidstart/src/vite/index.ts
+++ b/packages/solidstart/src/vite/index.ts
@@ -1,2 +1,3 @@
 export { sentrySolidStart } from './sentrySolidStart';
 export type { SentrySolidStartOptions } from './sentrySolidStart';
+export { withSentry } from '../config/withSentry';

From f74a45dfa4eac8872de49b5b7f9d3b4fa0eb1036 Mon Sep 17 00:00:00 2001
From: isaacs <i@izs.me>
Date: Fri, 30 Oct 2026 14:08:02 -0700
Subject: [PATCH 082/169] feat(astro): Add `@sentry/astro/integration` entry
 for the Astro integration (#25726)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The root entry of `@sentry/astro` is both the server runtime SDK and,
through its default export, the Astro integration for `astro.config`.
The integration imports `@sentry/bundler-plugins/vite`, the orchestrion
Vite plugin, `fs` and `createRequire`, so the server runtime entry
reaches all of them. Any tool that traces or bundles the server entry
then pulls that tooling in.

The new `@sentry/astro/integration` entry exports the integration as its
default and as `sentryAstro`. The root default export stays, deprecated,
until the next major version, so existing `astro.config` files keep
working. The E2E apps use the new entry.

The new entry has a `node` condition that points at the ESM build, the
same as `./middleware`. The CJS build of `@sentry/astro` does not load
under the package's `"type": "module"`, and the existing entries avoid
it the same way.

Fixes #25676

---

<sub>Stack created with <a
href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a
href="https://gh.io/stacks-feedback">Give Feedback 💬</a></sub>

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 dev-packages/bundler-tests/tests/runtime-entries.test.ts | 1 +
 .../e2e-tests/test-applications/astro-4/astro.config.mjs | 2 +-
 .../astro-5-cf-workers/astro.config.mjs                  | 2 +-
 .../e2e-tests/test-applications/astro-5/astro.config.mjs | 2 +-
 .../astro-6-cf-workers/astro.config.mjs                  | 2 +-
 .../e2e-tests/test-applications/astro-6/astro.config.mjs | 2 +-
 .../astro-7-sourcemaps/astro.config.mjs                  | 2 +-
 .../test-applications/astro-7-static/astro.config.mjs    | 2 +-
 .../e2e-tests/test-applications/astro-7/astro.config.mjs | 2 +-
 packages/astro/package.json                              | 6 ++++++
 packages/astro/rollup.npm.config.mjs                     | 7 ++++++-
 packages/astro/src/index.integration.ts                  | 5 +++++
 packages/astro/src/index.server.ts                       | 9 ++++++++-
 packages/astro/src/index.types.ts                        | 1 +
 packages/astro/test/server/index.server.test.ts          | 5 +++--
 15 files changed, 38 insertions(+), 12 deletions(-)
 create mode 100644 packages/astro/src/index.integration.ts

diff --git a/dev-packages/bundler-tests/tests/runtime-entries.test.ts b/dev-packages/bundler-tests/tests/runtime-entries.test.ts
index 5b8d881d286d..156102cc6765 100644
--- a/dev-packages/bundler-tests/tests/runtime-entries.test.ts
+++ b/dev-packages/bundler-tests/tests/runtime-entries.test.ts
@@ -116,6 +116,7 @@ const BUILD_TIME_CASES: Case[] = [
   { specifier: '@sentry/nextjs/config', conditions: NODE, formats: BOTH },
   { specifier: '@sentry/nuxt/module', conditions: NODE, formats: ESM },
   { specifier: '@sentry/sveltekit/vite', conditions: NODE, formats: BOTH },
+  { specifier: '@sentry/astro/integration', conditions: NODE, formats: BOTH },
   { specifier: '@sentry/react-router/vite', conditions: NODE, formats: BOTH },
   { specifier: '@sentry/remix/vite', conditions: NODE, formats: BOTH },
   { specifier: '@sentry/solidstart/vite', conditions: NODE, formats: BOTH },
diff --git a/dev-packages/e2e-tests/test-applications/astro-4/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-4/astro.config.mjs
index 890d1f737e9a..d0848b0f6d00 100644
--- a/dev-packages/e2e-tests/test-applications/astro-4/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-4/astro.config.mjs
@@ -1,5 +1,5 @@
 import node from '@astrojs/node';
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 import { defineConfig } from 'astro/config';
 
 import spotlightjs from '@spotlightjs/astro';
diff --git a/dev-packages/e2e-tests/test-applications/astro-5-cf-workers/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-5-cf-workers/astro.config.mjs
index 0473ef424d83..a3687388202b 100644
--- a/dev-packages/e2e-tests/test-applications/astro-5-cf-workers/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-5-cf-workers/astro.config.mjs
@@ -1,5 +1,5 @@
 import cloudflare from '@astrojs/cloudflare';
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 
diff --git a/dev-packages/e2e-tests/test-applications/astro-5/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-5/astro.config.mjs
index 061db869d94b..54d1c2bbb8cd 100644
--- a/dev-packages/e2e-tests/test-applications/astro-5/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-5/astro.config.mjs
@@ -1,4 +1,4 @@
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 
diff --git a/dev-packages/e2e-tests/test-applications/astro-6-cf-workers/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-6-cf-workers/astro.config.mjs
index 4a09ea6bd88e..617cd784f967 100644
--- a/dev-packages/e2e-tests/test-applications/astro-6-cf-workers/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-6-cf-workers/astro.config.mjs
@@ -1,4 +1,4 @@
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 import cloudflare from '@astrojs/cloudflare';
diff --git a/dev-packages/e2e-tests/test-applications/astro-6/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-6/astro.config.mjs
index 061db869d94b..54d1c2bbb8cd 100644
--- a/dev-packages/e2e-tests/test-applications/astro-6/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-6/astro.config.mjs
@@ -1,4 +1,4 @@
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 
diff --git a/dev-packages/e2e-tests/test-applications/astro-7-sourcemaps/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-7-sourcemaps/astro.config.mjs
index 3b859eeb1c75..53887471a483 100644
--- a/dev-packages/e2e-tests/test-applications/astro-7-sourcemaps/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-7-sourcemaps/astro.config.mjs
@@ -1,5 +1,5 @@
 import node from '@astrojs/node';
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 import { defineConfig } from 'astro/config';
 import * as fs from 'node:fs';
 
diff --git a/dev-packages/e2e-tests/test-applications/astro-7-static/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-7-static/astro.config.mjs
index 061db869d94b..54d1c2bbb8cd 100644
--- a/dev-packages/e2e-tests/test-applications/astro-7-static/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-7-static/astro.config.mjs
@@ -1,4 +1,4 @@
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 
diff --git a/dev-packages/e2e-tests/test-applications/astro-7/astro.config.mjs b/dev-packages/e2e-tests/test-applications/astro-7/astro.config.mjs
index 49370ed1e18b..7392e48b5cb7 100644
--- a/dev-packages/e2e-tests/test-applications/astro-7/astro.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/astro-7/astro.config.mjs
@@ -1,4 +1,4 @@
-import sentry from '@sentry/astro';
+import sentry from '@sentry/astro/integration';
 // @ts-check
 import { defineConfig } from 'astro/config';
 
diff --git a/packages/astro/package.json b/packages/astro/package.json
index b505c7ab2b84..58459cd48530 100644
--- a/packages/astro/package.json
+++ b/packages/astro/package.json
@@ -32,6 +32,12 @@
       "import": "./build/esm/index.client.js",
       "require": "./build/cjs/index.server.js"
     },
+    "./integration": {
+      "types": "./build/types/index.integration.d.ts",
+      "node": "./build/esm/index.integration.js",
+      "import": "./build/esm/index.integration.js",
+      "require": "./build/cjs/index.integration.js"
+    },
     "./middleware": {
       "types": "./build/types/integration/middleware/index.d.ts",
       "node": "./build/esm/integration/middleware/index.js",
diff --git a/packages/astro/rollup.npm.config.mjs b/packages/astro/rollup.npm.config.mjs
index e4694afbff88..07a25d8690b1 100644
--- a/packages/astro/rollup.npm.config.mjs
+++ b/packages/astro/rollup.npm.config.mjs
@@ -2,7 +2,12 @@ import { makeBaseNPMConfig, makeNPMConfigVariants, makeOrchestrionLoader } from
 
 const variants = makeNPMConfigVariants(
   makeBaseNPMConfig({
-    entrypoints: ['src/index.server.ts', 'src/index.client.ts', 'src/integration/middleware/index.ts'],
+    entrypoints: [
+      'src/index.server.ts',
+      'src/index.client.ts',
+      'src/index.integration.ts',
+      'src/integration/middleware/index.ts',
+    ],
     packageSpecificConfig: {
       output: {
         dynamicImportInCjs: true,
diff --git a/packages/astro/src/index.integration.ts b/packages/astro/src/index.integration.ts
new file mode 100644
index 000000000000..64465a872d83
--- /dev/null
+++ b/packages/astro/src/index.integration.ts
@@ -0,0 +1,5 @@
+import { sentryAstro } from './integration';
+
+export { sentryAstro };
+
+export default sentryAstro;
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index 822464ade0e1..6837722ba5b6 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -3,7 +3,7 @@
 // Vite puts these exports into a `default` property (Sentry.default) rather than
 // on the top - level namespace.
 
-import { sentryAstro } from './integration';
+import { sentryAstro as _sentryAstro } from './integration';
 import { handleRequest } from './server/middleware';
 
 // Hence, we export everything from the Node SDK explicitly:
@@ -219,6 +219,13 @@ export {
 
 export { init } from './server/sdk';
 
+/**
+ * @deprecated Import the integration from `@sentry/astro/integration` instead.
+ * This export will be removed in the next major version.
+ */
+const sentryAstro = _sentryAstro;
+
+// oxlint-disable-next-line typescript/no-deprecated
 export default sentryAstro;
 
 // This exports the `handleRequest` middleware for manual usage
diff --git a/packages/astro/src/index.types.ts b/packages/astro/src/index.types.ts
index c08b0b7199f4..c6287009e916 100644
--- a/packages/astro/src/index.types.ts
+++ b/packages/astro/src/index.types.ts
@@ -46,4 +46,5 @@ export declare const statsigIntegration: typeof clientSdk.statsigIntegration;
 export declare const unleashIntegration: typeof clientSdk.unleashIntegration;
 export declare const growthbookIntegration: typeof clientSdk.growthbookIntegration;
 
+// oxlint-disable-next-line typescript/no-deprecated
 export default sentryAstro;
diff --git a/packages/astro/test/server/index.server.test.ts b/packages/astro/test/server/index.server.test.ts
index 4a89ebe16a13..6c1ed2de3127 100644
--- a/packages/astro/test/server/index.server.test.ts
+++ b/packages/astro/test/server/index.server.test.ts
@@ -1,9 +1,10 @@
 import { describe, expect, it } from 'vitest';
+import sentryAstroIntegration from '../../src/index.integration';
+// oxlint-disable-next-line typescript/no-deprecated
 import sentryAstro from '../../src/index.server';
 
 describe('server SDK', () => {
   it('exports the astro integration as a default export', () => {
-    const integration = sentryAstro();
-    expect(integration.name).toBe('@sentry/astro');
+    expect(sentryAstro).toBe(sentryAstroIntegration);
   });
 });

From 34dfa4dbac93331b38ea5d86c200a4c91307a595 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Peer=20St=C3=B6cklmair?= <jan.peer@sentry.io>
Date: Sat, 31 Oct 2026 16:12:02 -0600
Subject: [PATCH 083/169] ci(node): Add optional Node 27 alpha tests (#25984)

part of #25983
part of [JS-4052](https://linear.app/getsentry/issue/JS-4052)

## Description

This adds the Node 27 alpha (`^27.0.0-0`) to the Node unit test, Node
integration test and bundler plugin test matrices. The Node 27 jobs use
`continue-on-error`, so a failure in them does not fail the required
checks.

Before the unit and integration tests, the Node 27 jobs compile
`@sentry/node-cpu-profiler` and `@sentry/node-native-stacktrace` from
source with `pnpm rebuild`, because the alpha has no prebuilt binaries.
This is the same path as an install on a user's machine, so it also
works when a new alpha changes the ABI.

## CI decisions

The jobs are optional through `continue-on-error`. A failed Node 27 job
still shows a red cross on the PR. The alternative is to run them in the
optional workflow (`optional-e2e.yml`), which reports failures in a PR
comment.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/build.yml           | 22 +++++++++++++++++++---
 docs/supporting-a-new-node-version.md |  3 +++
 2 files changed, 22 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a546292a32ef..13e6c36d43b0 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -571,10 +571,12 @@ jobs:
     runs-on:
       namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
       'pull_request' && '-pr' || '' }}
+    # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
+    continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
     strategy:
       fail-fast: false
       matrix:
-        node: [20.19, 22, 24, 26]
+        node: [20.19, 22, 24, 26, '^27.0.0-0']
     steps:
       - name: Check out base commit (${{ github.event.pull_request.base.sha }})
         uses: actions/checkout@v7
@@ -591,6 +593,11 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+      # The native modules have no prebuilt binaries for the Node 27 alpha, so compile them like an install on a
+      # user's machine does.
+      - name: Compile native modules
+        if: matrix.node == '^27.0.0-0'
+        run: pnpm rebuild @sentry/node-cpu-profiler @sentry/node-native-stacktrace
 
       - name: Run affected tests
         run: pnpm run test:pr:node --base=${{ github.event.pull_request.base.sha }}
@@ -772,10 +779,12 @@ jobs:
       namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
       'pull_request' && '-pr' || '' }}
     timeout-minutes: 20
+    # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
+    continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
     strategy:
       fail-fast: false
       matrix:
-        node: [20.19, 22, 24, 26]
+        node: [20.19, 22, 24, 26, '^27.0.0-0']
         shard: [1, 2, 3]
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
@@ -801,6 +810,11 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+      # The native modules have no prebuilt binaries for the Node 27 alpha, so compile them like an install on a
+      # user's machine does.
+      - name: Compile native modules
+        if: matrix.node == '^27.0.0-0'
+        run: pnpm rebuild @sentry/node-cpu-profiler @sentry/node-native-stacktrace
 
       - name: Run integration tests
         working-directory: dev-packages/node-integration-tests
@@ -873,10 +887,12 @@ jobs:
       namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
       'pull_request' && '-pr' || '' }}
     timeout-minutes: 15
+    # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
+    continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
     strategy:
       fail-fast: false
       matrix:
-        node: [20.19, 22, 24, 26]
+        node: [20.19, 22, 24, 26, '^27.0.0-0']
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
diff --git a/docs/supporting-a-new-node-version.md b/docs/supporting-a-new-node-version.md
index d952742d7503..4720570d1866 100644
--- a/docs/supporting-a-new-node-version.md
+++ b/docs/supporting-a-new-node-version.md
@@ -87,6 +87,9 @@ Repo: [sentry-javascript](https://github.com/getsentry/sentry-javascript)
 Reference: [#20710](https://github.com/getsentry/sentry-javascript/pull/20710)
 
 1. Add the version to the CI test matrix in `.github/workflows/build.yml` to every `node: [20.19, 22, 24, 26]` entry.
+   While the new major is an alpha, the matrix has it as a range (e.g. `'^27.0.0-0'`) with `continue-on-error`, and a
+   `Compile native modules` step compiles the native modules from source for it. When the major is released, replace
+   the range with the major and remove `continue-on-error` and that step.
 
 2. Bump the native module dependencies to the versions released in Steps 1 and 2:
    - [ ] `@sentry-internal/node-cpu-profiler` in `packages/profiling-node`

From fd69ba21ea559b9a17527c3ad2e082201bcc0a3d Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Mon, 2 Nov 2026 08:44:28 -0800
Subject: [PATCH 084/169] feat(nestjs): Add an option to monitor every @Cron
 method (#25471)

Part of a series adding automatic Crons monitoring for the most-used job
schedulers in each SDK. Check-ins for a monitor that doesn't exist yet
are dropped, so today each monitor has to be created by hand with its
schedule copied from the code. Sending the job's schedule as the monitor
config lets Sentry create the monitor and keep it in sync.

Adds `monitorCronJobs` to `nestIntegration`. When it's on, every
`@Cron()` method sends check-ins with the schedule and time zone from
`@Cron()` as the monitor config, so apps don't need `@SentryCron` on
each method. It is off by default. The slug is the `@Cron()` `name`, or
`ClassName.methodName` without one.

```ts
Sentry.init({
  dsn: '...',
  integrations: [Sentry.nestIntegration({ monitorCronJobs: true, excludeCronJobs: ['cleanup', /^Dev/] })],
});
```

Methods that also have `@SentryCron` keep their slug and send one set of
check-ins. Methods with schedules Crons can't express, like every 10
seconds, aren't monitored. It needs `enableRuntimeChannelInjection`,
which is on by default.

Stacked on https://github.com/getsentry/sentry-javascript/pull/25013.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Nicolas Hrubec <nicolas.hrubec@outlook.com>
---
 .../nestjs-basic/src/app.controller.ts        |   6 +
 .../nestjs-basic/src/app.service.ts           |   6 +
 .../nestjs-basic/src/instrument.ts            |   1 +
 .../nestjs-basic/tests/cron-decorator.test.ts |  23 ++
 packages/nestjs/src/decorators.ts             |   5 +-
 packages/nestjs/src/index.ts                  |   1 +
 .../src/integrations/cron-monitoring.ts       | 131 +++++++++
 packages/nestjs/src/integrations/helpers.ts   |  52 +++-
 packages/nestjs/src/integrations/nest.ts      |   9 +-
 .../integrations/orchestrion-subscriber.ts    |  40 ++-
 .../nestjs/src/integrations/wrap-handlers.ts  |  43 ++-
 .../test/integrations/cron-monitoring.test.ts | 278 ++++++++++++++++++
 .../src/orchestrion/config/nestjs.ts          |   8 +
 13 files changed, 587 insertions(+), 16 deletions(-)
 create mode 100644 packages/nestjs/src/integrations/cron-monitoring.ts
 create mode 100644 packages/nestjs/test/integrations/cron-monitoring.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
index 33584dea5e78..5a30cf575da8 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.controller.ts
@@ -92,6 +92,12 @@ export class AppController {
     return {};
   }
 
+  @Get('test-auto-monitored-cron')
+  async testAutoMonitoredCron() {
+    await this.appService.testAutoMonitoredCron();
+    return {};
+  }
+
   @Get('kill-test-cron/:job')
   async killTestCron(@Param('job') job: string) {
     this.appService.killTestCron(job);
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
index e9bb0c7f69c6..712f6777ccf5 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/app.service.ts
@@ -120,6 +120,12 @@ export class AppService {
     console.log('Test derived cron!');
   }
 
+  // Monitored through `monitorCronJobs`, without `@SentryCron`.
+  @Cron('0 0 * * *', { name: 'test-auto-monitored-cron', timeZone: 'America/New_York', disabled: true })
+  async testAutoMonitoredCron() {
+    console.log('Test auto-monitored cron!');
+  }
+
   async killTestCron(job: string) {
     this.schedulerRegistry.deleteCronJob(job);
   }
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/instrument.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/instrument.ts
index 07454fc8d8c8..7b07f60a3252 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/src/instrument.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/src/instrument.ts
@@ -5,6 +5,7 @@ Sentry.init({
   dsn: process.env.E2E_TEST_DSN,
   tunnel: `http://localhost:3031/`, // proxy server
   tracesSampleRate: 1,
+  integrations: [Sentry.nestIntegration({ monitorCronJobs: true })],
   transportOptions: {
     // We expect the app to send a lot of events in a short time
     bufferSize: 1000,
diff --git a/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts b/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
index e1d006ccdb5d..2302bd6bdb9c 100644
--- a/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nestjs-basic/tests/cron-decorator.test.ts
@@ -91,6 +91,29 @@ test('Sends the schedule and time zone of @Cron with the check-in', async ({ bas
   );
 });
 
+test('Monitors @Cron methods without @SentryCron when monitorCronJobs is enabled', async ({ baseURL }) => {
+  const inProgressEnvelopePromise = waitForEnvelopeItem('nestjs-basic', envelope => {
+    return (
+      envelope[0].type === 'check_in' &&
+      envelope[1]['monitor_slug'] === 'test-auto-monitored-cron' &&
+      envelope[1]['status'] === 'in_progress'
+    );
+  });
+
+  await fetch(`${baseURL}/test-auto-monitored-cron`);
+
+  expect((await inProgressEnvelopePromise)[1]).toEqual(
+    expect.objectContaining({
+      monitor_slug: 'test-auto-monitored-cron',
+      status: 'in_progress',
+      monitor_config: {
+        schedule: { type: 'crontab', value: '0 0 * * *' },
+        timezone: 'America/New_York',
+      },
+    }),
+  );
+});
+
 test('Sends exceptions to Sentry on error in async cron job', async ({ baseURL }) => {
   const errorEventPromise = waitForError('nestjs-basic', event => {
     return (
diff --git a/packages/nestjs/src/decorators.ts b/packages/nestjs/src/decorators.ts
index ead5d10338f0..0a74734adb8b 100644
--- a/packages/nestjs/src/decorators.ts
+++ b/packages/nestjs/src/decorators.ts
@@ -6,7 +6,7 @@ import { startSpan } from '@sentry/node';
 import { DEBUG_BUILD } from './debug-build';
 import { isExpectedError } from './helpers';
 import type { ReflectWithMetadata } from './integrations/helpers';
-import { copyReflectMetadata, getNestScheduleVersion } from './integrations/helpers';
+import { copyReflectMetadata, getNestScheduleVersion, markSentryCronMethod } from './integrations/helpers';
 
 /**
  * Monitor settings for `@SentryCron` whose schedule and time zone come from the `@Cron()` decorator
@@ -62,6 +62,7 @@ export const SentryCron = (
     descriptor.value = wrappedMethod;
 
     copyFunctionNameAndMetadata({ originalMethod, descriptor });
+    markSentryCronMethod(wrappedMethod);
 
     return descriptor;
   };
@@ -138,7 +139,7 @@ function getMonitorConfigFromNestCron(candidates: unknown[]): MonitorConfig | un
  * Converts the options `@Cron()` stores as metadata into a Sentry monitor config.
  * Returns `undefined` for schedules Sentry can't represent.
  */
-function nestCronOptionsToMonitorConfig(
+export function nestCronOptionsToMonitorConfig(
   cronOptions: NestCronOptions,
   scheduleVersion: string | undefined,
 ): MonitorConfig | undefined {
diff --git a/packages/nestjs/src/index.ts b/packages/nestjs/src/index.ts
index 10a3400ee400..683239d3c908 100644
--- a/packages/nestjs/src/index.ts
+++ b/packages/nestjs/src/index.ts
@@ -4,6 +4,7 @@
 export * from '@sentry/node';
 
 export { nestIntegration } from './integrations/nest';
+export type { NestIntegrationOptions } from './integrations/nest';
 
 export { getDefaultIntegrations, init } from './sdk';
 
diff --git a/packages/nestjs/src/integrations/cron-monitoring.ts b/packages/nestjs/src/integrations/cron-monitoring.ts
new file mode 100644
index 000000000000..30c6e74b5f48
--- /dev/null
+++ b/packages/nestjs/src/integrations/cron-monitoring.ts
@@ -0,0 +1,131 @@
+import type { Client, MonitorConfig } from '@sentry/core';
+import { debug, getClient, stringMatchesSomePattern } from '@sentry/core';
+import { DEBUG_BUILD } from '../debug-build';
+import { nestCronOptionsToMonitorConfig } from '../decorators';
+import { getCronOptions, isSentryCronMethod, markSentryCronMethod } from './helpers';
+
+export interface NestCronMonitoringOptions {
+  /**
+   * Send check-ins for every `@Cron()` method of `@nestjs/schedule`. The monitor slug is the `name`
+   * option of `@Cron()`, or `ClassName.methodName`. Methods with `@SentryCron()` keep their own slug.
+   * Methods whose schedule Sentry can't represent, like every 10 seconds, are not monitored.
+   * Sentry cuts slugs off at 50 characters, so give `@Cron()` a `name` if the class and method names are long.
+   *
+   * Defaults to `false`.
+   */
+  monitorCronJobs?: boolean;
+
+  /**
+   * Monitor slugs not to monitor when `monitorCronJobs` is enabled. Strings must match the slug exactly.
+   */
+  excludeCronJobs?: Array<string | RegExp>;
+}
+
+interface CronMonitor {
+  slug: string;
+  config: MonitorConfig;
+}
+
+const MONITORING_OPTIONS = new WeakMap<Client, NestCronMonitoringOptions>();
+
+/** Enables `@Cron()` monitoring for the client. */
+export function setCronMonitoringOptions(client: Client, options: NestCronMonitoringOptions): void {
+  if (options.monitorCronJobs) {
+    MONITORING_OPTIONS.set(client, options);
+  }
+}
+
+const CRON_MONITORS = new WeakMap<object, (method: object) => CronMonitor | undefined>();
+
+/**
+ * Sets up `monitorCronJobs` for a method `@Cron()` just decorated, keyed by its `@Cron()` options, which
+ * decorators above it copy. A `@SentryCron()` below marks the options instead, so the method keeps its own slug.
+ */
+export function registerCronMonitor(
+  method: object,
+  handler: object,
+  cronArgs: unknown[],
+  target: unknown,
+  propertyKey: string | symbol | undefined,
+  scheduleVersion?: string,
+): void {
+  if (isSentryCronMethod(handler)) {
+    markSentryCronMethod(method);
+    return;
+  }
+  const options = getCronOptions(method);
+  if (options) {
+    CRON_MONITORS.set(options, makeCronMonitorResolver(cronArgs, target, propertyKey, scheduleVersion));
+  }
+}
+
+/** The monitor a run of this `@Cron()` method sends check-ins for, if any. */
+export function resolveCronMonitor(method: object): CronMonitor | undefined {
+  const options = getCronOptions(method);
+  return options && CRON_MONITORS.get(options)?.(method);
+}
+
+function makeCronMonitorResolver(
+  cronArgs: unknown[],
+  target: unknown,
+  propertyKey: string | symbol | undefined,
+  scheduleVersion: string | undefined,
+): (method: object) => CronMonitor | undefined {
+  let monitor: CronMonitor | null | undefined;
+
+  return method => {
+    const client = getClient();
+    const options = client && MONITORING_OPTIONS.get(client);
+    if (!options) {
+      return undefined;
+    }
+
+    if (monitor === undefined) {
+      try {
+        monitor = isSentryCronMethod(method) ? null : getCronMonitor(cronArgs, target, propertyKey, scheduleVersion);
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[Nest] Failed to set up the cron monitor:', e);
+        monitor = null;
+      }
+    }
+
+    if (!monitor || stringMatchesSomePattern(monitor.slug, options.excludeCronJobs, true)) {
+      return undefined;
+    }
+    return monitor;
+  };
+}
+
+function getCronMonitor(
+  [cronTime, cronOptions]: unknown[],
+  target: unknown,
+  propertyKey: string | symbol | undefined,
+  scheduleVersion: string | undefined,
+): CronMonitor | null {
+  // A `Date` runs once, so there is nothing to monitor.
+  if (typeof cronTime !== 'string') {
+    return null;
+  }
+
+  const options = (cronOptions && typeof cronOptions === 'object' ? cronOptions : {}) as Record<string, unknown>;
+  const className = (target as { constructor?: { name?: unknown } } | undefined)?.constructor?.name;
+  const slug =
+    typeof options.name === 'string' && options.name
+      ? options.name
+      : typeof className === 'string' && className && propertyKey !== undefined
+        ? `${className}.${String(propertyKey)}`
+        : undefined;
+
+  if (!slug) {
+    DEBUG_BUILD && debug.warn('[Nest] Not monitoring a @Cron() method without a name.');
+    return null;
+  }
+
+  const config = nestCronOptionsToMonitorConfig({ ...options, cronTime }, scheduleVersion);
+  if (!config) {
+    DEBUG_BUILD && debug.log(`[Nest] Not monitoring ${slug}: Sentry can't represent its schedule.`);
+    return null;
+  }
+
+  return { slug, config };
+}
diff --git a/packages/nestjs/src/integrations/helpers.ts b/packages/nestjs/src/integrations/helpers.ts
index 8c2b5755d910..dd759e13825a 100644
--- a/packages/nestjs/src/integrations/helpers.ts
+++ b/packages/nestjs/src/integrations/helpers.ts
@@ -9,7 +9,13 @@ import {
 } from '@sentry/conventions/attributes';
 import { FUNCTION, MIDDLEWARE, QUEUE_PROCESS } from '@sentry/conventions/op';
 import type { Span } from '@sentry/core';
-import { addNonEnumerableProperty, getClient, hasSpanStreamingEnabled, withActiveSpan } from '@sentry/core';
+import {
+  addNonEnumerableProperty,
+  getClient,
+  hasSpanStreamingEnabled,
+  isObjectLike,
+  withActiveSpan,
+} from '@sentry/core';
 import type { CatchTarget, InjectableTarget, NextFunction, Observable, Subscription } from './types';
 
 /** A function of unknown signature, matching the methods/handlers we wrap. */
@@ -33,17 +39,53 @@ export function markWrapped(fn: AnyFn): void {
 
 // `@nestjs/schedule`'s metadata key for the `@Cron()` options.
 const SCHEDULE_CRON_OPTIONS = 'SCHEDULE_CRON_OPTIONS';
+const SENTRY_CRON_METADATA = 'sentry:nestjs:sentry_cron';
+
+/** The options `@Cron()` stored as metadata on `fn`, if any. */
+export function getCronOptions(fn: object): object | undefined {
+  const R = Reflect as ReflectWithMetadata;
+  const options = typeof R.getMetadata === 'function' ? R.getMetadata(SCHEDULE_CRON_OPTIONS, fn) : undefined;
+  return isObjectLike(options) ? options : undefined;
+}
+
+/**
+ * Marks a method that `@SentryCron()` monitors, and the options of its `@Cron()` if it already has one, so
+ * `@Cron()` monitoring skips it. Decorators between it and a `@Cron()` above copy the metadata outward.
+ */
+export function markSentryCronMethod(fn: object): void {
+  const R = Reflect as ReflectWithMetadata;
+  if (typeof R.defineMetadata !== 'function') {
+    return;
+  }
+  R.defineMetadata(SENTRY_CRON_METADATA, true, fn);
+  const cronOptions = getCronOptions(fn);
+  if (cronOptions) {
+    R.defineMetadata(SENTRY_CRON_METADATA, true, cronOptions);
+  }
+}
+
+/** Whether `fn` or its `@Cron()` options are marked by {@link markSentryCronMethod}. */
+export function isSentryCronMethod(fn: object): boolean {
+  const R = Reflect as ReflectWithMetadata;
+  if (typeof R.getMetadata !== 'function') {
+    return false;
+  }
+  const cronOptions = getCronOptions(fn);
+  return (
+    R.getMetadata(SENTRY_CRON_METADATA, fn) === true ||
+    (!!cronOptions && R.getMetadata(SENTRY_CRON_METADATA, cronOptions) === true)
+  );
+}
 
 const NEST_SCHEDULE_VERSIONS = new WeakMap<object, string>();
 
 /** Remembers the `@nestjs/schedule` version whose `@Cron()` stored the options on `method`. */
 export function setNestScheduleVersion(method: unknown, version: string | undefined): void {
-  const R = Reflect as ReflectWithMetadata;
-  if (typeof method !== 'function' || !version || typeof R.getMetadata !== 'function') {
+  if (typeof method !== 'function' || !version) {
     return;
   }
-  const cronOptions = R.getMetadata(SCHEDULE_CRON_OPTIONS, method);
-  if (cronOptions && typeof cronOptions === 'object') {
+  const cronOptions = getCronOptions(method);
+  if (cronOptions) {
     NEST_SCHEDULE_VERSIONS.set(cronOptions, version);
   }
 }
diff --git a/packages/nestjs/src/integrations/nest.ts b/packages/nestjs/src/integrations/nest.ts
index 01ef7d722e9c..853caf825d71 100644
--- a/packages/nestjs/src/integrations/nest.ts
+++ b/packages/nestjs/src/integrations/nest.ts
@@ -1,16 +1,23 @@
 import { defineIntegration } from '@sentry/core';
+import type { NestCronMonitoringOptions } from './cron-monitoring';
+import { setCronMonitoringOptions } from './cron-monitoring';
 import { subscribeToNestChannels } from './orchestrion-subscriber';
 
 const INTEGRATION_NAME = 'Nest' as const;
 
+export type NestIntegrationOptions = NestCronMonitoringOptions;
+
 /**
  * Integration capturing tracing data for NestJS.
  */
-export const nestIntegration = defineIntegration(() => {
+export const nestIntegration = defineIntegration((options: NestIntegrationOptions = {}) => {
   return {
     name: INTEGRATION_NAME,
     setupOnce() {
       subscribeToNestChannels();
     },
+    setup(client) {
+      setCronMonitoringOptions(client, options);
+    },
   };
 });
diff --git a/packages/nestjs/src/integrations/orchestrion-subscriber.ts b/packages/nestjs/src/integrations/orchestrion-subscriber.ts
index 0f207438d716..53dde4285a7f 100644
--- a/packages/nestjs/src/integrations/orchestrion-subscriber.ts
+++ b/packages/nestjs/src/integrations/orchestrion-subscriber.ts
@@ -1,20 +1,22 @@
 import * as diagnosticsChannel from 'node:diagnostics_channel';
-import { debug, startInactiveSpan, waitForTracingChannelBinding } from '@sentry/core';
+import { addNonEnumerableProperty, debug, startInactiveSpan, waitForTracingChannelBinding } from '@sentry/core';
 import type { OrchestrionChannelContext } from '@sentry/server-utils';
 import { bindTracingChannelToSpan } from '@sentry/server-utils';
 import { nestjsChannels as CHANNELS } from '@sentry/server-utils/orchestrion/config';
 import { DEBUG_BUILD } from '../debug-build';
+import { registerCronMonitor } from './cron-monitoring';
 import type { AnyFn } from './helpers';
 import { isWrapped, markWrapped, setNestScheduleVersion } from './helpers';
 import type { CatchTarget, InjectableTarget, MinimalNestJsExecutionContext } from './types';
 import { patchCatchTarget, patchInjectableTarget } from './wrap-components';
 import {
   extractQueueName,
-  MECHANISM_CRON,
   MECHANISM_INTERVAL,
   MECHANISM_TIMEOUT,
   patchMethodDescriptor,
   patchProcessorTarget,
+  sendsCronCheckIns,
+  wrapCronHandler,
   wrapEventHandler,
   wrapScheduleHandler,
 } from './wrap-handlers';
@@ -185,13 +187,43 @@ export function subscribeToNestChannels(): void {
 
   // @Cron/@Interval/@Timeout (schedule), @OnEvent (event), @Processor (bullmq)
   subscribeFactoryDecorator(CHANNELS.NESTJS_SCHEDULE_CRON, (decorator, data) => {
-    const cronDecorator = makeMethodDecorator(decorator, handler => wrapScheduleHandler(handler, MECHANISM_CRON));
+    const cronDecorator = makeMethodDecorator(decorator, handler => wrapCronHandler(handler));
     return function (this: unknown, ...args: unknown[]): unknown {
+      const descriptor = args[2] as PropertyDescriptor | undefined;
+      const handler: unknown = descriptor?.value;
       const result = cronDecorator.apply(this, args);
-      setNestScheduleVersion((args[2] as PropertyDescriptor | undefined)?.value, data.moduleVersion);
+      const method: unknown = descriptor?.value;
+      setNestScheduleVersion(method, data.moduleVersion);
+      if (typeof method === 'function' && typeof handler === 'function' && method !== handler) {
+        registerCronMonitor(
+          method,
+          handler,
+          [...(data.arguments || [])],
+          args[0],
+          args[1] as string | symbol | undefined,
+          data.moduleVersion,
+        );
+      }
       return result;
     };
   });
+  // `@nestjs/schedule` passes this function to `CronJob` as `onTick`. When the method already sends
+  // check-ins, mark it the way other monitored jobs are marked, so scheduler integrations skip it.
+  diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(CHANNELS.NESTJS_SCHEDULE_EXPLORER_WRAP).subscribe({
+    start: NOOP,
+    end(data) {
+      try {
+        if (typeof data.result === 'function' && sendsCronCheckIns(data.arguments?.[0])) {
+          addNonEnumerableProperty(data.result, Symbol.for('sentry.cron.monitored'), true);
+        }
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[Nest] Failed to check whether a @Cron() job sends check-ins:', e);
+      }
+    },
+    asyncStart: NOOP,
+    asyncEnd: NOOP,
+    error: NOOP,
+  });
   subscribeFactoryDecorator(CHANNELS.NESTJS_SCHEDULE_INTERVAL, decorator =>
     makeMethodDecorator(decorator, handler => wrapScheduleHandler(handler, MECHANISM_INTERVAL)),
   );
diff --git a/packages/nestjs/src/integrations/wrap-handlers.ts b/packages/nestjs/src/integrations/wrap-handlers.ts
index 62f677635eeb..a9fcb58289d5 100644
--- a/packages/nestjs/src/integrations/wrap-handlers.ts
+++ b/packages/nestjs/src/integrations/wrap-handlers.ts
@@ -1,6 +1,21 @@
-import { captureException, isObjectLike, isThenable, startSpan, withIsolationScope } from '@sentry/core';
+import {
+  captureException,
+  isObjectLike,
+  isThenable,
+  startNewTrace,
+  startSpan,
+  withIsolationScope,
+  withMonitor,
+} from '@sentry/core';
+import { resolveCronMonitor } from './cron-monitoring';
 import type { AnyFn, ReflectWithMetadata } from './helpers';
-import { getBullMQProcessSpanOptions, getEventSpanOptions, isWrapped, markWrapped } from './helpers';
+import {
+  getBullMQProcessSpanOptions,
+  getEventSpanOptions,
+  isSentryCronMethod,
+  isWrapped,
+  markWrapped,
+} from './helpers';
 
 /**
  * Span-emitting / error-capturing logic for the `@Cron`/`@Interval`/
@@ -56,6 +71,26 @@ export function wrapScheduleHandler(handler: AnyFn, mechanismType: string): AnyF
   };
 }
 
+/** Whether a `@Cron()` method sends check-ins when it runs, from `monitorCronJobs` or `@SentryCron()`. */
+export function sendsCronCheckIns(method: unknown): boolean {
+  return typeof method === 'function' && (isSentryCronMethod(method) || !!resolveCronMonitor(method));
+}
+
+/**
+ * Wrap a `@Cron` handler like {@link wrapScheduleHandler}, sending check-ins when `monitorCronJobs` is enabled.
+ */
+export function wrapCronHandler(handler: AnyFn): AnyFn {
+  const scheduleHandler = wrapScheduleHandler(handler, MECHANISM_CRON);
+  const wrapped = function (this: unknown, ...args: unknown[]): unknown {
+    const monitor = resolveCronMonitor(wrapped);
+    if (!monitor) {
+      return scheduleHandler.apply(this, args);
+    }
+    return startNewTrace(() => withMonitor(monitor.slug, () => scheduleHandler.apply(this, args), monitor.config));
+  };
+  return wrapped;
+}
+
 function eventNameFromEvent(event: unknown): string {
   if (typeof event === 'string') {
     return event;
@@ -140,11 +175,11 @@ export function patchMethodDescriptor(
   target: { __SENTRY_INTERNAL__?: boolean } | undefined,
   propertyKey: string | symbol | undefined,
   descriptor: PropertyDescriptor | undefined,
-  wrapHandler: (handler: AnyFn) => AnyFn,
+  wrapHandler: (handler: AnyFn, target: unknown, propertyKey: string | symbol | undefined) => AnyFn,
 ): void {
   const handler = descriptor?.value as AnyFn | undefined;
   if (descriptor && handler && typeof handler === 'function' && !target?.__SENTRY_INTERNAL__ && !isWrapped(handler)) {
-    const wrapped = wrapHandler(handler);
+    const wrapped = wrapHandler(handler, target, propertyKey);
     Object.defineProperty(wrapped, 'name', {
       value: handler.name || String(propertyKey),
       configurable: true,
diff --git a/packages/nestjs/test/integrations/cron-monitoring.test.ts b/packages/nestjs/test/integrations/cron-monitoring.test.ts
new file mode 100644
index 000000000000..56e2559e0a3a
--- /dev/null
+++ b/packages/nestjs/test/integrations/cron-monitoring.test.ts
@@ -0,0 +1,278 @@
+import 'reflect-metadata';
+import { tracingChannel } from 'node:diagnostics_channel';
+import * as SentryCore from '@sentry/core';
+import { Client, createTransport, initAndBind, resolvedSyncPromise } from '@sentry/core';
+import type { OrchestrionChannelContext } from '@sentry/server-utils';
+import { nestjsChannels as CHANNELS } from '@sentry/server-utils/orchestrion/config';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { SentryCron } from '../../src/decorators';
+import type { NestCronMonitoringOptions } from '../../src/integrations/cron-monitoring';
+import { setCronMonitoringOptions } from '../../src/integrations/cron-monitoring';
+import { subscribeToNestChannels } from '../../src/integrations/orchestrion-subscriber';
+
+type AnyFn = (this: unknown, ...args: unknown[]) => unknown;
+
+class TestClient extends Client<any> {
+  public eventFromException(): PromiseLike<any> {
+    return resolvedSyncPromise({});
+  }
+
+  public eventFromMessage(): PromiseLike<any> {
+    return resolvedSyncPromise({});
+  }
+}
+
+let captureCheckIn: ReturnType<typeof vi.fn<(checkIn: SentryCore.CheckIn, config?: unknown) => string>>;
+
+function initClient(options: NestCronMonitoringOptions): void {
+  //@ts-expect-error - just a mock for the test
+  initAndBind(TestClient, {
+    dsn: 'https://username@domain/123',
+    integrations: [],
+    stackParser: () => [],
+    transport: () => createTransport({ recordDroppedEvent: () => undefined }, () => resolvedSyncPromise({})),
+  });
+  const client = SentryCore.getClient() as Client & { captureCheckIn?: unknown };
+  captureCheckIn = vi.fn((_checkIn: SentryCore.CheckIn, _config?: unknown) => 'check-in-id');
+  client.captureCheckIn = captureCheckIn;
+  setCronMonitoringOptions(client, options);
+}
+
+// Drives the `@Cron()` factory channel and returns the decorator `@Cron()` would apply.
+function cron(cronTime: unknown, options?: Record<string, unknown>, moduleVersion?: string): MethodDecorator {
+  const data: OrchestrionChannelContext = { arguments: [cronTime, options], moduleVersion };
+  tracingChannel<OrchestrionChannelContext>(CHANNELS.NESTJS_SCHEDULE_CRON).traceSync(
+    () => (_target: unknown, _key: unknown, descriptor: PropertyDescriptor) => {
+      Reflect.defineMetadata('SCHEDULE_CRON_OPTIONS', { ...options, cronTime }, descriptor.value);
+      return descriptor;
+    },
+    data,
+  );
+  return data.result as MethodDecorator;
+}
+
+// A decorator that replaces the method and copies its metadata, as Nest needs to still schedule it.
+const wrapMethod: MethodDecorator = (_target, _key, descriptor: PropertyDescriptor) => {
+  const original = descriptor.value as AnyFn;
+  descriptor.value = function (this: unknown, ...args: unknown[]): unknown {
+    return original.apply(this, args);
+  };
+  for (const key of Reflect.getMetadataKeys(original)) {
+    Reflect.defineMetadata(key, Reflect.getMetadata(key, original), descriptor.value);
+  }
+};
+
+function decorate(className: string, decorators: MethodDecorator[]): AnyFn {
+  const target = Object.create({ constructor: { name: className } }) as object;
+  const descriptor: PropertyDescriptor = { value: function run(): void {}, configurable: true };
+  for (const decorator of [...decorators].reverse()) {
+    decorator(target, 'run', descriptor);
+  }
+  return descriptor.value as AnyFn;
+}
+
+// Drives the channel for the function `@nestjs/schedule` passes to `CronJob` as `onTick`, and returns it.
+function cronJobOnTick(method: AnyFn): AnyFn {
+  const data: { arguments: unknown[]; result?: unknown } = { arguments: [method, {}] };
+  tracingChannel<{ arguments: unknown[]; result?: unknown }>(CHANNELS.NESTJS_SCHEDULE_EXPLORER_WRAP).traceSync(
+    () => async () => {},
+    data,
+  );
+  return data.result as AnyFn;
+}
+
+const isMarkedMonitored = (onTick: AnyFn): boolean =>
+  !!(onTick as AnyFn & Record<symbol, unknown>)[Symbol.for('sentry.cron.monitored')];
+
+function sentCheckIns(): Array<[string, string, unknown]> {
+  return captureCheckIn.mock.calls.map(([checkIn, config]) => [checkIn.monitorSlug, checkIn.status, config]);
+}
+
+describe('@Cron() monitoring', () => {
+  beforeEach(() => {
+    subscribeToNestChannels();
+  });
+
+  afterEach(() => {
+    SentryCore.getMainCarrier().__SENTRY__ = undefined;
+    vi.restoreAllMocks();
+  });
+
+  it('sends check-ins with the schedule, using the @Cron() name as slug', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron('0 30 9 * * 1-5', { name: 'daily-report', timeZone: 'Europe/Vienna' })])();
+
+    expect(sentCheckIns()).toEqual([
+      [
+        'daily-report',
+        'in_progress',
+        { schedule: { type: 'crontab', value: '30 9 * * 1-5' }, timezone: 'Europe/Vienna' },
+      ],
+      ['daily-report', 'ok', undefined],
+    ]);
+  });
+
+  it('uses ClassName.methodName without a name', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron('* * * * *', { timeZone: 'UTC' })])();
+
+    expect(sentCheckIns()[0]?.[0]).toBe('Jobs.run');
+  });
+
+  it('sends error check-ins and rethrows', async () => {
+    initClient({ monitorCronJobs: true });
+    vi.spyOn(SentryCore, 'captureException').mockReturnValue('event-id');
+    const target = Object.create({ constructor: { name: 'Jobs' } }) as object;
+    const descriptor: PropertyDescriptor = {
+      value: async function run(): Promise<never> {
+        throw new Error('boom');
+      },
+    };
+    cron('* * * * *', { timeZone: 'UTC' })(target, 'run', descriptor);
+
+    await expect((descriptor.value as AnyFn)()).rejects.toThrow('boom');
+    expect(sentCheckIns().map(([, status]) => status)).toEqual(['in_progress', 'error']);
+  });
+
+  it('starts a new trace for each run', () => {
+    initClient({ monitorCronJobs: true });
+    const traceIds: string[] = [];
+    const run = decorate('Jobs', [
+      cron('* * * * *', { name: 'job', timeZone: 'UTC' }),
+      (_target, _key, descriptor: PropertyDescriptor) => {
+        descriptor.value = () => {
+          traceIds.push(SentryCore.getCurrentScope().getPropagationContext().traceId);
+        };
+      },
+    ]);
+    const bootstrapTraceId = SentryCore.getCurrentScope().getPropagationContext().traceId;
+
+    run();
+    run();
+
+    expect(traceIds).toHaveLength(2);
+    expect(new Set([bootstrapTraceId, ...traceIds]).size).toBe(3);
+  });
+
+  it('skips jobs whose schedule cannot be sent', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron('*/10 * * * * *', { name: 'every-10s' })])();
+
+    expect(captureCheckIn).not.toHaveBeenCalled();
+  });
+
+  it('skips a numeric month on @nestjs/schedule 3', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron('0 0 1 1 *', { name: 'yearly', timeZone: 'UTC' }, '3.0.4')])();
+
+    expect(captureCheckIn).not.toHaveBeenCalled();
+  });
+
+  it('sends a numeric month from @nestjs/schedule 4', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron('0 0 1 1 *', { name: 'yearly', timeZone: 'UTC' }, '4.1.2')])();
+
+    expect(sentCheckIns()[0]).toEqual([
+      'yearly',
+      'in_progress',
+      { schedule: { type: 'crontab', value: '0 0 1 1 *' }, timezone: 'UTC' },
+    ]);
+  });
+
+  it('does not monitor by default', () => {
+    initClient({});
+    decorate('Jobs', [cron('* * * * *', { name: 'job' })])();
+
+    expect(captureCheckIn).not.toHaveBeenCalled();
+  });
+
+  it('skips excluded jobs', () => {
+    initClient({ monitorCronJobs: true, excludeCronJobs: ['job', /^Other\./] });
+    decorate('Jobs', [cron('* * * * *', { name: 'job' })])();
+    decorate('Other', [cron('* * * * *')])();
+    decorate('Jobs', [cron('* * * * *', { name: 'job-2' })])();
+
+    expect(sentCheckIns().map(([slug]) => slug)).toEqual(['job-2', 'job-2']);
+  });
+
+  it('skips one-off jobs', () => {
+    initClient({ monitorCronJobs: true });
+    decorate('Jobs', [cron(new Date(), { name: 'once' })])();
+
+    expect(captureCheckIn).not.toHaveBeenCalled();
+  });
+
+  it.each([
+    ['@Cron() above @SentryCron()', (c: MethodDecorator, s: MethodDecorator) => [c, s]],
+    ['@SentryCron() above @Cron()', (c: MethodDecorator, s: MethodDecorator) => [s, c]],
+    ['@Cron(), another decorator, @SentryCron()', (c: MethodDecorator, s: MethodDecorator) => [c, wrapMethod, s]],
+    ['@SentryCron(), another decorator, @Cron()', (c: MethodDecorator, s: MethodDecorator) => [s, wrapMethod, c]],
+    ['another decorator, @Cron(), @SentryCron()', (c: MethodDecorator, s: MethodDecorator) => [wrapMethod, c, s]],
+    ['another decorator, @SentryCron(), @Cron()', (c: MethodDecorator, s: MethodDecorator) => [wrapMethod, s, c]],
+  ])('only sends the @SentryCron() check-ins with %s', async (_, order) => {
+    initClient({ monitorCronJobs: true });
+    await decorate('Jobs', order(cron('* * * * *', { name: 'job' }), SentryCron('explicit-slug')))();
+
+    expect(sentCheckIns().map(([slug]) => slug)).toEqual(['explicit-slug', 'explicit-slug']);
+  });
+
+  describe('marks the CronJob onTick as monitored', () => {
+    it('when the method is monitored', () => {
+      initClient({ monitorCronJobs: true });
+      const onTick = cronJobOnTick(decorate('Jobs', [cron('* * * * *', { name: 'job' })]));
+
+      expect(isMarkedMonitored(onTick)).toBe(true);
+      expect(Object.keys(onTick)).toEqual([]);
+    });
+
+    it('when a decorator above @Cron() replaces the method', () => {
+      initClient({ monitorCronJobs: true });
+      const onTick = cronJobOnTick(decorate('Jobs', [wrapMethod, cron('* * * * *', { name: 'job' })]));
+
+      expect(isMarkedMonitored(onTick)).toBe(true);
+    });
+
+    it.each([
+      ['@SentryCron(), another decorator, @Cron()', (c: MethodDecorator, s: MethodDecorator) => [s, wrapMethod, c]],
+      ['another decorator, @SentryCron(), @Cron()', (c: MethodDecorator, s: MethodDecorator) => [wrapMethod, s, c]],
+      ['another decorator, @Cron(), @SentryCron()', (c: MethodDecorator, s: MethodDecorator) => [wrapMethod, c, s]],
+    ])('when the method has %s', (_, order) => {
+      initClient({});
+      const onTick = cronJobOnTick(
+        decorate('Jobs', order(cron('* * * * *', { name: 'job' }), SentryCron('explicit-slug'))),
+      );
+
+      expect(isMarkedMonitored(onTick)).toBe(true);
+    });
+
+    it('not when a decorator above @Cron() replaces an excluded method', () => {
+      initClient({ monitorCronJobs: true, excludeCronJobs: ['job'] });
+      const onTick = cronJobOnTick(decorate('Jobs', [wrapMethod, cron('* * * * *', { name: 'job' })]));
+
+      expect(isMarkedMonitored(onTick)).toBe(false);
+    });
+
+    it('when the method has @SentryCron()', () => {
+      initClient({});
+      const onTick = cronJobOnTick(decorate('Jobs', [cron('* * * * *', { name: 'job' }), SentryCron('explicit-slug')]));
+
+      expect(isMarkedMonitored(onTick)).toBe(true);
+    });
+
+    it.each([
+      ['monitorCronJobs is off', {}],
+      ['the job is excluded', { monitorCronJobs: true, excludeCronJobs: ['job'] }],
+    ])('not when %s', (_, options) => {
+      initClient(options);
+      const onTick = cronJobOnTick(decorate('Jobs', [cron('* * * * *', { name: 'job' })]));
+
+      expect(isMarkedMonitored(onTick)).toBe(false);
+    });
+
+    it('not for other scheduled methods', () => {
+      initClient({ monitorCronJobs: true });
+
+      expect(isMarkedMonitored(cronJobOnTick(function interval(): void {}))).toBe(false);
+    });
+  });
+});
diff --git a/packages/server-utils/src/orchestrion/config/nestjs.ts b/packages/server-utils/src/orchestrion/config/nestjs.ts
index 344b35913ede..b08971e01726 100644
--- a/packages/server-utils/src/orchestrion/config/nestjs.ts
+++ b/packages/server-utils/src/orchestrion/config/nestjs.ts
@@ -93,6 +93,13 @@ export const nestjsConfig = [
     module: { name: '@nestjs/schedule', versionRange: '>=2.0.0', filePath: 'dist/decorators/timeout.decorator.js' },
     functionQuery: { functionName: 'Timeout', kind: 'Sync' },
   },
+  {
+    // The function `ScheduleExplorer` returns here is what `@nestjs/schedule` passes to `CronJob` as `onTick`.
+    // From 6.0.0 it uses `cron` 4.3+, whose jobs have names.
+    channelName: 'scheduleExplorerWrap',
+    module: { name: '@nestjs/schedule', versionRange: '>=6.0.0', filePath: 'dist/schedule.explorer.js' },
+    functionQuery: { className: 'ScheduleExplorer', methodName: 'wrapFunctionInTryCatchBlocks', kind: 'Sync' },
+  },
   {
     // @nestjs/event-emitter @OnEvent:
     // `const OnEvent = (event, options) => {
@@ -138,6 +145,7 @@ export const nestjsChannels = {
   NESTJS_SCHEDULE_CRON: 'orchestrion:@nestjs/schedule:cronDecorator',
   NESTJS_SCHEDULE_INTERVAL: 'orchestrion:@nestjs/schedule:intervalDecorator',
   NESTJS_SCHEDULE_TIMEOUT: 'orchestrion:@nestjs/schedule:timeoutDecorator',
+  NESTJS_SCHEDULE_EXPLORER_WRAP: 'orchestrion:@nestjs/schedule:scheduleExplorerWrap',
   NESTJS_ONEVENT: 'orchestrion:@nestjs/event-emitter:onEventDecorator',
   NESTJS_PROCESSOR: 'orchestrion:@nestjs/bullmq:processorDecorator',
 } as const;

From 501847338cb005de0692d4813c5f9996b222e410 Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Mon, 2 Nov 2026 10:56:02 -0800
Subject: [PATCH 085/169] docs(changelog): Add monitorCronJobs to Unreleased
 (#25996)

I missed the request for a changelog entry in #25471, adding it here
---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 81399b6e6386..c58c6b24ea5f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,10 @@
 
 ### Important Changes
 
+- **feat(nestjs): Add an option to monitor every @Cron method ([#25471](https://github.com/getsentry/sentry-javascript/pull/25471))**
+
+  Set `monitorCronJobs: true` on `nestIntegration()` to send check-ins for every `@Cron()` method, without adding `@SentryCron` to each one. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeCronJobs` to skip jobs by slug. Methods that also have `@SentryCron` check in once, with the slug and options passed to `@SentryCron`.
+
 - **feat(nestjs): Derive SentryCron monitor config from @Cron ([#25013](https://github.com/getsentry/sentry-javascript/pull/25013))**
 
   `@SentryCron` now sends the schedule and time zone from the method's `@Cron()` decorator, so Sentry creates the monitor on the first run. If you use `@SentryCron` without a `schedule`, Sentry now creates missing monitors, which are billed, and overwrites schedules and time zones set by hand. Pass `fromCronDecorator: false` to turn this off.

From bbb59b4d60a2145489abd19e74259f6c404a3116 Mon Sep 17 00:00:00 2001
From: Abdulrahman Mohammed <62155637+61465@users.noreply.github.com>
Date: Mon, 2 Nov 2026 21:23:53 +0200
Subject: [PATCH 086/169] test(nuxt): cover the client plugin's pages-router
 instrumentation (#25348)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Summary

Closes #13813.

Fills in the Nuxt client-plugin unit tests requested by @mydea. Picks up
where the dormant draft #24583 (@vansh-nagar, inactive since 2026-02;
pinged by @JPeer264 on 2026-10-12 with no reply within the stated
window) left off and extends it to all five code paths in
`packages/nuxt/src/runtime/plugins/sentry.client.ts`.

## What this covers

1. **Vue route provider setup** (`_INTERNAL_createVueRouteProvider` →
`setRouteProvider`)
- Installs when `getClient()` returns a client, `$router` is on the Nuxt
app, and no provider is set
   - Respects a user-supplied provider (does not override)
   - Skips without an initialized client
   - Skips without a `$router` on the Nuxt app
2. **`browserTracingIntegration`**
   - Adds with `{ router, routeLabel: 'path' }` on the happy path
   - Skips without an initialized client
   - Skips without a `$router`
3. **`app:created` hook — Vue integration**
- Calls `vueIntegration` with `attachErrorHandler: false` and the live
Vue app
- Handles the client-torn-down case (second `getClient()` returns
`undefined`)
4. **`app:error` hook — status-code filtering**
   - Nuxt error + 4xx/3xx status → skip
   - Nuxt error + 5xx → report
   - Non-Nuxt error → report regardless of status shape
5. **`vue:error` hook**
   - Forwards `{ error, instance, info }` to `reportNuxtError`

## Pattern

Mocks mirror
`packages/nuxt/test/runtime/hooks/captureErrorHook.test.ts`:
- `vi.hoisted(() => vi.fn())` for cross-module mock refs
- `vi.mock(import('…'), async importOriginal => …)` for `@sentry/core`,
`@sentry/vue`, `nuxt/app`
- `vi.spyOn(utils, 'reportNuxtError')` for the local `../utils` module

Pure vitest, no native dependencies. Runs under the existing `yarn test`
command in `packages/nuxt/`.

## Local verification

Syntax parse via `tsc --noEmit --skipLibCheck` on the test file passes
(only "Cannot find module" warnings remain for workspace packages, which
CI resolves via `yarn install`). I was unable to materialise the
Yarn/npm workspace node_modules locally on my Windows + Node 24 shell
(ETARGET on `whatwg-url@^17.2.0`, same error reported upstream in
jsdom's current chain), so I'm relying on your CI matrix to confirm the
suite is green across the vitest + jsdom environment configured in
`packages/nuxt/vite.config.ts`.

## Notes

- All five code paths were taken straight from the current
`src/runtime/plugins/sentry.client.ts`; happy to re-shape the test file
structure if the preferred house style here is one `describe` per public
behaviour rather than per source-code region.
- @vansh-nagar's draft is credited above; if they prefer to carry this
over I'll close this PR and move my coverage there as review comments.

cc @mydea + @JPeer264 — thanks for the pre-blessing on #13813 and for
keeping the issue open.

🤖 Used Claude Code for the test scaffolding and to cross-check the mock
shapes against existing nuxt tests; every assertion was signed off by me
on content.

---------

Signed-off-by: Abd Alrahaman <abdarahman10555@gmail.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
Co-authored-by: OpenAI GPT-6 <codex@openai.com>
---
 .../nuxt/test/runtime/plugins/client.test.ts  | 293 ++++++++++++++++--
 1 file changed, 259 insertions(+), 34 deletions(-)

diff --git a/packages/nuxt/test/runtime/plugins/client.test.ts b/packages/nuxt/test/runtime/plugins/client.test.ts
index 0363ea9c1b94..16890e7be620 100644
--- a/packages/nuxt/test/runtime/plugins/client.test.ts
+++ b/packages/nuxt/test/runtime/plugins/client.test.ts
@@ -1,58 +1,283 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-import plugin from '../../../src/runtime/plugins/sentry.client';
-import { reportNuxtError } from '../../../src/runtime/utils';
+import type { Client } from '@sentry/core';
+import type { isNuxtError as nuxtIsNuxtError, NuxtApp } from 'nuxt/app';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import clientPlugin from '../../../src/runtime/plugins/sentry.client';
+import * as utils from '../../../src/runtime/utils';
 
-vi.mock('nuxt/app', () => ({
-  defineNuxtPlugin: (plugin: unknown) => plugin,
-  isNuxtError: (error: unknown) => !!error && typeof error === 'object' && '__nuxt_error' in error,
+const getClient = vi.hoisted(() => vi.fn<() => Client | undefined>());
+const browserTracingIntegration = vi.hoisted(() => vi.fn());
+const vueIntegration = vi.hoisted(() => vi.fn());
+const createVueRouteProvider = vi.hoisted(() => vi.fn());
+const getRouteProvider = vi.hoisted(() => vi.fn());
+const setRouteProvider = vi.hoisted(() => vi.fn());
+
+const nuxtVueOptions = vi.hoisted(() => ({
+  trackComponents: ['NuxtApp'],
+  attachProps: false,
+}));
+const globalObj = vi.hoisted(() => ({
+  _sentryNuxtVueIntegrationOptions: nuxtVueOptions,
 }));
 
-vi.mock('../../../src/runtime/utils', () => ({
-  reportNuxtError: vi.fn(),
+vi.mock(import('@sentry/core'), async importOriginal => {
+  const mod = await importOriginal();
+  return {
+    ...mod,
+    getClient: getClient as typeof mod.getClient,
+    GLOBAL_OBJ: globalObj as never,
+  };
+});
+
+vi.mock(import('@sentry/vue'), async importOriginal => {
+  const mod = await importOriginal();
+  return {
+    ...mod,
+    browserTracingIntegration,
+    vueIntegration,
+    _INTERNAL_createVueRouteProvider: createVueRouteProvider,
+    getRouteProvider,
+    setRouteProvider,
+  };
+});
+
+vi.mock(import('nuxt/app'), () => ({
+  defineNuxtPlugin: vi.fn(plugin => plugin),
+  isNuxtError: vi.fn(() => false) as unknown as typeof nuxtIsNuxtError,
 }));
 
-type Hook = (...args: unknown[]) => void;
+type PluginSetup = NonNullable<typeof clientPlugin.setup>;
 
-async function setupHook(hookName: string): Promise<Hook> {
-  const hooks: Record<string, Hook> = {};
-  const nuxtApp = { hook: (name: string, hook: Hook) => (hooks[name] = hook) };
-  await (plugin as unknown as { setup: (app: unknown) => Promise<void> }).setup(nuxtApp);
-  expect(hooks).toHaveProperty(hookName);
-  return hooks[hookName]!;
+type NuxtPluginShape = { setup: PluginSetup };
+
+type MockNuxtApp = NuxtApp & { hook: ReturnType<typeof vi.fn> };
+
+function makeClient(overrides: Partial<Client> = {}): Client {
+  return {
+    addIntegration: vi.fn(),
+    getOptions: vi.fn(() => ({ attachProps: true })),
+    ...overrides,
+  } as unknown as Client;
 }
 
-function nuxtError(statusCode: number): Error {
-  return Object.assign(new Error(`status ${statusCode}`), { __nuxt_error: true, statusCode });
+function makeNuxtApp(router?: unknown): MockNuxtApp {
+  return (router === undefined ? { hook: vi.fn() } : { $router: router, hook: vi.fn() }) as unknown as MockNuxtApp;
 }
 
-describe('sentry client plugin error hooks', () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
+describe('Sentry Nuxt client plugin', () => {
+  afterEach(() => {
+    vi.resetAllMocks();
+  });
+
+  describe('route provider setup', () => {
+    it('installs a Vue route provider when a Nuxt router is present and none is set', async () => {
+      const router = { beforeEach: vi.fn(), onError: vi.fn() };
+      const client = makeClient();
+      const provider = { resolveRoute: vi.fn(), resolveCurrentRoute: vi.fn() };
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue(undefined);
+      createVueRouteProvider.mockReturnValue(provider);
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp(router));
+
+      expect(createVueRouteProvider).toHaveBeenCalledWith(expect.any(Function));
+      expect(setRouteProvider).toHaveBeenCalledWith(provider, client);
+    });
+
+    it('does not override a user-supplied route provider', async () => {
+      const client = makeClient();
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue({ resolveRoute: () => '/u', resolveCurrentRoute: () => '/u' });
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp({}));
+
+      expect(createVueRouteProvider).not.toHaveBeenCalled();
+      expect(setRouteProvider).not.toHaveBeenCalled();
+    });
+
+    it('skips route provider setup without an initialized client', async () => {
+      getClient.mockReturnValue(undefined);
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp({}));
+
+      expect(createVueRouteProvider).not.toHaveBeenCalled();
+      expect(setRouteProvider).not.toHaveBeenCalled();
+    });
+
+    it('skips route provider setup without a $router on the Nuxt app', async () => {
+      const client = makeClient();
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue(undefined);
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp());
+
+      expect(createVueRouteProvider).not.toHaveBeenCalled();
+      expect(setRouteProvider).not.toHaveBeenCalled();
+    });
   });
 
-  it.each(['app:error', 'vue:error'])('does not report 3xx/4xx Nuxt errors from %s', async hookName => {
-    const hook = await setupHook(hookName);
+  describe('browser tracing integration', () => {
+    it('adds browserTracingIntegration with the Nuxt router and path-based labels', async () => {
+      const router = { beforeEach: vi.fn(), onError: vi.fn() };
+      const integration = { name: 'BrowserTracing' };
+      const client = makeClient();
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue(undefined);
+      browserTracingIntegration.mockReturnValue(integration);
 
-    hook(nuxtError(404));
-    hook(nuxtError(301));
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp(router));
 
-    expect(reportNuxtError).not.toHaveBeenCalled();
+      expect(browserTracingIntegration).toHaveBeenCalledWith({ router, routeLabel: 'path' });
+      expect(client.addIntegration).toHaveBeenCalledWith(integration);
+    });
+
+    it('does not add browserTracingIntegration without an initialized client', async () => {
+      getClient.mockReturnValue(undefined);
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp({ beforeEach: vi.fn() }));
+
+      expect(browserTracingIntegration).not.toHaveBeenCalled();
+    });
+
+    it('does not add browserTracingIntegration when the Nuxt app has no router', async () => {
+      const client = makeClient();
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue(undefined);
+
+      await (clientPlugin as NuxtPluginShape).setup(makeNuxtApp());
+
+      expect(browserTracingIntegration).not.toHaveBeenCalled();
+    });
   });
 
-  it.each(['app:error', 'vue:error'])('reports 5xx Nuxt errors from %s', async hookName => {
-    const hook = await setupHook(hookName);
+  describe('app:created hook — Vue integration', () => {
+    it('adds the Nuxt-specific Vue integration with attachErrorHandler disabled and merges GLOBAL_OBJ-provided options', async () => {
+      const client = makeClient();
+      const integration = { name: 'NuxtVueIntegration' };
+      const vueApp = { Symbol: 'app' };
+      getClient.mockReturnValue(client);
+      getRouteProvider.mockReturnValue(undefined);
+      vueIntegration.mockReturnValue(integration);
+
+      const nuxtApp = makeNuxtApp();
+      await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+      const appCreatedCall = nuxtApp.hook.mock.calls.find(c => c[0] === 'app:created');
+      expect(appCreatedCall).toBeTruthy();
+      const appCreatedCb = appCreatedCall![1] as (app: unknown) => void;
+      appCreatedCb(vueApp);
+
+      // Nuxt-specific: _sentryNuxtVueIntegrationOptions from GLOBAL_OBJ must
+      // flow into vueIntegration alongside the fixed Nuxt options.
+      expect(vueIntegration).toHaveBeenCalledWith(
+        expect.objectContaining({
+          app: vueApp,
+          attachErrorHandler: false,
+          trackComponents: nuxtVueOptions.trackComponents,
+          attachProps: nuxtVueOptions.attachProps,
+        }),
+      );
+      expect(client.addIntegration).toHaveBeenCalledWith(integration);
+    });
+
+    it('does not add the Vue integration when the client is gone by the time the hook fires', async () => {
+      const client = makeClient();
+      getClient.mockReturnValueOnce(client);
+      getRouteProvider.mockReturnValue(undefined);
+
+      const nuxtApp = makeNuxtApp();
+      await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+
+      // Second getClient call (inside the hook) returns undefined — simulates teardown.
+      getClient.mockReturnValueOnce(undefined);
+      const appCreatedCb = nuxtApp.hook.mock.calls.find(c => c[0] === 'app:created')?.[1] as (app: unknown) => void;
+      appCreatedCb({});
+
+      expect(vueIntegration).not.toHaveBeenCalled();
+    });
+  });
+
+  describe.each(['app:error', 'vue:error'] as const)('%s hook — status-code filtering', hookName => {
+    const fireHook = (nuxtApp: { hook: ReturnType<typeof vi.fn> }, error: unknown) => {
+      const cb = nuxtApp.hook.mock.calls.find(c => c[0] === hookName)?.[1] as (
+        e: unknown,
+        instance?: unknown,
+        info?: string,
+      ) => void;
+      // vue:error carries (error, instance, info); app:error only (error). The
+      // plugin passes the extra args through for vue:error, so include them
+      // uniformly here and rely on expect.objectContaining({ error }) below.
+      cb(error, undefined, 'setup');
+    };
+
+    // The plugin's skip guard reads `error.status || error.statusCode`, so both
+    // field names in the 3xx/4xx range must be covered.
+    it.each([{ status: 404 }, { status: 301 }, { statusCode: 404 }, { statusCode: 301 }])(
+      'skips reporting when a Nuxt error carries %o',
+      async errorShape => {
+        const { isNuxtError } = await import('nuxt/app');
+        const reportSpy = vi.spyOn(utils, 'reportNuxtError').mockImplementation(() => {});
+        vi.mocked(isNuxtError).mockReturnValue(true);
+        getClient.mockReturnValue(makeClient());
+        getRouteProvider.mockReturnValue(undefined);
+
+        const nuxtApp = makeNuxtApp();
+        await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+        fireHook(nuxtApp, errorShape);
+
+        expect(reportSpy).not.toHaveBeenCalled();
+      },
+    );
+
+    it('reports a Nuxt error when the status code is 5xx', async () => {
+      const { isNuxtError } = await import('nuxt/app');
+      const reportSpy = vi.spyOn(utils, 'reportNuxtError').mockImplementation(() => {});
+      vi.mocked(isNuxtError).mockReturnValue(true);
+      getClient.mockReturnValue(makeClient());
+      getRouteProvider.mockReturnValue(undefined);
+
+      const nuxtApp = makeNuxtApp();
+      await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+      const err = { statusCode: 503, message: 'bad gateway' };
+      fireHook(nuxtApp, err);
+
+      expect(reportSpy).toHaveBeenCalledWith(expect.objectContaining({ error: err }));
+    });
+
+    // Non-Nuxt error carrying a 4xx statusCode exercises the `isNuxtError`
+    // guard directly — without the guard this would be skipped as 4xx.
+    it('reports a non-Nuxt error even when it carries a 4xx statusCode', async () => {
+      const { isNuxtError } = await import('nuxt/app');
+      const reportSpy = vi.spyOn(utils, 'reportNuxtError').mockImplementation(() => {});
+      vi.mocked(isNuxtError).mockReturnValue(false);
+      getClient.mockReturnValue(makeClient());
+      getRouteProvider.mockReturnValue(undefined);
 
-    hook(nuxtError(503));
+      const nuxtApp = makeNuxtApp();
+      await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+      const err = Object.assign(new Error('boom'), { statusCode: 404 });
+      fireHook(nuxtApp, err);
 
-    expect(reportNuxtError).toHaveBeenCalledTimes(1);
+      expect(reportSpy).toHaveBeenCalledWith(expect.objectContaining({ error: err }));
+    });
   });
 
-  it('reports errors that are not Nuxt errors from vue:error', async () => {
-    const hook = await setupHook('vue:error');
-    const error = Object.assign(new Error('boom'), { statusCode: 404 });
+  describe('vue:error hook — component instance passthrough', () => {
+    it('forwards the error, component instance and info to reportNuxtError', async () => {
+      const reportSpy = vi.spyOn(utils, 'reportNuxtError').mockImplementation(() => {});
+      getClient.mockReturnValue(makeClient());
+      getRouteProvider.mockReturnValue(undefined);
 
-    hook(error, undefined, 'setup function');
+      const nuxtApp = makeNuxtApp();
+      await (clientPlugin as NuxtPluginShape).setup(nuxtApp);
+      const vueErrorCb = nuxtApp.hook.mock.calls.find(c => c[0] === 'vue:error')?.[1] as (
+        e: unknown,
+        instance: unknown,
+        info: string,
+      ) => void;
+      const err = new Error('vue boom');
+      const instance = { $props: { foo: 1 } };
+      vueErrorCb(err, instance, 'render');
 
-    expect(reportNuxtError).toHaveBeenCalledWith({ error, instance: undefined, info: 'setup function' });
+      expect(reportSpy).toHaveBeenCalledWith({ error: err, instance, info: 'render' });
+    });
   });
 });

From 36e3e9e2f3321405c1df5706302abca39de0485a Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Mon, 2 Nov 2026 21:37:38 +0100
Subject: [PATCH 087/169] chore: Refresh Smithy deprecation metadata in
 lockfile (#25971)

**Why:** Fresh installs add upstream deprecation metadata for two Smithy
packages, causing the lockfile stability check to fail and blocking CI.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 pnpm-lock.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 462fb89b83ca..52d0d8082991 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -8542,6 +8542,7 @@ packages:
   '@smithy/core@3.37.0':
     resolution: {integrity: sha512-97imTcCyiPd8k0e9+ts/Sp0W65Dn9Ti357J7M09Ov4tI8Q1JDJVFSoAJtjEVKqfHEr3Pdo2jfolqKCaaiszH0g==}
     engines: {node: '>=18.0.0'}
+    deprecated: Deprecated due to a bug in custom logger data redaction. See https://github.com/aws/aws-sdk-js-v3/issues/8393.
 
   '@smithy/credential-provider-imds@4.5.2':
     resolution: {integrity: sha512-A9uSdn72ozbRUSit0eib0TW7nXuNPlaeM0zcGkJ+nE6tFcSDbnmtwoxbTCFBukVQcszDAyvsd7+rTduPTXpygg==}
@@ -8630,6 +8631,7 @@ packages:
   '@smithy/smithy-client@4.12.13':
     resolution: {integrity: sha512-y/Pcj1V9+qG98gyu1gvftHB7rDpdh+7kIBIggs55yGm3JdtBV8GT8IFF3a1qxZ79QnaJHX9GXzvBG6tAd+czJA==}
     engines: {node: '>=18.0.0'}
+    deprecated: Deprecated due to a bug in custom logger data redaction. See https://github.com/aws/aws-sdk-js-v3/issues/8393.
 
   '@smithy/types@4.19.0':
     resolution: {integrity: sha512-r7jh49VJxGerfAcTQA6gXcKc+98zOp/tqRwzYjgOE+iSQsP6cEU1hq2QzbuipmP68QtYdY9wKEhiCQZIzHgZ4Q==}

From 4a6b7c3ea6b0ea2fdd7fa9261a1932b19c8bb990 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Mon, 2 Nov 2026 21:38:59 +0100
Subject: [PATCH 088/169] ci: Include v10 in base-branch metadata (#25977)

**Why:** `v10` is missing from the base-branch metadata skipping some
workflows.

This needs backporting to take effect on the v10 branch:
https://github.com/getsentry/sentry-javascript/pull/25978

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .github/workflows/ci-metadata.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci-metadata.yml b/.github/workflows/ci-metadata.yml
index ed114f394a19..f93c93c296c3 100644
--- a/.github/workflows/ci-metadata.yml
+++ b/.github/workflows/ci-metadata.yml
@@ -11,7 +11,7 @@ on:
         description: 'Short SHA + commit message for display'
         value: ${{ jobs.get_metadata.outputs.commit_label }}
       is_base_branch:
-        description: 'Whether the ref is develop, v9, or v8'
+        description: 'Whether the ref is develop, v10, v9, or v8'
         value: ${{ jobs.get_metadata.outputs.is_base_branch }}
       is_release:
         description: 'Whether the ref is a release branch'
@@ -81,7 +81,8 @@ jobs:
       commit_label: '${{ env.COMMIT_SHA }}: ${{ env.COMMIT_MESSAGE }}'
       # Note: These next three have to be checked as strings ('true'/'false')!
       is_base_branch:
-        ${{ github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/v9' || github.ref == 'refs/heads/v8'}}
+        ${{ github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/v10' || github.ref == 'refs/heads/v9' ||
+        github.ref == 'refs/heads/v8'}}
       is_release: ${{ startsWith(github.ref, 'refs/heads/release/') }}
       changed_ci: ${{ steps.changed.outputs.workflow == 'true' }}
       changed_any_code: ${{ steps.changed.outputs.any_code == 'true' }}

From bbb6c119316def8bb2b7f6c702fbb1d2f1cc96c7 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Mon, 2 Nov 2026 21:39:16 +0100
Subject: [PATCH 089/169] test(bundler-plugins): Stabilize missing-parser test
 setup (#25972)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Load the annotation hooks in `beforeEach` so module loading
doesn’t consume the test’s five-second timeout. Import the hooks
directly to avoid loading unrelated bundler-plugin code, while resetting
module state between tests so each can verify the warning is emitted
once.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../component-annotation-parser-unavailable.test.ts  | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/packages/bundler-plugins/test/core/component-annotation-parser-unavailable.test.ts b/packages/bundler-plugins/test/core/component-annotation-parser-unavailable.test.ts
index fc60b926ddf9..9d845f28fc49 100644
--- a/packages/bundler-plugins/test/core/component-annotation-parser-unavailable.test.ts
+++ b/packages/bundler-plugins/test/core/component-annotation-parser-unavailable.test.ts
@@ -1,5 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 
+import type * as ComponentAnnotateHooks from '../../src/core/component-annotate-hooks';
 import type * as ComponentAnnotation from '../../src/core/component-annotation-oxc';
 
 vi.mock('../../src/core/component-annotation-oxc', async importOriginal => {
@@ -12,8 +13,11 @@ vi.mock('../../src/core/component-annotation-oxc', async importOriginal => {
 const MESSAGE = 'Could not load `oxc-parser` for this platform. React components will not be annotated.';
 
 describe('createComponentNameAnnotateHooks without a parser', () => {
-  beforeEach(() => {
+  let hooks: typeof ComponentAnnotateHooks;
+
+  beforeEach(async () => {
     vi.resetModules();
+    hooks = await import('../../src/core/component-annotate-hooks');
   });
 
   afterEach(() => {
@@ -21,9 +25,8 @@ describe('createComponentNameAnnotateHooks without a parser', () => {
   });
 
   it('leaves files unchanged and warns once through the logger', async () => {
-    const { createComponentNameAnnotateHooks } = await import('../../src/core');
     const logger = { info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() };
-    const { transform } = createComponentNameAnnotateHooks([], false, { logger });
+    const { transform } = hooks.createComponentNameAnnotateHooks([], false, { logger });
 
     await expect(transform('export const App = () => <div />;', '/src/app.jsx')).resolves.toBeNull();
     await expect(transform('export const Other = () => <span />;', '/src/other.jsx')).resolves.toBeNull();
@@ -33,11 +36,10 @@ describe('createComponentNameAnnotateHooks without a parser', () => {
   });
 
   it('warns once through the console across hooks created without a logger', async () => {
-    const { createComponentNameAnnotateHooks } = await import('../../src/core');
     const warn = vi.spyOn(console, 'warn').mockImplementation(() => {});
 
     for (const id of ['/src/app.jsx', '/src/other.jsx']) {
-      const { transform } = createComponentNameAnnotateHooks([], false);
+      const { transform } = hooks.createComponentNameAnnotateHooks([], false);
       await expect(transform('export const App = () => <div />;', id)).resolves.toBeNull();
     }
 

From e6ecc73a46019e0b648f18609c65105469998f84 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Mon, 2 Nov 2026 21:39:56 +0100
Subject: [PATCH 090/169] chore: Add Bugbot guidance for cold imports in tests
 (#25976)

**Why:** Add Bugbot guidance for avoidable cold imports inside timed
test callbacks, a recurring source of CI timeouts addressed in
[#25593](https://github.com/getsentry/sentry-javascript/pull/25593),
[#25811](https://github.com/getsentry/sentry-javascript/pull/25811),
[#25972](https://github.com/getsentry/sentry-javascript/pull/25972), and
[#25975](https://github.com/getsentry/sentry-javascript/pull/25975).

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .cursor/BUGBOT.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.cursor/BUGBOT.md b/.cursor/BUGBOT.md
index 4a9d0bd65ef4..afbd17c05ff9 100644
--- a/.cursor/BUGBOT.md
+++ b/.cursor/BUGBOT.md
@@ -103,6 +103,12 @@ Keep reviews high-signal. Prefer actionable, high-confidence findings over specu
   - Only waiting for a request, after an action is performed. Instead, start waiting, perform action, await request promise.
   - Race conditions when waiting on multiple requests. Ensure that waiting checks are unique enough and don't depend on a hard order when there's a chance that telemetry can be sent in arbitrary order.
   - Timeouts or sleeps in tests. Instead suggest concrete events or other signals to wait on.
+- Flag cold module loading inside timed test callbacks or their helpers when
+  it can safely run during collection or setup. It can exhaust the timeout
+  before the behavior under test runs. Prefer static imports, narrower
+  modules, or setup hooks while preserving isolation and mock order.
+  Preserve imports whose evaluation timing is itself being tested.
+  Only flag concrete avoidable loading, not dynamic imports in general.
 - Flag usage of `getFirstEnvelope*`, `getMultipleEnvelope*` or related test helpers in E2E tests. These are NOT reliable anymore. Instead suggest helpers like `waitForTransaction`, `waitForError`, `waitForSpans`, etc.
 - Flag any new or modified `docker-compose.yml` under `dev-packages/node-integration-tests/suites/` where a service does not define a `healthcheck:`. The runner uses `docker compose up --wait` and relies on healthchecks to know when services are actually ready; without one the test will race the service's startup.
 - Flag new Cloudflare tests that wrap the worker by hand with `withSentry`, `instrumentDurableObjectWithSentry`, `instrumentAgentWithSentry` or `instrumentWorkflowWithSentry`. This covers new suites under `dev-packages/cloudflare-integration-tests/suites/`, new E2E apps under `dev-packages/e2e-tests/test-applications/` that run on Cloudflare, and new Cloudflare variants of existing E2E apps (an entry in `sentryTest.variants` of the app's `package.json`, for example `hono-4 (cloudflare)`). App names do not always start with `cloudflare-`. Recommend the Sentry Cloudflare Vite plugin instead: `plugins: [cloudflare(), sentryCloudflareVitePlugin()]` in `vite.config.*` (`sentryCloudflareVitePlugin` from `@sentry/cloudflare/vite`), and the SDK options in an `instrument.server.ts` next to the worker entry that default-exports `defineCloudflareOptions(...)`. Do not flag tests whose purpose is to test one of these wrappers, or apps that do not build with Vite (for example Next.js on OpenNext).

From e6a7a4c1860865640f1f804199dbf358219e81d5 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Mon, 2 Nov 2026 21:54:03 +0100
Subject: [PATCH 091/169] test(browser): Stabilize long animation frame tests
 (#25974)

**Why:** Mouse-down and click can share a long animation frame, which
the SDK attributes to its first script instead of the click handler
these tests expect. Waiting for a frame boundary before mouse-up
isolates the click.

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
Co-authored-by: Abdelrahman Awad <abdelrahman.awad@sentry.io>
---
 .../test.ts                                        | 14 +++++++++++---
 .../long-tasks-and-animation-frame-enabled/test.ts |  9 ++++++---
 .../browser-integration-tests/utils/helpers.ts     |  9 +++++++++
 3 files changed, 26 insertions(+), 6 deletions(-)

diff --git a/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled-static/test.ts b/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled-static/test.ts
index 5881bf8b3ba0..72fce94d9815 100644
--- a/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled-static/test.ts
+++ b/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled-static/test.ts
@@ -10,7 +10,12 @@ import {
 import type { Route } from '@playwright/test';
 import { expect } from '@playwright/test';
 import { sentryTest } from '../../../../utils/fixtures';
-import { envelopeRequestParser, shouldSkipTracingTest, waitForTransactionRequest } from '../../../../utils/helpers';
+import {
+  envelopeRequestParser,
+  shouldSkipTracingTest,
+  waitForNextFrame,
+  waitForTransactionRequest,
+} from '../../../../utils/helpers';
 
 sentryTest(
   'should capture long animation frame for top-level script.',
@@ -83,8 +88,11 @@ sentryTest(
 
     await page.goto(url);
 
-    // trigger long animation frame function
-    await page.getByRole('button').click();
+    // Separate mousedown and click into different frames so LoAF reports the click handler.
+    await page.getByRole('button').hover();
+    await page.mouse.down();
+    await waitForNextFrame(page);
+    await page.mouse.up();
 
     const eventData = envelopeRequestParser(await promise);
 
diff --git a/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled/test.ts b/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled/test.ts
index 6a2638a61c45..93abdb679273 100644
--- a/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled/test.ts
+++ b/dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/long-tasks-and-animation-frame-enabled/test.ts
@@ -9,7 +9,7 @@ import {
 import type { Route } from '@playwright/test';
 import { expect } from '@playwright/test';
 import { sentryTest } from '../../../../utils/fixtures';
-import { shouldSkipTracingTest } from '../../../../utils/helpers';
+import { shouldSkipTracingTest, waitForNextFrame } from '../../../../utils/helpers';
 import { collectStreamedSpans, getSpanOp, waitForStreamedSpan } from '../../../../utils/spanUtils';
 
 sentryTest(
@@ -83,8 +83,11 @@ sentryTest('captures long animation frame span for event listener.', async ({ br
 
   await page.goto(url);
 
-  // trigger long animation frame function
-  await page.getByRole('button').click();
+  // Separate mousedown and click into different frames so LoAF reports the click handler.
+  await page.getByRole('button').hover();
+  await page.mouse.down();
+  await waitForNextFrame(page);
+  await page.mouse.up();
 
   const pageloadSpan = await pageloadSpanPromise;
   await page.evaluate(() => (window as any).Sentry.flush());
diff --git a/dev-packages/browser-integration-tests/utils/helpers.ts b/dev-packages/browser-integration-tests/utils/helpers.ts
index 90b3deae3cb9..60df3fd96eb2 100644
--- a/dev-packages/browser-integration-tests/utils/helpers.ts
+++ b/dev-packages/browser-integration-tests/utils/helpers.ts
@@ -564,6 +564,15 @@ export async function waitForLcpCandidate(page: Page, selector: string): Promise
   });
 }
 
+/**
+ * Resolves after the current frame has been presented (double rAF).
+ */
+export async function waitForNextFrame(page: Page): Promise<void> {
+  await page.evaluate(
+    () => new Promise<void>(resolve => requestAnimationFrame(() => requestAnimationFrame(() => resolve()))),
+  );
+}
+
 export async function hidePage(page: Page, interactionSelector?: string): Promise<void> {
   // web-vitals processes an interaction's event entries in `requestIdleCallback(..., { timeout:
   // 1000 })`, and Chromium only reaches idle here once that timeout elapses. Hiding before that

From dd9903c8332cd157fbdbb90c9affe27e43570307 Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Mon, 2 Nov 2026 16:28:42 -0500
Subject: [PATCH 092/169] test(nuxt): Make the `nuxt-5 (tunnel-dev)` e2e
 variant optional (#26004)

`nitro@3.0.261102-rc` broke loading `nitro/h3` in `nuxt dev`, which
failed the required `nuxt-5 (tunnel-dev)` job on every PR, fixed by
moving that variant to the optional matrix until Nitro fixes it.
---
 dev-packages/e2e-tests/test-applications/nuxt-5/package.json | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/package.json b/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
index bb03b840799c..955eb6c13c2d 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
@@ -47,7 +47,9 @@
         "build-command": "pnpm test:build:tunnel-basepath",
         "assert-command": "pnpm test:assert:tunnel-basepath",
         "label": "nuxt-5 (tunnel-basepath)"
-      },
+      }
+    ],
+    "optionalVariants": [
       {
         "build-command": "pnpm install",
         "assert-command": "pnpm test:assert:tunnel-dev",

From 41894d9267ce61610cbb67f0d0a51c246d74950d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 08:11:55 +0100
Subject: [PATCH 093/169] ci(deps): Bump getsentry/craft from 2.31.2 to 3.4.0
 (#25987)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.31.2
to 3.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/releases">getsentry/craft's
releases</a>.</em></p>
<blockquote>
<h2>3.4.0</h2>
<p>Preview release workflows now handle workspace paths precisely,
report version policies, and emit structured JSON for developers.</p>
<h3>New Features ✨</h3>
<p>Preview release PRs across workspaces with scoped path handling,
version-policy reporting, and structured JSON output.</p>
<ul>
<li>(changelog) Preview PRs in every release workspace they land in by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/942">#942</a></li>
</ul>
<h2>3.3.0</h2>
<p>Workspace settings expose more package detail, while scoped packing
and version bumps prevent unrelated package changes in monorepos.</p>
<h3>New Features ✨</h3>
<p>Workspace settings now expand package details, while NuGet packing
stays scoped to the selected workspace.</p>
<ul>
<li>(config) Expand workspace placeholders in release workspace settings
by <a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/939">#939</a></li>
<li>(nuget) Scope workspace expansion to the selected release workspace
by <a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/940">#940</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<p>Version bumps now target selected release workspaces, preventing
unrelated package changes in monorepos.</p>
<ul>
<li>(prepare) Run automatic version bumps in the selected workspace by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/938">#938</a></li>
</ul>
<h2>3.2.0</h2>
<p>Contributor attribution now recognizes co-authors and bot assistance
while preserving merge-credit rules, and documentation clarifies Craft
usage, targets, and GitHub Actions settings.</p>
<h3>New Features ✨</h3>
<p>Changelog credit now includes co-authors and bot-assisted
contributions, while preserving author-only credit for merge commits
without co-author trailers.</p>
<ul>
<li>(changelog) Credit commit co-authors and add hide_authors by <a
href="https://github.com/jan-auer"><code>@​jan-auer</code></a> and <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/934">#934</a></li>
</ul>
<h3>Documentation 📚</h3>
<p>Documentation now separates Craft installation, workflows,
configuration, and CLI guidance while clarifying target options and
previously missing GitHub Actions settings.</p>
<ul>
<li>Restructure docs around Craft concepts instead of targets by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/935">#935</a></li>
</ul>
<h2>3.1.0</h2>
<p>Workspace-aware release labeling, clearer AI summaries, safer
dependency handling, and stricter configuration validation improve
changelog clarity and upgrade safety.</p>
<h3>New Features ✨</h3>
<p>GitHub release titles now reflect workspace tag prefixes for
versioned changelog headings, while other release titles remain
unchanged.</p>
<ul>
<li>(github) Prefix release titles with the workspace tag prefix by <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/926">#926</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/blob/master/CHANGELOG.md">getsentry/craft's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>3.5.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(targets) Add mcp-registry target for the official MCP Registry by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/945">#945</a></li>
</ul>
<h2>3.4.1</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(prepare) Emit the release branch targets for the publish request by
<a href="https://github.com/ric-oliv"><code>@​ric-oliv</code></a> with
<a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/943">#943</a></li>
</ul>
<h2>3.4.0</h2>
<p>Preview release workflows now handle workspace paths precisely,
report version policies, and emit structured JSON for developers.</p>
<h3>New Features ✨</h3>
<p>Preview release PRs across workspaces with scoped path handling,
version-policy reporting, and structured JSON output.</p>
<ul>
<li>(changelog) Preview PRs in every release workspace they land in by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/942">#942</a></li>
</ul>
<h2>3.3.0</h2>
<p>Workspace settings expose more package detail, while scoped packing
and version bumps prevent unrelated package changes in monorepos.</p>
<h3>New Features ✨</h3>
<p>Workspace settings now expand package details, while NuGet packing
stays scoped to the selected workspace.</p>
<ul>
<li>(config) Expand workspace placeholders in release workspace settings
by <a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/939">#939</a></li>
<li>(nuget) Scope workspace expansion to the selected release workspace
by <a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/940">#940</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<p>Version bumps now target selected release workspaces, preventing
unrelated package changes in monorepos.</p>
<ul>
<li>(prepare) Run automatic version bumps in the selected workspace by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/938">#938</a></li>
</ul>
<h2>3.2.0</h2>
<p>Contributor attribution now recognizes co-authors and bot assistance
while preserving merge-credit rules, and documentation clarifies Craft
usage, targets, and GitHub Actions settings.</p>
<h3>New Features ✨</h3>
<p>Changelog credit now includes co-authors and bot-assisted
contributions, while preserving author-only credit for merge commits
without co-author trailers.</p>
<ul>
<li>(changelog) Credit commit co-authors and add hide_authors by <a
href="https://github.com/jan-auer"><code>@​jan-auer</code></a> and <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/934">#934</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/craft/commit/4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb"><code>4a8dba2</code></a>
release: 3.4.0</li>
<li><a
href="https://github.com/getsentry/craft/commit/ef9e8e0405c5d27e79594724d875dd116a3c0b40"><code>ef9e8e0</code></a>
feat(changelog): Preview PRs in every release workspace they land in (<a
href="https://redirect.github.com/getsentry/craft/issues/942">#942</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/1806f23a7b78979020f50198095c75e69a477084"><code>1806f23</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/de141621b4a00d6452532de400bc652673ef572d"><code>de14162</code></a>
Merge commit '4b763f5419255bb520e3e5a49f5b91426dcd374d'</li>
<li><a
href="https://github.com/getsentry/craft/commit/4b763f5419255bb520e3e5a49f5b91426dcd374d"><code>4b763f5</code></a>
release: 3.3.0</li>
<li><a
href="https://github.com/getsentry/craft/commit/64ef41a9bf934f5c81382570680edec162c41002"><code>64ef41a</code></a>
feat(nuget): Scope workspace expansion to the selected release workspace
(<a
href="https://redirect.github.com/getsentry/craft/issues/940">#940</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/db768ae1b95c327a47d25c067a66ede2c180d58c"><code>db768ae</code></a>
feat(config): Expand workspace placeholders in release workspace
settings (<a
href="https://redirect.github.com/getsentry/craft/issues/939">#939</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/2d8180c27c47e2a608951ad1d9c68280248f8fd7"><code>2d8180c</code></a>
fix(prepare): Run automatic version bumps in the selected workspace (<a
href="https://redirect.github.com/getsentry/craft/issues/938">#938</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/fbd52298081bd856feb79e79a808ffc2a208f845"><code>fbd5229</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/a5412e83c0a7fbf22b88402dbebb7fdb77a07a3e"><code>a5412e8</code></a>
Merge commit '439259d80235250856fefffa4b47447f9b97f82f'</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/craft/compare/25028d0646040cc0a669ae3314cbf884f4c4347a...4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=getsentry/craft&package-manager=github_actions&previous-version=2.31.2&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Martin Sonnberger <martin.sonnberger@sentry.io>
---
 .github/workflows/auto-release.yml | 2 +-
 .github/workflows/release.yml      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index 38802d1c0ad6..c32aba007628 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -55,7 +55,7 @@ jobs:
           node-version-file: 'package.json'
 
       - name: Prepare release
-        uses: getsentry/craft@25028d0646040cc0a669ae3314cbf884f4c4347a # v2.31.2
+        uses: getsentry/craft@4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb # v3.4.0
         if:
           github.event.pull_request.merged == true && steps.version-regex.outputs.match != '' &&
           steps.get_version.outputs.version != ''
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e579c239dcfe..d9e59cbc284b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,7 +39,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Prepare release
-        uses: getsentry/craft@25028d0646040cc0a669ae3314cbf884f4c4347a # v2.31.2
+        uses: getsentry/craft@4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb # v3.4.0
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with:

From b61bd60143a8806dc4f0e3721132f3e6cbecd02d Mon Sep 17 00:00:00 2001
From: Vladimir Babin <vovababin@gmail.com>
Date: Tue, 3 Nov 2026 16:22:55 +0800
Subject: [PATCH 094/169] fix(core): preserve span links through beforeSendSpan
 (#25566)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #25545

## Problem

Setting `beforeSendSpan` — even an identity callback `(span) => span` —
drops the root span's `contexts.trace.links` from every transaction, so
the `previous_trace` link is lost and the trace view no longer links to
the previous trace.

In `processBeforeSend`, the root span goes through
`beforeSendSpan(convertTransactionEventToSpanJson(event))` and the
result is merged back with `merge(event,
convertSpanJsonToTransactionEvent(result))`. The two converters in
`packages/core/src/utils/transactionEvent.ts` never copied `links`, and
`merge` (default depth 2) replaces `contexts.trace` whole, so the links
set by `spanToTransactionTraceContext` are discarded. Thanks to
@arobison for the detailed root-cause trace in the issue.

## Fix

Carry `links` through both conversions. `TraceContext.links` and
`SpanJSON.links` are both `SpanLinkJSON[]`, so this is a direct
pass-through.

## Tests

Extended the existing `transactionEvent.test.ts` round-trip cases
(`convertTransactionEventToSpanJson` and
`convertSpanJsonToTransactionEvent`) to assert `links` (including a
`previous_trace` link) survive.

---------

Co-authored-by: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/core/src/utils/transactionEvent.ts   |  4 ++-
 packages/core/test/lib/client.test.ts         | 31 ++++++++++++++++++
 .../test/lib/utils/transactionEvent.test.ts   | 32 +++++++++++++++++++
 3 files changed, 66 insertions(+), 1 deletion(-)

diff --git a/packages/core/src/utils/transactionEvent.ts b/packages/core/src/utils/transactionEvent.ts
index 97bf3580ce8c..4a4fe979ab05 100644
--- a/packages/core/src/utils/transactionEvent.ts
+++ b/packages/core/src/utils/transactionEvent.ts
@@ -6,7 +6,7 @@ import type { SpanJSON } from '../types/span';
  * Converts a transaction event to a span JSON object.
  */
 export function convertTransactionEventToSpanJson(event: TransactionEvent): SpanJSON {
-  const { trace_id, parent_span_id, span_id, status, origin, data, op } = event.contexts?.trace ?? {};
+  const { trace_id, parent_span_id, span_id, status, origin, data, op, links } = event.contexts?.trace ?? {};
 
   return {
     data: data ?? {},
@@ -19,6 +19,7 @@ export function convertTransactionEventToSpanJson(event: TransactionEvent): Span
     timestamp: event.timestamp,
     trace_id: trace_id ?? '',
     origin,
+    links,
     profile_id: data?.[SENTRY_PROFILE_ID] as string | undefined,
     exclusive_time: data?.[SENTRY_EXCLUSIVE_TIME] as number | undefined,
     measurements: event.measurements,
@@ -43,6 +44,7 @@ export function convertSpanJsonToTransactionEvent(span: SpanJSON): TransactionEv
         op: span.op,
         status: span.status,
         origin: span.origin,
+        links: span.links,
         data: {
           ...span.data,
           ...(span.profile_id && { [SENTRY_PROFILE_ID]: span.profile_id }),
diff --git a/packages/core/test/lib/client.test.ts b/packages/core/test/lib/client.test.ts
index 0d3117f7ac4a..5d06b33e40d7 100644
--- a/packages/core/test/lib/client.test.ts
+++ b/packages/core/test/lib/client.test.ts
@@ -1636,6 +1636,37 @@ describe('Client', () => {
       });
     });
 
+    test('keeps root span links on the sent transaction with `beforeSendSpan`', () => {
+      const beforeSendSpan = withStaticSpan(vi.fn((span: SpanJSON) => span));
+      const options = getDefaultTestClientOptions({ dsn: PUBLIC_DSN, beforeSendSpan });
+      const client = new TestClient(options);
+
+      const links = [
+        {
+          trace_id: '12312012123120121231201212312012',
+          span_id: '1231201212312012',
+          sampled: true,
+          attributes: { 'sentry.link.type': 'previous_trace' },
+        },
+      ];
+
+      client.captureEvent({
+        transaction: '/animals/are/great',
+        type: 'transaction',
+        spans: [],
+        contexts: {
+          trace: {
+            span_id: '9e15bf99fbe4bc80',
+            trace_id: '86f39e84263a4de99c326acab3bfe3bd',
+            links,
+          },
+        },
+      });
+
+      expect(beforeSendSpan).toHaveBeenCalledTimes(1);
+      expect(TestClient.instance!.event!.contexts?.trace?.links).toEqual(links);
+    });
+
     test('calls `beforeSendTransaction` and uses the modified event', () => {
       expect.assertions(2);
 
diff --git a/packages/core/test/lib/utils/transactionEvent.test.ts b/packages/core/test/lib/utils/transactionEvent.test.ts
index 03f1e231d975..062ec8aa41dc 100644
--- a/packages/core/test/lib/utils/transactionEvent.test.ts
+++ b/packages/core/test/lib/utils/transactionEvent.test.ts
@@ -48,6 +48,14 @@ describe('convertTransactionEventToSpanJson', () => {
             [SENTRY_EXCLUSIVE_TIME]: 123.45,
             other: 'value',
           },
+          links: [
+            {
+              span_id: 'linked-span',
+              trace_id: 'linked-trace',
+              sampled: true,
+              attributes: { 'sentry.link.type': 'previous_trace' },
+            },
+          ],
         },
       },
       start_timestamp: 1234567800,
@@ -74,6 +82,14 @@ describe('convertTransactionEventToSpanJson', () => {
       origin: 'manual',
       profile_id: 'profile123',
       exclusive_time: 123.45,
+      links: [
+        {
+          span_id: 'linked-span',
+          trace_id: 'linked-trace',
+          sampled: true,
+          attributes: { 'sentry.link.type': 'previous_trace' },
+        },
+      ],
       measurements: {
         fp: { value: 123, unit: 'millisecond' },
       },
@@ -142,6 +158,14 @@ describe('convertSpanJsonToTransactionEvent', () => {
       origin: 'manual',
       profile_id: 'profile123',
       exclusive_time: 123.45,
+      links: [
+        {
+          span_id: 'linked-span',
+          trace_id: 'linked-trace',
+          sampled: true,
+          attributes: { 'sentry.link.type': 'previous_trace' },
+        },
+      ],
       measurements: {
         fp: { value: 123, unit: 'millisecond' },
       },
@@ -160,6 +184,14 @@ describe('convertSpanJsonToTransactionEvent', () => {
           op: 'http',
           status: 'ok',
           origin: 'manual',
+          links: [
+            {
+              span_id: 'linked-span',
+              trace_id: 'linked-trace',
+              sampled: true,
+              attributes: { 'sentry.link.type': 'previous_trace' },
+            },
+          ],
           data: {
             other: 'value',
             [SENTRY_PROFILE_ID]: 'profile123',

From 590d58c7aa6c2230716dbcc610c4d312ed56104c Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 09:36:15 +0100
Subject: [PATCH 095/169] docs(changelog): Restore order of unreleased section
 in changelog (#26006)

**Why:** The order of the unreleased section in the changelog was wrong
so the action to credit external contributors couldn't find the right
place to insert so it passed but no PR was opened. Fixing the order and
adding the missing entry.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 CHANGELOG.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c58c6b24ea5f..8efb65251493 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+- "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
+
+Work in this release was contributed by @lazerg, @chiliec, and @61465. Thank you for your contributions!
+
+### Important Changes
+
 - **ref(cloudflare): Use the shared request handler wrapper**
 
   Cloudflare Workers now use the same request handler wrapper as `Deno.serve` and `Bun.serve`. Changes for Cloudflare users:
@@ -12,10 +18,6 @@
   - Request spans now list every `Set-Cookie` header of a response, as on Deno and Bun.
   - Without `AsyncLocalStorage` (for example on Shopify Oxygen), events now also get the request URL and method.
 
-- "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
-
-### Important Changes
-
 - **feat(nestjs): Add an option to monitor every @Cron method ([#25471](https://github.com/getsentry/sentry-javascript/pull/25471))**
 
   Set `monitorCronJobs: true` on `nestIntegration()` to send check-ins for every `@Cron()` method, without adding `@SentryCron` to each one. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeCronJobs` to skip jobs by slug. Methods that also have `@SentryCron` check in once, with the slug and options passed to `@SentryCron`.
@@ -28,8 +30,6 @@
 
   When Next.js serves a page from its cache, for example an ISR page or a `cacheComponents` shell, the pageload now has the `page.server_rendering.type` attribute. It is `static` if the whole page came from the cache, and `partially_static` if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.
 
-Work in this release was contributed by @lazerg and @chiliec. Thank you for your contributions!
-
 ## 11.10.0
 
 ### Important Changes

From 441f49d06daaeee35ca9afd1df50ac3cbf9f1634 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 09:36:45 +0100
Subject: [PATCH 096/169] chore(dependabot): Remove obsolete update rules
 (#26007)

**Why:**
Remove some leftover dependabot rules:
- OTel instrumentation ignores only match excluded E2E apps.
- `react-router-dom` ignore/group rules only match excluded E2E apps.
- Supabase's Node 20 cap is obsolete; browser tests use Node 24.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index dc6184d29f3b..234cb38a94fc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,17 +13,10 @@ updates:
     schedule:
       interval: 'weekly'
     ignore:
-      - dependency-name: '@opentelemetry/instrumentation'
-      - dependency-name: '@opentelemetry/instrumentation-*'
       - dependency-name: 'typescript'
-      # 2.110.0 raised the engine requirement to Node >=22, while this repo runs Node 20.
-      - dependency-name: '@supabase/supabase-js'
-        versions: ['>=2.110.0']
       # Keep react-router dev dependencies on v7, so tests cover the older major.
       - dependency-name: 'react-router'
         update-types: ['version-update:semver-major']
-      - dependency-name: 'react-router-dom'
-        update-types: ['version-update:semver-major']
       - dependency-name: '@react-router/*'
         update-types: ['version-update:semver-major']
     groups:
@@ -36,7 +29,6 @@ updates:
       react-router:
         patterns:
           - 'react-router'
-          - 'react-router-dom'
           - '@react-router/*'
     versioning-strategy: increase
     commit-message:

From a0ff8aded8a713ee57d018aa728620b8bec1e1b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 09:46:35 +0100
Subject: [PATCH 097/169] ci(deps): Bump anthropics/claude-code-action from
 1.0.264 to 1.0.266 (#26008)

Bumps
[anthropics/claude-code-action](https://github.com/anthropics/claude-code-action)
from 1.0.264 to 1.0.266.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/claude-code-action/releases">anthropics/claude-code-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.266</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.265...v1.0.266">https://github.com/anthropics/claude-code-action/compare/v1.0.265...v1.0.266</a></p>
<h2>v1.0.265</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/anthropics/claude-code-action/compare/v1.0.264...v1.0.265">https://github.com/anthropics/claude-code-action/compare/v1.0.264...v1.0.265</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/d535f5172dec02b204866b393d6b20b9b2aaf98d"><code>d535f51</code></a>
chore: bump Claude Code to 2.1.316 and Agent SDK to 0.3.316</li>
<li><a
href="https://github.com/anthropics/claude-code-action/commit/6d5ae526d25ce88daa2200be073e1a373167f064"><code>6d5ae52</code></a>
chore: bump Claude Code to 2.1.314 and Agent SDK to 0.3.314</li>
<li>See full diff in <a
href="https://github.com/anthropics/claude-code-action/compare/d70510b174a1244958df0b03166a54912811f3e6...d535f5172dec02b204866b393d6b20b9b2aaf98d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anthropics/claude-code-action&package-manager=github_actions&previous-version=1.0.264&new-version=1.0.266)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/auto-fix-issue.yml          | 2 +-
 .github/workflows/dependabot-auto-triage.yml  | 4 ++--
 .github/workflows/track-framework-updates.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/auto-fix-issue.yml b/.github/workflows/auto-fix-issue.yml
index 146ab59d415f..d832fa29af15 100644
--- a/.github/workflows/auto-fix-issue.yml
+++ b/.github/workflows/auto-fix-issue.yml
@@ -77,7 +77,7 @@ jobs:
 
       - name: Try to fix the issue with Claude
         id: triage
-        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
+        uses: anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
diff --git a/.github/workflows/dependabot-auto-triage.yml b/.github/workflows/dependabot-auto-triage.yml
index c3efead14345..5a8f79e2c866 100644
--- a/.github/workflows/dependabot-auto-triage.yml
+++ b/.github/workflows/dependabot-auto-triage.yml
@@ -155,7 +155,7 @@ jobs:
           git config user.email "${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
 
       - name: Open batched runtime fix PR via skill
-        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
+        uses: anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
@@ -244,7 +244,7 @@ jobs:
           git config user.email "${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com"
 
       - name: Open batched dev fix PR via skill
-        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
+        uses: anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
diff --git a/.github/workflows/track-framework-updates.yml b/.github/workflows/track-framework-updates.yml
index 9b664d361078..d1660afaddef 100644
--- a/.github/workflows/track-framework-updates.yml
+++ b/.github/workflows/track-framework-updates.yml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Run Claude digest
         id: digest
-        uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
+        uses: anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d # v1
         env:
           ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:

From db1e22f2b3b5de1e8a225cc3877047c583a65717 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 10:21:31 +0100
Subject: [PATCH 098/169] ci(deps): Bump getsentry/craft from 3.4.0 to 3.5.0
 (#26011)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [getsentry/craft](https://github.com/getsentry/craft) from 3.4.0
to 3.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/releases">getsentry/craft's
releases</a>.</em></p>
<blockquote>
<h2>3.5.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(targets) Add mcp-registry target for the official MCP Registry by
<a href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/945">#945</a></li>
</ul>
<h2>3.4.1</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(prepare) Emit the release branch targets for the publish request by
<a href="https://github.com/ric-oliv"><code>@​ric-oliv</code></a> with
<a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/943">#943</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/blob/master/CHANGELOG.md">getsentry/craft's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>3.8.0</h2>
<p>Version bumps now update repository files more safely through
workspace-aware validation, preventing invalid paths and no-op
preparations from writing changes.</p>
<h3>New Features ✨</h3>
<p>Automatic version bumps now update repository files safely, with
workspace-aware configuration and strict validation before writes.</p>
<ul>
<li>(versioning) Update extra version files during automatic bumps by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/955">#955</a></li>
</ul>
<h2>3.7.1</h2>
<p>Dry-run versioning is more repeatable, while built-in development
bumps preserve output and avoid redundant post-release bumps after
pre-releases.</p>
<h3>Bug Fixes 🐛</h3>
<p>Dry-run version bumps stay isolated and repeat consistently without
checkout changes or temporary branch failures.</p>
<ul>
<li>(prepare) Keep dry-run version bumps in the worktree by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/954">#954</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<p>Release configuration now uses built-in development bumps, preserves
version output, and skips redundant bumps after pre-releases.</p>
<ul>
<li>Use built-in postReleaseBump for the development version by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/951">#951</a></li>
</ul>
<h2>3.7.0</h2>
<p>Publishing now automates development-version updates, while changelog
filtering keeps meaningful entries and omits generated bump commits.</p>
<h3>New Features ✨</h3>
<p>Publishing can automatically create, commit, rebase, and push a
development-version bump using configured versioning rules.</p>
<ul>
<li>(publish) Add built-in development version bump after release by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/950">#950</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<p>Changelog filtering preserves real entries by ignoring skip markers
in code while excluding Craft’s development-version bump commits.</p>
<ul>
<li>(changelog) Ignore #skip-changelog inside Markdown code by <a
href="https://github.com/BYK"><code>@​BYK</code></a> with <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/952">#952</a></li>
</ul>
<h2>3.6.0</h2>
<p>When matching tags are unavailable, Prepare now derives release-unit
versions from project files, enabling versioned releases without those
tags.</p>
<h3>New Features ✨</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/craft/commit/3f1f02d50b08b8c509a28d2cc2abf594e9a28011"><code>3f1f02d</code></a>
release: 3.5.0</li>
<li><a
href="https://github.com/getsentry/craft/commit/f87600056f105d327c2cb535623d9a6249336fba"><code>f876000</code></a>
feat(targets): Add mcp-registry target for the official MCP Registry (<a
href="https://redirect.github.com/getsentry/craft/issues/945">#945</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/2ef96942f2725e1128260cc1f6af78460c4dda2c"><code>2ef9694</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/af63a8f1e8c6c1873d1fd41ad2f740c4ca304cff"><code>af63a8f</code></a>
Merge commit '90e8e203ad86c8ab8ee134e8d387def13e620e81'</li>
<li><a
href="https://github.com/getsentry/craft/commit/90e8e203ad86c8ab8ee134e8d387def13e620e81"><code>90e8e20</code></a>
release: 3.4.1</li>
<li><a
href="https://github.com/getsentry/craft/commit/4a3ca2815bb9d44c5f841dd46c575110f3a25a5a"><code>4a3ca28</code></a>
fix(prepare): Emit the release branch targets for the publish request
(<a
href="https://redirect.github.com/getsentry/craft/issues/943">#943</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/b0a248d0b3c76f571011557e3cf484c9f264e1e7"><code>b0a248d</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/85d5701960f487d68d217a7ac23082f615fc0565"><code>85d5701</code></a>
Merge commit '4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb'</li>
<li>See full diff in <a
href="https://github.com/getsentry/craft/compare/4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb...3f1f02d50b08b8c509a28d2cc2abf594e9a28011">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=getsentry/craft&package-manager=github_actions&previous-version=3.4.0&new-version=3.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/auto-release.yml | 2 +-
 .github/workflows/release.yml      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index c32aba007628..aad81a1c4f3b 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -55,7 +55,7 @@ jobs:
           node-version-file: 'package.json'
 
       - name: Prepare release
-        uses: getsentry/craft@4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb # v3.4.0
+        uses: getsentry/craft@3f1f02d50b08b8c509a28d2cc2abf594e9a28011 # v3.5.0
         if:
           github.event.pull_request.merged == true && steps.version-regex.outputs.match != '' &&
           steps.get_version.outputs.version != ''
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d9e59cbc284b..ff44869570f5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,7 +39,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Prepare release
-        uses: getsentry/craft@4a8dba2a45b09f4e3fcfc86a79c94d0dd93295bb # v3.4.0
+        uses: getsentry/craft@3f1f02d50b08b8c509a28d2cc2abf594e9a28011 # v3.5.0
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with:

From 21ca39b62490111c7a0f05b85d3199f99a7d289e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 10:46:03 +0100
Subject: [PATCH 099/169] chore(deps-dev): Bump wrangler from 4.61.0 to 4.156.0
 (#26009)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler)
from 4.61.0 to 4.156.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cloudflare/workers-sdk/releases">wrangler's
releases</a>.</em></p>
<blockquote>
<h2>wrangler@4.156.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16532">#16532</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/25802bce9f605916239bfd4714263c88f9b3098b"><code>25802bc</code></a>
Thanks <a
href="https://github.com/simonha9"><code>@​simonha9</code></a>! - Allow
the experimental <code>wrangler d1 insights</code> command to run across
every D1 database in the account</p>
<p>The database name is now optional. With no name, the command returns
the top queries across every D1 database in the account, and each result
gains a <code>databaseId</code> field.</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16369">#16369</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/ec0bea48d6316c8ca893241efbf31f1ffcfa6134"><code>ec0bea4</code></a>
Thanks <a
href="https://github.com/MattieTK"><code>@​MattieTK</code></a>! - Stop
autoconfig in non-interactive runs when a project root holds both static
files and a Pages <code>functions</code> directory</p>
<p>When a project without a detected framework has a
<code>functions</code> directory, autoconfig asks whether it is a
Cloudflare Pages project. Non-interactive runs (CI and coding agents)
assume it is not and continue as a static site. When the static files
are in the project root, that deploys the root as static assets, and the
Pages Functions (the project's API routes) are not deployed.</p>
<p>In that case autoconfig now stops with an error explaining that Pages
Functions cannot be migrated automatically yet. For Pages Functions it
suggests moving the static files into a subdirectory and deploying with
<code>wrangler pages deploy</code>, or migrating the Functions to a
Worker; for a <code>functions</code> directory that is not Pages
Functions, it suggests moving the static files into a subdirectory or
adding a configuration file. Projects whose static files are already in
a subdirectory, projects detected as Pages or with a detected framework,
and interactive runs where the user answers the prompt are
unaffected.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16367">#16367</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/b4653b40cdc6e176c4e5ac98696cf0dae641ff6b"><code>b4653b4</code></a>
Thanks <a
href="https://github.com/MattieTK"><code>@​MattieTK</code></a>! - Write
a protective <code>.assetsignore</code> when autoconfig uses the project
root as the static assets directory</p>
<p>Autoconfig is meant to write an <code>.assetsignore</code> when the
project root itself is the assets directory, so that local files are not
uploaded as public assets. The check compared the detected output
directory, which is relative (<code>&quot;.&quot;</code>), with the
absolute project path, so it never matched and no
<code>.assetsignore</code> was written. A static project with an
<code>index.html</code> at its root (for example after <code>wrangler
setup</code> or a zero-config <code>wrangler deploy</code>) then
uploaded files such as <code>.env</code>, <code>.dev.vars</code>,
<code>.git</code> and <code>node_modules</code> as public assets.</p>
<p>The check now resolves the assets directory that the generated
configuration uses and compares it with the project root, so frameworks
that set their own build output directory (such as Nuxt or SvelteKit) do
not get an unused root <code>.assetsignore</code>. The generated
<code>.assetsignore</code> also covers what a Cloudflare Pages upload
skips, alongside the existing <code>.wrangler</code>,
<code>.dev.vars*</code> and <code>.env*</code> entries:
<code>/_worker.js</code>, <code>/_routes.json</code> and
<code>/functions</code> at the root (so nested paths such as
<code>blog/functions/index.html</code> are still uploaded),
<code>node_modules</code>, <code>.git</code> and <code>.DS_Store</code>
at any depth, and <code>.npmrc</code>. If an existing
<code>.assetsignore</code> only lists a narrower pattern such as
<code>.env</code>, <code>.env*</code> is added so that files like
<code>.env.production</code> are skipped too. When the project root of
an assets-only project contains a Pages <code>functions</code> directory
or <code>_worker.js</code>, autoconfig now warns that it will not be
deployed, since it is excluded from the assets and not run as server
code.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16532">#16532</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/25802bce9f605916239bfd4714263c88f9b3098b"><code>25802bc</code></a>
Thanks <a
href="https://github.com/simonha9"><code>@​simonha9</code></a>! - Fail
the experimental <code>wrangler d1 insights</code> command with an
actionable error when the GraphQL Analytics API rejects the request</p>
<p>Previously the command printed an empty <code>[]</code>. Rate limit
errors now say how long to wait before retrying, and authorization
errors name the &quot;Account Analytics: Read&quot; permission the API
token needs.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16013">#16013</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/8b64becbd3817abb28654e270c0e0104170f29d7"><code>8b64bec</code></a>
Thanks <a
href="https://github.com/swalker326"><code>@​swalker326</code></a>! -
Fix Durable Object self-references in tests and container validation</p>
<p>Durable Object bindings that explicitly name the Worker itself now
resolve to the test runner in <code>@cloudflare/vitest-plugin</code>,
for both <code>cloudflare.config.ts</code> and Wrangler configuration
files. Named Wrangler environments use their effective Worker name,
keeping bindings to the base Worker external. Container validation also
accepts these self-references, using the effective deployment name to
distinguish local and external bindings.</p>
<p>Explicit binding targets remain intact during configuration
conversion, so deploying with <code>--name</code> or a CI name override
preserves the intended Durable Object target.</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/cloudflare/workers-sdk/commit/15fbaed2de992a529ca05d99424f8063d63217bf"><code>15fbaed</code></a>,
<a
href="https://github.com/cloudflare/workers-sdk/commit/d8899ac4c85ff839d73daa9055a76a36248cd2e3"><code>d8899ac</code></a>]:</p>
<ul>
<li><a
href="mailto:miniflare@5.20261023.3-beta">miniflare@5.20261023.3-beta</a></li>
</ul>
</li>
</ul>
<h2>wrangler@4.155.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/cloudflare/workers-sdk/pull/16536">#16536</a>
<a
href="https://github.com/cloudflare/workers-sdk/commit/a95d647f9459e40a00871346b81082abbb27d2b3"><code>a95d647</code></a>
Thanks <a
href="https://github.com/WalshyDev"><code>@​WalshyDev</code></a>! -
Support remote Analytics Engine bindings in local development</p>
<p>Setting <code>remote: true</code> on an Analytics Engine dataset now
sends <code>writeDataPoint()</code> calls from <code>wrangler dev</code>
and the Vite plugin to the real dataset. Without it, writes are still
dropped locally.</p>
<pre lang="jsonc"><code>{
  &quot;analytics_engine_datasets&quot;: [
    {
      &quot;binding&quot;: &quot;EVENTS&quot;,
      &quot;dataset&quot;: &quot;my-dataset&quot;,
      &quot;remote&quot;: true
    }
  ]
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/b1ced56e11378efe3742c6eb51f96e70d572f0a4"><code>b1ced56</code></a>
Version Packages (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16556">#16556</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/8b64becbd3817abb28654e270c0e0104170f29d7"><code>8b64bec</code></a>
[config] Fix Durable Object self-references without changing deployment
targe...</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/25802bce9f605916239bfd4714263c88f9b3098b"><code>25802bc</code></a>
[wrangler] Run <code>wrangler d1 insights</code> account-wide (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16532">#16532</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/b4653b40cdc6e176c4e5ac98696cf0dae641ff6b"><code>b4653b4</code></a>
[autoconfig] Write a protective .assetsignore when the project root is
the as...</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/a09957ab53d871802993dda0dab73b5d0a7fdff1"><code>a09957a</code></a>
Version Packages (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16553">#16553</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/c7a3373cce06bdda0469d2b7d3d3286f3abbc3b1"><code>c7a3373</code></a>
Revert &quot;Version Packages&quot; (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16554">#16554</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/a95d647f9459e40a00871346b81082abbb27d2b3"><code>a95d647</code></a>
[wrangler] Support remote Analytics Engine bindings in local dev (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16536">#16536</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/52315bd0e2d25a31357c52ba0704c5270d2f13a8"><code>52315bd</code></a>
Version Packages (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16529">#16529</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/dba0e81501d3900907a6377dd88a153bb5139d37"><code>dba0e81</code></a>
[wrangler] Escape terminal controls in tail output (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16526">#16526</a>)</li>
<li><a
href="https://github.com/cloudflare/workers-sdk/commit/fc57bc0e03b096cff58e949e67ccfb9f7832a3c2"><code>fc57bc0</code></a>
[miniflare] Enable local Flagship management without Worker bindings (<a
href="https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler/issues/16489">#16489</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cloudflare/workers-sdk/commits/wrangler@4.156.0/packages/wrangler">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=wrangler&package-manager=npm_and_yarn&previous-version=4.61.0&new-version=4.156.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrei <168741329+andreiborza@users.noreply.github.com>
---
 .../cloudflare-integration-tests/package.json |   2 +-
 packages/cloudflare/package.json              |   2 +-
 packages/hono/package.json                    |   2 +-
 pnpm-lock.yaml                                | 868 +++---------------
 4 files changed, 125 insertions(+), 749 deletions(-)

diff --git a/dev-packages/cloudflare-integration-tests/package.json b/dev-packages/cloudflare-integration-tests/package.json
index 1d336b48e677..68cf1cb65464 100644
--- a/dev-packages/cloudflare-integration-tests/package.json
+++ b/dev-packages/cloudflare-integration-tests/package.json
@@ -40,6 +40,6 @@
     "prisma": "6.15.0",
     "vite": "^8.3.1",
     "vitest": "^4.1.11",
-    "wrangler": "4.86.0"
+    "wrangler": "4.156.0"
   }
 }
diff --git a/packages/cloudflare/package.json b/packages/cloudflare/package.json
index 63e75d57b28a..b21f32d674e6 100644
--- a/packages/cloudflare/package.json
+++ b/packages/cloudflare/package.json
@@ -81,7 +81,7 @@
     "@types/node": "^20.19.0",
     "acorn": "^8.14.0",
     "vite": "^8.3.1",
-    "wrangler": "4.61.0"
+    "wrangler": "4.156.0"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/packages/hono/package.json b/packages/hono/package.json
index a1238930ecfa..be9722f8256f 100644
--- a/packages/hono/package.json
+++ b/packages/hono/package.json
@@ -112,7 +112,7 @@
     "@types/node": "^20.19.0",
     "hono": "4.13.11",
     "hono-5": "npm:hono@5.0.0-rc.1",
-    "wrangler": "4.62.0"
+    "wrangler": "4.156.0"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 52d0d8082991..6ac487eaedde 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -529,7 +529,7 @@ importers:
     devDependencies:
       '@cloudflare/vite-plugin':
         specifier: 1.34.0
-        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))
+        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))
       '@cloudflare/workers-types':
         specifier: ^4.20260426.0
         version: 4.20260519.1
@@ -555,8 +555,8 @@ importers:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler:
-        specifier: 4.86.0
-        version: 4.86.0(@cloudflare/workers-types@4.20260519.1)
+        specifier: 4.156.0
+        version: 4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43)
 
   dev-packages/deno-integration-tests:
     dependencies:
@@ -1249,8 +1249,8 @@ importers:
         specifier: ^8.3.1
         version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler:
-        specifier: 4.61.0
-        version: 4.61.0(@cloudflare/workers-types@5.20260710.1)
+        specifier: 4.156.0
+        version: 4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43)
 
   packages/core:
     dependencies:
@@ -1572,8 +1572,8 @@ importers:
         specifier: npm:hono@5.0.0-rc.1
         version: hono@5.0.0-rc.1
       wrangler:
-        specifier: 4.62.0
-        version: 4.62.0(@cloudflare/workers-types@4.20250922.0)
+        specifier: 4.156.0
+        version: 4.156.0(@cloudflare/workers-types@4.20250922.0)(@types/node@20.19.43)
 
   packages/integration-shims:
     dependencies:
@@ -1986,7 +1986,7 @@ importers:
     devDependencies:
       '@react-router/dev':
         specifier: ^7.18.4
-        version: 7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)
+        version: 7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)
       '@react-router/node':
         specifier: ^7.15.0
         version: 7.18.4(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
@@ -4106,26 +4106,21 @@ packages:
     resolution: {integrity: sha512-SIOD2DxrRRwQ+jgzlXCqoEFiKOFqaPjhnNTGKXSRLvp1HiOvapLaFG2kEr9dYQTYe8rKrd9uvDUzmAITeNyaHQ==}
     engines: {node: '>=18.0.0'}
 
-  '@cloudflare/unenv-preset@2.11.0':
-    resolution: {integrity: sha512-z3hxFajL765VniNPGV0JRStZolNz63gU3B3AktwoGdDlnQvz5nP+Ah4RL04PONlZQjwmDdGHowEStJ94+RsaJg==}
-    peerDependencies:
-      unenv: 2.0.0-rc.24
-      workerd: ^1.20260115.0
-    peerDependenciesMeta:
-      workerd:
-        optional: true
+  '@cloudflare/kv-asset-handler@0.5.0':
+    resolution: {integrity: sha512-jxQYkj8dSIzc0cD6cMMNdOc1UVjqSqu8BZdor5s8cGjW2I8BjODt/kWPVdY+u9zj3ms75Q5qaZgnxUad83+eAg==}
+    engines: {node: '>=22.0.0'}
 
-  '@cloudflare/unenv-preset@2.12.0':
-    resolution: {integrity: sha512-NK4vN+2Z/GbfGS4BamtbbVk1rcu5RmqaYGiyHJQrA09AoxdZPHDF3W/EhgI0YSK8p3vRo/VNCtbSJFPON7FWMQ==}
+  '@cloudflare/unenv-preset@2.16.1':
+    resolution: {integrity: sha512-ECxObrMfyTl5bhQf/lZCXwo5G6xX9IAUo+nDMKK4SZ8m4Jvvxp52vilxyySSWh2YTZz8+HQ07qGH/2rEom1vDw==}
     peerDependencies:
       unenv: 2.0.0-rc.24
-      workerd: ^1.20260115.0
+      workerd: '>1.20260305.0 <2.0.0-0'
     peerDependenciesMeta:
       workerd:
         optional: true
 
-  '@cloudflare/unenv-preset@2.16.1':
-    resolution: {integrity: sha512-ECxObrMfyTl5bhQf/lZCXwo5G6xX9IAUo+nDMKK4SZ8m4Jvvxp52vilxyySSWh2YTZz8+HQ07qGH/2rEom1vDw==}
+  '@cloudflare/unenv-preset@2.16.2':
+    resolution: {integrity: sha512-JBP1+Z7ZSNG/d4mRP+y8VC5dka3tZVMLEZRvS+rzQ4DGV1EoxRFQckcJTTkXbHSQiTj0DtNI01Zwb/V2fX0mvQ==}
     peerDependencies:
       unenv: 2.0.0-rc.24
       workerd: '>1.20260305.0 <2.0.0-0'
@@ -4139,34 +4134,16 @@ packages:
       vite: ^6.1.0 || ^7.0.0 || ^8.0.0
       wrangler: ^4.86.0
 
-  '@cloudflare/workerd-darwin-64@1.20260124.0':
-    resolution: {integrity: sha512-VuqscLhiiVIf7t/dcfkjtT0LKJH+a06KUFwFTHgdTcqyLbFZ44u1SLpOONu5fyva4A9MdaKh9a+Z/tBC1d76nw==}
-    engines: {node: '>=16'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@cloudflare/workerd-darwin-64@1.20260131.0':
-    resolution: {integrity: sha512-+1X4qErc715NUhJZNhtlpuCxajhD5YNre7Cz50WPMmj+BMUrh9h7fntKEadtrUo5SM2YONY7CDzK7wdWbJJBVA==}
-    engines: {node: '>=16'}
-    cpu: [x64]
-    os: [darwin]
-
   '@cloudflare/workerd-darwin-64@1.20260426.1':
     resolution: {integrity: sha512-Ch7DqsmYzSQRTY87pZpsGsFVz9VVBnLPnCBOHxKt1HH25a7oMu1w1PbPWqVmE0VerCLsj/TScX7Ob3v6E14TZw==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [darwin]
 
-  '@cloudflare/workerd-darwin-arm64@1.20260124.0':
-    resolution: {integrity: sha512-PfnjoFooPgRKFUIZcEP9irnn5Y7OgXinjM+IMlKTdEyLWjMblLsbsqAgydf75+ii0715xAeUlWQjZrWdyOZjMw==}
-    engines: {node: '>=16'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@cloudflare/workerd-darwin-arm64@1.20260131.0':
-    resolution: {integrity: sha512-M84mXR8WEMEBuX4/dL2IQ4wHV/ALwYjx9if5ePZR8rdbD7if/fkEEoMBq0bGS/1gMLRqqCZLstabxHV+g92NNg==}
+  '@cloudflare/workerd-darwin-64@1.20261023.1':
+    resolution: {integrity: sha512-lsEx0i7nR0PNG/erUFFHmQmiidEhLfDE5uQmAL9421/y4/ycuxDDOSaxu3VGGYFFPK5sduyUeMmjIlX4CwOBFg==}
     engines: {node: '>=16'}
-    cpu: [arm64]
+    cpu: [x64]
     os: [darwin]
 
   '@cloudflare/workerd-darwin-arm64@1.20260426.1':
@@ -4175,17 +4152,11 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@cloudflare/workerd-linux-64@1.20260124.0':
-    resolution: {integrity: sha512-KSkZl4kwcWeFXI7qsaLlMnKwjgdZwI0OEARjyZpiHCxJCqAqla9XxQKNDscL2Z3qUflIo30i+uteGbFrhzuVGQ==}
+  '@cloudflare/workerd-darwin-arm64@1.20261023.1':
+    resolution: {integrity: sha512-5e79fHgabdDD8EgmjOhJ1S+xMsf6DbC7fL7IgTBizMnzOp0P2isDn7pYmUxI9AJZE9FVQ4RUilH/I36YNg+GQQ==}
     engines: {node: '>=16'}
-    cpu: [x64]
-    os: [linux]
-
-  '@cloudflare/workerd-linux-64@1.20260131.0':
-    resolution: {integrity: sha512-SWzr48bCL9y5wjkj23tXS6t/6us99EAH9T5TAscMV0hfJFZQt97RY/gaHKyRRjFv6jfJZvk7d4g+OmGeYBnwcg==}
-    engines: {node: '>=16'}
-    cpu: [x64]
-    os: [linux]
+    cpu: [arm64]
+    os: [darwin]
 
   '@cloudflare/workerd-linux-64@1.20260426.1':
     resolution: {integrity: sha512-C8LlC8uSYzg49y51n++75esxZmMp+Uz1OKHHA/4lkv6rjOTbcHQJuEwSLppjybVIXpv7A8MBhbu9iyCTvyv1mw==}
@@ -4193,16 +4164,10 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@cloudflare/workerd-linux-arm64@1.20260124.0':
-    resolution: {integrity: sha512-61xjSUNk745EVV4vXZP0KGyLCatcmamfBB+dcdQ8kDr6PrNU4IJ1kuQFSJdjybyDhJRm4TpGVywq+9hREuF7xA==}
-    engines: {node: '>=16'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@cloudflare/workerd-linux-arm64@1.20260131.0':
-    resolution: {integrity: sha512-mL0kLPGIBJRPeHS3+erJ2t5dJT3ODhsKvR9aA4BcsY7M30/QhlgJIF6wsgwNisTJ23q8PbobZNHBUKIe8l/E9A==}
+  '@cloudflare/workerd-linux-64@1.20261023.1':
+    resolution: {integrity: sha512-VHQ6jKFSihjR2+x1buby8XTdBLLJztVnYiB7OLOTYO8aDXB+c1Rd2410PdgFuFYc4AgFEk6PCJLyCLL5L1KBnw==}
     engines: {node: '>=16'}
-    cpu: [arm64]
+    cpu: [x64]
     os: [linux]
 
   '@cloudflare/workerd-linux-arm64@1.20260426.1':
@@ -4211,20 +4176,20 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@cloudflare/workerd-windows-64@1.20260124.0':
-    resolution: {integrity: sha512-j9O11pwQQV6Vi3peNrJoyIas3SrZHlPj0Ah+z1hDW9o1v35euVBQJw/PuzjPOXxTFUlGQoMJdfzPsO9xP86g7A==}
+  '@cloudflare/workerd-linux-arm64@1.20261023.1':
+    resolution: {integrity: sha512-ilpRHzfDN8YFRM5CLRKuFw40x/LJBS89yVdhdQmxehlVDuBqjKpJB++zPFbTgKRRFaNupgnXc8RHktXAIhgCmQ==}
     engines: {node: '>=16'}
-    cpu: [x64]
-    os: [win32]
+    cpu: [arm64]
+    os: [linux]
 
-  '@cloudflare/workerd-windows-64@1.20260131.0':
-    resolution: {integrity: sha512-hoQqTFBpP1zntP2OQSpt5dEWbd9vSBliK+G7LmDXjKitPkmkRFo2PB4P9aBRE1edPAIO/fpdoJv928k2HaAn4A==}
+  '@cloudflare/workerd-windows-64@1.20260426.1':
+    resolution: {integrity: sha512-d3Xj/IjINRgNVwH+eKhpUn4xkkcEewbWXbOvBlapiirKWh5zl9m0Epi3qOqmjyRYK6MICqIGXg4qZBEt0lxudw==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [win32]
 
-  '@cloudflare/workerd-windows-64@1.20260426.1':
-    resolution: {integrity: sha512-d3Xj/IjINRgNVwH+eKhpUn4xkkcEewbWXbOvBlapiirKWh5zl9m0Epi3qOqmjyRYK6MICqIGXg4qZBEt0lxudw==}
+  '@cloudflare/workerd-windows-64@1.20261023.1':
+    resolution: {integrity: sha512-279WLVjNsMycAwr0EZNiNEf0l2SY6NUtsN80NwZzbTHzakmiN+WSx4w38muxPm+PAU0oSPPAPXKVD+H6Hya8xw==}
     engines: {node: '>=16'}
     cpu: [x64]
     os: [win32]
@@ -4529,18 +4494,6 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/aix-ppc64@0.27.0':
-    resolution: {integrity: sha512-KuZrd2hRjz01y5JK9mEBSD3Vj3mbCvemhT466rSuJYeE/hjuBrHfjjcjMdTm/sz7au+++sdbJZJmuBwQLuw68A==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
-  '@esbuild/aix-ppc64@0.27.3':
-    resolution: {integrity: sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
   '@esbuild/aix-ppc64@0.28.1':
     resolution: {integrity: sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==}
     engines: {node: '>=18'}
@@ -4565,18 +4518,6 @@ packages:
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm64@0.27.0':
-    resolution: {integrity: sha512-CC3vt4+1xZrs97/PKDkl0yN7w8edvU2vZvAFGD16n9F0Cvniy5qvzRXjfO1l94efczkkQE6g1x0i73Qf5uthOQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
-  '@esbuild/android-arm64@0.27.3':
-    resolution: {integrity: sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
   '@esbuild/android-arm64@0.28.1':
     resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
     engines: {node: '>=18'}
@@ -4607,18 +4548,6 @@ packages:
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-arm@0.27.0':
-    resolution: {integrity: sha512-j67aezrPNYWJEOHUNLPj9maeJte7uSMM6gMoxfPC9hOg8N02JuQi/T7ewumf4tNvJadFkvLZMlAq73b9uwdMyQ==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
-  '@esbuild/android-arm@0.27.3':
-    resolution: {integrity: sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
   '@esbuild/android-arm@0.28.1':
     resolution: {integrity: sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==}
     engines: {node: '>=18'}
@@ -4643,18 +4572,6 @@ packages:
     cpu: [x64]
     os: [android]
 
-  '@esbuild/android-x64@0.27.0':
-    resolution: {integrity: sha512-wurMkF1nmQajBO1+0CJmcN17U4BP6GqNSROP8t0X/Jiw2ltYGLHpEksp9MpoBqkrFR3kv2/te6Sha26k3+yZ9Q==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
-  '@esbuild/android-x64@0.27.3':
-    resolution: {integrity: sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
   '@esbuild/android-x64@0.28.1':
     resolution: {integrity: sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==}
     engines: {node: '>=18'}
@@ -4679,18 +4596,6 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-arm64@0.27.0':
-    resolution: {integrity: sha512-uJOQKYCcHhg07DL7i8MzjvS2LaP7W7Pn/7uA0B5S1EnqAirJtbyw4yC5jQ5qcFjHK9l6o/MX9QisBg12kNkdHg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@esbuild/darwin-arm64@0.27.3':
-    resolution: {integrity: sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
   '@esbuild/darwin-arm64@0.28.1':
     resolution: {integrity: sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==}
     engines: {node: '>=18'}
@@ -4715,18 +4620,6 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.27.0':
-    resolution: {integrity: sha512-8mG6arH3yB/4ZXiEnXof5MK72dE6zM9cDvUcPtxhUZsDjESl9JipZYW60C3JGreKCEP+p8P/72r69m4AZGJd5g==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@esbuild/darwin-x64@0.27.3':
-    resolution: {integrity: sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
   '@esbuild/darwin-x64@0.28.1':
     resolution: {integrity: sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==}
     engines: {node: '>=18'}
@@ -4751,18 +4644,6 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-arm64@0.27.0':
-    resolution: {integrity: sha512-9FHtyO988CwNMMOE3YIeci+UV+x5Zy8fI2qHNpsEtSF83YPBmE8UWmfYAQg6Ux7Gsmd4FejZqnEUZCMGaNQHQw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-arm64@0.27.3':
-    resolution: {integrity: sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
   '@esbuild/freebsd-arm64@0.28.1':
     resolution: {integrity: sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==}
     engines: {node: '>=18'}
@@ -4787,18 +4668,6 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.27.0':
-    resolution: {integrity: sha512-zCMeMXI4HS/tXvJz8vWGexpZj2YVtRAihHLk1imZj4efx1BQzN76YFeKqlDr3bUWI26wHwLWPd3rwh6pe4EV7g==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-x64@0.27.3':
-    resolution: {integrity: sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
   '@esbuild/freebsd-x64@0.28.1':
     resolution: {integrity: sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==}
     engines: {node: '>=18'}
@@ -4823,18 +4692,6 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm64@0.27.0':
-    resolution: {integrity: sha512-AS18v0V+vZiLJyi/4LphvBE+OIX682Pu7ZYNsdUHyUKSoRwdnOsMf6FDekwoAFKej14WAkOef3zAORJgAtXnlQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@esbuild/linux-arm64@0.27.3':
-    resolution: {integrity: sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
   '@esbuild/linux-arm64@0.28.1':
     resolution: {integrity: sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==}
     engines: {node: '>=18'}
@@ -4859,18 +4716,6 @@ packages:
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-arm@0.27.0':
-    resolution: {integrity: sha512-t76XLQDpxgmq2cNXKTVEB7O7YMb42atj2Re2Haf45HkaUpjM2J0UuJZDuaGbPbamzZ7bawyGFUkodL+zcE+jvQ==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
-  '@esbuild/linux-arm@0.27.3':
-    resolution: {integrity: sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
   '@esbuild/linux-arm@0.28.1':
     resolution: {integrity: sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==}
     engines: {node: '>=18'}
@@ -4895,18 +4740,6 @@ packages:
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.27.0':
-    resolution: {integrity: sha512-Mz1jxqm/kfgKkc/KLHC5qIujMvnnarD9ra1cEcrs7qshTUSksPihGrWHVG5+osAIQ68577Zpww7SGapmzSt4Nw==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
-  '@esbuild/linux-ia32@0.27.3':
-    resolution: {integrity: sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
   '@esbuild/linux-ia32@0.28.1':
     resolution: {integrity: sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==}
     engines: {node: '>=18'}
@@ -4943,18 +4776,6 @@ packages:
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.27.0':
-    resolution: {integrity: sha512-QbEREjdJeIreIAbdG2hLU1yXm1uu+LTdzoq1KCo4G4pFOLlvIspBm36QrQOar9LFduavoWX2msNFAAAY9j4BDg==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
-  '@esbuild/linux-loong64@0.27.3':
-    resolution: {integrity: sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
   '@esbuild/linux-loong64@0.28.1':
     resolution: {integrity: sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==}
     engines: {node: '>=18'}
@@ -4979,18 +4800,6 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.27.0':
-    resolution: {integrity: sha512-sJz3zRNe4tO2wxvDpH/HYJilb6+2YJxo/ZNbVdtFiKDufzWq4JmKAiHy9iGoLjAV7r/W32VgaHGkk35cUXlNOg==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
-  '@esbuild/linux-mips64el@0.27.3':
-    resolution: {integrity: sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
   '@esbuild/linux-mips64el@0.28.1':
     resolution: {integrity: sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==}
     engines: {node: '>=18'}
@@ -5015,18 +4824,6 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.27.0':
-    resolution: {integrity: sha512-z9N10FBD0DCS2dmSABDBb5TLAyF1/ydVb+N4pi88T45efQ/w4ohr/F/QYCkxDPnkhkp6AIpIcQKQ8F0ANoA2JA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@esbuild/linux-ppc64@0.27.3':
-    resolution: {integrity: sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
   '@esbuild/linux-ppc64@0.28.1':
     resolution: {integrity: sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==}
     engines: {node: '>=18'}
@@ -5051,18 +4848,6 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.27.0':
-    resolution: {integrity: sha512-pQdyAIZ0BWIC5GyvVFn5awDiO14TkT/19FTmFcPdDec94KJ1uZcmFs21Fo8auMXzD4Tt+diXu1LW1gHus9fhFQ==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@esbuild/linux-riscv64@0.27.3':
-    resolution: {integrity: sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
   '@esbuild/linux-riscv64@0.28.1':
     resolution: {integrity: sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==}
     engines: {node: '>=18'}
@@ -5087,18 +4872,6 @@ packages:
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.27.0':
-    resolution: {integrity: sha512-hPlRWR4eIDDEci953RI1BLZitgi5uqcsjKMxwYfmi4LcwyWo2IcRP+lThVnKjNtk90pLS8nKdroXYOqW+QQH+w==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
-  '@esbuild/linux-s390x@0.27.3':
-    resolution: {integrity: sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
   '@esbuild/linux-s390x@0.28.1':
     resolution: {integrity: sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==}
     engines: {node: '>=18'}
@@ -5123,18 +4896,6 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/linux-x64@0.27.0':
-    resolution: {integrity: sha512-1hBWx4OUJE2cab++aVZ7pObD6s+DK4mPGpemtnAORBvb5l/g5xFGk0vc0PjSkrDs0XaXj9yyob3d14XqvnQ4gw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
-  '@esbuild/linux-x64@0.27.3':
-    resolution: {integrity: sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
   '@esbuild/linux-x64@0.28.1':
     resolution: {integrity: sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==}
     engines: {node: '>=18'}
@@ -5153,18 +4914,6 @@ packages:
     cpu: [arm64]
     os: [netbsd]
 
-  '@esbuild/netbsd-arm64@0.27.0':
-    resolution: {integrity: sha512-6m0sfQfxfQfy1qRuecMkJlf1cIzTOgyaeXaiVaaki8/v+WB+U4hc6ik15ZW6TAllRlg/WuQXxWj1jx6C+dfy3w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-arm64@0.27.3':
-    resolution: {integrity: sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
   '@esbuild/netbsd-arm64@0.28.1':
     resolution: {integrity: sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==}
     engines: {node: '>=18'}
@@ -5189,18 +4938,6 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.27.0':
-    resolution: {integrity: sha512-xbbOdfn06FtcJ9d0ShxxvSn2iUsGd/lgPIO2V3VZIPDbEaIj1/3nBBe1AwuEZKXVXkMmpr6LUAgMkLD/4D2PPA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-x64@0.27.3':
-    resolution: {integrity: sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
   '@esbuild/netbsd-x64@0.28.1':
     resolution: {integrity: sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==}
     engines: {node: '>=18'}
@@ -5219,18 +4956,6 @@ packages:
     cpu: [arm64]
     os: [openbsd]
 
-  '@esbuild/openbsd-arm64@0.27.0':
-    resolution: {integrity: sha512-fWgqR8uNbCQ/GGv0yhzttj6sU/9Z5/Sv/VGU3F5OuXK6J6SlriONKrQ7tNlwBrJZXRYk5jUhuWvF7GYzGguBZQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-arm64@0.27.3':
-    resolution: {integrity: sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
   '@esbuild/openbsd-arm64@0.28.1':
     resolution: {integrity: sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==}
     engines: {node: '>=18'}
@@ -5255,18 +4980,6 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.27.0':
-    resolution: {integrity: sha512-aCwlRdSNMNxkGGqQajMUza6uXzR/U0dIl1QmLjPtRbLOx3Gy3otfFu/VjATy4yQzo9yFDGTxYDo1FfAD9oRD2A==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-x64@0.27.3':
-    resolution: {integrity: sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
   '@esbuild/openbsd-x64@0.28.1':
     resolution: {integrity: sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==}
     engines: {node: '>=18'}
@@ -5285,18 +4998,6 @@ packages:
     cpu: [arm64]
     os: [openharmony]
 
-  '@esbuild/openharmony-arm64@0.27.0':
-    resolution: {integrity: sha512-nyvsBccxNAsNYz2jVFYwEGuRRomqZ149A39SHWk4hV0jWxKM0hjBPm3AmdxcbHiFLbBSwG6SbpIcUbXjgyECfA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@esbuild/openharmony-arm64@0.27.3':
-    resolution: {integrity: sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
   '@esbuild/openharmony-arm64@0.28.1':
     resolution: {integrity: sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==}
     engines: {node: '>=18'}
@@ -5321,18 +5022,6 @@ packages:
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/sunos-x64@0.27.0':
-    resolution: {integrity: sha512-Q1KY1iJafM+UX6CFEL+F4HRTgygmEW568YMqDA5UV97AuZSm21b7SXIrRJDwXWPzr8MGr75fUZPV67FdtMHlHA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
-  '@esbuild/sunos-x64@0.27.3':
-    resolution: {integrity: sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
   '@esbuild/sunos-x64@0.28.1':
     resolution: {integrity: sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==}
     engines: {node: '>=18'}
@@ -5357,18 +5046,6 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-arm64@0.27.0':
-    resolution: {integrity: sha512-W1eyGNi6d+8kOmZIwi/EDjrL9nxQIQ0MiGqe/AWc6+IaHloxHSGoeRgDRKHFISThLmsewZ5nHFvGFWdBYlgKPg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@esbuild/win32-arm64@0.27.3':
-    resolution: {integrity: sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
   '@esbuild/win32-arm64@0.28.1':
     resolution: {integrity: sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==}
     engines: {node: '>=18'}
@@ -5393,18 +5070,6 @@ packages:
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.27.0':
-    resolution: {integrity: sha512-30z1aKL9h22kQhilnYkORFYt+3wp7yZsHWus+wSKAJR8JtdfI76LJ4SBdMsCopTR3z/ORqVu5L1vtnHZWVj4cQ==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@esbuild/win32-ia32@0.27.3':
-    resolution: {integrity: sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
   '@esbuild/win32-ia32@0.28.1':
     resolution: {integrity: sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==}
     engines: {node: '>=18'}
@@ -5429,18 +5094,6 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@esbuild/win32-x64@0.27.0':
-    resolution: {integrity: sha512-aIitBcjQeyOhMTImhLZmtxfdOcuNRpwlPNmlFKPcHQYPhEssw75Cl1TSXJXpMkzaua9FUetx/4OQKq7eJul5Cg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.27.3':
-    resolution: {integrity: sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
   '@esbuild/win32-x64@0.28.1':
     resolution: {integrity: sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==}
     engines: {node: '>=18'}
@@ -12210,16 +11863,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  esbuild@0.27.0:
-    resolution: {integrity: sha512-jd0f4NHbD6cALCyGElNpGAOtWxSq46l9X/sWB0Nzd5er4Kz2YTm+Vl0qKFT9KUJvD8+fiO8AvoHhFvEatfVixA==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  esbuild@0.27.3:
-    resolution: {integrity: sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==}
-    engines: {node: '>=18'}
-    hasBin: true
-
   esbuild@0.28.1:
     resolution: {integrity: sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==}
     engines: {node: '>=18'}
@@ -14763,21 +14406,15 @@ packages:
     peerDependencies:
       webpack: ^5.0.0
 
-  miniflare@4.20260124.0:
-    resolution: {integrity: sha512-Co8onUh+POwOuLty4myQg+Nzg9/xZ5eAJc1oqYBzRovHd/XIpb5WAnRVaubcfAQJ85awWtF3yXUHCDx6cIaN3w==}
-    engines: {node: '>=18.0.0'}
-    hasBin: true
-
-  miniflare@4.20260131.0:
-    resolution: {integrity: sha512-CtObRzlAzOUpCFH+MgImykxmDNKthrgIYtC+oLC3UGpve6bGLomKUW4u4EorTvzlQFHe66/9m/+AYbBbpzG0mQ==}
-    engines: {node: '>=18.0.0'}
-    hasBin: true
-
   miniflare@4.20260426.0:
     resolution: {integrity: sha512-KM+v76d04qT+NsPfVKVQEgnnuLNE3uzCCl2QKMTJ5OXor5JbBm1vpkQwQ+l7o5ELCrZ74RnyKhJKLiJyUA39Tw==}
     engines: {node: '>=18.0.0'}
     hasBin: true
 
+  miniflare@5.20261023.3-beta:
+    resolution: {integrity: sha512-thdXzlktu5GE1o/BlmMAPeJ0Cu6Tu5LpMbRlyfRrpVvMRrhd6p52TMqcITCZZLVzt1UO92VGBkLDhLOpryUAyQ==}
+    engines: {node: '>=22.0.0'}
+
   minimalistic-assert@1.0.1:
     resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
 
@@ -18633,14 +18270,14 @@ packages:
     resolution: {integrity: sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA==}
     engines: {node: '>=18.17'}
 
-  undici@7.18.2:
-    resolution: {integrity: sha512-y+8YjDFzWdQlSE9N5nzKMT3g4a5UBX1HKowfdXh0uvAnTaqqwqB92Jt4UXBAeKekDs5IaDKyJFR4X1gYVCgXcw==}
-    engines: {node: '>=20.18.1'}
-
   undici@7.24.8:
     resolution: {integrity: sha512-6KQ/+QxK49Z/p3HO6E5ZCZWNnCasyZLa5ExaVYyvPxUwKtbCPMKELJOqh7EqOle0t9cH/7d2TaaTRRa6Nhs4YQ==}
     engines: {node: '>=20.18.1'}
 
+  undici@7.30.1:
+    resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==}
+    engines: {node: '>=20.18.1'}
+
   unenv@1.10.0:
     resolution: {integrity: sha512-wY5bskBQFL9n3Eca5XnhH6KbUo/tfvkwm9OpcdCvLaeA7piBNbavbOKJySEwQ1V0RH6HvNlSAFRTpvTqgKRQXQ==}
 
@@ -19679,18 +19316,13 @@ packages:
   wordwrap@1.0.0:
     resolution: {integrity: sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==}
 
-  workerd@1.20260124.0:
-    resolution: {integrity: sha512-JN6voV/fUQK342a39Rl+20YVmtIXZVbpxc7V/m809lUnlTGPy4aa5MI7PMoc+9qExgAEOw9cojvN5zOfqmMWLg==}
-    engines: {node: '>=16'}
-    hasBin: true
-
-  workerd@1.20260131.0:
-    resolution: {integrity: sha512-4zZxOdWeActbRfydQQlj7vZ2ay01AjjNC4K3stjmWC3xZHeXeN3EAROwsWE83SZHhtw4rn18srrhtXoQvQMw3Q==}
+  workerd@1.20260426.1:
+    resolution: {integrity: sha512-ELvGgN8c9oo+E6EPyecxk1TEf6/eAK4TxxQTW5mQ87C7jbjCzhMbg0P2ije49UBHV0dkBYPJcJvcklUltipl2A==}
     engines: {node: '>=16'}
     hasBin: true
 
-  workerd@1.20260426.1:
-    resolution: {integrity: sha512-ELvGgN8c9oo+E6EPyecxk1TEf6/eAK4TxxQTW5mQ87C7jbjCzhMbg0P2ije49UBHV0dkBYPJcJvcklUltipl2A==}
+  workerd@1.20261023.1:
+    resolution: {integrity: sha512-NeofJFyaYNpqKpFRJW3ApuonaerPd6/JWlfTtLDYf2A6ygqrDEFnYgEXmc0hhOxqnJsSM+kXJN6VebPojzRrsg==}
     engines: {node: '>=16'}
     hasBin: true
 
@@ -19700,32 +19332,12 @@ packages:
   workerpool@9.3.4:
     resolution: {integrity: sha512-TmPRQYYSAnnDiEB0P/Ytip7bFGvqnSU6I2BcuSw7Hx+JSg/DsUi5ebYfc8GYaSdpuvOcEs6dXxPurOYpe9QFwg==}
 
-  wrangler@4.61.0:
-    resolution: {integrity: sha512-Kb8NMe1B/HM7/ds3hU+fcV1U7T996vRKJ0UU/qqgNUMwdemTRA+sSaH3mQvQslIBbprHHU81s0huA6fDIcwiaQ==}
-    engines: {node: '>=20.0.0'}
-    hasBin: true
-    peerDependencies:
-      '@cloudflare/workers-types': ^4.20260124.0
-    peerDependenciesMeta:
-      '@cloudflare/workers-types':
-        optional: true
-
-  wrangler@4.62.0:
-    resolution: {integrity: sha512-DogP9jifqw85g33BqwF6m21YBW5J7+Ep9IJLgr6oqHU0RkA79JMN5baeWXdmnIWZl+VZh6bmtNtR+5/Djd32tg==}
-    engines: {node: '>=20.0.0'}
-    hasBin: true
-    peerDependencies:
-      '@cloudflare/workers-types': ^4.20260131.0
-    peerDependenciesMeta:
-      '@cloudflare/workers-types':
-        optional: true
-
-  wrangler@4.86.0:
-    resolution: {integrity: sha512-9aa/gbF/HiUeeUEwyQpW5LDPBEzyt7iaE6xHwm0vk2Ly8A6J+jh03pzchqVnCCWR832mNyA28MD8oAYt0Kfvlw==}
-    engines: {node: '>=20.3.0'}
+  wrangler@4.156.0:
+    resolution: {integrity: sha512-kVLAShuLiNgE3jcrmXcymDf/iPKDPrSxACe5ueugW/33HeNB9E9CkKYchudCeBwgmsnl4k+1zt4NO7vqb/fRuQ==}
+    engines: {node: '>=22.0.0'}
     hasBin: true
     peerDependencies:
-      '@cloudflare/workers-types': ^4.20260426.1
+      '@cloudflare/workers-types': ^5.20261023.1
     peerDependenciesMeta:
       '@cloudflare/workers-types':
         optional: true
@@ -19761,6 +19373,18 @@ packages:
       utf-8-validate:
         optional: true
 
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
   ws@8.21.3:
     resolution: {integrity: sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==}
     engines: {node: '>=10.0.0'}
@@ -22823,80 +22447,61 @@ snapshots:
 
   '@cloudflare/kv-asset-handler@0.4.2': {}
 
-  '@cloudflare/unenv-preset@2.11.0(unenv@2.0.0-rc.24)(workerd@1.20260124.0)':
-    dependencies:
-      unenv: 2.0.0-rc.24
-    optionalDependencies:
-      workerd: 1.20260124.0
+  '@cloudflare/kv-asset-handler@0.5.0': {}
 
-  '@cloudflare/unenv-preset@2.12.0(unenv@2.0.0-rc.24)(workerd@1.20260131.0)':
+  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)':
     dependencies:
       unenv: 2.0.0-rc.24
     optionalDependencies:
-      workerd: 1.20260131.0
+      workerd: 1.20260426.1
 
-  '@cloudflare/unenv-preset@2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)':
+  '@cloudflare/unenv-preset@2.16.2(unenv@2.0.0-rc.24)(workerd@1.20261023.1)':
     dependencies:
       unenv: 2.0.0-rc.24
     optionalDependencies:
-      workerd: 1.20260426.1
+      workerd: 1.20261023.1
 
-  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))':
+  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))':
     dependencies:
       '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)
       miniflare: 4.20260426.0
       unenv: 2.0.0-rc.24
       vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
+      wrangler: 4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43)
       ws: 8.18.0
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
       - workerd
 
-  '@cloudflare/workerd-darwin-64@1.20260124.0':
-    optional: true
-
-  '@cloudflare/workerd-darwin-64@1.20260131.0':
-    optional: true
-
   '@cloudflare/workerd-darwin-64@1.20260426.1':
     optional: true
 
-  '@cloudflare/workerd-darwin-arm64@1.20260124.0':
-    optional: true
-
-  '@cloudflare/workerd-darwin-arm64@1.20260131.0':
+  '@cloudflare/workerd-darwin-64@1.20261023.1':
     optional: true
 
   '@cloudflare/workerd-darwin-arm64@1.20260426.1':
     optional: true
 
-  '@cloudflare/workerd-linux-64@1.20260124.0':
-    optional: true
-
-  '@cloudflare/workerd-linux-64@1.20260131.0':
+  '@cloudflare/workerd-darwin-arm64@1.20261023.1':
     optional: true
 
   '@cloudflare/workerd-linux-64@1.20260426.1':
     optional: true
 
-  '@cloudflare/workerd-linux-arm64@1.20260124.0':
-    optional: true
-
-  '@cloudflare/workerd-linux-arm64@1.20260131.0':
+  '@cloudflare/workerd-linux-64@1.20261023.1':
     optional: true
 
   '@cloudflare/workerd-linux-arm64@1.20260426.1':
     optional: true
 
-  '@cloudflare/workerd-windows-64@1.20260124.0':
+  '@cloudflare/workerd-linux-arm64@1.20261023.1':
     optional: true
 
-  '@cloudflare/workerd-windows-64@1.20260131.0':
+  '@cloudflare/workerd-windows-64@1.20260426.1':
     optional: true
 
-  '@cloudflare/workerd-windows-64@1.20260426.1':
+  '@cloudflare/workerd-windows-64@1.20261023.1':
     optional: true
 
   '@cloudflare/workers-types@4.20250214.0': {}
@@ -23472,12 +23077,6 @@ snapshots:
   '@esbuild/aix-ppc64@0.25.12':
     optional: true
 
-  '@esbuild/aix-ppc64@0.27.0':
-    optional: true
-
-  '@esbuild/aix-ppc64@0.27.3':
-    optional: true
-
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
@@ -23490,12 +23089,6 @@ snapshots:
   '@esbuild/android-arm64@0.25.12':
     optional: true
 
-  '@esbuild/android-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/android-arm64@0.27.3':
-    optional: true
-
   '@esbuild/android-arm64@0.28.1':
     optional: true
 
@@ -23511,12 +23104,6 @@ snapshots:
   '@esbuild/android-arm@0.25.12':
     optional: true
 
-  '@esbuild/android-arm@0.27.0':
-    optional: true
-
-  '@esbuild/android-arm@0.27.3':
-    optional: true
-
   '@esbuild/android-arm@0.28.1':
     optional: true
 
@@ -23529,12 +23116,6 @@ snapshots:
   '@esbuild/android-x64@0.25.12':
     optional: true
 
-  '@esbuild/android-x64@0.27.0':
-    optional: true
-
-  '@esbuild/android-x64@0.27.3':
-    optional: true
-
   '@esbuild/android-x64@0.28.1':
     optional: true
 
@@ -23547,12 +23128,6 @@ snapshots:
   '@esbuild/darwin-arm64@0.25.12':
     optional: true
 
-  '@esbuild/darwin-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/darwin-arm64@0.27.3':
-    optional: true
-
   '@esbuild/darwin-arm64@0.28.1':
     optional: true
 
@@ -23565,12 +23140,6 @@ snapshots:
   '@esbuild/darwin-x64@0.25.12':
     optional: true
 
-  '@esbuild/darwin-x64@0.27.0':
-    optional: true
-
-  '@esbuild/darwin-x64@0.27.3':
-    optional: true
-
   '@esbuild/darwin-x64@0.28.1':
     optional: true
 
@@ -23583,12 +23152,6 @@ snapshots:
   '@esbuild/freebsd-arm64@0.25.12':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/freebsd-arm64@0.27.3':
-    optional: true
-
   '@esbuild/freebsd-arm64@0.28.1':
     optional: true
 
@@ -23601,12 +23164,6 @@ snapshots:
   '@esbuild/freebsd-x64@0.25.12':
     optional: true
 
-  '@esbuild/freebsd-x64@0.27.0':
-    optional: true
-
-  '@esbuild/freebsd-x64@0.27.3':
-    optional: true
-
   '@esbuild/freebsd-x64@0.28.1':
     optional: true
 
@@ -23619,12 +23176,6 @@ snapshots:
   '@esbuild/linux-arm64@0.25.12':
     optional: true
 
-  '@esbuild/linux-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/linux-arm64@0.27.3':
-    optional: true
-
   '@esbuild/linux-arm64@0.28.1':
     optional: true
 
@@ -23637,12 +23188,6 @@ snapshots:
   '@esbuild/linux-arm@0.25.12':
     optional: true
 
-  '@esbuild/linux-arm@0.27.0':
-    optional: true
-
-  '@esbuild/linux-arm@0.27.3':
-    optional: true
-
   '@esbuild/linux-arm@0.28.1':
     optional: true
 
@@ -23655,12 +23200,6 @@ snapshots:
   '@esbuild/linux-ia32@0.25.12':
     optional: true
 
-  '@esbuild/linux-ia32@0.27.0':
-    optional: true
-
-  '@esbuild/linux-ia32@0.27.3':
-    optional: true
-
   '@esbuild/linux-ia32@0.28.1':
     optional: true
 
@@ -23679,12 +23218,6 @@ snapshots:
   '@esbuild/linux-loong64@0.25.12':
     optional: true
 
-  '@esbuild/linux-loong64@0.27.0':
-    optional: true
-
-  '@esbuild/linux-loong64@0.27.3':
-    optional: true
-
   '@esbuild/linux-loong64@0.28.1':
     optional: true
 
@@ -23697,12 +23230,6 @@ snapshots:
   '@esbuild/linux-mips64el@0.25.12':
     optional: true
 
-  '@esbuild/linux-mips64el@0.27.0':
-    optional: true
-
-  '@esbuild/linux-mips64el@0.27.3':
-    optional: true
-
   '@esbuild/linux-mips64el@0.28.1':
     optional: true
 
@@ -23715,12 +23242,6 @@ snapshots:
   '@esbuild/linux-ppc64@0.25.12':
     optional: true
 
-  '@esbuild/linux-ppc64@0.27.0':
-    optional: true
-
-  '@esbuild/linux-ppc64@0.27.3':
-    optional: true
-
   '@esbuild/linux-ppc64@0.28.1':
     optional: true
 
@@ -23733,12 +23254,6 @@ snapshots:
   '@esbuild/linux-riscv64@0.25.12':
     optional: true
 
-  '@esbuild/linux-riscv64@0.27.0':
-    optional: true
-
-  '@esbuild/linux-riscv64@0.27.3':
-    optional: true
-
   '@esbuild/linux-riscv64@0.28.1':
     optional: true
 
@@ -23751,12 +23266,6 @@ snapshots:
   '@esbuild/linux-s390x@0.25.12':
     optional: true
 
-  '@esbuild/linux-s390x@0.27.0':
-    optional: true
-
-  '@esbuild/linux-s390x@0.27.3':
-    optional: true
-
   '@esbuild/linux-s390x@0.28.1':
     optional: true
 
@@ -23769,12 +23278,6 @@ snapshots:
   '@esbuild/linux-x64@0.25.12':
     optional: true
 
-  '@esbuild/linux-x64@0.27.0':
-    optional: true
-
-  '@esbuild/linux-x64@0.27.3':
-    optional: true
-
   '@esbuild/linux-x64@0.28.1':
     optional: true
 
@@ -23784,12 +23287,6 @@ snapshots:
   '@esbuild/netbsd-arm64@0.25.12':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/netbsd-arm64@0.27.3':
-    optional: true
-
   '@esbuild/netbsd-arm64@0.28.1':
     optional: true
 
@@ -23802,12 +23299,6 @@ snapshots:
   '@esbuild/netbsd-x64@0.25.12':
     optional: true
 
-  '@esbuild/netbsd-x64@0.27.0':
-    optional: true
-
-  '@esbuild/netbsd-x64@0.27.3':
-    optional: true
-
   '@esbuild/netbsd-x64@0.28.1':
     optional: true
 
@@ -23817,12 +23308,6 @@ snapshots:
   '@esbuild/openbsd-arm64@0.25.12':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/openbsd-arm64@0.27.3':
-    optional: true
-
   '@esbuild/openbsd-arm64@0.28.1':
     optional: true
 
@@ -23835,12 +23320,6 @@ snapshots:
   '@esbuild/openbsd-x64@0.25.12':
     optional: true
 
-  '@esbuild/openbsd-x64@0.27.0':
-    optional: true
-
-  '@esbuild/openbsd-x64@0.27.3':
-    optional: true
-
   '@esbuild/openbsd-x64@0.28.1':
     optional: true
 
@@ -23850,12 +23329,6 @@ snapshots:
   '@esbuild/openharmony-arm64@0.25.12':
     optional: true
 
-  '@esbuild/openharmony-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/openharmony-arm64@0.27.3':
-    optional: true
-
   '@esbuild/openharmony-arm64@0.28.1':
     optional: true
 
@@ -23868,12 +23341,6 @@ snapshots:
   '@esbuild/sunos-x64@0.25.12':
     optional: true
 
-  '@esbuild/sunos-x64@0.27.0':
-    optional: true
-
-  '@esbuild/sunos-x64@0.27.3':
-    optional: true
-
   '@esbuild/sunos-x64@0.28.1':
     optional: true
 
@@ -23886,12 +23353,6 @@ snapshots:
   '@esbuild/win32-arm64@0.25.12':
     optional: true
 
-  '@esbuild/win32-arm64@0.27.0':
-    optional: true
-
-  '@esbuild/win32-arm64@0.27.3':
-    optional: true
-
   '@esbuild/win32-arm64@0.28.1':
     optional: true
 
@@ -23904,12 +23365,6 @@ snapshots:
   '@esbuild/win32-ia32@0.25.12':
     optional: true
 
-  '@esbuild/win32-ia32@0.27.0':
-    optional: true
-
-  '@esbuild/win32-ia32@0.27.3':
-    optional: true
-
   '@esbuild/win32-ia32@0.28.1':
     optional: true
 
@@ -23922,12 +23377,6 @@ snapshots:
   '@esbuild/win32-x64@0.25.12':
     optional: true
 
-  '@esbuild/win32-x64@0.27.0':
-    optional: true
-
-  '@esbuild/win32-x64@0.27.3':
-    optional: true
-
   '@esbuild/win32-x64@0.28.1':
     optional: true
 
@@ -26431,7 +25880,7 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@react-router/dev@7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1))(yaml@2.9.0)':
+  '@react-router/dev@7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/generator': 7.29.8
@@ -26465,7 +25914,7 @@ snapshots:
       vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       typescript: 6.0.3
-      wrangler: 4.86.0(@cloudflare/workers-types@4.20260519.1)
+      wrangler: 4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43)
     transitivePeerDependencies:
       - '@types/node'
       - babel-plugin-macros
@@ -31539,64 +30988,6 @@ snapshots:
       '@esbuild/win32-ia32': 0.25.12
       '@esbuild/win32-x64': 0.25.12
 
-  esbuild@0.27.0:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.0
-      '@esbuild/android-arm': 0.27.0
-      '@esbuild/android-arm64': 0.27.0
-      '@esbuild/android-x64': 0.27.0
-      '@esbuild/darwin-arm64': 0.27.0
-      '@esbuild/darwin-x64': 0.27.0
-      '@esbuild/freebsd-arm64': 0.27.0
-      '@esbuild/freebsd-x64': 0.27.0
-      '@esbuild/linux-arm': 0.27.0
-      '@esbuild/linux-arm64': 0.27.0
-      '@esbuild/linux-ia32': 0.27.0
-      '@esbuild/linux-loong64': 0.27.0
-      '@esbuild/linux-mips64el': 0.27.0
-      '@esbuild/linux-ppc64': 0.27.0
-      '@esbuild/linux-riscv64': 0.27.0
-      '@esbuild/linux-s390x': 0.27.0
-      '@esbuild/linux-x64': 0.27.0
-      '@esbuild/netbsd-arm64': 0.27.0
-      '@esbuild/netbsd-x64': 0.27.0
-      '@esbuild/openbsd-arm64': 0.27.0
-      '@esbuild/openbsd-x64': 0.27.0
-      '@esbuild/openharmony-arm64': 0.27.0
-      '@esbuild/sunos-x64': 0.27.0
-      '@esbuild/win32-arm64': 0.27.0
-      '@esbuild/win32-ia32': 0.27.0
-      '@esbuild/win32-x64': 0.27.0
-
-  esbuild@0.27.3:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.3
-      '@esbuild/android-arm': 0.27.3
-      '@esbuild/android-arm64': 0.27.3
-      '@esbuild/android-x64': 0.27.3
-      '@esbuild/darwin-arm64': 0.27.3
-      '@esbuild/darwin-x64': 0.27.3
-      '@esbuild/freebsd-arm64': 0.27.3
-      '@esbuild/freebsd-x64': 0.27.3
-      '@esbuild/linux-arm': 0.27.3
-      '@esbuild/linux-arm64': 0.27.3
-      '@esbuild/linux-ia32': 0.27.3
-      '@esbuild/linux-loong64': 0.27.3
-      '@esbuild/linux-mips64el': 0.27.3
-      '@esbuild/linux-ppc64': 0.27.3
-      '@esbuild/linux-riscv64': 0.27.3
-      '@esbuild/linux-s390x': 0.27.3
-      '@esbuild/linux-x64': 0.27.3
-      '@esbuild/netbsd-arm64': 0.27.3
-      '@esbuild/netbsd-x64': 0.27.3
-      '@esbuild/openbsd-arm64': 0.27.3
-      '@esbuild/openbsd-x64': 0.27.3
-      '@esbuild/openharmony-arm64': 0.27.3
-      '@esbuild/sunos-x64': 0.27.3
-      '@esbuild/win32-arm64': 0.27.3
-      '@esbuild/win32-ia32': 0.27.3
-      '@esbuild/win32-x64': 0.27.3
-
   esbuild@0.28.1:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.28.1
@@ -34888,39 +34279,28 @@ snapshots:
       schema-utils: 4.8.1(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
 
-  miniflare@4.20260124.0:
-    dependencies:
-      '@cspotcode/source-map-support': 0.8.1
-      sharp: 0.34.5
-      undici: 7.18.2
-      workerd: 1.20260124.0
-      ws: 8.18.0
-      youch: 4.1.0-beta.10
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
-
-  miniflare@4.20260131.0:
+  miniflare@4.20260426.0:
     dependencies:
       '@cspotcode/source-map-support': 0.8.1
       sharp: 0.34.5
-      undici: 7.18.2
-      workerd: 1.20260131.0
+      undici: 7.24.8
+      workerd: 1.20260426.1
       ws: 8.18.0
       youch: 4.1.0-beta.10
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
 
-  miniflare@4.20260426.0:
+  miniflare@5.20261023.3-beta(@types/node@20.19.43):
     dependencies:
       '@cspotcode/source-map-support': 0.8.1
-      sharp: 0.34.5
-      undici: 7.24.8
-      workerd: 1.20260426.1
-      ws: 8.18.0
+      sharp: 0.35.5(@types/node@20.19.43)
+      undici: 7.30.1
+      workerd: 1.20261023.1
+      ws: 8.21.0
       youch: 4.1.0-beta.10
     transitivePeerDependencies:
+      - '@types/node'
       - bufferutil
       - utf-8-validate
 
@@ -38988,7 +38368,6 @@ snapshots:
       '@img/sharp-win32-ia32': 0.35.5
       '@img/sharp-win32-x64': 0.35.5
       '@types/node': 20.19.43
-    optional: true
 
   shebang-command@2.0.0:
     dependencies:
@@ -40078,10 +39457,10 @@ snapshots:
 
   undici@6.24.1: {}
 
-  undici@7.18.2: {}
-
   undici@7.24.8: {}
 
+  undici@7.30.1: {}
+
   unenv@1.10.0:
     dependencies:
       consola: 3.4.2
@@ -41387,22 +40766,6 @@ snapshots:
 
   wordwrap@1.0.0: {}
 
-  workerd@1.20260124.0:
-    optionalDependencies:
-      '@cloudflare/workerd-darwin-64': 1.20260124.0
-      '@cloudflare/workerd-darwin-arm64': 1.20260124.0
-      '@cloudflare/workerd-linux-64': 1.20260124.0
-      '@cloudflare/workerd-linux-arm64': 1.20260124.0
-      '@cloudflare/workerd-windows-64': 1.20260124.0
-
-  workerd@1.20260131.0:
-    optionalDependencies:
-      '@cloudflare/workerd-darwin-64': 1.20260131.0
-      '@cloudflare/workerd-darwin-arm64': 1.20260131.0
-      '@cloudflare/workerd-linux-64': 1.20260131.0
-      '@cloudflare/workerd-linux-arm64': 1.20260131.0
-      '@cloudflare/workerd-windows-64': 1.20260131.0
-
   workerd@1.20260426.1:
     optionalDependencies:
       '@cloudflare/workerd-darwin-64': 1.20260426.1
@@ -41411,58 +40774,69 @@ snapshots:
       '@cloudflare/workerd-linux-arm64': 1.20260426.1
       '@cloudflare/workerd-windows-64': 1.20260426.1
 
+  workerd@1.20261023.1:
+    optionalDependencies:
+      '@cloudflare/workerd-darwin-64': 1.20261023.1
+      '@cloudflare/workerd-darwin-arm64': 1.20261023.1
+      '@cloudflare/workerd-linux-64': 1.20261023.1
+      '@cloudflare/workerd-linux-arm64': 1.20261023.1
+      '@cloudflare/workerd-windows-64': 1.20261023.1
+
   workerpool@6.5.1: {}
 
   workerpool@9.3.4: {}
 
-  wrangler@4.61.0(@cloudflare/workers-types@5.20260710.1):
+  wrangler@4.156.0(@cloudflare/workers-types@4.20250922.0)(@types/node@20.19.43):
     dependencies:
-      '@cloudflare/kv-asset-handler': 0.4.2
-      '@cloudflare/unenv-preset': 2.11.0(unenv@2.0.0-rc.24)(workerd@1.20260124.0)
+      '@cloudflare/kv-asset-handler': 0.5.0
+      '@cloudflare/unenv-preset': 2.16.2(unenv@2.0.0-rc.24)(workerd@1.20261023.1)
       blake3-wasm: 2.1.5
-      esbuild: 0.27.0
-      miniflare: 4.20260124.0
+      esbuild: 0.28.2
+      miniflare: 5.20261023.3-beta(@types/node@20.19.43)
       path-to-regexp: 6.3.0
       unenv: 2.0.0-rc.24
-      workerd: 1.20260124.0
+      workerd: 1.20261023.1
     optionalDependencies:
-      '@cloudflare/workers-types': 5.20260710.1
+      '@cloudflare/workers-types': 4.20250922.0
       fsevents: 2.3.3
     transitivePeerDependencies:
+      - '@types/node'
       - bufferutil
       - utf-8-validate
 
-  wrangler@4.62.0(@cloudflare/workers-types@4.20250922.0):
+  wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43):
     dependencies:
-      '@cloudflare/kv-asset-handler': 0.4.2
-      '@cloudflare/unenv-preset': 2.12.0(unenv@2.0.0-rc.24)(workerd@1.20260131.0)
+      '@cloudflare/kv-asset-handler': 0.5.0
+      '@cloudflare/unenv-preset': 2.16.2(unenv@2.0.0-rc.24)(workerd@1.20261023.1)
       blake3-wasm: 2.1.5
-      esbuild: 0.27.0
-      miniflare: 4.20260131.0
+      esbuild: 0.28.2
+      miniflare: 5.20261023.3-beta(@types/node@20.19.43)
       path-to-regexp: 6.3.0
       unenv: 2.0.0-rc.24
-      workerd: 1.20260131.0
+      workerd: 1.20261023.1
     optionalDependencies:
-      '@cloudflare/workers-types': 4.20250922.0
+      '@cloudflare/workers-types': 4.20260519.1
       fsevents: 2.3.3
     transitivePeerDependencies:
+      - '@types/node'
       - bufferutil
       - utf-8-validate
 
-  wrangler@4.86.0(@cloudflare/workers-types@4.20260519.1):
+  wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43):
     dependencies:
-      '@cloudflare/kv-asset-handler': 0.4.2
-      '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)
+      '@cloudflare/kv-asset-handler': 0.5.0
+      '@cloudflare/unenv-preset': 2.16.2(unenv@2.0.0-rc.24)(workerd@1.20261023.1)
       blake3-wasm: 2.1.5
-      esbuild: 0.27.3
-      miniflare: 4.20260426.0
+      esbuild: 0.28.2
+      miniflare: 5.20261023.3-beta(@types/node@20.19.43)
       path-to-regexp: 6.3.0
       unenv: 2.0.0-rc.24
-      workerd: 1.20260426.1
+      workerd: 1.20261023.1
     optionalDependencies:
-      '@cloudflare/workers-types': 4.20260519.1
+      '@cloudflare/workers-types': 5.20260710.1
       fsevents: 2.3.3
     transitivePeerDependencies:
+      - '@types/node'
       - bufferutil
       - utf-8-validate
 
@@ -41493,6 +40867,8 @@ snapshots:
 
   ws@8.18.0: {}
 
+  ws@8.21.0: {}
+
   ws@8.21.3: {}
 
   wsl-utils@0.3.1:

From bcb43eae9c821bdc4f3bd4ce622316a048f63398 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 11:06:39 +0100
Subject: [PATCH 100/169] chore(deps-dev): Bump redux from 4.0.5 to 5.0.1
 (#25959)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [redux](https://github.com/reduxjs/redux) from 4.0.5 to 5.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/reduxjs/redux/releases">redux's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<p>This <strong>patch release</strong> adjusts the
<code>isPlainObject</code> util to allow objects created via
<code>Object.create(null)</code>, and fixes a type issue which
accidentally made the store state type non-nullable.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(isPlainObject): support check Object.create(null) by <a
href="https://github.com/zhe-he"><code>@​zhe-he</code></a> in <a
href="https://redirect.github.com/reduxjs/redux/pull/4633">reduxjs/redux#4633</a></li>
<li>fix(types/store): Unexpectedly narrowed return type of function
<code>Store['getState']</code> by <a
href="https://github.com/exuanbo"><code>@​exuanbo</code></a> in <a
href="https://redirect.github.com/reduxjs/redux/pull/4638">reduxjs/redux#4638</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/reduxjs/redux/compare/v5.0.0...v5.0.1">https://github.com/reduxjs/redux/compare/v5.0.0...v5.0.1</a></p>
<h2>v5.0.0</h2>
<p>This <strong>major release</strong>:</p>
<ul>
<li>Converts the codebase to TypeScript</li>
<li>Updates the packaging for better ESM/CJS compatibility and
modernizes the build output</li>
<li>Requires that <code>action.type</code> <em>must</em> be a
string</li>
<li>Continues to mark <code>createStore</code> as deprecated</li>
<li>Deprecates the <code>AnyAction</code> type in favor of an
<code>UnknownAction</code> type that is used everywhere</li>
<li>Removes the <code>PreloadedState</code> type in favor of a new
generic argument for the <code>Reducer</code> type.</li>
</ul>
<p>This release has <strong>breaking changes</strong>.</p>
<p>This release is part of a wave of major versions of all the Redux
packages: <strong>Redux Toolkit 2.0, Redux core 5.0, React-Redux 9.0,
Reselect 5.0, and Redux Thunk 3.0</strong>.</p>
<p>For full details on all of the breaking changes and other significant
changes to all of those packages, see the <strong><a
href="https://redux.js.org/usage/migrations/migrating-rtk-2">&quot;Migrating
to RTK 2.0 and Redux 5.0&quot; migration guide</a></strong> in the Redux
docs.</p>
<blockquote>
<p>[!NOTE]
The Redux core, Reselect, and Redux Thunk packages are included as part
of Redux Toolkit, and RTK users do not need to manually upgrade them -
you'll get them as part of the upgrade to RTK 2.0. (If you're not using
Redux Toolkit yet, <a
href="https://redux.js.org/usage/migrating-to-modern-redux"><strong>please
start migrating your existing legacy Redux code to use Redux Toolkit
today!</strong></a>)</p>
</blockquote>
<pre lang="bash"><code># RTK
npm install @reduxjs/toolkit
yarn add @reduxjs/toolkit
<h1>Standalone</h1>
<p>npm install redux
yarn add redux
</code></pre></p>
<h2>Changelog</h2>
<h3>ESM/CJS Package Compatibility</h3>
<p>The biggest theme of the Redux v5 and RTK 2.0 releases is trying to
get &quot;true&quot; ESM package publishing compatibility in place,
while still supporting CJS in the published package.</p>
<p><strong>The primary build artifact is now an ESM file,
<code>dist/redux.mjs</code></strong>. Most build tools should pick this
up. There's also a CJS artifact, and a second copy of the ESM file named
<code>redux.legacy-esm.js</code> to support Webpack 4 (which does not
recognize the <code>exports</code> field in <code>package.json</code>).
Additionally, all of the build artifacts now live under
<code>./dist/</code> in the published package.</p>
<h4>Modernized Build Output</h4>
<p>We now publish modern JS syntax targeting ES2020, including optional
chaining, object spread, and other modern syntax. If you need to</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/reduxjs/redux/commit/50b010210df25c470386f7e39a9389a4a77b3842"><code>50b0102</code></a>
format isPlainObject.ts</li>
<li><a
href="https://github.com/reduxjs/redux/commit/66f955f764cb8e1a21ce42f8e4c522cdb87d056a"><code>66f955f</code></a>
5.0.1</li>
<li><a
href="https://github.com/reduxjs/redux/commit/ffb02ebdf54b918b68af3d9168dc493ec5b212fb"><code>ffb02eb</code></a>
Merge pull request <a
href="https://redirect.github.com/reduxjs/redux/issues/4644">#4644</a>
from reduxjs/publish-ci</li>
<li><a
href="https://github.com/reduxjs/redux/commit/d641945e3f7570a0ccd8494c51c4484d9403c475"><code>d641945</code></a>
add me to FUNDING.yml</li>
<li><a
href="https://github.com/reduxjs/redux/commit/7a2fa784b9887a00ec564dbc85734922b2a9fe43"><code>7a2fa78</code></a>
Add publish CI workflow</li>
<li><a
href="https://github.com/reduxjs/redux/commit/fa2d899ae5f0f32593fda0b9fe5cd5ffd14a869d"><code>fa2d899</code></a>
Merge pull request <a
href="https://redirect.github.com/reduxjs/redux/issues/4638">#4638</a>
from exuanbo/patch-1</li>
<li><a
href="https://github.com/reduxjs/redux/commit/9e8a320a800470f1bca34e07e23457538148412e"><code>9e8a320</code></a>
add type test</li>
<li><a
href="https://github.com/reduxjs/redux/commit/105e38904e442a43399a6b4174c4f6c8709a0680"><code>105e389</code></a>
Merge pull request <a
href="https://redirect.github.com/reduxjs/redux/issues/4643">#4643</a>
from ziayanj/patch-1</li>
<li><a
href="https://github.com/reduxjs/redux/commit/f259beb49b746c428827babf307ab95e0a97ef0a"><code>f259beb</code></a>
Update why-rtk-is-redux-today.md</li>
<li><a
href="https://github.com/reduxjs/redux/commit/3cd25e11cbf6ddecd9dc3fcc4008df5448f9af30"><code>3cd25e1</code></a>
Merge pull request <a
href="https://redirect.github.com/reduxjs/redux/issues/4642">#4642</a>
from factiondavid/patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/reduxjs/redux/compare/v4.0.5...v5.0.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~phryneas">phryneas</a>, a new releaser for
redux since your current version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrei <168741329+andreiborza@users.noreply.github.com>
---
 packages/react/package.json |  2 +-
 pnpm-lock.yaml              | 19 +++++--------------
 2 files changed, 6 insertions(+), 15 deletions(-)

diff --git a/packages/react/package.json b/packages/react/package.json
index ad3180f80c6f..ffb392889d3b 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -89,7 +89,7 @@
     "react-router-4": "npm:react-router@4.1.0",
     "react-router-5": "npm:react-router@5.3.4",
     "react-router-6": "npm:react-router@6.30.4",
-    "redux": "^4.0.5"
+    "redux": "^5.0.1"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6ac487eaedde..c3e6aa123a5d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1945,8 +1945,8 @@ importers:
         specifier: npm:react-router@6.30.4
         version: react-router@6.30.4(react@18.3.1)
       redux:
-        specifier: ^4.0.5
-        version: 4.0.5
+        specifier: ^5.0.1
+        version: 5.0.1
 
   packages/react-router:
     dependencies:
@@ -16604,8 +16604,8 @@ packages:
     resolution: {integrity: sha512-LDsoVvb/CpoV9EN3FXvgvSHNJWuCIzl9MiO3ppOevuGLpSGJhwfQjpEwfFJcQvNSddHADDdZaWx0HnmMxRXG7g==}
     engines: {node: '>= 18.19.0'}
 
-  redux@4.0.5:
-    resolution: {integrity: sha512-VSz1uMAH24DM6MF72vcojpYPtrTUu3ByVWfPL1nPfVRb5mZVTve5GnNCUV53QM/BZ66xfWrm0CTWoM+Xlz8V1w==}
+  redux@5.0.1:
+    resolution: {integrity: sha512-M9/ELqF6fy8FwmkpnF0S3YKOqMyoWJ4+CS5Efg2ct3oY9daQvd/Pc71FpGZsVsbl3Cpb+IIcjBDUnnyBdQbq4w==}
 
   reflect-metadata@0.1.13:
     resolution: {integrity: sha512-Ts1Y/anZELhSsjMcU605fU9RE4Oi3p5ORujwbIKXfWa+0Zxs510Qrmrce5/Jowq3cHSZSJqBjypxmHarc+vEWg==}
@@ -17734,10 +17734,6 @@ packages:
     peerDependencies:
       react: ^16.11.0 || ^17.0.0 || ^18.0.0
 
-  symbol-observable@1.2.0:
-    resolution: {integrity: sha512-e900nM8RRtGhlV36KGEU9k65K3mPb1WV70OdjfxlG2EAuM1noi/E/BaW/uMhL7bPEssK8QV57vN3esixjUvcXQ==}
-    engines: {node: '>=0.10.0'}
-
   symbol-observable@4.0.0:
     resolution: {integrity: sha512-b19dMThMV4HVFynSAM1++gBHAbk2Tc/osgLIBZMKsyqh34jb2e8Os7T6ZW/Bt3pJFdBTd2JwAnAAEQV7rSNvcQ==}
     engines: {node: '>=0.10'}
@@ -37504,10 +37500,7 @@ snapshots:
       - '@node-rs/xxhash'
       - '@opentelemetry/api'
 
-  redux@4.0.5:
-    dependencies:
-      loose-envify: 1.4.0
-      symbol-observable: 1.2.0
+  redux@5.0.1: {}
 
   reflect-metadata@0.1.13: {}
 
@@ -38931,8 +38924,6 @@ snapshots:
       react: 18.3.1
       use-sync-external-store: 1.2.2(react@18.3.1)
 
-  symbol-observable@1.2.0: {}
-
   symbol-observable@4.0.0: {}
 
   symbol-tree@3.2.4: {}

From 9403d911a0ff07e333a8aec5dacf43938a5d9c03 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Tue, 3 Nov 2026 11:34:51 +0100
Subject: [PATCH 101/169] fix(deps): Bump glob to 14 and drop the direct
 dependency from react-router (#26014)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** `npm audit` flags `glob@13` and `minimatch@10` in
`@sentry/bundler-plugins` and `@sentry/react-router`. Only glob 14 fixes
this. This PR takes over #25981 (@renantatsuo) and #25982 (@nicohrubec)
with their commits kept, and adds two fixes on top:

- React Router now uses `globFiles` from the bundler plugins instead of
its own `glob` dependency.
- The default `filesToDeleteAfterUpload` pattern used the raw build
directory path. On Windows that contains backslashes, which glob treats
as escapes, so source maps were never deleted after upload. The path is
now converted to forward slashes.

The `browser-integration-tests` dev dependency is bumped as well. glob
13 stays in the lockfile through `nx`, `rimraf` and `@vercel/nft`, which
are all dev-only.

**How to review:** The bump and `globFiles` commits are unchanged from
the original PRs. Look at the forward-slash fix in `handleOnBuildEnd.ts`
and the new `glob.test.ts` case that runs the upload patterns against
the new minimatch 11 matcher.

Closes #25969

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: renantatsuo <tatsuorenan@gmail.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
Co-authored-by: GPT-6 <codex@openai.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .../browser-integration-tests/package.json    |  2 +-
 .../react-router-sourcemaps/assert-build.ts   |  8 +++
 packages/bundler-plugins/package.json         |  2 +-
 .../bundler-plugins/test/core/glob.test.ts    |  9 ++++
 packages/react-router/package.json            |  1 -
 .../src/vite/buildEnd/handleOnBuildEnd.ts     | 15 +++---
 .../vite/buildEnd/handleOnBuildEnd.test.ts    | 51 +++++++++++++-----
 pnpm-lock.yaml                                | 52 ++++++++++++++++---
 8 files changed, 111 insertions(+), 29 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index 416639132e92..000d5840580e 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -77,6 +77,6 @@
     "@sentry/rrweb-types": "^2.45.0",
     "@sentry/wasm": "11.10.0",
     "@types/node": "^20.19.0",
-    "glob": "^13.0.6"
+    "glob": "^14.0.3"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/react-router-sourcemaps/assert-build.ts b/dev-packages/e2e-tests/test-applications/react-router-sourcemaps/assert-build.ts
index 2bc4986220d4..ca6acfb5a6aa 100644
--- a/dev-packages/e2e-tests/test-applications/react-router-sourcemaps/assert-build.ts
+++ b/dev-packages/e2e-tests/test-applications/react-router-sourcemaps/assert-build.ts
@@ -111,4 +111,12 @@ for (const chunk of chunks) {
 assert.ok(crossCheckedChunks > 0, 'Expected at least one uploaded chunk to cross-check debug IDs against');
 console.log(`${crossCheckedChunks} chunk(s) ship a debug ID that was uploaded\n`);
 
+const remainingClientMaps = fs
+  .readdirSync(CLIENT_ASSETS_DIR, { recursive: true })
+  .filter(file => file.endsWith('.map'));
+assert.deepEqual(remainingClientMaps, [], 'Expected client source maps to be deleted after upload');
+
+const remainingServerMaps = fs.readdirSync('build/server', { recursive: true }).filter(file => file.endsWith('.map'));
+assert.ok(remainingServerMaps.length > 0, 'Expected server source maps outside the deletion pattern to be preserved');
+
 console.log('All react-router source map assertions passed!');
diff --git a/packages/bundler-plugins/package.json b/packages/bundler-plugins/package.json
index 3bb53c945278..60df96e18f71 100644
--- a/packages/bundler-plugins/package.json
+++ b/packages/bundler-plugins/package.json
@@ -117,7 +117,7 @@
   "dependencies": {
     "@sentry/core": "11.10.0",
     "dotenv": "^17.4.2",
-    "glob": "^13.0.6",
+    "glob": "^14.0.3",
     "magic-string": "~0.30.8 || ^1.0.0",
     "oxc-parser": "^0.152.0",
     "sentry": "^0.45.0",
diff --git a/packages/bundler-plugins/test/core/glob.test.ts b/packages/bundler-plugins/test/core/glob.test.ts
index 74583dd01c4e..ffbc776fecc6 100644
--- a/packages/bundler-plugins/test/core/glob.test.ts
+++ b/packages/bundler-plugins/test/core/glob.test.ts
@@ -140,6 +140,15 @@ describe('globFiles', () => {
       expect(result).toEqual([]);
     });
 
+    it.skipIf(process.platform === 'win32')('matches files with a query or hash suffix', async () => {
+      const files = await Promise.all([touch('a.js?v=1'), touch('a.js.map#hash'), touch('b.mjs?v=1#hash')]);
+      await touch('c.css?v=1');
+
+      const result = await globFiles(JS_AND_MAP_PATTERNS, { root: tmpDir });
+      result.sort();
+      expect(result).toEqual(files.sort());
+    });
+
     it('works in nested subdirectories', async () => {
       const files = await Promise.all([touch('src', 'deep', 'a.js'), touch('src', 'deep', 'a.js.map')]);
 
diff --git a/packages/react-router/package.json b/packages/react-router/package.json
index 07d576d599b0..a97bb7ee240e 100644
--- a/packages/react-router/package.json
+++ b/packages/react-router/package.json
@@ -64,7 +64,6 @@
     "@sentry/server-runtime-injection": "11.10.0",
     "@sentry/server-utils": "11.10.0",
     "@sentry/bundler-plugins": "11.10.0",
-    "glob": "^13.0.6",
     "sentry": "^0.44.0"
   },
   "devDependencies": {
diff --git a/packages/react-router/src/vite/buildEnd/handleOnBuildEnd.ts b/packages/react-router/src/vite/buildEnd/handleOnBuildEnd.ts
index a4cf0403e248..0f83b4553ecb 100644
--- a/packages/react-router/src/vite/buildEnd/handleOnBuildEnd.ts
+++ b/packages/react-router/src/vite/buildEnd/handleOnBuildEnd.ts
@@ -1,8 +1,9 @@
 import { rm } from 'node:fs/promises';
+import * as path from 'node:path';
 import type { Config } from '@react-router/dev/config';
 import { createSentrySDK } from 'sentry';
+import { globFiles } from '@sentry/bundler-plugins/core';
 import type { SentryVitePluginOptions } from '@sentry/bundler-plugins/vite';
-import { glob } from 'glob';
 import type { SentryReactRouterBuildOptions } from '../types';
 
 type BuildEndHook = NonNullable<Config['buildEnd']>;
@@ -24,6 +25,11 @@ function getSentryConfig(viteConfig: unknown): SentryReactRouterBuildOptions {
   return (viteConfig as { sentryConfig: SentryReactRouterBuildOptions }).sentryConfig;
 }
 
+/** Glob patterns need forward slashes, but React Router resolves `buildDirectory` with the platform separator. */
+function toGlobPath(directory: string): string {
+  return directory.split(path.sep).join('/');
+}
+
 /**
  * A build end hook that handles Sentry release creation and source map uploads.
  * It creates a new Sentry release if configured, uploads source maps to Sentry,
@@ -123,7 +129,7 @@ export const sentryOnBuildEnd: BuildEndHook = async ({ reactRouterConfig, viteCo
 
   // set a default value no option was set
   if (typeof updatedFilesToDeleteAfterUpload === 'undefined') {
-    updatedFilesToDeleteAfterUpload = [`${reactRouterConfig.buildDirectory}/**/*.map`];
+    updatedFilesToDeleteAfterUpload = [`${toGlobPath(reactRouterConfig.buildDirectory)}/**/*.map`];
     debug &&
       // eslint-disable-next-line no-console
       console.info(
@@ -134,10 +140,7 @@ export const sentryOnBuildEnd: BuildEndHook = async ({ reactRouterConfig, viteCo
   }
   if (updatedFilesToDeleteAfterUpload) {
     try {
-      const filePathsToDelete = await glob(updatedFilesToDeleteAfterUpload, {
-        absolute: true,
-        nodir: true,
-      });
+      const filePathsToDelete = await globFiles(updatedFilesToDeleteAfterUpload);
       if (debug) {
         filePathsToDelete.forEach(filePathToDelete => {
           // eslint-disable-next-line no-console
diff --git a/packages/react-router/test/vite/buildEnd/handleOnBuildEnd.test.ts b/packages/react-router/test/vite/buildEnd/handleOnBuildEnd.test.ts
index 560552ed278d..548fea3b7145 100644
--- a/packages/react-router/test/vite/buildEnd/handleOnBuildEnd.test.ts
+++ b/packages/react-router/test/vite/buildEnd/handleOnBuildEnd.test.ts
@@ -1,6 +1,7 @@
 import { createSentrySDK } from 'sentry';
 import { rm } from 'node:fs/promises';
-import { glob } from 'glob';
+import type * as path from 'node:path';
+import { globFiles } from '@sentry/bundler-plugins/core';
 import type { ResolvedConfig } from 'vite';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import { sentryOnBuildEnd } from '../../../src/vite/buildEnd/handleOnBuildEnd';
@@ -11,7 +12,7 @@ vi.mock('node:fs/promises', () => {
   const rm = vi.fn().mockResolvedValue(undefined);
   return { rm, default: { rm } };
 });
-vi.mock('glob');
+vi.mock('@sentry/bundler-plugins/core', () => ({ globFiles: vi.fn() }));
 
 type TestConfig = ResolvedConfig & {
   sentryConfig: SentryReactRouterBuildOptions;
@@ -62,7 +63,7 @@ describe('sentryOnBuildEnd', () => {
     vi.mocked(createSentrySDK)
       .mockReset()
       .mockReturnValue(mockSentrySdkInstance as unknown as ReturnType<typeof createSentrySDK>);
-    vi.mocked(glob).mockResolvedValue(['/build/file1.map', '/build/file2.map']);
+    vi.mocked(globFiles).mockResolvedValue(['/build/file1.map', '/build/file2.map']);
     vi.mocked(rm).mockResolvedValue(undefined);
   });
 
@@ -126,10 +127,7 @@ describe('sentryOnBuildEnd', () => {
       directory: '/build',
       release: '1.2.3',
     });
-    expect(glob).toHaveBeenCalledWith(['./build/custom/**/*.map'], {
-      absolute: true,
-      nodir: true,
-    });
+    expect(globFiles).toHaveBeenCalledWith(['./build/custom/**/*.map']);
   });
 
   it('should upload source maps when enabled', async () => {
@@ -196,7 +194,7 @@ describe('sentryOnBuildEnd', () => {
 
     expect(mockSentrySdkInstance.sourcemap.inject).not.toHaveBeenCalled();
     expect(mockSentrySdkInstance.sourcemap.upload).not.toHaveBeenCalled();
-    expect(glob).not.toHaveBeenCalled();
+    expect(globFiles).not.toHaveBeenCalled();
     expect(rm).not.toHaveBeenCalled();
   });
 
@@ -219,7 +217,37 @@ describe('sentryOnBuildEnd', () => {
 
     expect(mockSentrySdkInstance.sourcemap.inject).toHaveBeenCalledWith({ directory: '/build' });
     expect(mockSentrySdkInstance.sourcemap.upload).not.toHaveBeenCalled();
-    expect(glob).not.toHaveBeenCalled();
+    expect(globFiles).not.toHaveBeenCalled();
+  });
+
+  it('deletes the source maps in the build directory by default', async () => {
+    // @ts-expect-error - mocking the React config
+    await sentryOnBuildEnd(defaultConfig);
+
+    expect(globFiles).toHaveBeenCalledWith(['/build/**/*.map']);
+    expect(rm).toHaveBeenCalledWith('/build/file1.map', { force: true });
+    expect(rm).toHaveBeenCalledWith('/build/file2.map', { force: true });
+  });
+
+  it('builds the default deletion pattern with forward slashes on Windows', async () => {
+    vi.doMock('node:path', async importOriginal => ({
+      ...(await importOriginal<typeof path>()),
+      sep: '\\',
+    }));
+    const { sentryOnBuildEnd: sentryOnBuildEndWin32 } = await import('../../../src/vite/buildEnd/handleOnBuildEnd');
+    const { globFiles: globFilesWin32 } = await import('@sentry/bundler-plugins/core');
+    vi.mocked(globFilesWin32).mockResolvedValue([]);
+
+    const config = {
+      ...defaultConfig,
+      reactRouterConfig: { ...defaultConfig.reactRouterConfig, buildDirectory: 'C:\\app\\build' },
+    };
+
+    // @ts-expect-error - mocking the React config
+    await sentryOnBuildEndWin32(config);
+
+    expect(globFilesWin32).toHaveBeenCalledWith(['C:/app/build/**/*.map']);
+    vi.doUnmock('node:path');
   });
 
   it('should delete custom files after upload when specified', async () => {
@@ -239,10 +267,7 @@ describe('sentryOnBuildEnd', () => {
     // @ts-expect-error - mocking the React config
     await sentryOnBuildEnd(config);
 
-    expect(glob).toHaveBeenCalledWith('/custom/**/*.map', {
-      absolute: true,
-      nodir: true,
-    });
+    expect(globFiles).toHaveBeenCalledWith('/custom/**/*.map');
   });
 
   it('should handle errors during release creation gracefully', async () => {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c3e6aa123a5d..f73e767d7302 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -344,8 +344,8 @@ importers:
         specifier: ^20.19.0
         version: 20.19.43
       glob:
-        specifier: ^13.0.6
-        version: 13.0.6
+        specifier: ^14.0.3
+        version: 14.0.3
 
   dev-packages/bun-integration-tests:
     dependencies:
@@ -1163,8 +1163,8 @@ importers:
         specifier: ^17.4.2
         version: 17.4.2
       glob:
-        specifier: ^13.0.6
-        version: 13.0.6
+        specifier: ^14.0.3
+        version: 14.0.3
       magic-string:
         specifier: ~0.30.8 || ^1.0.0
         version: 0.30.21
@@ -1977,9 +1977,6 @@ importers:
       '@sentry/server-utils':
         specifier: 11.10.0
         version: link:../server-utils
-      glob:
-        specifier: ^13.0.6
-        version: 13.0.6
       sentry:
         specifier: ^0.44.0
         version: 0.44.0
@@ -5805,6 +5802,9 @@ packages:
     resolution: {integrity: sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==}
     engines: {node: '>=18.0.0'}
 
+  '@isaacs/nonrecursive-glob-match@1.0.3':
+    resolution: {integrity: sha512-SI7kyKHq4XXDRozw+r9GlRZkia1ZkFrpLW98r2IC2Bpr8YkFGE3fvjzmxCG0x78A++69HmDNrDvSMYBZmHGpKA==}
+
   '@istanbuljs/load-nyc-config@1.1.0':
     resolution: {integrity: sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==}
     engines: {node: '>=8'}
@@ -10169,6 +10169,10 @@ packages:
   brace-expansion@2.1.7:
     resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
 
+  brace-expansion@5.0.12:
+    resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
+    engines: {node: 20 || >=22}
+
   brace-expansion@5.0.8:
     resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
     engines: {node: 20 || >=22}
@@ -12566,6 +12570,10 @@ packages:
     resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
     engines: {node: 18 || 20 || >=22}
 
+  glob@14.0.3:
+    resolution: {integrity: sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==}
+    engines: {node: 18 || 20 || >=22}
+
   glob@5.0.15:
     resolution: {integrity: sha512-c9IPMazfRITpmAAKi22dK1VKxGDX9ehhqfABDriL/lzO92xcUKEJPQHrVA/2YHSNFB4iFlykVmWvwo48nr3OxA==}
     deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
@@ -14422,6 +14430,10 @@ packages:
     resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
     engines: {node: 18 || 20 || >=22}
 
+  minimatch@11.0.3:
+    resolution: {integrity: sha512-iny/40PEGkNJQ5/Pv6z3nm6FbRAby32GeZRjCUJk2WnNDbgPSTcdI+DDvLqsgBdD4cD5sMtMheqPPnehCCa8Nw==}
+    engines: {node: 18 || 20 || >=22}
+
   minimatch@3.1.5:
     resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
 
@@ -15601,6 +15613,10 @@ packages:
     resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
     engines: {node: 18 || 20 || >=22}
 
+  path-scurry@3.0.0:
+    resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==}
+    engines: {node: 18 || 20 || >=22}
+
   path-to-regexp@0.1.12:
     resolution: {integrity: sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==}
 
@@ -24069,6 +24085,8 @@ snapshots:
     dependencies:
       minipass: 7.1.3
 
+  '@isaacs/nonrecursive-glob-match@1.0.3': {}
+
   '@istanbuljs/load-nyc-config@1.1.0':
     dependencies:
       camelcase: 5.3.1
@@ -29093,6 +29111,10 @@ snapshots:
     dependencies:
       balanced-match: 1.0.2
 
+  brace-expansion@5.0.12:
+    dependencies:
+      balanced-match: 4.0.3
+
   brace-expansion@5.0.8:
     dependencies:
       balanced-match: 4.0.3
@@ -31973,6 +31995,12 @@ snapshots:
       minipass: 7.1.3
       path-scurry: 2.0.2
 
+  glob@14.0.3:
+    dependencies:
+      minimatch: 11.0.3
+      minipass: 7.1.3
+      path-scurry: 3.0.0
+
   glob@5.0.15:
     dependencies:
       inflight: 1.0.6
@@ -34306,6 +34334,11 @@ snapshots:
     dependencies:
       brace-expansion: 5.0.8
 
+  minimatch@11.0.3:
+    dependencies:
+      '@isaacs/nonrecursive-glob-match': 1.0.3
+      brace-expansion: 5.0.12
+
   minimatch@3.1.5:
     dependencies:
       brace-expansion: 1.1.21
@@ -36240,6 +36273,11 @@ snapshots:
       lru-cache: 11.4.0
       minipass: 7.1.3
 
+  path-scurry@3.0.0:
+    dependencies:
+      lru-cache: 11.4.0
+      minipass: 7.1.3
+
   path-to-regexp@0.1.12: {}
 
   path-to-regexp@1.9.0:

From 883abb5d51795f2027d0e412425b86b554a90f19 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 11:45:25 +0100
Subject: [PATCH 102/169] test(aws-serverless): Move Lambda extension setup
 outside test timeout (#25975)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Cold module loading and mock setup can consume the test’s
five-second timeout before it reaches the assertions. Run that setup in
`beforeEach` so the timeout covers the polling behavior being tested.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../test/lambda-extension-index.test.ts             | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/packages/aws-serverless/test/lambda-extension-index.test.ts b/packages/aws-serverless/test/lambda-extension-index.test.ts
index 0927b1c75469..76c813538ebb 100644
--- a/packages/aws-serverless/test/lambda-extension-index.test.ts
+++ b/packages/aws-serverless/test/lambda-extension-index.test.ts
@@ -1,9 +1,12 @@
 import { afterEach, beforeEach, expect, test, vi } from 'vitest';
 
-beforeEach(() => {
+let extension: Awaited<ReturnType<typeof setupExtension>>;
+
+beforeEach(async () => {
   vi.resetModules();
   vi.useFakeTimers();
   vi.setSystemTime(0);
+  extension = await setupExtension();
 });
 
 afterEach(() => {
@@ -24,7 +27,7 @@ async function setupExtension() {
 test.each(['ECONNRESET', 'ECONNREFUSED', 'EPIPE', 'ETIMEDOUT', 'EAI_AGAIN'])(
   'recovers from %s without exiting',
   async code => {
-    const { next, exit, log } = await setupExtension();
+    const { next, exit, log } = extension;
     next.mockRejectedValueOnce(Object.assign(new Error('Connection failed'), { code })).mockResolvedValueOnce();
 
     const { POLL_RETRY_DELAYS } = await import('../src/lambda-extension/index');
@@ -41,7 +44,7 @@ test.each(['ECONNRESET', 'ECONNREFUSED', 'EPIPE', 'ETIMEDOUT', 'EAI_AGAIN'])(
 );
 
 test('logs and exits after exhausting consecutive connection retries', async () => {
-  const { next, exit, log } = await setupExtension();
+  const { next, exit, log } = extension;
   const error = Object.assign(new Error('Connection reset'), { code: 'ECONNRESET' });
   const attempts: number[] = [];
   next.mockImplementation(async () => {
@@ -62,7 +65,7 @@ test('logs and exits after exhausting consecutive connection retries', async ()
 });
 
 test('resets the retry budget after a successful poll', async () => {
-  const { next, exit } = await setupExtension();
+  const { next, exit } = extension;
   const error = Object.assign(new Error('Connection reset'), { code: 'ECONNRESET' });
   next
     .mockRejectedValueOnce(error)
@@ -86,7 +89,7 @@ test.each([
   new Error('Failed to advance to next event: Container error'),
   Object.assign(new Error('Invalid URL'), { code: 'ERR_INVALID_URL' }),
 ])('logs and exits immediately for $message', async error => {
-  const { next, log, exit } = await setupExtension();
+  const { next, log, exit } = extension;
   next.mockRejectedValue(error);
 
   await import('../src/lambda-extension/index');

From 3ced970252c05d5f23a81a978b351873358b1dbb Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 11:45:43 +0100
Subject: [PATCH 103/169] test(effect): Assert error severities without event
 ordering (#25973)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Error processing can reorder events, so verify each error’s
severity without requiring the warning event to arrive before the fatal
event.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 packages/effect/test/errorReporter.test.ts | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/packages/effect/test/errorReporter.test.ts b/packages/effect/test/errorReporter.test.ts
index ca5c6b5e97e3..62e6cb346708 100644
--- a/packages/effect/test/errorReporter.test.ts
+++ b/packages/effect/test/errorReporter.test.ts
@@ -140,10 +140,17 @@ describe.each([
       yield* flush;
 
       expect(events).toHaveLength(2);
-      expect(events[0]?.level).toBe('warning');
-      expect(events[0]?.exception?.values?.[0]?.type).toBe('RateLimitError');
-      expect(events[1]?.level).toBe('fatal');
-      expect(events[1]?.exception?.values?.[0]?.type).toBe('FatalError');
+      expect(
+        events.map(event => ({
+          type: event.exception?.values?.[0]?.type,
+          level: event.level,
+        })),
+      ).toEqual(
+        expect.arrayContaining([
+          { type: 'RateLimitError', level: 'warning' },
+          { type: 'FatalError', level: 'fatal' },
+        ]),
+      );
     }).pipe(Effect.provide(makeLayer())),
   );
 

From 541a0d4c567061c569ab8d4bdde4c7cd5b8c5e4c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Pedro=20de=20Faria?= <jpdefo7@hotmail.com>
Date: Tue, 3 Nov 2026 08:45:13 -0300
Subject: [PATCH 104/169] fix(bundler-plugins): upload literal artifact paths
 (#25356)

Treat detected build artifact paths as literal filenames when selecting
source maps for upload. This keeps Nitro chunks such as
`_libs/_sentry/node+[...].mjs` in the upload set while preserving
user-provided asset and ignore globs. The Nuxt source-map assertions now
require these chunks to be uploaded.

On Windows, eight existing path assertions and the CLI contract suite's
cleanup also fail with unmodified code.

Fixes #25321

---------

Co-authored-by: Codex <codex@openai.com>
Co-authored-by: Martin Sonnberger <martin.sonnberger@sentry.io>
---
 .../nuxt-5-sourcemaps/assert-build.ts         |  6 +-
 .../assert-build.ts                           | 15 +---
 .../src/core/build-plugin-manager.ts          |  3 +-
 .../rollup/literal-artifact-paths.test.ts     | 70 +++++++++++++++++++
 4 files changed, 74 insertions(+), 20 deletions(-)
 create mode 100644 packages/bundler-plugins/test/rollup/literal-artifact-paths.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5-sourcemaps/assert-build.ts b/dev-packages/e2e-tests/test-applications/nuxt-5-sourcemaps/assert-build.ts
index 8c64d688098f..4dc1e34c400a 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5-sourcemaps/assert-build.ts
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5-sourcemaps/assert-build.ts
@@ -3,7 +3,6 @@ import * as fs from 'fs';
 import * as path from 'path';
 import {
   assertSourceMapUpload,
-  findDebugIdsInFilesWithGlobCharacters,
   findDebugIdsWithConflictingSourcemaps,
   findFilesWithForeignSourcemaps,
   findFilesWithMultipleDebugIds,
@@ -73,9 +72,6 @@ const outputDirsWithSourceMaps = [
 const debugIdsWithoutSourceMap = new Set(
   outputDirsWithSourceMaps.flatMap(dir => [...debugIdsOfChunksWithoutSourceMap(dir)]),
 );
-const debugIdsSkippedByUploader = isStaticBuild
-  ? []
-  : findDebugIdsInFilesWithGlobCharacters({ outputDir: SERVER_OUTPUT });
 
 const { requests, bundles, sourcemaps, uploadedDebugIds } = assertSourceMapUpload({
   outputDirs: outputDirsWithSourceMaps,
@@ -86,7 +82,7 @@ const { requests, bundles, sourcemaps, uploadedDebugIds } = assertSourceMapUploa
   // Nitro 3 deletes `sourcesContent` from the server maps unless `experimental.sourcemapMinify` is `false`. The module
   // sets it to `false`, which is the only reason the server marker survives into `sourcesContent`.
   markers: { 'client source (Vite plugin)': CLIENT_MARKER, 'server source (Rollup plugin)': SERVER_MARKER },
-  debugIdsWithoutSourceMap: [...debugIdsWithoutSourceMap, ...debugIdsSkippedByUploader],
+  debugIdsWithoutSourceMap: [...debugIdsWithoutSourceMap],
 });
 console.log(`Found ${bundles.length} artifact bundle(s)\n`);
 
diff --git a/dev-packages/e2e-tests/test-applications/tanstackstart-react-sourcemaps/assert-build.ts b/dev-packages/e2e-tests/test-applications/tanstackstart-react-sourcemaps/assert-build.ts
index 2aa44e66f20e..bb92e6eb459b 100644
--- a/dev-packages/e2e-tests/test-applications/tanstackstart-react-sourcemaps/assert-build.ts
+++ b/dev-packages/e2e-tests/test-applications/tanstackstart-react-sourcemaps/assert-build.ts
@@ -59,16 +59,6 @@ function sourceMapsIn(dir: string): string[] {
     .map(entry => path.join(entry.parentPath, entry.name));
 }
 
-// TODO: The uploader passes the emitted file paths to `glob` as patterns, so it skips a file whose path has glob
-// characters, like Nitro's `_libs/@tanstack/react-router+[...].mjs`. Remove this when the uploader matches paths literally.
-function debugIdsOfFilesWithGlobCharacters(dir: string): Set<string> {
-  return new Set(
-    emittedJsFiles(dir)
-      .filter(file => /[[\]{}()*?]/.test(path.relative(dir, file)))
-      .flatMap(readDebugIds),
-  );
-}
-
 const requests = loadMockServerResults();
 
 // --- The upload reached Sentry ---
@@ -125,10 +115,7 @@ for (const outputDir of [CLIENT_OUTPUT, SERVER_OUTPUT]) {
   const injectedDebugIds = findInjectedDebugIds({ outputDir });
   assert.ok(injectedDebugIds.length > 0, `Expected debug IDs to be injected into ${outputDir}`);
 
-  const exemptDebugIds = new Set([
-    ...debugIdsOfChunksWithoutSourceMap(outputDir),
-    ...debugIdsOfFilesWithGlobCharacters(outputDir),
-  ]);
+  const exemptDebugIds = debugIdsOfChunksWithoutSourceMap(outputDir);
   const unuploaded = injectedDebugIds.filter(debugId => !uploadedDebugIds.has(debugId) && !exemptDebugIds.has(debugId));
   assert.deepEqual(unuploaded, [], `Expected every debug ID in ${outputDir} to have an uploaded source map`);
 
diff --git a/packages/bundler-plugins/src/core/build-plugin-manager.ts b/packages/bundler-plugins/src/core/build-plugin-manager.ts
index f4ccb991df5b..a529629e4413 100644
--- a/packages/bundler-plugins/src/core/build-plugin-manager.ts
+++ b/packages/bundler-plugins/src/core/build-plugin-manager.ts
@@ -4,6 +4,7 @@ import * as dotenv from 'dotenv';
 import * as fs from 'fs';
 import * as os from 'os';
 import * as path from 'path';
+import { escape as escapeGlob } from 'glob';
 import { SentryCliAdapter } from './cli';
 import type { NormalizedOptions } from './options-mapping';
 import { normalizeUserOptions, validateOptions } from './options-mapping';
@@ -708,7 +709,7 @@ export function createSentryBuildPluginManager(
                 logger.debug(
                   'No `sourcemaps.assets` option provided, falling back to uploading detected build artifacts.',
                 );
-                globAssets = buildArtifactPaths;
+                globAssets = buildArtifactPaths.map(asset => escapeGlob(asset.split(path.sep).join('/')));
               }
 
               const globResult = await startSpan({ name: 'glob', scope: sentryScope }, async () =>
diff --git a/packages/bundler-plugins/test/rollup/literal-artifact-paths.test.ts b/packages/bundler-plugins/test/rollup/literal-artifact-paths.test.ts
new file mode 100644
index 000000000000..b1434b349133
--- /dev/null
+++ b/packages/bundler-plugins/test/rollup/literal-artifact-paths.test.ts
@@ -0,0 +1,70 @@
+import { existsSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, sep } from 'node:path';
+import { rollup } from 'rollup';
+import { afterEach, beforeEach, expect, test, vi } from 'vitest';
+import { sentryRollupPlugin } from '../../src/rollup';
+
+const upload = vi.hoisted(() => vi.fn());
+const fixtures: string[] = [];
+vi.mock('sentry', () => ({
+  createSentrySDK: () => ({
+    sourcemap: { upload },
+    release: {},
+  }),
+}));
+
+beforeEach(() => {
+  upload.mockReset();
+});
+
+afterEach(() => {
+  for (const fixture of fixtures.splice(0)) {
+    rmSync(fixture, { recursive: true, force: true });
+  }
+});
+
+test.each([
+  { name: 'ordinary filenames', file: 'sdk.mjs', explicitAssets: false, nativePath: false },
+  { name: 'glob characters in detected paths', file: 'sdk+[...].mjs', explicitAssets: false, nativePath: false },
+  { name: 'explicit asset globs', file: 'sdk+[...].mjs', explicitAssets: true, nativePath: false },
+  { name: 'native path separators', file: 'sdk+[...].mjs', explicitAssets: false, nativePath: true },
+  { name: 'ignored assets', file: 'sdk+[...].mjs', explicitAssets: false, nativePath: false, ignored: true },
+])('handles $name when uploading Rollup artifacts', async ({ file, explicitAssets, nativePath, ignored }) => {
+  const fixture = mkdtempSync(join(tmpdir(), 'sentry-rollup-literal-paths-'));
+  fixtures.push(fixture);
+  const input = join(fixture, 'input.js');
+  const output = join(fixture, 'dist', '_libs', file);
+  writeFileSync(input, 'export function example() { throw new Error("original fixture"); }\n');
+  const uploadedFiles: string[] = [];
+  upload.mockImplementation(async (options: { directory: string }) => {
+    uploadedFiles.push(...readdirSync(options.directory));
+  });
+
+  const bundle = await rollup({
+    input,
+    plugins: sentryRollupPlugin({
+      authToken: 'local-fixture-only',
+      org: 'local-fixture',
+      project: 'local-fixture',
+      telemetry: false,
+      silent: true,
+      release: { create: false, finalize: false },
+      sourcemaps: {
+        assets: explicitAssets ? join(fixture, 'dist', '**', '*.mjs').split(sep).join('/') : undefined,
+        ignore: ignored ? join(fixture, 'dist', '**', 'sdk+*.mjs').split(sep).join('/') : undefined,
+      },
+    }),
+  });
+  try {
+    await bundle.write({ file: nativePath ? output : output.replace(/\\/g, '/'), format: 'es', sourcemap: true });
+  } finally {
+    await bundle.close();
+  }
+
+  expect(existsSync(output)).toBe(true);
+  expect(existsSync(`${output}.map`)).toBe(true);
+  expect(readFileSync(output, 'utf8')).toContain('sentry-dbid-');
+  expect(uploadedFiles.filter(name => name.endsWith('.js'))).toHaveLength(ignored ? 0 : 1);
+  expect(uploadedFiles.filter(name => name.endsWith('.js.map'))).toHaveLength(ignored ? 0 : 1);
+});

From 8d6b875ea6ee83ec4d22f3063eb07f5359a3acef Mon Sep 17 00:00:00 2001
From: "javascript-sdk-gitflow[bot]"
 <255134079+javascript-sdk-gitflow[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:46:53 +0100
Subject: [PATCH 105/169] chore: Add external contributor to CHANGELOG.md
 (#26017)

This PR adds the external contributor to the CHANGELOG.md file, so that
they are credited for their contribution. See #25356

Co-authored-by: msonnb <26038247+msonnb@users.noreply.github.com>
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8efb65251493..f23f10319b80 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
-Work in this release was contributed by @lazerg, @chiliec, and @61465. Thank you for your contributions!
+Work in this release was contributed by @lazerg, @chiliec, @61465, and @jpdefo. Thank you for your contributions!
 
 ### Important Changes
 

From ec88aef26663de83ece9d17588d7d0e297429abb Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Tue, 3 Nov 2026 13:03:42 +0100
Subject: [PATCH 106/169] test(e2e): Point together-ai 1.x at OpenRouter's base
 URL in gen-ai-libraries (#25947)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The `gen-ai-libraries (latest)` variant installs
`together-ai@latest`, which is now 1.0.0. That release moved `/v1` from
the SDK's default base URL into the request paths, so with our
`https://openrouter.ai/api/v1` base URL it requests
`/api/v1/v1/chat/completions` and both Together cases fail with a 500
(e.g. on #25940). Against a local server, 0.54.0 hits
`/api/v1/chat/completions` with the `/v1` base and 1.0.0 hits
`/api/v1/v1/chat/completions`; with the base URL minus `/v1`, 1.0.0 hits
the right path.

The default variant keeps 0.54.0, so the client picks the base URL from
`together-ai/version`, which both versions export. Verified against a
local server for both versions, and the import and expression type-check
against both.

**How to review:** One line in `src/libraries.ts`.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../test-applications/gen-ai-libraries/src/libraries.ts      | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
index dd002c976962..f8497fce7a33 100644
--- a/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
+++ b/dev-packages/e2e-tests/test-applications/gen-ai-libraries/src/libraries.ts
@@ -21,6 +21,7 @@ import { createOpenRouter } from '@openrouter/ai-sdk-provider';
 import { Mistral } from '@mistralai/mistralai';
 import OpenAI from 'openai';
 import Together from 'together-ai';
+import { VERSION as TOGETHER_VERSION } from 'together-ai/version';
 import { generateText, tool } from 'ai';
 import { z } from 'zod';
 
@@ -171,7 +172,9 @@ export const libraries: Library[] = [
     'together',
     'together_ai',
     'auto.ai.together_ai',
-    apiKey => new Together({ apiKey, baseURL: OPENROUTER_V1 }) as any,
+    // together-ai 1.0 moved `/v1` from its base URL into the request paths.
+    apiKey =>
+      new Together({ apiKey, baseURL: TOGETHER_VERSION.startsWith('0.') ? OPENROUTER_V1 : OPENROUTER_BASE }) as any,
   ),
 
   {

From 9ace99a55936b8eed3ad6480f95be00310311978 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 13:24:51 +0100
Subject: [PATCH 107/169] ref(server-utils): Clarify PostgreSQL instrumentation
 filenames (#25939)

**Why:** The current filenames blur the distinction between the `pg`
driver, postgres.js automatic instrumentation, and its portable wrapper.

**How to review:** File moves and import updates only. Happy to take
suggestions for different naming, but the existing naming is a bit
confusing imo.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/server-utils/src/exports.ts          |   4 +-
 packages/server-utils/src/index.ts            |   4 +-
 .../server-utils/src/integrations/index.ts    |   4 +-
 .../server-utils/src/integrations/neon.ts     |   2 +-
 .../src/integrations/{postgres.ts => pg.ts}   |   0
 .../src/integrations/postgres-js.ts           | 349 ----------
 .../src/integrations/postgresjs-wrapper.ts    | 424 ++++++++++++
 .../src/integrations/postgresjs.ts            | 635 ++++++++----------
 .../pg-ignore-connect.test.ts}                |   4 +-
 .../postgres.test.ts => pg/pg.test.ts}        |   2 +-
 ...sjs.test.ts => postgresjs-wrapper.test.ts} |   2 +-
 11 files changed, 715 insertions(+), 715 deletions(-)
 rename packages/server-utils/src/integrations/{postgres.ts => pg.ts} (100%)
 delete mode 100644 packages/server-utils/src/integrations/postgres-js.ts
 create mode 100644 packages/server-utils/src/integrations/postgresjs-wrapper.ts
 rename packages/server-utils/test/integrations/{postgres/postgres-ignore-connect.test.ts => pg/pg-ignore-connect.test.ts} (98%)
 rename packages/server-utils/test/integrations/{postgres/postgres.test.ts => pg/pg.test.ts} (99%)
 rename packages/server-utils/test/integrations/{postgresjs.test.ts => postgresjs-wrapper.test.ts} (99%)

diff --git a/packages/server-utils/src/exports.ts b/packages/server-utils/src/exports.ts
index 8cd8bf657c95..02c2b1393338 100644
--- a/packages/server-utils/src/exports.ts
+++ b/packages/server-utils/src/exports.ts
@@ -5,8 +5,8 @@ export { openTelemetryIntegration, getOtlpTracesEndpoint } from './opentelemetry
 export * from './ai';
 export { getSqlQuerySummary, sanitizeSqlQuery, getSqlQueryAttributes } from './utils/sql';
 export type { SqlDialect } from './utils/sql';
-export { instrumentPostgresJsSql } from './integrations/postgresjs';
-export type { PostgresConnectionContext } from './integrations/postgresjs';
+export { instrumentPostgresJsSql } from './integrations/postgresjs-wrapper';
+export type { PostgresConnectionContext } from './integrations/postgresjs-wrapper';
 
 // Shared, runtime-agnostic Hono instrumentation re-used by the `@sentry/hono` SDK across all runtimes.
 // Sourced directly from their modules (not the `./integrations/hono` barrel, which also exports the
diff --git a/packages/server-utils/src/index.ts b/packages/server-utils/src/index.ts
index 005e8a4a8b79..cb666c2fc181 100644
--- a/packages/server-utils/src/index.ts
+++ b/packages/server-utils/src/index.ts
@@ -70,8 +70,8 @@ export { typesafeIntegration } from './integrations/typesafe';
 export { mysqlIntegration } from './integrations/mysql';
 export { mysql2Integration } from './integrations/mysql2';
 export { openAIIntegration } from './integrations/openai';
-export { postgresIntegration } from './integrations/postgres';
-export { postgresJsIntegration } from './integrations/postgres-js';
+export { postgresIntegration } from './integrations/pg';
+export { postgresJsIntegration } from './integrations/postgresjs';
 export { neonIntegration } from './integrations/neon';
 export { tediousIntegration } from './integrations/tedious';
 export { vercelAIIntegration } from './integrations/vercel-ai';
diff --git a/packages/server-utils/src/integrations/index.ts b/packages/server-utils/src/integrations/index.ts
index 9643f95250ff..e70488a63351 100644
--- a/packages/server-utils/src/integrations/index.ts
+++ b/packages/server-utils/src/integrations/index.ts
@@ -6,7 +6,7 @@ import { graphqlIntegration } from './graphql';
 import { redisIntegration } from './redis';
 import { mysqlIntegration } from './mysql';
 import { mysql2Integration } from './mysql2';
-import { postgresIntegration } from './postgres';
+import { postgresIntegration } from './pg';
 import { prismaIntegration } from './prisma';
 import { tediousIntegration } from './tedious';
 import { genericPoolIntegration } from './generic-pool';
@@ -26,7 +26,7 @@ import { mistralAIIntegration } from './mistral';
 import { groqIntegration } from './groq';
 import { togetherAIIntegration } from './together-ai';
 import { typesafeIntegration } from './typesafe';
-import { postgresJsIntegration } from './postgres-js';
+import { postgresJsIntegration } from './postgresjs';
 import { neonIntegration } from './neon';
 import { firebaseIntegration } from './firebase';
 import { expressIntegration } from './express';
diff --git a/packages/server-utils/src/integrations/neon.ts b/packages/server-utils/src/integrations/neon.ts
index 3a33aef801d7..1dd3eeceb468 100644
--- a/packages/server-utils/src/integrations/neon.ts
+++ b/packages/server-utils/src/integrations/neon.ts
@@ -17,7 +17,7 @@ import { CHANNELS } from '../orchestrion/channels';
 import { neonModuleNames } from '../orchestrion/config/neon';
 import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
 import { bindTracingChannelToSpan } from '../tracing-channel';
-import { bindPgQueryChannel, getConnectionAttributes } from './postgres';
+import { bindPgQueryChannel, getConnectionAttributes } from './pg';
 
 const INTEGRATION_NAME = 'Neon' as const;
 const ORIGIN = 'auto.db.neon';
diff --git a/packages/server-utils/src/integrations/postgres.ts b/packages/server-utils/src/integrations/pg.ts
similarity index 100%
rename from packages/server-utils/src/integrations/postgres.ts
rename to packages/server-utils/src/integrations/pg.ts
diff --git a/packages/server-utils/src/integrations/postgres-js.ts b/packages/server-utils/src/integrations/postgres-js.ts
deleted file mode 100644
index ab595d277c47..000000000000
--- a/packages/server-utils/src/integrations/postgres-js.ts
+++ /dev/null
@@ -1,349 +0,0 @@
-import * as diagnosticsChannel from '../utils/diagnosticsChannel';
-import {
-  DB_OPERATION_NAME,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
-  DB_SYSTEM_NAME,
-  ERROR_TYPE,
-  SENTRY_KIND,
-  SENTRY_OP,
-  SENTRY_ORIGIN,
-  DB_RESPONSE_STATUS_CODE,
-} from '@sentry/conventions/attributes';
-import { DB } from '@sentry/conventions/op';
-import type { IntegrationFn, Span } from '@sentry/core';
-import {
-  debug,
-  defineIntegration,
-  getClient,
-  hasSpanStreamingEnabled,
-  SPAN_STATUS_ERROR,
-  startInactiveSpan,
-} from '@sentry/core';
-import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQueryAttributes } from '../utils/sql';
-import {
-  _buildConnectionContext,
-  _getConnectionAttributes,
-  _reconstructQuery,
-  type PostgresConnectionContext,
-} from './postgresjs';
-import type { OrchestrionChannelContext } from '../orchestrion/types';
-import { CHANNELS } from '../orchestrion/channels';
-import { bindTracingChannelToSpan } from '../tracing-channel';
-import { postgresJsModuleNames } from '../orchestrion/config/postgres';
-import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
-
-// Same name as the OTel `PostgresJs` integration by design, so the OTel
-// integration of the same name is deduplicated out of the default set.
-const INTEGRATION_NAME = 'PostgresJs' as const;
-
-const ORIGIN = 'auto.db.postgresjs';
-
-const DB_SYSTEM_NAME_POSTGRES = 'postgres';
-
-const NOOP = (): void => {};
-
-// Same `Symbol.for()` marker the core `instrumentPostgresJsSql` wrapper sets on
-// queries it manually instruments, so we skip them there and never double-span.
-const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.sql');
-// The query span, stashed on the `Query` so the `execute`/`connect` channels can
-// attach connection attributes to it.
-const QUERY_SPAN = Symbol('sentryPostgresJsSpan');
-// Set once connection attributes are on the span, so the fallback and the
-// `execute`/`connect` channels don't both write them.
-const CONNECTION_ATTRS_SET = Symbol('sentryPostgresJsConnectionAttrsSet');
-// Set on the channel context once the resolve/reject wrappers have ended the
-// span, so `deferSpanEnd` knows the wrappers own the lifecycle.
-const SPAN_ENDED = Symbol('sentryPostgresJsSpanEnded');
-
-export interface PostgresJsIntegrationOptions {
-  /**
-   * Only create spans when there's already an active parent span. Defaults to
-   * `true`, matching the OTel `postgresJsIntegration`.
-   */
-  requireParentSpan?: boolean;
-  /**
-   * Hook to modify the query span before the query runs. Receives the span, the
-   * sanitized SQL, and (when resolvable) the connection context.
-   */
-  requestHook?: (span: Span, sanitizedSqlQuery: string, postgresConnectionContext?: PostgresConnectionContext) => void;
-}
-
-/** The `Query` instance postgres.js passes as `self` to `Query.prototype.handle`. */
-interface PostgresQuery {
-  strings?: string[];
-  executed?: boolean;
-  resolve?: (...args: unknown[]) => unknown;
-  reject?: (...args: unknown[]) => unknown;
-}
-
-interface PostgresJsQueryContext extends OrchestrionChannelContext {
-  self?: PostgresQuery;
-  [SPAN_ENDED]?: boolean;
-}
-
-// A connection object -> its resolved context, populated on the `connection`
-// channel and read on the `execute`/`connect` channels (keyed by the same object).
-const connectionContexts = new WeakMap<object, PostgresConnectionContext>();
-// Distinct endpoints seen so far (value-compared, so N connections to one DB
-// count once). When exactly one endpoint exists — the common case, and the only
-// one the tests exercise — every query resolves to it at handle-start.
-const endpointRegistry: PostgresConnectionContext[] = [];
-
-function registerEndpoint(context: PostgresConnectionContext): void {
-  const alreadyKnown = endpointRegistry.some(
-    e =>
-      e.ATTR_SERVER_ADDRESS === context.ATTR_SERVER_ADDRESS &&
-      e.ATTR_SERVER_PORT === context.ATTR_SERVER_PORT &&
-      e.ATTR_DB_NAMESPACE === context.ATTR_DB_NAMESPACE,
-  );
-  if (!alreadyKnown) {
-    endpointRegistry.push(context);
-  }
-}
-
-/** The single known endpoint, or `undefined` when zero or multiple are known. */
-function resolveSingleEndpoint(): PostgresConnectionContext | undefined {
-  return endpointRegistry.length === 1 ? endpointRegistry[0] : undefined;
-}
-
-/**
- * Record a connection from the `connection` channel `end` (`result` is the
- * connection object, `arguments[0]` the parsed options), keying its resolved
- * context by the connection object and tracking its endpoint.
- */
-function recordConnectionFromChannel(message: PostgresJsQueryContext): void {
-  const connection = message.result;
-  const options = message.arguments?.[0] as { host?: string[]; port?: number[]; database?: string } | undefined;
-  if (!connection || typeof connection !== 'object' || !options) {
-    return;
-  }
-  const context = _buildConnectionContext(options);
-  connectionContexts.set(connection, context);
-  registerEndpoint(context);
-}
-
-function setConnectionAttributes(span: Span, query: PostgresQuery, context: PostgresConnectionContext): void {
-  const queryRecord = query as Record<symbol, unknown>;
-  if (queryRecord[CONNECTION_ATTRS_SET]) {
-    return;
-  }
-  queryRecord[CONNECTION_ATTRS_SET] = true;
-  if (context) {
-    span.setAttributes(_getConnectionAttributes(context));
-  }
-}
-
-/**
- * Backfill connection attributes onto a query's span from a channel whose `self`
- * is the connection object and `arguments[0]` the query. Shared by the `execute`
- * and `connect` channels; both carry that shape and both resolve the context via
- * the `connectionContexts` WeakMap. Idempotent (guarded inside
- * `setConnectionAttributes`).
- */
-function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext): void {
-  const connection = message.self;
-  const query = message.arguments?.[0] as PostgresQuery | undefined;
-  if (!connection || !query) {
-    return;
-  }
-  const span = (query as Record<symbol, unknown>)[QUERY_SPAN] as Span | undefined;
-  const context = connectionContexts.get(connection);
-  if (span && context) {
-    setConnectionAttributes(span, query, context);
-  }
-}
-
-/**
- * Wrap `query.resolve`/`query.reject` so the span ends when the query settles.
- *
- * `Query extends Promise` and `async handle()` only dispatches — its promise
- * resolves immediately, long before the query completes. postgres.js signals
- * completion by calling `this.resolve`/`this.reject`, so we own the span end
- * there. Wrapping happens at handle-start because `reject` can fire
- * synchronously during dispatch and `cursor()` reassigns both before executing.
- */
-function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operationName: string | undefined): void {
-  const query = data.self;
-  if (!query) {
-    return;
-  }
-
-  // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
-  // wrapper even if `span.end()` below throws.
-  const markEnded = (): void => {
-    data[SPAN_ENDED] = true;
-  };
-
-  const originalResolve = query.resolve;
-  if (typeof originalResolve === 'function') {
-    query.resolve = function (this: unknown, ...resolveArgs: unknown[]): unknown {
-      markEnded();
-      try {
-        const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
-        // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-        span.setAttribute(DB_OPERATION_NAME, command || operationName);
-        span.end();
-      } catch (e) {
-        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in resolve:', e);
-      }
-      return originalResolve.apply(this, resolveArgs);
-    };
-  }
-
-  const originalReject = query.reject;
-  if (typeof originalReject === 'function') {
-    query.reject = function (this: unknown, ...rejectArgs: unknown[]): unknown {
-      markEnded();
-      try {
-        const err = rejectArgs[0] as { message?: string; code?: string; name?: string } | undefined;
-        span.setStatus({ code: SPAN_STATUS_ERROR, message: err?.message || 'unknown_error' });
-        span.setAttribute(DB_RESPONSE_STATUS_CODE, err?.code || 'unknown');
-        span.setAttribute(ERROR_TYPE, err?.name || 'unknown');
-        span.end();
-      } catch (e) {
-        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in reject:', e);
-      }
-      return originalReject.apply(this, rejectArgs);
-    };
-  }
-}
-
-const _postgresJsIntegration = ((options: PostgresJsIntegrationOptions = {}) => {
-  return {
-    name: INTEGRATION_NAME,
-    setup(client) {
-      invokeOrchestrionInstrumentation(client, postgresJsModuleNames, instrumentPostgresJs, [options]);
-    },
-  };
-}) satisfies IntegrationFn;
-
-function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
-  const { requireParentSpan, requestHook } = options;
-
-  // Connection + execute are pure observers (no span, no async binding).
-  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_CONNECTION).subscribe({
-    start: NOOP,
-    asyncStart: NOOP,
-    asyncEnd: NOOP,
-    error: NOOP,
-    end: recordConnectionFromChannel,
-  });
-
-  // Per-connection attributes for queries reusing an already-open connection
-  // (`c.execute(q)`, `self === c`). `execute` is also called bare
-  // (`self === undefined`) for the first query on each connection, `fetchState`
-  // and `retry`; those miss here (the `connect` channel below covers the first
-  // user query, and the single-endpoint fallback covers the common case).
-  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_EXECUTE).subscribe({
-    end: NOOP,
-    asyncStart: NOOP,
-    asyncEnd: NOOP,
-    error: NOOP,
-    start: attachConnectionAttributesFromChannel,
-  });
-
-  // The connection's `connect(query)` method (`self === c`, `arguments[0]` the
-  // query) fires when a fresh connection is opened for a query. That first query
-  // is later dispatched via a bare `execute` (no `self`), so this is where it
-  // gets its connection attributes in multi-endpoint apps.
-  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_CONNECT).subscribe({
-    end: NOOP,
-    asyncStart: NOOP,
-    asyncEnd: NOOP,
-    error: NOOP,
-    start: attachConnectionAttributesFromChannel,
-  });
-
-  bindTracingChannelToSpan<PostgresJsQueryContext>(
-    diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_HANDLE),
-    data => {
-      const query = data.self;
-      if (!query) {
-        return undefined;
-      }
-
-      // Opt out of re-entrant `handle()` calls (then/catch/finally re-invoke
-      // it, guarded by `executed`) and queries already wrapped by the portable
-      // `instrumentPostgresJsSql`.
-      if (query.executed === true || (query as Record<symbol, unknown>)[QUERY_FROM_INSTRUMENTED_SQL]) {
-        return undefined;
-      }
-
-      const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
-      const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
-
-      const client = getClient();
-
-      // Single-endpoint fallback: resolve context now so the span name and `requestHook` have
-      // it, and the first-query-per-connection (bare `execute`) path still gets attrs.
-      const context = resolveSingleEndpoint();
-
-      const name =
-        client && hasSpanStreamingEnabled(client)
-          ? queryAttributes[DB_QUERY_SUMMARY] || context?.ATTR_DB_NAMESPACE || DB_SYSTEM_NAME_POSTGRES
-          : sanitizedSqlQuery || 'postgresjs.query';
-
-      // `sentry.kind: client` matches the mysql/pg channel subscribers.
-      const span = startInactiveSpan({
-        name,
-        onlyIfParent: requireParentSpan !== false,
-        attributes: {
-          [SENTRY_OP]: DB,
-          [SENTRY_KIND]: 'client',
-          [SENTRY_ORIGIN]: ORIGIN,
-          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
-          ...queryAttributes,
-        },
-      });
-
-      // Stash for the `execute`/`connect` channels to attach per-connection attributes.
-      (query as Record<symbol, unknown>)[QUERY_SPAN] = span;
-
-      if (context) {
-        setConnectionAttributes(span, query, context);
-      }
-
-      if (requestHook) {
-        try {
-          requestHook(span, sanitizedSqlQuery, context);
-        } catch (e) {
-          span.setAttribute('sentry.hook.error', 'requestHook failed');
-          DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error in requestHook:', e);
-        }
-      }
-
-      wrapQuerySettlement(data, span, queryAttributes[DB_OPERATION_NAME]);
-
-      return span;
-    },
-    {
-      deferSpanEnd({ data }) {
-        // `handle` is async: its promise settles on dispatch (asyncEnd), long
-        // before the query does. The resolve/reject wrappers own the ending.
-        if (data[SPAN_ENDED]) {
-          return true; // wrappers already ended it
-        }
-        if ('error' in data) {
-          return false; // `handle()` itself threw; the error subscriber annotated the span, let the helper end it
-        }
-        // NOTE: for a cursor consumed as an async iterator, only the first batch
-        // reaches `handle` (the `executed` guard blocks the rest), so the span
-        // ends on the first batch — a pre-existing flaw kept for parity.
-        return true; // query in flight; the wrappers will end the span when it settles
-      },
-    },
-  );
-}
-
-/**
- * Diagnostics-channel-based postgres.js (`postgres` v3.x) integration.
- *
- * Subscribes to the `orchestrion:postgres:handle` / `:connection` / `:execute` /
- * `:connect` diagnostics channels injected into postgres.js' `Query.prototype.handle`
- * and `Connection`/`execute`/`connect` (in `src/*` and `cjs/src/*`) and creates db
- * spans matching the OTel `postgresJsIntegration`. Requires the Sentry runtime
- * hook or bundler plugin.
- */
-export const postgresJsIntegration = defineIntegration(_postgresJsIntegration);
diff --git a/packages/server-utils/src/integrations/postgresjs-wrapper.ts b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
new file mode 100644
index 000000000000..3b42f0c80f50
--- /dev/null
+++ b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
@@ -0,0 +1,424 @@
+// Portable instrumentation for https://github.com/porsager/postgres
+// This can be used in any environment (Node.js, Cloudflare Workers, etc.)
+// without depending on OpenTelemetry module hooking.
+/* eslint-disable max-lines */
+
+import {
+  debug,
+  getActiveSpan,
+  getClient,
+  hasSpanStreamingEnabled,
+  isObjectLike,
+  type Span,
+  type SpanAttributes,
+  SPAN_STATUS_ERROR,
+  startSpanManual,
+} from '@sentry/core';
+import { DEBUG_BUILD } from '../debug-build';
+import { getSqlQueryAttributes } from '../utils/sql';
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  SERVER_ADDRESS,
+  SERVER_PORT,
+  DB_RESPONSE_STATUS_CODE,
+  ERROR_TYPE,
+} from '@sentry/conventions/attributes';
+import { DB } from '@sentry/conventions/op';
+
+export type PostgresConnectionContext = {
+  ATTR_DB_NAMESPACE?: string;
+  ATTR_SERVER_ADDRESS?: string;
+  ATTR_SERVER_PORT?: string;
+};
+
+interface PostgresJsSqlInstrumentationOptions {
+  /**
+   * Whether to require a parent span for the instrumentation.
+   * If set to true, the instrumentation will only create spans if there is a parent span
+   * available in the current scope.
+   * @default true
+   */
+  requireParentSpan?: boolean;
+  /**
+   * Hook to modify the span before it is started.
+   * This can be used to set additional attributes or modify the span in any way.
+   */
+  requestHook?: (span: Span, sanitizedSqlQuery: string, postgresConnectionContext?: PostgresConnectionContext) => void;
+}
+
+const CONNECTION_CONTEXT_SYMBOL = Symbol('sentryPostgresConnectionContext');
+
+// Use the same Symbol.for() markers as the Node.js OTel instrumentation
+// so that both approaches recognize each other and prevent double-wrapping.
+const INSTRUMENTED_MARKER = Symbol.for('sentry.instrumented.postgresjs');
+// Marker to track if a query was created from an instrumented sql instance.
+// This prevents double-spanning when both the wrapper and the Node.js Query.prototype
+// fallback patch are active simultaneously.
+const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.sql');
+
+/**
+ * Instruments a postgres.js `sql` instance with Sentry tracing.
+ *
+ * This is a portable instrumentation function that works in any environment
+ * (Node.js, Cloudflare Workers, etc.) without depending on OpenTelemetry.
+ *
+ * @example
+ * ```javascript
+ * import postgres from 'postgres';
+ * import * as Sentry from '@sentry/cloudflare'; // or '@sentry/deno'
+ *
+ * const sql = Sentry.instrumentPostgresJsSql(
+ *   postgres({ host: 'localhost', database: 'mydb' })
+ * );
+ *
+ * // All queries now create Sentry spans
+ * await sql`SELECT * FROM users WHERE id = ${userId}`;
+ * ```
+ */
+export function instrumentPostgresJsSql<T>(sql: T, options?: PostgresJsSqlInstrumentationOptions): T {
+  if (!sql || typeof sql !== 'function') {
+    DEBUG_BUILD && debug.warn('instrumentPostgresJsSql: provided value is not a valid postgres.js sql instance');
+    return sql;
+  }
+
+  return _instrumentSqlInstance(sql, { requireParentSpan: true, ...options }) as T;
+}
+
+/**
+ * Instruments a sql instance by wrapping its query execution methods.
+ */
+function _instrumentSqlInstance(
+  sql: unknown,
+  options: PostgresJsSqlInstrumentationOptions,
+  parentConnectionContext?: PostgresConnectionContext,
+): unknown {
+  // Check if already instrumented to prevent double-wrapping
+  // Using Symbol.for() ensures the marker survives proxying
+  if ((sql as Record<symbol, unknown>)[INSTRUMENTED_MARKER]) {
+    return sql;
+  }
+
+  // Wrap the sql function to intercept query creation
+  const proxiedSql: unknown = new Proxy(sql as (...args: unknown[]) => unknown, {
+    apply(target, thisArg, argumentsList: unknown[]) {
+      const query = Reflect.apply(target, thisArg, argumentsList);
+
+      if (isObjectLike(query) && 'handle' in query) {
+        _wrapSingleQueryHandle(query as { handle: unknown; strings?: string[] }, proxiedSql, options);
+      }
+
+      return query;
+    },
+    get(target, prop) {
+      const original = (target as unknown as Record<string | symbol, unknown>)[prop];
+
+      if (typeof prop !== 'string' || typeof original !== 'function') {
+        return original;
+      }
+
+      // Wrap methods that return PendingQuery objects (unsafe, file)
+      if (prop === 'unsafe' || prop === 'file') {
+        return _wrapQueryMethod(original as (...args: unknown[]) => unknown, target, proxiedSql, options);
+      }
+
+      // Wrap begin and reserve (not savepoint to avoid duplicate spans)
+      if (prop === 'begin' || prop === 'reserve') {
+        return _wrapCallbackMethod(original as (...args: unknown[]) => unknown, target, proxiedSql, options);
+      }
+
+      return original;
+    },
+  });
+
+  // Use provided parent context if available, otherwise extract from sql.options
+  if (parentConnectionContext) {
+    (proxiedSql as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] = parentConnectionContext;
+  } else {
+    _attachConnectionContext(sql, proxiedSql as Record<symbol, unknown>);
+  }
+
+  // Mark both the original and proxy as instrumented to prevent double-wrapping
+  (sql as Record<symbol, unknown>)[INSTRUMENTED_MARKER] = true;
+  (proxiedSql as Record<symbol, unknown>)[INSTRUMENTED_MARKER] = true;
+
+  return proxiedSql;
+}
+
+/**
+ * Wraps query-returning methods (unsafe, file) to ensure their queries are instrumented.
+ */
+function _wrapQueryMethod(
+  original: (...args: unknown[]) => unknown,
+  target: unknown,
+  proxiedSql: unknown,
+  options: PostgresJsSqlInstrumentationOptions,
+): (...args: unknown[]) => unknown {
+  return function (this: unknown, ...args: unknown[]): unknown {
+    const query = Reflect.apply(original, target, args);
+
+    if (isObjectLike(query) && 'handle' in query) {
+      _wrapSingleQueryHandle(query as { handle: unknown; strings?: string[] }, proxiedSql, options);
+    }
+
+    return query;
+  };
+}
+
+/**
+ * Wraps callback-based methods (begin, reserve) to recursively instrument Sql instances.
+ * Note: These methods can also be used as tagged templates, which we pass through unchanged.
+ *
+ * Savepoint is not wrapped to avoid complex nested transaction instrumentation issues.
+ * Queries within savepoint callbacks are still instrumented through the parent transaction's Sql instance.
+ */
+function _wrapCallbackMethod(
+  original: (...args: unknown[]) => unknown,
+  target: unknown,
+  parentSqlInstance: unknown,
+  options: PostgresJsSqlInstrumentationOptions,
+): (...args: unknown[]) => unknown {
+  return function (this: unknown, ...args: unknown[]): unknown {
+    // Extract parent context to propagate to child instances
+    const parentContext = (parentSqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as
+      | PostgresConnectionContext
+      | undefined;
+
+    // Check if this is a callback-based call by verifying the last argument is a function
+    const isCallbackBased = typeof args[args.length - 1] === 'function';
+
+    if (!isCallbackBased) {
+      // Not a callback-based call - could be tagged template or promise-based
+      const result = Reflect.apply(original, target, args);
+      // If result is a Promise (e.g., reserve() without callback), instrument the resolved Sql instance
+      if (result && typeof (result as Promise<unknown>).then === 'function') {
+        return (result as Promise<unknown>).then((sqlInstance: unknown) => {
+          return _instrumentSqlInstance(sqlInstance, options, parentContext);
+        });
+      }
+      return result;
+    }
+
+    // Callback-based call: wrap the callback to instrument the Sql instance
+    const callback = (args.length === 1 ? args[0] : args[1]) as (sql: unknown) => unknown;
+    const wrappedCallback = function (sqlInstance: unknown): unknown {
+      const instrumentedSql = _instrumentSqlInstance(sqlInstance, options, parentContext);
+      return callback(instrumentedSql);
+    };
+
+    const newArgs = args.length === 1 ? [wrappedCallback] : [args[0], wrappedCallback];
+    return Reflect.apply(original, target, newArgs);
+  };
+}
+
+/**
+ * Wraps a single query's handle method to create spans.
+ */
+function _wrapSingleQueryHandle(
+  query: { handle: unknown; strings?: string[]; __sentryWrapped?: boolean },
+  sqlInstance: unknown,
+  options: PostgresJsSqlInstrumentationOptions,
+): void {
+  // Prevent double wrapping - check if the handle itself is already wrapped
+  if ((query.handle as { __sentryWrapped?: boolean })?.__sentryWrapped) {
+    return;
+  }
+
+  // Mark this query as coming from an instrumented sql instance.
+  // This prevents the Node.js Query.prototype fallback patch from double-spanning.
+  (query as Record<symbol, unknown>)[QUERY_FROM_INSTRUMENTED_SQL] = true;
+
+  const originalHandle = query.handle as (...args: unknown[]) => Promise<unknown>;
+
+  // IMPORTANT: We must replace the handle function directly, not use a Proxy,
+  // because Query.then() internally calls this.handle(), which would bypass a Proxy wrapper.
+  const wrappedHandle = async function (this: { executed?: boolean }, ...args: unknown[]): Promise<unknown> {
+    // postgres.js calls handle() from then/catch/finally — only the first call executes SQL,
+    // subsequent calls are no-ops (guarded by this.executed). Skip span creation for no-ops.
+    if (this.executed || !_shouldCreateSpans(options)) {
+      return originalHandle.apply(this, args);
+    }
+
+    const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
+    const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
+
+    const client = getClient();
+
+    const connectionContext = sqlInstance
+      ? ((sqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as PostgresConnectionContext | undefined)
+      : undefined;
+
+    const name =
+      client && hasSpanStreamingEnabled(client)
+        ? queryAttributes[DB_QUERY_SUMMARY] || connectionContext?.ATTR_DB_NAMESPACE || 'postgres'
+        : sanitizedSqlQuery || 'postgresjs.query';
+
+    return startSpanManual(
+      {
+        name,
+        attributes: {
+          [SENTRY_OP]: DB,
+          [SENTRY_ORIGIN]: 'auto.db.postgresjs',
+          [DB_SYSTEM_NAME]: 'postgres',
+          ...queryAttributes,
+          ...(connectionContext && _getConnectionAttributes(connectionContext)),
+        },
+      },
+      (span: Span) => {
+        if (options.requestHook) {
+          try {
+            options.requestHook(span, sanitizedSqlQuery, connectionContext);
+          } catch (e) {
+            span.setAttribute('sentry.hook.error', 'requestHook failed');
+            DEBUG_BUILD && debug.error('Error in requestHook for PostgresJs instrumentation:', e);
+          }
+        }
+
+        const queryWithCallbacks = this as {
+          resolve: unknown;
+          reject: unknown;
+        };
+
+        queryWithCallbacks.resolve = new Proxy(queryWithCallbacks.resolve as (...args: unknown[]) => unknown, {
+          apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
+            try {
+              // Re-set the operation name with the server-reported command, which is more reliable than the query text.
+              span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
+              span.end();
+            } catch (e) {
+              DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
+            }
+
+            return Reflect.apply(resolveTarget, resolveThisArg, resolveArgs);
+          },
+        });
+
+        queryWithCallbacks.reject = new Proxy(queryWithCallbacks.reject as (...args: unknown[]) => unknown, {
+          apply: (rejectTarget, rejectThisArg, rejectArgs: { message?: string; code?: string; name?: string }[]) => {
+            try {
+              span.setStatus({
+                code: SPAN_STATUS_ERROR,
+                message: rejectArgs?.[0]?.message || 'unknown_error',
+              });
+
+              span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
+              span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
+
+              span.end();
+            } catch (e) {
+              DEBUG_BUILD && debug.error('Error ending span in reject callback:', e);
+            }
+            return Reflect.apply(rejectTarget, rejectThisArg, rejectArgs);
+          },
+        });
+
+        // Handle synchronous errors that might occur before promise is created
+        try {
+          return originalHandle.apply(this, args);
+        } catch (e) {
+          span.setStatus({
+            code: SPAN_STATUS_ERROR,
+            message: e instanceof Error ? e.message : 'unknown_error',
+          });
+          span.end();
+          throw e;
+        }
+      },
+    );
+  };
+
+  (wrappedHandle as { __sentryWrapped?: boolean }).__sentryWrapped = true;
+  query.handle = wrappedHandle;
+}
+
+/**
+ * Determines whether a span should be created based on the current context.
+ * If `requireParentSpan` is set to true in the options, a span will
+ * only be created if there is a parent span available.
+ */
+function _shouldCreateSpans(options: PostgresJsSqlInstrumentationOptions): boolean {
+  const hasParentSpan = getActiveSpan() !== undefined;
+  return hasParentSpan || !options.requireParentSpan;
+}
+
+/**
+ * Reconstructs the full SQL query from template strings with PostgreSQL placeholders.
+ *
+ * For sql`SELECT * FROM users WHERE id = ${123} AND name = ${'foo'}`:
+ *   strings = ["SELECT * FROM users WHERE id = ", " AND name = ", ""]
+ *   returns: "SELECT * FROM users WHERE id = $1 AND name = $2"
+ *
+ * @internal Exported for testing only
+ */
+export function _reconstructQuery(strings: string[] | undefined): string | undefined {
+  if (!strings?.length) {
+    return undefined;
+  }
+  if (strings.length === 1) {
+    return strings[0] || undefined;
+  }
+  // Join template parts with PostgreSQL placeholders ($1, $2, etc.)
+  return strings.reduce((acc, str, i) => (i === 0 ? str : `${acc}$${i}${str}`), '');
+}
+
+/**
+ * Returns connection context attributes.
+ *
+ * @internal Exported for the diagnostics-channel integration.
+ */
+export function _getConnectionAttributes(connectionContext: PostgresConnectionContext): SpanAttributes {
+  const attributes: SpanAttributes = {};
+
+  const portNumber = connectionContext.ATTR_SERVER_PORT ? parseInt(connectionContext.ATTR_SERVER_PORT, 10) : undefined;
+  const dbNamespace = connectionContext.ATTR_DB_NAMESPACE;
+  const serverAddress = connectionContext.ATTR_SERVER_ADDRESS;
+
+  if (dbNamespace) {
+    attributes[DB_NAMESPACE] = dbNamespace;
+  }
+  if (serverAddress) {
+    attributes[SERVER_ADDRESS] = serverAddress;
+  }
+  if (portNumber !== undefined && !isNaN(portNumber)) {
+    attributes[SERVER_PORT] = portNumber;
+  }
+
+  return attributes;
+}
+
+/**
+ * Builds a {@link PostgresConnectionContext} from postgres.js' parsed options
+ * (which store `host`/`port` as arrays). Defaults to 'localhost'/5432.
+ *
+ * @internal Exported for the diagnostics-channel integration.
+ */
+export function _buildConnectionContext(options: {
+  host?: string[];
+  port?: number[];
+  database?: string;
+}): PostgresConnectionContext {
+  const host = options.host?.[0] || 'localhost';
+  const port = options.port?.[0] || 5432;
+  return {
+    ATTR_DB_NAMESPACE: typeof options.database === 'string' && options.database !== '' ? options.database : undefined,
+    ATTR_SERVER_ADDRESS: host,
+    ATTR_SERVER_PORT: String(port),
+  };
+}
+
+/**
+ * Extracts and stores connection context from sql.options.
+ */
+function _attachConnectionContext(sql: unknown, proxiedSql: Record<symbol, unknown>): void {
+  const sqlInstance = sql as { options?: { host?: string[]; port?: number[]; database?: string } };
+  if (!sqlInstance.options || typeof sqlInstance.options !== 'object') {
+    return;
+  }
+
+  proxiedSql[CONNECTION_CONTEXT_SYMBOL] = _buildConnectionContext(sqlInstance.options);
+}
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs.ts
index 3b42f0c80f50..2cc11f64bf75 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs.ts
@@ -1,424 +1,349 @@
-// Portable instrumentation for https://github.com/porsager/postgres
-// This can be used in any environment (Node.js, Cloudflare Workers, etc.)
-// without depending on OpenTelemetry module hooking.
-/* eslint-disable max-lines */
-
-import {
-  debug,
-  getActiveSpan,
-  getClient,
-  hasSpanStreamingEnabled,
-  isObjectLike,
-  type Span,
-  type SpanAttributes,
-  SPAN_STATUS_ERROR,
-  startSpanManual,
-} from '@sentry/core';
-import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQueryAttributes } from '../utils/sql';
+import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
-  DB_NAMESPACE,
   DB_OPERATION_NAME,
   DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
+  ERROR_TYPE,
+  SENTRY_KIND,
   SENTRY_OP,
   SENTRY_ORIGIN,
-  SERVER_ADDRESS,
-  SERVER_PORT,
   DB_RESPONSE_STATUS_CODE,
-  ERROR_TYPE,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
+import type { IntegrationFn, Span } from '@sentry/core';
+import {
+  debug,
+  defineIntegration,
+  getClient,
+  hasSpanStreamingEnabled,
+  SPAN_STATUS_ERROR,
+  startInactiveSpan,
+} from '@sentry/core';
+import { DEBUG_BUILD } from '../debug-build';
+import { getSqlQueryAttributes } from '../utils/sql';
+import {
+  _buildConnectionContext,
+  _getConnectionAttributes,
+  _reconstructQuery,
+  type PostgresConnectionContext,
+} from './postgresjs-wrapper';
+import type { OrchestrionChannelContext } from '../orchestrion/types';
+import { CHANNELS } from '../orchestrion/channels';
+import { bindTracingChannelToSpan } from '../tracing-channel';
+import { postgresJsModuleNames } from '../orchestrion/config/postgres';
+import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
 
-export type PostgresConnectionContext = {
-  ATTR_DB_NAMESPACE?: string;
-  ATTR_SERVER_ADDRESS?: string;
-  ATTR_SERVER_PORT?: string;
-};
+// Same name as the OTel `PostgresJs` integration by design, so the OTel
+// integration of the same name is deduplicated out of the default set.
+const INTEGRATION_NAME = 'PostgresJs' as const;
 
-interface PostgresJsSqlInstrumentationOptions {
+const ORIGIN = 'auto.db.postgresjs';
+
+const DB_SYSTEM_NAME_POSTGRES = 'postgres';
+
+const NOOP = (): void => {};
+
+// Same `Symbol.for()` marker the core `instrumentPostgresJsSql` wrapper sets on
+// queries it manually instruments, so we skip them there and never double-span.
+const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.sql');
+// The query span, stashed on the `Query` so the `execute`/`connect` channels can
+// attach connection attributes to it.
+const QUERY_SPAN = Symbol('sentryPostgresJsSpan');
+// Set once connection attributes are on the span, so the fallback and the
+// `execute`/`connect` channels don't both write them.
+const CONNECTION_ATTRS_SET = Symbol('sentryPostgresJsConnectionAttrsSet');
+// Set on the channel context once the resolve/reject wrappers have ended the
+// span, so `deferSpanEnd` knows the wrappers own the lifecycle.
+const SPAN_ENDED = Symbol('sentryPostgresJsSpanEnded');
+
+export interface PostgresJsIntegrationOptions {
   /**
-   * Whether to require a parent span for the instrumentation.
-   * If set to true, the instrumentation will only create spans if there is a parent span
-   * available in the current scope.
-   * @default true
+   * Only create spans when there's already an active parent span. Defaults to
+   * `true`, matching the OTel `postgresJsIntegration`.
    */
   requireParentSpan?: boolean;
   /**
-   * Hook to modify the span before it is started.
-   * This can be used to set additional attributes or modify the span in any way.
+   * Hook to modify the query span before the query runs. Receives the span, the
+   * sanitized SQL, and (when resolvable) the connection context.
    */
   requestHook?: (span: Span, sanitizedSqlQuery: string, postgresConnectionContext?: PostgresConnectionContext) => void;
 }
 
-const CONNECTION_CONTEXT_SYMBOL = Symbol('sentryPostgresConnectionContext');
+/** The `Query` instance postgres.js passes as `self` to `Query.prototype.handle`. */
+interface PostgresQuery {
+  strings?: string[];
+  executed?: boolean;
+  resolve?: (...args: unknown[]) => unknown;
+  reject?: (...args: unknown[]) => unknown;
+}
 
-// Use the same Symbol.for() markers as the Node.js OTel instrumentation
-// so that both approaches recognize each other and prevent double-wrapping.
-const INSTRUMENTED_MARKER = Symbol.for('sentry.instrumented.postgresjs');
-// Marker to track if a query was created from an instrumented sql instance.
-// This prevents double-spanning when both the wrapper and the Node.js Query.prototype
-// fallback patch are active simultaneously.
-const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.sql');
+interface PostgresJsQueryContext extends OrchestrionChannelContext {
+  self?: PostgresQuery;
+  [SPAN_ENDED]?: boolean;
+}
 
-/**
- * Instruments a postgres.js `sql` instance with Sentry tracing.
- *
- * This is a portable instrumentation function that works in any environment
- * (Node.js, Cloudflare Workers, etc.) without depending on OpenTelemetry.
- *
- * @example
- * ```javascript
- * import postgres from 'postgres';
- * import * as Sentry from '@sentry/cloudflare'; // or '@sentry/deno'
- *
- * const sql = Sentry.instrumentPostgresJsSql(
- *   postgres({ host: 'localhost', database: 'mydb' })
- * );
- *
- * // All queries now create Sentry spans
- * await sql`SELECT * FROM users WHERE id = ${userId}`;
- * ```
- */
-export function instrumentPostgresJsSql<T>(sql: T, options?: PostgresJsSqlInstrumentationOptions): T {
-  if (!sql || typeof sql !== 'function') {
-    DEBUG_BUILD && debug.warn('instrumentPostgresJsSql: provided value is not a valid postgres.js sql instance');
-    return sql;
+// A connection object -> its resolved context, populated on the `connection`
+// channel and read on the `execute`/`connect` channels (keyed by the same object).
+const connectionContexts = new WeakMap<object, PostgresConnectionContext>();
+// Distinct endpoints seen so far (value-compared, so N connections to one DB
+// count once). When exactly one endpoint exists — the common case, and the only
+// one the tests exercise — every query resolves to it at handle-start.
+const endpointRegistry: PostgresConnectionContext[] = [];
+
+function registerEndpoint(context: PostgresConnectionContext): void {
+  const alreadyKnown = endpointRegistry.some(
+    e =>
+      e.ATTR_SERVER_ADDRESS === context.ATTR_SERVER_ADDRESS &&
+      e.ATTR_SERVER_PORT === context.ATTR_SERVER_PORT &&
+      e.ATTR_DB_NAMESPACE === context.ATTR_DB_NAMESPACE,
+  );
+  if (!alreadyKnown) {
+    endpointRegistry.push(context);
   }
+}
 
-  return _instrumentSqlInstance(sql, { requireParentSpan: true, ...options }) as T;
+/** The single known endpoint, or `undefined` when zero or multiple are known. */
+function resolveSingleEndpoint(): PostgresConnectionContext | undefined {
+  return endpointRegistry.length === 1 ? endpointRegistry[0] : undefined;
 }
 
 /**
- * Instruments a sql instance by wrapping its query execution methods.
+ * Record a connection from the `connection` channel `end` (`result` is the
+ * connection object, `arguments[0]` the parsed options), keying its resolved
+ * context by the connection object and tracking its endpoint.
  */
-function _instrumentSqlInstance(
-  sql: unknown,
-  options: PostgresJsSqlInstrumentationOptions,
-  parentConnectionContext?: PostgresConnectionContext,
-): unknown {
-  // Check if already instrumented to prevent double-wrapping
-  // Using Symbol.for() ensures the marker survives proxying
-  if ((sql as Record<symbol, unknown>)[INSTRUMENTED_MARKER]) {
-    return sql;
+function recordConnectionFromChannel(message: PostgresJsQueryContext): void {
+  const connection = message.result;
+  const options = message.arguments?.[0] as { host?: string[]; port?: number[]; database?: string } | undefined;
+  if (!connection || typeof connection !== 'object' || !options) {
+    return;
   }
+  const context = _buildConnectionContext(options);
+  connectionContexts.set(connection, context);
+  registerEndpoint(context);
+}
 
-  // Wrap the sql function to intercept query creation
-  const proxiedSql: unknown = new Proxy(sql as (...args: unknown[]) => unknown, {
-    apply(target, thisArg, argumentsList: unknown[]) {
-      const query = Reflect.apply(target, thisArg, argumentsList);
-
-      if (isObjectLike(query) && 'handle' in query) {
-        _wrapSingleQueryHandle(query as { handle: unknown; strings?: string[] }, proxiedSql, options);
-      }
-
-      return query;
-    },
-    get(target, prop) {
-      const original = (target as unknown as Record<string | symbol, unknown>)[prop];
-
-      if (typeof prop !== 'string' || typeof original !== 'function') {
-        return original;
-      }
-
-      // Wrap methods that return PendingQuery objects (unsafe, file)
-      if (prop === 'unsafe' || prop === 'file') {
-        return _wrapQueryMethod(original as (...args: unknown[]) => unknown, target, proxiedSql, options);
-      }
-
-      // Wrap begin and reserve (not savepoint to avoid duplicate spans)
-      if (prop === 'begin' || prop === 'reserve') {
-        return _wrapCallbackMethod(original as (...args: unknown[]) => unknown, target, proxiedSql, options);
-      }
-
-      return original;
-    },
-  });
-
-  // Use provided parent context if available, otherwise extract from sql.options
-  if (parentConnectionContext) {
-    (proxiedSql as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] = parentConnectionContext;
-  } else {
-    _attachConnectionContext(sql, proxiedSql as Record<symbol, unknown>);
+function setConnectionAttributes(span: Span, query: PostgresQuery, context: PostgresConnectionContext): void {
+  const queryRecord = query as Record<symbol, unknown>;
+  if (queryRecord[CONNECTION_ATTRS_SET]) {
+    return;
+  }
+  queryRecord[CONNECTION_ATTRS_SET] = true;
+  if (context) {
+    span.setAttributes(_getConnectionAttributes(context));
   }
-
-  // Mark both the original and proxy as instrumented to prevent double-wrapping
-  (sql as Record<symbol, unknown>)[INSTRUMENTED_MARKER] = true;
-  (proxiedSql as Record<symbol, unknown>)[INSTRUMENTED_MARKER] = true;
-
-  return proxiedSql;
 }
 
 /**
- * Wraps query-returning methods (unsafe, file) to ensure their queries are instrumented.
+ * Backfill connection attributes onto a query's span from a channel whose `self`
+ * is the connection object and `arguments[0]` the query. Shared by the `execute`
+ * and `connect` channels; both carry that shape and both resolve the context via
+ * the `connectionContexts` WeakMap. Idempotent (guarded inside
+ * `setConnectionAttributes`).
  */
-function _wrapQueryMethod(
-  original: (...args: unknown[]) => unknown,
-  target: unknown,
-  proxiedSql: unknown,
-  options: PostgresJsSqlInstrumentationOptions,
-): (...args: unknown[]) => unknown {
-  return function (this: unknown, ...args: unknown[]): unknown {
-    const query = Reflect.apply(original, target, args);
-
-    if (isObjectLike(query) && 'handle' in query) {
-      _wrapSingleQueryHandle(query as { handle: unknown; strings?: string[] }, proxiedSql, options);
-    }
-
-    return query;
-  };
+function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext): void {
+  const connection = message.self;
+  const query = message.arguments?.[0] as PostgresQuery | undefined;
+  if (!connection || !query) {
+    return;
+  }
+  const span = (query as Record<symbol, unknown>)[QUERY_SPAN] as Span | undefined;
+  const context = connectionContexts.get(connection);
+  if (span && context) {
+    setConnectionAttributes(span, query, context);
+  }
 }
 
 /**
- * Wraps callback-based methods (begin, reserve) to recursively instrument Sql instances.
- * Note: These methods can also be used as tagged templates, which we pass through unchanged.
+ * Wrap `query.resolve`/`query.reject` so the span ends when the query settles.
  *
- * Savepoint is not wrapped to avoid complex nested transaction instrumentation issues.
- * Queries within savepoint callbacks are still instrumented through the parent transaction's Sql instance.
+ * `Query extends Promise` and `async handle()` only dispatches — its promise
+ * resolves immediately, long before the query completes. postgres.js signals
+ * completion by calling `this.resolve`/`this.reject`, so we own the span end
+ * there. Wrapping happens at handle-start because `reject` can fire
+ * synchronously during dispatch and `cursor()` reassigns both before executing.
  */
-function _wrapCallbackMethod(
-  original: (...args: unknown[]) => unknown,
-  target: unknown,
-  parentSqlInstance: unknown,
-  options: PostgresJsSqlInstrumentationOptions,
-): (...args: unknown[]) => unknown {
-  return function (this: unknown, ...args: unknown[]): unknown {
-    // Extract parent context to propagate to child instances
-    const parentContext = (parentSqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as
-      | PostgresConnectionContext
-      | undefined;
-
-    // Check if this is a callback-based call by verifying the last argument is a function
-    const isCallbackBased = typeof args[args.length - 1] === 'function';
-
-    if (!isCallbackBased) {
-      // Not a callback-based call - could be tagged template or promise-based
-      const result = Reflect.apply(original, target, args);
-      // If result is a Promise (e.g., reserve() without callback), instrument the resolved Sql instance
-      if (result && typeof (result as Promise<unknown>).then === 'function') {
-        return (result as Promise<unknown>).then((sqlInstance: unknown) => {
-          return _instrumentSqlInstance(sqlInstance, options, parentContext);
-        });
+function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operationName: string | undefined): void {
+  const query = data.self;
+  if (!query) {
+    return;
+  }
+
+  // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
+  // wrapper even if `span.end()` below throws.
+  const markEnded = (): void => {
+    data[SPAN_ENDED] = true;
+  };
+
+  const originalResolve = query.resolve;
+  if (typeof originalResolve === 'function') {
+    query.resolve = function (this: unknown, ...resolveArgs: unknown[]): unknown {
+      markEnded();
+      try {
+        const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
+        // Re-set the operation name with the server-reported command, which is more reliable than the query text.
+        span.setAttribute(DB_OPERATION_NAME, command || operationName);
+        span.end();
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in resolve:', e);
       }
-      return result;
-    }
-
-    // Callback-based call: wrap the callback to instrument the Sql instance
-    const callback = (args.length === 1 ? args[0] : args[1]) as (sql: unknown) => unknown;
-    const wrappedCallback = function (sqlInstance: unknown): unknown {
-      const instrumentedSql = _instrumentSqlInstance(sqlInstance, options, parentContext);
-      return callback(instrumentedSql);
+      return originalResolve.apply(this, resolveArgs);
     };
+  }
 
-    const newArgs = args.length === 1 ? [wrappedCallback] : [args[0], wrappedCallback];
-    return Reflect.apply(original, target, newArgs);
-  };
+  const originalReject = query.reject;
+  if (typeof originalReject === 'function') {
+    query.reject = function (this: unknown, ...rejectArgs: unknown[]): unknown {
+      markEnded();
+      try {
+        const err = rejectArgs[0] as { message?: string; code?: string; name?: string } | undefined;
+        span.setStatus({ code: SPAN_STATUS_ERROR, message: err?.message || 'unknown_error' });
+        span.setAttribute(DB_RESPONSE_STATUS_CODE, err?.code || 'unknown');
+        span.setAttribute(ERROR_TYPE, err?.name || 'unknown');
+        span.end();
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in reject:', e);
+      }
+      return originalReject.apply(this, rejectArgs);
+    };
+  }
 }
 
-/**
- * Wraps a single query's handle method to create spans.
- */
-function _wrapSingleQueryHandle(
-  query: { handle: unknown; strings?: string[]; __sentryWrapped?: boolean },
-  sqlInstance: unknown,
-  options: PostgresJsSqlInstrumentationOptions,
-): void {
-  // Prevent double wrapping - check if the handle itself is already wrapped
-  if ((query.handle as { __sentryWrapped?: boolean })?.__sentryWrapped) {
-    return;
-  }
+const _postgresJsIntegration = ((options: PostgresJsIntegrationOptions = {}) => {
+  return {
+    name: INTEGRATION_NAME,
+    setup(client) {
+      invokeOrchestrionInstrumentation(client, postgresJsModuleNames, instrumentPostgresJs, [options]);
+    },
+  };
+}) satisfies IntegrationFn;
+
+function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
+  const { requireParentSpan, requestHook } = options;
+
+  // Connection + execute are pure observers (no span, no async binding).
+  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_CONNECTION).subscribe({
+    start: NOOP,
+    asyncStart: NOOP,
+    asyncEnd: NOOP,
+    error: NOOP,
+    end: recordConnectionFromChannel,
+  });
+
+  // Per-connection attributes for queries reusing an already-open connection
+  // (`c.execute(q)`, `self === c`). `execute` is also called bare
+  // (`self === undefined`) for the first query on each connection, `fetchState`
+  // and `retry`; those miss here (the `connect` channel below covers the first
+  // user query, and the single-endpoint fallback covers the common case).
+  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_EXECUTE).subscribe({
+    end: NOOP,
+    asyncStart: NOOP,
+    asyncEnd: NOOP,
+    error: NOOP,
+    start: attachConnectionAttributesFromChannel,
+  });
 
-  // Mark this query as coming from an instrumented sql instance.
-  // This prevents the Node.js Query.prototype fallback patch from double-spanning.
-  (query as Record<symbol, unknown>)[QUERY_FROM_INSTRUMENTED_SQL] = true;
+  // The connection's `connect(query)` method (`self === c`, `arguments[0]` the
+  // query) fires when a fresh connection is opened for a query. That first query
+  // is later dispatched via a bare `execute` (no `self`), so this is where it
+  // gets its connection attributes in multi-endpoint apps.
+  diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_CONNECT).subscribe({
+    end: NOOP,
+    asyncStart: NOOP,
+    asyncEnd: NOOP,
+    error: NOOP,
+    start: attachConnectionAttributesFromChannel,
+  });
 
-  const originalHandle = query.handle as (...args: unknown[]) => Promise<unknown>;
+  bindTracingChannelToSpan<PostgresJsQueryContext>(
+    diagnosticsChannel.tracingChannel<PostgresJsQueryContext>(CHANNELS.POSTGRESJS_HANDLE),
+    data => {
+      const query = data.self;
+      if (!query) {
+        return undefined;
+      }
 
-  // IMPORTANT: We must replace the handle function directly, not use a Proxy,
-  // because Query.then() internally calls this.handle(), which would bypass a Proxy wrapper.
-  const wrappedHandle = async function (this: { executed?: boolean }, ...args: unknown[]): Promise<unknown> {
-    // postgres.js calls handle() from then/catch/finally — only the first call executes SQL,
-    // subsequent calls are no-ops (guarded by this.executed). Skip span creation for no-ops.
-    if (this.executed || !_shouldCreateSpans(options)) {
-      return originalHandle.apply(this, args);
-    }
+      // Opt out of re-entrant `handle()` calls (then/catch/finally re-invoke
+      // it, guarded by `executed`) and queries already wrapped by the portable
+      // `instrumentPostgresJsSql`.
+      if (query.executed === true || (query as Record<symbol, unknown>)[QUERY_FROM_INSTRUMENTED_SQL]) {
+        return undefined;
+      }
 
-    const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
-    const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
+      const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
+      const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
 
-    const client = getClient();
+      const client = getClient();
 
-    const connectionContext = sqlInstance
-      ? ((sqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as PostgresConnectionContext | undefined)
-      : undefined;
+      // Single-endpoint fallback: resolve context now so the span name and `requestHook` have
+      // it, and the first-query-per-connection (bare `execute`) path still gets attrs.
+      const context = resolveSingleEndpoint();
 
-    const name =
-      client && hasSpanStreamingEnabled(client)
-        ? queryAttributes[DB_QUERY_SUMMARY] || connectionContext?.ATTR_DB_NAMESPACE || 'postgres'
-        : sanitizedSqlQuery || 'postgresjs.query';
+      const name =
+        client && hasSpanStreamingEnabled(client)
+          ? queryAttributes[DB_QUERY_SUMMARY] || context?.ATTR_DB_NAMESPACE || DB_SYSTEM_NAME_POSTGRES
+          : sanitizedSqlQuery || 'postgresjs.query';
 
-    return startSpanManual(
-      {
+      // `sentry.kind: client` matches the mysql/pg channel subscribers.
+      const span = startInactiveSpan({
         name,
+        onlyIfParent: requireParentSpan !== false,
         attributes: {
           [SENTRY_OP]: DB,
-          [SENTRY_ORIGIN]: 'auto.db.postgresjs',
-          [DB_SYSTEM_NAME]: 'postgres',
+          [SENTRY_KIND]: 'client',
+          [SENTRY_ORIGIN]: ORIGIN,
+          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
           ...queryAttributes,
-          ...(connectionContext && _getConnectionAttributes(connectionContext)),
         },
-      },
-      (span: Span) => {
-        if (options.requestHook) {
-          try {
-            options.requestHook(span, sanitizedSqlQuery, connectionContext);
-          } catch (e) {
-            span.setAttribute('sentry.hook.error', 'requestHook failed');
-            DEBUG_BUILD && debug.error('Error in requestHook for PostgresJs instrumentation:', e);
-          }
-        }
+      });
 
-        const queryWithCallbacks = this as {
-          resolve: unknown;
-          reject: unknown;
-        };
-
-        queryWithCallbacks.resolve = new Proxy(queryWithCallbacks.resolve as (...args: unknown[]) => unknown, {
-          apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
-            try {
-              // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-              span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
-              span.end();
-            } catch (e) {
-              DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
-            }
-
-            return Reflect.apply(resolveTarget, resolveThisArg, resolveArgs);
-          },
-        });
-
-        queryWithCallbacks.reject = new Proxy(queryWithCallbacks.reject as (...args: unknown[]) => unknown, {
-          apply: (rejectTarget, rejectThisArg, rejectArgs: { message?: string; code?: string; name?: string }[]) => {
-            try {
-              span.setStatus({
-                code: SPAN_STATUS_ERROR,
-                message: rejectArgs?.[0]?.message || 'unknown_error',
-              });
-
-              span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
-              span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
-
-              span.end();
-            } catch (e) {
-              DEBUG_BUILD && debug.error('Error ending span in reject callback:', e);
-            }
-            return Reflect.apply(rejectTarget, rejectThisArg, rejectArgs);
-          },
-        });
-
-        // Handle synchronous errors that might occur before promise is created
+      // Stash for the `execute`/`connect` channels to attach per-connection attributes.
+      (query as Record<symbol, unknown>)[QUERY_SPAN] = span;
+
+      if (context) {
+        setConnectionAttributes(span, query, context);
+      }
+
+      if (requestHook) {
         try {
-          return originalHandle.apply(this, args);
+          requestHook(span, sanitizedSqlQuery, context);
         } catch (e) {
-          span.setStatus({
-            code: SPAN_STATUS_ERROR,
-            message: e instanceof Error ? e.message : 'unknown_error',
-          });
-          span.end();
-          throw e;
+          span.setAttribute('sentry.hook.error', 'requestHook failed');
+          DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error in requestHook:', e);
         }
-      },
-    );
-  };
-
-  (wrappedHandle as { __sentryWrapped?: boolean }).__sentryWrapped = true;
-  query.handle = wrappedHandle;
-}
-
-/**
- * Determines whether a span should be created based on the current context.
- * If `requireParentSpan` is set to true in the options, a span will
- * only be created if there is a parent span available.
- */
-function _shouldCreateSpans(options: PostgresJsSqlInstrumentationOptions): boolean {
-  const hasParentSpan = getActiveSpan() !== undefined;
-  return hasParentSpan || !options.requireParentSpan;
-}
-
-/**
- * Reconstructs the full SQL query from template strings with PostgreSQL placeholders.
- *
- * For sql`SELECT * FROM users WHERE id = ${123} AND name = ${'foo'}`:
- *   strings = ["SELECT * FROM users WHERE id = ", " AND name = ", ""]
- *   returns: "SELECT * FROM users WHERE id = $1 AND name = $2"
- *
- * @internal Exported for testing only
- */
-export function _reconstructQuery(strings: string[] | undefined): string | undefined {
-  if (!strings?.length) {
-    return undefined;
-  }
-  if (strings.length === 1) {
-    return strings[0] || undefined;
-  }
-  // Join template parts with PostgreSQL placeholders ($1, $2, etc.)
-  return strings.reduce((acc, str, i) => (i === 0 ? str : `${acc}$${i}${str}`), '');
-}
-
-/**
- * Returns connection context attributes.
- *
- * @internal Exported for the diagnostics-channel integration.
- */
-export function _getConnectionAttributes(connectionContext: PostgresConnectionContext): SpanAttributes {
-  const attributes: SpanAttributes = {};
-
-  const portNumber = connectionContext.ATTR_SERVER_PORT ? parseInt(connectionContext.ATTR_SERVER_PORT, 10) : undefined;
-  const dbNamespace = connectionContext.ATTR_DB_NAMESPACE;
-  const serverAddress = connectionContext.ATTR_SERVER_ADDRESS;
+      }
 
-  if (dbNamespace) {
-    attributes[DB_NAMESPACE] = dbNamespace;
-  }
-  if (serverAddress) {
-    attributes[SERVER_ADDRESS] = serverAddress;
-  }
-  if (portNumber !== undefined && !isNaN(portNumber)) {
-    attributes[SERVER_PORT] = portNumber;
-  }
+      wrapQuerySettlement(data, span, queryAttributes[DB_OPERATION_NAME]);
 
-  return attributes;
+      return span;
+    },
+    {
+      deferSpanEnd({ data }) {
+        // `handle` is async: its promise settles on dispatch (asyncEnd), long
+        // before the query does. The resolve/reject wrappers own the ending.
+        if (data[SPAN_ENDED]) {
+          return true; // wrappers already ended it
+        }
+        if ('error' in data) {
+          return false; // `handle()` itself threw; the error subscriber annotated the span, let the helper end it
+        }
+        // NOTE: for a cursor consumed as an async iterator, only the first batch
+        // reaches `handle` (the `executed` guard blocks the rest), so the span
+        // ends on the first batch — a pre-existing flaw kept for parity.
+        return true; // query in flight; the wrappers will end the span when it settles
+      },
+    },
+  );
 }
 
 /**
- * Builds a {@link PostgresConnectionContext} from postgres.js' parsed options
- * (which store `host`/`port` as arrays). Defaults to 'localhost'/5432.
+ * Diagnostics-channel-based postgres.js (`postgres` v3.x) integration.
  *
- * @internal Exported for the diagnostics-channel integration.
+ * Subscribes to the `orchestrion:postgres:handle` / `:connection` / `:execute` /
+ * `:connect` diagnostics channels injected into postgres.js' `Query.prototype.handle`
+ * and `Connection`/`execute`/`connect` (in `src/*` and `cjs/src/*`) and creates db
+ * spans matching the OTel `postgresJsIntegration`. Requires the Sentry runtime
+ * hook or bundler plugin.
  */
-export function _buildConnectionContext(options: {
-  host?: string[];
-  port?: number[];
-  database?: string;
-}): PostgresConnectionContext {
-  const host = options.host?.[0] || 'localhost';
-  const port = options.port?.[0] || 5432;
-  return {
-    ATTR_DB_NAMESPACE: typeof options.database === 'string' && options.database !== '' ? options.database : undefined,
-    ATTR_SERVER_ADDRESS: host,
-    ATTR_SERVER_PORT: String(port),
-  };
-}
-
-/**
- * Extracts and stores connection context from sql.options.
- */
-function _attachConnectionContext(sql: unknown, proxiedSql: Record<symbol, unknown>): void {
-  const sqlInstance = sql as { options?: { host?: string[]; port?: number[]; database?: string } };
-  if (!sqlInstance.options || typeof sqlInstance.options !== 'object') {
-    return;
-  }
-
-  proxiedSql[CONNECTION_CONTEXT_SYMBOL] = _buildConnectionContext(sqlInstance.options);
-}
+export const postgresJsIntegration = defineIntegration(_postgresJsIntegration);
diff --git a/packages/server-utils/test/integrations/postgres/postgres-ignore-connect.test.ts b/packages/server-utils/test/integrations/pg/pg-ignore-connect.test.ts
similarity index 98%
rename from packages/server-utils/test/integrations/postgres/postgres-ignore-connect.test.ts
rename to packages/server-utils/test/integrations/pg/pg-ignore-connect.test.ts
index 5254c7890e08..acc6785f97f4 100644
--- a/packages/server-utils/test/integrations/postgres/postgres-ignore-connect.test.ts
+++ b/packages/server-utils/test/integrations/pg/pg-ignore-connect.test.ts
@@ -9,7 +9,7 @@ import {
   setAsyncContextStrategy,
 } from '@sentry/core';
 import { afterAll, beforeAll, describe, expect, it } from 'vitest';
-import { postgresIntegration } from '../../../src/integrations/postgres';
+import { postgresIntegration } from '../../../src/integrations/pg';
 import { CHANNELS } from '../../../src/orchestrion/channels';
 
 interface TestStore {
@@ -64,7 +64,7 @@ function installTestAsyncContextStrategy(): void {
 // ABSENCE of connect subscribers only holds when no other (default-options)
 // integration in the same module context has subscribed. vitest isolates
 // module state per file, so this file keeps that assertion clean (the default
-// options integration is exercised in `postgres.test.ts`).
+// options integration is exercised in `pg.test.ts`).
 describe('postgresIntegration({ ignoreConnectSpans: true })', () => {
   beforeAll(() => {
     installTestAsyncContextStrategy();
diff --git a/packages/server-utils/test/integrations/postgres/postgres.test.ts b/packages/server-utils/test/integrations/pg/pg.test.ts
similarity index 99%
rename from packages/server-utils/test/integrations/postgres/postgres.test.ts
rename to packages/server-utils/test/integrations/pg/pg.test.ts
index 9af1c1a5c851..c572441e6896 100644
--- a/packages/server-utils/test/integrations/postgres/postgres.test.ts
+++ b/packages/server-utils/test/integrations/pg/pg.test.ts
@@ -11,7 +11,7 @@ import {
   setAsyncContextStrategy,
 } from '@sentry/core';
 import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, type MockInstance, vi } from 'vitest';
-import { postgresIntegration } from '../../../src/integrations/postgres';
+import { postgresIntegration } from '../../../src/integrations/pg';
 import { CHANNELS } from '../../../src/orchestrion/channels';
 
 interface TestStore {
diff --git a/packages/server-utils/test/integrations/postgresjs.test.ts b/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
similarity index 99%
rename from packages/server-utils/test/integrations/postgresjs.test.ts
rename to packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
index 3d2283f2cc28..d1874a458589 100644
--- a/packages/server-utils/test/integrations/postgresjs.test.ts
+++ b/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
@@ -1,6 +1,6 @@
 import * as SentryCore from '@sentry/core';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { _reconstructQuery, instrumentPostgresJsSql } from '../../src/integrations/postgresjs';
+import { _reconstructQuery, instrumentPostgresJsSql } from '../../src/integrations/postgresjs-wrapper';
 import { sanitizeSqlQuery } from '../../src/utils/sql';
 
 describe('PostgresJs portable instrumentation', () => {

From afa37635f5dad1b203d0077ac2e52160763dffe2 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 13:38:13 +0100
Subject: [PATCH 108/169] perf(ci): Speed up Next.js E2E tests by sharding into
 dev/prod (#25960)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reduce CI bottlenecks by running Next.js production/development suites
in parallel, shortening fixture flush waits, and skipping redundant
production builds in app-dir development jobs.

Some individual job timings before → after (measured on the weekend when
there was likely lower load so absolute numbers are probably more of a
lower bound but the relative improvements should still be there):

- Next 16 webpack: **4:31 → 3:09**; latest: **5:00 → 2:41**
- Next 16 Turbopack: **4:04 → 1:55**; latest: **3:58 → 2:00**
- App-dir Next 14: **3:30 → 2:09**
- App-dir Next 15: **3:51 → 2:04**
- Next 15: **2:29 → 1:40**
- Next 16 static: **2:53 → 1:38**

Overall required CI completion dropped from **7:20 to 5:34 (24%)** in my
latest test.

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 dev-packages/e2e-tests/README.md              |  4 ++
 dev-packages/e2e-tests/lib/getTestMatrix.mjs  |  2 +-
 dev-packages/e2e-tests/run.mjs                |  3 +-
 .../test-applications/nextjs-15/package.json  | 12 ++++++
 .../nextjs-16-static/package.json             | 14 ++++++-
 .../tests/build-output.test.ts                |  3 ++
 .../nextjs-16/instrumentation-client.ts       |  1 +
 .../test-applications/nextjs-16/package.json  | 38 ++++++++++++++++---
 .../nextjs-16/sentry.server.config.ts         |  1 +
 .../nextjs-16/tests/build-output.test.ts      |  2 +
 .../nextjs-app-dir/package.json               | 23 +++++++++--
 11 files changed, 91 insertions(+), 12 deletions(-)

diff --git a/dev-packages/e2e-tests/README.md b/dev-packages/e2e-tests/README.md
index 426b274da2d0..b5cdf556befd 100644
--- a/dev-packages/e2e-tests/README.md
+++ b/dev-packages/e2e-tests/README.md
@@ -292,6 +292,10 @@ For example, if something is changed in the browser package, only E2E test apps
 You can add additional information about the test (e.g. canary versions, optional in CI) by adding `sentryTest` in the `package.json`
 of a test application.
 
+`sentryTest.baseVariant` overrides the default matrix entry using the same fields as an entry in `variants`. For example,
+set its `assert-command` to run production tests and add a development variant to run both environments in parallel.
+The local `test:assert` script can still run both; select the base variant locally with `--variant <label>`.
+
 The required E2E jobs run on 2 vCPUs (`namespace-profile-sentry-javascript-small`). If an app's job takes longer than
 about 90 seconds, set `"sentryTest": { "runner": "namespace-profile-sentry-javascript" }` to run it and its variants on
 4 vCPUs.
diff --git a/dev-packages/e2e-tests/lib/getTestMatrix.mjs b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
index 6d409d4e9411..69f5d3d7806b 100644
--- a/dev-packages/e2e-tests/lib/getTestMatrix.mjs
+++ b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
@@ -118,7 +118,7 @@ function addIncludesForTestApp(testApp, includes, { variant }) {
   // The test application itself is either required or optional, never canary, and only runs in the matrix of its mode.
   const appVariant = isOptional ? 'optional' : 'required';
   if (appVariant === variant) {
-    includes.push(baseInclude);
+    includes.push({ ...baseInclude, ...packageJson.sentryTest?.baseVariant });
   }
 
   variants.forEach(variant => {
diff --git a/dev-packages/e2e-tests/run.mjs b/dev-packages/e2e-tests/run.mjs
index 300b304f2bfa..15c739388456 100644
--- a/dev-packages/e2e-tests/run.mjs
+++ b/dev-packages/e2e-tests/run.mjs
@@ -19,7 +19,7 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
  * @typedef {{ 'build-command': string; 'assert-command'?: string; label?: string; skip?: boolean; runtime?: string }} SentryTestVariant
  */
 
-/** @typedef {{ sentryTest?: { variants?: SentryTestVariant[]; optionalVariants?: SentryTestVariant[]; canaryVariants?: SentryTestVariant[] } }} PackageJson */
+/** @typedef {{ sentryTest?: { baseVariant?: SentryTestVariant; variants?: SentryTestVariant[]; optionalVariants?: SentryTestVariant[]; canaryVariants?: SentryTestVariant[] } }} PackageJson */
 
 const DEFAULT_DSN = 'https://username@domain/123';
 const DEFAULT_SENTRY_ORG_SLUG = 'sentry-javascript-sdks';
@@ -98,6 +98,7 @@ async function getVariantBuildCommand(packageJsonPath, variantLabel, testAppPath
     const packageJson = JSON.parse(packageJsonContent);
 
     const allVariants = [
+      ...(packageJson.sentryTest?.baseVariant ? [packageJson.sentryTest.baseVariant] : []),
       ...(packageJson.sentryTest?.variants || []),
       ...(packageJson.sentryTest?.optionalVariants || []),
       ...(packageJson.sentryTest?.canaryVariants || []),
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-15/package.json b/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
index fb1cad71c57e..fad802048973 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
@@ -42,6 +42,18 @@
         "assert-command": "pnpm test:prod-turbo && pnpm test:dev-turbo",
         "label": "nextjs-15 (turbo)"
       }
+    ],
+    "baseVariant": {
+      "build-command": "pnpm test:build",
+      "label": "nextjs-15 (production)",
+      "assert-command": "pnpm test:prod"
+    },
+    "variants": [
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-15 (development)",
+        "assert-command": "pnpm test:dev"
+      }
     ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
index a8a2366e2445..bca5addb2fae 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
@@ -41,6 +41,18 @@
     "typescript": "^5"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
+    "runner": "namespace-profile-sentry-javascript",
+    "baseVariant": {
+      "build-command": "pnpm test:build",
+      "label": "nextjs-16-static (production)",
+      "assert-command": "pnpm test:prod"
+    },
+    "variants": [
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-16-static (development)",
+        "assert-command": "pnpm test:dev"
+      }
+    ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-static/tests/build-output.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-static/tests/build-output.test.ts
index 735e04649c32..7a6cd16a5c37 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-static/tests/build-output.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-static/tests/build-output.test.ts
@@ -1,8 +1,11 @@
 import { expect, test } from '@playwright/test';
 import { findAbsolutePathImports } from '@sentry-internal/test-utils';
 import * as path from 'path';
+import { isDevMode } from './isDevMode';
 
 test('emits no absolute-path imports into the server output', () => {
+  test.skip(isDevMode, 'Checks production build output');
+
   const leaks = findAbsolutePathImports({ outputDir: path.join(process.cwd(), '.next', 'server') });
 
   expect(leaks).toEqual([]);
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
index f1ad74d2ea85..81b3fe08b4a6 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/instrumentation-client.ts
@@ -6,6 +6,7 @@ Sentry.init({
   dsn: process.env.NEXT_PUBLIC_E2E_TEST_DSN,
   tunnel: `http://localhost:3031/`, // proxy server
   tracesSampleRate: 1.0,
+  _flushInterval: 100,
   integrations: [
     Sentry.thirdPartyErrorFilterIntegration({
       filterKeys: ['nextjs-16-e2e'],
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
index 330998a1e357..aa9e628b0efd 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
@@ -67,6 +67,11 @@
   "sentryTest": {
     "runner": "namespace-profile-sentry-javascript",
     "variants": [
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-16 (turbopack, development)",
+        "assert-command": "pnpm test:dev"
+      },
       {
         "build-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:build",
         "label": "nextjs-16 (exclude application key dependencies)",
@@ -74,17 +79,33 @@
       },
       {
         "build-command": "pnpm test:build-webpack",
-        "label": "nextjs-16 (webpack)",
-        "assert-command": "pnpm test:assert-webpack"
+        "label": "nextjs-16 (webpack, production)",
+        "assert-command": "pnpm test:prod"
+      },
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-16 (webpack, development)",
+        "assert-command": "pnpm test:dev-webpack"
       },
       {
         "build-command": "pnpm test:build-latest-webpack",
-        "label": "nextjs-16 (latest, webpack)",
-        "assert-command": "pnpm test:assert-webpack"
+        "label": "nextjs-16 (latest, webpack, production)",
+        "assert-command": "pnpm test:prod"
+      },
+      {
+        "build-command": "pnpm install && pnpm add next@latest",
+        "label": "nextjs-16 (latest, webpack, development)",
+        "assert-command": "pnpm test:dev-webpack"
       },
       {
         "build-command": "pnpm test:build-latest",
-        "label": "nextjs-16 (latest, turbopack)"
+        "label": "nextjs-16 (latest, turbopack, production)",
+        "assert-command": "pnpm test:prod"
+      },
+      {
+        "build-command": "pnpm install && pnpm add next@latest",
+        "label": "nextjs-16 (latest, turbopack, development)",
+        "assert-command": "pnpm test:dev"
       },
       {
         "runtime": "bun",
@@ -134,6 +155,11 @@
         "label": "nextjs-16 (canary, webpack)",
         "assert-command": "pnpm test:assert-webpack"
       }
-    ]
+    ],
+    "baseVariant": {
+      "build-command": "pnpm test:build",
+      "label": "nextjs-16 (turbopack, production)",
+      "assert-command": "pnpm test:prod"
+    }
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/sentry.server.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/sentry.server.config.ts
index 960f49a15533..f0ec19dd256d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/sentry.server.config.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/sentry.server.config.ts
@@ -8,6 +8,7 @@ Sentry.init({
   dsn: process.env.NEXT_PUBLIC_E2E_TEST_DSN,
   tunnel: `http://localhost:3031/`, // proxy server
   tracesSampleRate: 1.0,
+  _flushInterval: 100,
   tracePropagationTargets: ['http://localhost:3030/propagation/test-outgoing-fetch/check'],
   // debug: true,
   integrations: [
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
index 613590b114ba..10d41b894524 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/tests/build-output.test.ts
@@ -29,6 +29,8 @@ test('excludes dependency metadata while preserving application metadata', () =>
 });
 
 test('emits no absolute-path imports into the server output', () => {
+  test.skip(isDevMode, 'Checks production build output');
+
   const leaks = findAbsolutePathImports({ outputDir: path.join(process.cwd(), '.next', 'server') });
 
   expect(leaks).toEqual([]);
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json b/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
index 2f9889c336f1..7b27a0bb2504 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
@@ -9,7 +9,8 @@
     "test:dev": "TEST_ENV=development playwright test",
     "test:build": "pnpm install && pnpm build",
     "test:test-build": "pnpm ts-node --script-mode assert-build.ts",
-    "test:build-15": "pnpm install && pnpm add next@15 && pnpm add react@latest && pnpm add react-dom@latest && pnpm build",
+    "test:install-15": "pnpm install && pnpm add next@15 && pnpm add react@latest && pnpm add react-dom@latest",
+    "test:build-15": "pnpm test:install-15 && pnpm build",
     "test:assert": "pnpm test:test-build && pnpm test:prod && pnpm test:dev"
   },
   "dependencies": {
@@ -31,10 +32,26 @@
   "sentryTest": {
     "runner": "namespace-profile-sentry-javascript",
     "variants": [
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-app-dir (development)",
+        "assert-command": "pnpm test:dev"
+      },
       {
         "build-command": "pnpm test:build-15",
-        "label": "nextjs-app-dir (next@15)"
+        "label": "nextjs-app-dir (next@15, production)",
+        "assert-command": "pnpm test:test-build && pnpm test:prod"
+      },
+      {
+        "build-command": "pnpm test:install-15",
+        "label": "nextjs-app-dir (next@15, development)",
+        "assert-command": "pnpm test:dev"
       }
-    ]
+    ],
+    "baseVariant": {
+      "build-command": "pnpm test:build",
+      "label": "nextjs-app-dir (production)",
+      "assert-command": "pnpm test:test-build && pnpm test:prod"
+    }
   }
 }

From 958868bdd25d21715c94681b073c02ec70615a9e Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 13:45:57 +0100
Subject: [PATCH 109/169] test(e2e): Import Type from typebox in
 node-pi-durable (#26018)

## What
The node-pi-durable test app imports `Type` from `typebox` directly.

## Why
pi-ai 1.5.0 no longer re-exports `Type`, so the latest variant failed at
startup.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../e2e-tests/test-applications/node-pi-durable/package.json   | 3 ++-
 .../e2e-tests/test-applications/node-pi-durable/src/server.mjs | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json b/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
index 12bd7ae0b2cd..7f21e622f083 100644
--- a/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
+++ b/dev-packages/e2e-tests/test-applications/node-pi-durable/package.json
@@ -14,7 +14,8 @@
     "@earendil-works/chord": "1.2.0",
     "@earendil-works/pi-ai": "1.2.0",
     "@earendil-works/pi-durable": "1.2.0",
-    "@sentry/node": "file:../../packed/sentry-node-packed.tgz"
+    "@sentry/node": "file:../../packed/sentry-node-packed.tgz",
+    "typebox": "1.3.27"
   },
   "devDependencies": {
     "@playwright/test": "1.64.1",
diff --git a/dev-packages/e2e-tests/test-applications/node-pi-durable/src/server.mjs b/dev-packages/e2e-tests/test-applications/node-pi-durable/src/server.mjs
index 093eaf74af5a..26e70d9dca8c 100644
--- a/dev-packages/e2e-tests/test-applications/node-pi-durable/src/server.mjs
+++ b/dev-packages/e2e-tests/test-applications/node-pi-durable/src/server.mjs
@@ -2,7 +2,7 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { fileURLToPath } from 'node:url';
 import { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';
-import { Type } from '@earendil-works/pi-ai';
+import { Type } from 'typebox';
 import { createModels } from '@earendil-works/pi-ai/models';
 import { openrouterProvider } from '@earendil-works/pi-ai/providers/openrouter';
 import {

From 284e43f368cbad96e826226faeeb844d58f5aa03 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:50:00 +0000
Subject: [PATCH 110/169] feat(deps): Bump node-forge from 1.4.0 to 1.4.2
 (#26020)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.4.0 to
1.4.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md">node-forge's
changelog</a>.</em></p>
<blockquote>
<h2>1.4.2 - 2026-10-27</h2>
<h3>Fixed</h3>
<ul>
<li>[pem] Convert non-string input to a string in
<code>pem.decode()</code> as before
1.4.1. The 1.4.1 PEM ReDoS fix (GHSA-7wch-p9px-956x) caused a
<code>TypeError</code>
for <code>Buffer</code> input, which is used by <code>node-jose</code>.
(<a
href="https://redirect.github.com/digitalbazaar/forge/issues/1165">#1165</a>)</li>
</ul>
<h2>1.4.1 - 2026-10-27</h2>
<h3>Notes</h3>
<ul>
<li>This release involved coordinating many security reports from many
groups,
people, and robots over too long period of time. Thank you for your
reports
and patience.</li>
<li>Claude Code was used to help organize, track, untangle, merge, test,
validate, fix, and improve it all. Further verification of fixes would
be
welcome.</li>
<li>Tracking credits was challenging for some issues due to multiple
email and
GitHub reports, incomplete contact details, or combining of partial
reports
and fixes. Please let us know if there are credits changes needed here
or in
advisory data.</li>
</ul>
<h3>Security</h3>
<ul>
<li><strong>HIGH</strong>: Signature forgery in RSA-PKCS due to ASN.1
extra field in
DigestAlgorithm.
<ul>
<li>RSASSA PKCS#1 v1.5 signature verification accepts forged signatures
for low
public exponent keys (e=3). The fix for CVE-2026-33894 only checked the
element count of the outer DigestInfo. Attackers can add
&quot;garbage&quot; elements
inside the nested DigestAlgorithm SEQUENCE in order to construct a
signature that passes verification, enabling Bleichenbacher style
forgery.</li>
<li>Reported by Geo (<a
href="https://github.com/geo-chen"><code>@​geo-chen</code></a>).</li>
<li>CVE ID: <a
href="https://www.cve.org/CVERecord?id=CVE-2026-85393">CVE-2026-85393</a></li>
<li>GHSA ID: <a
href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-2g46-22mc-6gwp">GHSA-2g46-22mc-6gwp</a></li>
</ul>
</li>
<li><strong>HIGH</strong>: Signature forgery in RSA-PKCS due to
non-canonical DigestInfo
encoding.
<ul>
<li>RSASSA PKCS#1 v1.5 signature verification accepts non-canonical
DigestInfo
encodings, such as NULL parameters with content, non-minimal length
encodings, and non-canonical OIDs. These provide attackers space to
construct forged signatures for low public exponent keys (e=3), similar
to
CVE-2026-33894 and CVE-2026-85393.</li>
<li>Reported by Oren Yomtov (<a
href="https://github.com/orenyomtov"><code>@​orenyomtov</code></a>,
Fireblocks), Bronson Yen (Calif.io,
in collaboration with Claude and Anthropic Research), Kamil Hałajda,
<a href="https://github.com/pzartech"><code>@​pzartech</code></a>, <a
href="https://github.com/antonlissone"><code>@​antonlissone</code></a>,
and <a
href="https://github.com/Brechard"><code>@​Brechard</code></a>.</li>
<li>CVE ID: <a
href="https://www.cve.org/CVERecord?id=CVE-2026-119192">CVE-2026-119192</a></li>
<li>GHSA ID: <a
href="https://github.com/digitalbazaar/forge/security/advisories/GHSA-6qrw-m8cv-hcxf">GHSA-6qrw-m8cv-hcxf</a></li>
</ul>
</li>
<li><strong>HIGH</strong>: ASN.1 resource exhaustion via BIT STRING
decoding.
<ul>
<li>An Uncontrolled Recursion (CWE-674) and Uncontrolled Resource
Consumption
(CWE-400) vulnerability in node-forge versions 1.4.0 and below enables
remote, unauthenticated attackers to exhaust CPU and memory with small
crafted DER or PEM inputs (certificates, keys, and other structures
parsed</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/digitalbazaar/forge/commit/7928054627d93ab8c0216b756246e8ca8d62a93e"><code>7928054</code></a>
Release 1.4.2.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/1d8c2459ad95d7ae7535702d1e55c173773e7b11"><code>1d8c245</code></a>
Update changelog.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/ce5b5760df260b7c7dfb3e047bc88f5e768fd31f"><code>ce5b576</code></a>
Convert non-string input in <code>pem.decode()</code>.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/c1d64ef32b78dabf204158760efbd1fb552ec9cb"><code>c1d64ef</code></a>
Fix changelog typo.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/453d196f29c51a5a976c9b743c4abb671e499d9c"><code>453d196</code></a>
Start 1.4.2-0.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/8a917370ec51731e817c2d547b7329a58f8210af"><code>8a91737</code></a>
Release 1.4.1.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/fdd1b9fd4c4e4974e86cd3c7e2f4f6310ba2d412"><code>fdd1b9f</code></a>
Update changelog.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/4c1c3e3d2b6bcdc2e72446e07e1d6eeccc8de14a"><code>4c1c3e3</code></a>
Add changelog release notes.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/0b455eb7c37a4df7c9b2e53d5057718c28d226de"><code>0b455eb</code></a>
Ignore TLS heartbeat requests before the handshake.</li>
<li><a
href="https://github.com/digitalbazaar/forge/commit/e96c47b7f006dec66fb7bb1934e7375498b04a72"><code>e96c47b</code></a>
Fix jsbn <code>modInverse</code> hang with negative inputs.</li>
<li>Additional commits viewable in <a
href="https://github.com/digitalbazaar/forge/compare/v1.4.0...v1.4.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node-forge&package-manager=npm_and_yarn&previous-version=1.4.0&new-version=1.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pnpm-lock.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f73e767d7302..90d4f63d1e9e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -14945,8 +14945,8 @@ packages:
     resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
 
-  node-forge@1.4.0:
-    resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
+  node-forge@1.4.2:
+    resolution: {integrity: sha512-rRtAR5XLJ8gCKd9du4qrKAsgCG1ObGP4gLeNJMa4vYSeq4bmBMOJk5IHkrviBV0q7uoAJlVd8HEQYQSVUb4FGQ==}
     engines: {node: '>= 6.13.0'}
 
   node-gyp-build-optional-packages@5.2.2:
@@ -27811,7 +27811,7 @@ snapshots:
       http-shutdown: 1.2.2
       jiti: 1.21.6
       mlly: 1.8.2
-      node-forge: 1.4.0
+      node-forge: 1.4.2
       pathe: 1.1.2
       std-env: 3.10.0
       ufo: 1.6.4
@@ -32132,7 +32132,7 @@ snapshots:
 
   google-p12-pem@3.1.4:
     dependencies:
-      node-forge: 1.4.0
+      node-forge: 1.4.2
 
   gopd@1.2.0: {}
 
@@ -33628,7 +33628,7 @@ snapshots:
       h3: 1.15.11
       http-shutdown: 1.2.2
       jiti: 2.7.0
-      node-forge: 1.4.0
+      node-forge: 1.4.2
       pathe: 2.0.3
       std-env: 4.3.0
       tinyclip: 0.1.15
@@ -35243,7 +35243,7 @@ snapshots:
       fetch-blob: 3.2.0
       formdata-polyfill: 4.0.10
 
-  node-forge@1.4.0: {}
+  node-forge@1.4.2: {}
 
   node-gyp-build-optional-packages@5.2.2:
     dependencies:
@@ -38127,7 +38127,7 @@ snapshots:
   selfsigned@2.4.1:
     dependencies:
       '@types/node-forge': 1.3.11
-      node-forge: 1.4.0
+      node-forge: 1.4.2
 
   semifies@1.0.0: {}
 

From 49998f3513838135c9f8ca4fee91ae3d4b097328 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 12:51:46 +0000
Subject: [PATCH 111/169] feat(deps): Bump @hapi/content from 6.0.2 to 6.0.3
 (#26021)

Bumps [@hapi/content](https://github.com/hapijs/content) from 6.0.2 to
6.0.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hapijs/content/commit/06f8c9f8bb38251781f89c348ae7760e49ca1f25"><code>06f8c9f</code></a>
6.0.3</li>
<li><a
href="https://github.com/hapijs/content/commit/0993851dc7234976a3fce3a7c31662b213c940fd"><code>0993851</code></a>
fix: prevent quadratic disposition parsing</li>
<li>See full diff in <a
href="https://github.com/hapijs/content/compare/v6.0.2...v6.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hapi/content&package-manager=npm_and_yarn&previous-version=6.0.2&new-version=6.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pnpm-lock.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 90d4f63d1e9e..d71341562057 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -5274,8 +5274,8 @@ packages:
   '@hapi/catbox@12.1.1':
     resolution: {integrity: sha512-hDqYB1J+R0HtZg4iPH3LEnldoaBsar6bYp0EonBmNQ9t5CO+1CqgCul2ZtFveW1ReA5SQuze9GPSU7/aecERhw==}
 
-  '@hapi/content@6.0.2':
-    resolution: {integrity: sha512-OKyCOTjNR1hftwSjk9ueyAQTw8AwapvzBrPIWMGn39vhR5PmqLdYFmLc35bsSBye7gSMnlkXfc679bUdMIcRyQ==}
+  '@hapi/content@6.0.3':
+    resolution: {integrity: sha512-ksXemMNZAwPq/mu1a9TZ7LDUSgMR9sexBgpalF3nrP6SM42ARlnBZs58IS5Ay+o4o7y6tFNXL+rMJkQ5ghvCSw==}
 
   '@hapi/cryptiles@6.0.1':
     resolution: {integrity: sha512-9GM9ECEHfR8lk5ASOKG4+4ZsEzFqLfhiryIJ2ISePVB92OHLp/yne4m+zn7z9dgvM98TLpiFebjDFQ0UHcqxXQ==}
@@ -23653,7 +23653,7 @@ snapshots:
       '@hapi/podium': 5.0.1
       '@hapi/validate': 2.0.1
 
-  '@hapi/content@6.0.2':
+  '@hapi/content@6.0.3':
     dependencies:
       '@hapi/boom': 10.0.1
 
@@ -23714,7 +23714,7 @@ snapshots:
     dependencies:
       '@hapi/b64': 6.0.1
       '@hapi/boom': 10.0.1
-      '@hapi/content': 6.0.2
+      '@hapi/content': 6.0.3
       '@hapi/hoek': 11.0.4
       '@hapi/nigel': 5.0.1
 
@@ -23748,7 +23748,7 @@ snapshots:
     dependencies:
       '@hapi/boom': 10.0.1
       '@hapi/bourne': 3.0.0
-      '@hapi/content': 6.0.2
+      '@hapi/content': 6.0.3
       '@hapi/file': 3.0.0
       '@hapi/hoek': 11.0.4
       '@hapi/pez': 6.1.0

From bbe907fdd5083b98c4f0e3c6463c2a3d7e80d026 Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 14:43:58 +0100
Subject: [PATCH 112/169] chore(ci): Ignore Dependabot bumps for deps that are
 also peer deps (#26015)

## What

Dependabot no longer opens bumps for dependencies that are also peer
dependencies with a single caret range.

- Ignore `@tanstack/vue-router`, `@tanstack/solid-router`, `solid-js`,
and `elysia`.

## Why

With the `increase` strategy, these bumps also raise the peer dependency
range. That drops support for older versions, which is a breaking change
(see #26010).

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 234cb38a94fc..1beb7f1fcf7e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -19,6 +19,12 @@ updates:
         update-types: ['version-update:semver-major']
       - dependency-name: '@react-router/*'
         update-types: ['version-update:semver-major']
+      # These are also peer dependencies. The `increase` strategy raises the peer range too,
+      # which drops support for older versions (a breaking change).
+      - dependency-name: '@tanstack/vue-router'
+      - dependency-name: '@tanstack/solid-router'
+      - dependency-name: 'solid-js'
+      - dependency-name: 'elysia'
     groups:
       opentelemetry:
         patterns:

From dd682cf66292487461071d728e9cf0bf3859c9cc Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 14:45:55 +0100
Subject: [PATCH 113/169] fix(wasm): Skip length prefix in 16-byte build IDs
 (#24857)

Correct `code_id` and `debug_id` for length-prefixed 16-byte WASM build
IDs. The length byte currently becomes part of the ID and displaces the
final byte in `debug_id`; recognizing the 17-byte payload beginning with
`0x10` preserves legacy raw IDs, including IDs that themselves start
with `0x10`. Other build-ID encodings retain their current behavior.

Fixes #9505 (SDK-side build-ID parsing).

Draft pending coordination with [Symbolic's WASM
parser](https://github.com/getsentry/symbolic/blob/master/symbolic-debuginfo/src/wasm/parser.rs#L180),
which also treats the length prefix as part of the ID. An SDK-only
rollout could mismatch identifiers extracted during debug-file upload.

The additional WASM test typecheck reports two errors also reproduced on
the base commit.

Co-authored-by: GPT-6 <codex@openai.com>
---
 packages/wasm/src/registry.ts       |  4 ++-
 packages/wasm/test/registry.test.ts | 55 +++++++++++++++++++++++++++++
 2 files changed, 58 insertions(+), 1 deletion(-)

diff --git a/packages/wasm/src/registry.ts b/packages/wasm/src/registry.ts
index 0b606451d7fa..91ad55c65421 100644
--- a/packages/wasm/src/registry.ts
+++ b/packages/wasm/src/registry.ts
@@ -27,7 +27,9 @@ export function getModuleInfo(module: WebAssembly.Module): ModuleInfo {
 
   const buildId0 = buildIds[0];
   if (buildId0) {
-    const firstBuildId = new Uint8Array(buildId0);
+    const payload = new Uint8Array(buildId0);
+    // Legacy build IDs omit the length prefix, so only strip it for a matching 16-byte payload.
+    const firstBuildId = payload.length === 17 && payload[0] === 0x10 ? payload.subarray(1) : payload;
     buildId = Array.from(firstBuildId).reduce((acc, x) => {
       return acc + x.toString(16).padStart(2, '0');
     }, '');
diff --git a/packages/wasm/test/registry.test.ts b/packages/wasm/test/registry.test.ts
index ae0b030148de..af8330304288 100644
--- a/packages/wasm/test/registry.test.ts
+++ b/packages/wasm/test/registry.test.ts
@@ -2,6 +2,8 @@ import { afterEach, describe, expect, it } from 'vitest';
 import { getModuleInfo, IMAGES, registerModule, toProtocolDebugImage } from '../src/registry';
 import {
   compileFixture,
+  customSection,
+  wasmModuleBytes,
   wasmWithBuildIdAndFunctionNamesOnly,
   wasmWithBuildIdAndModuleName,
   wasmWithBuildIdOnly,
@@ -9,6 +11,59 @@ import {
 
 const CODE_FILE = 'http://localhost:8080/web/assets/rust/demo_bg.wasm';
 
+describe('registerModule() build ID', () => {
+  afterEach(() => {
+    IMAGES.length = 0;
+  });
+
+  it('excludes the length prefix and keeps every byte of a 16-byte build ID', () => {
+    const buildId = [0x10, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff];
+    const module = compileFixture(wasmModuleBytes([customSection('build_id', [0x10, ...buildId])]));
+
+    const image = registerModule(module, CODE_FILE);
+
+    expect(image).toEqual({
+      type: 'wasm',
+      code_id: '10112233445566778899aabbccddeeff',
+      code_file: CODE_FILE,
+      debug_file: null,
+      debug_id: '10112233445566778899aabbccddeeff0',
+    });
+  });
+
+  it('preserves a legacy 16-byte build ID that starts with 0x10', () => {
+    const buildId = [0x10, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff];
+    const module = compileFixture(wasmWithBuildIdOnly(buildId));
+
+    const image = registerModule(module, CODE_FILE);
+
+    expect(image).toEqual({
+      type: 'wasm',
+      code_id: '10112233445566778899aabbccddeeff',
+      code_file: CODE_FILE,
+      debug_file: null,
+      debug_id: '10112233445566778899aabbccddeeff0',
+    });
+  });
+
+  it('preserves a 17-byte raw build ID without a matching length prefix', () => {
+    const buildId = [
+      0x20, 0x10, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xaa, 0xbb, 0xcc, 0xdd, 0xee, 0xff,
+    ];
+    const module = compileFixture(wasmWithBuildIdOnly(buildId));
+
+    const image = registerModule(module, CODE_FILE);
+
+    expect(image).toEqual({
+      type: 'wasm',
+      code_id: '2010112233445566778899aabbccddeeff',
+      code_file: CODE_FILE,
+      debug_file: null,
+      debug_id: '2010112233445566778899aabbccddee0',
+    });
+  });
+});
+
 describe('registerModule() name section', () => {
   afterEach(() => {
     IMAGES.length = 0;

From ca17f006af530732d608dfb9e30c8e1e4b4063d2 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 14:46:28 +0100
Subject: [PATCH 114/169] perf(ci): Increase tarball packing concurrency
 (#25979)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Tarball preparation delays every E2E app. Increasing packing
concurrency from 5 to 8 reduces packing from 48s to 40s and the tarball
job from 1:02 to 52s, based on one weekend measurement.

| Change | Packing | Tarball job | Required checks finish |
|---|---:|---:|---:|
| [Before any
improvements](https://github.com/getsentry/sentry-javascript/actions/runs/41178278955)
| 46s | 1:01 | 7:20 |
| [Next.js improvements — new
baseline](https://github.com/getsentry/sentry-javascript/actions/runs/41191077216)
| 48s | 1:02 | 5:29 |
| [8
workers](https://github.com/getsentry/sentry-javascript/actions/runs/41191569626)
| 40s | 52s | 5:12 |

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .github/workflows/build.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 13e6c36d43b0..5b20be22bbed 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1017,7 +1017,9 @@ jobs:
         uses: ./.github/actions/restore-cache
 
       - name: Build tarballs
-        run: pnpm run build:tarball
+        run: |
+          pnpm run clean:tarballs
+          pnpm run build:tarballs --parallel=8
 
       - name: Upload tarball artifacts
         uses: actions/upload-artifact@v7

From b44e0a3b15b76b9a329c95476417f12f60371f7f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:04:30 +0100
Subject: [PATCH 115/169] feat(deps): Bump @aws-sdk/client-lambda from 3.1068.0
 to 3.1161.0 (#26026)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda)
from 3.1068.0 to 3.1161.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/releases">@​aws-sdk/client-lambda's
releases</a>.</em></p>
<blockquote>
<h2>v3.1161.0</h2>
<h4>3.1161.0(2026-10-30)</h4>
<h5>Chores</h5>
<ul>
<li><strong>codegen:</strong> sync to new smithy handler changes (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8390">#8390</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/f393101c0e651bd0c9fda6ff24b7ede3b5e96869">f393101c</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>clients:</strong> update client endpoints as of 2026-10-30
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/757e025574cd936082a4edc188ef573abf7174a2">757e0255</a>)</li>
<li><strong>client-timestream-influxdb:</strong> Add
DeploymentConfiguration field to CreateDbCluster and UpdateDbCluster
APIs to support creation of heterogenous InfluxDB v3 Enterprise
clusters. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/493e1ac80b0c587b41a31858c756bc56841cfd81">493e1ac8</a>)</li>
<li><strong>client-customer-profiles:</strong> Adds support for template
ingestion controls in the GetProfileObjectTypeTemplate API response. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/214bd946412d8e117a695bc0e1503606eeca555a">214bd946</a>)</li>
<li><strong>client-lambda:</strong> Adds ConsumptionMode to
SelfManagedKafkaEventSourceConfig, letting Lambda event source mappings
consume self-managed Apache Kafka topics as a queue. Set ConsumptionMode
to Queue when creating an event source mapping. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/b7dde4047fd49176084ff85d83d3563a091747a9">b7dde404</a>)</li>
<li><strong>client-cloudwatch-logs:</strong> Adds support for
account-level retention policies in Amazon CloudWatch Logs. Customers
can now use PutAccountPolicy with the new RETENTION POLICY type to set
default log retention across all log groups in an account. Includes
dry-run mode to preview the impact of policy changes before applying
them. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/7b968f16b24546e32fc659215e76e3c8362c391b">7b968f16</a>)</li>
<li><strong>client-sagemaker:</strong> Create endpoints with
AcceleratorPartitionLayouts on ProductionVariant and deploy inference
components with AcceleratorPartitionType in ComputeResourceRequirements
to divide accelerators into hardware-isolated NVIDIA MIG partitions,
running multiple models per GPU. P4d, P5, G7, G7e. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/ec1b1811a27957b83a2ad63c8292cc5aa3371f44">ec1b1811</a>)</li>
<li><strong>client-omics:</strong> Adds the outputUriPrefixMode
parameter to StartRun and GetRun. You can now write run outputs directly
under outputUri, without the prefixes the service adds by default. When
you opt in, outputs overwrite existing objects at the same keys. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/f51a1ddd5ac4409a7429af67166f9c25b8063ed4">f51a1ddd</a>)</li>
<li><strong>client-docdb:</strong> Amazon DocumentDB now returns
ServerlessV2PlatformVersion in DBCluster API responses and adds the
DescribeServerlessV2PlatformVersions API to discover available platform
versions and their capabilities. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/d6c69cd9ef4d1a65201b72991850546343986566">d6c69cd9</a>)</li>
<li><strong>client-connect:</strong> Amazon Connect adds tag-based
access control for Contact Lens rules.
ListRealtimeContactAnalysisSegmentsV2 adds a ListFilter to return only
category segments whose rules match given tags. PreEvaluationFilter now
supports contact evaluation resources for OnContactEvaluationSubmit
rules. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/186beac8c6971543ac9045cefc48272fe7f7784f">186beac8</a>)</li>
<li><strong>client-amp:</strong> Managed Prometheus collectors now
support Amazon MSK consumer-group metrics for Amazon Managed Service for
Prometheus and CloudWatch. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/5f5dc778cf932f958cbdd944ddc7127325daf5e5">5f5dc778</a>)</li>
<li><strong>client-bedrock-agent-runtime:</strong> Adds the
CodeExecution step and codeExecution action to AgenticRetrieveStream
trace events, showing when the agent runs code and which documents it
reads. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/f8e4c279ff75188109291e44672fd19c3844098a">f8e4c279</a>)</li>
</ul>
<h5>Bug Fixes</h5>
<ul>
<li><strong>clock-skew:</strong> exclude server processing time from
skew correction (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8391">#8391</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/2dd708685af5c3b3dde3695062758b72b762a392">2dd70868</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view
<strong>updated-packages.md</strong> in
<strong>assets-3.1161.0.zip</strong></p>
<h2>v3.1160.0</h2>
<h4>3.1160.0(2026-10-29)</h4>
<h5>New Features</h5>
<ul>
<li><strong>client-cleanrooms:</strong> Adds support for the PySpark 2.0
analysis template format and for choosing the file format (CSV or
Parquet) of protected job results written to Amazon S3, including in a
membership's default job result configuration. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/8cb4c7eb64dea83d2a76f1d69c48e46f1d4958c8">8cb4c7eb</a>)</li>
<li><strong>client-bedrock-agentcore-control:</strong> Adds Session
Endpoint Feature on AgentCore Runtime (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/07ecbbc39fb302bb7140222f53e3fda110f5c20d">07ecbbc3</a>)</li>
<li><strong>client-wafv2:</strong> AWS WAF customers using Targeted Bot
Control, ATP, or ACFP managed rule groups can now enable automatic
Challenge JavaScript SDK injection. When enabled, Amazon CloudFront
injects the script tag into HTML responses on your behalf, removing the
need for manual integration. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/d4065359b0a088e9faff28eae5317092970478e5">d4065359</a>)</li>
<li><strong>client-bedrock-agentcore:</strong> Adds AgentCore Runtime
session endpoint support, including sessionEndpointUrl on the
InvokeAgentRuntime response (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/dac2f9772ef7f1e244b8aa08fb3a9fbf36631ff6">dac2f977</a>)</li>
<li><strong>client-lightsail:</strong> This release adds support for
instance health status checks and system status checks. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/5bf15ec1c9ebdbc390a6cbb4e24e5d70207c6f74">5bf15ec1</a>)</li>
<li><strong>client-imagebuilder:</strong> This release adds support for
on-demand AMI scanning with Amazon Inspector. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/a1a1c3eaf6506ae6e3063ebeb4172d7124b42d1d">a1a1c3ea</a>)</li>
<li><strong>checksums:</strong> add xxHash and SHA-512 checksum
algorithms (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8383">#8383</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/3aa504f3d94963a3f728e424089dc1197a5e8c84">3aa504f3</a>)</li>
<li><strong>codegen:</strong> add Smithy RPCv2 JSON protocol (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8386">#8386</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/ee519d0224f58085db4fe4b0c5458fd6ee514525">ee519d02</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view
<strong>updated-packages.md</strong> in
<strong>assets-3.1160.0.zip</strong></p>
<h2>v3.1159.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md">@​aws-sdk/client-lambda's
changelog</a>.</em></p>
<blockquote>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1160.0...v3.1161.0">3.1161.0</a>
(2026-10-30)</h1>
<h3>Features</h3>
<ul>
<li><strong>client-lambda:</strong> Adds ConsumptionMode to
SelfManagedKafkaEventSourceConfig, letting Lambda event source mappings
consume self-managed Apache Kafka topics as a queue. Set ConsumptionMode
to Queue when creating an event source mapping. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/b7dde4047fd49176084ff85d83d3563a091747a9">b7dde40</a>)</li>
</ul>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1159.0...v3.1160.0">3.1160.0</a>
(2026-10-29)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-lambda</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1158.0...v3.1159.0">3.1159.0</a>
(2026-10-28)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-lambda</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1157.0...v3.1158.0">3.1158.0</a>
(2026-10-27)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-lambda</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1156.0...v3.1157.0">3.1157.0</a>
(2026-10-26)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-lambda</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1155.0...v3.1156.0">3.1156.0</a>
(2026-10-22)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-lambda</code></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/258c14447eefd8e028db1a50ab49aac8312c0af9"><code>258c144</code></a>
Publish v3.1161.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/b7dde4047fd49176084ff85d83d3563a091747a9"><code>b7dde40</code></a>
feat(client-lambda): Adds ConsumptionMode to
SelfManagedKafkaEventSourceConfi...</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/f393101c0e651bd0c9fda6ff24b7ede3b5e96869"><code>f393101</code></a>
chore(codegen): sync to new smithy handler changes (<a
href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda/issues/8390">#8390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/40bf3f7265779672735e0023a6e37e931e82af2f"><code>40bf3f7</code></a>
Publish v3.1160.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/c1fb86e0afb772c9165ba0c437197014284f11ec"><code>c1fb86e</code></a>
Publish v3.1159.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/2d08e1c555eb9cfd37491d849b7aeba278a34267"><code>2d08e1c</code></a>
Publish v3.1158.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/e5988ecad1aded47fa75f5e18c9cc00ddcb608de"><code>e5988ec</code></a>
Publish v3.1157.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/f9d9119f02ea9ed0e0c2ab486b308cac15139651"><code>f9d9119</code></a>
chore(codegen): sync for service default socket timeout and RPC v2 JSON
(<a
href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda/issues/8378">#8378</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/163a566ffba89915cade6109031c5892ea3193c4"><code>163a566</code></a>
Publish v3.1156.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/cdd6c6092b8c3cf28813aeb9e38ae27856b486a3"><code>cdd6c60</code></a>
docs(client-lambda): AWS Lambda durable functions now supports payloads
up to...</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-js-v3/commits/v3.1161.0/clients/client-lambda">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@aws-sdk/client-lambda&package-manager=npm_and_yarn&previous-version=3.1068.0&new-version=3.1161.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .../node-integration-tests/package.json       |   2 +-
 pnpm-lock.yaml                                | 391 +++++++++---------
 2 files changed, 195 insertions(+), 198 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index e8bfe1572ff9..dad3f3bf34a9 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -30,7 +30,7 @@
     "@aws-sdk/client-bedrock-runtime": "^3.1046.0",
     "@aws-sdk/client-dynamodb": "^3.1046.0",
     "@aws-sdk/client-kinesis": "^3.1146.0",
-    "@aws-sdk/client-lambda": "^3.1046.0",
+    "@aws-sdk/client-lambda": "^3.1161.0",
     "@aws-sdk/client-s3": "^3.1046.0",
     "@aws-sdk/client-secrets-manager": "^3.1046.0",
     "@aws-sdk/client-sfn": "^3.1046.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d71341562057..376f501a30f3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -495,7 +495,7 @@ importers:
         version: 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
       '@langchain/openai':
         specifier: ^1.6.2
-        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.89)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)
+        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)
       '@langchain/typesafe':
         specifier: ^0.0.2
         version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))
@@ -613,8 +613,8 @@ importers:
         specifier: ^3.1146.0
         version: 3.1146.0
       '@aws-sdk/client-lambda':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-s3':
         specifier: ^3.1046.0
         version: 3.1068.0
@@ -635,10 +635,10 @@ importers:
         version: 1.4.0
       '@earendil-works/pi-ai':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-durable':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@flue/runtime':
         specifier: 2.0.3
         version: 2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)
@@ -2973,8 +2973,8 @@ packages:
     resolution: {integrity: sha512-/WpJG6dIJHKXxqoCNA79SFcbxZCeQ5AVOkVkdzwV1LJDWo/23HFtprUVNldYa50JmqVPkVGO58muAt8jSFN+wA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-lambda@3.1068.0':
-    resolution: {integrity: sha512-GitXCytcrvezkAQbyT+cYMrGPCM9zdh9sU8FrQr1vyniVijXk2X4ZBf2WZwDQcenNPMJyN5YdtUAbmUJCrfZDg==}
+  '@aws-sdk/client-lambda@3.1161.0':
+    resolution: {integrity: sha512-kEz+hGRtgH37TsAzRgW5Gct0XSmfmoCiSTbA68jWjTMHu5ijyu5D1Dl/MvQQBMnQqr1mdGQ3nq11EJHD5n+xuQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/client-s3@3.1068.0':
@@ -2997,44 +2997,44 @@ packages:
     resolution: {integrity: sha512-hatCfVf61RsSO5Qjrf7JKln4KiPDprXNJhpx9DNOmyeW1v+i7KNhbawk4d1wAnQ72YciOfhAhyRFec6UZqcnzQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/core@3.978.6':
-    resolution: {integrity: sha512-ykF/MiYoM15dgZwF/WLgjJXVbAK2wU6vjPigeEnOHwyUJ0rdlraO5uekecKNVPkvOnz+oju/5zljViQs1nI1FQ==}
+  '@aws-sdk/core@3.979.1':
+    resolution: {integrity: sha512-ayOlV1VhLNMiq8PW9ZkVobG4gkldnUoHjG69yy2b8j+VYFlhz/uAL7ZdYQAoQ+eShtGUdNDnnG5rxDg6yUJrOg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-provider-cognito-identity@3.972.3':
     resolution: {integrity: sha512-dW/DqTk90XW7hIngqntAVtJJyrkS51wcLhGz39lOMe0TlSmZl+5R/UGnAZqNbXmWuJHLzxe+MLgagxH41aTsAQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-env@3.972.77':
-    resolution: {integrity: sha512-CN6dQCDo32a8n2gvm2HBeqGV5BNI9noG96nTj5bGO2HWtt0Rucu/A8pcnJIqkzILOHSuilnCk0Do8/7h6SOXhQ==}
+  '@aws-sdk/credential-provider-env@3.972.80':
+    resolution: {integrity: sha512-uO5TiSvb6j1w9RTe5z28OaOmsrOxVQUPaC5+wZl50RfOXcrYD/KgnS8I9lfyGXc7sGbkCopK6VnhNIAoLqfewQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-http@3.972.79':
-    resolution: {integrity: sha512-Netsu0nnmvP2HiN1ZFQBeUu+JehQIuubqz+j2kHDgeSE4HDzniCpIZ7RzoWABq+LTcbCi9W03hywifUagoVIWQ==}
+  '@aws-sdk/credential-provider-http@3.972.82':
+    resolution: {integrity: sha512-vQzlDHlC24Yz42p+rT4NBoP/5VdetkBoujbOLq9h6QYWC8THuZSPYnXIR9OP3XcOrdMgPBBipOrdssfxnIiWUg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-ini@3.973.22':
-    resolution: {integrity: sha512-x7/5h58cqOoZR0RWUZC7v/cJOADQR42iSIQkvU+00HVHR4jh8ZpqEgRPGf2zei59iH5qP40lL3bkq49PuWl71g==}
+  '@aws-sdk/credential-provider-ini@3.973.25':
+    resolution: {integrity: sha512-b5xl71uCRdWsu7P1VeGpiGuCf6zfYETsSNOv8AmYVTrsgbvTJRXdmmOPVfxkvGGVNsiKkGctClQW3jAn0SZLug==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-login@3.972.84':
-    resolution: {integrity: sha512-G9Ty1uIV0laEvEp2KiMbEhsuBAjgaD3KYrwVjAM5VUxpcIuPBqQI5riA7/qzrnSgYiAKQbubbgkwcqCICKCIxg==}
+  '@aws-sdk/credential-provider-login@3.972.87':
+    resolution: {integrity: sha512-C4ZFmcwM+Zj14Z8huVUk54Gv4uzT1ZdzG9cY3Gdh8FePakq7Bss1OFsgZjAhWFOkFOGpBvFBeu0OWjWf8HNKRQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-node@3.972.89':
-    resolution: {integrity: sha512-O8xj7/sanrnXfFHu/LUujVBiiwn5mknYenU7xt1w6+yvhR1QoDZWXLFh1gLITaFVPtb1jWgEirC+kFNw+//tyw==}
+  '@aws-sdk/credential-provider-node@3.972.92':
+    resolution: {integrity: sha512-jC3zmOo7Qxlk+oBivvSsS1Ph7sFGm0QfuhqDGbqgRXi4cxUYMG+dWtBwS2XYYXgc8TIVXJiwgQ65sbNpbYupTA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-process@3.972.77':
-    resolution: {integrity: sha512-sWA8Jm+ASzkTxoqLizHWRbt8Gj3yZCmZ0hYdvg0uIxuLzWseYcfrDFzaSnkRWlEWSJV38rAWFimdrN0J4NR7Pg==}
+  '@aws-sdk/credential-provider-process@3.972.80':
+    resolution: {integrity: sha512-xqfixO5aclje7tbQJDias+iNND5wp/3QZixCdZcVQpgWPTZ0V5DfTW9A804A5Z7ezu7sH3WRO+vzUjtiJBA8yg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-sso@3.973.21':
-    resolution: {integrity: sha512-KV2LM8fbYUhDzGEBnPwb+ISNfNlhmnpLS+y6A6VsJpg1EI9aUJ0+dRTxh2GrGdneFH0T4TiuboHxz8i6+M38JA==}
+  '@aws-sdk/credential-provider-sso@3.973.24':
+    resolution: {integrity: sha512-nlg3BKG03Cgzvv/dMnhxvDJPhAhQSpaN0RUdwgU7ziwkasoev7iI8el8Xy4Rd5sqzgaDUbV269fOXck5SargqA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/credential-provider-web-identity@3.972.83':
-    resolution: {integrity: sha512-iekYilmo2Re51fC7gMkEfZ7jFDXwehSCmXjDESaYQsdgYhsLQFG7rTYr3GBvRIyj+Fkda2NxbZX7hAZDaFD0JQ==}
+  '@aws-sdk/credential-provider-web-identity@3.972.86':
+    resolution: {integrity: sha512-zKTyLJBEyfQBVlYqT6Jt+mYV4r8kGbWM7dn6v4Y4MRARizhYafjDXP/iMu76UMRhToSPNmIKX1XAb24gtpBFIA==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/credential-providers@3.983.0':
@@ -3097,16 +3097,16 @@ packages:
     resolution: {integrity: sha512-4bUzDkJlSPwfegO23ZSBrheuTI8UyAgNzptm1K6fZAIOIc1vnFl12TonecbssAfmM0/UdyTn5QDomwEfIdmJkQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/nested-clients@3.997.51':
-    resolution: {integrity: sha512-DJK4iGIHWU8Jh8ODMvqFYcX9yGBMXV4tSZAvqlHF5EDd8hbmF3eFO9KIWOnA7wcQjPzEkyMMW1/FgZ9RU8oimQ==}
+  '@aws-sdk/nested-clients@3.997.54':
+    resolution: {integrity: sha512-/OczlavsS7U5sOodRO10Ug4R/AKFVZiXTstKipWe68EfjPkmdDFNXNl9FCJyXWkg1DG6RBm3qAuVB8FNW9O8KQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/region-config-resolver@3.972.13':
     resolution: {integrity: sha512-CvJ2ZIjK/jVD/lbOpowBVElJyC1YxLTIJ13yM0AEo0t2v7swOzGjSA6lJGH+DwZXQhcjUjoYwc8bVYCX5MDr1A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/signature-v4-multi-region@3.996.49':
-    resolution: {integrity: sha512-nvuAZNRrRRVCiARRKsYlQ0VnXiEQiq7vXPH+UA+LSo+kN3Djl9eo/V2r0udkw85PnsNshmv2Em1clld5M3j67w==}
+  '@aws-sdk/signature-v4-multi-region@3.996.51':
+    resolution: {integrity: sha512-+aHvUugVBuMPXxgkPfWnTMyGdE/yWS8GHi5+qQ37HowS0YqzrbuaDLznj+Dtmtu5jgCdqz36gXmujOToUhNNWw==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/token-providers@3.1048.0':
@@ -3117,8 +3117,8 @@ packages:
     resolution: {integrity: sha512-Dv2TMWBshJ+tF6ahs2Sy5bh4Iabsd4GAQqVvE9XZmYmnoaVbpS2QKIKE/HRacc7bTtbjEEvP+laGzHvHlf1CiQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/token-providers@3.1157.0':
-    resolution: {integrity: sha512-AeAzcwWRP2uANO2TjFpKjRdvOCzgfIu6YQl9Ceibd6E0gnq5dfOzujFnq2aeqgbLg4wRtXbUZE4gekCCPrz/OQ==}
+  '@aws-sdk/token-providers@3.1161.0':
+    resolution: {integrity: sha512-ypbXSofNcSHwf/KA40bFCXJb0MLaAKrfT7sot4dFaA+2lsuXNah4zLRJIAU7Qmvs9PFJ6rnY0bZFEC+mE7attA==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/types@3.975.0':
@@ -3153,8 +3153,8 @@ packages:
       aws-crt:
         optional: true
 
-  '@aws-sdk/xml-builder@3.972.41':
-    resolution: {integrity: sha512-ctjVSyCMegrWfXlx6VqzSBFI6UqmQ5ZlnfMhdLIiWmhoH8UAQxSCP5N3OpG7X3k4LnS7ou74C4mt20+bfTW2aQ==}
+  '@aws-sdk/xml-builder@3.972.42':
+    resolution: {integrity: sha512-smX8/gNP8Kjq+CWTBMZQLQ912vOQjiWExzwzvMO+eujPB5RY8IbtF0AGdUUXHKN7KoDWK9dIcuW0WG269kiP6w==}
     engines: {node: '>=20.0.0'}
 
   '@aws/lambda-invoke-store@0.2.3':
@@ -8192,10 +8192,9 @@ packages:
     resolution: {integrity: sha512-TzDZcAnhTyAHbXVxWZo7/tEcrIeFq20IBk8So3OLOetWpR8EwY/yEqBMBFaJMeyEiREDq4NfEl+qO3OAUD+vbQ==}
     engines: {node: '>=18.0.0'}
 
-  '@smithy/core@3.37.0':
-    resolution: {integrity: sha512-97imTcCyiPd8k0e9+ts/Sp0W65Dn9Ti357J7M09Ov4tI8Q1JDJVFSoAJtjEVKqfHEr3Pdo2jfolqKCaaiszH0g==}
+  '@smithy/core@3.38.1':
+    resolution: {integrity: sha512-U/mB2XiwTLaf+NSgLSWwJfptsMT/H8aBi0aTAA/E5e2/TagFeGCqAyhKGG0w0A9IWTkm4qYEmLoD/HB6aYfnRA==}
     engines: {node: '>=18.0.0'}
-    deprecated: Deprecated due to a bug in custom logger data redaction. See https://github.com/aws/aws-sdk-js-v3/issues/8393.
 
   '@smithy/credential-provider-imds@4.5.2':
     resolution: {integrity: sha512-A9uSdn72ozbRUSit0eib0TW7nXuNPlaeM0zcGkJ+nE6tFcSDbnmtwoxbTCFBukVQcszDAyvsd7+rTduPTXpygg==}
@@ -8249,8 +8248,8 @@ packages:
     resolution: {integrity: sha512-ThMkboGeONWXAelq9FvGsuJC4rOi+qyC4/zhUF58xYpxUg5sQKx2VXZYJmtNjr4dSuBJ1HeJXETQILCz3wOHvw==}
     engines: {node: '>=18.0.0'}
 
-  '@smithy/node-http-handler@4.13.0':
-    resolution: {integrity: sha512-/GGcPoNJ2nzGytdAanpbx7mpp9Coa8LP+/Rpmbktr8YeLuIXs9B0SEz+X3AeonHdyzOIFJdKbN7jOZ+Tj+pMGw==}
+  '@smithy/node-http-handler@4.14.1':
+    resolution: {integrity: sha512-/T6E1jzCL0fErS9uq8JqES/5yYQQ4ppVmmYHwXw2nlov8KFzLb+3QqHR5iAun1BsuAB50IPxZliV8YMgghLwhA==}
     engines: {node: '>=18.0.0'}
 
   '@smithy/node-http-handler@4.7.3':
@@ -8277,8 +8276,8 @@ packages:
     resolution: {integrity: sha512-495/V2I15SHgedSJoDPD23JuSfKAp726ZI1V0wtjB07Wh7q/0tri/0e0DLefZCHgxZonrGKt/OCTpAtP1wE1kQ==}
     engines: {node: '>=18.0.0'}
 
-  '@smithy/signature-v4@5.7.4':
-    resolution: {integrity: sha512-tHy0K0VtqNd5Y7Y41h0a0Lhh0L1GzC08dTWg0F7vRJWFtTENg7IZikf3wQkanYIRdb7ngoIPMTmqgUi401fEeQ==}
+  '@smithy/signature-v4@5.7.5':
+    resolution: {integrity: sha512-WPjdr5oWOk1LArpI4pavu+fSo+/evi0Re1olxGvqwuZopd4gYR1UGCi+Soyn/IjmafqbWs+ZC+3AKxJS3ZpwUg==}
     engines: {node: '>=18.0.0'}
 
   '@smithy/smithy-client@4.12.13':
@@ -20161,9 +20160,9 @@ snapshots:
       '@aws-crypto/crc32': 5.2.0
       '@aws-crypto/crc32c': 5.2.0
       '@aws-crypto/util': 5.2.0
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20171,14 +20170,14 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/eventstream-handler-node': 3.972.39
       '@aws-sdk/middleware-eventstream': 3.972.34
       '@aws-sdk/middleware-websocket': 3.972.59
       '@aws-sdk/token-providers': 3.1048.0
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20186,14 +20185,14 @@ snapshots:
 
   '@aws-sdk/client-bedrock-runtime@3.1127.0':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/eventstream-handler-node': 3.972.39
       '@aws-sdk/middleware-eventstream': 3.972.34
       '@aws-sdk/middleware-websocket': 3.972.59
       '@aws-sdk/token-providers': 3.1127.0
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20203,8 +20202,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -20215,7 +20214,7 @@ snapshots:
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20248,8 +20247,8 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -20260,7 +20259,7 @@ snapshots:
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20293,12 +20292,12 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/dynamodb-codec': 3.973.20
       '@aws-sdk/middleware-endpoint-discovery': 3.972.18
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20306,25 +20305,23 @@ snapshots:
 
   '@aws-sdk/client-kinesis@3.1146.0':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-lambda@3.1068.0':
+  '@aws-sdk/client-lambda@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20333,13 +20330,13 @@ snapshots:
       '@aws-crypto/sha1-browser': 5.2.0
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/middleware-flexible-checksums': 3.974.30
       '@aws-sdk/middleware-sdk-s3': 3.972.51
-      '@aws-sdk/signature-v4-multi-region': 3.996.49
+      '@aws-sdk/signature-v4-multi-region': 3.996.51
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20349,10 +20346,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20362,10 +20359,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20375,10 +20372,10 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
@@ -20388,23 +20385,23 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-node': 3.972.89
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/middleware-sdk-sqs': 3.972.30
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/node-http-handler': 4.12.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/core@3.978.6':
+  '@aws-sdk/core@3.979.1':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@aws-sdk/xml-builder': 3.972.41
+      '@aws-sdk/xml-builder': 3.972.42
       '@aws/lambda-invoke-store': 0.3.0
-      '@smithy/core': 3.37.0
-      '@smithy/signature-v4': 5.7.4
+      '@smithy/core': 3.38.1
+      '@smithy/signature-v4': 5.7.5
       '@smithy/types': 4.19.0
       bowser: 2.11.0
       tslib: 2.8.1
@@ -20420,107 +20417,107 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/credential-provider-env@3.972.77':
+  '@aws-sdk/credential-provider-env@3.972.80':
     dependencies:
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-http@3.972.79':
+  '@aws-sdk/credential-provider-http@3.972.82':
     dependencies:
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.13.0
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-ini@3.973.22':
+  '@aws-sdk/credential-provider-ini@3.973.25':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/credential-provider-env': 3.972.77
-      '@aws-sdk/credential-provider-http': 3.972.79
-      '@aws-sdk/credential-provider-login': 3.972.84
-      '@aws-sdk/credential-provider-process': 3.972.77
-      '@aws-sdk/credential-provider-sso': 3.973.21
-      '@aws-sdk/credential-provider-web-identity': 3.972.83
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-env': 3.972.80
+      '@aws-sdk/credential-provider-http': 3.972.82
+      '@aws-sdk/credential-provider-login': 3.972.87
+      '@aws-sdk/credential-provider-process': 3.972.80
+      '@aws-sdk/credential-provider-sso': 3.973.24
+      '@aws-sdk/credential-provider-web-identity': 3.972.86
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-login@3.972.84':
+  '@aws-sdk/credential-provider-login@3.972.87':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-node@3.972.89':
+  '@aws-sdk/credential-provider-node@3.972.92':
     dependencies:
-      '@aws-sdk/credential-provider-env': 3.972.77
-      '@aws-sdk/credential-provider-http': 3.972.79
-      '@aws-sdk/credential-provider-ini': 3.973.22
-      '@aws-sdk/credential-provider-process': 3.972.77
-      '@aws-sdk/credential-provider-sso': 3.973.21
-      '@aws-sdk/credential-provider-web-identity': 3.972.83
+      '@aws-sdk/credential-provider-env': 3.972.80
+      '@aws-sdk/credential-provider-http': 3.972.82
+      '@aws-sdk/credential-provider-ini': 3.973.25
+      '@aws-sdk/credential-provider-process': 3.972.80
+      '@aws-sdk/credential-provider-sso': 3.973.24
+      '@aws-sdk/credential-provider-web-identity': 3.972.86
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-process@3.972.77':
+  '@aws-sdk/credential-provider-process@3.972.80':
     dependencies:
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-sso@3.973.21':
+  '@aws-sdk/credential-provider-sso@3.973.24':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
-      '@aws-sdk/token-providers': 3.1157.0
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
+      '@aws-sdk/token-providers': 3.1161.0
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/credential-provider-web-identity@3.972.83':
+  '@aws-sdk/credential-provider-web-identity@3.972.86':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/credential-providers@3.983.0':
     dependencies:
       '@aws-sdk/client-cognito-identity': 3.983.0
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-cognito-identity': 3.972.3
-      '@aws-sdk/credential-provider-env': 3.972.77
-      '@aws-sdk/credential-provider-http': 3.972.79
-      '@aws-sdk/credential-provider-ini': 3.973.22
-      '@aws-sdk/credential-provider-login': 3.972.84
-      '@aws-sdk/credential-provider-node': 3.972.89
-      '@aws-sdk/credential-provider-process': 3.972.77
-      '@aws-sdk/credential-provider-sso': 3.973.21
-      '@aws-sdk/credential-provider-web-identity': 3.972.83
+      '@aws-sdk/credential-provider-env': 3.972.80
+      '@aws-sdk/credential-provider-http': 3.972.82
+      '@aws-sdk/credential-provider-ini': 3.973.25
+      '@aws-sdk/credential-provider-login': 3.972.87
+      '@aws-sdk/credential-provider-node': 3.972.92
+      '@aws-sdk/credential-provider-process': 3.972.80
+      '@aws-sdk/credential-provider-sso': 3.973.24
+      '@aws-sdk/credential-provider-web-identity': 3.972.86
       '@aws-sdk/nested-clients': 3.983.0
       '@aws-sdk/types': 3.975.0
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/credential-provider-imds': 4.5.2
       '@smithy/node-config-provider': 4.3.14
       '@smithy/property-provider': 4.2.14
@@ -20532,8 +20529,8 @@ snapshots:
 
   '@aws-sdk/dynamodb-codec@3.973.20':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@smithy/core': 3.37.0
+      '@aws-sdk/core': 3.979.1
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20545,7 +20542,7 @@ snapshots:
   '@aws-sdk/eventstream-handler-node@3.972.39':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20553,14 +20550,14 @@ snapshots:
     dependencies:
       '@aws-sdk/endpoint-cache': 3.972.7
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/middleware-eventstream@3.972.34':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20595,26 +20592,26 @@ snapshots:
 
   '@aws-sdk/middleware-sdk-s3@3.972.51':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/signature-v4-multi-region': 3.996.49
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/signature-v4-multi-region': 3.996.51
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/middleware-sdk-sqs@3.972.30':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/middleware-user-agent@3.972.38':
     dependencies:
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
       '@aws-sdk/util-endpoints': 3.996.8
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
       '@smithy/util-retry': 4.3.8
@@ -20623,11 +20620,11 @@ snapshots:
 
   '@aws-sdk/middleware-websocket@3.972.59':
     dependencies:
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/signature-v4': 5.7.4
+      '@smithy/signature-v4': 5.7.5
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20635,7 +20632,7 @@ snapshots:
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
       '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.978.6
+      '@aws-sdk/core': 3.979.1
       '@aws-sdk/middleware-host-header': 3.972.10
       '@aws-sdk/middleware-logger': 3.972.10
       '@aws-sdk/middleware-recursion-detection': 3.972.11
@@ -20646,7 +20643,7 @@ snapshots:
       '@aws-sdk/util-user-agent-browser': 3.972.10
       '@aws-sdk/util-user-agent-node': 3.973.24
       '@smithy/config-resolver': 4.4.17
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
       '@smithy/hash-node': 4.2.14
       '@smithy/invalid-dependency': 4.2.14
@@ -20675,14 +20672,14 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/nested-clients@3.997.51':
+  '@aws-sdk/nested-clients@3.997.54':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/signature-v4-multi-region': 3.996.49
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/signature-v4-multi-region': 3.996.51
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.13.0
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20695,37 +20692,37 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/signature-v4-multi-region@3.996.49':
+  '@aws-sdk/signature-v4-multi-region@3.996.51':
     dependencies:
       '@aws-sdk/types': 3.975.0
-      '@smithy/signature-v4': 5.7.4
+      '@smithy/signature-v4': 5.7.5
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/token-providers@3.1048.0':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@aws-sdk/token-providers@3.1127.0':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/token-providers@3.1157.0':
+  '@aws-sdk/token-providers@3.1161.0':
     dependencies:
-      '@aws-sdk/core': 3.978.6
-      '@aws-sdk/nested-clients': 3.997.51
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/nested-clients': 3.997.54
       '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20783,7 +20780,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/xml-builder@3.972.41':
+  '@aws-sdk/xml-builder@3.972.42':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -22801,7 +22798,7 @@ snapshots:
       - ws
       - zod
 
-  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
       '@anthropic-ai/sdk': 0.129.0(zod@4.6.7)
       '@aws-sdk/client-bedrock-runtime': 3.1127.0
@@ -22810,7 +22807,7 @@ snapshots:
       '@smithy/node-http-handler': 4.12.1
       http-proxy-agent: 9.1.0(supports-color@10.0.0)
       https-proxy-agent: 9.1.0(supports-color@10.0.0)
-      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       partial-json: 0.1.7
       typebox: 1.3.27
     transitivePeerDependencies:
@@ -22830,10 +22827,10 @@ snapshots:
     dependencies:
       quickjs-wasi: 3.6.2
 
-  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
       '@earendil-works/chord': 1.4.0
-      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.89)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.4)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-codemode': 1.4.0
       '@earendil-works/pi-telemetry': 1.4.0
       '@silvia-odwyer/photon': 0.3.3
@@ -24272,11 +24269,11 @@ snapshots:
     transitivePeerDependencies:
       - ws
 
-  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.89)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)':
+  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)':
     dependencies:
       '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
       js-tiktoken: 1.0.21
-      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
@@ -26477,20 +26474,20 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@smithy/core@3.37.0':
+  '@smithy/core@3.38.1':
     dependencies:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/credential-provider-imds@4.5.2':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/fetch-http-handler@5.8.0':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -26526,7 +26523,7 @@ snapshots:
 
   '@smithy/middleware-endpoint@4.4.32':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/middleware-serde': 4.2.20
       '@smithy/node-config-provider': 4.3.14
       '@smithy/shared-ini-file-loader': 4.4.9
@@ -26538,7 +26535,7 @@ snapshots:
 
   '@smithy/middleware-retry@4.5.7':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/node-config-provider': 4.3.14
       '@smithy/protocol-http': 5.3.14
       '@smithy/service-error-classification': 4.3.1
@@ -26552,7 +26549,7 @@ snapshots:
 
   '@smithy/middleware-serde@4.2.20':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/protocol-http': 5.3.14
       '@smithy/types': 4.19.0
       tslib: 2.8.1
@@ -26574,19 +26571,19 @@ snapshots:
 
   '@smithy/node-http-handler@4.12.1':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@smithy/node-http-handler@4.13.0':
+  '@smithy/node-http-handler@4.14.1':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/node-http-handler@4.7.3':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -26619,15 +26616,15 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@smithy/signature-v4@5.7.4':
+  '@smithy/signature-v4@5.7.5':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
   '@smithy/smithy-client@4.12.13':
     dependencies:
-      '@smithy/core': 3.37.0
+      '@smithy/core': 3.38.1
       '@smithy/middleware-endpoint': 4.4.32
       '@smithy/middleware-stack': 4.2.14
       '@smithy/protocol-http': 5.3.14
@@ -35826,18 +35823,18 @@ snapshots:
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
-      '@aws-sdk/credential-provider-node': 3.972.89
-      '@smithy/signature-v4': 5.7.4
+      '@aws-sdk/credential-provider-node': 3.972.92
+      '@smithy/signature-v4': 5.7.5
       undici: 7.24.8
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.89)(@smithy/signature-v4@5.7.4)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
-      '@aws-sdk/credential-provider-node': 3.972.89
-      '@smithy/signature-v4': 5.7.4
+      '@aws-sdk/credential-provider-node': 3.972.92
+      '@smithy/signature-v4': 5.7.5
       undici: 7.24.8
       ws: 8.21.3
       zod: 4.6.7

From 692a8d3f68731aa02200149f712e7156f4d81b5e Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 15:09:39 +0100
Subject: [PATCH 116/169] chore(deps): Group AWS SDK Dependabot updates
 (#26030)

**Why:** Group `@aws-sdk/*` Dependabot updates to reduce PR noise.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1beb7f1fcf7e..01dde37b6d68 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -26,6 +26,9 @@ updates:
       - dependency-name: 'solid-js'
       - dependency-name: 'elysia'
     groups:
+      aws-sdk:
+        patterns:
+          - '@aws-sdk/*'
       opentelemetry:
         patterns:
           - '@opentelemetry/*'

From 82bcbfa595e97d91a15a79c66f4ddf53fd085812 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:13:27 +0100
Subject: [PATCH 117/169] chore(deps-dev): Bump
 @babel/plugin-transform-typescript from 7.29.7 to 8.0.6 (#26012)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@babel/plugin-transform-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript)
from 7.29.7 to 8.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/releases">@​babel/plugin-transform-typescript's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.6 (2026-09-18)</h2>
<p>Thanks <a
href="https://github.com/robhogan"><code>@​robhogan</code></a> for your
first PR!</p>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-helper-validator-identifier</code>,
<code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18237">#18237</a>
Update identifier definition to Unicode 18 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18240">#18240</a> Fix
parsing of arrow function params inside ternaries with Flow (<a
href="https://github.com/robhogan"><code>@​robhogan</code></a>)</li>
</ul>
</li>
<li><code>babel-helper-string-parser</code>, <code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18239">#18239</a>
fix: polish error message for invalid binary 0b19 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-code-frame</code>, <code>babel-core</code>,
<code>babel-generator</code>,
<code>babel-helper-create-class-features-plugin</code>,
<code>babel-helper-module-transforms</code>, <code>babel-parser</code>,
<code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-discard-binding</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-typescript</code>,
<code>babel-preset-env</code>, <code>babel-traverse</code>,
<code>babel-types</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18235">#18235</a>
Remove unused internal exports (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18245">#18245</a>
test: test with ts-eslint 8.70.0 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18231">#18231</a>
build: do not emit sourcemap in production build (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-build-external-helpers</code>, <code>babel-cli</code>,
<code>babel-code-frame</code>, <code>babel-core</code>,
<code>babel-generator</code>,
<code>babel-helper-compilation-targets</code>,
<code>babel-helper-create-class-features-plugin</code>,
<code>babel-helper-globals</code>,
<code>babel-helper-string-parser</code>,
<code>babel-helper-transform-fixture-test-runner</code>,
<code>babel-helper-validator-identifier</code>, <code>babel-node</code>,
<code>babel-parser</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-register</code>, <code>babel-runtime-corejs3</code>,
<code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18236">#18236</a>
Enforce usage of Yarn catalog for reused dependencies (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-helper-compilation-targets</code>,
<code>babel-helper-transform-fixture-test-runner</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18232">#18232</a>
Replace <code>lru-cache</code> with <code>flru</code> (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 4</h4>
<ul>
<li>Babel Bot (<a
href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
<li>Rob Hogan (<a
href="https://github.com/robhogan"><code>@​robhogan</code></a>)</li>
</ul>
<h2>v8.0.5 (2026-09-10)</h2>
<p>Thanks <a
href="https://github.com/drubetti"><code>@​drubetti</code></a>, <a
href="https://github.com/jibin7jose"><code>@​jibin7jose</code></a>, <a
href="https://github.com/joelle-a-dev"><code>@​joelle-a-dev</code></a>,
<a href="https://github.com/journey-ad"><code>@​journey-ad</code></a>,
<a
href="https://github.com/Kjubikstronk"><code>@​Kjubikstronk</code></a>,
<a
href="https://github.com/MatteoGabriele"><code>@​MatteoGabriele</code></a>,
and <a
href="https://github.com/zhangli091011"><code>@​zhangli091011</code></a>
for your first PRs!</p>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18218">#18218</a>
fix(parser): do not form html entity for invalid codepoint (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18215">#18215</a>
fix(parser): remove non-decimal prefix from bigint (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18063">#18063</a>
Disallow new import prop access (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-destructuring</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18214">#18214</a>
fix: only collapse the empty-object check when it targets the declared
binding (<a
href="https://github.com/Kjubikstronk"><code>@​Kjubikstronk</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-typescript</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18190">#18190</a>
fix(ts): improve variable handling in namespace (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/blob/main/CHANGELOG.md">@​babel/plugin-transform-typescript's
changelog</a>.</em></p>
<blockquote>
<h2>v8.0.6 (2026-09-18)</h2>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-helper-validator-identifier</code>,
<code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18237">#18237</a>
Update identifier definition to Unicode 18 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18240">#18240</a> Fix
parsing of arrow function params inside ternaries with Flow (<a
href="https://github.com/robhogan"><code>@​robhogan</code></a>)</li>
</ul>
</li>
<li><code>babel-helper-string-parser</code>, <code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18239">#18239</a>
fix: polish error message for invalid binary 0b19 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-code-frame</code>, <code>babel-core</code>,
<code>babel-generator</code>,
<code>babel-helper-create-class-features-plugin</code>,
<code>babel-helper-module-transforms</code>, <code>babel-parser</code>,
<code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-discard-binding</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-typescript</code>,
<code>babel-preset-env</code>, <code>babel-traverse</code>,
<code>babel-types</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18235">#18235</a>
Remove unused internal exports (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18245">#18245</a>
test: test with ts-eslint 8.70.0 (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18231">#18231</a>
build: do not emit sourcemap in production build (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-build-external-helpers</code>, <code>babel-cli</code>,
<code>babel-code-frame</code>, <code>babel-core</code>,
<code>babel-generator</code>,
<code>babel-helper-compilation-targets</code>,
<code>babel-helper-create-class-features-plugin</code>,
<code>babel-helper-globals</code>,
<code>babel-helper-string-parser</code>,
<code>babel-helper-transform-fixture-test-runner</code>,
<code>babel-helper-validator-identifier</code>, <code>babel-node</code>,
<code>babel-parser</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-register</code>, <code>babel-runtime-corejs3</code>,
<code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18236">#18236</a>
Enforce usage of Yarn catalog for reused dependencies (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-helper-compilation-targets</code>,
<code>babel-helper-transform-fixture-test-runner</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18232">#18232</a>
Replace <code>lru-cache</code> with <code>flru</code> (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h2>v8.0.5 (2026-09-10)</h2>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18218">#18218</a>
fix(parser): do not form html entity for invalid codepoint (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18215">#18215</a>
fix(parser): remove non-decimal prefix from bigint (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18063">#18063</a>
Disallow new import prop access (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-destructuring</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18214">#18214</a>
fix: only collapse the empty-object check when it targets the declared
binding (<a
href="https://github.com/Kjubikstronk"><code>@​Kjubikstronk</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-typescript</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18190">#18190</a>
fix(ts): improve variable handling in namespace (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18207">#18207</a>
[ts] Allow merging <code>enum</code> into a <code>namespace</code> (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-node</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18217">#18217</a> Fix
import path for babel-node.js (<a
href="https://github.com/drubetti"><code>@​drubetti</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18213">#18213</a>
fix(bugfix): bound check before array access (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18183">#18183</a>
fix(remove): unwrap single sequence expression (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18153">#18153</a>
Handle null in <code>getAll{Prev,Next}Siblings</code> (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-block-scoping</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18194">#18194</a>
fix: improve for loop closure environment check (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18193">#18193</a>
fix: assign closure body after handling return (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/babel/babel/commit/9e408d6bf09af067165d303165f9537b4cac1268"><code>9e408d6</code></a>
v8.0.6</li>
<li><a
href="https://github.com/babel/babel/commit/753bedf7ca2893272c5fe58dbf82922d140aa458"><code>753bedf</code></a>
Remove unused internal exports (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18235">#18235</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/0d8ed705171f38f95058db247eb358c9242b35b7"><code>0d8ed70</code></a>
v8.0.5</li>
<li><a
href="https://github.com/babel/babel/commit/b7eef30765eaa5bdca36ba4f851c871316171af9"><code>b7eef30</code></a>
fix(ts): improve variable handling in namespace (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18190">#18190</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/97caaba50bc8e56a6a01d781989d577b57532123"><code>97caaba</code></a>
[ts] Allow merging <code>enum</code> into a <code>namespace</code> (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18207">#18207</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/1da3cfa1a25503c7ecba7304f8738933e6d16dca"><code>1da3cfa</code></a>
Enable <code>no-useless-computed-key</code> rule (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18179">#18179</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/d8b12623a364be085b5cdddfdc8b13af3a6fef3f"><code>d8b1262</code></a>
fix: Define child node types correctly (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18159">#18159</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/1cd94d4ec221cfb3e31fbbe013007b8d65471c51"><code>1cd94d4</code></a>
fix(parser): disallow <code>declare module M {}</code> (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18120">#18120</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/6b66b17a545089bb60004040f13c77ac6305f7ba"><code>6b66b17</code></a>
fix(parser): forbid let x! and let x! = (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-typescript/issues/18100">#18100</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/b4be199c560f4940a3326db98e23eb547bcb120f"><code>b4be199</code></a>
v8.0.1</li>
<li>Additional commits viewable in <a
href="https://github.com/babel/babel/commits/v8.0.6/packages/babel-plugin-transform-typescript">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@babel/plugin-transform-typescript&package-manager=npm_and_yarn&previous-version=7.29.7&new-version=8.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrei Borza <andrei.borza@sentry.io>
---
 packages/ember/package.json |    4 +-
 pnpm-lock.yaml              | 1006 ++++++++++++++++++++++++++++++++++-
 2 files changed, 982 insertions(+), 28 deletions(-)

diff --git a/packages/ember/package.json b/packages/ember/package.json
index c74a9044440e..a091ce7ca418 100644
--- a/packages/ember/package.json
+++ b/packages/ember/package.json
@@ -50,9 +50,9 @@
     "decorator-transforms": "^2.3.2"
   },
   "devDependencies": {
-    "@babel/core": "^7.29.0",
+    "@babel/core": "^8.1.0",
     "@babel/eslint-parser": "^7.28.6",
-    "@babel/plugin-transform-typescript": "^7.28.6",
+    "@babel/plugin-transform-typescript": "^8.0.6",
     "@ember/app-tsconfig": "^2.0.0",
     "@ember/library-tsconfig": "^2.0.0",
     "@embroider/addon-dev": "^8.3.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 376f501a30f3..9cc7530070ec 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1341,7 +1341,7 @@ importers:
         version: 1.10.3(supports-color@10.0.0)
       '@embroider/macros':
         specifier: ^1.20.2
-        version: 1.20.6(@babel/core@7.29.7(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)
+        version: 1.20.6(@babel/core@8.1.0)(@glint/template@1.8.0)(supports-color@10.0.0)
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../browser
@@ -1353,17 +1353,17 @@ importers:
         version: link:../core
       decorator-transforms:
         specifier: ^2.3.2
-        version: 2.4.0(@babel/core@7.29.7(supports-color@10.0.0))
+        version: 2.4.0(@babel/core@8.1.0)
     devDependencies:
       '@babel/core':
-        specifier: ^7.29.0
-        version: 7.29.7(supports-color@10.0.0)
+        specifier: ^8.1.0
+        version: 8.1.0
       '@babel/eslint-parser':
         specifier: ^7.28.6
-        version: 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(eslint@8.57.0(supports-color@10.0.0))
+        version: 7.29.7(@babel/core@8.1.0)(eslint@8.57.0(supports-color@10.0.0))
       '@babel/plugin-transform-typescript':
-        specifier: ^7.28.6
-        version: 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)
+        specifier: ^8.0.6
+        version: 8.0.6(@babel/core@8.1.0)
       '@ember/app-tsconfig':
         specifier: ^2.0.0
         version: 2.0.0
@@ -1387,7 +1387,7 @@ importers:
         version: 1.10.0(ember-source@6.12.0(rsvp@4.8.5)(supports-color@10.0.0))(supports-color@10.0.0)(typescript@5.8.3)
       '@rollup/plugin-babel':
         specifier: ^7.0.0
-        version: 7.1.0(@babel/core@7.29.7(supports-color@10.0.0))(@types/babel__core@7.20.5)(rollup@4.62.3)(supports-color@10.0.0)
+        version: 7.1.0(@babel/core@8.1.0)(@types/babel__core@7.20.5)(rollup@4.62.3)(supports-color@10.0.0)
       ember-source:
         specifier: ^6.12.0
         version: 6.12.0(rsvp@4.8.5)(supports-color@10.0.0)
@@ -3249,10 +3249,18 @@ packages:
     resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/code-frame@8.0.6':
+    resolution: {integrity: sha512-uMHhvmDmwFiLuiozaoRYTZHqMFuu3fem/X9JY78lohAuLoh8LSGGC8JqUzo2cVuBsBxkjMZNk56CE7ock8Xxkw==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/compat-data@7.29.7':
     resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/compat-data@8.0.5':
+    resolution: {integrity: sha512-YLsYoQMvL8l8WrGpN3Zj7O1wK5LEBN+cQtux7BcuHyxIXve724XG+zuJ1n3U1cUweRtTzQOA4IHbuQw3N34SZw==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/core@7.18.10':
     resolution: {integrity: sha512-JQM6k6ENcBFKVtWvLavlvi/mPcpYZ3+R+2EySDEMSMbp7Mn4FexlbbJVrx2R7Ijhr01T8gyqrOaABWIOgxeUyw==}
     engines: {node: '>=6.9.0'}
@@ -3261,6 +3269,10 @@ packages:
     resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/core@8.1.0':
+    resolution: {integrity: sha512-3jqm7xh3kJCmIeOK8sk6/EvOWdSzvOqvjt0tJEDOHHmzWjcQSvIh2/tq1I9RA741tl0QZdMzPJWCulWE+Dy5ww==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/eslint-parser@7.29.7':
     resolution: {integrity: sha512-zxt+UJTOMKvUt3yOg+D58MLuz334pHp93qifMFcjIIO+9hN6t+ufw2gi7vDPMpxvfnHRR+3VVXvIjineCcgyXw==}
     engines: {node: ^10.13.0 || ^12.13.0 || >=14.0.0}
@@ -3276,6 +3288,10 @@ packages:
     resolution: {integrity: sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/generator@8.1.0':
+    resolution: {integrity: sha512-7fiBJ61wDV3AHbg7n/EfLBv3RU+lsdRP8QNJnydkKWA7e48FnnvKQWbVHsJQCBE7JHTj4xlzZL9fvQYsBUip2A==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-annotate-as-pure@7.18.6':
     resolution: {integrity: sha512-duORpUiYrEpzKIop6iNbjnwKLAKnJ47csTyRACyEmWj0QdUrm5aqNJGHSSEQSUAvNW0ojX0dOmK9dZduvkfeXA==}
     engines: {node: '>=6.9.0'}
@@ -3284,16 +3300,30 @@ packages:
     resolution: {integrity: sha512-OoK6239jHPuSQOoS0kfTVKn0b/rVTk0seKq4Gd2UMLtmOVLjDC0ki3e+c90Trqv2gMfvJFqkiljrr568+qddiw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-annotate-as-pure@8.0.0':
+    resolution: {integrity: sha512-NSpMkMsvvZqzThJ0p1B02cbtA2ObEyfBvq950bmNkyxsxvcxwhvvCB036rKhlEnuBBo30bOrk13u3FzlKSoRrw==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-compilation-targets@7.29.7':
     resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-compilation-targets@8.0.7':
+    resolution: {integrity: sha512-ilAZCdOOlOVA7dQbaFNw2f/59p6GW33NxTopc3DvEE3efp3ZXTrGX/yZScaKw8/vd9bq31Ag0EcXiLw32bAgJg==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-create-class-features-plugin@7.29.7':
     resolution: {integrity: sha512-IY3ZD9Tmooqr3TUhc3DUWxiuo8xx1DWLhd5M7hQ+ZWJamqM2BbalrBJb2MisSLoYorOj75U03qULCxQTY9r3hg==}
     engines: {node: '>=6.9.0'}
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  '@babel/helper-create-class-features-plugin@8.0.10':
+    resolution: {integrity: sha512-a97s55BatmvDeeQ9rngs/IPi1aeQ3vVUbXr0DsNGhzF/vB2w49N+FqD+D0/YEGLziU7zALhrKFlk6FGlvbM38w==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    peerDependencies:
+      '@babel/core': ^8.0.0
+
   '@babel/helper-create-regexp-features-plugin@7.29.7':
     resolution: {integrity: sha512-907Uymvqgg1dwUA+7IGwFAOSYzQOuzPXKNJ1yxzwPffzkYFg2q2eHi1fIOs6sXkG9NbIUMunnUlkYsfRFNvomg==}
     engines: {node: '>=6.9.0'}
@@ -3318,10 +3348,18 @@ packages:
     resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-globals@8.0.6':
+    resolution: {integrity: sha512-OdnA/N52LhzFpeUuVz5YGuSWjc7TPHiFmVYZbPlSgExocO2GwbxVpSni9MVs5wwW+wZ4kPuwBEBN9pIPDYz1mA==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-member-expression-to-functions@7.29.7':
     resolution: {integrity: sha512-j+7JYmk1JYDtACIGj0QJqqWZjoUpMoEikQGADMaHgCMCSDqd2+P32rfcibUNrGOMWrlzK1WJBdxrB3JJQZwWtg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-member-expression-to-functions@8.0.5':
+    resolution: {integrity: sha512-GLe05QD98BkNFTkjaqeqF9QSRoHLKrrB4tpoplyQuuPrQJ72rtmkM4wvqJLX/sjZPqkbK5MUYSsuUTqdJoOVjA==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-module-imports@7.18.6':
     resolution: {integrity: sha512-0NFvs3VkuSYbFi1x2Vd6tKrywq+z/cLeYC/RJNFrIX/30Bf5aiGYbtvGXolEktzJH8o5E5KJ3tT+nkxuuZFVlA==}
     engines: {node: '>=6.9.0'}
@@ -3340,10 +3378,20 @@ packages:
     resolution: {integrity: sha512-+kmGVjcT9RGYzoDwdwEqEvGgKe3BYq+O1iGzjFubaNgZHwYHP6lsF2Yghf4kEuv9BV7tYDZ913aBW9am6YKong==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-optimise-call-expression@8.0.0':
+    resolution: {integrity: sha512-3W6satvtPuCUkUx63S2jMoW9EQNYkADgs1HTfufmL7gCmAulHMKupA/12WNz4A0GMMFn/YnWWwqOT9IZrJHQjg==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-plugin-utils@7.29.7':
     resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-plugin-utils@8.0.1':
+    resolution: {integrity: sha512-3PKFgjTyPlhFhorfP+SjKQxLViIL++zWjFOO4hGriYU+Bsm983DxEM1JmDRJVWXV0O9npu+xXRqz7Pbd3mh70g==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    peerDependencies:
+      '@babel/core': ^8.0.0
+
   '@babel/helper-remap-async-to-generator@7.29.7':
     resolution: {integrity: sha512-16AMiW26DbXWBbr3B8wNozKM0ydMLB892vaOaJW/fPJdnT8vJk5sdkQcU/isqUxyCE0cEoa8wZOcbgDuC4b6Og==}
     engines: {node: '>=6.9.0'}
@@ -3356,22 +3404,44 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0
 
+  '@babel/helper-replace-supers@8.0.1':
+    resolution: {integrity: sha512-B1SZADIcy3tmH8CmWvj4SHi/oAPom4UL3uknTc2QRNsPVLFk/sPnZvQL/8kj7Y5omvjMqie0vklvs6XM4OLW5Q==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    peerDependencies:
+      '@babel/core': ^8.0.0
+
   '@babel/helper-skip-transparent-expression-wrappers@7.29.7':
     resolution: {integrity: sha512-brcMGQaVzIeUb+6/bs1Av0f8YuNNjKY2JyvfRCsFuFsdKccEQ5Ges2y74D74NZ1Rz8lKJ9ksJkfqwQFJ/iNEyQ==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-skip-transparent-expression-wrappers@8.0.0':
+    resolution: {integrity: sha512-xmCA9kP3IhySsqhzwIdWGlDN/1A4cCKNBO/uwZx/3YzmDoMePwno2Q5/Bq0q+tYaKbeF940YiKV/kaW8Mzvpjw==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-string-parser@7.29.7':
     resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-string-parser@8.0.8':
+    resolution: {integrity: sha512-fVM+gSuKbdv9cpmyRNh5EvsDHUZCdxQH3FdnFKSkNYHpbsn95bbrxm+ES3MVeQjcqwi2O5ur/DjLfmTQaO60ng==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-validator-identifier@7.29.7':
     resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-validator-identifier@8.0.6':
+    resolution: {integrity: sha512-HYx0YmuchRxRSpnjvcNffnPS8DCauKNmnumIuHG3jnQAVewRA7kfJGwF13ayEpSZs7s4R/oBH4eppuXcAQd5JQ==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-validator-option@7.29.7':
     resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-validator-option@8.0.0':
+    resolution: {integrity: sha512-U4Dybxh4WESWHt5XhBeExi4DrY0/DNK1aHpQbsrQXCUbFHuMweT0TpLEWKvaraV2Y6fS+ZXunsZ8zIuZIgvF2Q==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/helper-wrap-function@7.29.7':
     resolution: {integrity: sha512-iES0Skag9ERIF68aXadpO6dbXa03mNWK3sEqJaMnLNs/eC3l0lkImdfoy6Y09/SfkpawdAB4RjQ7PVA7TcVGdw==}
     engines: {node: '>=6.9.0'}
@@ -3380,11 +3450,20 @@ packages:
     resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helpers@8.1.0':
+    resolution: {integrity: sha512-949bjw10dhaRdtQeCpfVShFA4jIcto97BkqmWnRjpzyQuHVZ7EDriaoCn/4D8h1NqSKlmI20xPU0vHf3jQbQRg==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/parser@7.29.9':
     resolution: {integrity: sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  '@babel/parser@8.1.0':
+    resolution: {integrity: sha512-fpqZYAC+Tthr19JbEKxXhCGutvfm/+roMe+ULrgUKI+GVyzkQiTMTSheORcWIAzW8T3Oo3W5UavWSvAWmsp7fA==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    hasBin: true
+
   '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.29.7':
     resolution: {integrity: sha512-j8SrR0zLZrRsC09DlszEx8FpMiwukKffYXMK0d5LmOglO7vGG6sz/BR/20yHqWH+Lnn31JTt2PE3hIWNgM2J6w==}
     engines: {node: '>=6.9.0'}
@@ -3641,6 +3720,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-syntax-typescript@8.0.3':
+    resolution: {integrity: sha512-jmTPwps7oSQSZaV1SxkQ3C12UWyufGysGc5OzDpZzvPAIX4mO7dJT3hoqkWVrSImvkcMiknir1iLN1SNV/CZzg==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    peerDependencies:
+      '@babel/core': ^8.0.0
+
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6':
     resolution: {integrity: sha512-727YkEAPwSIQTv5im8QHz3upqp92JTWhidIC81Tdx4VJYIte/VndKf1qKrfnnhPLiPghStWfvC/iFaMCQu7Nqg==}
     engines: {node: '>=6.9.0'}
@@ -3977,6 +4062,12 @@ packages:
     peerDependencies:
       '@babel/core': ^7.0.0-0
 
+  '@babel/plugin-transform-typescript@8.0.6':
+    resolution: {integrity: sha512-WF3yRlQtClzScvQbWct00ix63+w3DPiyU0WmCBU4YqK539n3VvJFElElpevoD8wfu6953CbiNoUZBi2B7/5jXw==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+    peerDependencies:
+      '@babel/core': ^8.0.0
+
   '@babel/plugin-transform-unicode-escapes@7.29.7':
     resolution: {integrity: sha512-jCfXxSjf94lf4E0hKE0AByxF6F3/pVFqRdUUNkDJhsY0m1ZKjnN6ZYyMeHNpzflxb/0q5b7t3p+BE+SLF1WOtA==}
     engines: {node: '>=6.9.0'}
@@ -4058,14 +4149,26 @@ packages:
     resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/template@8.0.0':
+    resolution: {integrity: sha512-eAD0QW/AlbamBbw0FeGiwasbCVPq5ncW0HNVyLP3B9czqLyh4gvw+5JTSNt6le9+ziAU7mqDZsKTHf3jTb4chQ==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/traverse@7.29.8':
     resolution: {integrity: sha512-I5z7H3bf/41ktsNVLtpN0wAa336HkqIHQ5BuPLEhTkt1jVSyZpeNKIzTgEWmlxjdg81R0IgUCcaE+Ok3NvrfZg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/traverse@8.1.0':
+    resolution: {integrity: sha512-oQ0QI6MR4cm6bOR/Ua5HLPxvO7vborT7Le5HNt9GmZUKpNsaPl2yj4gsQ440lXaZjc4vmUbSeVgEcK4cHuCL2A==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@babel/types@7.29.8':
     resolution: {integrity: sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/types@8.1.0':
+    resolution: {integrity: sha512-8V8aSTDx012YPmDQF30vrokyxVFdRAU2YBS2VzrnfLAGkP8floVnjckwgFcD0Jrvf6GWMSRdCrYVsk3tyMwZRg==}
+    engines: {node: ^22.18.0 || >=24.11.0}
+
   '@bcoe/v8-coverage@1.0.2':
     resolution: {integrity: sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==}
     engines: {node: '>=18'}
@@ -5828,6 +5931,9 @@ packages:
   '@jridgewell/gen-mapping@0.3.13':
     resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
 
+  '@jridgewell/gen-mapping@0.4.0-beta.0':
+    resolution: {integrity: sha512-JdGNkbE4GlNPYQhM0L95fBQr7ctLZJ276QXQLTad4t1oSdnnCI3fDq9DW3BqYAWv8Wc3+HS+4Gsii1oPMCfz1w==}
+
   '@jridgewell/remapping@2.3.5':
     resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
 
@@ -5842,8 +5948,8 @@ packages:
   '@jridgewell/source-map@0.3.5':
     resolution: {integrity: sha512-UTYAUj/wviwdsMfzoSJspJxbkH5o1snzwX0//0ENX1u/55kkZZkcTZP6u9bwKGkv+dkk9at4m1Cpt0uY80kcpQ==}
 
-  '@jridgewell/sourcemap-codec@1.5.5':
-    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
+  '@jridgewell/sourcemap-codec@1.6.0':
+    resolution: {integrity: sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw==}
 
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
@@ -8758,6 +8864,9 @@ packages:
   '@types/express@5.0.6':
     resolution: {integrity: sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==}
 
+  '@types/gensync@1.0.5':
+    resolution: {integrity: sha512-MbsRCT7mTikHwKZ0X+LVUTLRrZZRLipTuXEO9qOYO+zmjMVk81axyClMROf6uoPD9MRVu46bx8zoR0Ad9q3NAg==}
+
   '@types/hast@3.0.4':
     resolution: {integrity: sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==}
 
@@ -8788,6 +8897,9 @@ packages:
   '@types/jsdom@21.1.6':
     resolution: {integrity: sha512-/7kkMsC+/kMs7gAYmmBR9P0vGTnOoLhQhyhQJSlXGI5bzTHp6xdo0TtKWQAsz6pmSAeVqKSbqeyP6hytqr9FDw==}
 
+  '@types/jsesc@2.5.1':
+    resolution: {integrity: sha512-9VN+6yxLOPLOav+7PwjZbxiID2bVaeq0ED4qSQmdQTdjnXJSaCVKTR58t15oqH1H5t8Ng2ZX1SabJVoN9Q34bw==}
+
   '@types/json-schema@7.0.15':
     resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
 
@@ -11460,6 +11572,10 @@ packages:
     resolution: {integrity: sha512-i6UzDscO/XfAcNYD75CfICkmfLedpyPDdozrLMmQc5ORaQcdMoc21OnlEylMIqI7U8eniKrPMxxtj8k0vhmJhA==}
     engines: {node: '>=14'}
 
+  empathic@2.1.0:
+    resolution: {integrity: sha512-AnfC1ATldl49/cvZdLPDjBfrRNwbDO05aibiOtzQu3qtlbJtomNLhF30HEtn/7iBz50dlMECqATo3fG0LrdEgw==}
+    engines: {node: '>=14'}
+
   enabled@2.0.0:
     resolution: {integrity: sha512-AKrN98kuwOzMIdAizXGI86UFBoo26CL21UM763y1h/GMSJ4/OHU9k2YlsmBpyScFo/wbLzWQJBMCW4+IO3/+OQ==}
 
@@ -12336,6 +12452,10 @@ packages:
     resolution: {integrity: sha512-9UbaD6XdAL97+k/n+N7JwX46K/M6Zc6KcFYskrYL8wbBV/Uyk0CTAMY0VT+qiK5PM7AIc9aTWYtq65U7T+aCNQ==}
     engines: {node: '>=8'}
 
+  flru@1.0.2:
+    resolution: {integrity: sha512-kWyh8ADvHBFz6ua5xYOPnUroZTT/bwWfrCeL0Wj1dzG4/YOmOcfJ99W8dOVyyynJN35rZ9aCOtHChqQovV7yog==}
+    engines: {node: '>=6'}
+
   fn.name@1.1.0:
     resolution: {integrity: sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==}
 
@@ -15162,6 +15282,10 @@ packages:
     resolution: {integrity: sha512-4a+OsYv9UktOJKE+l1A4OufDgdRF9PifWj+tJnHURo/P+WOxpG4GzUFL9qCalmWauao6ogiG+QvnCovwPoyAWA==}
     engines: {node: '>=12.20.0'}
 
+  obug@3.0.0:
+    resolution: {integrity: sha512-5vvB5+W7ePv+p3uqxi+RcW1XAzLW0/hxt3/4X4Lc4qHudzOhmBiBwOY6DRob4WnanAEGvNcLjF+KNOufrUoEQw==}
+    engines: {node: '>=12.20.0'}
+
   ocache@0.1.4:
     resolution: {integrity: sha512-e7geNdWjxSnvsSgvLuPvgKgu7ubM10ZmTPOgpr7mz2BXYtvjMKTiLhjFi/gWU8chkuP6hNkZBsa9LzOusyaqkQ==}
 
@@ -20967,8 +21091,15 @@ snapshots:
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
+  '@babel/code-frame@8.0.6':
+    dependencies:
+      '@babel/helper-validator-identifier': 8.0.6
+      js-tokens: 10.0.0
+
   '@babel/compat-data@7.29.7': {}
 
+  '@babel/compat-data@8.0.5': {}
+
   '@babel/core@7.18.10(supports-color@10.0.0)':
     dependencies:
       '@ampproject/remapping': 2.2.0
@@ -21029,9 +21160,28 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@babel/eslint-parser@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(eslint@8.57.0(supports-color@10.0.0))':
+  '@babel/core@8.1.0':
     dependencies:
-      '@babel/core': 7.29.7(supports-color@10.0.0)
+      '@babel/code-frame': 8.0.6
+      '@babel/generator': 8.1.0
+      '@babel/helper-compilation-targets': 8.0.7
+      '@babel/helpers': 8.1.0
+      '@babel/parser': 8.1.0
+      '@babel/template': 8.0.0
+      '@babel/traverse': 8.1.0
+      '@babel/types': 8.1.0
+      '@types/gensync': 1.0.5
+      convert-source-map: 2.0.0
+      empathic: 2.1.0
+      gensync: 1.0.0-beta.2
+      import-meta-resolve: 4.2.0
+      json5: 2.2.3
+      obug: 3.0.0
+      verkit: 0.5.0
+
+  '@babel/eslint-parser@7.29.7(@babel/core@8.1.0)(eslint@8.57.0(supports-color@10.0.0))':
+    dependencies:
+      '@babel/core': 8.1.0
       '@nicolo-ribaudo/eslint-scope-5-internals': 5.1.1-v1
       eslint: 8.57.0(supports-color@10.0.0)
       eslint-visitor-keys: 2.1.0
@@ -21051,6 +21201,15 @@ snapshots:
       '@jridgewell/trace-mapping': 0.3.31
       jsesc: 3.1.0
 
+  '@babel/generator@8.1.0':
+    dependencies:
+      '@babel/parser': 8.1.0
+      '@babel/types': 8.1.0
+      '@jridgewell/gen-mapping': 0.4.0-beta.0
+      '@jridgewell/trace-mapping': 0.3.31
+      '@types/jsesc': 2.5.1
+      jsesc: 3.1.0
+
   '@babel/helper-annotate-as-pure@7.18.6':
     dependencies:
       '@babel/types': 7.29.8
@@ -21059,6 +21218,10 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.8
 
+  '@babel/helper-annotate-as-pure@8.0.0':
+    dependencies:
+      '@babel/types': 8.1.0
+
   '@babel/helper-compilation-targets@7.29.7':
     dependencies:
       '@babel/compat-data': 7.29.7
@@ -21067,6 +21230,14 @@ snapshots:
       lru-cache: 5.1.1
       semver: 6.3.1
 
+  '@babel/helper-compilation-targets@8.0.7':
+    dependencies:
+      '@babel/compat-data': 8.0.5
+      '@babel/helper-validator-option': 8.0.0
+      browserslist: 4.29.0
+      flru: 1.0.2
+      verkit: 0.5.0
+
   '@babel/helper-create-class-features-plugin@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21093,6 +21264,30 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-create-class-features-plugin@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-member-expression-to-functions': 7.29.7(supports-color@10.0.0)
+      '@babel/helper-optimise-call-expression': 7.29.7
+      '@babel/helper-replace-supers': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-create-class-features-plugin@8.0.10(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 8.0.0
+      '@babel/helper-member-expression-to-functions': 8.0.5
+      '@babel/helper-optimise-call-expression': 8.0.0
+      '@babel/helper-replace-supers': 8.0.1(@babel/core@8.1.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 8.0.0
+      '@babel/traverse': 8.1.0
+      verkit: 0.5.0
+
   '@babel/helper-create-regexp-features-plugin@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21107,6 +21302,13 @@ snapshots:
       regexpu-core: 6.4.0
       semver: 6.3.1
 
+  '@babel/helper-create-regexp-features-plugin@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      regexpu-core: 6.4.0
+      semver: 6.3.1
+
   '@babel/helper-define-polyfill-provider@0.3.3(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21130,12 +21332,25 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-define-polyfill-provider@0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+      debug: 4.4.3(supports-color@10.0.0)
+      lodash.debounce: 4.0.8
+      resolve: 1.22.12
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-environment-visitor@7.24.7':
     dependencies:
       '@babel/types': 7.29.8
 
   '@babel/helper-globals@7.29.7': {}
 
+  '@babel/helper-globals@8.0.6': {}
+
   '@babel/helper-member-expression-to-functions@7.29.7(supports-color@10.0.0)':
     dependencies:
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
@@ -21143,6 +21358,11 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-member-expression-to-functions@8.0.5':
+    dependencies:
+      '@babel/traverse': 8.1.0
+      '@babel/types': 8.1.0
+
   '@babel/helper-module-imports@7.18.6':
     dependencies:
       '@babel/types': 7.29.8
@@ -21188,12 +21408,29 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-module-transforms@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-imports': 7.29.7(supports-color@10.0.0)
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-optimise-call-expression@7.29.7':
     dependencies:
       '@babel/types': 7.29.8
 
+  '@babel/helper-optimise-call-expression@8.0.0':
+    dependencies:
+      '@babel/types': 8.1.0
+
   '@babel/helper-plugin-utils@7.29.7': {}
 
+  '@babel/helper-plugin-utils@8.0.1(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+
   '@babel/helper-remap-async-to-generator@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21212,6 +21449,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-remap-async-to-generator@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-wrap-function': 7.29.7(supports-color@10.0.0)
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/helper-replace-supers@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21230,6 +21476,22 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-replace-supers@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-member-expression-to-functions': 7.29.7(supports-color@10.0.0)
+      '@babel/helper-optimise-call-expression': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-replace-supers@8.0.1(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-member-expression-to-functions': 8.0.5
+      '@babel/helper-optimise-call-expression': 8.0.0
+      '@babel/traverse': 8.1.0
+
   '@babel/helper-skip-transparent-expression-wrappers@7.29.7(supports-color@10.0.0)':
     dependencies:
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
@@ -21237,12 +21499,23 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/helper-skip-transparent-expression-wrappers@8.0.0':
+    dependencies:
+      '@babel/traverse': 8.1.0
+      '@babel/types': 8.1.0
+
   '@babel/helper-string-parser@7.29.7': {}
 
+  '@babel/helper-string-parser@8.0.8': {}
+
   '@babel/helper-validator-identifier@7.29.7': {}
 
+  '@babel/helper-validator-identifier@8.0.6': {}
+
   '@babel/helper-validator-option@7.29.7': {}
 
+  '@babel/helper-validator-option@8.0.0': {}
+
   '@babel/helper-wrap-function@7.29.7(supports-color@10.0.0)':
     dependencies:
       '@babel/template': 7.29.7
@@ -21256,10 +21529,19 @@ snapshots:
       '@babel/template': 7.29.7
       '@babel/types': 7.29.8
 
+  '@babel/helpers@8.1.0':
+    dependencies:
+      '@babel/template': 8.0.0
+      '@babel/types': 8.1.0
+
   '@babel/parser@7.29.9':
     dependencies:
       '@babel/types': 7.29.8
 
+  '@babel/parser@8.1.0':
+    dependencies:
+      '@babel/types': 8.1.0
+
   '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21268,11 +21550,24 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-bugfix-firefox-class-in-computed-class-key@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-bugfix-safari-class-field-initializer-scope@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21283,6 +21578,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-bugfix-safari-rest-destructuring-rhs-array@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21291,6 +21591,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-bugfix-safari-rest-destructuring-rhs-array@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21309,6 +21617,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+      '@babel/plugin-transform-optional-chaining': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21317,6 +21634,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-proposal-async-generator-functions@7.18.10(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21353,6 +21678,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-proposal-decorators@7.24.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/plugin-syntax-decorators': 7.25.9(@babel/core@8.1.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-proposal-dynamic-import@7.18.6(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21425,6 +21759,10 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
 
+  '@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+
   '@babel/plugin-proposal-private-property-in-object@7.21.11(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21461,6 +21799,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-syntax-decorators@7.25.9(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-syntax-dynamic-import@7.8.3(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21486,11 +21829,21 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-syntax-import-assertions@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-syntax-import-attributes@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-syntax-import-attributes@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-syntax-json-strings@7.8.3(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21551,12 +21904,28 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-syntax-typescript@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-syntax-typescript@8.0.3(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 8.0.1(@babel/core@8.1.0)
+
   '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-syntax-unicode-sets-regex@7.18.6(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-arrow-functions@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21567,6 +21936,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-arrow-functions@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-async-generator-functions@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21576,6 +21950,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-async-generator-functions@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-remap-async-to-generator': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-async-to-generator@7.18.6(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21594,6 +21977,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-async-to-generator@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-imports': 7.29.7(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-remap-async-to-generator': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-block-scoped-functions@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21604,6 +21996,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-block-scoped-functions@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-block-scoping@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21614,6 +22011,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-block-scoping@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-class-properties@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21622,6 +22024,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-class-properties@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-class-static-block@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21630,6 +22040,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-class-static-block@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-classes@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21654,6 +22072,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-classes@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-globals': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-replace-supers': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-computed-properties@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21666,6 +22096,12 @@ snapshots:
       '@babel/helper-plugin-utils': 7.29.7
       '@babel/template': 7.29.7
 
+  '@babel/plugin-transform-computed-properties@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/template': 7.29.7
+
   '@babel/plugin-transform-destructuring@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21682,6 +22118,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-destructuring@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-dotall-regex@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21694,6 +22138,12 @@ snapshots:
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-dotall-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-duplicate-keys@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21704,17 +22154,33 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-duplicate-keys@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-duplicate-named-capturing-groups-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-dynamic-import@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-dynamic-import@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-explicit-resource-management@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21723,6 +22189,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-explicit-resource-management@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/plugin-transform-destructuring': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-exponentiation-operator@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21733,11 +22207,21 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-exponentiation-operator@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-export-namespace-from@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-export-namespace-from@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-for-of@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21754,6 +22238,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-for-of@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-function-name@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21772,11 +22264,25 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-function-name@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-json-strings@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-json-strings@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-literals@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21787,11 +22293,21 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-literals@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-logical-assignment-operators@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-logical-assignment-operators@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-member-expression-literals@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21802,6 +22318,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-member-expression-literals@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-modules-amd@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21818,6 +22339,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-modules-amd@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-modules-commonjs@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21834,6 +22363,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-modules-commonjs@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-modules-systemjs@7.29.8(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21854,6 +22391,16 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-modules-systemjs@7.29.8(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-modules-umd@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21870,6 +22417,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-modules-umd@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-named-capturing-groups-regex@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21882,6 +22437,12 @@ snapshots:
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-named-capturing-groups-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-new-target@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21892,16 +22453,31 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-new-target@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-nullish-coalescing-operator@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-nullish-coalescing-operator@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-numeric-separator@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-numeric-separator@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-object-rest-spread@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21913,6 +22489,17 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-object-rest-spread@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/plugin-transform-destructuring': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-parameters': 7.29.7(@babel/core@8.1.0)
+      '@babel/traverse': 7.29.8(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-object-super@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21929,11 +22516,24 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-object-super@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-replace-supers': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-optional-catch-binding@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-optional-catch-binding@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-optional-chaining@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21950,6 +22550,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-optional-chaining@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-parameters@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21960,6 +22568,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-parameters@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-private-methods@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21968,6 +22581,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-private-methods@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-private-property-in-object@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -21977,6 +22598,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-private-property-in-object@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-property-literals@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -21987,6 +22617,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-property-literals@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-react-display-name@7.29.7(@babel/core@7.29.7(supports-color@8.1.1))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@8.1.1)
@@ -22037,12 +22672,23 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-regenerator@7.29.8(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-regexp-modifiers@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-regexp-modifiers@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-reserved-words@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22053,6 +22699,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-reserved-words@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-runtime@7.18.10(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22077,6 +22728,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-runtime@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-module-imports': 7.29.7(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+      babel-plugin-polyfill-corejs2: 0.4.17(@babel/core@8.1.0)(supports-color@10.0.0)
+      babel-plugin-polyfill-corejs3: 0.13.0(@babel/core@8.1.0)(supports-color@10.0.0)
+      babel-plugin-polyfill-regenerator: 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-shorthand-properties@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22087,6 +22750,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-shorthand-properties@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-spread@7.29.8(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22103,6 +22771,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-spread@7.29.8(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/plugin-transform-sticky-regex@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22113,6 +22789,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-sticky-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-template-literals@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22123,6 +22804,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-template-literals@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-typeof-symbol@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22133,6 +22819,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-typeof-symbol@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -22144,6 +22835,26 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/plugin-transform-typescript@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 7.29.7
+      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7(supports-color@10.0.0)
+      '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@8.1.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/plugin-transform-typescript@8.0.6(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-annotate-as-pure': 8.0.0
+      '@babel/helper-create-class-features-plugin': 8.0.10(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 8.0.1(@babel/core@8.1.0)
+      '@babel/helper-skip-transparent-expression-wrappers': 8.0.0
+      '@babel/plugin-syntax-typescript': 8.0.3(@babel/core@8.1.0)
+
   '@babel/plugin-transform-unicode-escapes@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22154,12 +22865,23 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-unicode-escapes@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-unicode-property-regex@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-unicode-property-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-unicode-regex@7.29.7(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22172,12 +22894,24 @@ snapshots:
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-unicode-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/plugin-transform-unicode-sets-regex@7.29.7(@babel/core@7.29.7(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
       '@babel/helper-plugin-utils': 7.29.7
 
+  '@babel/plugin-transform-unicode-sets-regex@7.29.7(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-create-regexp-features-plugin': 7.29.7(@babel/core@8.1.0)
+      '@babel/helper-plugin-utils': 7.29.7
+
   '@babel/preset-env@7.18.10(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0)':
     dependencies:
       '@babel/compat-data': 7.29.7
@@ -22336,6 +23070,83 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/preset-env@7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)':
+    dependencies:
+      '@babel/compat-data': 7.29.7
+      '@babel/core': 8.1.0
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/helper-validator-option': 7.29.7
+      '@babel/plugin-bugfix-firefox-class-in-computed-class-key': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-bugfix-safari-class-field-initializer-scope': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-bugfix-safari-rest-destructuring-rhs-array': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-proposal-private-property-in-object': 7.21.0-placeholder-for-preset-env.2(@babel/core@8.1.0)
+      '@babel/plugin-syntax-import-assertions': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-syntax-import-attributes': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-syntax-unicode-sets-regex': 7.18.6(@babel/core@8.1.0)
+      '@babel/plugin-transform-arrow-functions': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-async-generator-functions': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-async-to-generator': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-block-scoped-functions': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-block-scoping': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-class-properties': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-class-static-block': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-classes': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-computed-properties': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-destructuring': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-dotall-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-duplicate-keys': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-duplicate-named-capturing-groups-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-dynamic-import': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-explicit-resource-management': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-exponentiation-operator': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-export-namespace-from': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-for-of': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-function-name': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-json-strings': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-literals': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-logical-assignment-operators': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-member-expression-literals': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-modules-amd': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-modules-commonjs': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-modules-systemjs': 7.29.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-modules-umd': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-named-capturing-groups-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-new-target': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-nullish-coalescing-operator': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-numeric-separator': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-object-rest-spread': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-object-super': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-optional-catch-binding': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-optional-chaining': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-parameters': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-private-methods': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-private-property-in-object': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-property-literals': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-regenerator': 7.29.8(@babel/core@8.1.0)
+      '@babel/plugin-transform-regexp-modifiers': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-reserved-words': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-shorthand-properties': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-spread': 7.29.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-sticky-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-template-literals': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-typeof-symbol': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-unicode-escapes': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-unicode-property-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-unicode-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/plugin-transform-unicode-sets-regex': 7.29.7(@babel/core@8.1.0)
+      '@babel/preset-modules': 0.1.6-no-external-plugins(@babel/core@8.1.0)
+      babel-plugin-polyfill-corejs2: 0.4.17(@babel/core@8.1.0)(supports-color@10.0.0)
+      babel-plugin-polyfill-corejs3: 0.14.2(@babel/core@8.1.0)(supports-color@10.0.0)
+      babel-plugin-polyfill-regenerator: 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      core-js-compat: 3.50.0
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/preset-modules@0.1.5(@babel/core@7.18.10(supports-color@10.0.0))':
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -22352,6 +23163,13 @@ snapshots:
       '@babel/types': 7.29.8
       esutils: 2.0.3
 
+  '@babel/preset-modules@0.1.6-no-external-plugins(@babel/core@8.1.0)':
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-plugin-utils': 7.29.7
+      '@babel/types': 7.29.8
+      esutils: 2.0.3
+
   '@babel/preset-react@7.29.7(@babel/core@7.29.7(supports-color@8.1.1))(supports-color@8.1.1)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@8.1.1)
@@ -22401,6 +23219,12 @@ snapshots:
       '@babel/parser': 7.29.9
       '@babel/types': 7.29.8
 
+  '@babel/template@8.0.0':
+    dependencies:
+      '@babel/code-frame': 8.0.6
+      '@babel/parser': 8.1.0
+      '@babel/types': 8.1.0
+
   '@babel/traverse@7.29.8(supports-color@10.0.0)':
     dependencies:
       '@babel/code-frame': 7.29.7
@@ -22425,11 +23249,26 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@babel/traverse@8.1.0':
+    dependencies:
+      '@babel/code-frame': 8.0.6
+      '@babel/generator': 8.1.0
+      '@babel/helper-globals': 8.0.6
+      '@babel/parser': 8.1.0
+      '@babel/template': 8.0.0
+      '@babel/types': 8.1.0
+      obug: 3.0.0
+
   '@babel/types@7.29.8':
     dependencies:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
+  '@babel/types@8.1.0':
+    dependencies:
+      '@babel/helper-string-parser': 8.0.8
+      '@babel/helper-validator-identifier': 8.0.6
+
   '@bcoe/v8-coverage@1.0.2': {}
 
   '@bomb.sh/tab@0.0.19(cac@6.7.14)(citty@0.2.2)(commander@14.0.3)':
@@ -23005,6 +23844,22 @@ snapshots:
       - '@babel/core'
       - supports-color
 
+  '@embroider/macros@1.20.6(@babel/core@8.1.0)(@glint/template@1.8.0)(supports-color@10.0.0)':
+    dependencies:
+      '@embroider/shared-internals': 3.1.1(supports-color@10.0.0)
+      assert-never: 1.4.0
+      babel-import-util: 3.0.1
+      ember-cli-babel: 8.3.1(@babel/core@8.1.0)(supports-color@10.0.0)
+      find-up: 5.0.0
+      lodash: 4.18.1
+      resolve: 1.22.12
+      semver: 7.8.5
+    optionalDependencies:
+      '@glint/template': 1.8.0
+    transitivePeerDependencies:
+      - '@babel/core'
+      - supports-color
+
   '@embroider/reverse-exports@0.2.0':
     dependencies:
       mem: 8.1.1
@@ -24107,11 +24962,16 @@ snapshots:
   '@jridgewell/gen-mapping@0.1.1':
     dependencies:
       '@jridgewell/set-array': 1.2.1
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
 
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
+      '@jridgewell/trace-mapping': 0.3.31
+
+  '@jridgewell/gen-mapping@0.4.0-beta.0':
+    dependencies:
+      '@jridgewell/sourcemap-codec': 1.6.0
       '@jridgewell/trace-mapping': 0.3.31
 
   '@jridgewell/remapping@2.3.5':
@@ -24128,17 +24988,17 @@ snapshots:
       '@jridgewell/gen-mapping': 0.3.13
       '@jridgewell/trace-mapping': 0.3.31
 
-  '@jridgewell/sourcemap-codec@1.5.5': {}
+  '@jridgewell/sourcemap-codec@1.6.0': {}
 
   '@jridgewell/trace-mapping@0.3.31':
     dependencies:
       '@jridgewell/resolve-uri': 3.1.1
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
 
   '@jridgewell/trace-mapping@0.3.9':
     dependencies:
       '@jridgewell/resolve-uri': 3.1.1
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
 
   '@js-joda/core@5.7.0': {}
 
@@ -26139,9 +26999,9 @@ snapshots:
     optionalDependencies:
       rollup: 4.62.3
 
-  '@rollup/plugin-babel@7.1.0(@babel/core@7.29.7(supports-color@10.0.0))(@types/babel__core@7.20.5)(rollup@4.62.3)(supports-color@10.0.0)':
+  '@rollup/plugin-babel@7.1.0(@babel/core@8.1.0)(@types/babel__core@7.20.5)(rollup@4.62.3)(supports-color@10.0.0)':
     dependencies:
-      '@babel/core': 7.29.7(supports-color@10.0.0)
+      '@babel/core': 8.1.0
       '@babel/helper-module-imports': 7.29.7(supports-color@10.0.0)
       '@rollup/pluginutils': 5.2.0(rollup@4.62.3)
       workerpool: 9.3.4
@@ -27314,6 +28174,8 @@ snapshots:
       '@types/express-serve-static-core': 5.1.0
       '@types/serve-static': 2.2.0
 
+  '@types/gensync@1.0.5': {}
+
   '@types/hast@3.0.4':
     dependencies:
       '@types/unist': 3.0.0
@@ -27346,6 +28208,8 @@ snapshots:
       '@types/tough-cookie': 4.0.0
       parse5: 7.3.0
 
+  '@types/jsesc@2.5.1': {}
+
   '@types/json-schema@7.0.15': {}
 
   '@types/json5@0.0.29': {}
@@ -28851,6 +29715,11 @@ snapshots:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       semver: 5.7.2
 
+  babel-plugin-debug-macros@0.3.4(@babel/core@8.1.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      semver: 5.7.2
+
   babel-plugin-debug-macros@2.0.0(@babel/core@7.29.7(supports-color@10.0.0)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -28921,6 +29790,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-corejs2@0.4.17(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/compat-data': 7.29.7
+      '@babel/core': 8.1.0
+      '@babel/helper-define-polyfill-provider': 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-polyfill-corejs3@0.13.0(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -28929,6 +29807,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-corejs3@0.13.0(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-define-polyfill-provider': 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      core-js-compat: 3.50.0
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-polyfill-corejs3@0.14.2(@babel/core@7.29.7(supports-color@10.0.0))(supports-color@10.0.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -28937,6 +29823,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-corejs3@0.14.2(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-define-polyfill-provider': 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+      core-js-compat: 3.50.0
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-polyfill-corejs3@0.5.3(@babel/core@7.18.10(supports-color@10.0.0))(supports-color@10.0.0):
     dependencies:
       '@babel/core': 7.18.10(supports-color@10.0.0)
@@ -28959,6 +29853,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  babel-plugin-polyfill-regenerator@0.6.8(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-define-polyfill-provider': 0.6.8(@babel/core@8.1.0)(supports-color@10.0.0)
+    transitivePeerDependencies:
+      - supports-color
+
   babel-plugin-syntax-dynamic-import@6.18.0: {}
 
   babel-preset-solid@1.8.17(@babel/core@7.29.7(supports-color@10.0.0)):
@@ -29134,6 +30035,20 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  broccoli-babel-transpiler@8.0.0(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      broccoli-persistent-filter: 3.1.3(supports-color@10.0.0)
+      clone: 2.1.2
+      hash-for-dep: 1.5.1(supports-color@10.0.0)
+      heimdalljs: 0.2.6
+      heimdalljs-logger: 0.1.10(supports-color@10.0.0)
+      json-stable-stringify: 1.0.1
+      rsvp: 4.8.5
+      workerpool: 6.5.1
+    transitivePeerDependencies:
+      - supports-color
+
   broccoli-concat@4.2.5(supports-color@10.0.0):
     dependencies:
       broccoli-debug: 0.6.5(supports-color@10.0.0)
@@ -29645,7 +30560,7 @@ snapshots:
 
   code-red@1.0.4:
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
       '@types/estree': 1.0.9
       acorn: 8.18.0
       estree-walker: 3.0.3
@@ -30161,9 +31076,9 @@ snapshots:
 
   decode-uri-component@0.2.2: {}
 
-  decorator-transforms@2.4.0(@babel/core@7.29.7(supports-color@10.0.0)):
+  decorator-transforms@2.4.0(@babel/core@8.1.0):
     dependencies:
-      '@babel/core': 7.29.7(supports-color@10.0.0)
+      '@babel/core': 8.1.0
       babel-import-util: 3.0.1
 
   dedent@1.5.3: {}
@@ -30514,6 +31429,39 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  ember-cli-babel@8.3.1(@babel/core@8.1.0)(supports-color@10.0.0):
+    dependencies:
+      '@babel/core': 8.1.0
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/plugin-proposal-decorators': 7.24.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-class-properties': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-class-static-block': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-modules-amd': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-private-methods': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-private-property-in-object': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-runtime': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/plugin-transform-typescript': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/preset-env': 7.29.7(@babel/core@8.1.0)(supports-color@10.0.0)
+      '@babel/runtime': 7.12.18
+      amd-name-resolver: 1.3.1
+      babel-plugin-debug-macros: 0.3.4(@babel/core@8.1.0)
+      babel-plugin-ember-data-packages-polyfill: 0.1.2
+      babel-plugin-ember-modules-api-polyfill: 3.5.0
+      babel-plugin-module-resolver: 5.0.2
+      broccoli-babel-transpiler: 8.0.0(@babel/core@8.1.0)(supports-color@10.0.0)
+      broccoli-debug: 0.6.5(supports-color@10.0.0)
+      broccoli-funnel: 3.0.8(supports-color@10.0.0)
+      broccoli-source: 3.0.1
+      calculate-cache-key-for-tree: 2.0.0
+      clone: 2.1.2
+      ember-cli-babel-plugin-helpers: 1.1.1
+      ember-cli-version-checker: 5.1.2(supports-color@10.0.0)
+      ensure-posix-path: 1.1.1
+      resolve-package-path: 4.0.3
+      semver: 7.8.5
+    transitivePeerDependencies:
+      - supports-color
+
   ember-cli-get-component-path-option@1.0.0: {}
 
   ember-cli-is-package-missing@1.0.0: {}
@@ -30595,6 +31543,8 @@ snapshots:
 
   empathic@2.0.0: {}
 
+  empathic@2.1.0: {}
+
   enabled@2.0.0: {}
 
   encodeurl@1.0.2: {}
@@ -31702,6 +32652,8 @@ snapshots:
 
   flattie@1.1.1: {}
 
+  flru@1.0.2: {}
+
   fn.name@1.1.0: {}
 
   follow-redirects@1.16.0(debug@4.4.3(supports-color@10.0.0)):
@@ -33810,11 +34762,11 @@ snapshots:
 
   magic-string@0.30.21:
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
 
   magic-string@1.1.0:
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
 
   magicast@0.2.11:
     dependencies:
@@ -35727,6 +36679,8 @@ snapshots:
 
   obug@2.1.4: {}
 
+  obug@3.0.0: {}
+
   ocache@0.1.4:
     dependencies:
       ohash: 2.0.11
@@ -38557,7 +39511,7 @@ snapshots:
 
   sorcery@1.0.0:
     dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
       minimist: 1.2.8
       tiny-glob: 0.2.9
 
@@ -38930,7 +39884,7 @@ snapshots:
   svelte@4.2.8:
     dependencies:
       '@ampproject/remapping': 2.3.0
-      '@jridgewell/sourcemap-codec': 1.5.5
+      '@jridgewell/sourcemap-codec': 1.6.0
       '@jridgewell/trace-mapping': 0.3.31
       acorn: 8.18.0
       aria-query: 5.3.2

From 420beaaf6013689306b7c087f3b099a365ac479b Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 15:17:22 +0100
Subject: [PATCH 118/169] chore(deps): Align AWS SDK clients to 3.1161.0
 (#26032)

**Why:** Align all integration-test AWS SDK clients to 3.1161.0,
building on the Lambda bump in #26026. Supersedes #26028.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .../node-integration-tests/package.json       |  16 +-
 pnpm-lock.yaml                                | 247 ++++++++----------
 2 files changed, 113 insertions(+), 150 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index dad3f3bf34a9..244e050b975e 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -27,15 +27,15 @@
   "dependencies": {
     "@anthropic-ai/sdk": "0.133.0",
     "@apollo/server": "^5.5.0",
-    "@aws-sdk/client-bedrock-runtime": "^3.1046.0",
-    "@aws-sdk/client-dynamodb": "^3.1046.0",
-    "@aws-sdk/client-kinesis": "^3.1146.0",
+    "@aws-sdk/client-bedrock-runtime": "^3.1161.0",
+    "@aws-sdk/client-dynamodb": "^3.1161.0",
+    "@aws-sdk/client-kinesis": "^3.1161.0",
     "@aws-sdk/client-lambda": "^3.1161.0",
-    "@aws-sdk/client-s3": "^3.1046.0",
-    "@aws-sdk/client-secrets-manager": "^3.1046.0",
-    "@aws-sdk/client-sfn": "^3.1046.0",
-    "@aws-sdk/client-sns": "^3.1046.0",
-    "@aws-sdk/client-sqs": "^3.1046.0",
+    "@aws-sdk/client-s3": "^3.1161.0",
+    "@aws-sdk/client-secrets-manager": "^3.1161.0",
+    "@aws-sdk/client-sfn": "^3.1161.0",
+    "@aws-sdk/client-sns": "^3.1161.0",
+    "@aws-sdk/client-sqs": "^3.1161.0",
     "@earendil-works/chord": "^1.4.0",
     "@earendil-works/pi-ai": "^1.4.0",
     "@earendil-works/pi-durable": "^1.4.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9cc7530070ec..90644124f66e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -604,32 +604,32 @@ importers:
         specifier: ^5.5.0
         version: 5.5.0(graphql@16.12.0)(supports-color@10.0.0)
       '@aws-sdk/client-bedrock-runtime':
-        specifier: ^3.1046.0
-        version: 3.1127.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-dynamodb':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-kinesis':
-        specifier: ^3.1146.0
-        version: 3.1146.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-lambda':
         specifier: ^3.1161.0
         version: 3.1161.0
       '@aws-sdk/client-s3':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-secrets-manager':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-sfn':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-sns':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@aws-sdk/client-sqs':
-        specifier: ^3.1046.0
-        version: 3.1068.0
+        specifier: ^3.1161.0
+        version: 3.1161.0
       '@earendil-works/chord':
         specifier: ^1.4.0
         version: 1.4.0
@@ -671,7 +671,7 @@ importers:
         version: 0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(ws@8.21.3)
       '@mistralai/mistralai':
         specifier: 3.3.0
-        version: 3.3.0(@aws-sdk/client-s3@3.1068.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
+        version: 3.3.0(@aws-sdk/client-s3@3.1161.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
       '@modelcontextprotocol/client':
         specifier: ^2.0.0
         version: 2.0.0
@@ -2922,16 +2922,6 @@ packages:
     resolution: {integrity: sha512-/ca/+D8MIKEC8/A9cSaPUqQNZm+Es/ZinRv0ZAzvu2ios7POQSsVD+VOj7/hypWNsNM3T7RpfgNq7H2TU1KEHA==}
     engines: {node: ^18.17.1 || ^20.3.0 || >=21.0.0}
 
-  '@aws-crypto/crc32@5.2.0':
-    resolution: {integrity: sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==}
-    engines: {node: '>=16.0.0'}
-
-  '@aws-crypto/crc32c@5.2.0':
-    resolution: {integrity: sha512-+iWb8qaHLYKrNvGRbiYRHSdKRWhto5XlZUEBwDjYNf+ly5SVYG6zEoYIdxvf5R3zyeP16w4PLBn3rH1xc74Rag==}
-
-  '@aws-crypto/sha1-browser@5.2.0':
-    resolution: {integrity: sha512-OH6lveCFfcDjX4dbAvCFSYUjJZjDr/3XJ3xHtjn3Oj5b9RjojQo8npoLeA/bNwkOkrSQ0wgrHzXk4tDRxGKJeg==}
-
   '@aws-crypto/sha256-browser@5.2.0':
     resolution: {integrity: sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==}
 
@@ -2945,8 +2935,8 @@ packages:
   '@aws-crypto/util@5.2.0':
     resolution: {integrity: sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==}
 
-  '@aws-sdk/checksums@3.1000.5':
-    resolution: {integrity: sha512-zOXUUnilC6lgCsQtp77p/QNPmRlTES9Xi6tlDwbR6kfC/kz5PCzZckgHWm5z+8DskdwuMAbFDq61x3zr10GEEQ==}
+  '@aws-sdk/checksums@3.1002.1':
+    resolution: {integrity: sha512-CXNESwkQC9jdrUG6cKXBfudVt1frGcYQykcCYbNclVrsewuGMbo3PlFjRteMe4OftNAqhyc3xC2jTz7SUqLasQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/client-bedrock-runtime@3.1048.0':
@@ -2957,6 +2947,10 @@ packages:
     resolution: {integrity: sha512-IDl/lrPb90aH+pZFHGNDmgH9nAUQj5PlZH1sJ3w7RikctyjHSnY3oNjZhrLoaBoQn/rNK0zsP6OHEqEhj2tdLA==}
     engines: {node: '>=20.0.0'}
 
+  '@aws-sdk/client-bedrock-runtime@3.1161.0':
+    resolution: {integrity: sha512-kkH/bDt2AbEN+qpSNUstEbxY4KIsA2z70vGkA4w3f843sU/j998gyPkrMrAvkQDgzHCbfIgHvc1k+U+O37pc7w==}
+    engines: {node: '>=20.0.0'}
+
   '@aws-sdk/client-cognito-identity@3.980.0':
     resolution: {integrity: sha512-nLgMW2drTzv+dTo3ORCcotQPcrUaTQ+xoaDTdSaUXdZO7zbbVyk7ysE5GDTnJdZWcUjHOSB8xfNQhOTTNVPhFw==}
     engines: {node: '>=20.0.0'}
@@ -2965,36 +2959,36 @@ packages:
     resolution: {integrity: sha512-ZbDx0koMsnj6wDH1BGKcbsO5DB34XfJB8/u/WNIyqQp04LXqXTcLCV1TgflRIyJ6RwYxsssic2mQ8HfZPGRqEg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-dynamodb@3.1068.0':
-    resolution: {integrity: sha512-DOMUWnLSFHaRC0EixpWMnrQcQaV08P5rzAUdRTEkx72NaDRF0Q6+3QdtqX8ocyHfySzwMwOE9/vHRmhNvWHl/g==}
+  '@aws-sdk/client-dynamodb@3.1161.0':
+    resolution: {integrity: sha512-Z7F2Yh0YXEG516FXfXZE4iqe2Pg6PG1M8Ejzu+K4o0tj5Hv4u5+AaO6fxPpIeFz5VI/O+z6wJMFMnX4t+1hbnw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-kinesis@3.1146.0':
-    resolution: {integrity: sha512-/WpJG6dIJHKXxqoCNA79SFcbxZCeQ5AVOkVkdzwV1LJDWo/23HFtprUVNldYa50JmqVPkVGO58muAt8jSFN+wA==}
+  '@aws-sdk/client-kinesis@3.1161.0':
+    resolution: {integrity: sha512-A8hyzweBUy2baNrkvB2R1FwnUImmhNDB8gsFrc4wny1tQitlxlTqpEF3C5s+g94VRknW/M+poID822ijv5I2hQ==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/client-lambda@3.1161.0':
     resolution: {integrity: sha512-kEz+hGRtgH37TsAzRgW5Gct0XSmfmoCiSTbA68jWjTMHu5ijyu5D1Dl/MvQQBMnQqr1mdGQ3nq11EJHD5n+xuQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-s3@3.1068.0':
-    resolution: {integrity: sha512-lFgaIpxZvloNbJvQ337YPdMXhzI2zJdDw13nATVGnkAGNoNPx4ksD84AQAcuW75hsaaMaIuNmXU9sSx6+FTirA==}
+  '@aws-sdk/client-s3@3.1161.0':
+    resolution: {integrity: sha512-iRZGMsJnYRrI98O+U6o5fHeLPQTP+Dc/w0mWLcBLQcEQ10DA06+XQj0WmdRiCM7vIso7QEtN1fsj9Vzo5/R3LQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-secrets-manager@3.1068.0':
-    resolution: {integrity: sha512-5FPwDBwKnUsCwjFX8nnuI++1Aez+cuHHWviwLhBME2p1qdfqYknHzfnvV+LHKeJWJk/chqARAHgfYVxcLj8nvA==}
+  '@aws-sdk/client-secrets-manager@3.1161.0':
+    resolution: {integrity: sha512-eSS+aK9GC/ZiL6OMuIoIUFCeVw60kpSR7dytSO8B6hkz6ghxnT6CWIUe6GOsyfrbezc41DjiiyhZlSYmM0g9kQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-sfn@3.1068.0':
-    resolution: {integrity: sha512-l56Wpbojqb8lYTQfjVg9p1byraYgHyFw9dq5NYGQFl64tRykyaIMUAI6J1wKPOv1gz7LSYE6k8wKbGetzAErKA==}
+  '@aws-sdk/client-sfn@3.1161.0':
+    resolution: {integrity: sha512-eTCeNuIJLedVFv9knTZjTmEYdWkODhGtIpvYZ0LWgNYX60JwIPHh8fHBdEfJC5KS7++lnixa+Xg83NKlvpCdLQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-sns@3.1068.0':
-    resolution: {integrity: sha512-xIjKGG2yzUhX+IHqq0B/8D6zKKr32+LmYUy/OnV5dDj+j+eUJD7J3Ca6kMVDPI6eWe/fCtdHCgsnZtxhf1LMqg==}
+  '@aws-sdk/client-sns@3.1161.0':
+    resolution: {integrity: sha512-ZvLlpkzhjkv1Ud4L1BJTcMBkh3o9rnZ/BSW7NGLYZiBNGOkH+0c6m5pQRA8sAVqT2p9YDI+Ekx7C2GZxe37ohw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-sqs@3.1068.0':
-    resolution: {integrity: sha512-hatCfVf61RsSO5Qjrf7JKln4KiPDprXNJhpx9DNOmyeW1v+i7KNhbawk4d1wAnQ72YciOfhAhyRFec6UZqcnzQ==}
+  '@aws-sdk/client-sqs@3.1161.0':
+    resolution: {integrity: sha512-qkSzZC/ZWxmxEJDaajCMLt+xdwmtLGMoACRSryG6zwpWUQLtoVzggY6oIm4S9dJeR5eIoHlbK2n8Dl1wB2yMiA==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/core@3.979.1':
@@ -3041,28 +3035,24 @@ packages:
     resolution: {integrity: sha512-G2nmPoHdEhLJMae0Y4CpkR5OlsQKUXAi7LNLUOZfNMFCstPQfI6uEHqTmKT9EyrbQkD3Y+rAbRTxTt3FMm+B4A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/dynamodb-codec@3.973.20':
-    resolution: {integrity: sha512-SFfxiqVgWeIe+RsJJNAMD//2IfehT4bLpGyNJRB0MgHmOIJtdcfMnR1k7KYyaHokSoQVdncVa9O9DIGa4eqcwg==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/endpoint-cache@3.972.7':
-    resolution: {integrity: sha512-LkwS3ZOUNL5kHzmz3dDx8lE3HOhZmf2VGjbJ/tMUZJYWWl3J0RJTZM7RFz1MLt06WDVvlShcAjY/RzhYlqLL7g==}
+  '@aws-sdk/dynamodb-codec@3.973.54':
+    resolution: {integrity: sha512-+Z4tyUabT/ATvXw7Bpo2j8Sh5ot5XqhvJYwNqHaKEib1KIgrVByZKSw7ndeAMOHjMAhygZnH09N9D1ygD/uTRg==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/eventstream-handler-node@3.972.39':
-    resolution: {integrity: sha512-V+AvQ+KFWApgm9134igy78cgoCEAFfV8K3KmlVi511vjkRWAgvy0tGUePrZsER+9EvrmUWEsrA2NBQspiGVBMQ==}
+  '@aws-sdk/endpoint-cache@3.972.11':
+    resolution: {integrity: sha512-8q1ICxcDjHId3bBryuu/j+1L9y5/3uQnwzLDt5j2ElcjZSoWmFtymdJy7OjLrluSMe0Z4mq5bcH4fxBXvlEHfw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-endpoint-discovery@3.972.18':
-    resolution: {integrity: sha512-1vKJt/6MBB/MBMRM3qzCMdW70syJY8u2DH+dq7yCnPn7wVJmyeAzAa/sK1lIbbYh8BVLbM5FspsT4zbe885gOw==}
+  '@aws-sdk/eventstream-handler-node@3.972.40':
+    resolution: {integrity: sha512-LR2mRKFb9EMlGHmJNXMtuMPvVQqN1b9/v68A1UQaE72pb8pHqiHxTtS++vaab8844YesGVzBVrloAis7+EXq/w==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-eventstream@3.972.34':
-    resolution: {integrity: sha512-0IUoHM9N75uMaf70Tj2l+qmOSNw8HaDCsoghPRnewMaaPJjdSxzFaCpPBFDmSWuSlc0gBgv4CsvvvPGoBAD4Bg==}
+  '@aws-sdk/middleware-endpoint-discovery@3.972.37':
+    resolution: {integrity: sha512-+KAK020JY95Q7Swwo5b9pl9S11VPuNLqecCW5bzkksWiU5pmI85lAloOD4qlIKIA/P8FlrRJ60XJ6+lnDQK/DQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-flexible-checksums@3.974.30':
-    resolution: {integrity: sha512-OaIhub+3yTgfFWPzKO8OzOZFIMUoJaiS5v67y3spQg7SoULGoMx4jKVBbE+uhnzkiZXQ+rEDS0RqrK4/aD1yJw==}
+  '@aws-sdk/middleware-eventstream@3.972.36':
+    resolution: {integrity: sha512-OkV+alDzmJ3DOs2mRPLSM9FUVSul7G1wkpKrbO+tyxxGOT7qLMPZHOlj4Ipjw9OayRmU7nMVPSFo7hvUqOSeJg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/middleware-host-header@3.972.10':
@@ -3077,20 +3067,20 @@ packages:
     resolution: {integrity: sha512-+zz6f79Kj9V5qFK2P+D8Ehjnw4AhphAlCAsPjUqEcInA9umtSSKMrHbSagEeOIsDNuvVrH98bjRHcyQukTrhaQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-sdk-s3@3.972.51':
-    resolution: {integrity: sha512-keQgcIUTcHL0Qn7guhsuLaxQU36r9norCrxgaPH4DNCwon4TPtXdI/UdYuycl9vj3Dlwc3YR1dfL3U+6iIwJ6w==}
+  '@aws-sdk/middleware-sdk-s3@3.972.85':
+    resolution: {integrity: sha512-Kyl2G6zhIS9qFoeLdlxvXFrWyc6g9D9ZCIRJnGkkfX6JZhxCZB5ebXBc7GKEeetrnhXcail6ALZT0lKbojcaNA==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-sdk-sqs@3.972.30':
-    resolution: {integrity: sha512-PVAj7VgWK/ZxCXnkgC4B7cdJyUN99Nsr7IEduHt4A1GieuB+ZnU5bSifHwapbr17wrFkmdxfSh+aA0Lj+Ads6w==}
+  '@aws-sdk/middleware-sdk-sqs@3.972.48':
+    resolution: {integrity: sha512-GNzuBLwvUUV++svohxeAj1sf4AgA2gOevKTYHRKIDPpVD30YoBiNBb+X0L28b9KazqHhG6WilyiOE4XDmZeHeg==}
     engines: {node: '>=20.0.0'}
 
   '@aws-sdk/middleware-user-agent@3.972.38':
     resolution: {integrity: sha512-iz+B29TXcAZsJpwB+AwG/TTGA5l/VnmMZ2UxtiySOZjI6gCdmviXPwdgzcmuazMy16rXoPY4mYCGe7zdNKfx5A==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/middleware-websocket@3.972.59':
-    resolution: {integrity: sha512-lpLmEPrmRSG1ev+LqxkOn1JfVGclnS9b5hvGaSoBgS0JxW2u3QXsJuu+KTHvhdFrRohsqzl70cuiHhyUHFSjYQ==}
+  '@aws-sdk/middleware-websocket@3.972.62':
+    resolution: {integrity: sha512-pNkKv8TlxEBpL26J8zpeHLzW//As72QapCPfciTs7k7H+ppFZxE/zVteAH9zdFI83Xx7Ki5rE0hJjVh+TmOH7g==}
     engines: {node: '>= 14.0.0'}
 
   '@aws-sdk/nested-clients@3.983.0':
@@ -20232,27 +20222,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@aws-crypto/crc32@5.2.0':
-    dependencies:
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.975.0
-      tslib: 2.8.1
-
-  '@aws-crypto/crc32c@5.2.0':
-    dependencies:
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.975.0
-      tslib: 2.8.1
-
-  '@aws-crypto/sha1-browser@5.2.0':
-    dependencies:
-      '@aws-crypto/supports-web-crypto': 5.2.0
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.975.0
-      '@aws-sdk/util-locate-window': 3.535.0
-      '@smithy/util-utf8': 2.3.0
-      tslib: 2.8.1
-
   '@aws-crypto/sha256-browser@5.2.0':
     dependencies:
       '@aws-crypto/sha256-js': 5.2.0
@@ -20279,11 +20248,8 @@ snapshots:
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
 
-  '@aws-sdk/checksums@3.1000.5':
+  '@aws-sdk/checksums@3.1002.1':
     dependencies:
-      '@aws-crypto/crc32': 5.2.0
-      '@aws-crypto/crc32c': 5.2.0
-      '@aws-crypto/util': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
@@ -20296,9 +20262,9 @@ snapshots:
       '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/eventstream-handler-node': 3.972.39
-      '@aws-sdk/middleware-eventstream': 3.972.34
-      '@aws-sdk/middleware-websocket': 3.972.59
+      '@aws-sdk/eventstream-handler-node': 3.972.40
+      '@aws-sdk/middleware-eventstream': 3.972.36
+      '@aws-sdk/middleware-websocket': 3.972.62
       '@aws-sdk/token-providers': 3.1048.0
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
@@ -20311,9 +20277,9 @@ snapshots:
     dependencies:
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/eventstream-handler-node': 3.972.39
-      '@aws-sdk/middleware-eventstream': 3.972.34
-      '@aws-sdk/middleware-websocket': 3.972.59
+      '@aws-sdk/eventstream-handler-node': 3.972.40
+      '@aws-sdk/middleware-eventstream': 3.972.36
+      '@aws-sdk/middleware-websocket': 3.972.62
       '@aws-sdk/token-providers': 3.1127.0
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
@@ -20322,6 +20288,21 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
+  '@aws-sdk/client-bedrock-runtime@3.1161.0':
+    dependencies:
+      '@aws-sdk/core': 3.979.1
+      '@aws-sdk/credential-provider-node': 3.972.92
+      '@aws-sdk/eventstream-handler-node': 3.972.40
+      '@aws-sdk/middleware-eventstream': 3.972.36
+      '@aws-sdk/middleware-websocket': 3.972.62
+      '@aws-sdk/token-providers': 3.1161.0
+      '@aws-sdk/types': 3.975.0
+      '@smithy/core': 3.38.1
+      '@smithy/fetch-http-handler': 5.8.0
+      '@smithy/node-http-handler': 4.14.1
+      '@smithy/types': 4.19.0
+      tslib: 2.8.1
+
   '@aws-sdk/client-cognito-identity@3.980.0':
     dependencies:
       '@aws-crypto/sha256-browser': 5.2.0
@@ -20412,29 +20393,27 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/client-dynamodb@3.1068.0':
+  '@aws-sdk/client-dynamodb@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/dynamodb-codec': 3.973.20
-      '@aws-sdk/middleware-endpoint-discovery': 3.972.18
+      '@aws-sdk/dynamodb-codec': 3.973.54
+      '@aws-sdk/middleware-endpoint-discovery': 3.972.37
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-kinesis@3.1146.0':
+  '@aws-sdk/client-kinesis@3.1161.0':
     dependencies:
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20449,73 +20428,62 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-s3@3.1068.0':
+  '@aws-sdk/client-s3@3.1161.0':
     dependencies:
-      '@aws-crypto/sha1-browser': 5.2.0
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
+      '@aws-sdk/checksums': 3.1002.1
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/middleware-flexible-checksums': 3.974.30
-      '@aws-sdk/middleware-sdk-s3': 3.972.51
+      '@aws-sdk/middleware-sdk-s3': 3.972.85
       '@aws-sdk/signature-v4-multi-region': 3.996.51
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-secrets-manager@3.1068.0':
+  '@aws-sdk/client-secrets-manager@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-sfn@3.1068.0':
+  '@aws-sdk/client-sfn@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-sns@3.1068.0':
+  '@aws-sdk/client-sns@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-sqs@3.1068.0':
+  '@aws-sdk/client-sqs@3.1161.0':
     dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/middleware-sdk-sqs': 3.972.30
+      '@aws-sdk/middleware-sdk-sqs': 3.972.48
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
+      '@smithy/node-http-handler': 4.14.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
@@ -20651,45 +20619,40 @@ snapshots:
       - aws-crt
     optional: true
 
-  '@aws-sdk/dynamodb-codec@3.973.20':
+  '@aws-sdk/dynamodb-codec@3.973.54':
     dependencies:
       '@aws-sdk/core': 3.979.1
       '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/endpoint-cache@3.972.7':
+  '@aws-sdk/endpoint-cache@3.972.11':
     dependencies:
       mnemonist: 0.38.3
       tslib: 2.8.1
 
-  '@aws-sdk/eventstream-handler-node@3.972.39':
+  '@aws-sdk/eventstream-handler-node@3.972.40':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/middleware-endpoint-discovery@3.972.18':
+  '@aws-sdk/middleware-endpoint-discovery@3.972.37':
     dependencies:
-      '@aws-sdk/endpoint-cache': 3.972.7
+      '@aws-sdk/endpoint-cache': 3.972.11
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/middleware-eventstream@3.972.34':
+  '@aws-sdk/middleware-eventstream@3.972.36':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/middleware-flexible-checksums@3.974.30':
-    dependencies:
-      '@aws-sdk/checksums': 3.1000.5
-      tslib: 2.8.1
-
   '@aws-sdk/middleware-host-header@3.972.10':
     dependencies:
       '@aws-sdk/types': 3.975.0
@@ -20714,7 +20677,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/middleware-sdk-s3@3.972.51':
+  '@aws-sdk/middleware-sdk-s3@3.972.85':
     dependencies:
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/signature-v4-multi-region': 3.996.51
@@ -20723,7 +20686,7 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/middleware-sdk-sqs@3.972.30':
+  '@aws-sdk/middleware-sdk-sqs@3.972.48':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/core': 3.38.1
@@ -20742,7 +20705,7 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
-  '@aws-sdk/middleware-websocket@3.972.59':
+  '@aws-sdk/middleware-websocket@3.972.62':
     dependencies:
       '@aws-sdk/core': 3.979.1
       '@aws-sdk/types': 3.975.0
@@ -25193,7 +25156,7 @@ snapshots:
       - bufferutil
       - utf-8-validate
 
-  '@mistralai/mistralai@3.3.0(@aws-sdk/client-s3@3.1068.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
+  '@mistralai/mistralai@3.3.0(@aws-sdk/client-s3@3.1161.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
     dependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
       '@opentelemetry/semantic-conventions': 1.43.0
@@ -25201,7 +25164,7 @@ snapshots:
       zod: 4.6.7
       zod-to-json-schema: 3.25.2(zod@4.6.7)
     optionalDependencies:
-      '@aws-sdk/client-s3': 3.1068.0
+      '@aws-sdk/client-s3': 3.1161.0
       '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       '@opentelemetry/api': 1.9.0
     transitivePeerDependencies:

From 250c9fb7c9ba3a37110c78d3f58bf83c19085b56 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 14:17:52 +0000
Subject: [PATCH 119/169] feat(deps): Bump axios from 1.20.0 to 1.21.0 (#26033)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [axios](https://github.com/axios/axios) from 1.20.0 to 1.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.21.0 — October 21, 2026</h2>
<p>This release adds response timing and opt-in UTF-8 Basic
authentication, improves request handling across runtimes, and changes
how header defaults are recognized.</p>
<h2>⚠️ Breaking Changes &amp; Deprecations</h2>
<ul>
<li><strong>Header Defaults:</strong> Only plain objects, null-prototype
maps, and compatible <code>AxiosHeaders</code> instances are treated as
common or method-specific defaults; literal headers such as
<code>Link</code> are now preserved. Applications using custom class
instances as defaults must convert them to plain maps, for example
<code>{ post: { ...customDefaults } }</code>, or compatible
<code>AxiosHeaders</code>. Otherwise, those instances become literal
header values, including on requests using other methods. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11156">#11156</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>Response Timing:</strong> Added
<code>response.duration</code>, in milliseconds, including on
<code>error.response</code> when present. Timing measures adapter
execution and excludes interceptors and transforms; streamed responses
stop timing when the stream becomes available. Axios replaces any
existing <code>duration</code> value supplied by a custom adapter.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11214">#11214</a></strong>)</li>
<li><strong>UTF-8 Basic Authentication:</strong> Added
<code>transitional.encodeBasicAuthUsername: true</code> to support
Unicode usernames in XHR and Fetch requests. The option defaults to
<code>false</code>, preserving existing authentication behavior;
applications opting in should supply the original Unicode username and
remove manual pre-encoding workarounds. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11159">#11159</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Fetch Compatibility:</strong> Restored requests in runtimes
such as Cloudflare Workers that reject the implicit <code>cache:
'default'</code>, while preserving explicit caller settings.
Response-size failures now retain their original
<code>ERR_BAD_RESPONSE</code> and request context when runtime wrappers
replace the underlying stream error. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11194">#11194</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11179">#11179</a></strong>)</li>
<li><strong>Runtime Consistency:</strong> Aligned encoded-byte size
accounting, multipart uploads, proxy routing, same-origin resolution,
parameter merging, and form serialization across adapters. Circular
parameters now reject with <code>ERR_BAD_OPTION_VALUE</code>, and sparse
or non-index numeric form fields serialize as keyed objects. With
<code>proxy: false</code>, native <code>proxyEnv</code> agents using
unsupported pool-management or TLS-session lifecycle overrides now
reject with <code>ERR_BAD_OPTION_VALUE</code>; construct those agents
without <code>proxyEnv</code>. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11242">#11242</a></strong>)</li>
<li><strong>Header Handling:</strong> Preserved headers named
<code>__proto__</code> using safe casing without changing the
<code>AxiosHeaders</code> instance prototype. Function matchers in
<code>has()</code>, <code>delete()</code>, and <code>clear()</code> now
receive the headers instance as <code>this</code>, matching their
declared contract. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11134">#11134</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11216">#11216</a></strong>)</li>
<li><strong>URL and Data URL Parsing:</strong> Accepted case-insensitive
supported URL schemes and Base64 markers, and corrected decoding of
percent-encoded Base64 data URLs. Node data URL allocation estimates
remain aligned with decoding so configured size limits apply before
allocation. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11138">#11138</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11163">#11163</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11294">#11294</a></strong>)</li>
<li><strong>Error Diagnostics:</strong> Preserved short reconstructed
request stacks and appended wrapped error stacks under <code>Caused
by:</code> so tooling that reads only <code>error.stack</code> retains
the original failure context. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11132">#11132</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11142">#11142</a></strong>)</li>
<li><strong>Interceptor Removal:</strong> Restored removal through
canonical numeric-string interceptor IDs, including after registry
compaction. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11139">#11139</a></strong>)</li>
<li><strong>Proxy TLS:</strong> HTTPS CONNECT tunnels now apply current
origin TLS options from an explicit <code>httpsAgent</code>, or from
<code>https.globalAgent</code> when no explicit agent is supplied. This
preserves process-wide custom CA settings through proxy tunnels.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11178">#11178</a></strong>)</li>
<li><strong>XHR Lifecycle:</strong> Used asynchronous Cookie Store reads
for XSRF tokens where supported, preserving cookie fallback, timeout
accounting, and cancellation. Upload and download progress listeners are
now removed on completion, failure, timeout, and cancellation.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11166">#11166</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11225">#11225</a></strong>)</li>
<li><strong>HTTP/2 Sessions:</strong> Stopped reusing sessions
immediately after GOAWAY and prevented draining sessions from scheduling
idle timers that could delay process exit. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11210">#11210</a></strong>)</li>
<li><strong>TypeScript Declarations:</strong> Exposed the
response-default marker as a public type to resolve <code>TS2527</code>
when consumers emit declarations involving unresolved response generics,
covering both ESM and CommonJS. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11125">#11125</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Configuration Performance:</strong> Reduced request
configuration merge overhead, particularly for requests with many
headers, while preserving merge semantics and prototype-pollution
guards. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11208">#11208</a></strong>)</li>
<li><strong>Same-Origin Checks:</strong> Removed obsolete Internet
Explorer detection without changing origin decisions in supported
environments. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11174">#11174</a></strong>)</li>
<li><strong>Dependencies:</strong> Updated <code>follow-redirects</code>
to 1.16.1 and refreshed development, documentation, test, and GitHub
Actions dependencies. Removed unused <code>dayjs</code> from the docs
package, root <code>chalk</code>, and <code>chai</code> from CJS module
tests. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11169">#11169</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11188">#11188</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11189">#11189</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11195">#11195</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11212">#11212</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11213">#11213</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11218">#11218</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11220">#11220</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11221">#11221</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11230">#11230</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11234">#11234</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11244">#11244</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11245">#11245</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11266">#11266</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11267">#11267</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11268">#11268</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11269">#11269</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11270">#11270</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11271">#11271</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11272">#11272</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11298">#11298</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11302">#11302</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11303">#11303</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11304">#11304</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11305">#11305</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11306">#11306</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11313">#11313</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11321">#11321</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11322">#11322</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11323">#11323</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11342">#11342</a></strong>)</li>
<li><strong>Documentation:</strong> Fixed interceptor test links,
updated README CDN examples to the published 1.20.0 bundle, and
corrected guidance on interceptor options and request lifecycle
ordering. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11228">#11228</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11149">#11149</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11335">#11335</a></strong>)</li>
<li><strong>Contributor Workflow:</strong> Consolidated agent
instructions in <code>AGENTS.md</code>, standardized PR labels, required
prerelease notes and validation evidence, and clarified that <code>npm
test</code> requires installed Playwright browsers. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11238">#11238</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11273">#11273</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11223">#11223</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11284">#11284</a></strong>)</li>
<li><strong>Sponsors and Support:</strong> Added HeroDevs, Code for
Japan, and Sweepico sponsor listings, refreshed sponsor data, and
documented extended security support for Axios v0. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11222">#11222</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11249">#11249</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11252">#11252</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11341">#11341</a></strong>)</li>
<li><strong>Proxy Regression Coverage:</strong> Added a long dotted
request-hostname test for <code>NO_PROXY</code> handling, extending
coverage of an existing denial-of-service fix. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11235">#11235</a></strong>)</li>
<li><strong>Release Preparation:</strong> Updated package version
metadata for 1.21.0. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11346">#11346</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>Welcome to our 24 new contributors. Thank you for helping improve
Axios:</p>
<ul>
<li><strong><a
href="https://github.com/lazerg"><code>@​lazerg</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11194">#11194</a></strong>)</li>
<li><strong><a
href="https://github.com/QIU-Guanzong"><code>@​QIU-Guanzong</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11228">#11228</a></strong>)</li>
<li><strong><a
href="https://github.com/Iams4kura"><code>@​Iams4kura</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11125">#11125</a></strong>)</li>
<li><strong><a
href="https://github.com/vjymisal0"><code>@​vjymisal0</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11179">#11179</a></strong>)</li>
<li><strong><a
href="https://github.com/jarrensj"><code>@​jarrensj</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11238">#11238</a></strong>)</li>
<li><strong><a
href="https://github.com/LineGu"><code>@​LineGu</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11132">#11132</a></strong>)</li>
<li><strong><a
href="https://github.com/luantaraschi"><code>@​luantaraschi</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11134">#11134</a></strong>)</li>
<li><strong><a
href="https://github.com/Cyberhet"><code>@​Cyberhet</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11284">#11284</a></strong>)</li>
<li><strong><a
href="https://github.com/nyxst4ck"><code>@​nyxst4ck</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11138">#11138</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.21.0 — October 21, 2026</h2>
<p>This release adds response timing and opt-in UTF-8 Basic
authentication, improves request handling across runtimes, and changes
how header defaults are recognized.</p>
<h2>⚠️ Breaking Changes &amp; Deprecations</h2>
<ul>
<li><strong>Header Defaults:</strong> Only plain objects, null-prototype
maps, and compatible <code>AxiosHeaders</code> instances are treated as
common or method-specific defaults; literal headers such as
<code>Link</code> are now preserved. Applications using custom class
instances as defaults must convert them to plain maps, for example
<code>{ post: { ...customDefaults } }</code>, or compatible
<code>AxiosHeaders</code>. Otherwise, those instances become literal
header values, including on requests using other methods. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11156">#11156</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>Response Timing:</strong> Added
<code>response.duration</code>, in milliseconds, including on
<code>error.response</code> when present. Timing measures adapter
execution and excludes interceptors and transforms; streamed responses
stop timing when the stream becomes available. Axios replaces any
existing <code>duration</code> value supplied by a custom adapter.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11214">#11214</a></strong>)</li>
<li><strong>UTF-8 Basic Authentication:</strong> Added
<code>transitional.encodeBasicAuthUsername: true</code> to support
Unicode usernames in XHR and Fetch requests. The option defaults to
<code>false</code>, preserving existing authentication behavior;
applications opting in should supply the original Unicode username and
remove manual pre-encoding workarounds. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11159">#11159</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Fetch Compatibility:</strong> Restored requests in runtimes
such as Cloudflare Workers that reject the implicit <code>cache:
'default'</code>, while preserving explicit caller settings.
Response-size failures now retain their original
<code>ERR_BAD_RESPONSE</code> and request context when runtime wrappers
replace the underlying stream error. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11194">#11194</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11179">#11179</a></strong>)</li>
<li><strong>Runtime Consistency:</strong> Aligned encoded-byte size
accounting, multipart uploads, proxy routing, same-origin resolution,
parameter merging, and form serialization across adapters. Circular
parameters now reject with <code>ERR_BAD_OPTION_VALUE</code>, and sparse
or non-index numeric form fields serialize as keyed objects. With
<code>proxy: false</code>, native <code>proxyEnv</code> agents using
unsupported pool-management or TLS-session lifecycle overrides now
reject with <code>ERR_BAD_OPTION_VALUE</code>; construct those agents
without <code>proxyEnv</code>. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11242">#11242</a></strong>)</li>
<li><strong>Header Handling:</strong> Preserved headers named
<strong><code>__proto__</code></strong> using safe casing without
changing the <code>AxiosHeaders</code> instance prototype. Function
matchers in <code>has()</code>, <code>delete()</code>, and
<code>clear()</code> now receive the headers instance as
<code>this</code>, matching their declared contract. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11134">#11134</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11216">#11216</a></strong>)</li>
<li><strong>URL and Data URL Parsing:</strong> Accepted case-insensitive
supported URL schemes and Base64 markers, and corrected decoding of
percent-encoded Base64 data URLs. Node data URL allocation estimates
remain aligned with decoding so configured size limits apply before
allocation. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11138">#11138</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11163">#11163</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11294">#11294</a></strong>)</li>
<li><strong>Error Diagnostics:</strong> Preserved short reconstructed
request stacks and appended wrapped error stacks under <code>Caused
by:</code> so tooling that reads only <code>error.stack</code> retains
the original failure context. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11132">#11132</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11142">#11142</a></strong>)</li>
<li><strong>Interceptor Removal:</strong> Restored removal through
canonical numeric-string interceptor IDs, including after registry
compaction. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11139">#11139</a></strong>)</li>
<li><strong>Proxy TLS:</strong> HTTPS CONNECT tunnels now apply current
origin TLS options from an explicit <code>httpsAgent</code>, or from
<code>https.globalAgent</code> when no explicit agent is supplied. This
preserves process-wide custom CA settings through proxy tunnels.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11178">#11178</a></strong>)</li>
<li><strong>XHR Lifecycle:</strong> Used asynchronous Cookie Store reads
for XSRF tokens where supported, preserving cookie fallback, timeout
accounting, and cancellation. Upload and download progress listeners are
now removed on completion, failure, timeout, and cancellation.
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11166">#11166</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11225">#11225</a></strong>)</li>
<li><strong>HTTP/2 Sessions:</strong> Stopped reusing sessions
immediately after GOAWAY and prevented draining sessions from scheduling
idle timers that could delay process exit. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11210">#11210</a></strong>)</li>
<li><strong>TypeScript Declarations:</strong> Exposed the
response-default marker as a public type to resolve <code>TS2527</code>
when consumers emit declarations involving unresolved response generics,
covering both ESM and CommonJS. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11125">#11125</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Configuration Performance:</strong> Reduced request
configuration merge overhead, particularly for requests with many
headers, while preserving merge semantics and prototype-pollution
guards. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11208">#11208</a></strong>)</li>
<li><strong>Same-Origin Checks:</strong> Removed obsolete Internet
Explorer detection without changing origin decisions in supported
environments. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11174">#11174</a></strong>)</li>
<li><strong>Dependencies:</strong> Updated <code>follow-redirects</code>
to 1.16.1 and refreshed development, documentation, test, and GitHub
Actions dependencies. Removed unused <code>dayjs</code> from the docs
package, root <code>chalk</code>, and <code>chai</code> from CJS module
tests. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11169">#11169</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11188">#11188</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11189">#11189</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11195">#11195</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11212">#11212</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11213">#11213</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11218">#11218</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11220">#11220</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11221">#11221</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11230">#11230</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11234">#11234</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11244">#11244</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11245">#11245</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11266">#11266</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11267">#11267</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11268">#11268</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11269">#11269</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11270">#11270</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11271">#11271</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11272">#11272</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11298">#11298</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11302">#11302</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11303">#11303</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11304">#11304</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11305">#11305</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11306">#11306</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11313">#11313</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11321">#11321</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11322">#11322</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11323">#11323</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11342">#11342</a></strong>)</li>
<li><strong>Documentation:</strong> Fixed interceptor test links,
updated README CDN examples to the published 1.20.0 bundle, and
corrected guidance on interceptor options and request lifecycle
ordering. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11228">#11228</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11149">#11149</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11335">#11335</a></strong>)</li>
<li><strong>Contributor Workflow:</strong> Consolidated agent
instructions in <code>AGENTS.md</code>, standardized PR labels, required
prerelease notes and validation evidence, and clarified that <code>npm
test</code> requires installed Playwright browsers. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11238">#11238</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11273">#11273</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11223">#11223</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11284">#11284</a></strong>)</li>
<li><strong>Sponsors and Support:</strong> Added HeroDevs, Code for
Japan, and Sweepico sponsor listings, refreshed sponsor data, and
documented extended security support for Axios v0. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11222">#11222</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11249">#11249</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11252">#11252</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/pull/11341">#11341</a></strong>)</li>
<li><strong>Proxy Regression Coverage:</strong> Added a long dotted
request-hostname test for <code>NO_PROXY</code> handling, extending
coverage of an existing denial-of-service fix. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11235">#11235</a></strong>)</li>
<li><strong>Release Preparation:</strong> Updated package version
metadata for 1.21.0. (<strong><a
href="https://redirect.github.com/axios/axios/pull/11346">#11346</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>Welcome to our 24 new contributors. Thank you for helping improve
Axios:</p>
<ul>
<li><strong><a
href="https://github.com/lazerg"><code>@​lazerg</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11194">#11194</a></strong>)</li>
<li><strong><a
href="https://github.com/QIU-Guanzong"><code>@​QIU-Guanzong</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11228">#11228</a></strong>)</li>
<li><strong><a
href="https://github.com/Iams4kura"><code>@​Iams4kura</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11125">#11125</a></strong>)</li>
<li><strong><a
href="https://github.com/vjymisal0"><code>@​vjymisal0</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11179">#11179</a></strong>)</li>
<li><strong><a
href="https://github.com/jarrensj"><code>@​jarrensj</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11238">#11238</a></strong>)</li>
<li><strong><a
href="https://github.com/LineGu"><code>@​LineGu</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11132">#11132</a></strong>)</li>
<li><strong><a
href="https://github.com/luantaraschi"><code>@​luantaraschi</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11134">#11134</a></strong>)</li>
<li><strong><a
href="https://github.com/Cyberhet"><code>@​Cyberhet</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11284">#11284</a></strong>)</li>
<li><strong><a
href="https://github.com/nyxst4ck"><code>@​nyxst4ck</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/pull/11138">#11138</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/aa54a5e1e0e50cd1a2561b854ae5490ff589d065"><code>aa54a5e</code></a>
docs: remove cancelled sponsors from README (<a
href="https://redirect.github.com/axios/axios/issues/11369">#11369</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e6b79d9cef796ca3a903bb83e51d4752b019fd67"><code>e6b79d9</code></a>
chore(release): prepare release 1.21.0 (<a
href="https://redirect.github.com/axios/axios/issues/11346">#11346</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/fceeb10997ea71778ad8bc9671ad53e9195a707c"><code>fceeb10</code></a>
chore(deps-dev): bump the development_dependencies group with 4 updates
(<a
href="https://redirect.github.com/axios/axios/issues/11342">#11342</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/7d15df3f4cff1be2f1ed397f98170aadef399071"><code>7d15df3</code></a>
docs: refresh sponsor data (<a
href="https://redirect.github.com/axios/axios/issues/11341">#11341</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/8d8e84401d38c2a9c62acd18b3df17478a0caf6b"><code>8d8e844</code></a>
docs: correct interceptor options and request lifecycle guide (<a
href="https://redirect.github.com/axios/axios/issues/11335">#11335</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/326843a3902d73c9f6af9bad7b55e2412566a251"><code>326843a</code></a>
test(no-proxy): cover the request-hostname path with a long dotted host
(<a
href="https://redirect.github.com/axios/axios/issues/11235">#11235</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e5195ecf405cf791b7ad2715156d6bc98b5f3928"><code>e5195ec</code></a>
feat(core): expose request duration on the response (<a
href="https://redirect.github.com/axios/axios/issues/11214">#11214</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/8d415e6af9cd50a8ae27331a53b4aaf9f7e24612"><code>8d415e6</code></a>
fix(headers): bind matcher callbacks to the headers instance (<a
href="https://redirect.github.com/axios/axios/issues/11216">#11216</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/b16dd7787807f7f15e5fb1a3e39b7d190c312b2e"><code>b16dd77</code></a>
fix(xhr): remove progress event listeners on request completion (<a
href="https://redirect.github.com/axios/axios/issues/11225">#11225</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/790b2ca8b6d8486dde3ce54cda20990ba91b0831"><code>790b2ca</code></a>
chore(deps): bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/axios/axios/issues/11323">#11323</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.20.0...v1.21.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.20.0&new-version=1.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev-packages/browser-integration-tests/package.json |  2 +-
 pnpm-lock.yaml                                      | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index 000d5840580e..7bddb5f9dd2c 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -64,7 +64,7 @@
     "@sentry/replay": "11.10.0",
     "@sentry/conventions": "0.30.0",
     "@supabase/supabase-js": "2.109.0",
-    "axios": "1.20.0",
+    "axios": "1.21.0",
     "babel-loader": "^10.1.1",
     "fflate": "0.8.3",
     "html-webpack-plugin": "^5.5.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 90644124f66e..1fc87835476f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -310,8 +310,8 @@ importers:
         specifier: 2.109.0
         version: 2.109.0
       axios:
-        specifier: 1.20.0
-        version: 1.20.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)
+        specifier: 1.21.0
+        version: 1.21.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)
       babel-loader:
         specifier: ^10.1.1
         version: 10.1.1(@babel/core@7.29.7(supports-color@10.0.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
@@ -10015,8 +10015,8 @@ packages:
   axios@1.18.1:
     resolution: {integrity: sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==}
 
-  axios@1.20.0:
-    resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==}
+  axios@1.21.0:
+    resolution: {integrity: sha512-YCzXMB53Q9PZBsh7yN7wtapit4WepwcHS2fP8QhGsBxSz5YtgYobV7GGlWlAJi+RxfU77GQTQi2DSLUma42EYA==}
 
   axobject-query@3.2.1:
     resolution: {integrity: sha512-jsyHu61e6N4Vbz/v18DHwWYKK0bSWLqn47eeDSKPB7m8tqMHF9YJ+mhIk2lVteyZrY8tnSj/jHOv4YiTCuCJgg==}
@@ -29626,7 +29626,7 @@ snapshots:
       - debug
       - supports-color
 
-  axios@1.20.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0):
+  axios@1.21.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0):
     dependencies:
       follow-redirects: 1.16.0(debug@4.4.3(supports-color@10.0.0))
       form-data: 4.0.6

From ad4c1ca73c416ca8753200f02721c72b96b67393 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:21:57 +0100
Subject: [PATCH 120/169] feat(deps): Bump proxy from 2.1.1 to 4.1.0 (#26029)

Bumps
[proxy](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy)
from 2.1.1 to 4.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/TooTallNate/proxy-agents/releases">proxy's
releases</a>.</em></p>
<blockquote>
<h2>proxy@4.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>84e85ed: Add <code>onProxyAuth</code> callback and
<code>negotiate</code> option for Kerberos/SPNEGO proxy
authentication</p>
<ul>
<li>Extract shared Negotiate/SPNEGO auth logic into new
<code>proxy-agent-negotiate</code> package</li>
<li>Added optional <code>onProxyAuth</code> async callback to
<code>HttpsProxyAgent</code> and <code>HttpProxyAgent</code>
options</li>
<li>When the proxy responds with 407 Proxy-Authentication Required, the
callback is invoked with the response and auth scheme</li>
<li>The callback returns headers (e.g. <code>Proxy-Authorization</code>)
to retry the request with</li>
<li>Added <code>negotiate: true</code> option that uses the
<code>kerberos</code> package for automatic Negotiate/SPNEGO auth</li>
<li>Added <code>kerberos</code> as an optional peer dependency of
<code>proxy-agent-negotiate</code></li>
<li>Extended the <code>proxy</code> test package to support
<code>authenticate: 'negotiate'</code> mode for mock testing</li>
</ul>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>31d7ef1: Reject URLs longer than 4096 characters with HTTP 414 to
prevent potential DoS via excessively long inputs</li>
<li>0f40077: Replace <code>basic-auth-parser</code> dependency with
built-in implementation</li>
</ul>
<h2>proxy@4.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>7d12b51: Set minimum Node.js version to 20</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>7ca27d0: Simplify package.json exports to remove unnecessary imports
restriction</li>
</ul>
<h2>proxy@3.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>9c92c09: Convert to ESM. All packages now use
<code>&quot;type&quot;: &quot;module&quot;</code> and compile to ESM
output instead of CommonJS.</li>
</ul>
<h2>proxy@2.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>28104d2: Add bin for CLI</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy/CHANGELOG.md">proxy's
changelog</a>.</em></p>
<blockquote>
<h2>4.1.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>84e85ed: Add <code>onProxyAuth</code> callback and
<code>negotiate</code> option for Kerberos/SPNEGO proxy
authentication</p>
<ul>
<li>Extract shared Negotiate/SPNEGO auth logic into new
<code>proxy-agent-negotiate</code> package</li>
<li>Added optional <code>onProxyAuth</code> async callback to
<code>HttpsProxyAgent</code> and <code>HttpProxyAgent</code>
options</li>
<li>When the proxy responds with 407 Proxy-Authentication Required, the
callback is invoked with the response and auth scheme</li>
<li>The callback returns headers (e.g. <code>Proxy-Authorization</code>)
to retry the request with</li>
<li>Added <code>negotiate: true</code> option that uses the
<code>kerberos</code> package for automatic Negotiate/SPNEGO auth</li>
<li>Added <code>kerberos</code> as an optional peer dependency of
<code>proxy-agent-negotiate</code></li>
<li>Extended the <code>proxy</code> test package to support
<code>authenticate: 'negotiate'</code> mode for mock testing</li>
</ul>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>31d7ef1: Reject URLs longer than 4096 characters with HTTP 414 to
prevent potential DoS via excessively long inputs</li>
<li>0f40077: Replace <code>basic-auth-parser</code> dependency with
built-in implementation</li>
</ul>
<h2>4.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>7d12b51: Set minimum Node.js version to 20</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>7ca27d0: Simplify package.json exports to remove unnecessary imports
restriction</li>
</ul>
<h2>3.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>9c92c09: Convert to ESM. All packages now use
<code>&quot;type&quot;: &quot;module&quot;</code> and compile to ESM
output instead of CommonJS.</li>
</ul>
<h2>2.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>28104d2: Add bin for CLI</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/065d1ffc2c4d60a33091b0607d8706ebc4bae6b8"><code>065d1ff</code></a>
Version Packages (<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/416">#416</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/84e85ed393bc78fcad1d50cffc4e2640f3b933a0"><code>84e85ed</code></a>
feat: add onProxyAuth callback and Negotiate/Kerberos proxy auth support
(<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/420">#420</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/0f40077ee34f0adcf576f84e771ea3265fe40747"><code>0f40077</code></a>
fix(proxy): replace basic-auth-parser with built-in implementation (<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/418">#418</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/31d7ef1507deec9072a869174486bb43a4aa3003"><code>31d7ef1</code></a>
fix(proxy): reject excessively long URLs to prevent DoS (<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/417">#417</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/af317e080c20d64fa76f93c741026ca7eaa9a31e"><code>af317e0</code></a>
Version Packages (<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/397">#397</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/7ca27d0d47fd3feba17a61021d7bf07896433928"><code>7ca27d0</code></a>
Simplify package.json exports to remove unnecessary imports restriction
(<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/408">#408</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/7d12b51fab7ec6853091e247a6812ac0f6b9aeaa"><code>7d12b51</code></a>
Set minimum Node.js version to 20 and add Node 24.x to CI matrix</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/8dcdac8ad2b8318948c4c9364d3b95acca74f355"><code>8dcdac8</code></a>
Version Packages (<a
href="https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy/issues/395">#395</a>)</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/5d3f71a2d021ec07b2b9156c543423e47053218c"><code>5d3f71a</code></a>
Use pnpm catalog: for shared dependencies</li>
<li><a
href="https://github.com/TooTallNate/proxy-agents/commit/e30ec52abda549c2daab833b5ca0d0b419c307c9"><code>e30ec52</code></a>
Replace deprecated url.parse() with WHATWG URL API in proxy package</li>
<li>Additional commits viewable in <a
href="https://github.com/TooTallNate/proxy-agents/commits/proxy@4.1.0/packages/proxy">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for proxy since your current version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .../node-integration-tests/package.json       |  2 +-
 pnpm-lock.yaml                                | 19 +++++++------------
 2 files changed, 8 insertions(+), 13 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 244e050b975e..e1fdfc360199 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -101,7 +101,7 @@
     "pino-next": "npm:pino@^9.12.0",
     "postgres": "^3.4.7",
     "prisma": "6.15.0",
-    "proxy": "^2.1.1",
+    "proxy": "^4.1.0",
     "redis-4": "npm:redis@^4.6.14",
     "redis-5": "npm:redis@~5.11.0",
     "redis-5-tracing": "npm:redis@^5.12.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1fc87835476f..42ab4f2a167b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -826,8 +826,8 @@ importers:
         specifier: 6.15.0
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
       proxy:
-        specifier: ^2.1.1
-        version: 2.1.1(supports-color@10.0.0)
+        specifier: ^4.1.0
+        version: 4.1.0(supports-color@10.0.0)
       redis-4:
         specifier: npm:redis@^4.6.14
         version: redis@4.6.14
@@ -10177,9 +10177,6 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  basic-auth-parser@0.0.2-1:
-    resolution: {integrity: sha512-GFj8iVxo9onSU6BnnQvVwqvxh60UcSHJEDnIk3z4B6iOjsKSmqe+ibW0Rsz7YO7IE1HG3D3tqCNIidP46SZVdQ==}
-
   batch@0.6.1:
     resolution: {integrity: sha512-x+VAiMRL6UPkx+kudNvxTl6hB2XNNCG2r+7wixVfIYwu/2HKRXimwQyaumLjMveWvT2Hkd/cAJw+QBMfJ/EKVw==}
 
@@ -16496,9 +16493,10 @@ packages:
     resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
     engines: {node: '>=10'}
 
-  proxy@2.1.1:
-    resolution: {integrity: sha512-nLgd7zdUAOpB3ZO/xCkU8gy74UER7P0aihU8DkUsDS5ZoFwVCX7u8dy+cv5tVK8UaB/yminU1GiLWE26TKPYpg==}
-    engines: {node: '>= 14'}
+  proxy@4.1.0:
+    resolution: {integrity: sha512-X3gqRNkp5dLWQolWksIfFSltI0ls8oQ01+tckxnPoz3bQ5+OUsdE7bwX/i/Q3TDEG4gx2PQjc3D07dIx90CQdg==}
+    engines: {node: '>= 20'}
+    hasBin: true
 
   prr@1.0.1:
     resolution: {integrity: sha512-yPw4Sng1gWghHQWj0B3ZggWUm4qVbPwPFcRG8KyxiU7J2OHFSoEHKS+EZ3fv5l1t9CyCiop6l/ZYeWbrgoQejw==}
@@ -29851,8 +29849,6 @@ snapshots:
 
   baseline-browser-mapping@2.11.29: {}
 
-  basic-auth-parser@0.0.2-1: {}
-
   batch@0.6.1: {}
 
   before-after-hook@2.2.3: {}
@@ -38143,10 +38139,9 @@ snapshots:
 
   proxy-from-env@2.1.0: {}
 
-  proxy@2.1.1(supports-color@10.0.0):
+  proxy@4.1.0(supports-color@10.0.0):
     dependencies:
       args: 5.0.3
-      basic-auth-parser: 0.0.2-1
       debug: 4.4.3(supports-color@10.0.0)
     transitivePeerDependencies:
       - supports-color

From 4846a85fc329baa78a2137acec5e710697cdd52e Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Tue, 3 Nov 2026 15:22:23 +0100
Subject: [PATCH 121/169] fix(deps): Bump tar from 7.5.11 to 7.5.22 (#26025)

**Why:** tar 7.5.11 has several open advisories, including one critical
(GHSA-23hp-3jrh-7fpw) and one high (GHSA-r292-9mhp-454m). It comes in
through `@vercel/nft` and `@mapbox/node-pre-gyp`, which already allow
`^7.4.0`, so this only changes the lockfile. Dependabot alert:
https://github.com/getsentry/sentry-javascript/security/dependabot/3244

**Unsure about:** `tar@6.2.1` is still in the lockfile through the
Angular 14 build tooling in `@sentry/angular`'s devDependencies. There
is no patched 6.x, so the alerts may stay open until that tooling is
upgraded.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 pnpm-lock.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 42ab4f2a167b..212994f15e4b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -17899,8 +17899,8 @@ packages:
     engines: {node: '>=10'}
     deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
 
-  tar@7.5.11:
-    resolution: {integrity: sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==}
+  tar@7.5.22:
+    resolution: {integrity: sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==}
     engines: {node: '>=18'}
 
   tarn@3.0.2:
@@ -25124,7 +25124,7 @@ snapshots:
       node-fetch: 2.7.0(encoding@0.1.13)
       nopt: 8.1.0
       semver: 7.8.5
-      tar: 7.5.11
+      tar: 7.5.22
     transitivePeerDependencies:
       - encoding
       - supports-color
@@ -25137,7 +25137,7 @@ snapshots:
       node-fetch: 2.7.0(encoding@0.1.13)
       nopt: 8.1.0
       semver: 7.8.5
-      tar: 7.5.11
+      tar: 7.5.22
     transitivePeerDependencies:
       - encoding
       - supports-color
@@ -39916,7 +39916,7 @@ snapshots:
       mkdirp: 1.0.4
       yallist: 4.0.0
 
-  tar@7.5.11:
+  tar@7.5.22:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0

From 74e9200c4d687667ba48b5722fef5e5ebdb6286e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:23:54 +0100
Subject: [PATCH 122/169] chore(deps-dev): Bump fake-indexeddb from 6.2.5 to
 6.2.7 (#26034)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [fake-indexeddb](https://github.com/dumbmatter/fakeIndexedDB) from
6.2.5 to 6.2.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dumbmatter/fakeIndexedDB/releases">fake-indexeddb's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.7</h2>
<ul>
<li>Improve performance of <code>put</code> and <code>delete</code> for
object stores with indexes (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/172">#172</a>
by <a
href="https://github.com/jameskfry"><code>@​jameskfry</code></a>)</li>
</ul>
<h2>v6.2.6</h2>
<ul>
<li>
<p>Improve performance (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/169">#169</a>
by <a
href="https://github.com/jlucaso1"><code>@​jlucaso1</code></a>)</p>
</li>
<li>
<p>Fixed memory leak of finished transasctions (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/171">#171</a>
by <a
href="https://github.com/nolanlawson"><code>@​nolanlawson</code></a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dumbmatter/fakeIndexedDB/blob/master/CHANGELOG.md">fake-indexeddb's
changelog</a>.</em></p>
<blockquote>
<h1>6.2.7 (2026-10-29)</h1>
<ul>
<li>Improve performance of <code>put</code> and <code>delete</code> for
object stores with indexes (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/172">#172</a>
by <a
href="https://github.com/jameskfry"><code>@​jameskfry</code></a>)</li>
</ul>
<h1>6.2.6 (2026-10-16)</h1>
<ul>
<li>
<p>Improve performance (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/169">#169</a>
by <a
href="https://github.com/jlucaso1"><code>@​jlucaso1</code></a>)</p>
</li>
<li>
<p>Fixed memory leak of finished transasctions (<a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/171">#171</a>
by <a
href="https://github.com/nolanlawson"><code>@​nolanlawson</code></a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/09e7f7684193e9c3a206054200f6f991595cb6ec"><code>09e7f76</code></a>
6.2.7</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/e1b6b484df2b4b1a3f369f95a3485ffd9b28cdfa"><code>e1b6b48</code></a>
Changelog</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/f7cf6d891724f30d01f01a254499e3a42f8df08d"><code>f7cf6d8</code></a>
Merge pull request <a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/172">#172</a>
from jameskfry/perf/delete-index-records</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/0f4e49697891ec27f410a113af03b87a44fb8339"><code>0f4e496</code></a>
Keep the single-key index path allocation-free</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/f0f8bc0cddd1abd56ba507bd4644981eb23f761a"><code>f0f8bc0</code></a>
Delete index records by index key instead of scanning the whole
index</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/8881007614a7c04e1766f0b802992a5dfacfafd7"><code>8881007</code></a>
Update for 6.2.6 because the version script didn't automatically run for
me s...</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/e4b7e016cf218f429db4819b0ff9a04741f15a25"><code>e4b7e01</code></a>
6.2.6</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/e39bf45880edd4bdb0d6d3740696e173aa9da7fd"><code>e39bf45</code></a>
Changelog</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/d2eb002fadb49d25ed154ac646841f7375c2992d"><code>d2eb002</code></a>
Merge pull request <a
href="https://redirect.github.com/dumbmatter/fakeIndexedDB/issues/171">#171</a>
from nolanlawson/nolan/mem-leak</li>
<li><a
href="https://github.com/dumbmatter/fakeIndexedDB/commit/d8a47c5eee22005ed36f72867222aefe13f1ee4a"><code>d8a47c5</code></a>
fix race conditions in the test</li>
<li>Additional commits viewable in <a
href="https://github.com/dumbmatter/fakeIndexedDB/compare/v6.2.5...v6.2.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fake-indexeddb&package-manager=npm_and_yarn&previous-version=6.2.5&new-version=6.2.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 packages/browser/package.json |  2 +-
 pnpm-lock.yaml                | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/packages/browser/package.json b/packages/browser/package.json
index 70c02c4dda24..799b7f71354a 100644
--- a/packages/browser/package.json
+++ b/packages/browser/package.json
@@ -48,7 +48,7 @@
   "devDependencies": {
     "@sentry-internal/integration-shims": "11.10.0",
     "@sentry-internal/rollup-utils": "11.10.0",
-    "fake-indexeddb": "^6.2.5"
+    "fake-indexeddb": "^6.2.7"
   },
   "scripts": {
     "build": "run-p build:transpile build:bundle build:types",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 212994f15e4b..381f5cbc06d0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1110,8 +1110,8 @@ importers:
         specifier: 11.10.0
         version: link:../../dev-packages/rollup-utils
       fake-indexeddb:
-        specifier: ^6.2.5
-        version: 6.2.5
+        specifier: ^6.2.7
+        version: 6.2.7
 
   packages/browser-utils:
     dependencies:
@@ -12230,8 +12230,8 @@ packages:
   externality@1.0.2:
     resolution: {integrity: sha512-LyExtJWKxtgVzmgtEHyQtLFpw1KFhQphF9nTG8TpAIVkiI/xQ3FJh75tRFLYl4hkn7BNIIdLJInuDAavX35pMw==}
 
-  fake-indexeddb@6.2.5:
-    resolution: {integrity: sha512-CGnyrvbhPlWYMngksqrSSUT1BAVP49dZocrHuK0SvtR0D5TMs5wP0o3j7jexDJW01KSadjBp1M/71o/KR3nD1w==}
+  fake-indexeddb@6.2.7:
+    resolution: {integrity: sha512-g0ghQ+BmU3CSZaHup5FigEAAtCmtNyxkrmID7OAeK2qONHghw1aQ2l2T1RxmfhP1H1tEXVRWArUTGVCk5832ww==}
     engines: {node: '>=18'}
 
   fast-check@3.23.2:
@@ -32332,7 +32332,7 @@ snapshots:
       pathe: 1.1.2
       ufo: 1.6.4
 
-  fake-indexeddb@6.2.5: {}
+  fake-indexeddb@6.2.7: {}
 
   fast-check@3.23.2:
     dependencies:

From 18fdceb7568f9dea3c18393f5431d6357984ef2a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:37:47 +0100
Subject: [PATCH 123/169] feat(deps): Bump yargs from 16.2.0 to 18.2.0 (#26031)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [yargs](https://github.com/yargs/yargs) from 16.2.0 to 18.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/yargs/yargs/releases">yargs's
releases</a>.</em></p>
<blockquote>
<h2>yargs yargs-v16.2.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deno:</strong> force release of deno (<a
href="https://redirect.github.com/yargs/yargs/issues/1923">#1923</a>)
(<a
href="https://www.github.com/yargs/yargs/commit/26efe45763945fce9d045d6c44da1e6897d3f7a8">26efe45</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/yargs/yargs/blob/main/CHANGELOG.md">yargs's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/yargs/yargs/compare/v18.1.0...v18.2.0">18.2.0</a>
(2026-09-20)</h2>
<h3>Features</h3>
<ul>
<li>support creating completions for fish shell (<a
href="https://redirect.github.com/yargs/yargs/issues/2568">#2568</a>)
(<a
href="https://github.com/yargs/yargs/commit/34d833aab18553aedee4b6cf5c1ad752eb8b8427">34d833a</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>completion:</strong> remove spurious single-quote in zsh
loadautofunc detection (<a
href="https://redirect.github.com/yargs/yargs/issues/2548">#2548</a>)
(<a
href="https://github.com/yargs/yargs/commit/224e285dac298fe3ef6e86a098f780c78e402d91">224e285</a>)</li>
</ul>
<h2><a
href="https://github.com/yargs/yargs/compare/v18.0.0...v18.1.0">18.1.0</a>
(2026-07-26)</h2>
<h3>Features</h3>
<ul>
<li>ignore bun when getting bin name (<a
href="https://github.com/yargs/yargs/commit/b77831c13c6abc9f896cac5e3ff1effe844d8cbe">b77831c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>lang:</strong> 'count' for de locale (<a
href="https://redirect.github.com/yargs/yargs/issues/2476">#2476</a>)
(<a
href="https://github.com/yargs/yargs/commit/971e351705f0fbc5566c6ed1dfd707fa65e11c0d">971e351</a>)</li>
<li>local prototype pollution vulnerability in apply-extends (<a
href="https://github.com/yargs/yargs/commit/437f3a4e0f4166e1f1a3ce023b0331159582746d">437f3a4</a>)</li>
<li><strong>locale:</strong> add Georgian translation (<a
href="https://redirect.github.com/yargs/yargs/issues/2474">#2474</a>)
(<a
href="https://github.com/yargs/yargs/commit/086aeaa7d6793e7f369aa0aaa3e4f962ad878469">086aeaa</a>)</li>
</ul>
<h2><a
href="https://github.com/yargs/yargs/compare/v17.7.2...v17.7.3">17.7.3</a>
(2026-06-19)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix: use entry point with file extension for anything that supports
exports (<a
href="https://redirect.github.com/yargs/yargs/issues/2514">#2514</a>)
(<a
href="https://github.com/yargs/yargs/commit/c7597e34a0ff27b4c2f3fdf6f3e1c137fe2212ed">c7597e3</a>)</li>
</ul>
<h2><a
href="https://github.com/yargs/yargs/compare/v16.2.0...v16.2.2">16.2.2</a>
(2026-06-19)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix: use entry point with .cjs file extension for yargs export (<a
href="https://redirect.github.com/yargs/yargs/issues/2546">#2546</a>)
(<a
href="https://github.com/yargs/yargs/commit/6feb81902ee4fa2fded5554d299b86aabd5bd5d2">6feb819</a>)</li>
</ul>
<h2><a
href="https://github.com/yargs/yargs/compare/v17.7.2...v18.0.0">18.0.0</a>
(2025-05-26)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>command names are not derived from modules passed to
<code>command</code>.</li>
<li>singleton usage of yargs yargs.foo, yargs().argv, has been
removed.</li>
<li>minimum node.js versions now <code>^20.19.0 || ^22.12.0 ||
&gt;=23</code>.</li>
<li>yargs is now ESM first</li>
</ul>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yargs/yargs/commit/e49b60aa1ab2bfe061a9ecd5d61f4c5130fe3e14"><code>e49b60a</code></a>
chore(main): release 18.2.0 (<a
href="https://redirect.github.com/yargs/yargs/issues/2569">#2569</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/3ed7095aa8a4e828d4f9f1ae09bda7a75c23d143"><code>3ed7095</code></a>
Set up staged trusted publishing, and remove stale deno workflow (<a
href="https://redirect.github.com/yargs/yargs/issues/2591">#2591</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/224e285dac298fe3ef6e86a098f780c78e402d91"><code>224e285</code></a>
fix(completion): remove spurious single-quote in zsh loadautofunc
detection (...</li>
<li><a
href="https://github.com/yargs/yargs/commit/fb9c05598a9bda583333c28c4ae85ab66e6bcb01"><code>fb9c055</code></a>
Add SECURITY.md</li>
<li><a
href="https://github.com/yargs/yargs/commit/2a4378bdc2eac9cf7d0cdfe0a52b1b25f779806a"><code>2a4378b</code></a>
Add FUNDING.yml with funding sources</li>
<li><a
href="https://github.com/yargs/yargs/commit/34d833aab18553aedee4b6cf5c1ad752eb8b8427"><code>34d833a</code></a>
feat: support creating completions for fish shell (<a
href="https://redirect.github.com/yargs/yargs/issues/2568">#2568</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/3a49608514b805393a3a2e5d00f39cdda9500f63"><code>3a49608</code></a>
Remove copy-pasted email address (<a
href="https://redirect.github.com/yargs/yargs/issues/2566">#2566</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/8878a894111e3fe7c98d84af546c0f34fa017492"><code>8878a89</code></a>
chore(main): release 18.1.0 (<a
href="https://redirect.github.com/yargs/yargs/issues/2475">#2475</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/db916b4154271e4cbbd2c60618fab90bdc1dbac2"><code>db916b4</code></a>
chore: add workflow_dispatch for release-please (<a
href="https://redirect.github.com/yargs/yargs/issues/2564">#2564</a>)</li>
<li><a
href="https://github.com/yargs/yargs/commit/4153e0f097aeaf43a71a2530db6dda51dff2c544"><code>4153e0f</code></a>
chore: improve build robustness (<a
href="https://redirect.github.com/yargs/yargs/issues/2554">#2554</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/yargs/yargs/compare/v16.2.0...v18.2.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for yargs since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yargs&package-manager=npm_and_yarn&previous-version=16.2.0&new-version=18.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andrei Borza <andrei.borza@sentry.io>
---
 .../node-integration-tests/package.json       |  2 +-
 .../suites/modules/test.ts                    |  4 +-
 packages/remix/package.json                   |  2 +-
 pnpm-lock.yaml                                | 37 +++++++++++++++++--
 4 files changed, 37 insertions(+), 8 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index e1fdfc360199..9ce0c955a796 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -112,7 +112,7 @@
     "valibot": "1.5.0",
     "winston": "^3.17.0",
     "ws": "^8.20.1",
-    "yargs": "^16.2.0"
+    "yargs": "^18.2.0"
   },
   "devDependencies": {
     "@hapi/boom": "^10.0.1",
diff --git a/dev-packages/node-integration-tests/suites/modules/test.ts b/dev-packages/node-integration-tests/suites/modules/test.ts
index 57c221f9f7f0..5e6b65cc8672 100644
--- a/dev-packages/node-integration-tests/suites/modules/test.ts
+++ b/dev-packages/node-integration-tests/suites/modules/test.ts
@@ -19,7 +19,7 @@ describe('modulesIntegration', () => {
             express: expect.stringMatching(/^4\.\d+\.\d+$/),
             // this comes from package.json
             '@sentry/node': SDK_VERSION,
-            yargs: '^16.2.0',
+            yargs: '^18.2.0',
           },
         },
       })
@@ -78,7 +78,7 @@ describe('modulesIntegration', () => {
             // this comes from package.json
             express: expect.stringMatching(/^\^4\.\d+\.\d+$/),
             '@sentry/node': SDK_VERSION,
-            yargs: '^16.2.0',
+            yargs: '^18.2.0',
           },
         },
       })
diff --git a/packages/remix/package.json b/packages/remix/package.json
index 46074ceca1d9..f9dad729c312 100644
--- a/packages/remix/package.json
+++ b/packages/remix/package.json
@@ -85,7 +85,7 @@
     "@sentry/server-runtime-injection": "11.10.0",
     "@sentry/server-utils": "11.10.0",
     "sentry": "^0.44.0",
-    "yargs": "^17.6.0"
+    "yargs": "^18.2.0"
   },
   "devDependencies": {
     "@remix-run/node": "^2.17.5",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 381f5cbc06d0..13c82f8de53e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -859,8 +859,8 @@ importers:
         specifier: ^8.20.1
         version: 8.21.3
       yargs:
-        specifier: ^16.2.0
-        version: 16.2.0
+        specifier: ^18.2.0
+        version: 18.2.0
     devDependencies:
       '@hapi/boom':
         specifier: ^10.0.1
@@ -2042,8 +2042,8 @@ importers:
         specifier: ^0.44.0
         version: 0.44.0
       yargs:
-        specifier: ^17.6.0
-        version: 17.7.3
+        specifier: ^18.2.0
+        version: 18.2.0
     devDependencies:
       '@remix-run/node':
         specifier: ^2.17.5
@@ -10640,6 +10640,10 @@ packages:
     resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
     engines: {node: '>=12'}
 
+  cliui@9.0.1:
+    resolution: {integrity: sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w==}
+    engines: {node: '>=20'}
+
   clone-deep@4.0.1:
     resolution: {integrity: sha512-neHB9xuzh/wk0dIHweyAXv2aPGZIVk3pLMe+/RNzINf17fe0OG96QroktYAUm7SM1PBnzTabaLboqqxDyMU+SQ==}
     engines: {node: '>=6'}
@@ -19584,6 +19588,10 @@ packages:
     resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
     engines: {node: '>=12'}
 
+  yargs-parser@22.0.0:
+    resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
   yargs@16.2.0:
     resolution: {integrity: sha512-D1mvvtDG0L5ft/jGWkLpG1+m0eQxOfaBvTNELraWj22wSVUMWxZUvYgJYcKh6jGGIkJFhH4IZPQhR4TKpc8mBw==}
     engines: {node: '>=10'}
@@ -19600,6 +19608,10 @@ packages:
     resolution: {integrity: sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==}
     engines: {node: '>=12'}
 
+  yargs@18.2.0:
+    resolution: {integrity: sha512-9OpKOLeaoNFecEp7P6iYbzze/5CqWoH7N3SMs/6y1XF4nMvFMspEGZzJ6uFi9MmQwXhyzqYoSEKO3tvA3Z/o2w==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
   yauzl@3.2.1:
     resolution: {integrity: sha512-k1isifdbpNSFEHFJ1ZY4YDewv0IH9FR61lDetaRMD3j2ae3bIXGV+7c+LHCqtQGofSd8PIyV4X6+dHMAnSr60A==}
     engines: {node: '>=12'}
@@ -30497,6 +30509,12 @@ snapshots:
       strip-ansi: 6.0.1
       wrap-ansi: 7.0.0
 
+  cliui@9.0.1:
+    dependencies:
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+      wrap-ansi: 9.0.2
+
   clone-deep@4.0.1:
     dependencies:
       is-plain-object: 2.0.4
@@ -41857,6 +41875,8 @@ snapshots:
 
   yargs-parser@21.1.1: {}
 
+  yargs-parser@22.0.0: {}
+
   yargs@16.2.0:
     dependencies:
       cliui: 7.0.4
@@ -41897,6 +41917,15 @@ snapshots:
       y18n: 5.0.8
       yargs-parser: 21.1.1
 
+  yargs@18.2.0:
+    dependencies:
+      cliui: 9.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      string-width: 8.3.0
+      y18n: 5.0.8
+      yargs-parser: 22.0.0
+
   yauzl@3.2.1:
     dependencies:
       buffer-crc32: 0.2.13

From 69269a8ddcc9ee33a544c5ea385f2fd7acbe5c6b Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 15:46:25 +0100
Subject: [PATCH 124/169] perf(ci): Split Next.js application-key tests by
 environment (#26040)

**Why:** The application-key exclusion variant is a recurring CI tail
because production and development run sequentially. Running them
independently shortens that path.

Co-authored-by: OpenAI Codex <codex@openai.com>
---
 .../e2e-tests/test-applications/nextjs-16/package.json   | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
index aa9e628b0efd..d8e485e2ce6a 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
@@ -74,8 +74,13 @@
       },
       {
         "build-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:build",
-        "label": "nextjs-16 (exclude application key dependencies)",
-        "assert-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:assert"
+        "label": "nextjs-16 (exclude application key dependencies, production)",
+        "assert-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:prod"
+      },
+      {
+        "build-command": "pnpm install",
+        "label": "nextjs-16 (exclude application key dependencies, development)",
+        "assert-command": "NEXT_PUBLIC_EXCLUDE_APPLICATION_KEY_DEPENDENCIES=1 pnpm test:dev"
       },
       {
         "build-command": "pnpm test:build-webpack",

From b7eb5a2c7691fe5fd4ddfa296679fe36df779d68 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:47:28 +0100
Subject: [PATCH 125/169] feat(deps): Bump vite from 8.3.1 to 8.3.5 (#26045)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.1 to 8.3.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.5</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> handle missing chunk import maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23777">#23777</a>)
(<a
href="https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229">8d7623d</a>)</li>
<li><strong>build:</strong> include preload dependencies to chunk import
map hashing (<a
href="https://redirect.github.com/vitejs/vite/issues/23793">#23793</a>)
(<a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9">4d16e7c</a>)</li>
<li><strong>bundled-dev:</strong> apply <code>server.origin</code> to
asset URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23683">#23683</a>)
(<a
href="https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5">52ba877</a>)</li>
<li><strong>bundled-dev:</strong> declare utf-8 charset in fallback page
(<a
href="https://redirect.github.com/vitejs/vite/issues/23846">#23846</a>)
(<a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6">197daf6</a>)</li>
<li><strong>bundled-dev:</strong> ignore build.chunkImportMap (<a
href="https://redirect.github.com/vitejs/vite/issues/23685">#23685</a>)
(<a
href="https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07">cfe917d</a>)</li>
<li><strong>bundled-dev:</strong> include user
<code>import.meta.env.*</code> defines in the
<code>import.meta.env</code> object (<a
href="https://redirect.github.com/vitejs/vite/issues/23713">#23713</a>)
(<a
href="https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25">6019aa7</a>)</li>
<li><strong>bundled-dev:</strong> map forwarded error stacks through the
bundle source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23741">#23741</a>)
(<a
href="https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18">11fe1e4</a>)</li>
<li><strong>bundled-dev:</strong> normalize served output files (<a
href="https://redirect.github.com/vitejs/vite/issues/23684">#23684</a>)
(<a
href="https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3">df4e02c</a>)</li>
<li><strong>bundled-dev:</strong> stop hmr propagation at modules that
are no longer imported (<a
href="https://redirect.github.com/vitejs/vite/issues/23839">#23839</a>)
(<a
href="https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212">7471e8c</a>)</li>
<li><strong>css:</strong> don't fail on a literal <code>%</code> in
<code>url()</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23676">#23676</a>)
(<a
href="https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261">50b382d</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23731">#23731</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29">cf80aa5</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23826">#23826</a>)
(<a
href="https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9">77d8373</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23733">#23733</a>)
(<a
href="https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48">43f0d05</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23827">#23827</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab">c2e0418</a>)</li>
<li><strong>optimizer:</strong> fall back to yarn.lock for lockfile hash
(<a
href="https://redirect.github.com/vitejs/vite/issues/23667">#23667</a>)
(<a
href="https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e">f206096</a>)</li>
<li><strong>optimizer:</strong> scan <code>oxc.jsxInject</code> imports
(<a
href="https://redirect.github.com/vitejs/vite/issues/23758">#23758</a>)
(<a
href="https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714">38f3cb4</a>)</li>
<li><strong>optimizer:</strong> skip patches dir check for yarn.lock
fallback (<a
href="https://redirect.github.com/vitejs/vite/issues/23725">#23725</a>)
(<a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa">8e890e1</a>)</li>
<li><strong>optimizer:</strong> skip patches dir hash for nub lockfile
(<a
href="https://redirect.github.com/vitejs/vite/issues/23761">#23761</a>)
(<a
href="https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486">a7d5696</a>)</li>
<li><strong>resolve:</strong> support subpath imports with multiple
<code>#</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23631">#23631</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1">0d86b34</a>)</li>
<li><strong>resolve:</strong> update resolve.exports to 2.0.4 (<a
href="https://redirect.github.com/vitejs/vite/issues/23739">#23739</a>)
(<a
href="https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5">4ea708a</a>)</li>
<li><strong>server:</strong> handle socket errors on upgrade requests
not taken by the HMR server (<a
href="https://redirect.github.com/vitejs/vite/issues/23728">#23728</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5">c2c9ef4</a>)</li>
<li><strong>server:</strong> only strip base when path matches a full
segment (<a
href="https://redirect.github.com/vitejs/vite/issues/23641">#23641</a>)
(<a
href="https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6">3dfde87</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>ssr:</strong> extract inline source maps without a regexp
(<a
href="https://redirect.github.com/vitejs/vite/issues/23775">#23775</a>)
(<a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a">6a02780</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li>migrate to Oxlint (<a
href="https://redirect.github.com/vitejs/vite/issues/23746">#23746</a>)
(<a
href="https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92">5b73935</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>deps:</strong> replace <code>@vercel/detect-agent</code>
with <code>std-env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23744">#23744</a>)
(<a
href="https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5">ce4293f</a>)</li>
<li><strong>dev:</strong> consolidate moduleURL to file path utilities
(<a
href="https://redirect.github.com/vitejs/vite/issues/23828">#23828</a>)
(<a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3">df7b40e</a>)</li>
<li><strong>dev:</strong> separate import resolution from URL conversion
(<a
href="https://redirect.github.com/vitejs/vite/issues/23791">#23791</a>)
(<a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7">6116689</a>)</li>
<li><strong>dev:</strong> share ModuleURL and BrowserURL conversions (<a
href="https://redirect.github.com/vitejs/vite/issues/23790">#23790</a>)
(<a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731">446954c</a>)</li>
<li><strong>dev:</strong> use ModuleURLs throughout HTML transforms (<a
href="https://redirect.github.com/vitejs/vite/issues/23815">#23815</a>)
(<a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52">a162990</a>)</li>
</ul>
<h2>v8.3.4</h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5">8.3.5</a>
(2026-10-21)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> handle missing chunk import maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23777">#23777</a>)
(<a
href="https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229">8d7623d</a>)</li>
<li><strong>build:</strong> include preload dependencies to chunk import
map hashing (<a
href="https://redirect.github.com/vitejs/vite/issues/23793">#23793</a>)
(<a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9">4d16e7c</a>)</li>
<li><strong>bundled-dev:</strong> apply <code>server.origin</code> to
asset URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23683">#23683</a>)
(<a
href="https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5">52ba877</a>)</li>
<li><strong>bundled-dev:</strong> declare utf-8 charset in fallback page
(<a
href="https://redirect.github.com/vitejs/vite/issues/23846">#23846</a>)
(<a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6">197daf6</a>)</li>
<li><strong>bundled-dev:</strong> ignore build.chunkImportMap (<a
href="https://redirect.github.com/vitejs/vite/issues/23685">#23685</a>)
(<a
href="https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07">cfe917d</a>)</li>
<li><strong>bundled-dev:</strong> include user
<code>import.meta.env.*</code> defines in the
<code>import.meta.env</code> object (<a
href="https://redirect.github.com/vitejs/vite/issues/23713">#23713</a>)
(<a
href="https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25">6019aa7</a>)</li>
<li><strong>bundled-dev:</strong> map forwarded error stacks through the
bundle source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23741">#23741</a>)
(<a
href="https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18">11fe1e4</a>)</li>
<li><strong>bundled-dev:</strong> normalize served output files (<a
href="https://redirect.github.com/vitejs/vite/issues/23684">#23684</a>)
(<a
href="https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3">df4e02c</a>)</li>
<li><strong>bundled-dev:</strong> stop hmr propagation at modules that
are no longer imported (<a
href="https://redirect.github.com/vitejs/vite/issues/23839">#23839</a>)
(<a
href="https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212">7471e8c</a>)</li>
<li><strong>css:</strong> don't fail on a literal <code>%</code> in
<code>url()</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23676">#23676</a>)
(<a
href="https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261">50b382d</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23731">#23731</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29">cf80aa5</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23826">#23826</a>)
(<a
href="https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9">77d8373</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23733">#23733</a>)
(<a
href="https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48">43f0d05</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23827">#23827</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab">c2e0418</a>)</li>
<li><strong>optimizer:</strong> fall back to yarn.lock for lockfile hash
(<a
href="https://redirect.github.com/vitejs/vite/issues/23667">#23667</a>)
(<a
href="https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e">f206096</a>)</li>
<li><strong>optimizer:</strong> scan <code>oxc.jsxInject</code> imports
(<a
href="https://redirect.github.com/vitejs/vite/issues/23758">#23758</a>)
(<a
href="https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714">38f3cb4</a>)</li>
<li><strong>optimizer:</strong> skip patches dir check for yarn.lock
fallback (<a
href="https://redirect.github.com/vitejs/vite/issues/23725">#23725</a>)
(<a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa">8e890e1</a>)</li>
<li><strong>optimizer:</strong> skip patches dir hash for nub lockfile
(<a
href="https://redirect.github.com/vitejs/vite/issues/23761">#23761</a>)
(<a
href="https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486">a7d5696</a>)</li>
<li><strong>resolve:</strong> support subpath imports with multiple
<code>#</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23631">#23631</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1">0d86b34</a>)</li>
<li><strong>resolve:</strong> update resolve.exports to 2.0.4 (<a
href="https://redirect.github.com/vitejs/vite/issues/23739">#23739</a>)
(<a
href="https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5">4ea708a</a>)</li>
<li><strong>server:</strong> handle socket errors on upgrade requests
not taken by the HMR server (<a
href="https://redirect.github.com/vitejs/vite/issues/23728">#23728</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5">c2c9ef4</a>)</li>
<li><strong>server:</strong> only strip base when path matches a full
segment (<a
href="https://redirect.github.com/vitejs/vite/issues/23641">#23641</a>)
(<a
href="https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6">3dfde87</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>ssr:</strong> extract inline source maps without a regexp
(<a
href="https://redirect.github.com/vitejs/vite/issues/23775">#23775</a>)
(<a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a">6a02780</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li>migrate to Oxlint (<a
href="https://redirect.github.com/vitejs/vite/issues/23746">#23746</a>)
(<a
href="https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92">5b73935</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>deps:</strong> replace <code>@vercel/detect-agent</code>
with <code>std-env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23744">#23744</a>)
(<a
href="https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5">ce4293f</a>)</li>
<li><strong>dev:</strong> consolidate moduleURL to file path utilities
(<a
href="https://redirect.github.com/vitejs/vite/issues/23828">#23828</a>)
(<a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3">df7b40e</a>)</li>
<li><strong>dev:</strong> separate import resolution from URL conversion
(<a
href="https://redirect.github.com/vitejs/vite/issues/23791">#23791</a>)
(<a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7">6116689</a>)</li>
<li><strong>dev:</strong> share ModuleURL and BrowserURL conversions (<a
href="https://redirect.github.com/vitejs/vite/issues/23790">#23790</a>)
(<a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731">446954c</a>)</li>
<li><strong>dev:</strong> use ModuleURLs throughout HTML transforms (<a
href="https://redirect.github.com/vitejs/vite/issues/23815">#23815</a>)
(<a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52">a162990</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4">8.3.4</a>
(2026-10-08)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82"><code>981f07f</code></a>
release: v8.3.5 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856">#23856</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1"><code>0d86b34</code></a>
fix(resolve): support subpath imports with multiple <code>#</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631">#23631</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a"><code>6a02780</code></a>
perf(ssr): extract inline source maps without a regexp (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775">#23775</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa"><code>8e890e1</code></a>
fix(optimizer): skip patches dir check for yarn.lock fallback (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725">#23725</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6"><code>197daf6</code></a>
fix(bundled-dev): declare utf-8 charset in fallback page (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846">#23846</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9"><code>4d16e7c</code></a>
fix(build): include preload dependencies to chunk import map hashing (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793">#23793</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3"><code>df7b40e</code></a>
refactor(dev): consolidate moduleURL to file path utilities (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828">#23828</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52"><code>a162990</code></a>
refactor(dev): use ModuleURLs throughout HTML transforms (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815">#23815</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7"><code>6116689</code></a>
refactor(dev): separate import resolution from URL conversion (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791">#23791</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731"><code>446954c</code></a>
refactor(dev): share ModuleURL and BrowserURL conversions (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790">#23790</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.3.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.1&new-version=8.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev-packages/bundler-tests/package.json       |   2 +-
 .../cloudflare-integration-tests/package.json |   2 +-
 packages/astro/package.json                   |   2 +-
 packages/cloudflare/package.json              |   2 +-
 packages/ember/package.json                   |   2 +-
 packages/nuxt/package.json                    |   2 +-
 packages/react-router/package.json            |   2 +-
 packages/remix/package.json                   |   2 +-
 packages/server-utils/package.json            |   2 +-
 packages/solid/package.json                   |   2 +-
 packages/solidstart/package.json              |   2 +-
 packages/svelte/package.json                  |   2 +-
 packages/sveltekit/package.json               |   2 +-
 packages/tanstackstart-react/package.json     |   2 +-
 pnpm-lock.yaml                                | 566 +++++++++---------
 15 files changed, 297 insertions(+), 297 deletions(-)

diff --git a/dev-packages/bundler-tests/package.json b/dev-packages/bundler-tests/package.json
index 200bc3ea9668..ab00c439ee79 100644
--- a/dev-packages/bundler-tests/package.json
+++ b/dev-packages/bundler-tests/package.json
@@ -15,7 +15,7 @@
     "@rollup/plugin-node-resolve": "^16.0.3",
     "@sentry/browser": "11.10.0",
     "rollup": "^4.60.3",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "vitest": "^4.1.11",
     "webpack": "^5.112.2"
   },
diff --git a/dev-packages/cloudflare-integration-tests/package.json b/dev-packages/cloudflare-integration-tests/package.json
index 68cf1cb65464..dc38e2cf9cb0 100644
--- a/dev-packages/cloudflare-integration-tests/package.json
+++ b/dev-packages/cloudflare-integration-tests/package.json
@@ -38,7 +38,7 @@
     "@sentry-internal/test-utils": "11.10.0",
     "@sentry/conventions": "0.30.0",
     "prisma": "6.15.0",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "vitest": "^4.1.11",
     "wrangler": "4.156.0"
   }
diff --git a/packages/astro/package.json b/packages/astro/package.json
index 58459cd48530..9dbd4db2b5c5 100644
--- a/packages/astro/package.json
+++ b/packages/astro/package.json
@@ -68,7 +68,7 @@
   "devDependencies": {
     "@sentry-internal/rollup-utils": "11.10.0",
     "astro": "^4.16.19",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/packages/cloudflare/package.json b/packages/cloudflare/package.json
index b21f32d674e6..ba846efb84eb 100644
--- a/packages/cloudflare/package.json
+++ b/packages/cloudflare/package.json
@@ -80,7 +80,7 @@
     "@sentry-internal/rollup-utils": "11.10.0",
     "@types/node": "^20.19.0",
     "acorn": "^8.14.0",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "wrangler": "4.156.0"
   },
   "scripts": {
diff --git a/packages/ember/package.json b/packages/ember/package.json
index a091ce7ca418..244009de7e14 100644
--- a/packages/ember/package.json
+++ b/packages/ember/package.json
@@ -63,7 +63,7 @@
     "@rollup/plugin-babel": "^7.0.0",
     "ember-source": "^6.12.0",
     "typescript": "~5.8.0",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "engines": {
     "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
index ace480855b8a..c9405d0fb6e5 100644
--- a/packages/nuxt/package.json
+++ b/packages/nuxt/package.json
@@ -76,7 +76,7 @@
     "nuxi": "^3.25.1",
     "nuxt": "3.21.11",
     "unstorage": "^1.17.5",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "vue": "^3.5.41"
   },
   "scripts": {
diff --git a/packages/react-router/package.json b/packages/react-router/package.json
index a97bb7ee240e..01b041108f5f 100644
--- a/packages/react-router/package.json
+++ b/packages/react-router/package.json
@@ -75,7 +75,7 @@
     "@types/react": "17.0.3",
     "react": "^18.3.1",
     "react-router": "^7.18.4",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "peerDependencies": {
     "@react-router/node": ">=7.15.0 || ^8.x",
diff --git a/packages/remix/package.json b/packages/remix/package.json
index f9dad729c312..12cc9c654b19 100644
--- a/packages/remix/package.json
+++ b/packages/remix/package.json
@@ -99,7 +99,7 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "semver": "^7.8.5",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "peerDependencies": {
     "@remix-run/node": "2.x",
diff --git a/packages/server-utils/package.json b/packages/server-utils/package.json
index 8a19ea2e4746..27d63ad8cec2 100644
--- a/packages/server-utils/package.json
+++ b/packages/server-utils/package.json
@@ -111,7 +111,7 @@
     "@sentry-internal/rollup-utils": "11.10.0",
     "@types/node": "^20.19.0",
     "meriyah": "^6.1.4",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "webpack": "^5.112.2"
   },
   "scripts": {
diff --git a/packages/solid/package.json b/packages/solid/package.json
index 3deb4c53493a..81df16586adf 100644
--- a/packages/solid/package.json
+++ b/packages/solid/package.json
@@ -80,7 +80,7 @@
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/user-event": "^14.5.2",
     "solid-js": "^1.9.11",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "vite-plugin-solid": "^2.11.6"
   },
   "scripts": {
diff --git a/packages/solidstart/package.json b/packages/solidstart/package.json
index dc03db7aaf68..cb5c12b94dc6 100644
--- a/packages/solidstart/package.json
+++ b/packages/solidstart/package.json
@@ -103,7 +103,7 @@
     "node-mock-http": "^1.0.4",
     "solid-js": "^1.9.11",
     "vinxi": "^0.5.11",
-    "vite": "^8.3.1",
+    "vite": "^8.3.5",
     "vite-plugin-solid": "^2.11.6"
   },
   "scripts": {
diff --git a/packages/svelte/package.json b/packages/svelte/package.json
index 47bfcffd57c7..3ff0b46a1657 100644
--- a/packages/svelte/package.json
+++ b/packages/svelte/package.json
@@ -45,7 +45,7 @@
     "@sveltejs/vite-plugin-svelte": "1.4.0",
     "@testing-library/svelte": "^3.2.1",
     "svelte": "3.59.2",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/packages/sveltekit/package.json b/packages/sveltekit/package.json
index 36cbb8d581b4..1e8d8301ab4e 100644
--- a/packages/sveltekit/package.json
+++ b/packages/sveltekit/package.json
@@ -91,7 +91,7 @@
     "@sveltejs/vite-plugin-svelte": "^3.0.0",
     "@types/node": "^20.19.0",
     "svelte": "^4.2.8",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/packages/tanstackstart-react/package.json b/packages/tanstackstart-react/package.json
index a3dfe3f84d13..4a57c8d515b8 100644
--- a/packages/tanstackstart-react/package.json
+++ b/packages/tanstackstart-react/package.json
@@ -64,7 +64,7 @@
   "devDependencies": {
     "@sentry-internal/rollup-utils": "11.10.0",
     "@types/node": "^20.19.0",
-    "vite": "^8.3.1"
+    "vite": "^8.3.5"
   },
   "scripts": {
     "build": "run-p build:transpile build:types",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 13c82f8de53e..a7e3f6ecc7f9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -418,8 +418,8 @@ importers:
         specifier: ^4.60.3
         version: 4.62.3
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
@@ -529,7 +529,7 @@ importers:
     devDependencies:
       '@cloudflare/vite-plugin':
         specifier: 1.34.0
-        version: 1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))
+        version: 1.34.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))
       '@cloudflare/workers-types':
         specifier: ^4.20260426.0
         version: 4.20260519.1
@@ -549,8 +549,8 @@ importers:
         specifier: 6.15.0
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
@@ -689,7 +689,7 @@ importers:
         version: 6.15.0(prisma@6.15.0(magicast@0.3.5)(typescript@7.0.2))(typescript@7.0.2)
       '@prisma/orm-postgres':
         specifier: 8.0.0-rc.17
-        version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@sentry/aws-serverless':
         specifier: 11.10.0
         version: link:../../packages/aws-serverless
@@ -1048,8 +1048,8 @@ importers:
         specifier: ^4.16.19
         version: 4.16.19(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(typescript@7.0.2)
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/aws-serverless:
     dependencies:
@@ -1204,7 +1204,7 @@ importers:
         version: 4.0.0
       rolldown:
         specifier: ^1.0.0
-        version: 1.2.11
+        version: 1.2.16
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
@@ -1246,8 +1246,8 @@ importers:
         specifier: ^8.14.0
         version: 8.18.0
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler:
         specifier: 4.156.0
         version: 4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43)
@@ -1381,7 +1381,7 @@ importers:
         version: 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
       '@embroider/vite':
         specifier: ^1.7.2
-        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@glint/ember-tsc':
         specifier: ^1.5.0
         version: 1.10.0(ember-source@6.12.0(rsvp@4.8.5)(supports-color@10.0.0))(supports-color@10.0.0)(typescript@5.8.3)
@@ -1395,8 +1395,8 @@ importers:
         specifier: ~5.8.0
         version: 5.8.3
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/esbuild-plugin:
     dependencies:
@@ -1709,7 +1709,7 @@ importers:
         version: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
       nitro:
         specifier: ^3.0.260415-beta
-        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       srvx:
         specifier: ^0.11.22
         version: 0.11.22
@@ -1771,7 +1771,7 @@ importers:
     dependencies:
       '@nuxt/kit':
         specifier: ^4.6.0
-        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../browser
@@ -1805,7 +1805,7 @@ importers:
         version: 4.20260519.1
       '@nuxt/nitro-server':
         specifier: ^3.21.11
-        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema':
         specifier: ^3.21.11
         version: 3.21.11
@@ -1820,22 +1820,22 @@ importers:
         version: 1.15.11
       nitro:
         specifier: ^3.0.260311-beta
-        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       nuxi:
         specifier: ^3.25.1
         version: 3.25.1
       nuxt:
         specifier: 3.21.11
-        version: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
+        version: 3.21.11(ebade832173a31b4adb92857b21c371a)
       unstorage:
         specifier: ^1.17.5
         version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue:
         specifier: ^3.5.41
         version: 3.5.44(typescript@7.0.2)
@@ -1983,7 +1983,7 @@ importers:
     devDependencies:
       '@react-router/dev':
         specifier: ^7.18.4
-        version: 7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)
+        version: 7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)
       '@react-router/node':
         specifier: ^7.15.0
         version: 7.18.4(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(typescript@6.0.3)
@@ -2006,8 +2006,8 @@ importers:
         specifier: ^7.18.4
         version: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/remix:
     dependencies:
@@ -2079,8 +2079,8 @@ importers:
         specifier: ^7.8.5
         version: 7.8.5
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/replay-canvas:
     dependencies:
@@ -2193,7 +2193,7 @@ importers:
     devDependencies:
       '@apm-js-collab/code-transformer-bundler-plugins':
         specifier: ^0.7.5
-        version: 0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@neondatabase/serverless':
         specifier: 1.2.0
         version: 1.2.0
@@ -2207,8 +2207,8 @@ importers:
         specifier: ^6.1.4
         version: 6.1.4
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
@@ -2250,11 +2250,11 @@ importers:
         specifier: ^1.9.11
         version: 1.9.11
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/solidstart:
     dependencies:
@@ -2297,7 +2297,7 @@ importers:
         version: 1.0.0(solid-js@1.9.11)
       '@solidjs/start':
         specifier: ^1.3.2
-        version: 1.3.2(8e43603e153b7398bba7d0637cae96a5)
+        version: 1.3.2(dd24d59c172f51621d3f1c3d8b60fda0)
       '@solidjs/testing-library':
         specifier: 0.8.5
         version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
@@ -2312,7 +2312,7 @@ importers:
         version: 20.19.43
       nitropack:
         specifier: ^2.13.4
-        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-mock-http:
         specifier: ^1.0.4
         version: 1.0.4
@@ -2321,13 +2321,13 @@ importers:
         version: 1.9.11
       vinxi:
         specifier: ^0.5.11
-        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+        version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/svelte:
     dependencies:
@@ -2349,7 +2349,7 @@ importers:
         version: link:../../dev-packages/rollup-utils
       '@sveltejs/vite-plugin-svelte':
         specifier: 1.4.0
-        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@testing-library/svelte':
         specifier: ^3.2.1
         version: 3.2.1(svelte@3.59.2)
@@ -2357,8 +2357,8 @@ importers:
         specifier: 3.59.2
         version: 3.59.2
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/sveltekit:
     dependencies:
@@ -2410,10 +2410,10 @@ importers:
         version: link:../browser
       '@sveltejs/kit':
         specifier: ^2.70.2
-        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@sveltejs/vite-plugin-svelte':
         specifier: ^3.0.0
-        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/node':
         specifier: ^20.19.0
         version: 20.19.43
@@ -2421,8 +2421,8 @@ importers:
         specifier: ^4.2.8
         version: 4.2.8
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/tanstackstart-react:
     dependencies:
@@ -2461,8 +2461,8 @@ importers:
         specifier: ^20.19.0
         version: 20.19.43
       vite:
-        specifier: ^8.3.1
-        version: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   packages/typescript: {}
 
@@ -6970,12 +6970,12 @@ packages:
   '@oxc-project/types@0.143.0':
     resolution: {integrity: sha512-u6JZdLBTLotrNC9Vd6vPssINdzcCzleKAH6EJKImQb7GtYvX5keN2dxkoK44stCc4tffE6QQRtZTXVSzsLUlWA==}
 
-  '@oxc-project/types@0.151.0':
-    resolution: {integrity: sha512-J1yXrIlNDZVzE3ada310xeAw7nH8yCAyLPuUIsjKatFPmfn5bS1oW+cM+QsGOtVWd5nhSpbwZWx/rue+r5Z+PA==}
-
   '@oxc-project/types@0.152.0':
     resolution: {integrity: sha512-oM/5rLBm2tPkg0iBgkH/FOeR3PCDpY19GTgAZjMFM8h9WI9VW7cLgzp6nwtarYKmovavIQZ+Fe/RKX/8C8O/Rw==}
 
+  '@oxc-project/types@0.156.0':
+    resolution: {integrity: sha512-1Duyg48TdJNdyhEB8Xn1L36bT9Pv6GUtlKjHxOys8xkaF/rQq3XJE+bAurSK/AgIz5mGFsb77cn9Pb20+WCScw==}
+
   '@oxc-transform/binding-android-arm-eabi@0.143.0':
     resolution: {integrity: sha512-Rufrk7btlzkIAofJyrm3COzSrn4iNYOnHNYOahBDQly/PgleJv6QIVCHsPTqC6qfX/EJNoAeNshALvVfKSTY5A==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -7828,98 +7828,98 @@ packages:
   '@remix-run/web-stream@1.1.0':
     resolution: {integrity: sha512-KRJtwrjRV5Bb+pM7zxcTJkhIqWWSy+MYsIxHK+0m5atcznsf15YwUBWHWulZerV2+vvHH1Lp1DD7pw6qKW8SgA==}
 
-  '@rolldown/binding-android-arm-eabi@1.2.11':
-    resolution: {integrity: sha512-A5kXfGKvKWWZE0TtPrfsvT+q4Y5d1QG8gGUzpYjGydM+fARM9MuX90PrXYXe0XbsDVgyxxNzHo6giCj90bsFNw==}
+  '@rolldown/binding-android-arm-eabi@1.2.16':
+    resolution: {integrity: sha512-ia3DwAs0OsMGS7+IConptSiyk9pEXkOx/AbJ2n/lAGxH3QkWQus1t8d7gnAT38FCU2sQu8lUbeR6AiZFv4JxaA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [android]
 
-  '@rolldown/binding-android-arm64@1.2.11':
-    resolution: {integrity: sha512-z6cTycz+iJ4PVkuL4HHW4DfTfoeU/2nqYYuSOrTmH7yHK5Y0LCOnA03V4ZNxavyVaU1oOqUgIg2klN/s+USGOA==}
+  '@rolldown/binding-android-arm64@1.2.16':
+    resolution: {integrity: sha512-kx5wBiMB6E7TEvpl2B9gjLU004BkvEm2Dr941BFjx/SontPwSzNuQUIoVKxHHoSjpFIfHMmcguyLOtyn0hObRg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [android]
 
-  '@rolldown/binding-darwin-arm64@1.2.11':
-    resolution: {integrity: sha512-jShvqNtP6vDC6/A5JOAzbVV+DkgHqhl/ScVCJEbt+TUY6QYz7YnXcrg3sLtFBniro0f/Ld50ZwCWA6f7KYD1nQ==}
+  '@rolldown/binding-darwin-arm64@1.2.16':
+    resolution: {integrity: sha512-qslZrXnKJU4cUpjoAmtAo/KQM9e2IRMlmpig6Zpwj+8KWxW8v+nkAf9216Bsek9lOC1jvg2yCjygCFo2f83msQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [darwin]
 
-  '@rolldown/binding-darwin-x64@1.2.11':
-    resolution: {integrity: sha512-f2i2xiNWq1Z1l2++q2fuhZRdLAT3aqxD6vRNm1RAxpUoBcdqNB3C0s1Bt+K+PbEx2F5F4gQp6hqKkphCY/xF9w==}
+  '@rolldown/binding-darwin-x64@1.2.16':
+    resolution: {integrity: sha512-FdF+y48ND13eAyM2mQn+85kvAqNlvRWROy2rhgA463X/0Gv4vGtazZtfaF1mRBLscYvtOlh4QnLjOWiFzX69OQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [darwin]
 
-  '@rolldown/binding-freebsd-x64@1.2.11':
-    resolution: {integrity: sha512-4Ir5FSOKIAMr4r0kExpt1s3bMgzJU3rA45AYOHtQpls0oNeqcYBKrWMlckrYH4KCfGLfkfn1tN1dmZPMVsdXow==}
+  '@rolldown/binding-freebsd-x64@1.2.16':
+    resolution: {integrity: sha512-ddjqFM5e95AgLbUPtKIS7V1KTVlA0RUgCVr5mn+/IEhsdy3pr+Vuj/HZ7nlMN2FyxIwUktOH1LEPIQXO1v9y1Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [freebsd]
 
-  '@rolldown/binding-linux-arm-gnueabihf@1.2.11':
-    resolution: {integrity: sha512-/gnRDM+39BROzAN/k1OZjDPnDMcZxB/0EUxKjONO5yVkNEvlsoMDrxGNKgZi/ttFriS2gwlDNzB65pvNbFOXIQ==}
+  '@rolldown/binding-linux-arm-gnueabihf@1.2.16':
+    resolution: {integrity: sha512-tHdKWbFkFBI687iim3LIyIvyL7j66VvQYkDPss5Stn/qyE2tWkR1YD0dXmXPFKKqT/o5ZEJVsaRsWS2meQwGOA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm]
     os: [linux]
 
-  '@rolldown/binding-linux-arm64-gnu@1.2.11':
-    resolution: {integrity: sha512-PFaK8HwvAHbaKbBcDNQihjMKYvFnA5hiENx/l5tphTDz1E0WFp32l0A7aq7lyUwGsRw/xSrNIy/gIK4thrSCrw==}
+  '@rolldown/binding-linux-arm64-gnu@1.2.16':
+    resolution: {integrity: sha512-FJiLGAblPBMlBEdbOqw6kW6QcXDWAf/oJu7gYs9ZJZwmg+K+/zjFLxPTIY9izJUzxzc24FHvmseyA0IvJSl17w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-arm64-musl@1.2.11':
-    resolution: {integrity: sha512-AskzJUIKRLPxkruR1wLKewGbOw+EYfU/9lOrBFj4AFrEA8hPpKFnODWNu2WLaNs0QNkEb9QIJufmVZZIL/bJlg==}
+  '@rolldown/binding-linux-arm64-musl@1.2.16':
+    resolution: {integrity: sha512-hrJpblMsrQ58U9veWpbXzkhV5zStunds6HWLprqq1qauvgBr1E6P+24kLj6lSLI9vjRn/RYpjprhkHQPKGWpNg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@rolldown/binding-linux-ppc64-gnu@1.2.11':
-    resolution: {integrity: sha512-qlUGAheh2yh8afH7QBgx0PrRHN85hKnNd78x8MeMhXivuevgd8vgf6/CstOzmNKY/lLTHvNTrPy98cLnAugzJw==}
+  '@rolldown/binding-linux-ppc64-gnu@1.2.16':
+    resolution: {integrity: sha512-qJd/dC6j6CwLG9/s/RP2nb1RZ0GIgj7Ioj7x/SYa3RzjVrlzrmH0fhIOpfvqQDeIsdP0loi+kHaMhJzY1PBIaA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-s390x-gnu@1.2.11':
-    resolution: {integrity: sha512-secpEad+0vCbSfn8upFySkDskv+bGPk3THSDS9Y89yc4rb4kzqHp8Dmyd9BkQW4SnhNXBZCl/6CrO//hZahNJQ==}
+  '@rolldown/binding-linux-s390x-gnu@1.2.16':
+    resolution: {integrity: sha512-Vx7Xg5uUJuNcujJjI70OICaH0EYj80BtOLZTSN7uOYg8QOLlyKnaG0IW7Fn/J0IpJsaKzmDKMhOQv1JBM9m9vg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-x64-gnu@1.2.11':
-    resolution: {integrity: sha512-mOVBT3dPpkWm8XBWPmU4bf+U6dYDLeMo/9ojUmis4N0L5uu10qra5vOyngZ7/PSdoE4G9KvRt4bloRxNjLas7A==}
+  '@rolldown/binding-linux-x64-gnu@1.2.16':
+    resolution: {integrity: sha512-TNKhgE3uJTsTzatUSSYt0Kgo+Oa2uSlSjz4r1aEIea7HX6ULBym4fAlYUhG1i6pjNf2njfCUAfKwr6C3E9Xg1w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@rolldown/binding-linux-x64-musl@1.2.11':
-    resolution: {integrity: sha512-Is78i9A8Ui4SqcxUwFJ9uMmjDn58IbVTjFWYdQestFEgeuEmHMLGNriXnVJKkwG2YiZjw8cP0zCTyDMdDGtOOg==}
+  '@rolldown/binding-linux-x64-musl@1.2.16':
+    resolution: {integrity: sha512-7chXdpjXZ8qG0+mIxECN3cT9kvhZ3/oZhMX6Pp876P7CDrIy8nJswva6Mq357JR7eYXfuskwZxMeV1SzoZdHrA==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@rolldown/binding-openharmony-arm64@1.2.11':
-    resolution: {integrity: sha512-dUCXneZ87INUMyQ0D+C0HrEBNUPNXHaPmU5GTjyKTJEiussw9Kaj5Ln8UztPe4epV/ffvgNBEadksdYhmW6xJA==}
+  '@rolldown/binding-openharmony-arm64@1.2.16':
+    resolution: {integrity: sha512-Kwjt+7uNTJK5/MDkGWGVO2KQPnj8yAV75dMpfwyHZrJSXWHrniOB0aUEWlVYf3H1hOqFLIStLdM5QXq6bnKmOQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [openharmony]
 
-  '@rolldown/binding-win32-arm64-msvc@1.2.11':
-    resolution: {integrity: sha512-jByxb6qfd+bH1xUd0qnfFnb17i9sWBPY2tOavJ0l3tdr3OTu+Kvtm8cd/JV5nFt657b1VqGltxg9olOEfofXWw==}
+  '@rolldown/binding-win32-arm64-msvc@1.2.16':
+    resolution: {integrity: sha512-/LH6WfjDRXXJz/p5xl4TmU+jpcnwcxbKEQBW/GZE0JHfN0lGIyTtsUEGaQ/q/GikkGJ2yLKe6pwm7AnEWO8pdw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [win32]
 
-  '@rolldown/binding-win32-x64-msvc@1.2.11':
-    resolution: {integrity: sha512-/PzKqzAJ03i19oy2ItPvyvaVjOjBCNnfaJs8yvUdGBKmiESgnrJSQ2awd81QzFbbnAmu7YO9ZnJrDCb9VSJPRA==}
+  '@rolldown/binding-win32-x64-msvc@1.2.16':
+    resolution: {integrity: sha512-1lv1KvX0Z871zfk7vw+dnXMMnHNyDwMzWG8Kv3HxDXMOhzCX4SHc7HK319fInP0i+0p9D8brkfzL7pJOaGl+tw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [win32]
@@ -16972,8 +16972,8 @@ packages:
     engines: {node: 20 || >=22}
     hasBin: true
 
-  rolldown@1.2.11:
-    resolution: {integrity: sha512-qpSwIyz0jHQq5qXBTNxFmE6664rJ7O+4TvPFOiOaBSrz8IOHc1koKKSqTM2H6u1UG1+TveuC6vaDHKXFOvb1Kw==}
+  rolldown@1.2.16:
+    resolution: {integrity: sha512-bWvlMpFKiTfDKfnK7FC2MPgPeWCf/Kpwsq49ApdW+FQaBZb6O6dZ4MAPbPUjp7hYQrw/RobqCzn64BRrQecGHw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
 
@@ -19020,13 +19020,13 @@ packages:
       yaml:
         optional: true
 
-  vite@8.3.1:
-    resolution: {integrity: sha512-/bvH9E9tmCXRGp2uXY3WbOldqpTwFkbha/8ANaEQ6VkxhH60KyqLwgZq6lG2y+4uT55x9+9eUHMpQ7uGnOCKjA==}
+  vite@8.3.5:
+    resolution: {integrity: sha512-z1YpjieJ9g0ebTmQpLBv/oq9E3F9EIlOe+7LahW8SrE3LTiG3udBRUXQOlYXP9b+IC2q2phHeVxj9xGlw34OEQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
     peerDependencies:
       '@types/node': ^20.19.0 || >=22.12.0
-      '@vitejs/devtools': ^0.7.1
+      '@vitejs/devtools': ^0.7.1 || ^0.8.0
       esbuild: ^0.27.0 || ^0.28.0
       jiti: '>=1.21.0'
       less: ^4.0.0
@@ -20037,7 +20037,7 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
-  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.19.0
       es-module-lexer: 2.1.0
@@ -20046,7 +20046,7 @@ snapshots:
     optionalDependencies:
       esbuild: 0.28.1
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   '@apm-js-collab/code-transformer@0.19.0':
@@ -23282,12 +23282,12 @@ snapshots:
     optionalDependencies:
       workerd: 1.20261023.1
 
-  '@cloudflare/vite-plugin@1.34.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))':
+  '@cloudflare/vite-plugin@1.34.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))':
     dependencies:
       '@cloudflare/unenv-preset': 2.16.1(unenv@2.0.0-rc.24)(workerd@1.20260426.1)
       miniflare: 4.20260426.0
       unenv: 2.0.0-rc.24
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       wrangler: 4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43)
       ws: 8.18.0
     transitivePeerDependencies:
@@ -23538,17 +23538,17 @@ snapshots:
 
   '@discoveryjs/json-ext@0.5.7': {}
 
-  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@dxup/unimport': 0.1.2
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/compiler-dom': 3.5.44
       chokidar: 5.0.0
       knitwork: 1.3.0
       magic-string: 1.1.0
       pathe: 2.0.3
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@nuxt/schema'
@@ -23856,7 +23856,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@embroider/vite@1.7.9(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@embroider/core': 4.6.3(@glint/template@1.8.0)(supports-color@10.0.0)
@@ -23874,7 +23874,7 @@ snapshots:
       send: 1.2.1(supports-color@10.0.0)
       source-map-url: 0.4.1
       terser: 5.51.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@glint/template'
       - bufferutil
@@ -25430,11 +25430,11 @@ snapshots:
 
   '@nuxt/devalue@2.0.2': {}
 
-  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       execa: 8.0.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@nuxt/schema'
       - confbox
@@ -25458,11 +25458,11 @@ snapshots:
       pkg-types: 2.3.1
       semver: 7.8.5
 
-  '@nuxt/devtools@3.4.1(1d992770f562652d9788c4b38c5dfb97)':
+  '@nuxt/devtools@3.4.1(6d0e88762f54baf3e026c1dece53d30a)':
     dependencies:
-      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@nuxt/devtools-wizard': 3.4.1
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/devtools-core': 8.2.1(vue@3.5.44(typescript@7.0.2))
       '@vue/devtools-kit': 8.2.1
       birpc: 4.1.0
@@ -25489,9 +25489,9 @@ snapshots:
       structured-clone-es: 2.0.1
       tinyglobby: 0.2.17
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
-      vite-plugin-vue-tracer: 1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite-plugin-vue-tracer: 1.5.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       which: 6.0.1
       ws: 8.21.3
     transitivePeerDependencies:
@@ -25555,7 +25555,7 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25573,7 +25573,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25583,12 +25583,12 @@ snapshots:
       jiti: 2.7.0
       mlly: 1.8.2
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25606,7 +25606,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25616,12 +25616,12 @@ snapshots:
       jiti: 2.7.0
       mlly: 1.8.2
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
@@ -25639,7 +25639,7 @@ snapshots:
       std-env: 4.3.0
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
-      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      unctx: 3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       verkit: 0.5.0
     optionalDependencies:
       '@nuxt/schema': 3.21.11
@@ -25649,12 +25649,12 @@ snapshots:
       jiti: 2.7.0
       mlly: 1.8.2
       oxc-parser: 0.152.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - magic-string
       - unplugin
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -25668,11 +25668,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -25728,7 +25728,7 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
@@ -25742,11 +25742,11 @@ snapshots:
       escape-string-regexp: 5.0.0
       exsolve: 1.1.3
       h3: 1.15.11
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
       ohash: 2.0.11
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -25819,7 +25819,7 @@ snapshots:
       rc9: 3.1.0
       std-env: 4.3.0
 
-  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
+  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
     dependencies:
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
@@ -25839,7 +25839,7 @@ snapshots:
       magic-string: 0.30.21
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 3.21.11(6d4a009eb46e35c3af8bc639a43780f2)
+      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
       nypm: 0.6.9
       ohash: 2.0.11
       pathe: 2.0.3
@@ -25856,8 +25856,8 @@ snapshots:
       vue: 3.5.44(typescript@7.0.2)
       vue-bundle-renderer: 2.3.2
     optionalDependencies:
-      rolldown: 1.2.11
-      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.11)(rollup@4.62.3)
+      rolldown: 1.2.16
+      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.16)(rollup@4.62.3)
     transitivePeerDependencies:
       - '@biomejs/biome'
       - '@types/node'
@@ -26235,10 +26235,10 @@ snapshots:
 
   '@oxc-project/types@0.143.0': {}
 
-  '@oxc-project/types@0.151.0': {}
-
   '@oxc-project/types@0.152.0': {}
 
+  '@oxc-project/types@0.156.0': {}
+
   '@oxc-transform/binding-android-arm-eabi@0.143.0':
     optional: true
 
@@ -26586,10 +26586,10 @@ snapshots:
     dependencies:
       '@prisma/debug': 6.15.0
 
-  '@prisma/orm-family-sql@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@prisma/orm-family-sql@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@standard-schema/spec': 1.1.0
       arktype: 2.2.9
       pathe: 2.0.3
@@ -26613,12 +26613,12 @@ snapshots:
     optionalDependencies:
       typescript: 7.0.2
 
-  '@prisma/orm-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@prisma/orm-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-target-postgres': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-target-postgres': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/node': 26.1.2
       '@types/pg': 8.20.4
       arktype: 2.2.9
@@ -26633,11 +26633,11 @@ snapshots:
       - pg-native
       - vite
 
-  '@prisma/orm-target-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@prisma/orm-target-postgres@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-family-sql': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
-      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@prisma/orm-toolchain': 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@standard-schema/spec': 1.1.0
       '@types/node': 26.1.2
       '@types/pg': 8.20.4
@@ -26654,7 +26654,7 @@ snapshots:
       - pg-native
       - vite
 
-  '@prisma/orm-toolchain@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@prisma/orm-toolchain@8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@prisma/orm-framework': 8.0.0-rc.17(typescript@7.0.2)
       '@vercel/detect-agent': 1.2.7
@@ -26677,7 +26677,7 @@ snapshots:
       wrap-ansi: 10.0.2
     optionalDependencies:
       typescript: 7.0.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - magicast
 
@@ -26724,7 +26724,7 @@ snapshots:
 
   '@protobufjs/utf8@1.1.1': {}
 
-  '@react-router/dev@7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)':
+  '@react-router/dev@7.18.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(react-router@7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@6.0.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(wrangler@4.156.0(@cloudflare/workers-types@5.20260710.1)(@types/node@20.19.43))(yaml@2.9.0)':
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/generator': 7.29.8
@@ -26754,7 +26754,7 @@ snapshots:
       semver: 7.8.5
       tinyglobby: 0.2.17
       valibot: 1.5.0(typescript@6.0.3)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-node: 3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       typescript: 6.0.3
@@ -26921,49 +26921,49 @@ snapshots:
     dependencies:
       web-streams-polyfill: 3.3.3
 
-  '@rolldown/binding-android-arm-eabi@1.2.11':
+  '@rolldown/binding-android-arm-eabi@1.2.16':
     optional: true
 
-  '@rolldown/binding-android-arm64@1.2.11':
+  '@rolldown/binding-android-arm64@1.2.16':
     optional: true
 
-  '@rolldown/binding-darwin-arm64@1.2.11':
+  '@rolldown/binding-darwin-arm64@1.2.16':
     optional: true
 
-  '@rolldown/binding-darwin-x64@1.2.11':
+  '@rolldown/binding-darwin-x64@1.2.16':
     optional: true
 
-  '@rolldown/binding-freebsd-x64@1.2.11':
+  '@rolldown/binding-freebsd-x64@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-arm-gnueabihf@1.2.11':
+  '@rolldown/binding-linux-arm-gnueabihf@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-arm64-gnu@1.2.11':
+  '@rolldown/binding-linux-arm64-gnu@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-arm64-musl@1.2.11':
+  '@rolldown/binding-linux-arm64-musl@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-ppc64-gnu@1.2.11':
+  '@rolldown/binding-linux-ppc64-gnu@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-s390x-gnu@1.2.11':
+  '@rolldown/binding-linux-s390x-gnu@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-x64-gnu@1.2.11':
+  '@rolldown/binding-linux-x64-gnu@1.2.16':
     optional: true
 
-  '@rolldown/binding-linux-x64-musl@1.2.11':
+  '@rolldown/binding-linux-x64-musl@1.2.16':
     optional: true
 
-  '@rolldown/binding-openharmony-arm64@1.2.11':
+  '@rolldown/binding-openharmony-arm64@1.2.16':
     optional: true
 
-  '@rolldown/binding-win32-arm64-msvc@1.2.11':
+  '@rolldown/binding-win32-arm64-msvc@1.2.16':
     optional: true
 
-  '@rolldown/binding-win32-x64-msvc@1.2.11':
+  '@rolldown/binding-win32-x64-msvc@1.2.16':
     optional: true
 
   '@rolldown/pluginutils@1.0.1': {}
@@ -27694,11 +27694,11 @@ snapshots:
     dependencies:
       solid-js: 1.9.11
 
-  '@solidjs/start@1.3.2(8e43603e153b7398bba7d0637cae96a5)':
+  '@solidjs/start@1.3.2(dd24d59c172f51621d3f1c3d8b60fda0)':
     dependencies:
-      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
-      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       cookie-es: 2.0.1
       defu: 6.1.7
       error-stack-parser: 2.1.4
@@ -27710,8 +27710,8 @@ snapshots:
       source-map-js: 1.2.2
       terracotta: 1.0.5(solid-js@1.9.11)
       tinyglobby: 0.2.17
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
-      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
       - solid-js
@@ -27766,11 +27766,11 @@ snapshots:
     dependencies:
       acorn: 8.18.0
 
-  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@standard-schema/spec': 1.1.0
       '@sveltejs/acorn-typescript': 1.0.9(acorn@8.18.0)
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/cookie': 0.6.0
       acorn: 8.18.0
       cookie: 0.6.0
@@ -27782,21 +27782,21 @@ snapshots:
       set-cookie-parser: 3.0.1
       sirv: 3.0.2
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
       typescript: 6.0.3
 
-  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte-inspector@2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       svelte: 4.2.8
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@1.4.0(supports-color@10.0.0)(svelte@3.59.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
@@ -27804,22 +27804,22 @@ snapshots:
       magic-string: 0.26.7
       svelte: 3.59.2
       svelte-hmr: 0.15.3(svelte@3.59.2)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
-  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@sveltejs/vite-plugin-svelte-inspector': 2.1.0(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       debug: 4.4.3(supports-color@10.0.0)
       deepmerge: 4.3.1
       kleur: 4.1.5
       magic-string: 0.30.21
       svelte: 4.2.8
       svelte-hmr: 0.16.0(svelte@4.2.8)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vitefu: 0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 0.2.5(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - supports-color
 
@@ -27827,7 +27827,7 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
-  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@tanstack/directive-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -27836,7 +27836,7 @@ snapshots:
       '@tanstack/router-utils': 1.154.7(supports-color@10.0.0)
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -27873,7 +27873,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@tanstack/server-functions-plugin@1.121.21(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@babel/code-frame': 7.26.2
       '@babel/core': 7.29.7(supports-color@10.0.0)
@@ -27882,7 +27882,7 @@ snapshots:
       '@babel/template': 7.29.7
       '@babel/traverse': 7.29.8(supports-color@10.0.0)
       '@babel/types': 7.29.8
-      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@tanstack/directive-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       babel-dead-code-elimination: 1.0.12(supports-color@10.0.0)
       tiny-invariant: 1.3.3
     transitivePeerDependencies:
@@ -28652,7 +28652,7 @@ snapshots:
       untun: 0.1.3
       uqr: 0.1.3
 
-  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
       '@babel/parser': 7.29.9
       acorn: 8.18.0
@@ -28663,18 +28663,18 @@ snapshots:
       magicast: 0.2.11
       recast: 0.23.11
       tslib: 2.8.1
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
-  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
+  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))':
     dependencies:
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
       acorn: 8.18.0
       acorn-loose: 8.4.0
       acorn-typescript: 1.4.13(acorn@8.18.0)
       astring: 1.9.0
       magicast: 0.2.11
       recast: 0.23.11
-      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
+      vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
 
   '@vitejs/plugin-vue-jsx@5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
@@ -28717,13 +28717,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.1
 
-  '@vitest/mocker@4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.11(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.11
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   '@vitest/pretty-format@4.1.11':
     dependencies:
@@ -33597,12 +33597,12 @@ snapshots:
 
   import-meta-resolve@4.2.0: {}
 
-  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  impound@1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       es-module-lexer: 2.1.0
       pathe: 2.0.3
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     transitivePeerDependencies:
       - '@farmfe/core'
@@ -35692,7 +35692,7 @@ snapshots:
       node-gyp-build: 4.6.0
     optional: true
 
-  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  nitro@3.0.260311-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -35704,7 +35704,7 @@ snapshots:
       ocache: 0.1.4
       ofetch: 2.0.0-alpha.3
       ohash: 2.0.11
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
       unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
@@ -35713,7 +35713,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -35745,7 +35745,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  nitro@3.0.260415-beta(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(lru-cache@11.4.0)(miniflare@4.20260426.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(mysql2@3.23.3(@types/node@20.19.43))(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.10(srvx@0.11.22)
@@ -35757,7 +35757,7 @@ snapshots:
       ocache: 0.1.4
       ofetch: 2.0.0-alpha.3
       ohash: 2.0.11
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
       unstorage: 2.0.0-alpha.7(@azure/storage-blob@12.31.0(supports-color@10.0.0))(chokidar@5.0.0)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))(lru-cache@11.4.0)(mongodb@7.1.0(@aws-sdk/credential-providers@3.983.0)(socks@2.8.7))(ofetch@2.0.0-alpha.3)
@@ -35766,7 +35766,7 @@ snapshots:
       giget: 3.3.1
       jiti: 2.7.0
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -35798,7 +35798,7 @@ snapshots:
       - sqlite3
       - uploadthing
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35851,7 +35851,7 @@ snapshots:
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
-      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.11)(rollup@4.62.3)
+      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.16)(rollup@4.62.3)
       scule: 1.3.0
       semver: 7.8.5
       serve-placeholder: 2.0.2
@@ -35863,7 +35863,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -35907,7 +35907,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -35960,7 +35960,7 @@ snapshots:
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
-      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.11)(rollup@4.62.3)
+      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.16)(rollup@4.62.3)
       scule: 1.3.0
       semver: 7.8.5
       serve-placeholder: 2.0.2
@@ -35972,7 +35972,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -36016,7 +36016,7 @@ snapshots:
       - vite
       - webpack
 
-  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  nitropack@2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.3)
@@ -36069,7 +36069,7 @@ snapshots:
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
-      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.11)(rollup@4.62.3)
+      rollup-plugin-visualizer: 6.0.11(rolldown@1.2.16)(rollup@4.62.3)
       scule: 1.3.0
       semver: 7.8.5
       serve-placeholder: 2.0.2
@@ -36081,7 +36081,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0))
       untyped: 2.0.0
@@ -36341,16 +36341,16 @@ snapshots:
 
   nuxi@3.25.1: {}
 
-  nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2):
+  nuxt@3.21.11(ebade832173a31b4adb92857b21c371a):
     dependencies:
-      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)
-      '@nuxt/devtools': 3.4.1(1d992770f562652d9788c4b38c5dfb97)
+      '@nuxt/devtools': 3.4.1(6d0e88762f54baf3e026c1dece53d30a)
       '@nuxt/kit': 3.21.11(magicast@0.5.4)
-      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema': 3.21.11
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))
-      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(6d4a009eb46e35c3af8bc639a43780f2))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.11)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
+      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       c12: 3.3.4(magicast@0.5.4)
@@ -36367,7 +36367,7 @@ snapshots:
       h3: 1.15.11
       hookable: 5.5.3
       ignore: 7.0.12
-      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       jiti: 2.7.0
       klona: 2.0.6
       knitwork: 1.3.0
@@ -36381,7 +36381,7 @@ snapshots:
       oxc-minify: 0.143.0
       oxc-parser: 0.143.0
       oxc-transform: 0.143.0
-      oxc-walker: 1.1.1(@oxc-project/types@0.152.0)(oxc-parser@0.143.0)(rolldown@1.2.11)
+      oxc-walker: 1.1.1(@oxc-project/types@0.152.0)(oxc-parser@0.143.0)(rolldown@1.2.16)
       pathe: 2.0.3
       perfect-debounce: 2.1.0
       pkg-types: 2.3.1
@@ -36394,8 +36394,8 @@ snapshots:
       ultrahtml: 1.7.0
       uncrypto: 0.1.3
       unctx: 2.5.0
-      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-vue-router: 0.19.2(@vue/compiler-sfc@3.5.44)(vue-router@4.6.4(vue@3.5.44(typescript@7.0.2)))(vue@3.5.44(typescript@7.0.2))
       untyped: 2.0.0
       vue: 3.5.44(typescript@7.0.2)
@@ -36929,11 +36929,11 @@ snapshots:
       '@oxc-transform/binding-win32-ia32-msvc': 0.143.0
       '@oxc-transform/binding-win32-x64-msvc': 0.143.0
 
-  oxc-walker@1.1.1(@oxc-project/types@0.152.0)(oxc-parser@0.143.0)(rolldown@1.2.11):
+  oxc-walker@1.1.1(@oxc-project/types@0.152.0)(oxc-parser@0.143.0)(rolldown@1.2.16):
     optionalDependencies:
       '@oxc-project/types': 0.152.0
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
 
   oxfmt@0.74.0:
     dependencies:
@@ -38759,26 +38759,26 @@ snapshots:
       glob: 13.0.6
       package-json-from-dist: 1.0.1
 
-  rolldown@1.2.11:
+  rolldown@1.2.16:
     dependencies:
-      '@oxc-project/types': 0.151.0
+      '@oxc-project/types': 0.156.0
       '@rolldown/pluginutils': 1.0.1
     optionalDependencies:
-      '@rolldown/binding-android-arm-eabi': 1.2.11
-      '@rolldown/binding-android-arm64': 1.2.11
-      '@rolldown/binding-darwin-arm64': 1.2.11
-      '@rolldown/binding-darwin-x64': 1.2.11
-      '@rolldown/binding-freebsd-x64': 1.2.11
-      '@rolldown/binding-linux-arm-gnueabihf': 1.2.11
-      '@rolldown/binding-linux-arm64-gnu': 1.2.11
-      '@rolldown/binding-linux-arm64-musl': 1.2.11
-      '@rolldown/binding-linux-ppc64-gnu': 1.2.11
-      '@rolldown/binding-linux-s390x-gnu': 1.2.11
-      '@rolldown/binding-linux-x64-gnu': 1.2.11
-      '@rolldown/binding-linux-x64-musl': 1.2.11
-      '@rolldown/binding-openharmony-arm64': 1.2.11
-      '@rolldown/binding-win32-arm64-msvc': 1.2.11
-      '@rolldown/binding-win32-x64-msvc': 1.2.11
+      '@rolldown/binding-android-arm-eabi': 1.2.16
+      '@rolldown/binding-android-arm64': 1.2.16
+      '@rolldown/binding-darwin-arm64': 1.2.16
+      '@rolldown/binding-darwin-x64': 1.2.16
+      '@rolldown/binding-freebsd-x64': 1.2.16
+      '@rolldown/binding-linux-arm-gnueabihf': 1.2.16
+      '@rolldown/binding-linux-arm64-gnu': 1.2.16
+      '@rolldown/binding-linux-arm64-musl': 1.2.16
+      '@rolldown/binding-linux-ppc64-gnu': 1.2.16
+      '@rolldown/binding-linux-s390x-gnu': 1.2.16
+      '@rolldown/binding-linux-x64-gnu': 1.2.16
+      '@rolldown/binding-linux-x64-musl': 1.2.16
+      '@rolldown/binding-openharmony-arm64': 1.2.16
+      '@rolldown/binding-win32-arm64-msvc': 1.2.16
+      '@rolldown/binding-win32-x64-msvc': 1.2.16
 
   rollup-plugin-copy-assets@2.0.3(rollup@4.62.3):
     dependencies:
@@ -38818,14 +38818,14 @@ snapshots:
     optionalDependencies:
       '@types/node': 14.18.63
 
-  rollup-plugin-visualizer@6.0.11(rolldown@1.2.11)(rollup@4.62.3):
+  rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3):
     dependencies:
       open: 8.4.2
       picomatch: 4.0.7
       source-map: 0.7.6
       yargs: 17.7.3
     optionalDependencies:
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       rollup: 4.62.3
 
   rollup@2.80.0:
@@ -40373,26 +40373,26 @@ snapshots:
       magic-string: 0.30.21
       unplugin: 2.3.11
 
-  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@0.30.21)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 0.30.21
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      rolldown: 1.2.16
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      rolldown: 1.2.16
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
-  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
+  unctx@3.0.1(magic-string@1.1.0)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))):
     optionalDependencies:
       magic-string: 1.1.0
       oxc-parser: 0.152.0
-      rolldown: 1.2.11
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      rolldown: 1.2.16
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
 
   undefsafe@2.0.5: {}
 
@@ -40462,7 +40462,7 @@ snapshots:
     dependencies:
       '@noble/hashes': 2.4.0
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40476,11 +40476,11 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.143.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -40491,7 +40491,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40505,11 +40505,11 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -40520,7 +40520,7 @@ snapshots:
       - vite
       - webpack
 
-  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unimport@6.4.0(esbuild@0.28.1)(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       acorn: 8.18.0
       escape-string-regexp: 5.0.0
@@ -40534,11 +40534,11 @@ snapshots:
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       unplugin-utils: 0.3.2
     optionalDependencies:
       oxc-parser: 0.152.0
-      rolldown: 1.2.11
+      rolldown: 1.2.16
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -40661,28 +40661,28 @@ snapshots:
       picomatch: 4.0.7
       webpack-virtual-modules: 0.6.2
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
       webpack-virtual-modules: 0.6.2
     optionalDependencies:
       esbuild: 0.28.1
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       rollup: 4.62.3
       vite: 6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
+  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.7
       webpack-virtual-modules: 0.6.2
     optionalDependencies:
       esbuild: 0.28.1
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       rollup: 4.62.3
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       webpack: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   unstorage@1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.10.1(supports-color@10.0.0)):
@@ -40865,7 +40865,7 @@ snapshots:
       '@types/unist': 3.0.0
       vfile-message: 4.0.3
 
-  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0):
+  vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.0.0))
@@ -40886,7 +40886,7 @@ snapshots:
       hookable: 5.5.3
       http-proxy: 1.18.1(debug@4.4.3(supports-color@10.0.0))
       micromatch: 4.0.8
-      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.11)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@6.4.3(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       node-fetch-native: 1.6.7
       path-to-regexp: 6.3.0
       pathe: 1.1.2
@@ -40952,15 +40952,15 @@ snapshots:
       - xml2js
       - yaml
 
-  vite-dev-rpc@2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-dev-rpc@2.0.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       birpc: 4.1.0
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vite-hot-client: 2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-hot-client: 2.2.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
-  vite-hot-client@2.2.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-hot-client@2.2.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   vite-node@3.2.4(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
@@ -41019,7 +41019,7 @@ snapshots:
       oxlint: 1.89.0(oxlint-tsgolint@7.0.2004)
       typescript: 7.0.2
 
-  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       ansis: 4.3.1
       error-stack-parser-es: 1.0.5
@@ -41029,12 +41029,12 @@ snapshots:
       perfect-debounce: 2.1.0
       sirv: 3.0.2
       unplugin-utils: 0.3.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vite-dev-rpc: 2.0.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite-dev-rpc: 2.0.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.11)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.11)(rollup@4.62.3)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
 
-  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@types/babel__core': 7.20.5
@@ -41042,21 +41042,21 @@ snapshots:
       merge-anything: 5.1.7
       solid-js: 1.9.11
       solid-refresh: 0.6.3(solid-js@1.9.11)(supports-color@10.0.0)
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vitefu: 1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitefu: 1.0.7(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:
       '@testing-library/jest-dom': 6.9.1
     transitivePeerDependencies:
       - supports-color
 
-  vite-plugin-vue-tracer@1.5.0(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
+  vite-plugin-vue-tracer@1.5.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
     dependencies:
       estree-walker: 3.0.3
       exsolve: 1.1.3
       magic-string: 1.1.0
       pathe: 2.0.3
       source-map-js: 1.2.2
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vue: 3.5.44(typescript@7.0.2)
 
   vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2):
@@ -41113,12 +41113,12 @@ snapshots:
       tsx: 4.23.15
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
+  vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
       postcss: 8.5.31
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       tinyglobby: 0.2.17
     optionalDependencies:
       '@types/node': 20.19.43
@@ -41132,12 +41132,12 @@ snapshots:
       tsx: 4.23.15
       yaml: 2.9.0
 
-  vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
+  vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       lightningcss: 1.33.0
       picomatch: 4.0.7
       postcss: 8.5.31
-      rolldown: 1.2.11
+      rolldown: 1.2.16
       tinyglobby: 0.2.17
     optionalDependencies:
       '@types/node': 20.19.43
@@ -41151,22 +41151,22 @@ snapshots:
       tsx: 4.23.15
       yaml: 2.9.0
 
-  vitefu@0.2.5(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vitefu@0.2.5(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   vitefu@1.0.7(vite@5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)):
     optionalDependencies:
       vite: 5.4.21(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)
 
-  vitefu@1.0.7(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vitefu@1.0.7(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     optionalDependencies:
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -41183,7 +41183,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
@@ -41207,7 +41207,7 @@ snapshots:
   vitest@4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@8.1.1))(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0):
     dependencies:
       '@vitest/expect': 4.1.11
-      '@vitest/mocker': 4.1.11(vite@8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.11(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.11
       '@vitest/runner': 4.1.11
       '@vitest/snapshot': 4.1.11
@@ -41224,7 +41224,7 @@ snapshots:
       tinyexec: 1.3.1
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: 8.3.1(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@8.1.1))(sass@1.72.0)(stylus@0.59.0(supports-color@8.1.1))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@opentelemetry/api': 1.10.0

From 1cee9739d764d224dfebd24b56d42b8620becab9 Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:52:55 +0100
Subject: [PATCH 126/169] ci(deps): Group langchain dependabot updates and skip
 majors (#26041)

**Why:** Dependabot bumps langchain packages one at a time, so peer deps
get out of sync (see #26035). Like react-router, node-integration-tests
stays on langchain v0 on purpose, and the v1 suite gets v1 through
`additionalDependencies`.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 01dde37b6d68..9a08fb3ac19a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -25,6 +25,11 @@ updates:
       - dependency-name: '@tanstack/solid-router'
       - dependency-name: 'solid-js'
       - dependency-name: 'elysia'
+      # Keep node-integration-tests on langchain v0. The v1 suite installs v1 via additionalDependencies.
+      - dependency-name: 'langchain'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@langchain/*'
+        update-types: ['version-update:semver-major']
     groups:
       aws-sdk:
         patterns:
@@ -39,6 +44,10 @@ updates:
         patterns:
           - 'react-router'
           - '@react-router/*'
+      langchain:
+        patterns:
+          - 'langchain'
+          - '@langchain/*'
     versioning-strategy: increase
     commit-message:
       prefix: feat

From 01f035e469be38203d38125218a3676e5145ce51 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 14:54:59 +0000
Subject: [PATCH 127/169] feat(deps): Bump @embroider/addon-shim from 1.10.3 to
 1.11.0 (#26048)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@embroider/addon-shim](https://github.com/embroider-build/embroider/tree/HEAD/packages/addon-shim)
from 1.10.3 to 1.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/embroider-build/embroider/releases">@​embroider/addon-shim's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.0-<code>@​embroider/addon-shim</code></h2>
<h2>Release (2026-10-23)</h2>
<ul>
<li><code>@​embroider/addon-shim</code> 1.11.0 (minor)</li>
</ul>
<h4>:rocket: Enhancement</h4>
<ul>
<li><code>@embroider/addon-shim</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2845">#2845</a>
addon-shim: remove all runtime dependencies (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 1</h4>
<ul>
<li><a
href="https://github.com/NullVoxPopuli"><code>@​NullVoxPopuli</code></a>'s
reduced-access machine account for AI usage (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
<h2>v4.1.28-<code>@​embroider/compat</code></h2>
<h2>Release (2026-10-20)</h2>
<ul>
<li><code>@​embroider/compat</code> 4.1.28 (patch)</li>
<li><code>@​embroider/config-meta-loader</code> 1.0.1 (patch)</li>
<li><code>@​embroider/core</code> 4.6.10 (patch)</li>
<li><code>@​embroider/macros</code> 1.21.4 (patch)</li>
<li><code>@​embroider/shared-internals</code> 3.2.1 (patch)</li>
<li><code>@​embroider/template-tag-codemod</code> 1.4.2 (patch)</li>
<li><code>@​embroider/vite</code> 1.8.0 (minor)</li>
</ul>
<h4>:rocket: Enhancement</h4>
<ul>
<li><code>@embroider/vite</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2830">#2830</a>
<code>@​embroider/vite</code>: Fingerprint
<code>@​embroider/virtual</code> assets (<a
href="https://github.com/nickschot"><code>@​nickschot</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li>Other
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2839">#2839</a>
update to latest patch of node version for local development (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
<li><code>@embroider/macros</code>,
<code>@embroider/shared-internals</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2834">#2834</a>
convert shared-internals to be a ts project build (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
<li><code>@embroider/compat</code>,
<code>@embroider/config-meta-loader</code>,
<code>@embroider/macros</code>,
<code>@embroider/shared-internals</code>,
<code>@embroider/template-tag-codemod</code>,
<code>@embroider/vite</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2835">#2835</a>
update <a
href="https://github.com/typescript-eslint"><code>@​typescript-eslint</code></a>
(<a href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 2</h4>
<ul>
<li>Chris Manson (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
<li>Nick Schot (<a
href="https://github.com/nickschot"><code>@​nickschot</code></a>)</li>
</ul>
<h2>v8.4.2-<code>@​embroider/addon-dev</code></h2>
<h2>Release (2026-10-05)</h2>
<ul>
<li><code>@​embroider/addon-dev</code> 8.4.2 (patch)</li>
<li><code>@​embroider/compat</code> 4.1.27 (patch)</li>
<li><code>@​embroider/core</code> 4.6.9 (patch)</li>
<li><code>@​embroider/macros</code> 1.21.3 (patch)</li>
<li><code>@​embroider/vite</code> 1.7.15 (patch)</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2827">#2827</a>
Build the packages before the publish (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/embroider-build/embroider/blob/main/CHANGELOG.md">@​embroider/addon-shim's
changelog</a>.</em></p>
<blockquote>
<h1>Embroider Changelog</h1>
<h2>Release (2026-10-23)</h2>
<ul>
<li><code>@​embroider/addon-shim</code> 1.11.0 (minor)</li>
</ul>
<h4>:rocket: Enhancement</h4>
<ul>
<li><code>@embroider/addon-shim</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2845">#2845</a>
addon-shim: remove all runtime dependencies (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 1</h4>
<ul>
<li><a
href="https://github.com/NullVoxPopuli"><code>@​NullVoxPopuli</code></a>'s
reduced-access machine account for AI usage (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
<h2>Release (2026-10-20)</h2>
<ul>
<li><code>@​embroider/compat</code> 4.1.28 (patch)</li>
<li><code>@​embroider/config-meta-loader</code> 1.0.1 (patch)</li>
<li><code>@​embroider/core</code> 4.6.10 (patch)</li>
<li><code>@​embroider/macros</code> 1.21.4 (patch)</li>
<li><code>@​embroider/shared-internals</code> 3.2.1 (patch)</li>
<li><code>@​embroider/template-tag-codemod</code> 1.4.2 (patch)</li>
<li><code>@​embroider/vite</code> 1.8.0 (minor)</li>
</ul>
<h4>:rocket: Enhancement</h4>
<ul>
<li><code>@embroider/vite</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2830">#2830</a>
<code>@​embroider/vite</code>: Fingerprint
<code>@​embroider/virtual</code> assets (<a
href="https://github.com/nickschot"><code>@​nickschot</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li>Other
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2839">#2839</a>
update to latest patch of node version for local development (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
<li><code>@embroider/macros</code>,
<code>@embroider/shared-internals</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2834">#2834</a>
convert shared-internals to be a ts project build (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
<li><code>@embroider/compat</code>,
<code>@embroider/config-meta-loader</code>,
<code>@embroider/macros</code>,
<code>@embroider/shared-internals</code>,
<code>@embroider/template-tag-codemod</code>,
<code>@embroider/vite</code>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2835">#2835</a>
update <a
href="https://github.com/typescript-eslint"><code>@​typescript-eslint</code></a>
(<a href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 2</h4>
<ul>
<li>Chris Manson (<a
href="https://github.com/mansona"><code>@​mansona</code></a>)</li>
<li>Nick Schot (<a
href="https://github.com/nickschot"><code>@​nickschot</code></a>)</li>
</ul>
<h2>Release (2026-10-05)</h2>
<ul>
<li><code>@​embroider/addon-dev</code> 8.4.2 (patch)</li>
<li><code>@​embroider/compat</code> 4.1.27 (patch)</li>
<li><code>@​embroider/core</code> 4.6.9 (patch)</li>
<li><code>@​embroider/macros</code> 1.21.3 (patch)</li>
<li><code>@​embroider/vite</code> 1.7.15 (patch)</li>
</ul>
<h4>:bug: Bug Fix</h4>
<ul>
<li><a
href="https://redirect.github.com/embroider-build/embroider/pull/2827">#2827</a>
Build the packages before the publish (<a
href="https://github.com/NullVoxPopuli-ai-agent"><code>@​NullVoxPopuli-ai-agent</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/embroider-build/embroider/commits/HEAD/packages/addon-shim">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@embroider/addon-shim&package-manager=npm_and_yarn&previous-version=1.10.3&new-version=1.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 packages/ember/package.json |  2 +-
 pnpm-lock.yaml              | 19 ++++++-------------
 2 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/packages/ember/package.json b/packages/ember/package.json
index 244009de7e14..4b8193bb52ca 100644
--- a/packages/ember/package.json
+++ b/packages/ember/package.json
@@ -42,7 +42,7 @@
     "yalc:publish": "yalc publish --push --sig"
   },
   "dependencies": {
-    "@embroider/addon-shim": "^1.10.2",
+    "@embroider/addon-shim": "^1.11.0",
     "@embroider/macros": "^1.20.2",
     "@sentry/browser": "11.10.0",
     "@sentry/conventions": "^0.30.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a7e3f6ecc7f9..7caaa588b0e3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1337,8 +1337,8 @@ importers:
   packages/ember:
     dependencies:
       '@embroider/addon-shim':
-        specifier: ^1.10.2
-        version: 1.10.3(supports-color@10.0.0)
+        specifier: ^1.11.0
+        version: 1.11.0
       '@embroider/macros':
         specifier: ^1.20.2
         version: 1.20.6(@babel/core@8.1.0)(@glint/template@1.8.0)(supports-color@10.0.0)
@@ -4519,8 +4519,8 @@ packages:
       rollup:
         optional: true
 
-  '@embroider/addon-shim@1.10.3':
-    resolution: {integrity: sha512-GYbaiC1v9inbiwVg5s+Sd14Jc66NYxg23mEOocgWAZFCtOfhMnRLaLAA6SytW76myVVYImGHX5PFK4PVuH2yng==}
+  '@embroider/addon-shim@1.11.0':
+    resolution: {integrity: sha512-vXjhIOtvrns9IBFlgEN1imSeXtuVIlLypaDexu7xzsvB4Ef6yruhH33DNd9OmO0nXIB4SbwdkIwEsLYnhrujqA==}
     engines: {node: 12.* || 14.* || >= 16}
 
   '@embroider/compat@4.1.22':
@@ -23703,14 +23703,7 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  '@embroider/addon-shim@1.10.3(supports-color@10.0.0)':
-    dependencies:
-      '@embroider/shared-internals': 3.1.1(supports-color@10.0.0)
-      broccoli-funnel: 3.0.8(supports-color@10.0.0)
-      common-ancestor-path: 1.0.1
-      semver: 7.8.5
-    transitivePeerDependencies:
-      - supports-color
+  '@embroider/addon-shim@1.11.0': {}
 
   '@embroider/compat@4.1.22(@embroider/core@4.6.3(@glint/template@1.8.0)(supports-color@10.0.0))(@glint/template@1.8.0)(supports-color@10.0.0)':
     dependencies:
@@ -31482,7 +31475,7 @@ snapshots:
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@ember/edition-utils': 1.2.0
-      '@embroider/addon-shim': 1.10.3(supports-color@10.0.0)
+      '@embroider/addon-shim': 1.11.0
       '@simple-dom/interface': 1.4.0
       backburner.js: 2.8.0
       broccoli-file-creator: 2.1.1

From 3a7399662eb3ace734c965a36404f6edfd437ea4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 15:56:25 +0100
Subject: [PATCH 128/169] feat(deps): Bump pg and @types/pg (#26042)

Bumps
[pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) and
[@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg).
These dependencies needed to be updated together.
Updates `pg` from 8.16.0 to 8.23.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md">pg's
changelog</a>.</em></p>
<blockquote>
<p>All major and minor releases are briefly explained below.</p>
<p>For richer information consult the commit log on github with
referenced pull requests.</p>
<p>We do not include break-fix version release in this file.</p>
<h2>pg@8.23.0</h2>
<ul>
<li>Add support for query <a
href="https://redirect.github.com/brianc/node-postgres/pull/3652"><code>pipelineing</code></a>.</li>
</ul>
<h2>pg@8.22.0</h2>
<ul>
<li>Add support for <a
href="https://redirect.github.com/brianc/node-postgres/pull/3688">sslnegotiation=direct</a>
for PostgreSQL 17+.</li>
</ul>
<h2>pg@8.21.0</h2>
<ul>
<li>Handle <a
href="https://redirect.github.com/brianc/node-postgres/pull/3521">SASL
SCRAM</a> server error responses properly.</li>
<li>Add support for <a
href="https://redirect.github.com/brianc/node-postgres/pull/3667">node@26</a>.</li>
<li>Add <code>scramMaxIterations</code> <a
href="https://redirect.github.com/brianc/node-postgres/pull/3677">config
option</a>.</li>
<li>Add <code>client.getTransactionStatus()</code> <a
href="https://redirect.github.com/brianc/node-postgres/pull/3645">method</a>.</li>
</ul>
<h2>pg@8.20.0</h2>
<ul>
<li>Add <a
href="https://redirect.github.com/brianc/node-postgres/pull/3620">onConnect</a>
callback to pg.Pool constructor options allowing for async
initialization of newly created &amp; connected pooled clients.</li>
</ul>
<h2>pg@8.19.0</h2>
<ul>
<li><a
href="https://redirect.github.com/brianc/node-postgres/pull/3603">Deprecate
interal query queue</a>.</li>
<li>Pass connection parameters <a
href="https://redirect.github.com/brianc/node-postgres/pull/3602">to
password callback</a>.</li>
</ul>
<h2>pg@8.18.0</h2>
<ul>
<li><a
href="https://redirect.github.com/brianc/node-postgres/pull/3564">Return
the client instance</a> as the result of calling <code>connect</code>
(previously it was <code>void</code>).</li>
</ul>
<h2>pg@8.17.0</h2>
<ul>
<li>Throw correct error if database URL parsing <a
href="https://redirect.github.com/brianc/node-postgres/issues/3513">fails</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/brianc/node-postgres/commit/0980cefebe0ae461da8883703be049fe13ca96cf"><code>0980cef</code></a>
Publish</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/2759b2ccf70535d425688dca8a6aec79de49c1ea"><code>2759b2c</code></a>
fix(pg): run a named statement with an empty text more than once (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3781">#3781</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/7feb7dfd70a9f7e5718ab186c80d2658067ce4af"><code>7feb7df</code></a>
fix(pg): expose detail and hint on errors from the native client (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3780">#3780</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/9683053c1eac7f4a1f8910df0d7abdb5f0cb25a7"><code>9683053</code></a>
fix(pg): do not treat Sync as connection ending (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3772">#3772</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/458903894f3514465b74d623f6b92f713b6b952f"><code>4589038</code></a>
fix: validate server certificate against host when connecting to an IP
addres...</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/9808955838dd84835c4ca904228c9c2eaeda047e"><code>9808955</code></a>
cleanup: Fix typo in comment</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/2b02f645687b8536f209aecc24f1b4bdb4c32d16"><code>2b02f64</code></a>
fix: avoid mutating query config (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3720">#3720</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/0cef6afdf781e4cbe7eb5ac943df3c14b49c33de"><code>0cef6af</code></a>
Reject portal based queries in pipeline mode instead of misrouting rows
(<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3737">#3737</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/299148045f921060b5df91343ab4710d46674b08"><code>2991480</code></a>
Deprecate serializing invalid <code>Date</code>s (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3731">#3731</a>)</li>
<li><a
href="https://github.com/brianc/node-postgres/commit/c940d7c206c8545cb195df2ecde230d9ca0279c8"><code>c940d7c</code></a>
Fail pipelined queries when the connection dies instead of hanging (<a
href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3736">#3736</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/pg` from 8.20.4 to 8.23.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .../bun-integration-tests/package.json        |   4 +-
 .../deno-integration-tests/package.json       |   2 +-
 .../node-integration-tests/package.json       |   2 +-
 pnpm-lock.yaml                                | 112 ++++++++----------
 4 files changed, 53 insertions(+), 67 deletions(-)

diff --git a/dev-packages/bun-integration-tests/package.json b/dev-packages/bun-integration-tests/package.json
index 5bf90187d898..6f09324856c3 100644
--- a/dev-packages/bun-integration-tests/package.json
+++ b/dev-packages/bun-integration-tests/package.json
@@ -18,14 +18,14 @@
     "@sentry/hono": "11.10.0",
     "hono": "^4.13.7",
     "mysql": "^2.18.1",
-    "pg": "8.16.0"
+    "pg": "8.23.1"
   },
   "devDependencies": {
     "@sentry-internal/node-integration-tests": "11.10.0",
     "@sentry-internal/test-utils": "11.10.0",
     "@sentry/core": "11.10.0",
     "@types/mysql": "^2.15.27",
-    "@types/pg": "^8.20.0",
+    "@types/pg": "^8.23.1",
     "bun-types": "^1.2.9",
     "vitest": "^4.1.11"
   }
diff --git a/dev-packages/deno-integration-tests/package.json b/dev-packages/deno-integration-tests/package.json
index 481df5b9cef3..489410c33d6d 100644
--- a/dev-packages/deno-integration-tests/package.json
+++ b/dev-packages/deno-integration-tests/package.json
@@ -19,7 +19,7 @@
     "@sentry/core": "11.10.0",
     "@sentry/deno": "11.10.0",
     "mysql": "^2.18.1",
-    "pg": "^8.22.0"
+    "pg": "^8.23.1"
   },
   "devDependencies": {
     "@sentry-internal/node-integration-tests": "11.10.0",
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 9ce0c955a796..c561cf8b20e8 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -96,7 +96,7 @@
     "node-cron": "^4.6.0",
     "node-schedule": "^2.1.1",
     "openai": "5.18.1",
-    "pg": "8.20.0",
+    "pg": "8.23.1",
     "pino": "10.4.0",
     "pino-next": "npm:pino@^9.12.0",
     "postgres": "^3.4.7",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7caaa588b0e3..ff817df440e5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -362,8 +362,8 @@ importers:
         specifier: ^2.18.1
         version: 2.18.1
       pg:
-        specifier: 8.16.0
-        version: 8.16.0
+        specifier: 8.23.1
+        version: 8.23.1
     devDependencies:
       '@sentry-internal/node-integration-tests':
         specifier: 11.10.0
@@ -378,8 +378,8 @@ importers:
         specifier: ^2.15.27
         version: 2.15.27
       '@types/pg':
-        specifier: ^8.20.0
-        version: 8.20.4
+        specifier: ^8.23.1
+        version: 8.23.1
       bun-types:
         specifier: ^1.2.9
         version: 1.2.9
@@ -570,8 +570,8 @@ importers:
         specifier: ^2.18.1
         version: 2.18.1
       pg:
-        specifier: ^8.22.0
-        version: 8.22.0
+        specifier: ^8.23.1
+        version: 8.23.1
     devDependencies:
       '@sentry-internal/node-integration-tests':
         specifier: 11.10.0
@@ -776,7 +776,7 @@ importers:
         version: 2.2.4
       knex:
         specifier: ^2.5.1
-        version: 2.5.1(mysql2@3.23.3(@types/node@20.19.43))(mysql@2.18.1)(pg@8.20.0)(supports-color@10.0.0)(tedious@19.2.1(supports-color@10.0.0))
+        version: 2.5.1(mysql2@3.23.3(@types/node@20.19.43))(mysql@2.18.1)(pg@8.23.1)(supports-color@10.0.0)(tedious@19.2.1(supports-color@10.0.0))
       koa:
         specifier: ^2.15.2
         version: 2.16.4(supports-color@10.0.0)
@@ -811,8 +811,8 @@ importers:
         specifier: 5.18.1
         version: 5.18.1(ws@8.21.3)(zod@4.6.7)
       pg:
-        specifier: 8.20.0
-        version: 8.20.0
+        specifier: 8.23.1
+        version: 8.23.1
       pino:
         specifier: 10.4.0
         version: 10.4.0
@@ -8950,6 +8950,9 @@ packages:
   '@types/pg@8.20.4':
     resolution: {integrity: sha512-Jz7UDOlIiFJuacC0TlBoLyNtmwlA/wpIyPDd3tvUqlRM+HzkWy2xUgpFpaXtbfTAFF6sIGq5lsCDBdJnhky1Xg==}
 
+  '@types/pg@8.23.1':
+    resolution: {integrity: sha512-fKVHpikPdg4GKks3JuLEhvwSyvwzF23hnabPy6DD8ljVbC7+6J5dQzdv4arV6jqq57djnMgs1HKBxX4P8aBI3A==}
+
   '@types/prop-types@15.7.3':
     resolution: {integrity: sha512-KfRL3PuHmqQLOG+2tGpRO26Ctg+Cq1E01D2DMriKEATHgWLfeNDmq9e29Q9WIky0dQ3NPkd1mzYH8Lm936Z9qw==}
 
@@ -15768,11 +15771,11 @@ packages:
   periscopic@3.1.0:
     resolution: {integrity: sha512-vKiQ8RRtkl9P+r/+oefh25C3fhybptkHKCZSPlcXiJux2tJF55GnEj3BVn4A5gKfq9NWWXXrxkHBwVPUfH0opw==}
 
-  pg-cloudflare@1.4.0:
-    resolution: {integrity: sha512-Vo7z/6rrQYxpNRylp4Tlob2elzbh+N/MOQbxFVWCxS7oEx6jF53GTJFxK2WWpKuBRkmiin4Mt+xofFDjx09R0A==}
+  pg-cloudflare@1.4.1:
+    resolution: {integrity: sha512-6PQbsFWZcp9EmJEwy5cGQ2La+AMWpP46lgbb8X+U/XsHIUweYDNCpeuKck5RxL2MdVFi7krbbEi5nX4Zh7JhrQ==}
 
-  pg-connection-string@2.14.0:
-    resolution: {integrity: sha512-XwWDGcLRGCXAR8F/AM5bG7Q+A3Wm2s6QeEjlOKZLlH3UYcguiqCWKyWXVag5TLTIjR7oOJUY8kcADaZgWPyLeg==}
+  pg-connection-string@2.14.1:
+    resolution: {integrity: sha512-qR3kGNPBLpCNtz0evbKA0Y/MRFXwSSdT+pTJvYp/bXTcReZbvX1kzF0IyTc1QnxqF7AZbOeBhNL8R5mYQZV/MA==}
 
   pg-connection-string@2.6.1:
     resolution: {integrity: sha512-w6ZzNu6oMmIzEAYVw+RLK0+nqHPt8K3ZnknKi+g48Ak2pr3dtljJW3o+D/n2zzCG07Zoe9VOX3aiKpj+BN0pjg==}
@@ -15791,24 +15794,15 @@ packages:
     peerDependencies:
       pg: '>=8.0'
 
-  pg-protocol@1.15.0:
-    resolution: {integrity: sha512-cq9sECI5s0+uPUXjbz8ioyPJni6RzsRib0US67i5IoTZKw8fNeYlVE7u8F4dG7vEJJtc5wdD1K189lCCUwqWTQ==}
+  pg-protocol@1.16.1:
+    resolution: {integrity: sha512-p9VOFMiHB/ZbJATetbg+99PxssTVSQRnyuPSQ67mN1+1KBOjZaZ83ZQzltnxPhJwSsC3nwVjJ10DVJlerbFzLg==}
 
   pg-types@2.2.0:
     resolution: {integrity: sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==}
     engines: {node: '>=4'}
 
-  pg@8.16.0:
-    resolution: {integrity: sha512-7SKfdvP8CTNXjMUzfcVTaI+TDzBEeaUnVwiVGZQD1Hh33Kpev7liQba9uLd4CfN8r9mCVsD0JIpq03+Unpz+kg==}
-    engines: {node: '>= 8.0.0'}
-    peerDependencies:
-      pg-native: '>=3.0.1'
-    peerDependenciesMeta:
-      pg-native:
-        optional: true
-
-  pg@8.20.0:
-    resolution: {integrity: sha512-ldhMxz2r8fl/6QkXnBD3CR9/xg694oT6DZQ2s6c/RI28OjtSOpxnPrUCGOBJ46RCUxcWdx3p6kw/xnDHjKvaRA==}
+  pg@8.22.0:
+    resolution: {integrity: sha512-8wih1vVIBMxoUM2oB4soJsD9tDnDpLv4OXBJ+EJzFsvycD+lfyIreC2gGHq78f8jbLLt+bvlPTFdFZfJkOuzAA==}
     engines: {node: '>= 16.0.0'}
     peerDependencies:
       pg-native: '>=3.0.1'
@@ -15816,8 +15810,8 @@ packages:
       pg-native:
         optional: true
 
-  pg@8.22.0:
-    resolution: {integrity: sha512-8wih1vVIBMxoUM2oB4soJsD9tDnDpLv4OXBJ+EJzFsvycD+lfyIreC2gGHq78f8jbLLt+bvlPTFdFZfJkOuzAA==}
+  pg@8.23.1:
+    resolution: {integrity: sha512-aL96AHANtWjPLDOLqnhx+ngp9+UK7ETEU8VJrDCGvsSSi/mGLcWYsS6Herg7lmaBJe4uwrfqsa7gTEFaSizDoQ==}
     engines: {node: '>= 16.0.0'}
     peerDependencies:
       pg-native: '>=3.0.1'
@@ -26529,7 +26523,7 @@ snapshots:
   '@prisma/adapter-pg@7.2.0':
     dependencies:
       '@prisma/driver-adapter-utils': 7.2.0
-      pg: 8.20.0
+      pg: 8.23.1
       postgres-array: 3.0.4
     transitivePeerDependencies:
       - pg-native
@@ -28236,7 +28230,13 @@ snapshots:
   '@types/pg@8.20.4':
     dependencies:
       '@types/node': 20.19.43
-      pg-protocol: 1.15.0
+      pg-protocol: 1.16.1
+      pg-types: 2.2.0
+
+  '@types/pg@8.23.1':
+    dependencies:
+      '@types/node': 20.19.43
+      pg-protocol: 1.16.1
       pg-types: 2.2.0
 
   '@types/prop-types@15.7.3': {}
@@ -34294,7 +34294,7 @@ snapshots:
 
   klona@2.0.6: {}
 
-  knex@2.5.1(mysql2@3.23.3(@types/node@20.19.43))(mysql@2.18.1)(pg@8.20.0)(supports-color@10.0.0)(tedious@19.2.1(supports-color@10.0.0)):
+  knex@2.5.1(mysql2@3.23.3(@types/node@20.19.43))(mysql@2.18.1)(pg@8.23.1)(supports-color@10.0.0)(tedious@19.2.1(supports-color@10.0.0)):
     dependencies:
       colorette: 2.0.19
       commander: 10.0.1
@@ -34313,7 +34313,7 @@ snapshots:
     optionalDependencies:
       mysql: 2.18.1
       mysql2: 3.23.3(@types/node@20.19.43)
-      pg: 8.20.0
+      pg: 8.23.1
       tedious: 19.2.1(supports-color@10.0.0)
     transitivePeerDependencies:
       - supports-color
@@ -37229,10 +37229,10 @@ snapshots:
       estree-walker: 3.0.3
       is-reference: 3.0.2
 
-  pg-cloudflare@1.4.0:
+  pg-cloudflare@1.4.1:
     optional: true
 
-  pg-connection-string@2.14.0: {}
+  pg-connection-string@2.14.1: {}
 
   pg-connection-string@2.6.1: {}
 
@@ -37242,19 +37242,15 @@ snapshots:
 
   pg-int8@1.0.1: {}
 
-  pg-pool@3.14.0(pg@8.16.0):
-    dependencies:
-      pg: 8.16.0
-
-  pg-pool@3.14.0(pg@8.20.0):
-    dependencies:
-      pg: 8.20.0
-
   pg-pool@3.14.0(pg@8.22.0):
     dependencies:
       pg: 8.22.0
 
-  pg-protocol@1.15.0: {}
+  pg-pool@3.14.0(pg@8.23.1):
+    dependencies:
+      pg: 8.23.1
+
+  pg-protocol@1.16.1: {}
 
   pg-types@2.2.0:
     dependencies:
@@ -37264,35 +37260,25 @@ snapshots:
       postgres-date: 1.0.7
       postgres-interval: 1.2.0
 
-  pg@8.16.0:
-    dependencies:
-      pg-connection-string: 2.14.0
-      pg-pool: 3.14.0(pg@8.16.0)
-      pg-protocol: 1.15.0
-      pg-types: 2.2.0
-      pgpass: 1.0.5
-    optionalDependencies:
-      pg-cloudflare: 1.4.0
-
-  pg@8.20.0:
+  pg@8.22.0:
     dependencies:
-      pg-connection-string: 2.14.0
-      pg-pool: 3.14.0(pg@8.20.0)
-      pg-protocol: 1.15.0
+      pg-connection-string: 2.14.1
+      pg-pool: 3.14.0(pg@8.22.0)
+      pg-protocol: 1.16.1
       pg-types: 2.2.0
       pgpass: 1.0.5
     optionalDependencies:
-      pg-cloudflare: 1.4.0
+      pg-cloudflare: 1.4.1
 
-  pg@8.22.0:
+  pg@8.23.1:
     dependencies:
-      pg-connection-string: 2.14.0
-      pg-pool: 3.14.0(pg@8.22.0)
-      pg-protocol: 1.15.0
+      pg-connection-string: 2.14.1
+      pg-pool: 3.14.0(pg@8.23.1)
+      pg-protocol: 1.16.1
       pg-types: 2.2.0
       pgpass: 1.0.5
     optionalDependencies:
-      pg-cloudflare: 1.4.0
+      pg-cloudflare: 1.4.1
 
   pgpass@1.0.5:
     dependencies:

From 294441525c340ac0e121f716c5912a36644ce4c7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 16:20:38 +0100
Subject: [PATCH 129/169] feat(deps): Bump @flue/runtime from 2.0.3 to 2.3.0
 (#26044)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@flue/runtime](https://github.com/withastro/flue/tree/HEAD/packages/runtime)
from 2.0.3 to 2.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/withastro/flue/releases">@​flue/runtime's
releases</a>.</em></p>
<blockquote>
<h2><code>@​flue/runtime</code><a
href="https://github.com/2"><code>@​2</code></a>.2.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>2cb57be: Fix Claude models on the <code>cloudflare-ai-gateway</code>
provider failing with <code>404 not_found_error: model:
claude-sonnet-4.6 was not found</code>. Since Pi 0.84.3 the gateway
catalog lists Claude models with dotted versions
(<code>claude-sonnet-4.6</code>), but the gateway's native Anthropic
endpoint forwards the model ID to Anthropic, which only accepts dashed
IDs. Flue now registers these models under Anthropic's IDs
(<code>cloudflare-ai-gateway/claude-sonnet-4-6</code>); dotted
specifiers still resolve to them. The <code>cloudflare</code> binding
provider, which uses Cloudflare's dotted catalog names, is
unchanged.</li>
</ul>
<h2><code>@​flue/runtime</code><a
href="https://github.com/2"><code>@​2</code></a>.2.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>548937e: Fix model specifiers that stopped resolving after the Pi
0.87.1 upgrade. Pi renamed the <code>cloudflare-ai-gateway</code> Claude
model IDs from dashed versions to dotted versions
(<code>claude-sonnet-4-6</code> → <code>claude-sonnet-4.6</code>), so
existing specifiers such as
<code>cloudflare-ai-gateway/claude-sonnet-4-6</code> failed with
<code>Unknown model ID</code>. When a model ID isn't in the catalog but
matches exactly one catalog ID that differs only in <code>-</code>
versus <code>.</code> between version digits, Flue now resolves to that
model and logs a one-time warning suggesting the current ID.</li>
</ul>
<h2><code>@​flue/runtime</code><a
href="https://github.com/2"><code>@​2</code></a>.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p>54cabb7: Add bounded conversation history reads so long-running chats
no longer transfer the whole transcript on every page load or
reconnect.</p>
<ul>
<li><code>client.history({ limit })</code> reads only the newest
messages. The snapshot keeps the head <code>offset</code>, the
<code>incarnation</code>, and every settlement, and adds a
<code>before</code> cursor.</li>
<li><code>client.historyBefore(cursor, { limit })</code> reads older
messages one page at a time. The page size is required.</li>
<li><code>client.observe({ limit })</code> hydrates only the newest
messages, then grows forward with live updates. Rehydration after a
reconnect reads from the window's oldest message, so no gap opens. The
runtime cuts <code>conversation-reset</code> snapshots to the same
window. The observed state's <code>before</code> cursor feeds
<code>historyBefore()</code>, and a changed cursor means the window
re-based.</li>
<li>A window never cuts out a message that can still receive live
updates, such as a response still streaming above messages delivered
after it. It may hold more than <code>limit</code> messages.</li>
<li>Cursors are opaque and bound to one stream generation. After the
stream is reset and regrown, reads with an old cursor are rejected with
<code>history_cursor_not_found</code> (410), even when message ids
repeat, and <code>observe()</code> re-bases.</li>
<li><code>readSubmissionReply()</code> now requires
<code>settlements</code>, so history pages are not accepted. It falls
back to the latest assistant message only on a complete conversation,
never on a bounded window where that message may belong to another
submission.</li>
</ul>
<p>Unbounded reads are unchanged. <code>@flue/react</code> still
observes the whole conversation.</p>
</li>
<li>
<p>2663e50: Support document attachments (PDFs) on user messages.
<code>DeliveredAttachment</code> is now a union of image and document
attachments — <code>{ type: 'document', data, mimeType:
'application/pdf', filename? }</code> — accepted on
<code>dispatch()</code>, the <code>init()</code> handle, and direct HTTP
prompts. <code>session.prompt()</code>, <code>skill()</code>, and
<code>task()</code> gain a <code>documents</code> option alongside
<code>images</code>, and <code>@flue/react</code>'s
<code>sendMessage()</code> gains a <code>documents</code> option.
Documents are forwarded to the model as native document content:
Anthropic <code>document</code> blocks, OpenAI (and Azure OpenAI)
Responses <code>input_file</code> parts, and Google
<code>inlineData</code>. On other model APIs the document is replaced in
model context with a text placeholder saying it was omitted. Documents
are stored like images — as canonical attachments projected as
<code>file</code> parts with <code>mediaType: 'application/pdf'</code> —
so existing conversations and persistence adapters need no migration.
The SDK also exports <code>DeliveredImageAttachment</code> and
<code>DeliveredDocumentAttachment</code>.</p>
</li>
<li>
<p>3b1adfd: Conversation messages now carry a server-authored
<code>timestamp</code> (ISO 8601 capture time of the underlying durable
record) in <code>history()</code>, <code>observe()</code>, and
<code>useFlueAgent</code>. It works for every role and for existing
conversations. <code>metadata</code> remains entirely agent-authored.
Conversation settlements carry the same <code>timestamp</code> for when
the submission settled.</p>
</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>43d15d1: Fix Cloudflare-routed Anthropic models
(<code>cloudflare/anthropic/*</code>) failing with <code>betas: Extra
inputs are not permitted</code> whenever the agent had tools. Anthropic
beta features are now sent in the <code>anthropic-beta</code> request
header instead of the request body.</li>
<li>89032c5: Adds support for GPT-6 Sol, GPT-6 Luna, and Claude Opus
5.5. Flue now uses Pi 0.87.1, so you can pass these models to
<code>useModel()</code> without extra configuration. The model list at
<code>https://flueframework.com/models.json</code> also includes them
now. There are no public API changes.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/withastro/flue/blob/main/CHANGELOG.md">@​flue/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>2.3.0 - 2026-10-12</h2>
<h3>New Features</h3>
<ul>
<li><strong>Updated <code>@earendil-works/pi-ai</code> and
<code>@earendil-works/pi-agent-core</code> to 1.1.0.</strong> New models
resolve with no configuration, including Claude Sonnet 5.5
(<code>anthropic/claude-sonnet-5-5</code>), Claude Haiku 5.5
(<code>anthropic/claude-haiku-5-5</code>), and GPT-6.1 Sol
(<code>openai/gpt-6.1-sol</code>). <strong>Azure users must
update:</strong> Pi renamed the Azure provider from
<code>azure-openai-responses</code> to <code>azure</code>, so change
<code>azure-openai-responses/...</code> model specifiers and
<code>providers</code> config entries to <code>azure</code>. The
<code>AZURE_OPENAI_*</code> environment variables are unchanged. Tool
and turn <code>durationMs</code> values now come from Pi's monotonic
timing, so a tool's duration covers only its execution, not Flue's hooks
or result storage.</li>
</ul>
<h3>Fixes &amp; Other Changes</h3>
<ul>
<li><strong><code>useAgentFinish</code> callbacks once again see state
written during the response.</strong> Since 2.2.0, finish hooks ran
against the agent render from before the response's final turn, so a
durable guard set by a finish callback — the documented
<code>usePersistentState</code> pattern for appending a reminder once —
was never observed: the callback re-appended on every cycle until the
response failed at the runaway-loop ceiling. The agent now re-renders
before each finish-hook cycle (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/818">#818</a>).</li>
<li><strong><code>read_skill_resource</code> accepts a packaged skill
path without its leading <code>/</code>.</strong> Models often echo the
advertised <code>/.flue/packaged-skills/...</code> path without the
slash, and the read failed as not found (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/781">#781</a>).</li>
<li><strong>The local sandbox SIGKILLs a command's whole process group
after the grace period, even when the shell exits first.</strong> On an
<code>exec()</code> timeout or abort, the pending SIGKILL was cancelled
once the shell's pipes closed, so a process that ignored SIGTERM and
held none of the shell's output kept running after <code>exec()</code>
returned (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/809">#809</a>).</li>
<li><strong>Execution interceptors see <code>agentName</code> on model,
tool, and shell steps, not only on the outer <code>agent</code>
operation.</strong> The root harness's execution context carried only
the instance id, so an interceptor that branches per agent took its
default branch on every step (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/785">#785</a>).</li>
<li><strong><code>flue init --target cloudflare</code> scaffolds the
Workers AI binding that keyless <code>cloudflare/...</code> models need,
commented out in <code>wrangler.jsonc</code>.</strong> The generated
agent suggested switching to a keyless Cloudflare model but nothing
declared <code>env.AI</code>; it now points at the binding to uncomment.
The binding stays off by default because it reaches your Cloudflare
account even in local dev (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/739">#739</a>).</li>
<li><strong>The E2B sandbox blueprint returns a non-zero exit from
<code>exec()</code> instead of throwing.</strong> E2B's
<code>commands.run()</code> throws <code>CommandExitError</code> on a
non-zero exit, so a failing command rejected with no command or stderr
instead of resolving with its <code>exitCode</code>. The blueprint is
bumped to version 2; run <code>flue update sandbox e2b</code> to update
an existing integration (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/805">#805</a>).</li>
</ul>
<h2>2.2.2 - 2026-09-28</h2>
<h3>Fixes &amp; Other Changes</h3>
<ul>
<li><strong>Claude models on the <code>cloudflare-ai-gateway</code>
provider are registered under Anthropic's dashed ids, fixing <code>404
not_found_error: model: claude-sonnet-4.6 was not found</code>.</strong>
Since Pi 0.84.3 the gateway catalog lists Claude models with dotted
versions (<code>claude-sonnet-4.6</code>), but the gateway's native
Anthropic endpoint forwards the model id to Anthropic, which only
accepts dashed ids. Flue now registers these models under Anthropic's
ids (<code>cloudflare-ai-gateway/claude-sonnet-4-6</code>); dotted
specifiers still resolve to them. The <code>cloudflare</code> binding
provider, which uses Cloudflare's dotted catalog names, is unchanged (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/793">#793</a>).</li>
</ul>
<h2>2.2.1 - 2026-09-28</h2>
<h3>Fixes &amp; Other Changes</h3>
<ul>
<li><strong>Model specifiers that stopped resolving after the Pi 0.87.1
upgrade resolve again.</strong> Pi renamed the
<code>cloudflare-ai-gateway</code> Claude model ids from dashed to
dotted versions (<code>claude-sonnet-4-6</code> →
<code>claude-sonnet-4.6</code>), so existing specifiers such as
<code>cloudflare-ai-gateway/claude-sonnet-4-6</code> failed with
<code>Unknown model ID</code>. When a model id is not in the catalog but
matches exactly one catalog id that differs only in <code>-</code>
versus <code>.</code> between version digits, Flue now resolves to that
model and logs a one-time warning suggesting the current id (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/791">#791</a>).</li>
</ul>
<h2>2.2.0 - 2026-09-28</h2>
<h3>New Features</h3>
<ul>
<li><strong>Bounded conversation history reads: long-running chats no
longer transfer the whole transcript on every page load or
reconnect.</strong> <code>client.history({ limit })</code> reads only
the newest messages — the snapshot keeps the head <code>offset</code>,
the <code>incarnation</code>, and every settlement, and adds a
<code>before</code> cursor. <code>client.historyBefore(cursor, { limit
})</code> reads older messages one page at a time (the page size is
required). <code>client.observe({ limit })</code> hydrates only the
newest messages, then grows forward with live updates; rehydration after
a reconnect reads from the window's oldest message so no gap opens, the
runtime cuts <code>conversation-reset</code> snapshots to the same
window, the observed state's <code>before</code> cursor feeds
<code>historyBefore()</code>, and a changed cursor means the window
re-based. A window never cuts out a message that can still receive live
updates (such as a response still streaming above messages delivered
after it), so it may hold more than <code>limit</code> messages. Cursors
are opaque and bound to one stream generation: after the stream is reset
and regrown, reads with an old cursor are rejected with
<code>history_cursor_not_found</code> (410), even when message ids
repeat, and <code>observe()</code> re-bases.
<code>readSubmissionReply()</code> now requires
<code>settlements</code>, so history pages are not accepted; it falls
back to the latest assistant message only on a complete conversation,
never on a bounded window where that message may belong to another
submission. Unbounded reads are unchanged, and <code>@flue/react</code>
still observes the whole conversation (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/767">#767</a>).</li>
<li><strong>Document attachments (PDFs) on user messages.</strong>
<code>DeliveredAttachment</code> is now a union of image and document
attachments — <code>{ type: 'document', data, mimeType:
'application/pdf', filename? }</code> — accepted on
<code>dispatch()</code>, the <code>init()</code> handle, and direct HTTP
prompts. <code>session.prompt()</code>, <code>skill()</code>, and
<code>task()</code> gain a <code>documents</code> option alongside
<code>images</code>, and <code>@flue/react</code>'s
<code>sendMessage()</code> gains a <code>documents</code> option.
Documents are forwarded to the model as native document content:
Anthropic <code>document</code> blocks, OpenAI (and Azure OpenAI)
Responses <code>input_file</code> parts, and Google
<code>inlineData</code>; on other model APIs the document is replaced in
model context with a text placeholder saying it was omitted. Documents
are stored like images — as canonical attachments projected as
<code>file</code> parts with <code>mediaType: 'application/pdf'</code> —
so existing conversations and persistence adapters need no migration.
The SDK also exports <code>DeliveredImageAttachment</code> and
<code>DeliveredDocumentAttachment</code> (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/766">#766</a>).</li>
<li><strong>Conversation messages carry a server-authored
<code>timestamp</code>.</strong> The ISO 8601 capture time of the
underlying durable record is exposed in <code>history()</code>,
<code>observe()</code>, and <code>useFlueAgent</code> for every role,
including existing conversations; <code>metadata</code> remains entirely
agent-authored. Conversation settlements carry the same
<code>timestamp</code> for when the submission settled (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/772">#772</a>).</li>
</ul>
<h3>Fixes &amp; Other Changes</h3>
<ul>
<li>Updated <code>@earendil-works/pi-ai</code> and
<code>@earendil-works/pi-agent-core</code> to 0.87.1, adding support for
GPT-6 Sol, GPT-6 Luna, and Claude Opus 5.5 — pass these models to
<code>useModel()</code> without extra configuration. The model list at
<code>https://flueframework.com/models.json</code> also includes them.
There are no public API changes (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/771">#771</a>).</li>
<li><strong>Cloudflare-routed Anthropic models
(<code>cloudflare/anthropic/*</code>) no longer fail with <code>betas:
Extra inputs are not permitted</code> when the agent has tools.</strong>
Anthropic beta features are now sent in the <code>anthropic-beta</code>
request header instead of the request body (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/777">#777</a>).</li>
<li><strong>Markdown and skill imports written as Node subpath imports
now transform correctly.</strong> Specifiers resolved through
package.json <code>imports</code> (e.g. <code>import core from
'#src/prompts/core.md'</code>) now transform like relative and package
specifiers in both dev and production builds: <code>.md</code> imports
load as markdown text and <code>SKILL.md</code> imports package the
skill directory. Previously the leading <code>#</code> was mistaken for
a fragment marker, the import was left untransformed, and Vite tried to
parse the Markdown file as JavaScript. Queried forms (<code>?raw</code>,
<code>?url</code>, ...) continue to be delegated to Vite (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/780">#780</a>).</li>
</ul>
<h2>2.1.1 - 2026-09-23</h2>
<h3>Fixes &amp; Other Changes</h3>
<ul>
<li><strong><code>useFlueAgent</code>'s <code>status</code> stays
<code>streaming</code> after a reload for an unsettled
submission.</strong> The reducer now derives active (unsettled)
submission ids from the observed conversation — message
<code>submissionId</code>s minus settled ids — instead of relying only
on the in-memory admission receipt, which does not survive a reload.
Previously a fresh hook would report <code>idle</code> for an
admitted-but-silent prompt or a running tool call until the next
assistant text part streamed (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/756">#756</a>).</li>
<li><strong><code>useFlueAgent</code>'s <code>status</code> contract is
clarified to match the reducer's actual aggregate behavior.</strong>
<code>status</code> reflects the observed conversation's activity —
including submissions admitted out-of-band (webhooks, dispatches, other
clients) — combined with the hook's in-memory local admission
recollection. The README now documents the full precedence order
(failed-local-settlement <code>error</code> → streaming text →
<code>submitted</code> → active/recollected submission
<code>streaming</code> → retained-failed-send <code>error</code> →
<code>idle</code>) and notes that a locally-admitted submission that has
not yet settled keeps <code>streaming</code> across empty or absent
observations until it settles. A submission admitted but not yet
materialized into a message at reload time is documented as a residual
window (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/757">#757</a>).</li>
<li><strong>Tool arguments and results of every payload shape are
recorded on the standard <code>gen_ai.tool.call.arguments</code> /
<code>gen_ai.tool.call.result</code> attributes, so OTel backends can
display them.</strong> The shape-based diversion to the vendor
<code>flue.tool.call.*</code> fallback keys is removed — those keys are
no longer emitted, and their constants are retained for source
compatibility. Payloads record exactly as before: objects/arrays as JSON
strings, strings byte-for-byte within the content budget, other scalars
as their JSON form (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/748">#748</a>).</li>
<li><strong>Trace content truncation now scales linearly for long
message arrays.</strong> Large traced conversations no longer repeatedly
serialize the remaining history while fitting
<code>gen_ai.input.messages</code> to the attribute budget, avoiding
request latency and Cloudflare Durable Object CPU-limit resets (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/743">#743</a>).</li>
<li><strong>Flue packages and newly scaffolded applications can share a
compatible Hono installation.</strong> Hono dependencies now use
<code>^4.12.32</code>, preventing fresh projects from installing a newer
root Hono alongside the runtime's older exact version and failing
typecheck (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/741">#741</a>).</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/withastro/flue/commit/deee93b40d275ecc9a50c50af2158f20089d54bc"><code>deee93b</code></a>
v2.3.0</li>
<li><a
href="https://github.com/withastro/flue/commit/95a8c86244557e4c257b0fbd7eef2481de2c2150"><code>95a8c86</code></a>
chore: remove Changesets release tooling</li>
<li><a
href="https://github.com/withastro/flue/commit/658325942b0f4eecd888f9698ab0bebb3b749163"><code>6583259</code></a>
Version Packages (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/794">#794</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/2cb57be199b1b15bf182bd26c09a7c6198a8fad1"><code>2cb57be</code></a>
Register AI Gateway Claude models under Anthropic's dashed ids (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/793">#793</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/3922a350ed8c778c71e050b6fafabec0bf536a2b"><code>3922a35</code></a>
Version Packages (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/792">#792</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/548937e713916bb13d3cac2c9afb2c675844df60"><code>548937e</code></a>
Resolve model IDs that differ only in version separators (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/791">#791</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/6c76cc55a49fe6d135cc3531432b608f02a79585"><code>6c76cc5</code></a>
Version Packages (<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/770">#770</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/43d15d1a82851e8d891d938ca8d8df4a2b7d34ec"><code>43d15d1</code></a>
Fix Cloudflare Anthropic binding beta messages path (closes <a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/721">#721</a>)
(<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/777">#777</a>)</li>
<li><a
href="https://github.com/withastro/flue/commit/89032c55b14e6b82bb3dd45912c8e7c21a55b6b9"><code>89032c5</code></a>
Support GPT-6 Sol/Luna and Claude Opus 5.5 — bump pi to 0.87.1
(Discussion <a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/7">#7</a>...</li>
<li><a
href="https://github.com/withastro/flue/commit/3b1adfde80713674254808f7d5d83861ce3dac3e"><code>3b1adfd</code></a>
Add server-authored timestamp to conversation messages and settlements
(<a
href="https://github.com/withastro/flue/tree/HEAD/packages/runtime/issues/604">#604</a>)...</li>
<li>Additional commits viewable in <a
href="https://github.com/withastro/flue/commits/v2.3.0/packages/runtime">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
---
 .../node-integration-tests/package.json       |   2 +-
 pnpm-lock.yaml                                | 172 +++---------------
 2 files changed, 31 insertions(+), 143 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index c561cf8b20e8..821f5ed8d73a 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -39,7 +39,7 @@
     "@earendil-works/chord": "^1.4.0",
     "@earendil-works/pi-ai": "^1.4.0",
     "@earendil-works/pi-durable": "^1.4.0",
-    "@flue/runtime": "2.0.3",
+    "@flue/runtime": "2.3.0",
     "@google/genai": "^1.20.0",
     "@growthbook/growthbook": "^1.6.5",
     "@hapi/hapi": "^21.3.10",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ff817df440e5..6a05b52f9b54 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -640,8 +640,8 @@ importers:
         specifier: ^1.4.0
         version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@flue/runtime':
-        specifier: 2.0.3
-        version: 2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)
+        specifier: 2.3.0
+        version: 2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@google/genai':
         specifier: ^1.20.0
         version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
@@ -2776,15 +2776,6 @@ packages:
       zod:
         optional: true
 
-  '@anthropic-ai/sdk@0.91.1':
-    resolution: {integrity: sha512-LAmu761tSN9r66ixvmciswUj/ZC+1Q4iAfpedTfSVLeswRwnY3n2Nb6Tsk+cLPP28aLOPWeMgIuTuCcMC6W/iw==}
-    hasBin: true
-    peerDependencies:
-      zod: ^3.25.0 || ^4.0.0
-    peerDependenciesMeta:
-      zod:
-        optional: true
-
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5':
     resolution: {integrity: sha512-/nmTAee5mBly9QiIQSGIKITv9TcEyLTQJFbYjfyWCEfYofxQgurMrT5fLDIRneSPqICucRTxgPMHmc6/q7cgfw==}
     engines: {node: '>=18.0.0'}
@@ -2939,10 +2930,6 @@ packages:
     resolution: {integrity: sha512-CXNESwkQC9jdrUG6cKXBfudVt1frGcYQykcCYbNclVrsewuGMbo3PlFjRteMe4OftNAqhyc3xC2jTz7SUqLasQ==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/client-bedrock-runtime@3.1048.0':
-    resolution: {integrity: sha512-u+NT61JZEkRFtpL0CAw1N1dwxnaLgwVXQl/zjJxTGgLyS/jTIdg2SdoEoCTHxgDyCnqa1HEi9QOoE9/pYRNpOQ==}
-    engines: {node: '>=20.0.0'}
-
   '@aws-sdk/client-bedrock-runtime@3.1127.0':
     resolution: {integrity: sha512-IDl/lrPb90aH+pZFHGNDmgH9nAUQj5PlZH1sJ3w7RikctyjHSnY3oNjZhrLoaBoQn/rNK0zsP6OHEqEhj2tdLA==}
     engines: {node: '>=20.0.0'}
@@ -3099,10 +3086,6 @@ packages:
     resolution: {integrity: sha512-+aHvUugVBuMPXxgkPfWnTMyGdE/yWS8GHi5+qQ37HowS0YqzrbuaDLznj+Dtmtu5jgCdqz36gXmujOToUhNNWw==}
     engines: {node: '>=20.0.0'}
 
-  '@aws-sdk/token-providers@3.1048.0':
-    resolution: {integrity: sha512-k0y/GcuesuSfWyUM0WamrGyeZmltRYaPbHO82UDA6mZ/doB+FOHKutikPAtSXMn/hDz970cF+iRuuiYO9VEbAA==}
-    engines: {node: '>=20.0.0'}
-
   '@aws-sdk/token-providers@3.1127.0':
     resolution: {integrity: sha512-Dv2TMWBshJ+tF6ahs2Sy5bh4Iabsd4GAQqVvE9XZmYmnoaVbpS2QKIKE/HRacc7bTtbjEEvP+laGzHvHlf1CiQ==}
     engines: {node: '>=20.0.0'}
@@ -4457,15 +4440,10 @@ packages:
     resolution: {integrity: sha512-dTbgyz4xgDS5KAUFx1bFENqj0Cr1N3tYxJJOYStc6g6HS78FSBZydyoCwLoddiQRF+VgRS0fpgAi+iKxjZ3BQA==}
     engines: {node: '>=22.19.0'}
 
-  '@earendil-works/pi-agent-core@0.83.0':
-    resolution: {integrity: sha512-RorGp9OH5l3ElpuC5a5ZQ2eWcchZGXflXRzVGkV99y3y6tT+LLNyxoYIdVKvTKWEObwhExeQbTH0fI2tE4iX4g==}
+  '@earendil-works/pi-agent-core@1.4.0':
+    resolution: {integrity: sha512-PoKY84SKUwnt7S5QBZaGUqfNO1kjP3KHpHUA9QpFTj4cOjaVWMYIcBPJ6FDRCdE8Zen9OSECQUd0uUfVgtSmgA==}
     engines: {node: '>=22.19.0'}
 
-  '@earendil-works/pi-ai@0.83.0':
-    resolution: {integrity: sha512-m3IZD4g3er0V8TC9+Vpgw/sjTKqcJlkcIBy/JvsgRubuuik3tAVzyugUg4rVrShIkkOT69mEd34NEqKUIsl6JQ==}
-    engines: {node: '>=22.19.0'}
-    hasBin: true
-
   '@earendil-works/pi-ai@1.4.0':
     resolution: {integrity: sha512-hQM/C4+1w8rHYACzDDf+0vQMnEnpzIop1tptIERVgR3ZeT/hHSzBNG8PaWPgxWQjqSeKCyBZSyp8uTT6eKK1pQ==}
     engines: {node: '>=22.19.0'}
@@ -5236,8 +5214,8 @@ packages:
   '@fastify/proxy-addr@5.1.0':
     resolution: {integrity: sha512-INS+6gh91cLUjB+PVHfu1UqcB76Sqtpyp7bnL+FYojhjygvOPA9ctiD/JDKsyD9Xgu4hUhCSJBPig/w7duNajw==}
 
-  '@flue/runtime@2.0.3':
-    resolution: {integrity: sha512-RfWyZG9x2hlDb1264XTESX42tzzG3AA8er3XjaTIxIMh28pTD91zKd9Jh6PFXKeTkZegLsGiJKDxmiCddlyeug==}
+  '@flue/runtime@2.3.0':
+    resolution: {integrity: sha512-Sb3Dix9PArIzwr7lmAZCr2csU7OUMHsEhIqYKCiqgldyt33u23k59CNoD947MLXpBaWXAz6CEd/Xv1LLI0cHYg==}
     engines: {node: '>=22.19.0'}
 
   '@gar/promisify@1.1.3':
@@ -6067,14 +6045,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  '@mistralai/mistralai@2.2.6':
-    resolution: {integrity: sha512-W8pX7zHxjJvMIpw8JMxeJEleapXX0Q9NPszdNzqkM3MIEoIGPObdodujj+WHteXEvGfaP/AMwlNyRfEzSY6dQQ==}
-    peerDependencies:
-      '@opentelemetry/api': ^1.9.0
-    peerDependenciesMeta:
-      '@opentelemetry/api':
-        optional: true
-
   '@mistralai/mistralai@3.3.0':
     resolution: {integrity: sha512-b5NSkQ8lFBxwZfA4Vj5oHxs7Jw7VrZRI2E9g95sigQiTi3NsQ//o6y3nDXjKUPWjksfagjH3STEFCYBg19SMvg==}
     peerDependencies:
@@ -8348,10 +8318,6 @@ packages:
     resolution: {integrity: sha512-/T6E1jzCL0fErS9uq8JqES/5yYQQ4ppVmmYHwXw2nlov8KFzLb+3QqHR5iAun1BsuAB50IPxZliV8YMgghLwhA==}
     engines: {node: '>=18.0.0'}
 
-  '@smithy/node-http-handler@4.7.3':
-    resolution: {integrity: sha512-/jPhevcTFPMVl6KNjbaI47iOg1zxC7IsnX4PQDGVZKMFceOXtB8IEYaB7a9VvkP/3oC60WzTeKocvSI7vLT0vA==}
-    engines: {node: '>=18.0.0'}
-
   '@smithy/property-provider@4.2.14':
     resolution: {integrity: sha512-WuM31CgfsnQ/10i7NYr0PyxqknD72Y5uMfUMVSniPjbEPceiTErb4eIqJQ+pdxNEAUEWrewrGjIRjVbVHsxZiQ==}
     engines: {node: '>=18.0.0'}
@@ -15364,18 +15330,6 @@ packages:
       zod:
         optional: true
 
-  openai@6.26.0:
-    resolution: {integrity: sha512-zd23dbWTjiJ6sSAX6s0HrCZi41JwTA1bQVs0wLQPZ2/5o2gxOJA5wh7yOAUgwYybfhDXyhwlpeQf7Mlgx8EOCA==}
-    hasBin: true
-    peerDependencies:
-      ws: ^8.18.0
-      zod: ^3.25 || ^4.0
-    peerDependenciesMeta:
-      ws:
-        optional: true
-      zod:
-        optional: true
-
   openai@7.19.0:
     resolution: {integrity: sha512-MX2s3u2L5racTO0CC/SWpCOasJQBCJrqLKXK+l82cAhdeF8mPMBEe/gxMm0ZFa2xpKpOFLRjxv5afYEZbBXmbQ==}
     engines: {node: '>=22.0.0'}
@@ -18262,9 +18216,6 @@ packages:
   typebox@1.3.27:
     resolution: {integrity: sha512-zu+jc1pcy4UiNThxikUr36f0Rybk9PEeCg/NE6adeWr/SKsdNO4EzZHYRDlv2YCVAfj3Odq3dESSo/jNyoBXzA==}
 
-  typebox@1.3.7:
-    resolution: {integrity: sha512-meKuifc33Pccx0O6PdIzYMq3Og8zvP4TIi/a+Bw3AEMZMxOD0+RHGQvpglEe6Zdy3wZ8nqn/j95h8LUZLk/6Hg==}
-
   typed-array-buffer@1.0.3:
     resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
     engines: {node: '>= 0.4'}
@@ -20025,12 +19976,6 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
-  '@anthropic-ai/sdk@0.91.1(zod@4.6.7)':
-    dependencies:
-      json-schema-to-ts: 3.1.1
-    optionalDependencies:
-      zod: 4.6.7
-
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.19.0
@@ -20235,22 +20180,26 @@ snapshots:
       '@aws-sdk/util-locate-window': 3.535.0
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
+    optional: true
 
   '@aws-crypto/sha256-js@5.2.0':
     dependencies:
       '@aws-crypto/util': 5.2.0
       '@aws-sdk/types': 3.975.0
       tslib: 2.8.1
+    optional: true
 
   '@aws-crypto/supports-web-crypto@5.2.0':
     dependencies:
       tslib: 2.8.1
+    optional: true
 
   '@aws-crypto/util@5.2.0':
     dependencies:
       '@aws-sdk/types': 3.975.0
       '@smithy/util-utf8': 2.3.0
       tslib: 2.8.1
+    optional: true
 
   '@aws-sdk/checksums@3.1002.1':
     dependencies:
@@ -20260,23 +20209,6 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/client-bedrock-runtime@3.1048.0':
-    dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.979.1
-      '@aws-sdk/credential-provider-node': 3.972.92
-      '@aws-sdk/eventstream-handler-node': 3.972.40
-      '@aws-sdk/middleware-eventstream': 3.972.36
-      '@aws-sdk/middleware-websocket': 3.972.62
-      '@aws-sdk/token-providers': 3.1048.0
-      '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.38.1
-      '@smithy/fetch-http-handler': 5.8.0
-      '@smithy/node-http-handler': 4.12.1
-      '@smithy/types': 4.19.0
-      tslib: 2.8.1
-
   '@aws-sdk/client-bedrock-runtime@3.1127.0':
     dependencies:
       '@aws-sdk/core': 3.979.1
@@ -20790,15 +20722,6 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@aws-sdk/token-providers@3.1048.0':
-    dependencies:
-      '@aws-sdk/core': 3.979.1
-      '@aws-sdk/nested-clients': 3.997.54
-      '@aws-sdk/types': 3.975.0
-      '@smithy/core': 3.38.1
-      '@smithy/types': 4.19.0
-      tslib: 2.8.1
-
   '@aws-sdk/token-providers@3.1127.0':
     dependencies:
       '@aws-sdk/core': 3.979.1
@@ -20852,6 +20775,7 @@ snapshots:
   '@aws-sdk/util-locate-window@3.535.0':
     dependencies:
       tslib: 2.8.1
+    optional: true
 
   '@aws-sdk/util-user-agent-browser@3.972.10':
     dependencies:
@@ -23568,38 +23492,19 @@ snapshots:
       '@earendil-works/pi-telemetry': 1.4.0
       typebox: 1.3.27
 
-  '@earendil-works/pi-agent-core@0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)':
-    dependencies:
-      '@earendil-works/pi-ai': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
-      diff: 8.0.4
-      ignore: 7.0.5
-      typebox: 1.3.7
-      yaml: 2.9.0
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@earendil-works/pi-ai@0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-agent-core@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
-      '@anthropic-ai/sdk': 0.91.1(zod@4.6.7)
-      '@aws-sdk/client-bedrock-runtime': 3.1048.0
-      '@google/genai': 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
-      '@mistralai/mistralai': 2.2.6(@opentelemetry/api@1.9.0)
-      '@opentelemetry/api': 1.9.0
-      '@smithy/node-http-handler': 4.7.3
-      http-proxy-agent: 7.0.2(supports-color@10.0.0)
-      https-proxy-agent: 7.0.6(supports-color@10.0.0)
-      openai: 6.26.0(ws@8.21.3)(zod@4.6.7)
-      partial-json: 0.1.7
-      typebox: 1.3.7
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      typebox: 1.3.27
     transitivePeerDependencies:
+      - '@aws-sdk/credential-provider-node'
       - '@modelcontextprotocol/sdk'
+      - '@smithy/hash-node'
+      - '@smithy/signature-v4'
       - bufferutil
+      - kerberos
       - supports-color
+      - undici
       - utf-8-validate
       - ws
       - zod
@@ -24255,10 +24160,10 @@ snapshots:
       '@fastify/forwarded': 3.0.1
       ipaddr.js: 2.4.0
 
-  '@flue/runtime@2.0.3(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(typescript@7.0.2)(ws@8.21.3)(zod@4.6.7)':
+  '@flue/runtime@2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
     dependencies:
-      '@earendil-works/pi-agent-core': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
-      '@earendil-works/pi-ai': 0.83.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-agent-core': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@hono/node-server': 2.0.10(hono@4.13.11)
       '@modelcontextprotocol/client': 2.0.0
       '@valibot/to-json-schema': 1.8.0(valibot@1.5.0(typescript@7.0.2))
@@ -24267,10 +24172,15 @@ snapshots:
       ulidx: 2.4.1
       valibot: 1.5.0(typescript@7.0.2)
     transitivePeerDependencies:
+      - '@aws-sdk/credential-provider-node'
       - '@modelcontextprotocol/sdk'
+      - '@smithy/hash-node'
+      - '@smithy/signature-v4'
       - bufferutil
+      - kerberos
       - supports-color
       - typescript
+      - undici
       - utf-8-validate
       - ws
       - zod
@@ -25141,18 +25051,6 @@ snapshots:
       - encoding
       - supports-color
 
-  '@mistralai/mistralai@2.2.6(@opentelemetry/api@1.9.0)':
-    dependencies:
-      '@opentelemetry/semantic-conventions': 1.43.0
-      ws: 8.21.3
-      zod: 4.6.7
-      zod-to-json-schema: 3.25.2(zod@4.6.7)
-    optionalDependencies:
-      '@opentelemetry/api': 1.9.0
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
-
   '@mistralai/mistralai@3.3.0(@aws-sdk/client-s3@3.1161.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)':
     dependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
@@ -27328,6 +27226,7 @@ snapshots:
   '@smithy/is-array-buffer@2.2.0':
     dependencies:
       tslib: 2.8.1
+    optional: true
 
   '@smithy/is-array-buffer@4.2.2':
     dependencies:
@@ -27401,12 +27300,6 @@ snapshots:
       '@smithy/types': 4.19.0
       tslib: 2.8.1
 
-  '@smithy/node-http-handler@4.7.3':
-    dependencies:
-      '@smithy/core': 3.38.1
-      '@smithy/types': 4.19.0
-      tslib: 2.8.1
-
   '@smithy/property-provider@4.2.14':
     dependencies:
       '@smithy/types': 4.19.0
@@ -27485,6 +27378,7 @@ snapshots:
     dependencies:
       '@smithy/is-array-buffer': 2.2.0
       tslib: 2.8.1
+    optional: true
 
   '@smithy/util-buffer-from@4.2.2':
     dependencies:
@@ -27557,6 +27451,7 @@ snapshots:
     dependencies:
       '@smithy/util-buffer-from': 2.2.0
       tslib: 2.8.1
+    optional: true
 
   '@smithy/util-utf8@4.2.2':
     dependencies:
@@ -36742,11 +36637,6 @@ snapshots:
       ws: 8.21.3
       zod: 4.6.7
 
-  openai@6.26.0(ws@8.21.3)(zod@4.6.7):
-    optionalDependencies:
-      ws: 8.21.3
-      zod: 4.6.7
-
   openai@7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
     optionalDependencies:
       '@aws-sdk/credential-provider-node': 3.972.92
@@ -40243,8 +40133,6 @@ snapshots:
 
   typebox@1.3.27: {}
 
-  typebox@1.3.7: {}
-
   typed-array-buffer@1.0.3:
     dependencies:
       call-bound: 1.0.4

From 06ffeeaf446710875a6ef128a5ce0c102eed46aa Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 16:24:45 +0100
Subject: [PATCH 130/169] chore(dependabot): Preserve SDK compatibility
 baselines (#26013)

**Why:**

- Preserve SDK framework, runtime, and bundler compatibility baselines.
- Raise those majors explicitly when changing support; keep patch/minor
updates automatic.

---------

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 78 +++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 77 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9a08fb3ac19a..6fd0c27d63f9 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,11 +14,87 @@ updates:
       interval: 'weekly'
     ignore:
       - dependency-name: 'typescript'
-      # Keep react-router dev dependencies on v7, so tests cover the older major.
+      # Major upgrades of SDK targets and coupled tooling require an explicit compatibility decision.
+      - dependency-name: '@angular/*'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@angular-devkit/*'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'ng-packagr'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'astro'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'ember-source'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'effect'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'next'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'nuxt'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@nuxt/kit'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@nuxt/schema'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@nuxt/nitro-server'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'react'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'react-dom'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@types/react'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@types/express'
+        update-types: ['version-update:semver-major']
       - dependency-name: 'react-router'
         update-types: ['version-update:semver-major']
       - dependency-name: '@react-router/*'
         update-types: ['version-update:semver-major']
+      - dependency-name: '@remix-run/node'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@remix-run/react'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@remix-run/server-runtime'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@remix-run/router'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@solidjs/router'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@solidjs/start'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'svelte'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@sveltejs/kit'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'vue'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@nestjs/common'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@nestjs/core'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'hono'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'nitro'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'nitropack'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'h3'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@cloudflare/workers-types'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'wrangler'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'bun-types'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@types/node'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@edge-runtime/types'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@opentelemetry/api'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'vite'
+        update-types: ['version-update:semver-major']
+      - dependency-name: 'webpack'
+        update-types: ['version-update:semver-major']
       # These are also peer dependencies. The `increase` strategy raises the peer range too,
       # which drops support for older versions (a breaking change).
       - dependency-name: '@tanstack/vue-router'

From b063c3109854b193880cb7e5db6db3d816a94f80 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Tue, 3 Nov 2026 16:32:09 +0100
Subject: [PATCH 131/169] fix(deps): Bump seroval to 1.6.12 and 1.7.7 (#26047)

**Why:** Fixes the open seroval advisories, including one critical
(GHSA-p6vx-979v-rg4c). `solid-js@1.9.11` pins `seroval ~1.5.0`, so the
`solid-js` devDependency goes to 1.9.18. The other copies only need a
lockfile bump. Dependabot alert:
https://github.com/getsentry/sentry-javascript/security/dependabot/3320

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 packages/solid/package.json      |   2 +-
 packages/solidstart/package.json |   2 +-
 pnpm-lock.yaml                   | 268 +++++++++++++++----------------
 3 files changed, 136 insertions(+), 136 deletions(-)

diff --git a/packages/solid/package.json b/packages/solid/package.json
index 81df16586adf..8fc46fd2d1f8 100644
--- a/packages/solid/package.json
+++ b/packages/solid/package.json
@@ -79,7 +79,7 @@
     "@testing-library/dom": "^7.21.4",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/user-event": "^14.5.2",
-    "solid-js": "^1.9.11",
+    "solid-js": "^1.9.18",
     "vite": "^8.3.5",
     "vite-plugin-solid": "^2.11.6"
   },
diff --git a/packages/solidstart/package.json b/packages/solidstart/package.json
index cb5c12b94dc6..90e025621c0f 100644
--- a/packages/solidstart/package.json
+++ b/packages/solidstart/package.json
@@ -101,7 +101,7 @@
     "@types/node": "^20.19.0",
     "nitropack": "^2.13.4",
     "node-mock-http": "^1.0.4",
-    "solid-js": "^1.9.11",
+    "solid-js": "^1.9.18",
     "vinxi": "^0.5.11",
     "vite": "^8.3.5",
     "vite-plugin-solid": "^2.11.6"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6a05b52f9b54..6fe96594733c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2230,13 +2230,13 @@ importers:
         version: link:../../dev-packages/rollup-utils
       '@solidjs/router':
         specifier: ^1.0.0
-        version: 1.0.0(solid-js@1.9.11)
+        version: 1.0.0(solid-js@1.9.18)
       '@solidjs/testing-library':
         specifier: 0.8.5
-        version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
+        version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.18))(solid-js@1.9.18)
       '@tanstack/solid-router':
         specifier: ^1.169.2
-        version: 1.169.2(solid-js@1.9.11)
+        version: 1.169.2(solid-js@1.9.18)
       '@testing-library/dom':
         specifier: ^7.21.4
         version: 7.31.2
@@ -2247,14 +2247,14 @@ importers:
         specifier: ^14.5.2
         version: 14.5.2(@testing-library/dom@7.31.2)
       solid-js:
-        specifier: ^1.9.11
-        version: 1.9.11
+        specifier: ^1.9.18
+        version: 1.9.18
       vite:
         specifier: ^8.3.5
         version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.18)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/solidstart:
     dependencies:
@@ -2294,13 +2294,13 @@ importers:
         version: link:../browser
       '@solidjs/router':
         specifier: ^1.0.0
-        version: 1.0.0(solid-js@1.9.11)
+        version: 1.0.0(solid-js@1.9.18)
       '@solidjs/start':
         specifier: ^1.3.2
-        version: 1.3.2(dd24d59c172f51621d3f1c3d8b60fda0)
+        version: 1.3.2(e4a8c665f4a8ec10ddcce54d0b28f89d)
       '@solidjs/testing-library':
         specifier: 0.8.5
-        version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)
+        version: 0.8.5(@solidjs/router@1.0.0(solid-js@1.9.18))(solid-js@1.9.18)
       '@testing-library/jest-dom':
         specifier: ^6.9.1
         version: 6.9.1
@@ -2317,8 +2317,8 @@ importers:
         specifier: ^1.0.4
         version: 1.0.4
       solid-js:
-        specifier: ^1.9.11
-        version: 1.9.11
+        specifier: ^1.9.18
+        version: 1.9.18
       vinxi:
         specifier: ^0.5.11
         version: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
@@ -2327,7 +2327,7 @@ importers:
         version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-plugin-solid:
         specifier: ^2.11.6
-        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+        version: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.18)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
   packages/svelte:
     dependencies:
@@ -17209,25 +17209,25 @@ packages:
     resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==}
     engines: {node: '>=20.0.0'}
 
-  seroval-plugins@1.5.4:
-    resolution: {integrity: sha512-S0xQPhUTefAhNvNWFg0c1J8qJArHt5KdtJ/cFAofo06KD1MVSeFWyl4iiu+ApDIuw0WhjpOfCdgConOfAnLgkw==}
+  seroval-plugins@1.6.12:
+    resolution: {integrity: sha512-+reiwp/lYxiyctSrdvX7OQ1YLrcbWYgBiZrhSFL+V43b0/DGRLNVSDyZINbQe+tWplPOI2fw2dPrdv6hcc09kQ==}
     engines: {node: '>=10'}
     peerDependencies:
       seroval: ^1.0
 
-  seroval-plugins@1.6.8:
-    resolution: {integrity: sha512-N7mWAMydj89EnYTHtRpS3LBrAz3J9O6oVrqpuXuvlAHfAUG8WEKqtbAd7SBiJNY5NfCAFhSdyAh7wI4Shjqy4g==}
-    engines: {node: '>=10'}
+  seroval-plugins@1.7.7:
+    resolution: {integrity: sha512-5PAKQPAfj2MD332QeCdzXKm334ftIb0B1Ek3I9IQa73rPOlBSHko9mODFo8XNjzs6KJQG3nE6dn9dw7hJjrZAQ==}
+    engines: {node: '>=20'}
     peerDependencies:
       seroval: ^1.0
 
-  seroval@1.5.4:
-    resolution: {integrity: sha512-46uFvgrXTVxZcUorgSSRZ4y+ieqLLQRMlG4bnCZKW3qI6BZm7Rg4ntMW4p1mILEEBZWrFlcpp0AyIIlM6jD9iw==}
+  seroval@1.6.12:
+    resolution: {integrity: sha512-CqbIVfk/7GL3ITwZI55lcPbpQbjHZ2DD5cUj4iH7E9YsCfHNJV1mx7yNp86Z84w5IpmkZZS/2s5vPOWmVWSdQg==}
     engines: {node: '>=10'}
 
-  seroval@1.6.8:
-    resolution: {integrity: sha512-HlSgSAkTk4EqHcje1ptJjfZi1YDv5KbhVJ/d3P7T/nAXua2VmDu+AKDX5VTdFfZf48nDkWB2TKYt0DrCSa+3wg==}
-    engines: {node: '>=10'}
+  seroval@1.7.7:
+    resolution: {integrity: sha512-9OdYsqMLV5RSUNNtkgr6DT2bS/ncba6AqUJx8H7epNJNa0cKNWhQtF5GLRjkF/KuAdvAuRRitWrq86K/v1S/kg==}
+    engines: {node: '>=20'}
 
   serve-index@1.9.1:
     resolution: {integrity: sha512-pXHfKNP4qujrtteMrSBb0rc8HJ9Ms/GrXwcUtUtD5s4ewDJI8bT3Cz2zTVRMKtri49pLx2e0Ya8ziP5Ya2pZZw==}
@@ -17414,8 +17414,8 @@ packages:
     resolution: {integrity: sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==}
     engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
 
-  solid-js@1.9.11:
-    resolution: {integrity: sha512-WEJtcc5mkh/BnHA6Yrg4whlF8g6QwpmXXRg4P2ztPmcKeHHlH4+djYecBLhSpecZY2RRECXYUwIc/C2r3yzQ4Q==}
+  solid-js@1.9.18:
+    resolution: {integrity: sha512-CHGO5YFk6Y9m/1YSxVtKnXfrW7JD3Tmof8HmR4z6TmCPsS8efo8LnzIR8CQh3cUvffqYm6DWyBFfk8dQw1CNQQ==}
 
   solid-refresh@0.6.3:
     resolution: {integrity: sha512-F3aPsX6hVw9ttm5LYlth8Q15x6MlI/J3Dn+o3EQyRTtTxidepSTwAYdozt01/YA+7ObcciagGEyXIopGZzQtbA==}
@@ -25731,7 +25731,7 @@ snapshots:
       perfect-debounce: 2.1.0
       pkg-types: 2.3.1
       postcss: 8.5.31
-      seroval: 1.6.8
+      seroval: 1.7.7
       std-env: 4.3.0
       ufo: 1.6.4
       unenv: 2.0.0-rc.24
@@ -27469,114 +27469,114 @@ snapshots:
       color: 5.0.3
       text-hex: 1.0.0
 
-  '@solid-devtools/debugger@0.28.1(solid-js@1.9.11)':
+  '@solid-devtools/debugger@0.28.1(solid-js@1.9.18)':
     dependencies:
       '@nothing-but/utils': 0.17.0
-      '@solid-devtools/shared': 0.20.0(solid-js@1.9.11)
-      '@solid-primitives/bounds': 0.1.3(solid-js@1.9.11)
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/keyboard': 1.3.3(solid-js@1.9.11)
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/scheduled': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
-
-  '@solid-devtools/logger@0.9.11(solid-js@1.9.11)':
+      '@solid-devtools/shared': 0.20.0(solid-js@1.9.18)
+      '@solid-primitives/bounds': 0.1.3(solid-js@1.9.18)
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/keyboard': 1.3.3(solid-js@1.9.18)
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/scheduled': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
+
+  '@solid-devtools/logger@0.9.11(solid-js@1.9.18)':
     dependencies:
       '@nothing-but/utils': 0.17.0
-      '@solid-devtools/debugger': 0.28.1(solid-js@1.9.11)
-      '@solid-devtools/shared': 0.20.0(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-devtools/debugger': 0.28.1(solid-js@1.9.18)
+      '@solid-devtools/shared': 0.20.0(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-devtools/shared@0.20.0(solid-js@1.9.11)':
+  '@solid-devtools/shared@0.20.0(solid-js@1.9.18)':
     dependencies:
       '@nothing-but/utils': 0.17.0
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/media': 2.3.3(solid-js@1.9.11)
-      '@solid-primitives/refs': 1.1.2(solid-js@1.9.11)
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/scheduled': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/styles': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/media': 2.3.3(solid-js@1.9.18)
+      '@solid-primitives/refs': 1.1.2(solid-js@1.9.18)
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/scheduled': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/styles': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/bounds@0.1.3(solid-js@1.9.11)':
+  '@solid-primitives/bounds@0.1.3(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/resize-observer': 2.1.3(solid-js@1.9.11)
-      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/resize-observer': 2.1.3(solid-js@1.9.18)
+      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/event-listener@2.4.3(solid-js@1.9.11)':
+  '@solid-primitives/event-listener@2.4.3(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/keyboard@1.3.3(solid-js@1.9.11)':
+  '@solid-primitives/keyboard@1.3.3(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/media@2.3.3(solid-js@1.9.11)':
+  '@solid-primitives/media@2.3.3(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/refs@1.1.2(solid-js@1.9.11)':
+  '@solid-primitives/refs@1.1.2(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/resize-observer@2.1.3(solid-js@1.9.11)':
+  '@solid-primitives/resize-observer@2.1.3(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.11)
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/event-listener': 2.4.3(solid-js@1.9.18)
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/static-store': 0.1.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/rootless@1.5.2(solid-js@1.9.11)':
+  '@solid-primitives/rootless@1.5.2(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/scheduled@1.5.2(solid-js@1.9.11)':
+  '@solid-primitives/scheduled@1.5.2(solid-js@1.9.18)':
     dependencies:
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
-  '@solid-primitives/static-store@0.1.2(solid-js@1.9.11)':
+  '@solid-primitives/static-store@0.1.2(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/styles@0.1.2(solid-js@1.9.11)':
+  '@solid-primitives/styles@0.1.2(solid-js@1.9.18)':
     dependencies:
-      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.11)
-      '@solid-primitives/utils': 6.3.2(solid-js@1.9.11)
-      solid-js: 1.9.11
+      '@solid-primitives/rootless': 1.5.2(solid-js@1.9.18)
+      '@solid-primitives/utils': 6.3.2(solid-js@1.9.18)
+      solid-js: 1.9.18
 
-  '@solid-primitives/utils@6.3.2(solid-js@1.9.11)':
+  '@solid-primitives/utils@6.3.2(solid-js@1.9.18)':
     dependencies:
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
-  '@solidjs/meta@0.29.4(solid-js@1.9.11)':
+  '@solidjs/meta@0.29.4(solid-js@1.9.18)':
     dependencies:
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
-  '@solidjs/router@1.0.0(solid-js@1.9.11)':
+  '@solidjs/router@1.0.0(solid-js@1.9.18)':
     dependencies:
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
-  '@solidjs/start@1.3.2(dd24d59c172f51621d3f1c3d8b60fda0)':
+  '@solidjs/start@1.3.2(e4a8c665f4a8ec10ddcce54d0b28f89d)':
     dependencies:
       '@tanstack/server-functions-plugin': 1.121.21(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0))
@@ -27586,25 +27586,25 @@ snapshots:
       error-stack-parser: 2.1.4
       html-to-image: 1.11.11
       radix3: 1.1.2
-      seroval: 1.6.8
-      seroval-plugins: 1.6.8(seroval@1.6.8)
+      seroval: 1.7.7
+      seroval-plugins: 1.7.7(seroval@1.7.7)
       shiki: 1.29.2
       source-map-js: 1.2.2
-      terracotta: 1.0.5(solid-js@1.9.11)
+      terracotta: 1.0.5(solid-js@1.9.18)
       tinyglobby: 0.2.17
       vinxi: 0.5.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(@types/node@20.19.43)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(debug@4.4.3(supports-color@10.0.0))(encoding@0.1.13)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(sass@1.72.0)(srvx@0.11.22)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))(yaml@2.9.0)
-      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite-plugin-solid: 2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.18)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
       - solid-js
       - supports-color
       - vite
 
-  '@solidjs/testing-library@0.8.5(@solidjs/router@1.0.0(solid-js@1.9.11))(solid-js@1.9.11)':
+  '@solidjs/testing-library@0.8.5(@solidjs/router@1.0.0(solid-js@1.9.18))(solid-js@1.9.18)':
     dependencies:
-      '@solidjs/router': 1.0.0(solid-js@1.9.11)
+      '@solidjs/router': 1.0.0(solid-js@1.9.18)
       '@testing-library/dom': 9.3.4
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
   '@speed-highlight/core@1.2.15': {}
 
@@ -27731,8 +27731,8 @@ snapshots:
       '@tanstack/history': 1.141.0
       '@tanstack/store': 0.8.0
       cookie-es: 2.0.1
-      seroval: 1.6.8
-      seroval-plugins: 1.6.8(seroval@1.6.8)
+      seroval: 1.7.7
+      seroval-plugins: 1.7.7(seroval@1.7.7)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
 
@@ -27740,8 +27740,8 @@ snapshots:
     dependencies:
       '@tanstack/history': 1.161.6
       cookie-es: 3.1.1
-      seroval: 1.6.8
-      seroval-plugins: 1.6.8(seroval@1.6.8)
+      seroval: 1.7.7
+      seroval-plugins: 1.7.7(seroval@1.7.7)
 
   '@tanstack/router-utils@1.154.7(supports-color@10.0.0)':
     dependencies:
@@ -27771,15 +27771,15 @@ snapshots:
       - supports-color
       - vite
 
-  '@tanstack/solid-router@1.169.2(solid-js@1.9.11)':
+  '@tanstack/solid-router@1.169.2(solid-js@1.9.18)':
     dependencies:
-      '@solid-devtools/logger': 0.9.11(solid-js@1.9.11)
-      '@solid-primitives/refs': 1.1.2(solid-js@1.9.11)
-      '@solidjs/meta': 0.29.4(solid-js@1.9.11)
+      '@solid-devtools/logger': 0.9.11(solid-js@1.9.18)
+      '@solid-primitives/refs': 1.1.2(solid-js@1.9.18)
+      '@solidjs/meta': 0.29.4(solid-js@1.9.18)
       '@tanstack/history': 1.161.6
       '@tanstack/router-core': 1.169.2
       isbot: 5.1.34
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
   '@tanstack/store@0.8.0': {}
 
@@ -38983,17 +38983,17 @@ snapshots:
 
   serialize-javascript@7.0.5: {}
 
-  seroval-plugins@1.5.4(seroval@1.5.4):
+  seroval-plugins@1.6.12(seroval@1.6.12):
     dependencies:
-      seroval: 1.5.4
+      seroval: 1.6.12
 
-  seroval-plugins@1.6.8(seroval@1.6.8):
+  seroval-plugins@1.7.7(seroval@1.7.7):
     dependencies:
-      seroval: 1.6.8
+      seroval: 1.7.7
 
-  seroval@1.5.4: {}
+  seroval@1.6.12: {}
 
-  seroval@1.6.8: {}
+  seroval@1.7.7: {}
 
   serve-index@1.9.1(supports-color@10.0.0):
     dependencies:
@@ -39331,24 +39331,24 @@ snapshots:
       ip-address: 10.7.2
       smart-buffer: 4.2.0
 
-  solid-js@1.9.11:
+  solid-js@1.9.18:
     dependencies:
       csstype: 3.2.3
-      seroval: 1.5.4
-      seroval-plugins: 1.5.4(seroval@1.5.4)
+      seroval: 1.6.12
+      seroval-plugins: 1.6.12(seroval@1.6.12)
 
-  solid-refresh@0.6.3(solid-js@1.9.11)(supports-color@10.0.0):
+  solid-refresh@0.6.3(solid-js@1.9.18)(supports-color@10.0.0):
     dependencies:
       '@babel/generator': 7.29.8
       '@babel/helper-module-imports': 7.29.7(supports-color@10.0.0)
       '@babel/types': 7.29.8
-      solid-js: 1.9.11
+      solid-js: 1.9.18
     transitivePeerDependencies:
       - supports-color
 
-  solid-use@0.8.0(solid-js@1.9.11):
+  solid-use@0.8.0(solid-js@1.9.18):
     dependencies:
-      solid-js: 1.9.11
+      solid-js: 1.9.18
 
   sonic-boom@4.2.0:
     dependencies:
@@ -39839,10 +39839,10 @@ snapshots:
       - encoding
       - supports-color
 
-  terracotta@1.0.5(solid-js@1.9.11):
+  terracotta@1.0.5(solid-js@1.9.18):
     dependencies:
-      solid-js: 1.9.11
-      solid-use: 0.8.0(solid-js@1.9.11)
+      solid-js: 1.9.18
+      solid-use: 0.8.0(solid-js@1.9.18)
 
   terser-webpack-plugin@5.6.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)):
     dependencies:
@@ -40901,14 +40901,14 @@ snapshots:
     optionalDependencies:
       '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
 
-  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.11)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.18)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       '@babel/core': 7.29.7(supports-color@10.0.0)
       '@types/babel__core': 7.20.5
       babel-preset-solid: 1.8.17(@babel/core@7.29.7(supports-color@10.0.0))
       merge-anything: 5.1.7
-      solid-js: 1.9.11
-      solid-refresh: 0.6.3(solid-js@1.9.11)(supports-color@10.0.0)
+      solid-js: 1.9.18
+      solid-refresh: 0.6.3(solid-js@1.9.18)(supports-color@10.0.0)
       vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vitefu: 1.0.7(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:

From 32c02613a3caccd3409bc7f801fe915955e5962b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:10:53 +0100
Subject: [PATCH 132/169] feat(deps): Bump @hono/node-server from 2.0.10 to
 2.1.3 (#26053)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [@hono/node-server](https://github.com/honojs/node-server) from
2.0.10 to 2.1.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.3</h2>
<h2>Security fixes</h2>
<h3><code>serveStatic</code> decodes the request path a second time,
leading to bypass of middleware on static paths</h3>
<p>Affects: <code>@hono/node-server/serve-static</code>. Fixes
<code>serveStatic</code> decoding an already-decoded path, where a
crafted request could be routed as one path and served as another,
skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f</p>
<p><code>serveStatic</code> now rejects request paths that still contain
<code>%</code> after decoding. To serve files whose names contain a
literal <code>%</code>, set <code>allowPercentInPath: true</code>.</p>
<p>The same fix ships in <code>hono</code> v4.13.11.</p>
<h2>v2.1.2</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: add autofix.ci by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/392">honojs/node-server#392</a></li>
<li>fix: type error in early hints and add typecheck to CI by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/390">honojs/node-server#390</a></li>
<li>chore: add better benchmarks by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/391">honojs/node-server#391</a></li>
<li>docs(readme): update the benchmark by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/394">honojs/node-server#394</a></li>
<li>test(request): accept asynchronous body read errors by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/403">honojs/node-server#403</a></li>
<li>fix(listener): avoid mutating response headers when setting
Content-Length by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/402">honojs/node-server#402</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.1.1...v2.1.2">https://github.com/honojs/node-server/compare/v2.1.1...v2.1.2</a></p>
<h2>v2.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: lazily materialize request headers by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/389">honojs/node-server#389</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.1.0...v2.1.1">https://github.com/honojs/node-server/compare/v2.1.0...v2.1.1</a></p>
<h2>v2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add Early Hints (HTTP 103) middleware by <a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li>fix(listener): avoid uncaught error when force-closing a
non-standard socket by <a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> made
their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li><a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0</a></p>
<h2>v2.0.12</h2>
<h2>What's Changed</h2>
<ul>
<li>test: replace supertest by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li>
<li>fix(response): copy headers when init is a foreign Response by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p>
<h2>v2.0.11</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/720ac7843fbc7c1bdae1beaa47e2ab5db7f99a9b"><code>720ac78</code></a>
2.1.3</li>
<li><a
href="https://github.com/honojs/node-server/commit/982179278529d5673812116b042829f27794966f"><code>9821792</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/node-server/commit/35bca95b8e5ef5facc799c57a7e69aa3ec5111b1"><code>35bca95</code></a>
2.1.2</li>
<li><a
href="https://github.com/honojs/node-server/commit/90a2600d9bfe76ab4774c028704c2a09c5930bb1"><code>90a2600</code></a>
fix(listener): avoid mutating response headers when setting
Content-Length (#...</li>
<li><a
href="https://github.com/honojs/node-server/commit/fe7467ca2f0027b8189ae3c0a5d35d1144f909bc"><code>fe7467c</code></a>
test(request): accept asynchronous body read errors (<a
href="https://redirect.github.com/honojs/node-server/issues/403">#403</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/64dc09e0c37eab30b51d33d61a3a2bae3fdee263"><code>64dc09e</code></a>
docs(readm): update the benchmark (<a
href="https://redirect.github.com/honojs/node-server/issues/394">#394</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/8f505aed205297c033afab80597e5ab990f2082f"><code>8f505ae</code></a>
chore: add better benchmarks (<a
href="https://redirect.github.com/honojs/node-server/issues/391">#391</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/2469b1a3bb3c70cda6ab795202f0e42d6324447c"><code>2469b1a</code></a>
fix: type error in early hints and add typecheck to CI (<a
href="https://redirect.github.com/honojs/node-server/issues/390">#390</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/3f958da2177120b9a8e61b74837d33be8ed42ae8"><code>3f958da</code></a>
ci: add autofix.ci (<a
href="https://redirect.github.com/honojs/node-server/issues/392">#392</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/73c03adfb01928fcd5f5b20faebd5d692f83fc93"><code>73c03ad</code></a>
2.1.1</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.1.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hono/node-server&package-manager=npm_and_yarn&previous-version=2.0.10&new-version=2.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev-packages/node-integration-tests/package.json |  2 +-
 pnpm-lock.yaml                                   | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 821f5ed8d73a..e402c50700f6 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -43,7 +43,7 @@
     "@google/genai": "^1.20.0",
     "@growthbook/growthbook": "^1.6.5",
     "@hapi/hapi": "^21.3.10",
-    "@hono/node-server": "^2.0.10",
+    "@hono/node-server": "^2.1.3",
     "@koa/router": "^12.0.1",
     "@langchain/anthropic": "^0.3.10",
     "@langchain/core": "^0.3.80",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6fe96594733c..4da72bd2bb96 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -652,8 +652,8 @@ importers:
         specifier: ^21.3.10
         version: 21.3.10
       '@hono/node-server':
-        specifier: ^2.0.10
-        version: 2.0.10(hono@4.13.11)
+        specifier: ^2.1.3
+        version: 2.1.3(hono@4.13.11)
       '@koa/router':
         specifier: ^12.0.1
         version: 12.0.2(supports-color@10.0.0)
@@ -5409,8 +5409,8 @@ packages:
   '@hapi/wreck@18.1.2':
     resolution: {integrity: sha512-3dMnV2pfhQiyEqu8DL3VBmxkdLiRDiiUDuG79Dp+UK1gL9ZxAfDOUhB6k3D5MLqcgJJ1IARyGFhwoc1NITr/pg==}
 
-  '@hono/node-server@2.0.10':
-    resolution: {integrity: sha512-ZcnNVhKTmyDJeg0UlnZjvM73JBsTAuhrH/J4fjwGOw59PwOW51r4J+p6CsKZWXdKSme4MFqU62CZMOsdDrU4CA==}
+  '@hono/node-server@2.1.3':
+    resolution: {integrity: sha512-TA//nWMqPhbfdfneACk6t5a9eqbS9lABEPyKn0/xZTah3H3U2XaVg85rJFl0/Fyit0I552YDHgXGVSf3GwqbUw==}
     engines: {node: '>=20'}
     peerDependencies:
       hono: ^4
@@ -24164,7 +24164,7 @@ snapshots:
     dependencies:
       '@earendil-works/pi-agent-core': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
-      '@hono/node-server': 2.0.10(hono@4.13.11)
+      '@hono/node-server': 2.1.3(hono@4.13.11)
       '@modelcontextprotocol/client': 2.0.0
       '@valibot/to-json-schema': 1.8.0(valibot@1.5.0(typescript@7.0.2))
       hono: 4.13.11
@@ -24497,7 +24497,7 @@ snapshots:
       '@hapi/bourne': 3.0.0
       '@hapi/hoek': 11.0.4
 
-  '@hono/node-server@2.0.10(hono@4.13.11)':
+  '@hono/node-server@2.1.3(hono@4.13.11)':
     dependencies:
       hono: 4.13.11
 
@@ -25086,7 +25086,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)':
     dependencies:
-      '@hono/node-server': 2.0.10(hono@4.13.11)
+      '@hono/node-server': 2.1.3(hono@4.13.11)
       ajv: 8.20.0
       ajv-formats: 3.0.1
       content-type: 1.0.5

From 34746aaf2abd9a2e3159224e2f8c0e1cb8800af1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:43:24 +0100
Subject: [PATCH 133/169] feat(deps): Bump lodash.omit from 4.5.0 to 4.18.0
 (#26055)

Bumps [lodash.omit](https://github.com/lodash/lodash) from 4.5.0 to
4.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lodash/lodash/releases">lodash.omit's
releases</a>.</em></p>
<blockquote>
<h2>4.18.0</h2>
<h2>v4.18.0</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lodash/lodash/compare/4.17.23...4.18.0">https://github.com/lodash/lodash/compare/4.17.23...4.18.0</a></p>
<h3>Security</h3>
<p><strong><code>_.unset</code> / <code>_.omit</code></strong>: Fixed
prototype pollution via <code>constructor</code>/<code>prototype</code>
path traversal (<a
href="https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh">GHSA-f23m-r3pf-42rh</a>,
<a
href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b">fe8d32e</a>).
Previously, array-wrapped path segments and primitive roots could bypass
the existing guards, allowing deletion of properties from built-in
prototypes. Now <code>constructor</code> and <code>prototype</code> are
blocked unconditionally as non-terminal path keys, matching
<code>baseSet</code>. Calls that previously returned <code>true</code>
and deleted the property now return <code>false</code> and leave the
target untouched.</p>
<p><strong><code>_.template</code></strong>: Fixed code injection via
<code>imports</code> keys (<a
href="https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc">GHSA-r5fr-rjxr-66jc</a>,
CVE-2026-4800, <a
href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6">879aaa9</a>).
Fixes an incomplete patch for CVE-2021-23337. The <code>variable</code>
option was validated against <code>reForbiddenIdentifierChars</code> but
<code>importsKeys</code> was left unguarded, allowing code injection via
the same <code>Function()</code> constructor sink. <code>imports</code>
keys containing forbidden identifier characters now throw
<code>&quot;Invalid imports option passed into
_.template&quot;</code>.</p>
<h3>Docs</h3>
<ul>
<li>Add security notice for <code>_.template</code> in threat model and
API docs (<a
href="https://redirect.github.com/lodash/lodash/pull/6099">#6099</a>)</li>
<li>Document <code>lower &gt; upper</code> behavior in
<code>_.random</code> (<a
href="https://redirect.github.com/lodash/lodash/pull/6115">#6115</a>)</li>
<li>Fix quotes in <code>_.compact</code> jsdoc (<a
href="https://redirect.github.com/lodash/lodash/pull/6090">#6090</a>)</li>
</ul>
<h3><code>lodash.*</code> modular packages</h3>
<p><a
href="https://redirect.github.com/lodash/lodash/pull/6157">Diff</a></p>
<p>We have also regenerated and published a select number of the
<code>lodash.*</code> modular packages.</p>
<p>These modular packages had fallen out of sync significantly from the
minor/patch updates to lodash. Specifically, we have brought the
following packages up to parity w/ the latest lodash release because
they have had CVEs on them in the past:</p>
<ul>
<li><a
href="https://www.npmjs.com/package/lodash.orderby">lodash.orderby</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.tonumber">lodash.tonumber</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.trim">lodash.trim</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.trimend">lodash.trimend</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.sortedindexby">lodash.sortedindexby</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.zipobjectdeep">lodash.zipobjectdeep</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.unset">lodash.unset</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.omit">lodash.omit</a></li>
<li><a
href="https://www.npmjs.com/package/lodash.template">lodash.template</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lodash/lodash/commit/59be2de61f8aa9461c7856533b51d31b7d8babc4"><code>59be2de</code></a>
release(minor): bump to 4.18.0 (<a
href="https://redirect.github.com/lodash/lodash/issues/6161">#6161</a>)</li>
<li><a
href="https://github.com/lodash/lodash/commit/af634573030f979194871da7c68f79420992f53d"><code>af63457</code></a>
fix: broken tests for _.template 879aaa9</li>
<li><a
href="https://github.com/lodash/lodash/commit/1073a7693e1727e0cf3641e5f71f75ddcf8de7c0"><code>1073a76</code></a>
fix: linting issues</li>
<li><a
href="https://github.com/lodash/lodash/commit/879aaa93132d78c2f8d20c60279da9f8b21576d6"><code>879aaa9</code></a>
fix: validate imports keys in _.template</li>
<li><a
href="https://github.com/lodash/lodash/commit/fe8d32eda854377349a4f922ab7655c8e5df9a0b"><code>fe8d32e</code></a>
fix: block prototype pollution in baseUnset via constructor/prototype
traversal</li>
<li><a
href="https://github.com/lodash/lodash/commit/18ba0a32f42fd02117f096b032f89c984173462d"><code>18ba0a3</code></a>
refactor(fromPairs): use baseAssignValue for consistent assignment (<a
href="https://redirect.github.com/lodash/lodash/issues/6153">#6153</a>)</li>
<li><a
href="https://github.com/lodash/lodash/commit/b8190803d48d60b8c80ad45d39125f32fa618cb2"><code>b819080</code></a>
ci: add dist sync validation workflow (<a
href="https://redirect.github.com/lodash/lodash/issues/6137">#6137</a>)</li>
<li><a
href="https://github.com/lodash/lodash/commit/07831814702e3ade48311fdb78d86b9ce3778f65"><code>0783181</code></a>
docs(random): document lower &gt; upper case (<a
href="https://redirect.github.com/lodash/lodash/issues/6115">#6115</a>)</li>
<li><a
href="https://github.com/lodash/lodash/commit/35bb1d915a9644c1b5cc7ca1c6eda93947268aae"><code>35bb1d9</code></a>
docs: add security notice for <code>_.template</code> in threat model
and API docs (<a
href="https://redirect.github.com/lodash/lodash/issues/6099">#6099</a>)</li>
<li><a
href="https://github.com/lodash/lodash/commit/62b439f689642a1cedd3c5c81f4fc58898d5460a"><code>62b439f</code></a>
doc: fix quotes in compact jsdoc (<a
href="https://redirect.github.com/lodash/lodash/issues/6090">#6090</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/lodash/lodash/compare/4.5.0...4.18.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~jdalton">jdalton</a>, a new releaser for
lodash.omit since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lodash.omit&package-manager=npm_and_yarn&previous-version=4.5.0&new-version=4.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pnpm-lock.yaml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4da72bd2bb96..ba250f480b83 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -14063,9 +14063,8 @@ packages:
   lodash.merge@4.6.2:
     resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
 
-  lodash.omit@4.5.0:
-    resolution: {integrity: sha512-XeqSp49hNGmlkj2EJlfrQFIzQ6lXdNro9sddtQzcJY8QaoC2GO0DT7xaIokHeyM+mIT0mPMlPvkYzg2xCuHdZg==}
-    deprecated: This package is deprecated. Use destructuring assignment syntax instead.
+  lodash.omit@4.18.0:
+    resolution: {integrity: sha512-hZXIupXdHtocTnvIJ2aCd2vxKYtxex6gbiGuPvgBRnFQO9yu3AtmDAbVuCXcSsQx3INo/1g71OktlFFA/ES8Xg==}
 
   lodash.once@4.1.1:
     resolution: {integrity: sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==}
@@ -29919,7 +29918,7 @@ snapshots:
       fs-extra: 8.1.0
       fs-tree-diff: 2.0.1(supports-color@10.0.0)
       lodash.merge: 4.6.2
-      lodash.omit: 4.5.0
+      lodash.omit: 4.18.0
       lodash.uniq: 4.5.0
     transitivePeerDependencies:
       - supports-color
@@ -34518,7 +34517,7 @@ snapshots:
 
   lodash.merge@4.6.2: {}
 
-  lodash.omit@4.5.0: {}
+  lodash.omit@4.18.0: {}
 
   lodash.once@4.1.1: {}
 

From 0bb6a35d7636edbda6a9bb06d1cbe6af9207314b Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:45:05 +0100
Subject: [PATCH 134/169] chore(dev-packages): Move dependencies to
 devDependencies (#26046)

**Why:** Dependabot gives bumps in `dependencies` the `feat(deps)`
prefix, so test-only bumps in dev-packages show up as features. These
packages are private and never published, so all their deps are dev
deps. `test-utils` stays as is, because other packages consume it as a
library.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../browser-integration-tests/package.json    |  22 +-
 .../bun-integration-tests/package.json        |  12 +-
 .../package.json                              |   4 +-
 dev-packages/bundler-tests/package.json       |  16 +-
 .../clear-cache-gh-action/package.json        |   2 +-
 .../cloudflare-integration-tests/package.json |  20 +-
 .../deno-integration-tests/package.json       |  10 +-
 .../package.json                              |   2 +-
 .../node-integration-tests/package.json       |  32 ++-
 .../optional-e2e-gh-action/package.json       |   2 +-
 .../size-limit-gh-action/package.json         |   2 +-
 pnpm-lock.yaml                                | 243 +++++++++---------
 12 files changed, 173 insertions(+), 194 deletions(-)

diff --git a/dev-packages/browser-integration-tests/package.json b/dev-packages/browser-integration-tests/package.json
index 7bddb5f9dd2c..af34bd6d41c5 100644
--- a/dev-packages/browser-integration-tests/package.json
+++ b/dev-packages/browser-integration-tests/package.json
@@ -55,28 +55,26 @@
     "test:update-snapshots": "pnpm run test:all --update-snapshots",
     "test:detect-flaky": "tsx scripts/detectFlakyTests.ts"
   },
-  "dependencies": {
+  "devDependencies": {
     "@babel/core": "^7.29.6",
     "@babel/preset-typescript": "^7.16.7",
     "@playwright/test": "1.64.1",
-    "@sentry/rrweb": "2.45.0",
     "@sentry/browser": "11.10.0",
-    "@sentry/replay": "11.10.0",
+    "@sentry/browser-utils": "11.10.0",
     "@sentry/conventions": "0.30.0",
+    "@sentry/core": "11.10.0",
+    "@sentry/replay": "11.10.0",
+    "@sentry/replay-canvas": "11.10.0",
+    "@sentry/rrweb": "2.45.0",
+    "@sentry/rrweb-types": "^2.45.0",
+    "@sentry/wasm": "11.10.0",
     "@supabase/supabase-js": "2.109.0",
+    "@types/node": "^20.19.0",
     "axios": "1.21.0",
     "babel-loader": "^10.1.1",
     "fflate": "0.8.3",
+    "glob": "^14.0.3",
     "html-webpack-plugin": "^5.5.0",
     "webpack": "^5.112.2"
-  },
-  "devDependencies": {
-    "@sentry/browser-utils": "11.10.0",
-    "@sentry/core": "11.10.0",
-    "@sentry/replay-canvas": "11.10.0",
-    "@sentry/rrweb-types": "^2.45.0",
-    "@sentry/wasm": "11.10.0",
-    "@types/node": "^20.19.0",
-    "glob": "^14.0.3"
   }
 }
diff --git a/dev-packages/bun-integration-tests/package.json b/dev-packages/bun-integration-tests/package.json
index 6f09324856c3..1b63d888b452 100644
--- a/dev-packages/bun-integration-tests/package.json
+++ b/dev-packages/bun-integration-tests/package.json
@@ -13,20 +13,18 @@
     "test": "vitest run",
     "test:watch": "pnpm run test --watch"
   },
-  "dependencies": {
-    "@sentry/bun": "11.10.0",
-    "@sentry/hono": "11.10.0",
-    "hono": "^4.13.7",
-    "mysql": "^2.18.1",
-    "pg": "8.23.1"
-  },
   "devDependencies": {
     "@sentry-internal/node-integration-tests": "11.10.0",
     "@sentry-internal/test-utils": "11.10.0",
+    "@sentry/bun": "11.10.0",
     "@sentry/core": "11.10.0",
+    "@sentry/hono": "11.10.0",
     "@types/mysql": "^2.15.27",
     "@types/pg": "^8.23.1",
     "bun-types": "^1.2.9",
+    "hono": "^4.13.7",
+    "mysql": "^2.18.1",
+    "pg": "8.23.1",
     "vitest": "^4.1.11"
   }
 }
diff --git a/dev-packages/bundler-plugin-integration-tests/package.json b/dev-packages/bundler-plugin-integration-tests/package.json
index df87dbd53c3a..b4f44b5923e7 100644
--- a/dev-packages/bundler-plugin-integration-tests/package.json
+++ b/dev-packages/bundler-plugin-integration-tests/package.json
@@ -11,10 +11,8 @@
     "clean:build": "premove ./fixtures/*/out",
     "clean:deps": "premove node_modules"
   },
-  "dependencies": {
-    "@sentry/bundler-plugins": "11.10.0"
-  },
   "devDependencies": {
+    "@sentry/bundler-plugins": "11.10.0",
     "premove": "^4.0.0",
     "sentry": "^0.45.0",
     "typescript": "~6.0.3",
diff --git a/dev-packages/bundler-tests/package.json b/dev-packages/bundler-tests/package.json
index ab00c439ee79..7baa238d34a6 100644
--- a/dev-packages/bundler-tests/package.json
+++ b/dev-packages/bundler-tests/package.json
@@ -11,16 +11,10 @@
   "scripts": {
     "test": "vitest run"
   },
-  "dependencies": {
-    "@rollup/plugin-node-resolve": "^16.0.3",
-    "@sentry/browser": "11.10.0",
-    "rollup": "^4.60.3",
-    "vite": "^8.3.5",
-    "vitest": "^4.1.11",
-    "webpack": "^5.112.2"
-  },
   "devDependencies": {
+    "@rollup/plugin-node-resolve": "^16.0.3",
     "@sentry/astro": "11.10.0",
+    "@sentry/browser": "11.10.0",
     "@sentry/bun": "11.10.0",
     "@sentry/cloudflare": "11.10.0",
     "@sentry/deno": "11.10.0",
@@ -33,7 +27,11 @@
     "@sentry/sveltekit": "11.10.0",
     "@sentry/tanstackstart-react": "11.10.0",
     "@sentry/vercel-edge": "11.10.0",
-    "@vercel/nft": "^1.11.0"
+    "@vercel/nft": "^1.11.0",
+    "rollup": "^4.60.3",
+    "vite": "^8.3.5",
+    "vitest": "^4.1.11",
+    "webpack": "^5.112.2"
   },
   "type": "module"
 }
diff --git a/dev-packages/clear-cache-gh-action/package.json b/dev-packages/clear-cache-gh-action/package.json
index 75ea139df37c..e57c7360bda4 100644
--- a/dev-packages/clear-cache-gh-action/package.json
+++ b/dev-packages/clear-cache-gh-action/package.json
@@ -13,7 +13,7 @@
     "lint": "oxlint . --type-aware",
     "lint:fix": "oxlint . --fix --type-aware"
   },
-  "dependencies": {
+  "devDependencies": {
     "@actions/core": "1.10.1",
     "@actions/github": "^5.0.0"
   }
diff --git a/dev-packages/cloudflare-integration-tests/package.json b/dev-packages/cloudflare-integration-tests/package.json
index dc38e2cf9cb0..1e81fd479ed6 100644
--- a/dev-packages/cloudflare-integration-tests/package.json
+++ b/dev-packages/cloudflare-integration-tests/package.json
@@ -13,30 +13,28 @@
     "test": "vitest run",
     "test:watch": "pnpm run test --watch"
   },
-  "dependencies": {
-    "ai": "^6.0.0",
+  "devDependencies": {
     "@anthropic-ai/sdk": "0.133.0",
+    "@cloudflare/vite-plugin": "1.34.0",
+    "@cloudflare/workers-types": "^4.20260426.0",
+    "@cloudflare/workers-types-v5": "npm:@cloudflare/workers-types@5.20260710.1",
     "@google/genai": "^1.20.0",
     "@langchain/core": "^1.2.17",
     "@langchain/langgraph": "^1.0.1",
     "@langchain/openai": "^1.6.2",
     "@langchain/typesafe": "^0.0.2",
+    "@opentelemetry/api": "^1.9.1",
     "@prisma/adapter-d1": "6.15.0",
     "@prisma/client": "6.15.0",
+    "@sentry-internal/test-utils": "11.10.0",
     "@sentry/cloudflare": "11.10.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry/core": "11.10.0",
     "@sentry/hono": "11.10.0",
+    "ai": "^6.0.0",
     "hono": "^4.13.7",
     "langchain": "^1.5.16",
-    "openai": "5.18.1"
-  },
-  "devDependencies": {
-    "@cloudflare/vite-plugin": "1.34.0",
-    "@cloudflare/workers-types": "^4.20260426.0",
-    "@cloudflare/workers-types-v5": "npm:@cloudflare/workers-types@5.20260710.1",
-    "@opentelemetry/api": "^1.9.1",
-    "@sentry-internal/test-utils": "11.10.0",
-    "@sentry/conventions": "0.30.0",
+    "openai": "5.18.1",
     "prisma": "6.15.0",
     "vite": "^8.3.5",
     "vitest": "^4.1.11",
diff --git a/dev-packages/deno-integration-tests/package.json b/dev-packages/deno-integration-tests/package.json
index 489410c33d6d..19b9c21d536a 100644
--- a/dev-packages/deno-integration-tests/package.json
+++ b/dev-packages/deno-integration-tests/package.json
@@ -15,15 +15,13 @@
     "test:unit": "deno test --allow-net --allow-read --allow-run --allow-env --no-check suites",
     "test:node-suites": "vitest run"
   },
-  "dependencies": {
-    "@sentry/core": "11.10.0",
-    "@sentry/deno": "11.10.0",
-    "mysql": "^2.18.1",
-    "pg": "^8.23.1"
-  },
   "devDependencies": {
     "@sentry-internal/node-integration-tests": "11.10.0",
     "@sentry/conventions": "^0.30.0",
+    "@sentry/core": "11.10.0",
+    "@sentry/deno": "11.10.0",
+    "mysql": "^2.18.1",
+    "pg": "^8.23.1",
     "vitest": "^4.1.11"
   }
 }
diff --git a/dev-packages/external-contributor-gh-action/package.json b/dev-packages/external-contributor-gh-action/package.json
index 805b4fe96872..47c2639db3c2 100644
--- a/dev-packages/external-contributor-gh-action/package.json
+++ b/dev-packages/external-contributor-gh-action/package.json
@@ -13,7 +13,7 @@
     "lint": "oxlint . --type-aware",
     "lint:fix": "oxlint . --fix --type-aware"
   },
-  "dependencies": {
+  "devDependencies": {
     "@actions/core": "1.10.1"
   }
 }
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index e402c50700f6..34ca3c97cdfd 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -24,7 +24,7 @@
     "test": "vitest run",
     "test:watch": "pnpm run test --watch"
   },
-  "dependencies": {
+  "devDependencies": {
     "@anthropic-ai/sdk": "0.133.0",
     "@apollo/server": "^5.5.0",
     "@aws-sdk/client-bedrock-runtime": "^3.1161.0",
@@ -42,6 +42,7 @@
     "@flue/runtime": "2.3.0",
     "@google/genai": "^1.20.0",
     "@growthbook/growthbook": "^1.6.5",
+    "@hapi/boom": "^10.0.1",
     "@hapi/hapi": "^21.3.10",
     "@hono/node-server": "^2.1.3",
     "@koa/router": "^12.0.1",
@@ -53,16 +54,23 @@
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/sdk": "1.32.2",
     "@modelcontextprotocol/server": "^2.0.0",
+    "@neondatabase/serverless": "1.2.0",
     "@prisma/adapter-pg": "7.2.0",
     "@prisma/client": "6.15.0",
     "@prisma/orm-postgres": "8.0.0-rc.17",
+    "@sentry-internal/rollup-utils": "11.10.0",
+    "@sentry-internal/test-utils": "11.10.0",
     "@sentry/aws-serverless": "11.10.0",
+    "@sentry/conventions": "0.30.0",
     "@sentry/core": "11.10.0",
     "@sentry/hono": "11.10.0",
     "@sentry/node": "11.10.0",
+    "@sentry/node-native": "11.10.0",
     "@sentry/server-runtime-injection": "11.10.0",
     "@sentry/server-utils": "11.10.0",
     "@smithy/node-http-handler": "4.12.1",
+    "@types/express": "^4.17.21",
+    "@types/node-schedule": "^2.1.7",
     "@typesafe-ai/sdk": "^0.6.0",
     "ai": "^4.3.16",
     "amqplib": "^0.10.9",
@@ -72,13 +80,14 @@
     "cors": "^2.8.5",
     "cron": "^3.1.6",
     "dataloader": "2.2.3",
+    "esbuild": "0.28.1",
     "express": "^4.21.2",
     "fastify": "^5.12.7",
     "generic-pool": "^3.9.0",
     "graphql": "^16.11.0",
+    "graphql-tag": "^2.12.7",
     "groq-sdk": "1.6.0",
     "h3": "2.0.1-rc.22",
-    "graphql-tag": "^2.12.7",
     "hono": "^4.13.7",
     "ioredis": "5.10.1",
     "ioredis-5": "npm:ioredis@^5.11.0",
@@ -102,30 +111,19 @@
     "postgres": "^3.4.7",
     "prisma": "6.15.0",
     "proxy": "^4.1.0",
+    "react": "^18.3.1",
     "redis-4": "npm:redis@^4.6.14",
     "redis-5": "npm:redis@~5.11.0",
     "redis-5-tracing": "npm:redis@^5.12.0",
-    "together-ai": "0.54.0",
     "srvx": "^0.11.22",
     "tedious": "^19.2.1",
+    "together-ai": "0.54.0",
     "unstorage": "2.0.0-alpha.7",
     "valibot": "1.5.0",
     "winston": "^3.17.0",
-    "ws": "^8.20.1",
-    "yargs": "^18.2.0"
-  },
-  "devDependencies": {
-    "@hapi/boom": "^10.0.1",
-    "@neondatabase/serverless": "1.2.0",
-    "@sentry-internal/rollup-utils": "11.10.0",
-    "@sentry/conventions": "0.30.0",
-    "@sentry-internal/test-utils": "11.10.0",
-    "@sentry/node-native": "11.10.0",
-    "@types/express": "^4.17.21",
-    "@types/node-schedule": "^2.1.7",
-    "esbuild": "0.28.1",
-    "react": "^18.3.1",
     "winston-transport": "^4.9.0",
+    "ws": "^8.20.1",
+    "yargs": "^18.2.0",
     "zod": "^4.6.7"
   },
   "config": {
diff --git a/dev-packages/optional-e2e-gh-action/package.json b/dev-packages/optional-e2e-gh-action/package.json
index 7a48130e3d4f..d3fff0441553 100644
--- a/dev-packages/optional-e2e-gh-action/package.json
+++ b/dev-packages/optional-e2e-gh-action/package.json
@@ -13,7 +13,7 @@
     "lint": "oxlint . --type-aware",
     "lint:fix": "oxlint . --fix --type-aware"
   },
-  "dependencies": {
+  "devDependencies": {
     "@actions/core": "1.10.1",
     "@actions/github": "^5.0.0",
     "markdown-table": "3.0.3"
diff --git a/dev-packages/size-limit-gh-action/package.json b/dev-packages/size-limit-gh-action/package.json
index eddcb6c91547..9f853b265e2e 100644
--- a/dev-packages/size-limit-gh-action/package.json
+++ b/dev-packages/size-limit-gh-action/package.json
@@ -13,7 +13,7 @@
     "lint": "oxlint . --type-aware",
     "lint:fix": "oxlint . --fix --type-aware"
   },
-  "dependencies": {
+  "devDependencies": {
     "@actions/artifact": "^6.2.1",
     "@actions/core": "1.10.1",
     "@actions/exec": "1.1.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ba250f480b83..80ac8bd58c62 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -284,7 +284,7 @@ importers:
         version: 1.0.0-pre.53
 
   dev-packages/browser-integration-tests:
-    dependencies:
+    devDependencies:
       '@babel/core':
         specifier: ^7.29.6
         version: 7.29.7(supports-color@10.0.0)
@@ -297,18 +297,36 @@ importers:
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../../packages/browser
+      '@sentry/browser-utils':
+        specifier: 11.10.0
+        version: link:../../packages/browser-utils
       '@sentry/conventions':
         specifier: 0.30.0
         version: 0.30.0
+      '@sentry/core':
+        specifier: 11.10.0
+        version: link:../../packages/core
       '@sentry/replay':
         specifier: 11.10.0
         version: link:../../packages/replay-internal
+      '@sentry/replay-canvas':
+        specifier: 11.10.0
+        version: link:../../packages/replay-canvas
       '@sentry/rrweb':
         specifier: 2.45.0
         version: 2.45.0
+      '@sentry/rrweb-types':
+        specifier: ^2.45.0
+        version: 2.45.0
+      '@sentry/wasm':
+        specifier: 11.10.0
+        version: link:../../packages/wasm
       '@supabase/supabase-js':
         specifier: 2.109.0
         version: 2.109.0
+      '@types/node':
+        specifier: ^20.19.0
+        version: 20.19.43
       axios:
         specifier: 1.21.0
         version: 1.21.0(debug@4.4.3(supports-color@10.0.0))(supports-color@10.0.0)
@@ -318,52 +336,17 @@ importers:
       fflate:
         specifier: 0.8.3
         version: 0.8.3
+      glob:
+        specifier: ^14.0.3
+        version: 14.0.3
       html-webpack-plugin:
         specifier: ^5.5.0
         version: 5.6.0(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       webpack:
         specifier: ^5.112.2
         version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
-    devDependencies:
-      '@sentry/browser-utils':
-        specifier: 11.10.0
-        version: link:../../packages/browser-utils
-      '@sentry/core':
-        specifier: 11.10.0
-        version: link:../../packages/core
-      '@sentry/replay-canvas':
-        specifier: 11.10.0
-        version: link:../../packages/replay-canvas
-      '@sentry/rrweb-types':
-        specifier: ^2.45.0
-        version: 2.45.0
-      '@sentry/wasm':
-        specifier: 11.10.0
-        version: link:../../packages/wasm
-      '@types/node':
-        specifier: ^20.19.0
-        version: 20.19.43
-      glob:
-        specifier: ^14.0.3
-        version: 14.0.3
 
   dev-packages/bun-integration-tests:
-    dependencies:
-      '@sentry/bun':
-        specifier: 11.10.0
-        version: link:../../packages/bun
-      '@sentry/hono':
-        specifier: 11.10.0
-        version: link:../../packages/hono
-      hono:
-        specifier: ^4.13.7
-        version: 4.13.11
-      mysql:
-        specifier: ^2.18.1
-        version: 2.18.1
-      pg:
-        specifier: 8.23.1
-        version: 8.23.1
     devDependencies:
       '@sentry-internal/node-integration-tests':
         specifier: 11.10.0
@@ -371,9 +354,15 @@ importers:
       '@sentry-internal/test-utils':
         specifier: 11.10.0
         version: link:../test-utils
+      '@sentry/bun':
+        specifier: 11.10.0
+        version: link:../../packages/bun
       '@sentry/core':
         specifier: 11.10.0
         version: link:../../packages/core
+      '@sentry/hono':
+        specifier: 11.10.0
+        version: link:../../packages/hono
       '@types/mysql':
         specifier: ^2.15.27
         version: 2.15.27
@@ -383,16 +372,24 @@ importers:
       bun-types:
         specifier: ^1.2.9
         version: 1.2.9
+      hono:
+        specifier: ^4.13.7
+        version: 4.13.11
+      mysql:
+        specifier: ^2.18.1
+        version: 2.18.1
+      pg:
+        specifier: 8.23.1
+        version: 8.23.1
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   dev-packages/bundler-plugin-integration-tests:
-    dependencies:
+    devDependencies:
       '@sentry/bundler-plugins':
         specifier: 11.10.0
         version: link:../../packages/bundler-plugins
-    devDependencies:
       premove:
         specifier: ^4.0.0
         version: 4.0.0
@@ -407,29 +404,16 @@ importers:
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
 
   dev-packages/bundler-tests:
-    dependencies:
+    devDependencies:
       '@rollup/plugin-node-resolve':
         specifier: ^16.0.3
         version: 16.0.3(rollup@4.62.3)
-      '@sentry/browser':
-        specifier: 11.10.0
-        version: link:../../packages/browser
-      rollup:
-        specifier: ^4.60.3
-        version: 4.62.3
-      vite:
-        specifier: ^8.3.5
-        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vitest:
-        specifier: ^4.1.11
-        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      webpack:
-        specifier: ^5.112.2
-        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
-    devDependencies:
       '@sentry/astro':
         specifier: 11.10.0
         version: link:../../packages/astro
+      '@sentry/browser':
+        specifier: 11.10.0
+        version: link:../../packages/browser
       '@sentry/bun':
         specifier: 11.10.0
         version: link:../../packages/bun
@@ -469,9 +453,21 @@ importers:
       '@vercel/nft':
         specifier: ^1.11.0
         version: 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
+      rollup:
+        specifier: ^4.60.3
+        version: 4.62.3
+      vite:
+        specifier: ^8.3.5
+        version: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      vitest:
+        specifier: ^4.1.11
+        version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
+      webpack:
+        specifier: ^5.112.2
+        version: 5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)
 
   dev-packages/clear-cache-gh-action:
-    dependencies:
+    devDependencies:
       '@actions/core':
         specifier: 1.10.1
         version: 1.10.1
@@ -480,10 +476,19 @@ importers:
         version: 5.1.1(encoding@0.1.13)
 
   dev-packages/cloudflare-integration-tests:
-    dependencies:
+    devDependencies:
       '@anthropic-ai/sdk':
         specifier: 0.133.0
         version: 0.133.0(zod@4.6.7)
+      '@cloudflare/vite-plugin':
+        specifier: 1.34.0
+        version: 1.34.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))
+      '@cloudflare/workers-types':
+        specifier: ^4.20260426.0
+        version: 4.20260519.1
+      '@cloudflare/workers-types-v5':
+        specifier: npm:@cloudflare/workers-types@5.20260710.1
+        version: '@cloudflare/workers-types@5.20260710.1'
       '@google/genai':
         specifier: ^1.20.0
         version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
@@ -499,15 +504,24 @@ importers:
       '@langchain/typesafe':
         specifier: ^0.0.2
         version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))
+      '@opentelemetry/api':
+        specifier: ^1.9.1
+        version: 1.10.0
       '@prisma/adapter-d1':
         specifier: 6.15.0
         version: 6.15.0
       '@prisma/client':
         specifier: 6.15.0
         version: 6.15.0(prisma@6.15.0(magicast@0.3.5)(typescript@7.0.2))(typescript@7.0.2)
+      '@sentry-internal/test-utils':
+        specifier: 11.10.0
+        version: link:../test-utils
       '@sentry/cloudflare':
         specifier: 11.10.0
         version: link:../../packages/cloudflare
+      '@sentry/conventions':
+        specifier: 0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.10.0
         version: link:../../packages/core
@@ -526,25 +540,6 @@ importers:
       openai:
         specifier: 5.18.1
         version: 5.18.1(ws@8.21.3)(zod@4.6.7)
-    devDependencies:
-      '@cloudflare/vite-plugin':
-        specifier: 1.34.0
-        version: 1.34.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(workerd@1.20260426.1)(wrangler@4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43))
-      '@cloudflare/workers-types':
-        specifier: ^4.20260426.0
-        version: 4.20260519.1
-      '@cloudflare/workers-types-v5':
-        specifier: npm:@cloudflare/workers-types@5.20260710.1
-        version: '@cloudflare/workers-types@5.20260710.1'
-      '@opentelemetry/api':
-        specifier: ^1.9.1
-        version: 1.10.0
-      '@sentry-internal/test-utils':
-        specifier: 11.10.0
-        version: link:../test-utils
-      '@sentry/conventions':
-        specifier: 0.30.0
-        version: 0.30.0
       prisma:
         specifier: 6.15.0
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
@@ -559,7 +554,13 @@ importers:
         version: 4.156.0(@cloudflare/workers-types@4.20260519.1)(@types/node@20.19.43)
 
   dev-packages/deno-integration-tests:
-    dependencies:
+    devDependencies:
+      '@sentry-internal/node-integration-tests':
+        specifier: 11.10.0
+        version: link:../node-integration-tests
+      '@sentry/conventions':
+        specifier: ^0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.10.0
         version: link:../../packages/core
@@ -572,13 +573,6 @@ importers:
       pg:
         specifier: ^8.23.1
         version: 8.23.1
-    devDependencies:
-      '@sentry-internal/node-integration-tests':
-        specifier: 11.10.0
-        version: link:../node-integration-tests
-      '@sentry/conventions':
-        specifier: ^0.30.0
-        version: 0.30.0
       vitest:
         specifier: ^4.1.11
         version: 4.1.11(@opentelemetry/api@1.10.0)(@types/node@20.19.43)(@vitest/coverage-v8@4.1.11)(esbuild@0.28.1)(jiti@2.7.0)(jsdom@21.1.2(supports-color@10.0.0))(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
@@ -590,13 +584,13 @@ importers:
         version: 6.1.3
 
   dev-packages/external-contributor-gh-action:
-    dependencies:
+    devDependencies:
       '@actions/core':
         specifier: 1.10.1
         version: 1.10.1
 
   dev-packages/node-integration-tests:
-    dependencies:
+    devDependencies:
       '@anthropic-ai/sdk':
         specifier: 0.133.0
         version: 0.133.0(zod@4.6.7)
@@ -648,6 +642,9 @@ importers:
       '@growthbook/growthbook':
         specifier: ^1.6.5
         version: 1.6.5
+      '@hapi/boom':
+        specifier: ^10.0.1
+        version: 10.0.1
       '@hapi/hapi':
         specifier: ^21.3.10
         version: 21.3.10
@@ -681,6 +678,9 @@ importers:
       '@modelcontextprotocol/server':
         specifier: ^2.0.0
         version: 2.0.0
+      '@neondatabase/serverless':
+        specifier: 1.2.0
+        version: 1.2.0
       '@prisma/adapter-pg':
         specifier: 7.2.0
         version: 7.2.0
@@ -690,9 +690,18 @@ importers:
       '@prisma/orm-postgres':
         specifier: 8.0.0-rc.17
         version: 8.0.0-rc.17(magicast@0.3.5)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@sentry-internal/rollup-utils':
+        specifier: 11.10.0
+        version: link:../rollup-utils
+      '@sentry-internal/test-utils':
+        specifier: 11.10.0
+        version: link:../test-utils
       '@sentry/aws-serverless':
         specifier: 11.10.0
         version: link:../../packages/aws-serverless
+      '@sentry/conventions':
+        specifier: 0.30.0
+        version: 0.30.0
       '@sentry/core':
         specifier: 11.10.0
         version: link:../../packages/core
@@ -702,6 +711,9 @@ importers:
       '@sentry/node':
         specifier: 11.10.0
         version: link:../../packages/node
+      '@sentry/node-native':
+        specifier: 11.10.0
+        version: link:../../packages/node-native
       '@sentry/server-runtime-injection':
         specifier: 11.10.0
         version: link:../../packages/server-runtime-injection
@@ -711,6 +723,12 @@ importers:
       '@smithy/node-http-handler':
         specifier: 4.12.1
         version: 4.12.1
+      '@types/express':
+        specifier: ^4.17.21
+        version: 4.17.21
+      '@types/node-schedule':
+        specifier: ^2.1.7
+        version: 2.1.7
       '@typesafe-ai/sdk':
         specifier: ^0.6.0
         version: 0.6.0
@@ -738,6 +756,9 @@ importers:
       dataloader:
         specifier: 2.2.3
         version: 2.2.3
+      esbuild:
+        specifier: 0.28.1
+        version: 0.28.1
       express:
         specifier: ^4.21.2
         version: 4.22.1(supports-color@10.0.0)
@@ -828,6 +849,9 @@ importers:
       proxy:
         specifier: ^4.1.0
         version: 4.1.0(supports-color@10.0.0)
+      react:
+        specifier: ^18.3.1
+        version: 18.3.1
       redis-4:
         specifier: npm:redis@^4.6.14
         version: redis@4.6.14
@@ -855,52 +879,21 @@ importers:
       winston:
         specifier: ^3.17.0
         version: 3.19.0
+      winston-transport:
+        specifier: ^4.9.0
+        version: 4.9.0
       ws:
         specifier: ^8.20.1
         version: 8.21.3
       yargs:
         specifier: ^18.2.0
         version: 18.2.0
-    devDependencies:
-      '@hapi/boom':
-        specifier: ^10.0.1
-        version: 10.0.1
-      '@neondatabase/serverless':
-        specifier: 1.2.0
-        version: 1.2.0
-      '@sentry-internal/rollup-utils':
-        specifier: 11.10.0
-        version: link:../rollup-utils
-      '@sentry-internal/test-utils':
-        specifier: 11.10.0
-        version: link:../test-utils
-      '@sentry/conventions':
-        specifier: 0.30.0
-        version: 0.30.0
-      '@sentry/node-native':
-        specifier: 11.10.0
-        version: link:../../packages/node-native
-      '@types/express':
-        specifier: ^4.17.21
-        version: 4.17.21
-      '@types/node-schedule':
-        specifier: ^2.1.7
-        version: 2.1.7
-      esbuild:
-        specifier: 0.28.1
-        version: 0.28.1
-      react:
-        specifier: ^18.3.1
-        version: 18.3.1
-      winston-transport:
-        specifier: ^4.9.0
-        version: 4.9.0
       zod:
         specifier: ^4.6.7
         version: 4.6.7
 
   dev-packages/optional-e2e-gh-action:
-    dependencies:
+    devDependencies:
       '@actions/core':
         specifier: 1.10.1
         version: 1.10.1
@@ -914,7 +907,7 @@ importers:
   dev-packages/rollup-utils: {}
 
   dev-packages/size-limit-gh-action:
-    dependencies:
+    devDependencies:
       '@actions/artifact':
         specifier: ^6.2.1
         version: 6.2.1(supports-color@10.0.0)

From 5b68948feec797fc8b96519c2c795bd9e0893f81 Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:00:48 +0100
Subject: [PATCH 135/169] ci(deps): Ignore langchain in dependabot (#26056)

**Why:** node-integration-tests pins langchain v0 to test the lowest
supported versions, so bumps there drop coverage. Dependabot uses one
version per workspace, so it also downgraded the v1 pins in
cloudflare-integration-tests (see #26052). We bump langchain manually
instead.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6fd0c27d63f9..651c52418c10 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -101,11 +101,10 @@ updates:
       - dependency-name: '@tanstack/solid-router'
       - dependency-name: 'solid-js'
       - dependency-name: 'elysia'
-      # Keep node-integration-tests on langchain v0. The v1 suite installs v1 via additionalDependencies.
+      # node-integration-tests pins langchain v0 to test the lowest supported versions.
+      # Dependabot uses one version per workspace, so it would also change the v1 pins in cloudflare-integration-tests.
       - dependency-name: 'langchain'
-        update-types: ['version-update:semver-major']
       - dependency-name: '@langchain/*'
-        update-types: ['version-update:semver-major']
     groups:
       aws-sdk:
         patterns:
@@ -120,10 +119,6 @@ updates:
         patterns:
           - 'react-router'
           - '@react-router/*'
-      langchain:
-        patterns:
-          - 'langchain'
-          - '@langchain/*'
     versioning-strategy: increase
     commit-message:
       prefix: feat

From 5a93f0bb532314a57368bd2bc53ce750c4eb62ea Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:03:47 +0000
Subject: [PATCH 136/169] chore(deps-dev): Bump @babel/parser from 7.29.9 to
 8.0.10 (#26043)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser)
from 7.29.9 to 8.0.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/releases">@​babel/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.10 (2026-10-29)</h2>
<p>Thanks <a
href="https://github.com/dagemawinegash"><code>@​dagemawinegash</code></a>,
<a href="https://github.com/nyan-left"><code>@​nyan-left</code></a>, <a
href="https://github.com/saiyam-jain-dev"><code>@​saiyam-jain-dev</code></a>,
and <a
href="https://github.com/yulman2207"><code>@​yulman2207</code></a> for
your first PRs!</p>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18420">#18420</a>
fix(parser): improve radix literal rounding (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18372">#18372</a>
fix(parser): allow parenthesized assignment target in arrow initializer
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18410">#18410</a>
fix(parser): do not record strict mode errors during lookahead (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18433">#18433</a>
fix(parser): invalid expectOnePlugin usage (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18409">#18409</a>
fix(parser): handle ASI after let followed by a reserved word on the
next line (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18406">#18406</a>
fix(parser): parser should not crash for <code>import defer {}</code>
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18407">#18407</a>
fix(parser): record start location in <code>startNodeAt</code> (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-block-scoping</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18371">#18371</a>
fix: closures in for-loop test and update capture wrong binding (<a
href="https://github.com/joellemd"><code>@​joellemd</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18418">#18418</a>
fix(generator): keep aliases of string-literal module specifiers (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18427">#18427</a> Fix
missing parentheses around TypeScript assertion targets (<a
href="https://github.com/dagemawinegash"><code>@​dagemawinegash</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18324">#18324</a>
fix: invalid <code>minified: true</code> output for new expression (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18437">#18437</a>
fix(generator): preserve type modifier in TSImportEqualsDeclaration (<a
href="https://github.com/saiyam-jain-dev"><code>@​saiyam-jain-dev</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18424">#18424</a>
Keep parentheses around TSInstantiationExpression operand (<a
href="https://github.com/yulman2207"><code>@​yulman2207</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18417">#18417</a>
fix(generator): do not disallow line break after import source (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-optional-chaining</code>,
<code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18422">#18422</a>
fix: <code>Scope#push</code> should not push iife param after rest
element (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-helper-create-class-features-plugin</code>,
<code>babel-plugin-proposal-decorators</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18224">#18224</a>
fix: avoid removable fields as decorator evaluation hosts (<a
href="https://github.com/nyan-left"><code>@​nyan-left</code></a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18411">#18411</a>
Allow member expression values in <code>ObjectPattern</code> properties
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-classes</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18384">#18384</a>
Leave loose class prototype mutable with accessors (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-build-external-helpers</code>, <code>babel-core</code>,
<code>babel-helpers</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-class-properties</code>,
<code>babel-plugin-transform-modules-commonjs</code>,
<code>babel-plugin-transform-modules-systemjs</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-runtime-corejs3</code>, <code>babel-runtime</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18397">#18397</a>
Mangle top level names in helpers (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18413">#18413</a>
perf(traverse): improve generateUid and push (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:microscope: Output optimization</h4>
<ul>
<li><code>babel-helpers</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18325">#18325</a>
Shrink jsx helper size (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 8</h4>
<ul>
<li>Deimantas Jakovlevas (<a
href="https://github.com/nyan-left"><code>@​nyan-left</code></a>)</li>
<li>Huáng Jùnliàng (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li>Joelle Mahfoud (<a
href="https://github.com/joellemd"><code>@​joellemd</code></a>)</li>
<li>Nicolò Ribaudo (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
<li>Saiyam Jain (<a
href="https://github.com/saiyam-jain-dev"><code>@​saiyam-jain-dev</code></a>)</li>
<li>Yuly Cohen (<a
href="https://github.com/yulman2207"><code>@​yulman2207</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/babel/babel/blob/main/CHANGELOG.md">@​babel/parser's
changelog</a>.</em></p>
<blockquote>
<h2>v8.0.10 (2026-10-29)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18420">#18420</a>
fix(parser): improve radix literal rounding (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18372">#18372</a>
fix(parser): allow parenthesized assignment target in arrow initializer
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18410">#18410</a>
fix(parser): do not record strict mode errors during lookahead (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18433">#18433</a>
fix(parser): invalid expectOnePlugin usage (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18409">#18409</a>
fix(parser): handle ASI after let followed by a reserved word on the
next line (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18406">#18406</a>
fix(parser): parser should not crash for <code>import defer {}</code>
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18407">#18407</a>
fix(parser): record start location in <code>startNodeAt</code> (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-block-scoping</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18371">#18371</a>
fix: closures in for-loop test and update capture wrong binding (<a
href="https://github.com/joellemd"><code>@​joellemd</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18418">#18418</a>
fix(generator): keep aliases of string-literal module specifiers (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18427">#18427</a> Fix
missing parentheses around TypeScript assertion targets (<a
href="https://github.com/dagemawinegash"><code>@​dagemawinegash</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18324">#18324</a>
fix: invalid <code>minified: true</code> output for new expression (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18437">#18437</a>
fix(generator): preserve type modifier in TSImportEqualsDeclaration (<a
href="https://github.com/saiyam-jain-dev"><code>@​saiyam-jain-dev</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18424">#18424</a>
Keep parentheses around TSInstantiationExpression operand (<a
href="https://github.com/yulman2207"><code>@​yulman2207</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18417">#18417</a>
fix(generator): do not disallow line break after import source (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-optional-chaining</code>,
<code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18422">#18422</a>
fix: <code>Scope#push</code> should not push iife param after rest
element (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-helper-create-class-features-plugin</code>,
<code>babel-plugin-proposal-decorators</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18224">#18224</a>
fix: avoid removable fields as decorator evaluation hosts (<a
href="https://github.com/nyan-left"><code>@​nyan-left</code></a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18411">#18411</a>
Allow member expression values in <code>ObjectPattern</code> properties
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-classes</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18384">#18384</a>
Leave loose class prototype mutable with accessors (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-build-external-helpers</code>, <code>babel-core</code>,
<code>babel-helpers</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-class-properties</code>,
<code>babel-plugin-transform-modules-commonjs</code>,
<code>babel-plugin-transform-modules-systemjs</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-runtime-corejs3</code>, <code>babel-runtime</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18397">#18397</a>
Mangle top level names in helpers (<a
href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-traverse</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18413">#18413</a>
perf(traverse): improve generateUid and push (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>:microscope: Output optimization</h4>
<ul>
<li><code>babel-helpers</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18325">#18325</a>
Shrink jsx helper size (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h2>v8.0.8 (2026-10-23)</h2>
<h4>:eyeglasses: Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a
href="https://redirect.github.com/babel/babel/pull/18366">#18366</a>
fix(parser): disallow named specifiers after * as ns (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18336">#18336</a>
fix(parser): disallow const x followed by linebreak and of (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18343">#18343</a>
fix(parser): reject delete (x) when createParenthesizedExpressions: true
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18276">#18276</a>
fix: report expression errors in object literals used as member base (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18286">#18286</a>
Disallow arrow functions as <code>new</code> callee and
<code>await</code> operand (<a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
<li><a
href="https://redirect.github.com/babel/babel/pull/18309">#18309</a>
Disallow call expressions as arrow function parameters in sloppy mode
(<a href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/babel/babel/commit/a4f3b3ee45c0a3aea618d5a308620a493c7222d1"><code>a4f3b3e</code></a>
v8.0.10</li>
<li><a
href="https://github.com/babel/babel/commit/05531042244886c271ceace4887d47d4253bb860"><code>0553104</code></a>
fix(parser): improve radix literal rounding (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18420">#18420</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/4dd004a6272a7800376be2ac4cd0eaa3474e0125"><code>4dd004a</code></a>
fix(parser): allow parenthesized assignment target in arrow initializer
(<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18372">#18372</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/2060a762d3cfcc8f436ea464643e2246514c0fd9"><code>2060a76</code></a>
fix(parser): do not record strict mode errors during lookahead (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18410">#18410</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/6acec29c1e49d95db444bedb472f87a3b8e71f86"><code>6acec29</code></a>
fix(parser): invalid expectOnePlugin usage (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18433">#18433</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/b8a65cf8c3a77180fab12ee19116390d9047ea27"><code>b8a65cf</code></a>
fix(parser): handle ASI after let followed by a reserved word on the
next lin...</li>
<li><a
href="https://github.com/babel/babel/commit/df3d4afe26b62e374cdcf8e41f0a55051e57f17f"><code>df3d4af</code></a>
fix(parser): parser should not crash for <code>import defer {}</code>
(<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18406">#18406</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/368821f3178d7d1a3f2da5ba2acbcb39458f2f58"><code>368821f</code></a>
fix(parser): record start location in <code>startNodeAt</code> (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18407">#18407</a>)</li>
<li><a
href="https://github.com/babel/babel/commit/220840194f5660cbacc88ebe345fc230077e31e5"><code>2208401</code></a>
v8.0.8</li>
<li><a
href="https://github.com/babel/babel/commit/44e867b1f3e056af75fe808d10d79ad5cf8683f0"><code>44e867b</code></a>
fix(parser): set <code>phase: null</code> for eafer imports (<a
href="https://github.com/babel/babel/tree/HEAD/packages/babel-parser/issues/18392">#18392</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/babel/babel/commits/v8.0.10/packages/babel-parser">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@babel/parser&package-manager=npm_and_yarn&previous-version=7.29.9&new-version=8.0.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Andrei Borza <andrei.borza@sentry.io>
---
 packages/bundler-plugins/package.json | 2 +-
 pnpm-lock.yaml                        | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/bundler-plugins/package.json b/packages/bundler-plugins/package.json
index 60df96e18f71..3aecb3224d2d 100644
--- a/packages/bundler-plugins/package.json
+++ b/packages/bundler-plugins/package.json
@@ -137,7 +137,7 @@
   },
   "devDependencies": {
     "@babel/core": "^7.18.5",
-    "@babel/parser": "^7.29.8",
+    "@babel/parser": "^8.0.10",
     "@babel/preset-react": "^7.23.3",
     "@sentry-internal/rollup-utils": "11.10.0",
     "@sentry-internal/test-utils": "11.10.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 80ac8bd58c62..e2bc38bb277d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1175,8 +1175,8 @@ importers:
         specifier: ^7.18.5
         version: 7.29.7(supports-color@8.1.1)
       '@babel/parser':
-        specifier: ^7.29.8
-        version: 7.29.9
+        specifier: ^8.0.10
+        version: 8.1.0
       '@babel/preset-react':
         specifier: ^7.23.3
         version: 7.29.7(@babel/core@7.29.7(supports-color@8.1.1))(supports-color@8.1.1)

From 11b278e12cfd0c5f56a4550ab98c1331533e3b60 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:55:35 +0100
Subject: [PATCH 137/169] feat(deps): Bump @sveltejs/acorn-typescript from
 1.0.9 to 1.0.13 (#26050)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@sveltejs/acorn-typescript](https://github.com/sveltejs/acorn-typescript)
from 1.0.9 to 1.0.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/acorn-typescript/releases">@​sveltejs/acorn-typescript's
releases</a>.</em></p>
<blockquote>
<h2><code>@​sveltejs/acorn-typescript</code><a
href="https://github.com/1"><code>@​1</code></a>.0.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Preserve TypeScript assertion wrappers in assignment target AST
nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/71">#71</a>)</p>
</li>
<li>
<p>fix: parse const type parameters on classes (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/59">#59</a>)</p>
</li>
<li>
<p>fix: parse type arguments on decorators (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/66">#66</a>)</p>
</li>
<li>
<p>fix: disambiguate type arguments from greater-than operators (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/63">#63</a>)</p>
</li>
<li>
<p>fix: parse type predicates for parameters named asserts (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/65">#65</a>)</p>
</li>
<li>
<p>Register enum declarations as local runtime bindings. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/86">#86</a>)</p>
</li>
<li>
<p>Restore parser state and discard callback events from abandoned parse
branches. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/84">#84</a>)</p>
</li>
<li>
<p>fix: parse keywords used as tuple labels (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/61">#61</a>)</p>
</li>
<li>
<p>fix: parse keywords used as type references (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/68">#68</a>)</p>
</li>
</ul>
<h2><code>@​sveltejs/acorn-typescript</code><a
href="https://github.com/1"><code>@​1</code></a>.0.12</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Preserve parameters in generic async arrow function AST nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/73">#73</a>)</p>
</li>
<li>
<p>fix: isolate namespace variable scopes (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/92">#92</a>)</p>
</li>
<li>
<p>Parse decorators on declared and declared abstract classes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/77">#77</a>)</p>
</li>
<li>
<p>Decode astral JSX numeric entities and ignore inherited entity table
names. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/81">#81</a>)</p>
</li>
<li>
<p>Parse JSX spread children as <code>JSXSpreadChild</code> nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/79">#79</a>)</p>
</li>
<li>
<p>Allow <code>static</code> auto-accessor class fields. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/88">#88</a>)</p>
</li>
<li>
<p>Parse TypeScript expressions beginning with <code>&lt;</code> as
yield arguments. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/75">#75</a>)</p>
</li>
</ul>
<h2><code>@​sveltejs/acorn-typescript</code><a
href="https://github.com/1"><code>@​1</code></a>.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: const initializer in ambient context (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/52">#52</a>)</p>
</li>
<li>
<p>fix: avoid emitting duplicate comments (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/50">#50</a>)</p>
</li>
<li>
<p>fix: allow <code>in</code> operator inside parenthesized expressions
in a <code>for</code> loop initializer (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/53">#53</a>)</p>
</li>
<li>
<p>Fix dts ambient declaration export validation. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/54">#54</a>)</p>
</li>
</ul>
<h2><code>@​sveltejs/acorn-typescript</code><a
href="https://github.com/1"><code>@​1</code></a>.0.10</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/acorn-typescript/blob/main/CHANGELOG.md">@​sveltejs/acorn-typescript's
changelog</a>.</em></p>
<blockquote>
<h2>1.0.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Preserve TypeScript assertion wrappers in assignment target AST
nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/71">#71</a>)</p>
</li>
<li>
<p>fix: parse const type parameters on classes (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/59">#59</a>)</p>
</li>
<li>
<p>fix: parse type arguments on decorators (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/66">#66</a>)</p>
</li>
<li>
<p>fix: disambiguate type arguments from greater-than operators (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/63">#63</a>)</p>
</li>
<li>
<p>fix: parse type predicates for parameters named asserts (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/65">#65</a>)</p>
</li>
<li>
<p>Register enum declarations as local runtime bindings. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/86">#86</a>)</p>
</li>
<li>
<p>Restore parser state and discard callback events from abandoned parse
branches. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/84">#84</a>)</p>
</li>
<li>
<p>fix: parse keywords used as tuple labels (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/61">#61</a>)</p>
</li>
<li>
<p>fix: parse keywords used as type references (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/68">#68</a>)</p>
</li>
</ul>
<h2>1.0.12</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Preserve parameters in generic async arrow function AST nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/73">#73</a>)</p>
</li>
<li>
<p>fix: isolate namespace variable scopes (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/92">#92</a>)</p>
</li>
<li>
<p>Parse decorators on declared and declared abstract classes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/77">#77</a>)</p>
</li>
<li>
<p>Decode astral JSX numeric entities and ignore inherited entity table
names. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/81">#81</a>)</p>
</li>
<li>
<p>Parse JSX spread children as <code>JSXSpreadChild</code> nodes. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/79">#79</a>)</p>
</li>
<li>
<p>Allow <code>static</code> auto-accessor class fields. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/88">#88</a>)</p>
</li>
<li>
<p>Parse TypeScript expressions beginning with <code>&lt;</code> as
yield arguments. (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/75">#75</a>)</p>
</li>
</ul>
<h2>1.0.11</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: const initializer in ambient context (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/52">#52</a>)</p>
</li>
<li>
<p>fix: avoid emitting duplicate comments (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/50">#50</a>)</p>
</li>
<li>
<p>fix: allow <code>in</code> operator inside parenthesized expressions
in a <code>for</code> loop initializer (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/pull/53">#53</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/923b213dbcce8cd4a26057ab10b7de37b7334a03"><code>923b213</code></a>
Version Packages (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/96">#96</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/fd01b313e6e16ab91e11c7d3237a961cf3b22c00"><code>fd01b31</code></a>
fix: make parse branches transactional (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/84">#84</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/efc8908d233a512bb41a71ab1c775a381cc19bf8"><code>efc8908</code></a>
fix: register enum runtime bindings (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/86">#86</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/13b7fc6eeda7ea27ae6421df3e7f707a1e1ab6f0"><code>13b7fc6</code></a>
fix: preserve assignment target assertions (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/71">#71</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/d8d128580d462c446a20c9d4964f90be88e03b1f"><code>d8d1285</code></a>
fix: parse keywords used as type references (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/68">#68</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/ea2e8bc4f21c19aa5e950b57006b6047d24402da"><code>ea2e8bc</code></a>
fix: parse type arguments in decorator expressions (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/66">#66</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/d7095500b53a2291654f203c3c03a91eb7f38f4f"><code>d709550</code></a>
fix: parse type predicates for parameters named asserts (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/65">#65</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/842bdcc7a61120e097d5d587e3f03c366adf38fb"><code>842bdcc</code></a>
fix: disambiguate type arguments from greater-than operators (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/63">#63</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/81019b57b914b1094261485b9747bed2ec23a205"><code>81019b5</code></a>
fix: parse keywords used as tuple labels (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/61">#61</a>)</li>
<li><a
href="https://github.com/sveltejs/acorn-typescript/commit/e6fd0e94a1992c71012c1b302c7ece526763488e"><code>e6fd0e9</code></a>
fix: parse const type parameters on classes (<a
href="https://redirect.github.com/sveltejs/acorn-typescript/issues/59">#59</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sveltejs/acorn-typescript/compare/v1.0.9...@sveltejs/acorn-typescript@1.0.13">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
---
 packages/sveltekit/package.json |  2 +-
 pnpm-lock.yaml                  | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/packages/sveltekit/package.json b/packages/sveltekit/package.json
index 1e8d8301ab4e..11cfe0eb3123 100644
--- a/packages/sveltekit/package.json
+++ b/packages/sveltekit/package.json
@@ -79,7 +79,7 @@
     "@sentry/server-utils": "11.10.0",
     "@sentry/svelte": "11.10.0",
     "@sentry/bundler-plugins": "11.10.0",
-    "@sveltejs/acorn-typescript": "^1.0.9",
+    "@sveltejs/acorn-typescript": "^1.0.13",
     "acorn": "^8.14.0",
     "magic-string": "~0.30.0",
     "sorcery": "1.0.0"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e2bc38bb277d..cef95b9dd6dd 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2383,8 +2383,8 @@ importers:
         specifier: 11.10.0
         version: link:../svelte
       '@sveltejs/acorn-typescript':
-        specifier: ^1.0.9
-        version: 1.0.9(acorn@8.18.0)
+        specifier: ^1.0.13
+        version: 1.0.13(acorn@8.18.0)
       acorn:
         specifier: ^8.14.0
         version: 8.18.0
@@ -8543,8 +8543,8 @@ packages:
     resolution: {integrity: sha512-eNpUGegTT3hhoTK9j6aLViVjybYtdq6Ishb4BkVLi5tT58S1D80n7dmALMoBWkbrYG4uQv30c8iAB6nZylX0Fg==}
     engines: {node: '>=20.0.0'}
 
-  '@sveltejs/acorn-typescript@1.0.9':
-    resolution: {integrity: sha512-lVJX6qEgs/4DOcRTpo56tmKzVPtoWAaVbL4hfO7t7NVwl9AAXzQR6cihesW1BmNMPl+bK6dreu2sOKBP2Q9CIA==}
+  '@sveltejs/acorn-typescript@1.0.13':
+    resolution: {integrity: sha512-wgKggnhZVL9Bfx1OaKKTrYY9BFRk6C8UAkQNUcIv1+llzYrIqy+RZm5HPKzn0NpEBvTVhTqB4kQyllZywsRBRQ==}
     peerDependencies:
       acorn: ^8.9.0
 
@@ -27636,14 +27636,14 @@ snapshots:
       '@supabase/realtime-js': 2.109.0
       '@supabase/storage-js': 2.109.0
 
-  '@sveltejs/acorn-typescript@1.0.9(acorn@8.18.0)':
+  '@sveltejs/acorn-typescript@1.0.13(acorn@8.18.0)':
     dependencies:
       acorn: 8.18.0
 
   '@sveltejs/kit@2.70.2(@opentelemetry/api@1.10.0)(@sveltejs/vite-plugin-svelte@3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)))(svelte@4.2.8)(typescript@6.0.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
       '@standard-schema/spec': 1.1.0
-      '@sveltejs/acorn-typescript': 1.0.9(acorn@8.18.0)
+      '@sveltejs/acorn-typescript': 1.0.13(acorn@8.18.0)
       '@sveltejs/vite-plugin-svelte': 3.1.2(supports-color@10.0.0)(svelte@4.2.8)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       '@types/cookie': 0.6.0
       acorn: 8.18.0

From 1b08ab8a10cab7d905757a5fca611a878dea64f5 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 19:07:26 +0100
Subject: [PATCH 138/169] chore(dependabot): Group related dependency updates
 (#26059)

**Why:**

- Review packages with related version or peer requirements in the same
PR.
- Keep Nuxt's independently versioned `@nuxt/kit` outside its runtime
group.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 651c52418c10..9e1e05264cf7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -109,6 +109,32 @@ updates:
       aws-sdk:
         patterns:
           - '@aws-sdk/*'
+      angular:
+        patterns:
+          - '@angular/*'
+          - '@angular-devkit/*'
+          - 'ng-packagr'
+      react:
+        patterns:
+          - 'react'
+          - 'react-dom'
+      nuxt:
+        patterns:
+          - 'nuxt'
+          - '@nuxt/schema'
+          - '@nuxt/nitro-server'
+      nestjs:
+        patterns:
+          - '@nestjs/common'
+          - '@nestjs/core'
+      vitest:
+        patterns:
+          - 'vitest'
+          - '@vitest/*'
+      prisma:
+        patterns:
+          - 'prisma'
+          - '@prisma/client'
       opentelemetry:
         patterns:
           - '@opentelemetry/*'

From 0b4d12cf8948f7bbd031a4599780438fcfcc6dc4 Mon Sep 17 00:00:00 2001
From: Ayesha Waseem <ayeshawaseemahmad@gmail.com>
Date: Tue, 3 Nov 2026 23:12:05 +0500
Subject: [PATCH 139/169] fix(astro): Initialize the server SDK on the first
 endpoint request (#25731)

The server init was only imported through `injectScript('page-ssr',
...)`, which Astro adds to page modules but not to API endpoints. On a
server that has not rendered a page yet, `getClient()` is undefined, so
the request middleware skips the request and errors thrown by endpoints
are dropped.

The middleware is now registered through a virtual module that imports
the server init before re-exporting `onRequest` from
`@sentry/astro/middleware`. With a server init file, the init is that
file, which `page-ssr` imports as well. With the default generated
snippet, the snippet lives in a virtual module that both the `page-ssr`
injection and the middleware import. Either way the module is shared, so
`Sentry.init()` still runs once, ahead of a page's own imports.

On a fresh Node-adapter build the first request to an endpoint now runs
the init and the error is captured, on Astro 4, 5, 6 and 7 (also in
`astro dev` on 7, on `@astrojs/vercel` serverless and on Cloudflare
Pages). Before, nothing was captured until a page had rendered.

Cloudflare Workers is unchanged, because the Worker wrapper already
initializes the SDK for every request. Netlify is unchanged too: its
optional edge middleware is bundled into a separate Deno function and
can't be detected here, and running the init there throws. Not covered:
Netlify, `autoInstrumentation.requestHandler: false`, and errors thrown
before the first request. An init file that throws at import time now
fails endpoint requests as well.

Fixes #25729

---------

Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
Co-authored-by: OpenAI Codex <codex@openai.com>
---
 packages/astro/src/integration/index.ts       |  3 +-
 packages/astro/src/server/sdk.ts              | 15 +++++++++
 .../test/integration/index.files.test.ts      | 18 +++++++++++
 packages/astro/test/integration/index.test.ts | 18 +++++++++++
 packages/astro/test/server/sdk.test.ts        | 32 +++++++++++++++++++
 5 files changed, 85 insertions(+), 1 deletion(-)

diff --git a/packages/astro/src/integration/index.ts b/packages/astro/src/integration/index.ts
index 66b5de50861b..76bae75d5973 100644
--- a/packages/astro/src/integration/index.ts
+++ b/packages/astro/src/integration/index.ts
@@ -248,7 +248,8 @@ export const sentryAstro = (options: SentryOptions = {}): AstroIntegration => {
         if (isSSR && shouldAddMiddleware) {
           addMiddleware({
             order: 'pre',
-            entrypoint: serverInitSnippet ? SENTRY_MIDDLEWARE_MODULE : '@sentry/astro/middleware',
+            entrypoint:
+              serverInitSnippet && !isCloudflareWorkers ? SENTRY_MIDDLEWARE_MODULE : '@sentry/astro/middleware',
           });
         }
       },
diff --git a/packages/astro/src/server/sdk.ts b/packages/astro/src/server/sdk.ts
index 557c1b7812d7..98910a1db2fd 100644
--- a/packages/astro/src/server/sdk.ts
+++ b/packages/astro/src/server/sdk.ts
@@ -4,11 +4,21 @@ import { applySdkMetadata } from '@sentry/core';
 import type { NodeClient, NodeOptions } from '@sentry/node';
 import { init as initNodeSdk } from '@sentry/node';
 
+declare const EdgeRuntime: string | undefined;
+declare const Deno: unknown;
+declare const Netlify: unknown;
+
 /**
  *
  * @param options
  */
 export function init(options: NodeOptions): NodeClient | undefined {
+  // With `edgeMiddleware` enabled, Vercel and Netlify bundle our middleware (which imports the
+  // server init) into a separate edge function, where the Node SDK can't run.
+  if (isEdgeRuntime()) {
+    return undefined;
+  }
+
   const opts = {
     ...options,
   };
@@ -26,3 +36,8 @@ export function init(options: NodeOptions): NodeClient | undefined {
 
   return initNodeSdk(opts);
 }
+
+function isEdgeRuntime(): boolean {
+  // Netlify also defines the `Netlify` global in its Node functions, so only Deno + Netlify is its edge.
+  return typeof EdgeRuntime === 'string' || (typeof Netlify !== 'undefined' && typeof Deno !== 'undefined');
+}
diff --git a/packages/astro/test/integration/index.files.test.ts b/packages/astro/test/integration/index.files.test.ts
index 125333ede7be..05cf524543b8 100644
--- a/packages/astro/test/integration/index.files.test.ts
+++ b/packages/astro/test/integration/index.files.test.ts
@@ -37,4 +37,22 @@ describe('sentryAstro integration', () => {
       /^import ".*\/sentry.server.config.js"/,
     );
   });
+
+  it('imports the default server init file from the middleware entrypoint', async () => {
+    const addMiddleware = vi.fn();
+    const updateConfig = vi.fn();
+    const setup = sentryAstro({}).hooks['astro:config:setup'] as (params: unknown) => Promise<void>;
+
+    await setup({ updateConfig, injectScript, addMiddleware, config: { output: 'server' } });
+
+    expect(addMiddleware).toHaveBeenCalledWith({
+      order: 'pre',
+      entrypoint: 'virtual:@sentry/astro/middleware',
+    });
+
+    const plugin = updateConfig.mock.calls
+      .flatMap(([updatedConfig]) => updatedConfig.vite?.plugins ?? [])
+      .find((vitePlugin: { name?: string }) => vitePlugin?.name === 'sentry-astro-server-init');
+    expect(plugin.load('\0virtual:@sentry/astro/server-init')).toMatch(/^import ".*\/sentry.server.config.js";$/);
+  });
 });
diff --git a/packages/astro/test/integration/index.test.ts b/packages/astro/test/integration/index.test.ts
index 62481501bd23..870c28dc5b30 100644
--- a/packages/astro/test/integration/index.test.ts
+++ b/packages/astro/test/integration/index.test.ts
@@ -690,6 +690,24 @@ describe('sentryAstro integration', () => {
     });
   });
 
+  it('keeps the default middleware entrypoint for the Cloudflare Workers adapter', async () => {
+    const addMiddleware = vi.fn();
+    const setup = sentryAstro({ serverInitPath: 'my-server-init-path.js' }).hooks['astro:config:setup'] as (
+      params: unknown,
+    ) => Promise<void>;
+
+    await setup({
+      ...baseConfigHookObject,
+      config: { output: 'server', adapter: { name: '@astrojs/cloudflare' } },
+      addMiddleware,
+      updateConfig,
+      injectScript,
+    });
+
+    expect(addMiddleware).toHaveBeenCalledWith({ order: 'pre', entrypoint: '@sentry/astro/middleware' });
+    expect(getServerInit(updateConfig)).toContain('my-server-init-path.js');
+  });
+
   it('runs the server init once, from SSR pages and the middleware alike, so requests that render no page find a client', async () => {
     const integration = sentryAstro({});
     const updateConfig = vi.fn();
diff --git a/packages/astro/test/server/sdk.test.ts b/packages/astro/test/server/sdk.test.ts
index 6de7cab9f38e..e9d15f50cb7f 100644
--- a/packages/astro/test/server/sdk.test.ts
+++ b/packages/astro/test/server/sdk.test.ts
@@ -10,10 +10,42 @@ describe('Sentry server SDK', () => {
   describe('init', () => {
     afterEach(() => {
       vi.clearAllMocks();
+      vi.unstubAllGlobals();
 
       getMainCarrier().__SENTRY__ = undefined;
     });
 
+    it("doesn't initialize the SDK in the Vercel Edge runtime", () => {
+      vi.stubGlobal('EdgeRuntime', 'edge-runtime');
+
+      expect(init({})).toBeUndefined();
+      expect(nodeInit).not.toHaveBeenCalled();
+    });
+
+    it("doesn't initialize the SDK in Netlify edge functions", () => {
+      vi.stubGlobal('Netlify', {});
+      vi.stubGlobal('Deno', {});
+
+      expect(init({})).toBeUndefined();
+      expect(nodeInit).not.toHaveBeenCalled();
+    });
+
+    it('initializes the SDK in Netlify Node functions', () => {
+      vi.stubGlobal('Netlify', {});
+
+      init({});
+
+      expect(nodeInit).toHaveBeenCalledTimes(1);
+    });
+
+    it('initializes the SDK in Deno', () => {
+      vi.stubGlobal('Deno', {});
+
+      init({});
+
+      expect(nodeInit).toHaveBeenCalledTimes(1);
+    });
+
     it('adds Astro metadata to the SDK options', () => {
       expect(nodeInit).not.toHaveBeenCalled();
 

From ebf2f7b184515ee863581a6e057ae8339140e362 Mon Sep 17 00:00:00 2001
From: "javascript-sdk-gitflow[bot]"
 <255134079+javascript-sdk-gitflow[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:15:43 +0000
Subject: [PATCH 140/169] chore: Add external contributor to CHANGELOG.md
 (#26062)

This PR adds the external contributor to the CHANGELOG.md file, so that
they are credited for their contribution. See #25731

Co-authored-by: nicohrubec <29484629+nicohrubec@users.noreply.github.com>
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f23f10319b80..2d95711c3678 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
-Work in this release was contributed by @lazerg, @chiliec, @61465, and @jpdefo. Thank you for your contributions!
+Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and @AyeshaWaseemAhmad. Thank you for your contributions!
 
 ### Important Changes
 

From 2fa4b3aa0d9d5125f959732773883b561bac6042 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:21:57 +0000
Subject: [PATCH 141/169] chore(deps-dev): Bump @hono/node-server from 2.1.3 to
 2.1.5 (#26054)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [@hono/node-server](https://github.com/honojs/node-server) from
2.1.3 to 2.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.5</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(listener): abort the request signal when an HTTP/2 client resets
the stream by <a
href="https://github.com/affanmomin"><code>@​affanmomin</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/404">honojs/node-server#404</a></li>
<li>fix(serve-static): only serve GET and HEAD requests by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/405">honojs/node-server#405</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/affanmomin"><code>@​affanmomin</code></a> made
their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/404">honojs/node-server#404</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.1.4...v2.1.5">https://github.com/honojs/node-server/compare/v2.1.4...v2.1.5</a></p>
<h2>v2.1.4</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: allow hono v5 as a peer dependency by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/406">honojs/node-server#406</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.1.3...v2.1.4">https://github.com/honojs/node-server/compare/v2.1.3...v2.1.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/4b47a0d8a5c12ed69a9f8493df69918f62fb61c0"><code>4b47a0d</code></a>
2.1.5</li>
<li><a
href="https://github.com/honojs/node-server/commit/e77824a912c7f12d26f8f200b0b2e9c2b0d72a97"><code>e77824a</code></a>
fix(serve-static): only serve GET and HEAD requests (<a
href="https://redirect.github.com/honojs/node-server/issues/405">#405</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/1b6e6bfc21f0f018d5725b8bd8f5a230680e2134"><code>1b6e6bf</code></a>
fix(listener): abort the request signal when an HTTP/2 client resets the
stre...</li>
<li><a
href="https://github.com/honojs/node-server/commit/d57ed9b9dad4d44b20caa0cdb1b10d8360d8b734"><code>d57ed9b</code></a>
2.1.4</li>
<li><a
href="https://github.com/honojs/node-server/commit/92b014c1b6a3634a5cb2fcc9ddcc10e9bc68e48d"><code>92b014c</code></a>
chore: allow hono v5 as a peer dependency (<a
href="https://redirect.github.com/honojs/node-server/issues/406">#406</a>)</li>
<li>See full diff in <a
href="https://github.com/honojs/node-server/compare/v2.1.3...v2.1.5">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
---
 .../node-integration-tests/package.json       |  2 +-
 pnpm-lock.yaml                                | 46 ++++++-------------
 2 files changed, 16 insertions(+), 32 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 34ca3c97cdfd..24f04f784f0f 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -44,7 +44,7 @@
     "@growthbook/growthbook": "^1.6.5",
     "@hapi/boom": "^10.0.1",
     "@hapi/hapi": "^21.3.10",
-    "@hono/node-server": "^2.1.3",
+    "@hono/node-server": "^2.1.5",
     "@koa/router": "^12.0.1",
     "@langchain/anthropic": "^0.3.10",
     "@langchain/core": "^0.3.80",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cef95b9dd6dd..dd21eed526bd 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -649,8 +649,8 @@ importers:
         specifier: ^21.3.10
         version: 21.3.10
       '@hono/node-server':
-        specifier: ^2.1.3
-        version: 2.1.3(hono@4.13.11)
+        specifier: ^2.1.5
+        version: 2.1.5(hono@4.13.11)
       '@koa/router':
         specifier: ^12.0.1
         version: 12.0.2(supports-color@10.0.0)
@@ -5402,11 +5402,11 @@ packages:
   '@hapi/wreck@18.1.2':
     resolution: {integrity: sha512-3dMnV2pfhQiyEqu8DL3VBmxkdLiRDiiUDuG79Dp+UK1gL9ZxAfDOUhB6k3D5MLqcgJJ1IARyGFhwoc1NITr/pg==}
 
-  '@hono/node-server@2.1.3':
-    resolution: {integrity: sha512-TA//nWMqPhbfdfneACk6t5a9eqbS9lABEPyKn0/xZTah3H3U2XaVg85rJFl0/Fyit0I552YDHgXGVSf3GwqbUw==}
+  '@hono/node-server@2.1.5':
+    resolution: {integrity: sha512-MgP/I06GdvsilDspMk/qmRzpk8LOUStP6jFAbSRi40W09DhoyUn+Mj7eyKICPqeYKybOjVFLVIAQzvu1bfIa7Q==}
     engines: {node: '>=20'}
     peerDependencies:
-      hono: ^4
+      hono: ^4 || ^5.0.0-0
 
   '@humanwhocodes/config-array@0.11.14':
     resolution: {integrity: sha512-3T8LkOmg45BV5FICb15QQMsyUSWrQ8AygVfC7ZG32zOalnqrilm018ZVCw0eapXux8FtA33q8PSRSstjee3jSg==}
@@ -17207,20 +17207,10 @@ packages:
     peerDependencies:
       seroval: ^1.0
 
-  seroval-plugins@1.7.7:
-    resolution: {integrity: sha512-5PAKQPAfj2MD332QeCdzXKm334ftIb0B1Ek3I9IQa73rPOlBSHko9mODFo8XNjzs6KJQG3nE6dn9dw7hJjrZAQ==}
-    engines: {node: '>=20'}
-    peerDependencies:
-      seroval: ^1.0
-
   seroval@1.6.12:
     resolution: {integrity: sha512-CqbIVfk/7GL3ITwZI55lcPbpQbjHZ2DD5cUj4iH7E9YsCfHNJV1mx7yNp86Z84w5IpmkZZS/2s5vPOWmVWSdQg==}
     engines: {node: '>=10'}
 
-  seroval@1.7.7:
-    resolution: {integrity: sha512-9OdYsqMLV5RSUNNtkgr6DT2bS/ncba6AqUJx8H7epNJNa0cKNWhQtF5GLRjkF/KuAdvAuRRitWrq86K/v1S/kg==}
-    engines: {node: '>=20'}
-
   serve-index@1.9.1:
     resolution: {integrity: sha512-pXHfKNP4qujrtteMrSBb0rc8HJ9Ms/GrXwcUtUtD5s4ewDJI8bT3Cz2zTVRMKtri49pLx2e0Ya8ziP5Ya2pZZw==}
     engines: {node: '>= 0.8.0'}
@@ -24156,7 +24146,7 @@ snapshots:
     dependencies:
       '@earendil-works/pi-agent-core': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
       '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
-      '@hono/node-server': 2.1.3(hono@4.13.11)
+      '@hono/node-server': 2.1.5(hono@4.13.11)
       '@modelcontextprotocol/client': 2.0.0
       '@valibot/to-json-schema': 1.8.0(valibot@1.5.0(typescript@7.0.2))
       hono: 4.13.11
@@ -24489,7 +24479,7 @@ snapshots:
       '@hapi/bourne': 3.0.0
       '@hapi/hoek': 11.0.4
 
-  '@hono/node-server@2.1.3(hono@4.13.11)':
+  '@hono/node-server@2.1.5(hono@4.13.11)':
     dependencies:
       hono: 4.13.11
 
@@ -25078,7 +25068,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)':
     dependencies:
-      '@hono/node-server': 2.1.3(hono@4.13.11)
+      '@hono/node-server': 2.1.5(hono@4.13.11)
       ajv: 8.20.0
       ajv-formats: 3.0.1
       content-type: 1.0.5
@@ -25723,7 +25713,7 @@ snapshots:
       perfect-debounce: 2.1.0
       pkg-types: 2.3.1
       postcss: 8.5.31
-      seroval: 1.7.7
+      seroval: 1.6.12
       std-env: 4.3.0
       ufo: 1.6.4
       unenv: 2.0.0-rc.24
@@ -27578,8 +27568,8 @@ snapshots:
       error-stack-parser: 2.1.4
       html-to-image: 1.11.11
       radix3: 1.1.2
-      seroval: 1.7.7
-      seroval-plugins: 1.7.7(seroval@1.7.7)
+      seroval: 1.6.12
+      seroval-plugins: 1.6.12(seroval@1.6.12)
       shiki: 1.29.2
       source-map-js: 1.2.2
       terracotta: 1.0.5(solid-js@1.9.18)
@@ -27723,8 +27713,8 @@ snapshots:
       '@tanstack/history': 1.141.0
       '@tanstack/store': 0.8.0
       cookie-es: 2.0.1
-      seroval: 1.7.7
-      seroval-plugins: 1.7.7(seroval@1.7.7)
+      seroval: 1.6.12
+      seroval-plugins: 1.6.12(seroval@1.6.12)
       tiny-invariant: 1.3.3
       tiny-warning: 1.0.3
 
@@ -27732,8 +27722,8 @@ snapshots:
     dependencies:
       '@tanstack/history': 1.161.6
       cookie-es: 3.1.1
-      seroval: 1.7.7
-      seroval-plugins: 1.7.7(seroval@1.7.7)
+      seroval: 1.6.12
+      seroval-plugins: 1.6.12(seroval@1.6.12)
 
   '@tanstack/router-utils@1.154.7(supports-color@10.0.0)':
     dependencies:
@@ -38979,14 +38969,8 @@ snapshots:
     dependencies:
       seroval: 1.6.12
 
-  seroval-plugins@1.7.7(seroval@1.7.7):
-    dependencies:
-      seroval: 1.7.7
-
   seroval@1.6.12: {}
 
-  seroval@1.7.7: {}
-
   serve-index@1.9.1(supports-color@10.0.0):
     dependencies:
       accepts: 1.3.8

From 9137f536fda325a5282d29ca4f44d1850e56d8b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:23:12 +0000
Subject: [PATCH 142/169] chore(deps-dev): Bump the nestjs group with 2 updates
 (#26060)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the nestjs group with 2 updates:
[@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common)
and
[@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core).

Updates `@nestjs/common` from 10.4.15 to 10.4.22
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nestjs/nest/releases">@​nestjs/common's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.22</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(express): Update body-parser to 1.20.4 for CVE-2025-15284 by <a
href="https://github.com/Xilis"><code>@​Xilis</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/16178">nestjs/nest#16178</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22">https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22</a></p>
<h2>v10.4.21</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(express): Update express to 4.22.1 to address CVE-2025-15284 by
<a href="https://github.com/Xilis"><code>@​Xilis</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/16157">nestjs/nest#16157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Xilis"><code>@​Xilis</code></a> made
their first contribution in <a
href="https://redirect.github.com/nestjs/nest/pull/16157">nestjs/nest#16157</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21">https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21</a></p>
<h2>v10.4.19 (2025-06-09)</h2>
<h4>Dependencies</h4>
<ul>
<li><code>platform-express</code>
<ul>
<li>chore(deps): bump multer from 2.0.0 to 2.0.1 (<a
href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>)</li>
</ul>
</li>
</ul>
<h2>v10.4.18 (2025-05-26)</h2>
<h4>Dependencies</h4>
<ul>
<li><code>platform-express</code>
<ul>
<li>chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0</li>
</ul>
</li>
</ul>
<h2>v10.4.16</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(common): introduce magic file type validator to nestjs common by
<a href="https://github.com/Chathula"><code>@​Chathula</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/14948">nestjs/nest#14948</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16">https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nestjs/nest/commit/58ebae08771f97ce32852d538dacbd28e18355a3"><code>58ebae0</code></a>
chore: revert lerna change</li>
<li><a
href="https://github.com/nestjs/nest/commit/44969b12aea587a6f000265aaf16ece9a5150f15"><code>44969b1</code></a>
chore(release): publish v10.4.22 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/5a59810c9c0266cc3e53020db60d4994f190905d"><code>5a59810</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.21 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/f8021ab3e93fbc2f9e450523289d603fdbf2da05"><code>f8021ab</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.20 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/421a5802fff8eb60333ce535e81fe343301e08f3"><code>421a580</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.19 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/9da1249256a97a4bd375aaeca66494b0b08543ab"><code>9da1249</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.18 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/dc2a3c0d31621dbb569c17f8f69c8b2e36eae3e3"><code>dc2a3c0</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.17 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/c4fb4326373d0136bcdb9a4aec4902f6ef12afa7"><code>c4fb432</code></a>
chore(common): temporarily move file-type to regular deps</li>
<li><a
href="https://github.com/nestjs/nest/commit/6c8aec63b4828ecb96dd62c5c5edb838539c45e6"><code>6c8aec6</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.16 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/2b9e132f6a3bb60f450076d0eacbef23be17a3c0"><code>2b9e132</code></a>
chore: update outdated tests, make file-type optional</li>
<li>Additional commits viewable in <a
href="https://github.com/nestjs/nest/commits/v10.4.22/packages/common">compare
view</a></li>
</ul>
</details>
<br />

Updates `@nestjs/core` from 10.4.15 to 10.4.22
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nestjs/nest/releases">@​nestjs/core's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.22</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(express): Update body-parser to 1.20.4 for CVE-2025-15284 by <a
href="https://github.com/Xilis"><code>@​Xilis</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/16178">nestjs/nest#16178</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22">https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22</a></p>
<h2>v10.4.21</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(express): Update express to 4.22.1 to address CVE-2025-15284 by
<a href="https://github.com/Xilis"><code>@​Xilis</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/16157">nestjs/nest#16157</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Xilis"><code>@​Xilis</code></a> made
their first contribution in <a
href="https://redirect.github.com/nestjs/nest/pull/16157">nestjs/nest#16157</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21">https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21</a></p>
<h2>v10.4.19 (2025-06-09)</h2>
<h4>Dependencies</h4>
<ul>
<li><code>platform-express</code>
<ul>
<li>chore(deps): bump multer from 2.0.0 to 2.0.1 (<a
href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>)</li>
</ul>
</li>
</ul>
<h2>v10.4.18 (2025-05-26)</h2>
<h4>Dependencies</h4>
<ul>
<li><code>platform-express</code>
<ul>
<li>chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0</li>
</ul>
</li>
</ul>
<h2>v10.4.16</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(common): introduce magic file type validator to nestjs common by
<a href="https://github.com/Chathula"><code>@​Chathula</code></a> in <a
href="https://redirect.github.com/nestjs/nest/pull/14948">nestjs/nest#14948</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16">https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nestjs/nest/commit/58ebae08771f97ce32852d538dacbd28e18355a3"><code>58ebae0</code></a>
chore: revert lerna change</li>
<li><a
href="https://github.com/nestjs/nest/commit/44969b12aea587a6f000265aaf16ece9a5150f15"><code>44969b1</code></a>
chore(release): publish v10.4.22 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/5a59810c9c0266cc3e53020db60d4994f190905d"><code>5a59810</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.21 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/f8021ab3e93fbc2f9e450523289d603fdbf2da05"><code>f8021ab</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.20 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/421a5802fff8eb60333ce535e81fe343301e08f3"><code>421a580</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.19 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/9da1249256a97a4bd375aaeca66494b0b08543ab"><code>9da1249</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.18 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/dc2a3c0d31621dbb569c17f8f69c8b2e36eae3e3"><code>dc2a3c0</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.17 release</li>
<li><a
href="https://github.com/nestjs/nest/commit/6c8aec63b4828ecb96dd62c5c5edb838539c45e6"><code>6c8aec6</code></a>
chore(<a href="https://github.com/nestjs"><code>@​nestjs</code></a>)
publish v10.4.16 release</li>
<li>See full diff in <a
href="https://github.com/nestjs/nest/commits/v10.4.22/packages/core">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 packages/nestjs/package.json |  4 +--
 pnpm-lock.yaml               | 48 +++++++++++++++++++-----------------
 2 files changed, 28 insertions(+), 24 deletions(-)

diff --git a/packages/nestjs/package.json b/packages/nestjs/package.json
index 39597e29c329..139bb6984ba0 100644
--- a/packages/nestjs/package.json
+++ b/packages/nestjs/package.json
@@ -60,8 +60,8 @@
     "@sentry/server-utils": "11.10.0"
   },
   "devDependencies": {
-    "@nestjs/common": "^10.0.0",
-    "@nestjs/core": "^10.0.0",
+    "@nestjs/common": "^10.4.22",
+    "@nestjs/core": "^10.4.22",
     "@sentry-internal/rollup-utils": "11.10.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.2"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index dd21eed526bd..d9868cdc86ad 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1325,7 +1325,7 @@ importers:
         version: 1.2.9
       elysia:
         specifier: ^1.4.29
-        version: 1.4.29(file-type@21.3.4(supports-color@10.0.0))(typescript@7.0.2)
+        version: 1.4.29(file-type@20.4.1(supports-color@10.0.0))(typescript@7.0.2)
 
   packages/ember:
     dependencies:
@@ -1594,11 +1594,11 @@ importers:
         version: link:../server-utils
     devDependencies:
       '@nestjs/common':
-        specifier: ^10.0.0
-        version: 10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        specifier: ^10.4.22
+        version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)
       '@nestjs/core':
-        specifier: ^10.0.0
-        version: 10.4.15(@nestjs/common@10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2))(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        specifier: ^10.4.22
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@sentry-internal/rollup-utils':
         specifier: 11.10.0
         version: link:../../dev-packages/rollup-utils
@@ -6148,8 +6148,8 @@ packages:
     resolution: {integrity: sha512-tnaqgixUengZQNd9ZrS3ytQfamJzLKY8QxgqWQTNHHtB+KrFQWk77JTbbpg4RD+J3qE4eO2lVytvGDX5Kj6FdQ==}
     engines: {node: '>=19.0.0'}
 
-  '@nestjs/common@10.4.15':
-    resolution: {integrity: sha512-vaLg1ZgwhG29BuLDxPA9OAcIlgqzp9/N8iG0wGapyUNTf4IY4O6zAHgN6QalwLhFxq7nOI021vdRojR1oF3bqg==}
+  '@nestjs/common@10.4.22':
+    resolution: {integrity: sha512-fxJ4v85nDHaqT1PmfNCQ37b/jcv2OojtXTaK1P2uAXhzLf9qq6WNUOFvxBrV4fhQek1EQoT1o9oj5xAZmv3NRw==}
     peerDependencies:
       class-transformer: '*'
       class-validator: '*'
@@ -6161,8 +6161,8 @@ packages:
       class-validator:
         optional: true
 
-  '@nestjs/core@10.4.15':
-    resolution: {integrity: sha512-UBejmdiYwaH6fTsz2QFBlC1cJHM+3UDeLZN+CiP9I1fRv2KlBZsmozGLbV5eS1JAVWJB4T5N5yQ0gjN8ZvcS2w==}
+  '@nestjs/core@10.4.22':
+    resolution: {integrity: sha512-6IX9+VwjiKtCjx+mXVPncpkQ5ZjKfmssOZPFexmT+6T9H9wZ3svpYACAo7+9e7Nr9DZSoRZw3pffkJP7Z0UjaA==}
     peerDependencies:
       '@nestjs/common': ^10.0.0
       '@nestjs/microservices': ^10.0.0
@@ -8695,8 +8695,8 @@ packages:
     peerDependencies:
       '@testing-library/dom': '>=7.21.4'
 
-  '@tokenizer/inflate@0.4.1':
-    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
+  '@tokenizer/inflate@0.2.7':
+    resolution: {integrity: sha512-MADQgmZT1eKjp06jpI2yozxaU9uVs4GzzgSL+uEq7bVcJ9V1ZXQkeGNql1fsSI0gMy1vhvNTNbUqrx+pZfJVmg==}
     engines: {node: '>=18'}
 
   '@tokenizer/token@0.3.0':
@@ -12325,9 +12325,9 @@ packages:
     resolution: {integrity: sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg==}
     engines: {node: ^10.12.0 || >=12.0.0}
 
-  file-type@21.3.4:
-    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
-    engines: {node: '>=20'}
+  file-type@20.4.1:
+    resolution: {integrity: sha512-hw9gNZXUfZ02Jo0uafWLaFVPter5/k2rfcrjFJJHX/77xtSDOfJuEFb6oKlFV86FLP1SuyHMW1PSk0U9M5tKkQ==}
+    engines: {node: '>=18'}
 
   file-uri-to-path@1.0.0:
     resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
@@ -25134,17 +25134,20 @@ snapshots:
 
   '@neondatabase/serverless@1.2.0': {}
 
-  '@nestjs/common@10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+  '@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)':
     dependencies:
+      file-type: 20.4.1(supports-color@10.0.0)
       iterare: 1.2.1
       reflect-metadata: 0.2.2
       rxjs: 7.8.2
       tslib: 2.8.1
       uid: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
 
-  '@nestjs/core@10.4.15(@nestjs/common@10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2))(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+  '@nestjs/core@10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0))(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
     dependencies:
-      '@nestjs/common': 10.4.15(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/common': 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)(supports-color@10.0.0)
       '@nuxtjs/opencollective': 0.3.2(encoding@0.1.13)
       fast-safe-stringify: 2.1.1
       iterare: 1.2.1
@@ -27871,9 +27874,10 @@ snapshots:
     dependencies:
       '@testing-library/dom': 7.31.2
 
-  '@tokenizer/inflate@0.4.1(supports-color@10.0.0)':
+  '@tokenizer/inflate@0.2.7(supports-color@10.0.0)':
     dependencies:
       debug: 4.4.3(supports-color@10.0.0)
+      fflate: 0.8.3
       token-types: 6.1.2
     transitivePeerDependencies:
       - supports-color
@@ -31231,12 +31235,12 @@ snapshots:
 
   electron-to-chromium@1.5.459: {}
 
-  elysia@1.4.29(file-type@21.3.4(supports-color@10.0.0))(typescript@7.0.2):
+  elysia@1.4.29(file-type@20.4.1(supports-color@10.0.0))(typescript@7.0.2):
     dependencies:
       cookie: 1.1.1
       exact-mirror: 0.2.7
       fast-decode-uri-component: 1.0.1
-      file-type: 21.3.4(supports-color@10.0.0)
+      file-type: 20.4.1(supports-color@10.0.0)
       memoirist: 0.4.0
     optionalDependencies:
       typescript: 7.0.2
@@ -32377,9 +32381,9 @@ snapshots:
     dependencies:
       flat-cache: 3.0.4
 
-  file-type@21.3.4(supports-color@10.0.0):
+  file-type@20.4.1(supports-color@10.0.0):
     dependencies:
-      '@tokenizer/inflate': 0.4.1(supports-color@10.0.0)
+      '@tokenizer/inflate': 0.2.7(supports-color@10.0.0)
       strtok3: 10.3.4
       token-types: 6.1.2
       uint8array-extras: 1.4.0

From 03a06ca122c9ed7d1f21c8f5e3249da6ae013209 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:34:58 +0000
Subject: [PATCH 143/169] chore(deps-dev): Bump node-schedule and
 @types/node-schedule (#26058)

Bumps [node-schedule](https://github.com/node-schedule/node-schedule)
and
[@types/node-schedule](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node-schedule).
These dependencies needed to be updated together.
Updates `node-schedule` from 2.1.1 to 2.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/node-schedule/node-schedule/releases">node-schedule's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>bef41ec: Cancel the polling interval in
<code>gracefulShutdown()</code> once all running jobs have finished, so
the process can exit (<a
href="https://redirect.github.com/node-schedule/node-schedule/issues/752">#752</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/node-schedule/node-schedule/blob/master/CHANGELOG.md">node-schedule's
changelog</a>.</em></p>
<blockquote>
<h2>2.1.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>bef41ec: Cancel the polling interval in
<code>gracefulShutdown()</code> once all running jobs have finished, so
the process can exit (<a
href="https://redirect.github.com/node-schedule/node-schedule/issues/752">#752</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/node-schedule/node-schedule/commits/v2.1.2">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for node-schedule since your current version.</p>
</details>
<br />

Updates `@types/node-schedule` from 2.1.7 to 2.1.8
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node-schedule">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
---
 .../node-integration-tests/package.json       |  4 ++--
 pnpm-lock.yaml                                | 20 +++++++++----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 24f04f784f0f..c07ba4ce829a 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -70,7 +70,7 @@
     "@sentry/server-utils": "11.10.0",
     "@smithy/node-http-handler": "4.12.1",
     "@types/express": "^4.17.21",
-    "@types/node-schedule": "^2.1.7",
+    "@types/node-schedule": "^2.1.8",
     "@typesafe-ai/sdk": "^0.6.0",
     "ai": "^4.3.16",
     "amqplib": "^0.10.9",
@@ -103,7 +103,7 @@
     "mysql2": "^3.23.3",
     "nock": "^14.0.17",
     "node-cron": "^4.6.0",
-    "node-schedule": "^2.1.1",
+    "node-schedule": "^2.1.2",
     "openai": "5.18.1",
     "pg": "8.23.1",
     "pino": "10.4.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d9868cdc86ad..7d6a36f58858 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -727,8 +727,8 @@ importers:
         specifier: ^4.17.21
         version: 4.17.21
       '@types/node-schedule':
-        specifier: ^2.1.7
-        version: 2.1.7
+        specifier: ^2.1.8
+        version: 2.1.8
       '@typesafe-ai/sdk':
         specifier: ^0.6.0
         version: 0.6.0
@@ -826,8 +826,8 @@ importers:
         specifier: ^4.6.0
         version: 4.6.0
       node-schedule:
-        specifier: ^2.1.1
-        version: 2.1.1
+        specifier: ^2.1.2
+        version: 2.1.2
       openai:
         specifier: 5.18.1
         version: 5.18.1(ws@8.21.3)(zod@4.6.7)
@@ -8891,8 +8891,8 @@ packages:
   '@types/node-forge@1.3.11':
     resolution: {integrity: sha512-FQx220y22OKNTqaByeBGqHWYz4cl94tpcxeFdvBo3wjG6XPBuZ0BNgNZRV5J5TFmmcsJ4IzsLkmGRiQbnYsBEQ==}
 
-  '@types/node-schedule@2.1.7':
-    resolution: {integrity: sha512-G7Z3R9H7r3TowoH6D2pkzUHPhcJrDF4Jz1JOQ80AX0K2DWTHoN9VC94XzFAPNMdbW9TBzMZ3LjpFi7RYdbxtXA==}
+  '@types/node-schedule@2.1.8':
+    resolution: {integrity: sha512-k00g6Yj/oUg/CDC+MeLHUzu0+OFxWbIqrFfDiLi6OPKxTujvpv29mHGM8GtKr7B+9Vv92FcK/8mRqi1DK5f3hA==}
 
   '@types/node@14.18.63':
     resolution: {integrity: sha512-fAtCfv4jJg+ExtXhvCkCqUKZ+4ok/JQk01qDKhL5BDDoS3AxKXhV5/MAVUZyQnSEd2GT92fkgZl0pz0Q0AzcIQ==}
@@ -15043,8 +15043,8 @@ packages:
     resolution: {integrity: sha512-5qr2okC4ItAI0hG5SaV0HoYMpnM/Y6+Oqr7AmPYy/2uEoGvS+GbSKLeRxSS1uAdu59yz0ouzcuXievSgg///WA==}
     engines: {node: '>=18'}
 
-  node-schedule@2.1.1:
-    resolution: {integrity: sha512-OXdegQq03OmXEjt2hZP33W2YPs/E5BcFQks46+G2gAxs4gHOIVD1u7EqlYLYSKsaIpyKCK9Gbk0ta1/gjRSMRQ==}
+  node-schedule@2.1.2:
+    resolution: {integrity: sha512-JuKopr93W+WP+TaK5yoHJGpzPF9fpkH8Vcc9CXGE993BNeRKsb3L4Wy6FzL0VxkEa6U+8M4Ni0HEm9rMMnwurg==}
     engines: {node: '>=6'}
 
   node-source-walk@7.0.1:
@@ -28092,7 +28092,7 @@ snapshots:
     dependencies:
       '@types/node': 14.18.63
 
-  '@types/node-schedule@2.1.7':
+  '@types/node-schedule@2.1.8':
     dependencies:
       '@types/node': 20.19.43
 
@@ -36074,7 +36074,7 @@ snapshots:
 
   node-releases@2.0.59: {}
 
-  node-schedule@2.1.1:
+  node-schedule@2.1.2:
     dependencies:
       cron-parser: 4.9.0
       long-timeout: 0.1.1

From 1a2a5e5f72a99744ac9586f142b736e969ae5f06 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 19:39:16 +0100
Subject: [PATCH 144/169] chore: Ignore major Prisma dependency updates
 (#26063)

**Why:** Keep the shared Prisma dependencies on v6 to preserve
integration coverage; v7 already has a dedicated suite with explicit
version pins. Ignore major updates for `prisma` and `@prisma/client`
while allowing minor and patch updates. Supersedes #26061.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9e1e05264cf7..bcabe64c9a8f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,6 +14,11 @@ updates:
       interval: 'weekly'
     ignore:
       - dependency-name: 'typescript'
+      # Keep shared Prisma dependencies on v6; v7 has a dedicated integration suite.
+      - dependency-name: 'prisma'
+        update-types: ['version-update:semver-major']
+      - dependency-name: '@prisma/client'
+        update-types: ['version-update:semver-major']
       # Major upgrades of SDK targets and coupled tooling require an explicit compatibility decision.
       - dependency-name: '@angular/*'
         update-types: ['version-update:semver-major']

From 73ef7eced2ff7310109e69d4a5453b6ae20ed728 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 18:48:05 +0000
Subject: [PATCH 145/169] feat(deps): Bump @types/aws-lambda from 8.10.161 to
 8.10.164 (#26066)

Bumps
[@types/aws-lambda](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/aws-lambda)
from 8.10.161 to 8.10.164.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/aws-lambda">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/aws-lambda&package-manager=npm_and_yarn&previous-version=8.10.161&new-version=8.10.164)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 packages/aws-serverless/package.json |  2 +-
 pnpm-lock.yaml                       | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/packages/aws-serverless/package.json b/packages/aws-serverless/package.json
index dc1ebbbc4528..b23937b2cf40 100644
--- a/packages/aws-serverless/package.json
+++ b/packages/aws-serverless/package.json
@@ -71,7 +71,7 @@
     "@sentry/node": "11.10.0",
     "@sentry/server-runtime-injection": "11.10.0",
     "@sentry/server-utils": "11.10.0",
-    "@types/aws-lambda": "^8.10.161"
+    "@types/aws-lambda": "^8.10.164"
   },
   "devDependencies": {
     "@sentry-internal/rollup-utils": "11.10.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7d6a36f58858..62beed82d353 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1062,8 +1062,8 @@ importers:
         specifier: 11.10.0
         version: link:../server-utils
       '@types/aws-lambda':
-        specifier: ^8.10.161
-        version: 8.10.161
+        specifier: ^8.10.164
+        version: 8.10.164
     devDependencies:
       '@sentry-internal/rollup-utils':
         specifier: 11.10.0
@@ -8735,8 +8735,8 @@ packages:
   '@types/aria-query@5.0.4':
     resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
 
-  '@types/aws-lambda@8.10.161':
-    resolution: {integrity: sha512-rUYdp+MQwSFocxIOcSsYSF3YYYC/uUpMbCY/mbO21vGqfrEYvNSoPyKYDj6RhXXpPfS0KstW9RwG3qXh9sL7FQ==}
+  '@types/aws-lambda@8.10.164':
+    resolution: {integrity: sha512-XOnrazWcOd6yWPnR7DxqCBPPYciDjHq+NN8LPwwqBCJNXLyPJgKo47fZpJ113+oyAn9Zti0Cf6H4k6yPcE3WFg==}
 
   '@types/babel__code-frame@7.27.0':
     resolution: {integrity: sha512-Dwlo+LrxDx/0SpfmJ/BKveHf7QXWvLBLc+x03l5sbzykj3oB9nHygCpSECF1a+s+QIxbghe+KHqC90vGtxLRAA==}
@@ -27911,7 +27911,7 @@ snapshots:
 
   '@types/aria-query@5.0.4': {}
 
-  '@types/aws-lambda@8.10.161': {}
+  '@types/aws-lambda@8.10.164': {}
 
   '@types/babel__code-frame@7.27.0': {}
 

From 8a8a985209b977ca4914d99bd7d545639e75af63 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 19:54:18 +0100
Subject: [PATCH 146/169] chore: Batch npm dependency updates daily (#26072)

**Why:** Reduce dependency PR noise by checking npm updates every
weekday and combining eligible version updates into one group.

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 42 +++---------------------------------------
 1 file changed, 3 insertions(+), 39 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bcabe64c9a8f..e23ace7174ec 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,7 +11,7 @@ updates:
   - package-ecosystem: 'npm'
     directory: '/'
     schedule:
-      interval: 'weekly'
+      interval: 'daily'
     ignore:
       - dependency-name: 'typescript'
       # Keep shared Prisma dependencies on v6; v7 has a dedicated integration suite.
@@ -111,45 +111,9 @@ updates:
       - dependency-name: 'langchain'
       - dependency-name: '@langchain/*'
     groups:
-      aws-sdk:
+      dependencies:
         patterns:
-          - '@aws-sdk/*'
-      angular:
-        patterns:
-          - '@angular/*'
-          - '@angular-devkit/*'
-          - 'ng-packagr'
-      react:
-        patterns:
-          - 'react'
-          - 'react-dom'
-      nuxt:
-        patterns:
-          - 'nuxt'
-          - '@nuxt/schema'
-          - '@nuxt/nitro-server'
-      nestjs:
-        patterns:
-          - '@nestjs/common'
-          - '@nestjs/core'
-      vitest:
-        patterns:
-          - 'vitest'
-          - '@vitest/*'
-      prisma:
-        patterns:
-          - 'prisma'
-          - '@prisma/client'
-      opentelemetry:
-        patterns:
-          - '@opentelemetry/*'
-      remix:
-        patterns:
-          - '@remix-run/*'
-      react-router:
-        patterns:
-          - 'react-router'
-          - '@react-router/*'
+          - '*'
     versioning-strategy: increase
     commit-message:
       prefix: feat

From 19076c0e3db75932e3838fcbf5b33e602d94e9c8 Mon Sep 17 00:00:00 2001
From: Dan Fuller <dfuller@sentry.io>
Date: Tue, 3 Nov 2026 14:03:30 -0500
Subject: [PATCH 147/169] feat(node): Add cronJobIntegration to monitor cron
 jobs (#25477)

Part of a series adding automatic Crons monitoring for the most-used job
schedulers in each SDK. Check-ins for a monitor that doesn't exist yet
are dropped, so today each monitor has to be created by hand with its
schedule copied from the code. Sending the job's schedule as the monitor
config lets Sentry create the monitor and keep it in sync.

Adds `cronJobIntegration`, which sends check-ins for every named
`CronJob` of the `cron` package with its cron expression and `timeZone`
as the monitor config. It replaces `Sentry.cron.instrumentCron`. Adding
the integration is the opt-in. Job names came in `cron` 4.3.0, so older
versions aren't instrumented.

```js
Sentry.init({
  dsn: '...',
  integrations: [Sentry.cronJobIntegration({ excludeJobs: ['cleanup', /^debug-/] })],
});

CronJob.from({ name: 'daily-report', cronTime: '0 30 9 * * 1-5', timeZone: 'Europe/Vienna', onTick: sendReport, start: true });
```

Jobs with `utcOffset`, and schedules Crons can't express, like every 10
seconds, aren't monitored. Jobs created by `instrumentCron` are skipped.
`@nestjs/schedule` builds its jobs on `CronJob`. Jobs that
`nestIntegration` already monitors
(https://github.com/getsentry/sentry-javascript/pull/25471) are skipped,
so enabling both sends one set of check-ins. The node integration tests
move to `cron` 4.4.

---------

Co-authored-by: Claude <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  4 ++
 .../node-suites/excludes.ts                   |  1 +
 .../node-integration-tests/package.json       |  2 +-
 .../cron/cron-integration/instrument.mjs      |  9 +++
 .../suites/cron/cron-integration/scenario.mjs | 37 ++++++++++
 .../suites/cron/cron-integration/test.ts      | 58 +++++++++++++++
 .../suites/cron/cron/scenario.ts              |  4 +-
 packages/astro/src/index.server.ts            |  1 +
 packages/aws-serverless/src/index.ts          |  1 +
 packages/bun/src/index.ts                     |  1 +
 packages/deno/src/index.ts                    |  1 +
 packages/elysia/src/index.ts                  |  1 +
 packages/google-cloud-serverless/src/index.ts |  1 +
 packages/node/src/cron/cron.ts                | 11 ++-
 packages/node/src/cron/index.ts               |  1 +
 packages/node/src/index.ts                    |  2 +
 packages/remix/src/server/index.ts            |  1 +
 packages/server-utils/src/index.ts            |  2 +
 .../server-utils/src/integrations/cron.ts     | 71 +++++++++++++++++++
 .../server-utils/src/orchestrion/channels.ts  |  2 +
 .../src/orchestrion/config/cron.ts            | 23 ++++++
 .../src/orchestrion/config/index.ts           |  2 +
 .../server-utils/src/utils/cronMonitoring.ts  | 45 ++++++++----
 .../test/integrations/cron.test.ts            | 69 ++++++++++++++++++
 .../moduleInjectedTransform.test.ts           |  2 +-
 .../test/utils/cronMonitoring.test.ts         | 32 +++++++--
 packages/solidstart/src/server/index.ts       |  1 +
 packages/sveltekit/src/server/index.ts        |  1 +
 pnpm-lock.yaml                                | 30 ++++----
 29 files changed, 379 insertions(+), 37 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/cron/cron-integration/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/cron-integration/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/cron/cron-integration/test.ts
 create mode 100644 packages/server-utils/src/integrations/cron.ts
 create mode 100644 packages/server-utils/src/orchestrion/config/cron.ts
 create mode 100644 packages/server-utils/test/integrations/cron.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2d95711c3678..1cd97aa38ba7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,10 @@ Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and
 
   `@SentryCron` now sends the schedule and time zone from the method's `@Cron()` decorator, so Sentry creates the monitor on the first run. If you use `@SentryCron` without a `schedule`, Sentry now creates missing monitors, which are billed, and overwrites schedules and time zones set by hand. Pass `fromCronDecorator: false` to turn this off.
 
+- **feat(node): Add cronJobIntegration to monitor cron jobs ([#25477](https://github.com/getsentry/sentry-javascript/pull/25477))**
+
+  Add `Sentry.cronJobIntegration()` to `integrations` to send check-ins for every named `CronJob` of the `cron` package (4.3+), with the job name as the monitor slug. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeJobs` to skip jobs by name. `Sentry.cron.instrumentCron` is deprecated; use `cronJobIntegration` instead.
+
 - **feat(nextjs): Mark pageloads of cached pages ([#25318](https://github.com/getsentry/sentry-javascript/pull/25318))**
 
   When Next.js serves a page from its cache, for example an ISR page or a `cacheComponents` shell, the pageload now has the `page.server_rendering.type` attribute. It is `static` if the whole page came from the cache, and `partially_static` if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.
diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index 0e868ffeba36..c16bf072fc8b 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -65,6 +65,7 @@ const NO_FETCH_INSTRUMENTATION = [
 // instrumentation creates no spans. Apps must be built with `@sentry/bun/plugin`.
 // See https://github.com/getsentry/sentry-javascript/issues/23882
 export const NO_AUTO_INSTRUMENTATION = [
+  'suites/cron/cron-integration/test.ts',
   'suites/cron/node-cron/integration/test.ts',
   'suites/cron/node-schedule-integration/test.ts',
   'suites/express/**',
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index c07ba4ce829a..4c2842fc6d5a 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -78,7 +78,7 @@
     "bullmq": "^5.79.1",
     "consola": "^3.2.3",
     "cors": "^2.8.5",
-    "cron": "^3.1.6",
+    "cron": "^4.4.0",
     "dataloader": "2.2.3",
     "esbuild": "0.28.1",
     "express": "^4.21.2",
diff --git a/dev-packages/node-integration-tests/suites/cron/cron-integration/instrument.mjs b/dev-packages/node-integration-tests/suites/cron/cron-integration/instrument.mjs
new file mode 100644
index 000000000000..3ecfc0097afc
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/cron-integration/instrument.mjs
@@ -0,0 +1,9 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  transport: loggingTransport,
+  integrations: [Sentry.cronJobIntegration({ excludeJobs: ['excluded-job'] })],
+});
diff --git a/dev-packages/node-integration-tests/suites/cron/cron-integration/scenario.mjs b/dev-packages/node-integration-tests/suites/cron/cron-integration/scenario.mjs
new file mode 100644
index 000000000000..0a665ee9727c
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/cron-integration/scenario.mjs
@@ -0,0 +1,37 @@
+import { CronJob, CronTime } from 'cron';
+
+const excluded = CronJob.from({ cronTime: '0 0 * * *', onTick: () => {}, name: 'excluded-job' });
+const unnamed = new CronJob('0 0 * * *', () => {});
+const oneOff = CronJob.from({ cronTime: new Date(Date.now() + 86_400_000), onTick: () => {}, name: 'one-off-job' });
+const offset = CronJob.from({ cronTime: '0 0 * * *', utcOffset: 60, onTick: () => {}, name: 'offset-job' });
+const subMinute = CronJob.from({ cronTime: '*/10 * * * * *', onTick: () => {}, name: 'sub-minute-job' });
+
+let runs = 0;
+const job = CronJob.from({
+  cronTime: '0 30 9 * * 1-5',
+  timeZone: 'Europe/Vienna',
+  name: 'my-cron-job',
+  waitForCompletion: true,
+  errorHandler: () => {},
+  onTick: async () => {
+    runs++;
+    if (runs === 2) {
+      throw new Error('Error in cron job');
+    }
+  },
+});
+
+// Run the jobs without waiting for their schedule.
+(async () => {
+  await excluded.fireOnTick();
+  await unnamed.fireOnTick();
+  await oneOff.fireOnTick();
+  await offset.fireOnTick();
+  await subMinute.fireOnTick();
+  await job.fireOnTick();
+  await job.fireOnTick();
+  job.setTime(new CronTime('0 8 * * *', 'UTC'));
+  await job.fireOnTick();
+})();
+
+setTimeout(() => process.exit(), 10_000);
diff --git a/dev-packages/node-integration-tests/suites/cron/cron-integration/test.ts b/dev-packages/node-integration-tests/suites/cron/cron-integration/test.ts
new file mode 100644
index 000000000000..87a0286c5309
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/cron/cron-integration/test.ts
@@ -0,0 +1,58 @@
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../utils/runner';
+
+const MONITOR_CONFIG = {
+  schedule: { type: 'crontab', value: '30 9 * * 1-5' },
+  timezone: 'Europe/Vienna',
+};
+
+describe('cronJobIntegration', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('sends check-ins for named jobs', async () => {
+      await createRunner()
+        .ignore('event')
+        .expect({
+          check_in: { monitor_slug: 'my-cron-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-cron-job', status: 'ok', duration: expect.any(Number) } })
+        .expect({
+          check_in: { monitor_slug: 'my-cron-job', status: 'in_progress', monitor_config: MONITOR_CONFIG },
+        })
+        .expect({ check_in: { monitor_slug: 'my-cron-job', status: 'error', duration: expect.any(Number) } })
+        .expect({
+          check_in: {
+            monitor_slug: 'my-cron-job',
+            status: 'in_progress',
+            monitor_config: { schedule: { type: 'crontab', value: '0 8 * * *' }, timezone: 'UTC' },
+          },
+        })
+        .expect({ check_in: { monitor_slug: 'my-cron-job', status: 'ok', duration: expect.any(Number) } })
+        .start()
+        .completed();
+    });
+
+    test('captures job errors', async () => {
+      await createRunner()
+        .unordered()
+        .expect({
+          event: {
+            exception: {
+              values: [
+                {
+                  type: 'Error',
+                  value: 'Error in cron job',
+                  mechanism: { type: 'auto.function.cron', handled: false },
+                },
+              ],
+            },
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
+});
diff --git a/dev-packages/node-integration-tests/suites/cron/cron/scenario.ts b/dev-packages/node-integration-tests/suites/cron/cron/scenario.ts
index b3966b050d89..68cf28bcde94 100644
--- a/dev-packages/node-integration-tests/suites/cron/cron/scenario.ts
+++ b/dev-packages/node-integration-tests/suites/cron/cron/scenario.ts
@@ -28,11 +28,11 @@ cron.start();
 // is enough to hit it, and the job is left scheduled for nothing: no ticks, no check-ins, and the
 // scenario exits on the timeout below having sent nothing at all. Starting again re-reads the clock
 // away from the boundary.
-for (let attempt = 0; attempt < 5 && !cron.running; attempt++) {
+for (let attempt = 0; attempt < 5 && !cron.isActive; attempt++) {
   cron.start();
 }
 
-if (!cron.running) {
+if (!cron.isActive) {
   throw new Error('`cron` refused to schedule the job');
 }
 
diff --git a/packages/astro/src/index.server.ts b/packages/astro/src/index.server.ts
index 6837722ba5b6..f407a5723a5b 100644
--- a/packages/astro/src/index.server.ts
+++ b/packages/astro/src/index.server.ts
@@ -49,6 +49,7 @@ export {
   fsIntegration,
   functionToStringIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   getActiveSpan,
diff --git a/packages/aws-serverless/src/index.ts b/packages/aws-serverless/src/index.ts
index 0e684c45dc2d..f7310775b554 100644
--- a/packages/aws-serverless/src/index.ts
+++ b/packages/aws-serverless/src/index.ts
@@ -119,6 +119,7 @@ export {
   firebaseIntegration,
   fsIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   graphqlIntegration,
diff --git a/packages/bun/src/index.ts b/packages/bun/src/index.ts
index e33986f88bba..a8e107ffdfe8 100644
--- a/packages/bun/src/index.ts
+++ b/packages/bun/src/index.ts
@@ -143,6 +143,7 @@ export {
   // oxlint-disable-next-line typescript/no-deprecated
   setupKoaErrorHandler,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   graphqlIntegration,
diff --git a/packages/deno/src/index.ts b/packages/deno/src/index.ts
index 9f2aac8b30cb..4d5fb75365e7 100644
--- a/packages/deno/src/index.ts
+++ b/packages/deno/src/index.ts
@@ -195,6 +195,7 @@ export {
   postgresIntegration,
   postgresJsIntegration,
   neonIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   tediousIntegration,
diff --git a/packages/elysia/src/index.ts b/packages/elysia/src/index.ts
index 014bd9145c4a..107545f0cb43 100644
--- a/packages/elysia/src/index.ts
+++ b/packages/elysia/src/index.ts
@@ -117,6 +117,7 @@ export {
   // oxlint-disable-next-line typescript/no-deprecated
   setupKoaErrorHandler,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   graphqlIntegration,
diff --git a/packages/google-cloud-serverless/src/index.ts b/packages/google-cloud-serverless/src/index.ts
index b92984d1b6b6..107674b83b95 100644
--- a/packages/google-cloud-serverless/src/index.ts
+++ b/packages/google-cloud-serverless/src/index.ts
@@ -119,6 +119,7 @@ export {
   fastifyIntegration,
   firebaseIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   graphqlIntegration,
diff --git a/packages/node/src/cron/cron.ts b/packages/node/src/cron/cron.ts
index 2c764c877c46..dd3edf1c95b5 100644
--- a/packages/node/src/cron/cron.ts
+++ b/packages/node/src/cron/cron.ts
@@ -1,4 +1,4 @@
-import { captureException, withMonitor } from '@sentry/core';
+import { addNonEnumerableProperty, captureException, withMonitor } from '@sentry/core';
 import { replaceCronNames } from './common';
 
 export type CronJobParams = {
@@ -51,6 +51,8 @@ export type CronJobConstructor = {
   ): CronJob;
 };
 
+const MONITORED = Symbol.for('sentry.cron.monitored');
+
 const ERROR_TEXT = 'Automatic instrumentation of CronJob only supports crontab string';
 
 /**
@@ -72,6 +74,8 @@ const ERROR_TEXT = 'Automatic instrumentation of CronJob only supports crontab s
  *   console.log('You will see this message every minute');
  * });
  * ```
+ *
+ * @deprecated Use `cronJobIntegration` instead.
  */
 export function instrumentCron<T>(lib: T & CronJobConstructor, monitorSlug: string): T {
   let jobScheduled = false;
@@ -115,6 +119,9 @@ export function instrumentCron<T>(lib: T & CronJobConstructor, monitorSlug: stri
         );
       }
 
+      // Tells `cronJobIntegration` that this job is already monitored.
+      addNonEnumerableProperty(monitoredTick, MONITORED, true);
+
       return new target(cronTime, monitoredTick, onComplete, start, timeZone, ...rest);
     },
     get(target, prop: keyof CronJobConstructor) {
@@ -157,6 +164,8 @@ export function instrumentCron<T>(lib: T & CronJobConstructor, monitorSlug: stri
             );
           };
 
+          addNonEnumerableProperty(param.onTick, MONITORED, true);
+
           return target.from(param);
         };
       } else {
diff --git a/packages/node/src/cron/index.ts b/packages/node/src/cron/index.ts
index eb4b915cff66..890d88441ec1 100644
--- a/packages/node/src/cron/index.ts
+++ b/packages/node/src/cron/index.ts
@@ -4,6 +4,7 @@ import { instrumentNodeSchedule } from './node-schedule';
 
 /** Methods to instrument cron libraries for Sentry check-ins */
 export const cron = {
+  // oxlint-disable-next-line typescript/no-deprecated
   instrumentCron,
   instrumentNodeCron,
   instrumentNodeSchedule,
diff --git a/packages/node/src/index.ts b/packages/node/src/index.ts
index 4cf8b6e4b9eb..859d3b02719a 100644
--- a/packages/node/src/index.ts
+++ b/packages/node/src/index.ts
@@ -13,6 +13,8 @@ export {
   type ExpressIntegrationOptions,
   firebaseIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
+  type CronJobIntegrationOptions,
   nodeCronIntegration,
   type NodeCronIntegrationOptions,
   nodeScheduleIntegration,
diff --git a/packages/remix/src/server/index.ts b/packages/remix/src/server/index.ts
index 10fc1a596daa..e034d9404d05 100644
--- a/packages/remix/src/server/index.ts
+++ b/packages/remix/src/server/index.ts
@@ -37,6 +37,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   getActiveSpan,
diff --git a/packages/server-utils/src/index.ts b/packages/server-utils/src/index.ts
index cb666c2fc181..74e4dd25e64a 100644
--- a/packages/server-utils/src/index.ts
+++ b/packages/server-utils/src/index.ts
@@ -38,6 +38,8 @@ export { anthropicAIIntegration } from './integrations/anthropic';
 export { awsIntegration } from './integrations/aws-sdk';
 export { dataloaderIntegration } from './integrations/dataloader';
 export { genericPoolIntegration } from './integrations/generic-pool';
+export { cronJobIntegration } from './integrations/cron';
+export type { CronJobIntegrationOptions } from './integrations/cron';
 export { nodeCronIntegration } from './integrations/node-cron';
 export type { NodeCronIntegrationOptions } from './integrations/node-cron';
 export { nodeScheduleIntegration } from './integrations/node-schedule';
diff --git a/packages/server-utils/src/integrations/cron.ts b/packages/server-utils/src/integrations/cron.ts
new file mode 100644
index 000000000000..8a08c2fede4f
--- /dev/null
+++ b/packages/server-utils/src/integrations/cron.ts
@@ -0,0 +1,71 @@
+import type { IntegrationFn, MonitorConfig } from '@sentry/core';
+import { defineIntegration } from '@sentry/core';
+import { CHANNELS } from '../orchestrion/channels';
+import { cronModuleNames } from '../orchestrion/config/cron';
+import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
+import type { AnyFn, ScheduleChange } from '../utils/cronMonitoring';
+import {
+  cronExpressionToMonitorConfig,
+  shouldMonitorJob,
+  subscribeToJobCreation,
+  subscribeToScheduleChange,
+  updateMonitorConfig,
+  wrapScheduledJob,
+} from '../utils/cronMonitoring';
+
+const INTEGRATION_NAME = 'CronJob' as const;
+
+export interface CronJobIntegrationOptions {
+  /** Job names not to monitor. Strings must match the name exactly. */
+  excludeJobs?: Array<string | RegExp>;
+}
+
+const _cronJobIntegration = ((options: CronJobIntegrationOptions = {}) => {
+  return {
+    name: INTEGRATION_NAME,
+    setup(client) {
+      invokeOrchestrionInstrumentation(client, cronModuleNames, subscribe, [options], {
+        requiresTracingChannelBinding: false,
+      });
+    },
+  };
+}) satisfies IntegrationFn;
+
+/**
+ * Sends Crons check-ins for every `CronJob` of the `cron` package (4.3+) that has a `name`.
+ * The monitor slug is the job name. Jobs without a name, one-off jobs, and jobs with a schedule Crons can't express
+ * are not monitored.
+ */
+export const cronJobIntegration = defineIntegration(_cronJobIntegration);
+
+function subscribe(options: CronJobIntegrationOptions): void {
+  subscribeToJobCreation(CHANNELS.CRON_JOB_CONSTRUCTOR, INTEGRATION_NAME, args => wrapJob(args, options));
+  subscribeToScheduleChange(CHANNELS.CRON_JOB_SET_TIME, INTEGRATION_NAME, onSetTime);
+}
+
+/** Sets the new time's config after `job.setTime(cronTime)`. Without one, the job doesn't check in. */
+export function onSetTime({ arguments: [cronTime], self }: ScheduleChange): void {
+  const job = self as { cronTime?: unknown; _callbacks?: unknown[] } | undefined;
+  // `setTime` throws and keeps the old time when it isn't given a `CronTime`.
+  if (!job || job.cronTime !== cronTime) {
+    return;
+  }
+  const { source, timeZone, utcOffset } = cronTime as { source?: unknown; timeZone?: unknown; utcOffset?: unknown };
+  const monitorConfig: MonitorConfig | undefined =
+    typeof source === 'string' && utcOffset == null ? cronExpressionToMonitorConfig(source, timeZone, 'or') : undefined;
+  for (const callback of job._callbacks || []) {
+    updateMonitorConfig(callback, monitorConfig);
+  }
+}
+
+// `new CronJob(cronTime, onTick, onComplete, start, timeZone, context, runOnInit, utcOffset, ..., name)`
+function wrapJob(args: unknown[], options: CronJobIntegrationOptions): void {
+  const [cronTime, onTick, , , timeZone] = args;
+  const utcOffset = args[7];
+  const name = args[11];
+  if (typeof cronTime !== 'string' || !shouldMonitorJob(name, onTick, options.excludeJobs)) {
+    return;
+  }
+  const monitorConfig = utcOffset == null ? cronExpressionToMonitorConfig(cronTime, timeZone, 'or') : undefined;
+  args[1] = wrapScheduledJob(onTick as AnyFn, name, monitorConfig, 'auto.function.cron');
+}
diff --git a/packages/server-utils/src/orchestrion/channels.ts b/packages/server-utils/src/orchestrion/channels.ts
index 67a88bbb3825..f593fefe0ebd 100644
--- a/packages/server-utils/src/orchestrion/channels.ts
+++ b/packages/server-utils/src/orchestrion/channels.ts
@@ -1,6 +1,7 @@
 import { amqplibChannels } from './config/amqplib';
 import { anthropicAiChannels } from './config/anthropic-ai';
 import { awsSdkChannels } from './config/aws-sdk';
+import { cronChannels } from './config/cron';
 import { dataloaderChannels } from './config/dataloader';
 import { expressChannels } from './config/express';
 import { firebaseChannels } from './config/firebase';
@@ -60,6 +61,7 @@ export const CHANNELS = {
   ...amqplibChannels,
   ...anthropicAiChannels,
   ...awsSdkChannels,
+  ...cronChannels,
   ...dataloaderChannels,
   ...expressChannels,
   ...firebaseChannels,
diff --git a/packages/server-utils/src/orchestrion/config/cron.ts b/packages/server-utils/src/orchestrion/config/cron.ts
new file mode 100644
index 000000000000..499d224aad9e
--- /dev/null
+++ b/packages/server-utils/src/orchestrion/config/cron.ts
@@ -0,0 +1,23 @@
+import type { InstrumentationConfig } from '../apmTypes';
+import { getModuleNames } from './module-names';
+
+// `CronJob.from()` calls the constructor. Job names were added in 4.3.0.
+export const cronConfig = [
+  {
+    channelName: 'cronJobConstructor',
+    module: { name: 'cron', versionRange: '>=4.3.0 <5', filePath: 'dist/job.js' },
+    functionQuery: { className: 'CronJob' },
+  },
+  {
+    channelName: 'cronJobSetTime',
+    module: { name: 'cron', versionRange: '>=4.3.0 <5', filePath: 'dist/job.js' },
+    functionQuery: { className: 'CronJob', methodName: 'setTime', kind: 'Sync' },
+  },
+] satisfies InstrumentationConfig[];
+
+export const cronModuleNames = getModuleNames(cronConfig);
+
+export const cronChannels = {
+  CRON_JOB_CONSTRUCTOR: 'orchestrion:cron:cronJobConstructor',
+  CRON_JOB_SET_TIME: 'orchestrion:cron:cronJobSetTime',
+} as const;
diff --git a/packages/server-utils/src/orchestrion/config/index.ts b/packages/server-utils/src/orchestrion/config/index.ts
index bf2c4b50b178..7636fbef80fc 100644
--- a/packages/server-utils/src/orchestrion/config/index.ts
+++ b/packages/server-utils/src/orchestrion/config/index.ts
@@ -5,6 +5,7 @@ import { uniq } from '@sentry/core';
 import { awsSdkConfig } from './aws-sdk';
 import { amqplibConfig } from './amqplib';
 import { anthropicAiConfig } from './anthropic-ai';
+import { cronConfig } from './cron';
 import { dataloaderConfig } from './dataloader';
 import { expressConfig } from './express';
 import { firebaseConfig } from './firebase';
@@ -66,6 +67,7 @@ export const SENTRY_INSTRUMENTATIONS: InstrumentationConfig[] = [
   ...amqplibConfig,
   ...anthropicAiConfig,
   ...awsSdkConfig,
+  ...cronConfig,
   ...dataloaderConfig,
   ...expressConfig,
   ...firebaseConfig,
diff --git a/packages/server-utils/src/utils/cronMonitoring.ts b/packages/server-utils/src/utils/cronMonitoring.ts
index aa751eed9442..117e37c513ef 100644
--- a/packages/server-utils/src/utils/cronMonitoring.ts
+++ b/packages/server-utils/src/utils/cronMonitoring.ts
@@ -13,7 +13,8 @@ import * as diagnosticsChannel from './diagnosticsChannel';
 
 export type AnyFn = (this: unknown, ...args: unknown[]) => unknown;
 
-// Set by `Sentry.cron.instrumentNodeCron`, `Sentry.cron.instrumentNodeSchedule` and `wrapScheduledJob`, which already send check-ins.
+// Set by `Sentry.cron.instrumentCron`, `instrumentNodeCron`, `instrumentNodeSchedule` and `wrapScheduledJob`, which already
+// send check-ins.
 const MONITORED = Symbol.for('sentry.cron.monitored');
 
 /**
@@ -65,7 +66,7 @@ export function subscribeToScheduleChange(
   channel.end.subscribe(handle(onChange));
 }
 
-/** Whether a job is named, not excluded, and not already monitored by `Sentry.cron.instrumentNode*` or `wrapScheduledJob`. */
+/** Whether a job is named, not excluded, and not already monitored by `Sentry.cron.instrument*` or `wrapScheduledJob`. */
 export function shouldMonitorJob(
   name: unknown,
   job: unknown,
@@ -88,6 +89,9 @@ const NICKNAMES: Record<string, string> = {
   '@daily': '0 0 * * *',
   '@midnight': '0 0 * * *',
   '@hourly': '0 * * * *',
+  '@minutely': '* * * * *',
+  '@weekdays': '0 0 * * 1-5',
+  '@weekends': '0 0 * * 0,6',
 };
 
 const MONTHS = ['jan', 'feb', 'mar', 'apr', 'may', 'jun', 'jul', 'aug', 'sep', 'oct', 'nov', 'dec'];
@@ -120,18 +124,13 @@ export function cronExpressionToMonitorConfig(
     return undefined;
   }
 
-  const [minute, hour, dayOfMonth, month, dayOfWeek] = fields as [string, string, string, string, string];
+  const [minute, hour, dayOfMonth, month, dayOfWeekWithNames] = fields as [string, string, string, string, string];
+  const dayOfWeek = replaceNames(dayOfWeekWithNames, WEEKDAYS, 0);
   if (!isSameDayMatching(dayOfMonth, dayOfWeek, daySemantics)) {
     return undefined;
   }
 
-  const crontab = [
-    minute,
-    hour,
-    dayOfMonth,
-    replaceNames(month, MONTHS, 1),
-    endRangesOnSundayAsSeven(replaceNames(dayOfWeek, WEEKDAYS, 0)),
-  ];
+  const crontab = [minute, hour, dayOfMonth, replaceNames(month, MONTHS, 1), endRangesOnSundayAsSeven(dayOfWeek)];
   if (crontab.some(field => /[a-z]/i.test(field) || hasReversedRange(field))) {
     return undefined;
   }
@@ -152,14 +151,36 @@ function isSameDayMatching(dayOfMonth: string, dayOfWeek: string, daySemantics:
   if (daySemantics === 'and') {
     return dayOfMonth.startsWith('*') || dayOfWeek.startsWith('*');
   }
+  // `cron` reads a field that lists every day like `*`. `cron-parser` does so for a day-of-month that lists every day
+  // of the current month, and February has 29 there.
   return !(
     dayOfMonth.startsWith('*') ||
     dayOfWeek.startsWith('*') ||
-    dayOfMonth === '1-31' ||
-    ['0-6', '0-7', '1-7'].includes(dayOfWeek)
+    countValues(dayOfMonth, 1, 31) >= 29 ||
+    countValues(dayOfWeek, 0, 7, day => day % 7) === 7
   );
 }
 
+function countValues(field: string, min: number, max: number, normalize = (value: number): number => value): number {
+  const values = new Set<number>();
+  for (const part of field.split(',')) {
+    const match = /^(?:\*|(\d+)(?:-(\d+))?)(?:\/(\d+))?$/.exec(part);
+    if (!match) {
+      continue;
+    }
+    const [, start, end, step] = match;
+    const first = start === undefined ? min : Number(start);
+    const last = Math.min(
+      end !== undefined ? Number(end) : start !== undefined && step === undefined ? first : max,
+      max,
+    );
+    for (let value = first; value <= last; value += Number(step) || 1) {
+      values.add(normalize(value));
+    }
+  }
+  return values.size;
+}
+
 function replaceNames(field: string, names: string[], offset: number): string {
   return field.replace(/[a-z]+/gi, word => {
     const index = names.indexOf(word.slice(0, 3).toLowerCase());
diff --git a/packages/server-utils/test/integrations/cron.test.ts b/packages/server-utils/test/integrations/cron.test.ts
new file mode 100644
index 000000000000..ec83e6882d98
--- /dev/null
+++ b/packages/server-utils/test/integrations/cron.test.ts
@@ -0,0 +1,69 @@
+import type { MonitorConfig } from '@sentry/core';
+import { setCurrentClient } from '@sentry/core';
+import { beforeEach, describe, expect, it } from 'vitest';
+import { onSetTime } from '../../src/integrations/cron';
+import { cronExpressionToMonitorConfig, wrapScheduledJob } from '../../src/utils/cronMonitoring';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
+
+describe('onSetTime', () => {
+  let sentConfigs: Array<MonitorConfig | undefined>;
+
+  beforeEach(() => {
+    sentConfigs = [];
+    const client = new TestClient(getDefaultTestClientOptions());
+    client.captureCheckIn = (_checkIn, monitorConfig) => {
+      sentConfigs.push(monitorConfig);
+      return 'check-in-id';
+    };
+    setCurrentClient(client);
+  });
+
+  const createJob = () => {
+    const onTick = wrapScheduledJob(
+      () => {},
+      'my-job',
+      cronExpressionToMonitorConfig('0 9 * * *', 'UTC', 'or'),
+      'auto.function.cron',
+    );
+    return { cronTime: {} as unknown, _callbacks: [onTick], onTick };
+  };
+
+  // `setTime` assigns the new `CronTime` before the channel's `end` fires.
+  const setTime = (job: ReturnType<typeof createJob>, cronTime: unknown, applied = true): void => {
+    if (applied) {
+      job.cronTime = cronTime;
+    }
+    onSetTime({ arguments: [cronTime], self: job });
+  };
+
+  it('sends the new schedule after setTime', () => {
+    const job = createJob();
+    setTime(job, { source: '30 10 * * 1-5', timeZone: 'Europe/Vienna' });
+    job.onTick();
+
+    expect(sentConfigs[0]).toEqual({
+      schedule: { type: 'crontab', value: '30 10 * * 1-5' },
+      timezone: 'Europe/Vienna',
+    });
+  });
+
+  it.each([
+    ['a date', { source: new Date(), timeZone: 'UTC' }],
+    ['a UTC offset', { source: '0 9 * * *', utcOffset: 60 }],
+    ['a sub-minute cron', { source: '*/10 * * * * *', timeZone: 'UTC' }],
+  ])('stops checking in after setTime with %s', (_, cronTime) => {
+    const job = createJob();
+    setTime(job, cronTime);
+    job.onTick();
+
+    expect(sentConfigs).toEqual([]);
+  });
+
+  it('keeps the old schedule when setTime throws', () => {
+    const job = createJob();
+    setTime(job, '30 10 * * *', false);
+    job.onTick();
+
+    expect(sentConfigs[0]?.schedule).toEqual({ type: 'crontab', value: '0 9 * * *' });
+  });
+});
diff --git a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
index 0feac3d58b47..06fa8e34704d 100644
--- a/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
+++ b/packages/server-utils/test/orchestrion/moduleInjectedTransform.test.ts
@@ -44,7 +44,7 @@ describe('channel integration definitions', () => {
 
     // `@nestjs/*` and `@remix-run/*` are covered by listeners in their own SDK packages.
     // Each cron monitor is billed, so bundler-only SDKs must not install crons integrations for every app.
-    const optIn = new Set(['node-cron', 'node-schedule']);
+    const optIn = new Set(['cron', 'node-cron', 'node-schedule']);
     const uncovered = [...configured].filter(
       name => !defined.has(name) && !optIn.has(name) && !name.startsWith('@nestjs/') && !name.startsWith('@remix-run/'),
     );
diff --git a/packages/server-utils/test/utils/cronMonitoring.test.ts b/packages/server-utils/test/utils/cronMonitoring.test.ts
index 0950a592cc87..d21b12fa7fe4 100644
--- a/packages/server-utils/test/utils/cronMonitoring.test.ts
+++ b/packages/server-utils/test/utils/cronMonitoring.test.ts
@@ -15,6 +15,7 @@ describe('cronExpressionToMonitorConfig with node-cron day matching', () => {
     ['0 9 */2 * 1', '0 9 */2 * 1'],
     ['@daily', '0 0 * * *'],
     ['@Weekly', '0 0 * * 0'],
+    ['@weekdays', '0 0 * * 1-5'],
     ['*/15 * * * *', '*/15 * * * *'],
     ['0 9 * * sun', '0 9 * * 0'],
     ['0 9 * * sat-sun', '0 9 * * 6-7'],
@@ -68,6 +69,12 @@ describe('cronExpressionToMonitorConfig with cron-parser day matching', () => {
     ['0 9 1,15 * mon', '0 9 1,15 * 1'],
     ['0 9 */2 * *', '0 9 */2 * *'],
     ['0 9 * * 1-5', '0 9 * * 1-5'],
+    ['0 9 15 * sun-fri', '0 9 15 * 0-5'],
+    ['0 9 15 * 1,2,3,4,5,6', '0 9 15 * 1,2,3,4,5,6'],
+    ['0 9 1-28 * 1', '0 9 1-28 * 1'],
+    ['0 9 15 * 0', '0 9 15 * 0'],
+    ['0 9 15 * sun', '0 9 15 * 0'],
+    ['0 9 15 * 0,6', '0 9 15 * 0,6'],
   ])('sends %s as %s', (expression, crontab) => {
     expect(cronExpressionToMonitorConfig(expression, 'UTC', 'or')?.schedule).toEqual({
       type: 'crontab',
@@ -75,12 +82,25 @@ describe('cronExpressionToMonitorConfig with cron-parser day matching', () => {
     });
   });
 
-  it.each(['0 9 */2 * 1', '0 9 1 * */2', '0 9 1-31 * 1', '0 9 15 * 0-6', '0 9 15 * 1-7'])(
-    'sends no config for %s',
-    expression => {
-      expect(cronExpressionToMonitorConfig(expression, 'UTC', 'or')).toBeUndefined();
-    },
-  );
+  it.each([
+    '0 9 */2 * 1',
+    '0 9 1 * */2',
+    '0 9 1-31 * 1',
+    '0 9 1-30 * 1',
+    '0 9 1-15,16-29 * 1',
+    '0 9 15 * 0-6',
+    '0 9 15 * 0-7',
+    '0 9 15 * 1-7',
+    '0 9 15 * sun-sat',
+    '0 9 15 * SUN-SAT',
+    '0 9 15 * 0,1,2,3,4,5,6',
+    '0 9 15 * 1,2,3,4,5,6,7',
+    '0 9 15 * sun,mon,tue,wed,thu,fri,sat',
+    '0 9 15 * 0-3,4-6',
+    '0 9 15 * 0-6/1',
+  ])('sends no config for %s', expression => {
+    expect(cronExpressionToMonitorConfig(expression, 'UTC', 'or')).toBeUndefined();
+  });
 });
 
 describe('shouldMonitorJob', () => {
diff --git a/packages/solidstart/src/server/index.ts b/packages/solidstart/src/server/index.ts
index 4ac8bff68e34..39c5b31b1d38 100644
--- a/packages/solidstart/src/server/index.ts
+++ b/packages/solidstart/src/server/index.ts
@@ -40,6 +40,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   getActiveSpan,
diff --git a/packages/sveltekit/src/server/index.ts b/packages/sveltekit/src/server/index.ts
index ff3d3ac7b5dd..711a9b4ae3bf 100644
--- a/packages/sveltekit/src/server/index.ts
+++ b/packages/sveltekit/src/server/index.ts
@@ -38,6 +38,7 @@ export {
   flush,
   functionToStringIntegration,
   genericPoolIntegration,
+  cronJobIntegration,
   nodeCronIntegration,
   nodeScheduleIntegration,
   getActiveSpan,
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 62beed82d353..b9d6287fd5e7 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -751,8 +751,8 @@ importers:
         specifier: ^2.8.5
         version: 2.8.6
       cron:
-        specifier: ^3.1.6
-        version: 3.1.6
+        specifier: ^4.4.0
+        version: 4.4.0
       dataloader:
         specifier: 2.2.3
         version: 2.2.3
@@ -8254,6 +8254,7 @@ packages:
   '@smithy/core@3.38.1':
     resolution: {integrity: sha512-U/mB2XiwTLaf+NSgLSWwJfptsMT/H8aBi0aTAA/E5e2/TagFeGCqAyhKGG0w0A9IWTkm4qYEmLoD/HB6aYfnRA==}
     engines: {node: '>=18.0.0'}
+    deprecated: Deprecated due to a bug in custom logger data redaction. See https://github.com/aws/aws-sdk-js-v3/issues/8393.
 
   '@smithy/credential-provider-imds@4.5.2':
     resolution: {integrity: sha512-A9uSdn72ozbRUSit0eib0TW7nXuNPlaeM0zcGkJ+nE6tFcSDbnmtwoxbTCFBukVQcszDAyvsd7+rTduPTXpygg==}
@@ -8858,8 +8859,8 @@ packages:
   '@types/long@4.0.2':
     resolution: {integrity: sha512-MqTGEo5bj5t157U6fA/BiDynNkn0YknVdh48CMPkTSpFTVmvao5UQmm7uEF6xBEo7qIMAlY/JSleYaE6VOdpaA==}
 
-  '@types/luxon@3.3.8':
-    resolution: {integrity: sha512-jYvz8UMLDgy3a5SkGJne8H7VA7zPV2Lwohjx0V8V31+SqAjNmurWMkk9cQhfvlcnXWudBpK9xPM1n4rljOcHYQ==}
+  '@types/luxon@3.7.6':
+    resolution: {integrity: sha512-6KSjliQAXK8ZLgFQO4B7iE4Rpf/B3rItzCFuXezBY/XIAGxOdLd7vRNK9/StRPwiS/yJsVbB7HKpW46B8tcEuQ==}
 
   '@types/mdast@4.0.1':
     resolution: {integrity: sha512-IlKct1rUTJ1T81d8OHzyop15kGv9A/ff7Gz7IJgrk6jDb4Udw77pCJ+vq8oxZf4Ghpm+616+i1s/LNg/Vh7d+g==}
@@ -10890,8 +10891,9 @@ packages:
     engines: {node: '>=12.0.0'}
     deprecated: v4 is no longer maintained, upgrade to v5
 
-  cron@3.1.6:
-    resolution: {integrity: sha512-cvFiQCeVzsA+QPM6fhjBtlKGij7tLLISnTSvFxVdnFGLdz+ZdXN37kNe0i2gefmdD17XuZA6n2uPVwzl4FxW/w==}
+  cron@4.4.0:
+    resolution: {integrity: sha512-fkdfq+b+AHI4cKdhZlppHveI/mgz2qpiYxcm+t5E5TsxX7QrLS1VE0+7GENEk9z0EeGPcpSciGv6ez24duWhwQ==}
+    engines: {node: '>=18.x'}
 
   croner@10.0.1:
     resolution: {integrity: sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g==}
@@ -14135,8 +14137,8 @@ packages:
     resolution: {integrity: sha512-DqC6n3QQ77zdFpCMASA1a3Jlb64Hv2N2DciFGkO/4L9+q/IpIAuRlKOvCXabtRW6cQf8usbmM6BE/TOPysCdIA==}
     engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
 
-  luxon@3.4.4:
-    resolution: {integrity: sha512-zobTr7akeGHnv7eBOXcRgMeCP6+uyYsczwmeRCauvpvaAltgNyTbLH/+VaEAPUeWBT+1GuNmz4wC/6jtQzbbVA==}
+  luxon@3.7.2:
+    resolution: {integrity: sha512-vtEhXh/gNjI9Yg1u4jX/0YVPMvxzHuGgCm6tC5kZyb08yjGWGnqAjGJvcXbqQR2P3MyMEFnRbpcdFS6PBcLqew==}
     engines: {node: '>=12'}
 
   lz-string@1.5.0:
@@ -28057,7 +28059,7 @@ snapshots:
 
   '@types/long@4.0.2': {}
 
-  '@types/luxon@3.3.8': {}
+  '@types/luxon@3.7.6': {}
 
   '@types/mdast@4.0.1':
     dependencies:
@@ -30651,12 +30653,12 @@ snapshots:
 
   cron-parser@4.9.0:
     dependencies:
-      luxon: 3.4.4
+      luxon: 3.7.2
 
-  cron@3.1.6:
+  cron@4.4.0:
     dependencies:
-      '@types/luxon': 3.3.8
-      luxon: 3.4.4
+      '@types/luxon': 3.7.6
+      luxon: 3.7.2
 
   croner@10.0.1: {}
 
@@ -34576,7 +34578,7 @@ snapshots:
 
   lru.min@1.1.4: {}
 
-  luxon@3.4.4: {}
+  luxon@3.7.2: {}
 
   lz-string@1.5.0: {}
 

From e1ec28b8aef92d33e72ef1d07283f9b24ff569ba Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 19:05:51 +0000
Subject: [PATCH 148/169] chore(deps-dev): Bump @testing-library/user-event
 from 14.5.2 to 14.6.8 (#26071)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@testing-library/user-event](https://github.com/testing-library/user-event)
from 14.5.2 to 14.6.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/testing-library/user-event/releases">@​testing-library/user-event's
releases</a>.</em></p>
<blockquote>
<h2>v14.6.8</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.7...v14.6.8">14.6.8</a>
(2026-10-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>treat programmatic null input values as empty string (<a
href="https://redirect.github.com/testing-library/user-event/issues/1329">#1329</a>)
(<a
href="https://github.com/testing-library/user-event/commit/1951eb77cc190a68eb6dac6bd40b53648b18805f">1951eb7</a>)</li>
</ul>
<h2>v14.6.7</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.6...v14.6.7">14.6.7</a>
(2026-09-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>normalize DataTransfer format aliases (<a
href="https://redirect.github.com/testing-library/user-event/issues/1326">#1326</a>)
(<a
href="https://github.com/testing-library/user-event/commit/1e0020ba75e3b348b69888161495b6be5392b796">1e0020b</a>)</li>
<li>feature: Add iframe support for user.keyboard typing (<a
href="https://redirect.github.com/testing-library/user-event/pull/1275">#1275</a>)
(<a
href="https://github.com/testing-library/user-event/commit/d4b05935949330100c36d4e23f25ea0b41a606ef">1e0020b</a>)</li>
</ul>
<h2>v14.6.6</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.5...v14.6.6">14.6.6</a>
(2026-08-22)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>default pointer event pointerType to empty string instead of the
string &quot;undefined&quot; (<a
href="https://redirect.github.com/testing-library/user-event/issues/1325">#1325</a>)
(<a
href="https://github.com/testing-library/user-event/commit/71a547572e6f7793b925052c71aaabef6a443995">71a5475</a>)</li>
</ul>
<h2>v14.6.5</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.4...v14.6.5">14.6.5</a>
(2026-08-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>tab retargeting if focus moved during keydown (<a
href="https://redirect.github.com/testing-library/user-event/issues/1296">#1296</a>)
(<a
href="https://github.com/testing-library/user-event/commit/43efda7f998c3e519cb1c5ced2795a459c0f0f65">43efda7</a>)</li>
</ul>
<h2>v14.6.4</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.3...v14.6.4">14.6.4</a>
(2026-08-11)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>keyboard event repeat property (<a
href="https://redirect.github.com/testing-library/user-event/issues/1312">#1312</a>)
(<a
href="https://github.com/testing-library/user-event/commit/d7e80e33366e8f64d9a3bf4b012b5720c9fcc0e7">d7e80e3</a>)</li>
</ul>
<h2>v14.6.3</h2>
<h2><a
href="https://github.com/testing-library/user-event/compare/v14.6.2...v14.6.3">14.6.3</a>
(2026-08-03)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>release:</strong> manually release a patch version (<a
href="https://redirect.github.com/testing-library/user-event/issues/1321">#1321</a>)
(<a
href="https://github.com/testing-library/user-event/commit/1d18b1fae589eeed8e08838672a4c2de0dcc2b36">1d18b1f</a>),
closes <a
href="https://redirect.github.com/testing-library/user-event/issues/1317">#1317</a></li>
</ul>
<h2>v14.6.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/testing-library/user-event/commit/1951eb77cc190a68eb6dac6bd40b53648b18805f"><code>1951eb7</code></a>
fix: treat programmatic null input values as empty string (<a
href="https://redirect.github.com/testing-library/user-event/issues/1329">#1329</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/1e0020ba75e3b348b69888161495b6be5392b796"><code>1e0020b</code></a>
fix: normalize DataTransfer format aliases (<a
href="https://redirect.github.com/testing-library/user-event/issues/1326">#1326</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/d4b05935949330100c36d4e23f25ea0b41a606ef"><code>d4b0593</code></a>
feature: Add iframe support for user.keyboard typing (<a
href="https://redirect.github.com/testing-library/user-event/issues/1275">#1275</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/71a547572e6f7793b925052c71aaabef6a443995"><code>71a5475</code></a>
fix: default pointer event pointerType to empty string instead of the
string ...</li>
<li><a
href="https://github.com/testing-library/user-event/commit/43efda7f998c3e519cb1c5ced2795a459c0f0f65"><code>43efda7</code></a>
fix: tab retargeting if focus moved during keydown (<a
href="https://redirect.github.com/testing-library/user-event/issues/1296">#1296</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/d7e80e33366e8f64d9a3bf4b012b5720c9fcc0e7"><code>d7e80e3</code></a>
fix: keyboard event repeat property (<a
href="https://redirect.github.com/testing-library/user-event/issues/1312">#1312</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/43d8e6c5caec5706bcf4b2d77643d7b221c39de4"><code>43d8e6c</code></a>
ci: remove broken npm backfill step (<a
href="https://redirect.github.com/testing-library/user-event/issues/1322">#1322</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/1d18b1fae589eeed8e08838672a4c2de0dcc2b36"><code>1d18b1f</code></a>
fix(release): manually release a patch version (<a
href="https://redirect.github.com/testing-library/user-event/issues/1321">#1321</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/232f3e6f4f92459c02161d156a70bddd13a59eaa"><code>232f3e6</code></a>
docs: add migration note and clean up README badges (<a
href="https://redirect.github.com/testing-library/user-event/issues/1320">#1320</a>)</li>
<li><a
href="https://github.com/testing-library/user-event/commit/83e2b2261b40f5f08296eaf5af3d42018e6681ed"><code>83e2b22</code></a>
ci: remove deprecated CodeSandbox CI (<a
href="https://redirect.github.com/testing-library/user-event/issues/1318">#1318</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/testing-library/user-event/compare/v14.5.2...v14.6.8">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​testing-library/user-event</code> since your
current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@testing-library/user-event&package-manager=npm_and_yarn&previous-version=14.5.2&new-version=14.6.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
---
 packages/solid/package.json      |  2 +-
 packages/solidstart/package.json |  2 +-
 pnpm-lock.yaml                   | 16 ++++++++--------
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/packages/solid/package.json b/packages/solid/package.json
index 8fc46fd2d1f8..6085d3284e54 100644
--- a/packages/solid/package.json
+++ b/packages/solid/package.json
@@ -78,7 +78,7 @@
     "@tanstack/solid-router": "^1.169.2",
     "@testing-library/dom": "^7.21.4",
     "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/user-event": "^14.5.2",
+    "@testing-library/user-event": "^14.6.8",
     "solid-js": "^1.9.18",
     "vite": "^8.3.5",
     "vite-plugin-solid": "^2.11.6"
diff --git a/packages/solidstart/package.json b/packages/solidstart/package.json
index 90e025621c0f..d6eb4d2951b2 100644
--- a/packages/solidstart/package.json
+++ b/packages/solidstart/package.json
@@ -97,7 +97,7 @@
     "@solidjs/start": "^1.3.2",
     "@solidjs/testing-library": "0.8.5",
     "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/user-event": "^14.5.2",
+    "@testing-library/user-event": "^14.6.8",
     "@types/node": "^20.19.0",
     "nitropack": "^2.13.4",
     "node-mock-http": "^1.0.4",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b9d6287fd5e7..bd97f8cbdce2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2237,8 +2237,8 @@ importers:
         specifier: ^6.9.1
         version: 6.9.1
       '@testing-library/user-event':
-        specifier: ^14.5.2
-        version: 14.5.2(@testing-library/dom@7.31.2)
+        specifier: ^14.6.8
+        version: 14.6.8(@testing-library/dom@7.31.2)
       solid-js:
         specifier: ^1.9.18
         version: 1.9.18
@@ -2298,8 +2298,8 @@ importers:
         specifier: ^6.9.1
         version: 6.9.1
       '@testing-library/user-event':
-        specifier: ^14.5.2
-        version: 14.5.2(@testing-library/dom@10.4.1)
+        specifier: ^14.6.8
+        version: 14.6.8(@testing-library/dom@10.4.1)
       '@types/node':
         specifier: ^20.19.0
         version: 20.19.43
@@ -8690,8 +8690,8 @@ packages:
     peerDependencies:
       svelte: 3.x
 
-  '@testing-library/user-event@14.5.2':
-    resolution: {integrity: sha512-YAh82Wh4TIrxYLmfGcixwD18oIjyC1pFQC2Y01F2lzV2HTMiYrI0nze0FD0ocB//CKS/7jIUgae+adPqxK5yCQ==}
+  '@testing-library/user-event@14.6.8':
+    resolution: {integrity: sha512-vgSSqnANMnkcYR/vUNDbwS7aM3OErRLNUG8vCVVlj4oc6cKffUrccX7UAS5AmJQQNZTSibi9z5GvvRZ0aYgUCQ==}
     engines: {node: '>=12', npm: '>=6'}
     peerDependencies:
       '@testing-library/dom': '>=7.21.4'
@@ -27868,11 +27868,11 @@ snapshots:
       '@testing-library/dom': 8.17.1
       svelte: 3.59.2
 
-  '@testing-library/user-event@14.5.2(@testing-library/dom@10.4.1)':
+  '@testing-library/user-event@14.6.8(@testing-library/dom@10.4.1)':
     dependencies:
       '@testing-library/dom': 10.4.1
 
-  '@testing-library/user-event@14.5.2(@testing-library/dom@7.31.2)':
+  '@testing-library/user-event@14.6.8(@testing-library/dom@7.31.2)':
     dependencies:
       '@testing-library/dom': 7.31.2
 

From 5a05c552b1d574edf0c6bed908507fd9f35be8b6 Mon Sep 17 00:00:00 2001
From: Nicolas Hrubec <nicolas.hrubec@outlook.com>
Date: Tue, 3 Nov 2026 20:57:14 +0100
Subject: [PATCH 149/169] chore: Exclude integration and bundler tests from
 Dependabot updates (#26075)

**Why:** Test dependency versions preserve coverage across supported
library and bundler versions and should be updated deliberately. Exclude
the Browser, Bun, Node, Deno, Cloudflare, and bundler-plugin
integration-test projects, plus `bundler-tests`, from Dependabot
updates, following the existing E2E app exclusion; this excludes minor
and patch updates too.

**How to review:** Check the seven added directory globs in
`.github/dependabot.yml`. Oxfmt validation and `git diff --check` pass.
Full format/build/lint commands were attempted but stopped after
dependency installation hit registry DNS failures; no runtime packages
changed.

---------

Co-authored-by: GPT-6 <codex@openai.com>
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e23ace7174ec..87a7ed005b20 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -120,4 +120,11 @@ updates:
       prefix-development: chore
       include: scope
     exclude-paths:
+      - 'dev-packages/browser-integration-tests/**'
+      - 'dev-packages/bundler-plugin-integration-tests/**'
+      - 'dev-packages/bundler-tests/**'
+      - 'dev-packages/bun-integration-tests/**'
+      - 'dev-packages/node-integration-tests/**'
+      - 'dev-packages/deno-integration-tests/**'
+      - 'dev-packages/cloudflare-integration-tests/**'
       - 'dev-packages/e2e-tests/test-applications/**'

From b9d0f8210180f3e090cd4e0b0cc63c9c9619e686 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Nov 2026 21:08:00 +0100
Subject: [PATCH 150/169] chore(deps-dev): Bump markdown-table from 3.0.3 to
 3.0.4 (#26074)

Bumps [markdown-table](https://github.com/wooorm/markdown-table) from
3.0.3 to 3.0.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/wooorm/markdown-table/releases">markdown-table's
releases</a>.</em></p>
<blockquote>
<h2>3.0.4</h2>
<h4>Types</h4>
<ul>
<li>9f9497c Add declaration maps</li>
</ul>
<h4>Miscellaneous</h4>
<ul>
<li>6dab0ba Refactor code-style</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/wooorm/markdown-table/compare/3.0.3...3.0.4">https://github.com/wooorm/markdown-table/compare/3.0.3...3.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/wooorm/markdown-table/commit/1db562655146371abfbeb6615ff76e9a59b51be9"><code>1db5626</code></a>
3.0.4</li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/62a22c43cf2b5ae65c9d580c8def77c0bca7f8fb"><code>62a22c4</code></a>
Remove license year</li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/6dab0baef69c0b5f14058f6a0df59f2969b54508"><code>6dab0ba</code></a>
Refactor code-style</li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/9f9497c34418b91083adeea61259ece14e7f99f9"><code>9f9497c</code></a>
Add declaration maps</li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/1074f30de775795d4ccf79c698b99d7a8ca8fc75"><code>1074f30</code></a>
Refactor <code>package.json</code></li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/b9136922a0db0e9a849806ad23c46dc7b4099536"><code>b913692</code></a>
Refactor <code>.prettierignore</code></li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/4efb15eccbe0a5d4087d98c80389e6de217cfeda"><code>4efb15e</code></a>
Add <code>ignore-scripts</code> to <code>.npmrc</code></li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/9e0790cd02f2660ead1b3a6f488724824df1dea0"><code>9e0790c</code></a>
Refactor <code>.editorconfig</code></li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/73f53052242b0ce665e1374c680504130b774cb9"><code>73f5305</code></a>
Update Actions</li>
<li><a
href="https://github.com/wooorm/markdown-table/commit/d9587d312fa040fe722998e8079624797350c8dc"><code>d9587d3</code></a>
Add <code>.tsbuildinfo</code> to <code>.gitignore</code></li>
<li>Additional commits viewable in <a
href="https://github.com/wooorm/markdown-table/compare/3.0.3...3.0.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-table&package-manager=npm_and_yarn&previous-version=3.0.3&new-version=3.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Nicolas Hrubec <nico.hrubec@sentry.io>
---
 dev-packages/optional-e2e-gh-action/package.json |  2 +-
 dev-packages/size-limit-gh-action/package.json   |  2 +-
 pnpm-lock.yaml                                   | 16 ++++++++--------
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/dev-packages/optional-e2e-gh-action/package.json b/dev-packages/optional-e2e-gh-action/package.json
index d3fff0441553..43fb84c71133 100644
--- a/dev-packages/optional-e2e-gh-action/package.json
+++ b/dev-packages/optional-e2e-gh-action/package.json
@@ -16,6 +16,6 @@
   "devDependencies": {
     "@actions/core": "1.10.1",
     "@actions/github": "^5.0.0",
-    "markdown-table": "3.0.3"
+    "markdown-table": "3.0.4"
   }
 }
diff --git a/dev-packages/size-limit-gh-action/package.json b/dev-packages/size-limit-gh-action/package.json
index 9f853b265e2e..5ca7a02c805c 100644
--- a/dev-packages/size-limit-gh-action/package.json
+++ b/dev-packages/size-limit-gh-action/package.json
@@ -19,6 +19,6 @@
     "@actions/exec": "1.1.1",
     "@actions/github": "^5.0.0",
     "bytes-iec": "3.1.1",
-    "markdown-table": "3.0.3"
+    "markdown-table": "3.0.4"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bd97f8cbdce2..4df512ed77de 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -901,8 +901,8 @@ importers:
         specifier: ^5.0.0
         version: 5.1.1(encoding@0.1.13)
       markdown-table:
-        specifier: 3.0.3
-        version: 3.0.3
+        specifier: 3.0.4
+        version: 3.0.4
 
   dev-packages/rollup-utils: {}
 
@@ -924,8 +924,8 @@ importers:
         specifier: 3.1.1
         version: 3.1.1
       markdown-table:
-        specifier: 3.0.3
-        version: 3.0.3
+        specifier: 3.0.4
+        version: 3.0.4
 
   dev-packages/test-utils:
     dependencies:
@@ -14205,8 +14205,8 @@ packages:
     resolution: {integrity: sha512-bJzx6nMoP6PDLPBFmg7+xRKeFZvFboMrGlxmNj9ClvX53KrmvM5bXFXEWjbz4cz1AFn+jWJ9z/DJSz7hrs0w3w==}
     engines: {node: '>=6'}
 
-  markdown-table@3.0.3:
-    resolution: {integrity: sha512-Z1NL3Tb1M9wH4XESsCDEksWoKTdlUafKc4pt0GRwjUyXaCFZ+dc3g2erqB6zm3szA2IUSi7VnPI+o/9jnxh9hw==}
+  markdown-table@3.0.4:
+    resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==}
 
   matcher-collection@1.1.2:
     resolution: {integrity: sha512-YQ/teqaOIIfUHedRam08PB3NK7Mjct6BvzRnJmpGDm8uFXpNr1sbY4yuflI5JcEs6COpYA0FpRQhSDBf1tT95g==}
@@ -34683,7 +34683,7 @@ snapshots:
     dependencies:
       p-defer: 1.0.0
 
-  markdown-table@3.0.3: {}
+  markdown-table@3.0.4: {}
 
   matcher-collection@1.1.2:
     dependencies:
@@ -34756,7 +34756,7 @@ snapshots:
     dependencies:
       '@types/mdast': 4.0.1
       devlop: 1.1.0
-      markdown-table: 3.0.3
+      markdown-table: 3.0.4
       mdast-util-from-markdown: 2.0.3(supports-color@10.0.0)
       mdast-util-to-markdown: 2.1.2
     transitivePeerDependencies:

From d138b7bcb712e7302538dd4d24efb3ae8416f6ea Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 10:05:03 +0100
Subject: [PATCH 151/169] fix(build): Handle CRLF line endings in
 pnpm-workspace.yaml check (#26083)

**Why:** On Windows, git can check out `pnpm-workspace.yaml` with CRLF
line endings. The workspace check in `verify-packages-versions.js` split
lines on `\n` only, so the `packages:` line never matched. The check
then read an empty list and `pnpm run build` failed with `[INCONSISTENT
WORKSPACES]`. Splitting on `\r?\n` fixes it without changing LF
behavior.

To add a regression test, I exported the parser and wrapped the CLI in a
`require.main` check, like `scripts/bump-version.js` does. CI doesn't
run `pnpm run test:scripts`, so the new test (like
`bump-version.test.ts`) only runs locally.

Closes #25946

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 scripts/verify-packages-versions.js      | 65 ++++++++++++++----------
 scripts/verify-packages-versions.test.ts | 36 +++++++++++++
 2 files changed, 73 insertions(+), 28 deletions(-)
 create mode 100644 scripts/verify-packages-versions.test.ts

diff --git a/scripts/verify-packages-versions.js b/scripts/verify-packages-versions.js
index 7268b26ba961..d1d8c0250e4d 100644
--- a/scripts/verify-packages-versions.js
+++ b/scripts/verify-packages-versions.js
@@ -4,31 +4,9 @@ const pkg = require('../package.json');
 
 const TYPESCRIPT_VERSION = '~7.0.2';
 
-if (pkg.devDependencies.typescript !== TYPESCRIPT_VERSION) {
-  console.error(`
-[INCORRECT PACKAGE VERSION]: Expected TypeScript v${TYPESCRIPT_VERSION}, got v${pkg.devDependencies.typescript}
-
-Starting version 3.9, TypeScript emits module exports using \`Object.defineProperty\`,
-with \`configurable: false\`, instead of \`exports.thing = module.thing;\` as it always used to do.
-This means, that any object mutation after the initial compilation are impossible and makes
-the package slightly less open for modifications, and prevent users from experimenting with it,
-and from implementing some of their scenarios.
-
-If you REALLY know what you are doing, and you REALLY want to use a different version of TypeScript,
-modify \`TYPESCRIPT_VERSION\` constant at the top of this file (\`scripts/verify-packages-versions.js\`).
-
-change: https://github.com/getsentry/sentry-javascript/pull/2848
-ref: https://github.com/getsentry/sentry-javascript/issues/2845
-ref: https://twitter.com/wesleytodd/status/1297974661574262784
-
-"Never upgrade a TypeScript version without a major package bump. Just don't." — Kamil
-`);
-  process.exit(1);
-}
-
 // pnpm reads the workspace packages from `pnpm-workspace.yaml`, the repo scripts and Deno from `package.json`.
-function readPnpmWorkspacePackages() {
-  const lines = fs.readFileSync(path.join(__dirname, '../pnpm-workspace.yaml'), 'utf8').split('\n');
+function parsePnpmWorkspacePackages(content) {
+  const lines = content.split(/\r?\n/);
   const start = lines.indexOf('packages:');
   const packages = [];
 
@@ -51,12 +29,43 @@ function readPnpmWorkspacePackages() {
   return packages;
 }
 
-if (readPnpmWorkspacePackages().join('\n') !== pkg.workspaces.join('\n')) {
-  console.error(`
+function main() {
+  if (pkg.devDependencies.typescript !== TYPESCRIPT_VERSION) {
+    console.error(`
+[INCORRECT PACKAGE VERSION]: Expected TypeScript v${TYPESCRIPT_VERSION}, got v${pkg.devDependencies.typescript}
+
+Starting version 3.9, TypeScript emits module exports using \`Object.defineProperty\`,
+with \`configurable: false\`, instead of \`exports.thing = module.thing;\` as it always used to do.
+This means, that any object mutation after the initial compilation are impossible and makes
+the package slightly less open for modifications, and prevent users from experimenting with it,
+and from implementing some of their scenarios.
+
+If you REALLY know what you are doing, and you REALLY want to use a different version of TypeScript,
+modify \`TYPESCRIPT_VERSION\` constant at the top of this file (\`scripts/verify-packages-versions.js\`).
+
+change: https://github.com/getsentry/sentry-javascript/pull/2848
+ref: https://github.com/getsentry/sentry-javascript/issues/2845
+ref: https://twitter.com/wesleytodd/status/1297974661574262784
+
+"Never upgrade a TypeScript version without a major package bump. Just don't." — Kamil
+`);
+    process.exit(1);
+  }
+
+  const pnpmWorkspace = fs.readFileSync(path.join(__dirname, '../pnpm-workspace.yaml'), 'utf8');
+  if (parsePnpmWorkspacePackages(pnpmWorkspace).join('\n') !== pkg.workspaces.join('\n')) {
+    console.error(`
 [INCONSISTENT WORKSPACES]: The \`packages\` list in pnpm-workspace.yaml and the \`workspaces\` list in package.json
 must contain the same packages in the same order.
 `);
-  process.exit(1);
+    process.exit(1);
+  }
+
+  process.exit(0);
+}
+
+if (require.main === module) {
+  main();
 }
 
-process.exit(0);
+module.exports = { parsePnpmWorkspacePackages };
diff --git a/scripts/verify-packages-versions.test.ts b/scripts/verify-packages-versions.test.ts
new file mode 100644
index 000000000000..3b65469eb7b1
--- /dev/null
+++ b/scripts/verify-packages-versions.test.ts
@@ -0,0 +1,36 @@
+import { describe, expect, it } from 'vitest';
+
+const { parsePnpmWorkspacePackages } = require('./verify-packages-versions');
+
+const WORKSPACE = [
+  'packages:',
+  '  - packages/core',
+  "  - 'packages/browser'",
+  '  - "dev-packages/test-utils"',
+  '',
+  'catalog:',
+  '  vitest: ^3.0.0',
+  '',
+].join('\n');
+
+describe('parsePnpmWorkspacePackages', () => {
+  it('reads the packages list up to the next top-level key', () => {
+    expect(parsePnpmWorkspacePackages(WORKSPACE)).toEqual([
+      'packages/core',
+      'packages/browser',
+      'dev-packages/test-utils',
+    ]);
+  });
+
+  it('handles CRLF line endings', () => {
+    expect(parsePnpmWorkspacePackages(WORKSPACE.replace(/\n/g, '\r\n'))).toEqual([
+      'packages/core',
+      'packages/browser',
+      'dev-packages/test-utils',
+    ]);
+  });
+
+  it('returns an empty list without a packages key', () => {
+    expect(parsePnpmWorkspacePackages('catalog:\n  vitest: ^3.0.0\n')).toEqual([]);
+  });
+});

From 23eca77153a15072433b17fca7dbfba7ab882998 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 10:50:44 +0100
Subject: [PATCH 152/169] fix(nuxt): Keep storage instrumentation plugin
 synchronous (#25949)

**Why:** The optional `nuxt-5` E2E job broke when `nitro@latest` moved
from `3.0.260903-beta` to `3.0.261029-rc`. The same develop SHA passed
before that release and failed after it. Two separate Nitro changes
caused it:

- Nitro now awaits async plugins and runs every later plugin after that
promise settles. Our storage plugin was `async` but never awaited
anything, so it pushed every plugin after it (including user plugins)
into the async path. A plugin that throws at startup then turns into an
unhandled rejection. Our `onUnhandledRejection` handler keeps the
process running, so instead of exiting with code 1 the server keeps
listening behind a rejected `ready` gate. Making the plugin synchronous
restores the old behavior. Nitro v2 never awaited plugins, so nothing
changes there.
- Nitro's `defineCachedFunction` / `defineCachedHandler` are now built
on `ocache`, and the default `memory` cache driver skips KV storage
completely. The storage instrumentation can't see those calls anymore.
The test app now sets `cache: { driver: 'kv' }`, which is also what
Nitro picks by default when a `cache` KV mount is configured, so cache
instrumentation stays tested.

**Unsure about:** With Nitro v3 RC's default config, users no longer get
`cache.*` spans for cached functions or handlers. Supporting that would
need new instrumentation around ocache's storage, since there is no
tracing channel for it. Cache keys also changed shape
(`nitrofunctions.<hash>:...` instead of `nitro:functions:...`), so the
expired-entry check in `isCacheHit` no longer runs, and it falls back to
checking whether a value is present. Should that be handled here, or
tracked as a follow-up?

<!-- junior-request-attribution:start -->
via **Francesco Gringl-Novy**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AD0CA8FXFXAS%3A1793366214.663899 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AD0CA8FXFXAS%3A1793366214.663899)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AD0CA8FXFXAS%3A1793366214.663899/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Francesco Gringl-Novy <francesco.novy@sentry.io>
---
 .../e2e-tests/test-applications/nuxt-5/nuxt.config.ts         | 3 +++
 packages/nuxt/src/runtime/plugins/storage-legacy.server.ts    | 4 ++--
 packages/nuxt/src/runtime/plugins/storage.server.ts           | 4 ++--
 packages/nuxt/src/runtime/utils/instrumentStorage.ts          | 2 +-
 4 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/nuxt.config.ts b/dev-packages/e2e-tests/test-applications/nuxt-5/nuxt.config.ts
index 8016834d1167..78c559af3621 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5/nuxt.config.ts
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5/nuxt.config.ts
@@ -28,6 +28,9 @@ export default defineNuxtConfig({
     },
   },
   nitro: {
+    // Nitro v3 only routes `defineCachedFunction`/`defineCachedHandler` through KV storage (which the SDK
+    // instruments) with the `kv` cache driver. The default `memory` driver bypasses KV storage entirely.
+    cache: { driver: 'kv' },
     experimental: {
       database: true,
     },
diff --git a/packages/nuxt/src/runtime/plugins/storage-legacy.server.ts b/packages/nuxt/src/runtime/plugins/storage-legacy.server.ts
index 77b6a390d0e9..ac445ad0c432 100644
--- a/packages/nuxt/src/runtime/plugins/storage-legacy.server.ts
+++ b/packages/nuxt/src/runtime/plugins/storage-legacy.server.ts
@@ -7,6 +7,6 @@ import { createStoragePlugin } from '../utils/instrumentStorage';
 /**
  * Nitro plugin that instruments storage driver calls for Nuxt v3/v4 (Nitro v2)
  */
-export default (async _nitroApp => {
-  await createStoragePlugin(useStorage, userStorageMounts as string[]);
+export default (_nitroApp => {
+  createStoragePlugin(useStorage, userStorageMounts as string[]);
 }) satisfies NitroAppPlugin;
diff --git a/packages/nuxt/src/runtime/plugins/storage.server.ts b/packages/nuxt/src/runtime/plugins/storage.server.ts
index f9763b51d47b..726857f037dd 100644
--- a/packages/nuxt/src/runtime/plugins/storage.server.ts
+++ b/packages/nuxt/src/runtime/plugins/storage.server.ts
@@ -7,6 +7,6 @@ import { createStoragePlugin } from '../utils/instrumentStorage';
 /**
  * Nitro plugin that instruments storage driver calls for Nuxt v5+ (Nitro v3+)
  */
-export default (async _nitroApp => {
-  await createStoragePlugin(useStorage, userStorageMounts as string[]);
+export default (_nitroApp => {
+  createStoragePlugin(useStorage, userStorageMounts as string[]);
 }) satisfies NitroAppPlugin;
diff --git a/packages/nuxt/src/runtime/utils/instrumentStorage.ts b/packages/nuxt/src/runtime/utils/instrumentStorage.ts
index f0dd1fb1b399..1055b4ca5876 100644
--- a/packages/nuxt/src/runtime/utils/instrumentStorage.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentStorage.ts
@@ -89,7 +89,7 @@ const METHOD_SPAN_OPS = {
  * The `useStorage` parameter is typed as `() => unknown` because nitropack (Nitro v2) and nitro (Nitro v3+) define `StorageValue` differently.
  * Cast to `NitroStorage` is safe since all Nitro versions expose `getMounts()` at runtime.
  */
-export async function createStoragePlugin(useStorage: () => unknown, userStorageMounts: string[]): Promise<void> {
+export function createStoragePlugin(useStorage: () => unknown, userStorageMounts: string[]): void {
   // This runs at runtime when the Nitro server starts
   const storage = useStorage() as NitroStorage;
   // Mounts are suffixed with a colon, so we need to add it to the set items

From 2619fa407b6cd3f03e076077245b48eb18acc2cb Mon Sep 17 00:00:00 2001
From: Andrei <168741329+andreiborza@users.noreply.github.com>
Date: Wed, 4 Nov 2026 11:22:08 +0100
Subject: [PATCH 153/169] fix(nitro): Capture errors thrown in tasks (#26089)

## What

Errors thrown in Nitro tasks are now sent to Sentry.

## Why

Nitro catches errors from scheduled tasks and only logs them, so they
never got to the `error` hook and were not reported.

Closes: #25985

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../nitro-3/server/api/test-task-error.ts     |  8 +++
 .../nitro-3/server/tasks/test-error.ts        |  8 +++
 .../nitro-3/tests/tasks.test.ts               | 24 +++++++
 .../test-applications/nitro-3/vite.config.ts  |  1 +
 packages/nitro/rollup.npm.config.mjs          |  2 +-
 .../src/runtime/hooks/captureErrorHook.ts     |  8 ++-
 packages/nitro/src/runtime/plugins/server.ts  |  4 ++
 .../src/runtime/utils/instrumentTasks.ts      | 43 ++++++++++++
 .../runtime/hooks/captureErrorHook.test.ts    | 10 +++
 .../runtime/utils/instrumentTasks.test.ts     | 67 +++++++++++++++++++
 10 files changed, 173 insertions(+), 2 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nitro-3/server/api/test-task-error.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nitro-3/server/tasks/test-error.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nitro-3/tests/tasks.test.ts
 create mode 100644 packages/nitro/src/runtime/utils/instrumentTasks.ts
 create mode 100644 packages/nitro/test/runtime/utils/instrumentTasks.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nitro-3/server/api/test-task-error.ts b/dev-packages/e2e-tests/test-applications/nitro-3/server/api/test-task-error.ts
new file mode 100644
index 000000000000..50b4dd06f173
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nitro-3/server/api/test-task-error.ts
@@ -0,0 +1,8 @@
+import { defineHandler } from 'nitro/h3';
+import { runTask } from 'nitro/task';
+
+export default defineHandler(async () => {
+  // Catch the error so that only the task instrumentation can report it, not the `error` hook.
+  await runTask('test-error').catch(() => undefined);
+  return { status: 'ok' };
+});
diff --git a/dev-packages/e2e-tests/test-applications/nitro-3/server/tasks/test-error.ts b/dev-packages/e2e-tests/test-applications/nitro-3/server/tasks/test-error.ts
new file mode 100644
index 000000000000..6f0137f53836
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nitro-3/server/tasks/test-error.ts
@@ -0,0 +1,8 @@
+import { defineTask } from 'nitro/task';
+
+export default defineTask({
+  meta: { name: 'test-error' },
+  run: () => {
+    throw new Error('This is a task error');
+  },
+});
diff --git a/dev-packages/e2e-tests/test-applications/nitro-3/tests/tasks.test.ts b/dev-packages/e2e-tests/test-applications/nitro-3/tests/tasks.test.ts
new file mode 100644
index 000000000000..6d421b08fb9f
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nitro-3/tests/tasks.test.ts
@@ -0,0 +1,24 @@
+import { expect, test } from '@playwright/test';
+import { waitForError } from '@sentry-internal/test-utils';
+
+test('Sends an error thrown in a task to Sentry', async ({ request }) => {
+  const errorEventPromise = waitForError('nitro-3', event => {
+    return !!event.exception?.values?.some(v => v.value === 'This is a task error');
+  });
+
+  await request.get('/api/test-task-error');
+
+  const errorEvent = await errorEventPromise;
+
+  expect(errorEvent.exception?.values).toEqual([
+    expect.objectContaining({
+      type: 'Error',
+      value: 'This is a task error',
+      mechanism: expect.objectContaining({
+        handled: false,
+        type: 'auto.function.nitro.task',
+      }),
+    }),
+  ]);
+  expect(errorEvent.contexts?.nitro).toEqual({ task: 'test-error' });
+});
diff --git a/dev-packages/e2e-tests/test-applications/nitro-3/vite.config.ts b/dev-packages/e2e-tests/test-applications/nitro-3/vite.config.ts
index b7c6de66d47c..b79a665ba851 100644
--- a/dev-packages/e2e-tests/test-applications/nitro-3/vite.config.ts
+++ b/dev-packages/e2e-tests/test-applications/nitro-3/vite.config.ts
@@ -13,6 +13,7 @@ export default defineConfig({
       // @ts-expect-error
       withSentryConfig({
         serverDir: './server',
+        experimental: { tasks: true },
         ...(process.env.E2E_TEST_BASE_PATH && { baseURL: `${process.env.E2E_TEST_BASE_PATH}/` }),
       }),
     ),
diff --git a/packages/nitro/rollup.npm.config.mjs b/packages/nitro/rollup.npm.config.mjs
index aebbc9aff288..51990c5771a6 100644
--- a/packages/nitro/rollup.npm.config.mjs
+++ b/packages/nitro/rollup.npm.config.mjs
@@ -5,7 +5,7 @@ export default [
     makeBaseNPMConfig({
       entrypoints: ['src/index.ts', 'src/runtime/plugins/server.ts'],
       packageSpecificConfig: {
-        external: [/^nitro/, /^srvx/, /^@sentry\/opentelemetry/],
+        external: [/^nitro/, /^#nitro\//, /^srvx/, /^@sentry\/opentelemetry/],
       },
     }),
     { emitCjs: false },
diff --git a/packages/nitro/src/runtime/hooks/captureErrorHook.ts b/packages/nitro/src/runtime/hooks/captureErrorHook.ts
index d07bad842ea0..164da1936401 100644
--- a/packages/nitro/src/runtime/hooks/captureErrorHook.ts
+++ b/packages/nitro/src/runtime/hooks/captureErrorHook.ts
@@ -1,4 +1,4 @@
-import { captureException, getClient, parseUrl } from '@sentry/core';
+import { captureException, getClient, isAlreadyCaptured, parseUrl } from '@sentry/core';
 import { flushIfServerless } from '@sentry/core/server';
 import { HTTPError } from 'nitro/h3';
 import type { CapturedErrorContext } from 'nitro/types';
@@ -46,6 +46,12 @@ export async function captureErrorHook(error: Error, errorContext: CapturedError
     return;
   }
 
+  // Nitro wraps errors thrown in handlers in an `HTTPError`, so an error the SDK already captured (for example in a
+  // task) would be reported a second time through the wrapper.
+  if (HTTPError.isError(error) && isAlreadyCaptured(error.cause)) {
+    return;
+  }
+
   const structuredContext = extractErrorContext(errorContext);
 
   captureException(error, {
diff --git a/packages/nitro/src/runtime/plugins/server.ts b/packages/nitro/src/runtime/plugins/server.ts
index edc7368060ce..286446ed90c0 100644
--- a/packages/nitro/src/runtime/plugins/server.ts
+++ b/packages/nitro/src/runtime/plugins/server.ts
@@ -4,10 +4,14 @@ import {
 } from '@sentry/core/server';
 import { definePlugin } from 'nitro';
 import { useRuntimeConfig } from 'nitro/runtime-config';
+// @ts-expect-error - This is a virtual module
+import { tasks } from '#nitro/virtual/tasks';
 import { captureErrorHook } from '../hooks/captureErrorHook';
+import { instrumentTasks } from '../utils/instrumentTasks';
 
 export default definePlugin(nitroApp => {
   nitroApp.hooks.hook('error', captureErrorHook);
+  instrumentTasks(tasks);
 
   // Nitro runs the app's `middleware/` before anything a module registers, so an auth middleware there would block
   // the tunnel. Every preset hands requests to `nitroApp.fetch` after the plugins ran, so wrapping it goes first,
diff --git a/packages/nitro/src/runtime/utils/instrumentTasks.ts b/packages/nitro/src/runtime/utils/instrumentTasks.ts
new file mode 100644
index 000000000000..b4bbf884a620
--- /dev/null
+++ b/packages/nitro/src/runtime/utils/instrumentTasks.ts
@@ -0,0 +1,43 @@
+import { captureException } from '@sentry/core';
+import { flushIfServerless } from '@sentry/core/server';
+import type { Task } from 'nitro/types';
+
+type TaskRegistry = Record<string, { resolve?: () => Promise<Task> }>;
+
+/**
+ * Wraps the `run` function of every registered Nitro task to capture errors it throws.
+ *
+ * Nitro's scheduler catches task errors and only logs them, so they never reach the `error` hook.
+ */
+export function instrumentTasks(tasks: TaskRegistry): void {
+  for (const [name, task] of Object.entries(tasks)) {
+    const originalResolve = task.resolve;
+    if (!originalResolve) {
+      continue;
+    }
+
+    task.resolve = async () => {
+      const handler = await originalResolve();
+      if (typeof handler?.run !== 'function') {
+        return handler;
+      }
+
+      // `resolve` returns the same cached module object on every call, so return a copy instead of wrapping `run` again.
+      return {
+        ...handler,
+        run: async event => {
+          try {
+            return await handler.run(event);
+          } catch (error) {
+            captureException(error, {
+              captureContext: { contexts: { nitro: { task: name } } },
+              mechanism: { handled: false, type: 'auto.function.nitro.task' },
+            });
+            await flushIfServerless();
+            throw error;
+          }
+        },
+      };
+    };
+  }
+}
diff --git a/packages/nitro/test/runtime/hooks/captureErrorHook.test.ts b/packages/nitro/test/runtime/hooks/captureErrorHook.test.ts
index 7ff08f489a0d..a692c1667dcb 100644
--- a/packages/nitro/test/runtime/hooks/captureErrorHook.test.ts
+++ b/packages/nitro/test/runtime/hooks/captureErrorHook.test.ts
@@ -98,6 +98,16 @@ describe('captureErrorHook', () => {
     );
   });
 
+  it('should skip HTTPError whose cause was already captured', async () => {
+    const cause = new Error('Task error');
+    Object.defineProperty(cause, '__sentry_captured__', { value: true });
+    const error = new HTTPError(cause);
+
+    await captureErrorHook(error, mockErrorContext);
+
+    expect(SentryCore.captureException).not.toHaveBeenCalled();
+  });
+
   it('should skip when enableNitroErrorHandler is false', async () => {
     (SentryCore.getClient as any).mockReturnValue({
       getOptions: () => ({ enableNitroErrorHandler: false }),
diff --git a/packages/nitro/test/runtime/utils/instrumentTasks.test.ts b/packages/nitro/test/runtime/utils/instrumentTasks.test.ts
new file mode 100644
index 000000000000..dd093e92c557
--- /dev/null
+++ b/packages/nitro/test/runtime/utils/instrumentTasks.test.ts
@@ -0,0 +1,67 @@
+import * as SentryCore from '@sentry/core';
+import type { Task } from 'nitro/types';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { instrumentTasks } from '../../../src/runtime/utils/instrumentTasks';
+
+vi.mock('@sentry/core', async importOriginal => {
+  const mod = await importOriginal();
+  return {
+    ...(mod as any),
+    captureException: vi.fn(),
+  };
+});
+
+const taskEvent = { name: 'test-task', payload: {}, context: {} };
+
+describe('instrumentTasks', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it('captures and rethrows errors thrown by a task', async () => {
+    const error = new Error('Task failed');
+    const task: Task = { run: () => Promise.reject(error) };
+    const tasks = { 'test-task': { resolve: () => Promise.resolve(task) } };
+
+    instrumentTasks(tasks);
+    const handler = await tasks['test-task'].resolve();
+
+    await expect(handler.run(taskEvent)).rejects.toBe(error);
+    expect(SentryCore.captureException).toHaveBeenCalledWith(error, {
+      captureContext: { contexts: { nitro: { task: 'test-task' } } },
+      mechanism: { handled: false, type: 'auto.function.nitro.task' },
+    });
+  });
+
+  it('returns the task result and does not capture on success', async () => {
+    const task: Task = { meta: { description: 'desc' }, run: () => Promise.resolve({ result: 'ok' }) };
+    const tasks = { 'test-task': { resolve: () => Promise.resolve(task) } };
+
+    instrumentTasks(tasks);
+    const handler = await tasks['test-task'].resolve();
+
+    await expect(handler.run(taskEvent)).resolves.toEqual({ result: 'ok' });
+    expect(handler.meta).toEqual({ description: 'desc' });
+    expect(SentryCore.captureException).not.toHaveBeenCalled();
+  });
+
+  it('does not wrap the cached task again on repeated resolves', async () => {
+    const error = new Error('Task failed');
+    const task: Task = { run: () => Promise.reject(error) };
+    const tasks = { 'test-task': { resolve: () => Promise.resolve(task) } };
+
+    instrumentTasks(tasks);
+    await tasks['test-task'].resolve();
+    const handler = await tasks['test-task'].resolve();
+
+    await expect(handler.run(taskEvent)).rejects.toBe(error);
+    expect(SentryCore.captureException).toHaveBeenCalledTimes(1);
+  });
+
+  it('skips tasks without a handler', () => {
+    const tasks = { 'test-task': { resolve: undefined } };
+
+    expect(() => instrumentTasks(tasks)).not.toThrow();
+    expect(tasks['test-task'].resolve).toBeUndefined();
+  });
+});

From 7ae2cc34920b9bf4ddbdb000361d7305d12bc21d Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 12:39:28 +0100
Subject: [PATCH 154/169] fix(nextjs): Fork isolation scope for Next.request
 proxy root spans (#26084)

**Why:** Since Next.js 16.4.3, a proxy that runs separately from the
render (e.g. on Vercel) gets a new `Next.request` root span, with
`Middleware.execute` as its child. We only forked the isolation scope
for `BaseServer.handleRequest` and `Middleware.execute` roots, so
concurrent proxy requests shared one scope and mixed breadcrumbs. The
Edge `beforeSampling` request seeding had the same gap.

The new `nextjs-16-adapter` e2e app is needed because `next start` never
creates `Next.request`. It builds with a deployment adapter and calls
the proxy entrypoint directly. Without the fix, the test fails with one
request's error carrying the other request's breadcrumb.

**How to review:** The SDK change is in
`forkIsolationScopeForRootSpan.ts` and `edge/index.ts`.

Closes #26005

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../nextjs-16-adapter/.gitignore              | 44 +++++++++++++++++++
 .../nextjs-16-adapter/adapter.mjs             | 16 +++++++
 .../nextjs-16-adapter/app/layout.tsx          |  7 +++
 .../nextjs-16-adapter/app/page.tsx            |  3 ++
 .../nextjs-16-adapter/instrumentation.ts      |  9 ++++
 .../nextjs-16-adapter/next.config.ts          | 10 +++++
 .../nextjs-16-adapter/package.json            | 43 ++++++++++++++++++
 .../nextjs-16-adapter/playwright.config.mjs   | 12 +++++
 .../nextjs-16-adapter/pnpm-workspace.yaml     |  5 +++
 .../nextjs-16-adapter/proxy.ts                | 20 +++++++++
 .../nextjs-16-adapter/sentry.server.config.ts |  8 ++++
 .../nextjs-16-adapter/server.mjs              | 26 +++++++++++
 .../nextjs-16-adapter/start-event-proxy.mjs   |  6 +++
 .../tests/proxy-isolation.test.ts             | 34 ++++++++++++++
 .../nextjs-16-adapter/tsconfig.json           | 27 ++++++++++++
 .../utils/forkIsolationScopeForRootSpan.ts    |  6 +--
 packages/nextjs/src/edge/index.ts             |  2 +-
 .../forkIsolationScopeForRootSpan.test.ts     | 42 ++++++++++++++++++
 .../nextjs/test/edge/beforeSampling.test.ts   | 15 +++++++
 19 files changed, 331 insertions(+), 4 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/.gitignore
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/adapter.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/layout.tsx
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/page.tsx
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/instrumentation.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/playwright.config.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/pnpm-workspace.yaml
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/sentry.server.config.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/server.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/start-event-proxy.mjs
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-isolation.test.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tsconfig.json
 create mode 100644 packages/nextjs/test/common/utils/forkIsolationScopeForRootSpan.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/.gitignore b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/.gitignore
new file mode 100644
index 000000000000..dd146b53d966
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/.gitignore
@@ -0,0 +1,44 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts
+
+# Sentry Config File
+.env.sentry-build-plugin
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/adapter.mjs b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/adapter.mjs
new file mode 100644
index 000000000000..26bf16a619bc
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/adapter.mjs
@@ -0,0 +1,16 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+
+// Records the built proxy entrypoint so `server.mjs` can invoke it separately from the render, like Vercel does.
+/** @type {import('next').NextAdapter} */
+const adapter = {
+  name: 'sentry-e2e-adapter',
+  async onBuildComplete({ outputs, distDir }) {
+    await writeFile(
+      join(distDir, 'e2e-adapter-outputs.json'),
+      JSON.stringify({ middleware: outputs.middleware?.filePath, distDir }),
+    );
+  },
+};
+
+export default adapter;
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/layout.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/layout.tsx
new file mode 100644
index 000000000000..c8f9cee0b787
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/layout.tsx
@@ -0,0 +1,7 @@
+export default function Layout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en">
+      <body>{children}</body>
+    </html>
+  );
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/page.tsx
new file mode 100644
index 000000000000..b8115846ad25
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/app/page.tsx
@@ -0,0 +1,3 @@
+export default function Page() {
+  return <p>Next.js 16 Adapter Test</p>;
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/instrumentation.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/instrumentation.ts
new file mode 100644
index 000000000000..897effa19c8b
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/instrumentation.ts
@@ -0,0 +1,9 @@
+import * as Sentry from '@sentry/nextjs';
+
+export async function register() {
+  if (process.env.NEXT_RUNTIME === 'nodejs') {
+    await import('./sentry.server.config');
+  }
+}
+
+export const onRequestError = Sentry.captureRequestError;
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
new file mode 100644
index 000000000000..6fb632853c16
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
@@ -0,0 +1,10 @@
+import { withSentryConfig } from '@sentry/nextjs/config';
+import type { NextConfig } from 'next';
+
+const nextConfig: NextConfig = {
+  adapterPath: require.resolve('./adapter.mjs'),
+};
+
+export default withSentryConfig(nextConfig, {
+  silent: true,
+});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
new file mode 100644
index 000000000000..4411d949fef3
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
@@ -0,0 +1,43 @@
+{
+  "name": "nextjs-16-adapter",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "build": "next build > .tmp_build_stdout 2> .tmp_build_stderr || (cat .tmp_build_stdout && cat .tmp_build_stderr && exit 1)",
+    "clean": "npx rimraf node_modules pnpm-lock.yaml .tmp_dev_server_logs",
+    "start": "node server.mjs",
+    "test:prod": "TEST_ENV=production playwright test",
+    "test:build": "pnpm install && pnpm build",
+    "test:build-latest": "pnpm install && pnpm add next@latest && pnpm build",
+    "test:assert": "pnpm test:prod"
+  },
+  "dependencies": {
+    "@sentry/nextjs": "file:../../packed/sentry-nextjs-packed.tgz",
+    "next": "16.4.5",
+    "react": "19.1.0",
+    "react-dom": "19.1.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "1.64.1",
+    "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
+    "@types/node": "^20",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "typescript": "^5"
+  },
+  "sentryTest": {
+    "runner": "namespace-profile-sentry-javascript",
+    "variants": [
+      {
+        "build-command": "pnpm test:build",
+        "label": "nextjs-16-adapter (turbopack)",
+        "assert-command": "pnpm test:assert"
+      },
+      {
+        "build-command": "pnpm test:build-latest",
+        "label": "nextjs-16-adapter (latest, turbopack)",
+        "assert-command": "pnpm test:assert"
+      }
+    ]
+  }
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/playwright.config.mjs b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/playwright.config.mjs
new file mode 100644
index 000000000000..7fc1df2e92de
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/playwright.config.mjs
@@ -0,0 +1,12 @@
+import { getPlaywrightConfig } from '@sentry-internal/test-utils';
+
+if (process.env.TEST_ENV !== 'production') {
+  throw new Error(`Unknown test env: ${process.env.TEST_ENV}`);
+}
+
+const config = getPlaywrightConfig({
+  startCommand: 'pnpm start',
+  port: 3030,
+});
+
+export default config;
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/pnpm-workspace.yaml
new file mode 100644
index 000000000000..0aaed65978c9
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/pnpm-workspace.yaml
@@ -0,0 +1,5 @@
+allowBuilds:
+  esbuild: true
+  unrs-resolver: true
+  workerd: true
+minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
new file mode 100644
index 000000000000..e104e3864459
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
@@ -0,0 +1,20 @@
+import * as Sentry from '@sentry/nextjs';
+import { NextResponse } from 'next/server';
+import type { NextRequest } from 'next/server';
+
+export async function proxy(request: NextRequest) {
+  const requestId = request.nextUrl.searchParams.get('id');
+
+  Sentry.addBreadcrumb({ message: `proxy breadcrumb ${requestId}` });
+
+  // Lets a concurrent request add its breadcrumb before this one captures its error
+  await new Promise(resolve => setTimeout(resolve, 500));
+
+  Sentry.captureException(new Error(`Proxy error ${requestId}`));
+
+  return NextResponse.next();
+}
+
+export const config = {
+  matcher: ['/api/proxy-isolation'],
+};
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/sentry.server.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/sentry.server.config.ts
new file mode 100644
index 000000000000..ad780407a5b7
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/sentry.server.config.ts
@@ -0,0 +1,8 @@
+import * as Sentry from '@sentry/nextjs';
+
+Sentry.init({
+  environment: 'qa', // dynamic sampling bias to keep transactions
+  dsn: process.env.NEXT_PUBLIC_E2E_TEST_DSN,
+  tunnel: `http://localhost:3031/`, // proxy server
+  tracesSampleRate: 1.0,
+});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/server.mjs b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/server.mjs
new file mode 100644
index 000000000000..074bd5908a5e
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/server.mjs
@@ -0,0 +1,26 @@
+import { readFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { createRequire } from 'node:module';
+import { join } from 'node:path';
+
+// Invokes the proxy entrypoint directly, without next-server, like platforms that run the proxy separately from the
+// render (e.g. Vercel). Without incoming trace context, Next.js >= 16.4.3 then starts a `Next.request` root span.
+const { middleware: middlewarePath, distDir } = JSON.parse(
+  readFileSync(join(process.cwd(), '.next', 'e2e-adapter-outputs.json'), 'utf8'),
+);
+const { handler } = createRequire(import.meta.url)(middlewarePath);
+
+createServer(async (req, res) => {
+  try {
+    const response = await handler(new Request(`http://localhost:3030${req.url}`, { headers: req.headers }), {
+      waitUntil: () => {},
+      requestMeta: { relativeProjectDir: '.', distDir },
+    });
+    res.writeHead(response.status, { 'x-middleware-next': response.headers.get('x-middleware-next') ?? '' });
+    res.end(await response.text());
+  } catch (error) {
+    console.error(error);
+    res.writeHead(500);
+    res.end();
+  }
+}).listen(3030);
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/start-event-proxy.mjs b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/start-event-proxy.mjs
new file mode 100644
index 000000000000..9dc760924cfe
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/start-event-proxy.mjs
@@ -0,0 +1,6 @@
+import { startEventProxyServer } from '@sentry-internal/test-utils';
+
+startEventProxyServer({
+  port: 3031,
+  proxyServerName: 'nextjs-16-adapter',
+});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-isolation.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-isolation.test.ts
new file mode 100644
index 000000000000..ef35acd77869
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-isolation.test.ts
@@ -0,0 +1,34 @@
+import { expect, test } from '@playwright/test';
+import { waitForError, waitForStreamedSpan } from '@sentry-internal/test-utils';
+
+function getProxyBreadcrumbs(event: { breadcrumbs?: { message?: string }[] }): (string | undefined)[] {
+  return (event.breadcrumbs ?? [])
+    .map(breadcrumb => breadcrumb.message)
+    .filter(message => message?.startsWith('proxy breadcrumb'));
+}
+
+test('isolates scope data of concurrent proxy requests under the `Next.request` root span', async ({ request }) => {
+  const rootSpanPromise = waitForStreamedSpan('nextjs-16-adapter', span => {
+    return span.is_segment && span.attributes['next.span_type']?.value === 'Next.request';
+  });
+  const errorAPromise = waitForError('nextjs-16-adapter', event => {
+    return event.exception?.values?.[0]?.value === 'Proxy error a';
+  });
+  const errorBPromise = waitForError('nextjs-16-adapter', event => {
+    return event.exception?.values?.[0]?.value === 'Proxy error b';
+  });
+
+  const responses = await Promise.all([
+    request.get('/api/proxy-isolation?id=a'),
+    request.get('/api/proxy-isolation?id=b'),
+  ]);
+  for (const response of responses) {
+    expect(response.headers()['x-middleware-next']).toBe('1');
+  }
+
+  await rootSpanPromise;
+
+  const [errorA, errorB] = await Promise.all([errorAPromise, errorBPromise]);
+  expect(getProxyBreadcrumbs(errorA)).toEqual(['proxy breadcrumb a']);
+  expect(getProxyBreadcrumbs(errorB)).toEqual(['proxy breadcrumb b']);
+});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tsconfig.json b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tsconfig.json
new file mode 100644
index 000000000000..cc9ed39b5aa2
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tsconfig.json
@@ -0,0 +1,27 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "plugins": [
+      {
+        "name": "next"
+      }
+    ],
+    "paths": {
+      "@/*": ["./*"]
+    }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts", ".next/dev/types/**/*.ts", "**/*.mts"],
+  "exclude": ["node_modules"]
+}
diff --git a/packages/nextjs/src/common/utils/forkIsolationScopeForRootSpan.ts b/packages/nextjs/src/common/utils/forkIsolationScopeForRootSpan.ts
index 1ff8c45ae7a0..c8ae836455e0 100644
--- a/packages/nextjs/src/common/utils/forkIsolationScopeForRootSpan.ts
+++ b/packages/nextjs/src/common/utils/forkIsolationScopeForRootSpan.ts
@@ -11,15 +11,15 @@ import { getScopesFromContext } from '@sentry/opentelemetry';
 import { ATTR_NEXT_SPAN_TYPE } from '../nextSpanAttributes';
 
 /**
- * Forks the isolation scope for `BaseServer.handleRequest` / `Middleware.execute` root spans so that request-scoped
- * data (e.g. `normalizedRequest`) stays isolated per request.
+ * Forks the isolation scope for `BaseServer.handleRequest` / `Middleware.execute` / `Next.request` root spans so that
+ * request-scoped data (e.g. `normalizedRequest`) stays isolated per request.
  */
 export function maybeForkIsolationScopeForRootSpan(
   span: Span,
   spanAttributes: RawAttributes<Record<string, unknown>> | undefined,
 ): void {
   const spanType = spanAttributes?.[ATTR_NEXT_SPAN_TYPE];
-  if (spanType !== 'BaseServer.handleRequest' && spanType !== 'Middleware.execute') {
+  if (spanType !== 'BaseServer.handleRequest' && spanType !== 'Middleware.execute' && spanType !== 'Next.request') {
     return;
   }
 
diff --git a/packages/nextjs/src/edge/index.ts b/packages/nextjs/src/edge/index.ts
index e479fa45bd47..132d5f50aef0 100644
--- a/packages/nextjs/src/edge/index.ts
+++ b/packages/nextjs/src/edge/index.ts
@@ -148,7 +148,7 @@ export function init(options: VercelEdgeOptions = {}): void {
   // `normalizedRequest` on the isolation scope. Seed it from span attributes so `tracesSampler` has access.
   client.on('beforeSampling', ({ spanAttributes }) => {
     const spanType = spanAttributes[ATTR_NEXT_SPAN_TYPE];
-    if (spanType !== 'Middleware.execute' && spanType !== 'BaseServer.handleRequest') {
+    if (spanType !== 'Middleware.execute' && spanType !== 'BaseServer.handleRequest' && spanType !== 'Next.request') {
       return;
     }
 
diff --git a/packages/nextjs/test/common/utils/forkIsolationScopeForRootSpan.test.ts b/packages/nextjs/test/common/utils/forkIsolationScopeForRootSpan.test.ts
new file mode 100644
index 000000000000..92a7eb3341e1
--- /dev/null
+++ b/packages/nextjs/test/common/utils/forkIsolationScopeForRootSpan.test.ts
@@ -0,0 +1,42 @@
+import { getCapturedScopesOnSpan, getIsolationScope, SentrySpan, startSpan, withActiveSpan } from '@sentry/core';
+import { describe, expect, it } from 'vitest';
+import { ATTR_NEXT_SPAN_TYPE } from '../../../src/common/nextSpanAttributes';
+import { maybeForkIsolationScopeForRootSpan } from '../../../src/common/utils/forkIsolationScopeForRootSpan';
+
+describe('maybeForkIsolationScopeForRootSpan', () => {
+  it.each(['BaseServer.handleRequest', 'Middleware.execute', 'Next.request'])(
+    'forks the isolation scope for %s root spans',
+    spanType => {
+      const span = new SentrySpan({ name: 'GET' });
+      const isolationScope = getIsolationScope();
+
+      maybeForkIsolationScopeForRootSpan(span, { [ATTR_NEXT_SPAN_TYPE]: spanType });
+
+      const forkedIsolationScope = getCapturedScopesOnSpan(span).isolationScope;
+      expect(forkedIsolationScope).toBeDefined();
+      expect(forkedIsolationScope).not.toBe(isolationScope);
+    },
+  );
+
+  it('does not fork the isolation scope for other span types', () => {
+    const span = new SentrySpan({ name: 'render' });
+
+    maybeForkIsolationScopeForRootSpan(span, { [ATTR_NEXT_SPAN_TYPE]: 'Render.getServerSideProps' });
+
+    expect(getCapturedScopesOnSpan(span).isolationScope).toBeUndefined();
+  });
+
+  it('does not fork the isolation scope for non-root spans', () => {
+    const rootSpan = new SentrySpan({ name: 'GET' });
+
+    withActiveSpan(rootSpan, () => {
+      startSpan({ name: 'middleware GET' }, childSpan => {
+        const isolationScopeBefore = getCapturedScopesOnSpan(childSpan).isolationScope;
+
+        maybeForkIsolationScopeForRootSpan(childSpan, { [ATTR_NEXT_SPAN_TYPE]: 'Middleware.execute' });
+
+        expect(getCapturedScopesOnSpan(childSpan).isolationScope).toBe(isolationScopeBefore);
+      });
+    });
+  });
+});
diff --git a/packages/nextjs/test/edge/beforeSampling.test.ts b/packages/nextjs/test/edge/beforeSampling.test.ts
index 1d2dc66bcf1c..6bc58b406d83 100644
--- a/packages/nextjs/test/edge/beforeSampling.test.ts
+++ b/packages/nextjs/test/edge/beforeSampling.test.ts
@@ -83,6 +83,21 @@ describe('edge beforeSampling handler', () => {
     });
   });
 
+  it('seeds normalizedRequest for Next.request root spans', () => {
+    beforeSamplingHandler!({
+      spanAttributes: {
+        [ATTR_NEXT_SPAN_TYPE]: 'Next.request',
+        'http.method': 'GET',
+        'http.target': '/behind-proxy',
+      },
+    });
+
+    expect(getNormalizedRequest()).toEqual({
+      method: 'GET',
+      url: '/behind-proxy',
+    });
+  });
+
   it('overwrites stale normalizedRequest from a previous invocation', () => {
     getIsolationScope().setSDKProcessingMetadata({
       normalizedRequest: { method: 'GET', url: '/previous-request' },

From a57560f58689673f5239bdcc5ca2e972769481f7 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 12:41:49 +0100
Subject: [PATCH 155/169] fix(sveltekit): Resolve Handle and ResolveOptions
 types on SvelteKit 3 (#26085)

**Why:** SvelteKit 3 moved `Handle` and `ResolveOptions` from
`@sveltejs/kit` to `@sveltejs/kit/hooks`. Our declarations still import
them from `@sveltejs/kit`, so on Kit 3 the import fails. With
`skipLibCheck`, `sentryHandle()` and `initCloudflareSentryHandle()` then
quietly return `any`. Kit 2 doesn't export these types from `/hooks`, so
no single import path works on both majors. Instead we take them from
`sequence`, which both majors export from `/hooks`.

Closes #25924

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../test-applications/sveltekit-3/package.json     |  3 ++-
 .../sveltekit-3/src/sentryTypes.ts                 | 12 ++++++++++++
 .../sveltekit-3/tsconfig.sentry-types.json         |  7 +++++++
 packages/sveltekit/src/server-common/handle.ts     |  2 +-
 .../sveltekit/src/server-common/handleTypes.ts     | 14 ++++++++++++++
 packages/sveltekit/src/server/handle.ts            |  2 +-
 packages/sveltekit/src/worker/cloudflare.ts        |  2 +-
 .../sveltekit/test/server-common/handle.test.ts    |  2 +-
 8 files changed, 39 insertions(+), 5 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/sveltekit-3/src/sentryTypes.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/sveltekit-3/tsconfig.sentry-types.json
 create mode 100644 packages/sveltekit/src/server-common/handleTypes.ts

diff --git a/dev-packages/e2e-tests/test-applications/sveltekit-3/package.json b/dev-packages/e2e-tests/test-applications/sveltekit-3/package.json
index 32ccc8e5fffd..6d6dd79531a7 100644
--- a/dev-packages/e2e-tests/test-applications/sveltekit-3/package.json
+++ b/dev-packages/e2e-tests/test-applications/sveltekit-3/package.json
@@ -10,8 +10,9 @@
     "clean": "npx rimraf node_modules pnpm-lock.yaml",
     "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
     "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
+    "check:sentry-types": "svelte-kit sync && tsc -p tsconfig.sentry-types.json",
     "test:prod": "TEST_ENV=production playwright test",
-    "test:build": "pnpm install && pnpm build",
+    "test:build": "pnpm install && pnpm check:sentry-types && pnpm build",
     "test:assert": "pnpm test:prod",
     "test:build:tunnel": "pnpm install && E2E_TEST_TUNNEL=1 PUBLIC_E2E_TEST_TUNNEL=1 E2E_TEST_DSN=http://public@localhost:3031/1337 PUBLIC_E2E_TEST_DSN=http://public@localhost:3031/1337 pnpm build",
     "test:assert:tunnel": "E2E_TEST_TUNNEL=1 PUBLIC_E2E_TEST_TUNNEL=1 E2E_TEST_DSN=http://public@localhost:3031/1337 PUBLIC_E2E_TEST_DSN=http://public@localhost:3031/1337 TEST_ENV=production playwright test tunnel",
diff --git a/dev-packages/e2e-tests/test-applications/sveltekit-3/src/sentryTypes.ts b/dev-packages/e2e-tests/test-applications/sveltekit-3/src/sentryTypes.ts
new file mode 100644
index 000000000000..c57f9fefd833
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/sveltekit-3/src/sentryTypes.ts
@@ -0,0 +1,12 @@
+import type * as Sentry from '@sentry/sveltekit';
+
+// If the SDK's declarations fail to resolve a SvelteKit type, `skipLibCheck` hides the error and
+// the type accepts anything. That unresolved type isn't caught by the usual `0 extends 1 & T` any
+// check, so test for a top type instead. Checked by `check:sentry-types` in `test:build`.
+type AcceptsAnything<T> = unknown extends T ? true : false;
+type ExpectFalse<T extends false> = T;
+
+export type SentryTypeChecks = [
+  ExpectFalse<AcceptsAnything<ReturnType<typeof Sentry.sentryHandle>>>,
+  ExpectFalse<AcceptsAnything<ReturnType<typeof Sentry.initCloudflareSentryHandle>>>,
+];
diff --git a/dev-packages/e2e-tests/test-applications/sveltekit-3/tsconfig.sentry-types.json b/dev-packages/e2e-tests/test-applications/sveltekit-3/tsconfig.sentry-types.json
new file mode 100644
index 000000000000..8dfbb473d959
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/sveltekit-3/tsconfig.sentry-types.json
@@ -0,0 +1,7 @@
+{
+  "extends": "./tsconfig.json",
+  "include": ["src/sentryTypes.ts"],
+  "compilerOptions": {
+    "noEmit": true
+  }
+}
diff --git a/packages/sveltekit/src/server-common/handle.ts b/packages/sveltekit/src/server-common/handle.ts
index c9ad219f9b86..f899ad926ed3 100644
--- a/packages/sveltekit/src/server-common/handle.ts
+++ b/packages/sveltekit/src/server-common/handle.ts
@@ -25,7 +25,7 @@ import {
   _INTERNAL_setManagedTunnelDefaults as setManagedTunnelDefaults,
 } from '@sentry/core/server';
 import { getTunnelBasePath } from '../common/tunnel';
-import type { Handle, ResolveOptions } from '@sveltejs/kit';
+import type { Handle, ResolveOptions } from './handleTypes';
 import { DEBUG_BUILD } from '../common/debug-build';
 import { getTracePropagationData, sendErrorToSentry } from './utils';
 import {
diff --git a/packages/sveltekit/src/server-common/handleTypes.ts b/packages/sveltekit/src/server-common/handleTypes.ts
new file mode 100644
index 000000000000..85ed1b420386
--- /dev/null
+++ b/packages/sveltekit/src/server-common/handleTypes.ts
@@ -0,0 +1,14 @@
+import type { sequence } from '@sveltejs/kit/hooks';
+
+/**
+ * SvelteKit's `Handle` type, on both SvelteKit 2.x and 3.
+ *
+ * SvelteKit 3 moved `Handle` and `ResolveOptions` from `@sveltejs/kit` to `@sveltejs/kit/hooks`,
+ * and SvelteKit 2 doesn't export them from `@sveltejs/kit/hooks`, so no named import resolves on
+ * both majors. An unresolved import silently turns the type into `any` for users with `skipLibCheck`.
+ * `sequence` lives in `@sveltejs/kit/hooks` on both majors and is typed with `Handle`.
+ */
+export type Handle = ReturnType<typeof sequence>;
+
+/** SvelteKit's `ResolveOptions` type, on both SvelteKit 2.x and 3. See {@link Handle}. */
+export type ResolveOptions = NonNullable<Parameters<Parameters<Handle>[0]['resolve']>[1]>;
diff --git a/packages/sveltekit/src/server/handle.ts b/packages/sveltekit/src/server/handle.ts
index da429bc1040f..bcde1e698331 100644
--- a/packages/sveltekit/src/server/handle.ts
+++ b/packages/sveltekit/src/server/handle.ts
@@ -1,5 +1,5 @@
 import type { CloudflareOptions } from '@sentry/cloudflare';
-import type { Handle } from '@sveltejs/kit';
+import type { Handle } from '../server-common/handleTypes';
 import { init } from './sdk';
 
 /**
diff --git a/packages/sveltekit/src/worker/cloudflare.ts b/packages/sveltekit/src/worker/cloudflare.ts
index f76450d64712..6496809c4ff1 100644
--- a/packages/sveltekit/src/worker/cloudflare.ts
+++ b/packages/sveltekit/src/worker/cloudflare.ts
@@ -5,7 +5,7 @@ import {
   setAsyncLocalStorageAsyncContextStrategy,
 } from '@sentry/cloudflare';
 import { addNonEnumerableProperty } from '@sentry/core';
-import type { Handle } from '@sveltejs/kit';
+import type { Handle } from '../server-common/handleTypes';
 import { rewriteFramesIntegration } from '../server-common/integrations/rewriteFramesIntegration';
 import { svelteKitSpansIntegration } from '../server-common/integrations/svelteKitSpans';
 import { getCloudflareExecutionContext } from '../server-common/utils';
diff --git a/packages/sveltekit/test/server-common/handle.test.ts b/packages/sveltekit/test/server-common/handle.test.ts
index 1cfb18963193..4a4fd545f738 100644
--- a/packages/sveltekit/test/server-common/handle.test.ts
+++ b/packages/sveltekit/test/server-common/handle.test.ts
@@ -5,7 +5,7 @@ import * as SentryCore from '@sentry/core';
 import { NodeClient, serveTunnelIntegration, setCurrentClient } from '@sentry/node';
 import { _INTERNAL_resetManagedTunnelDefaults } from '@sentry/core/server';
 import { TUNNEL_BASE_PATH_GLOBAL } from '../../src/common/tunnel';
-import type { Handle } from '@sveltejs/kit';
+import type { Handle } from '../../src/server-common/handleTypes';
 import { redirect } from '@sveltejs/kit';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import {

From 4d8517141eed2d2a2ed2a14918112d68d0a90cbd Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Wed, 4 Nov 2026 12:53:35 +0100
Subject: [PATCH 156/169] feat(server-utils): Extract `getSqlSpanName` for SQL
 span names (#25929)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

TLDR: This PR introduces a helper to build db span names based on[
semantic
conventions](https://getsentry.github.io/sentry-conventions/names/#db).
This should make it more consistent and easier to use this in the
future.

**Why:** We used to repeat more or less the same code in various places
for building span names. Most places have a branch for legacy
high-cardinality names (transactions) and low-cardinality names
(streamed spans). New utilities help with that. Note that new
integrations (like neon) should use the low-cardinality version only.

**How to review:** `getSqlSpanName` in `utils/sql.ts`, then skim the
callsites, which now build their attributes before naming the span.
Behavior changes, all limited to edge cases or improvements:

- **Knex** drops its custom fallbacks (operation/table/database). They
only applied to queries without SQL, which knex practically never
produces, and the operation and table stay on the span as attributes.
- **Nuxt**'s streamed fallback now uses `db.system.name` before
`'Database operation'`.
- **postgres.js** (diagnostics channel) sets its resolved connection
attributes at span start, so the namespace is available for the name.
- **Prisma** only routes `db_query` spans through the helper; every
other Prisma span keeps its own name, even when it carries db attributes
(e.g. v5's `prisma:engine:connection` has `db.system`). For `db_query`
spans:
  - Streamed names are unchanged (`db.query.summary` first).
- Non-streamed names on Prisma 5 now use the sanitized `db.query.text`
(backfilled in #25927) instead of the raw `db.statement`, so literals no
longer end up in span names, e.g. `… WHERE 1=1 …` becomes `… WHERE ?=?
…`. Prisma 6+ already uses Prisma's own `db.query.text`, so nothing
changes there.
- A streamed `db_query` span with no SQL at all would now fall back to
`db.namespace`/`db.system.name` before the Prisma span name. Prisma
doesn't emit query spans without SQL in practice.

**Unsure about:** Tedious keeps its own names on purpose (see the
comment there): bulk loads and procedure calls have no statement, and
operation-based names say more than the namespace.

Stacked on #25927.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../scenario-multiple-endpoints.mjs           |  29 ++++
 .../suites/tracing/postgresjs/test.ts         |  36 +++++
 .../src/runtime/utils/instrumentDatabase.ts   |  30 ++--
 packages/server-utils/src/exports.ts          |   2 +-
 .../server-utils/src/integrations/knex.ts     |  54 +------
 .../server-utils/src/integrations/mysql.ts    |  55 +++----
 .../src/integrations/mysql2/index.ts          |  44 ++----
 .../mysql2/mysql2-dc-subscriber.ts            |  37 ++---
 .../server-utils/src/integrations/neon.ts     |  30 ++--
 packages/server-utils/src/integrations/pg.ts  |  38 ++---
 .../src/integrations/postgresjs-wrapper.ts    | 140 ++++++++----------
 .../src/integrations/postgresjs.ts            |  88 +++--------
 .../src/integrations/prisma/tracing-helper.ts |  31 ++--
 .../server-utils/src/integrations/tedious.ts  |   3 +
 packages/server-utils/src/utils/sql.ts        |  52 +++++--
 .../test/integrations/prisma.test.ts          |  38 ++++-
 packages/server-utils/test/utils/sql.test.ts  |  85 ++++++++++-
 17 files changed, 406 insertions(+), 386 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs/scenario-multiple-endpoints.mjs

diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs/scenario-multiple-endpoints.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs/scenario-multiple-endpoints.mjs
new file mode 100644
index 000000000000..f7d9c9cd552c
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs/scenario-multiple-endpoints.mjs
@@ -0,0 +1,29 @@
+import * as Sentry from '@sentry/node';
+import postgres from 'postgres';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+
+const TEST_DB_URL = 'postgres://test:test@localhost:5444/test_db';
+
+// Both clients are created up front: with two known endpoints there is no single-endpoint fallback,
+// so the connection attributes can only come from the connection each query actually runs on.
+const testDbSql = postgres(TEST_DB_URL);
+const postgresDbSql = postgres('postgres://test:test@localhost:5444/postgres');
+
+async function run() {
+  const probeSql = postgres(TEST_DB_URL, { max: 1 });
+  await waitForConnection(() => probeSql`SELECT 1`);
+  await probeSql.end();
+
+  await Sentry.startSpan({ name: 'Test Transaction', op: 'transaction' }, async () => {
+    try {
+      await testDbSql`SELECT 1 AS test_db_new_connection`;
+      await testDbSql`SELECT 1 AS test_db_open_connection`;
+      await postgresDbSql`SELECT 1 AS postgres_db_new_connection`;
+      await postgresDbSql`SELECT 1 AS postgres_db_open_connection`;
+    } finally {
+      await Promise.all([testDbSql.end(), postgresDbSql.end()]);
+    }
+  });
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs/test.ts b/dev-packages/node-integration-tests/suites/tracing/postgresjs/test.ts
index 8467dbfdaba1..61f9bc73a4ef 100644
--- a/dev-packages/node-integration-tests/suites/tracing/postgresjs/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs/test.ts
@@ -516,6 +516,42 @@ describeWithDockerCompose('postgresjs auto instrumentation', { workingDirectory:
     });
   });
 
+  describe('multiple endpoints', () => {
+    createEsmAndCjsTests(
+      __dirname,
+      'scenario-multiple-endpoints.mjs',
+      'instrument.mjs',
+      (createTestRunner, test, mode) => {
+        test.runIf(mode === 'esm' || supports({ runtimes: ['node', 'deno'] }))(
+          'should set the connection attributes of the endpoint each query ran on',
+          { timeout: 90_000 },
+          async () => {
+            let receivedSpans: SerializedStreamedSpanContainer['items'] = [];
+            await createTestRunner()
+              .expect({
+                span: container => {
+                  receivedSpans = container.items;
+                },
+              })
+              .unordered()
+              .start()
+              .completed();
+
+            const getNamespace = (alias: string): unknown =>
+              receivedSpans.find(span => String(span.attributes[DB_QUERY_TEXT]?.value).includes(alias))?.attributes[
+                DB_NAMESPACE
+              ];
+
+            expect(getNamespace('test_db_new_connection')).toEqual({ type: 'string', value: 'test_db' });
+            expect(getNamespace('test_db_open_connection')).toEqual({ type: 'string', value: 'test_db' });
+            expect(getNamespace('postgres_db_new_connection')).toEqual({ type: 'string', value: 'postgres' });
+            expect(getNamespace('postgres_db_open_connection')).toEqual({ type: 'string', value: 'postgres' });
+          },
+        );
+      },
+    );
+  });
+
   describe('sql.unsafe()', () => {
     const EXPECTED_SPANS = {
       items: expect.arrayContaining([
diff --git a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
index 946a09146723..6dc9a4d84818 100644
--- a/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
+++ b/packages/nuxt/src/runtime/utils/instrumentDatabase.ts
@@ -5,18 +5,17 @@ import {
   captureException,
   DB_SPAN_NAME_FALLBACK,
   debug,
-  getClient,
-  hasSpanStreamingEnabled,
   type Span,
+  type SpanAttributes,
   SPAN_STATUS_ERROR,
   startSpan,
   type StartSpanOptions,
 } from '@sentry/core';
 import { flushIfServerless } from '@sentry/core/server';
-import { getSqlQueryAttributes, sanitizeSqlQuery, type SqlDialect } from '@sentry/server-utils';
+import { getSqlQueryAttributes, getSqlSpanName, sanitizeSqlQuery, type SqlDialect } from '@sentry/server-utils';
 import type { Database, PreparedStatement } from 'db0';
 import { type DatabaseConnectionConfig, type DatabaseSpanData, getDatabaseSpanData } from './database-span-data';
-import { DB_NAMESPACE, DB_QUERY_SUMMARY, DB_QUERY_TEXT, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
+import { DB_QUERY_TEXT, DB_SYSTEM_NAME } from '@sentry/conventions/attributes';
 
 type MaybeInstrumentedDatabase = Database & {
   __sentry_instrumented__?: boolean;
@@ -261,21 +260,12 @@ function createStartSpanOptions(
   data: DatabaseSpanData,
   dialect: SqlDialect | undefined,
 ): StartSpanOptions {
-  const queryAttributes = getSqlQueryAttributes(query, dialect);
-
-  const client = getClient();
-  const name =
-    client && hasSpanStreamingEnabled(client)
-      ? queryAttributes[DB_QUERY_SUMMARY] || (data[DB_NAMESPACE] as string | undefined) || DB_SPAN_NAME_FALLBACK
-      : (queryAttributes[DB_QUERY_TEXT] ?? DB_SPAN_NAME_FALLBACK);
-
-  return {
-    name,
-    attributes: {
-      ...queryAttributes,
-      [SENTRY_ORIGIN]: NUXT_DATABASE_ORIGIN,
-      [SENTRY_OP]: DB_QUERY,
-      ...data,
-    },
+  const attributes: SpanAttributes = {
+    ...getSqlQueryAttributes(query, dialect),
+    [SENTRY_ORIGIN]: NUXT_DATABASE_ORIGIN,
+    [SENTRY_OP]: DB_QUERY,
+    ...data,
   };
+
+  return { name: getSqlSpanName(attributes, DB_SPAN_NAME_FALLBACK), attributes };
 }
diff --git a/packages/server-utils/src/exports.ts b/packages/server-utils/src/exports.ts
index 02c2b1393338..7b36665f97cd 100644
--- a/packages/server-utils/src/exports.ts
+++ b/packages/server-utils/src/exports.ts
@@ -3,7 +3,7 @@ export { setHttpServerSpanRouteAttribute } from './utils/setHttpServerSpanRouteA
 export { setAsyncLocalStorageAsyncContextStrategy } from './async-context';
 export { openTelemetryIntegration, getOtlpTracesEndpoint } from './opentelemetry';
 export * from './ai';
-export { getSqlQuerySummary, sanitizeSqlQuery, getSqlQueryAttributes } from './utils/sql';
+export { getSqlQuerySummary, sanitizeSqlQuery, getSqlQueryAttributes, getSqlSpanName } from './utils/sql';
 export type { SqlDialect } from './utils/sql';
 export { instrumentPostgresJsSql } from './integrations/postgresjs-wrapper';
 export type { PostgresConnectionContext } from './integrations/postgresjs-wrapper';
diff --git a/packages/server-utils/src/integrations/knex.ts b/packages/server-utils/src/integrations/knex.ts
index 4fce7d37673e..ed1b36ba4f80 100644
--- a/packages/server-utils/src/integrations/knex.ts
+++ b/packages/server-utils/src/integrations/knex.ts
@@ -8,8 +8,6 @@ import {
   debug,
   defineIntegration,
   getActiveSpan,
-  getClient,
-  hasSpanStreamingEnabled,
   SPAN_STATUS_ERROR,
   startInactiveSpan,
   truncate,
@@ -18,8 +16,6 @@ import {
 import {
   DB_NAMESPACE,
   DB_OPERATION_NAME,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   DB_USER,
   NETWORK_TRANSPORT,
@@ -34,7 +30,7 @@ import { DEBUG_BUILD } from '../debug-build';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
-import { getSqlQueryAttributes, toSqlDialect } from '../utils/sql';
+import { getSqlQueryAttributes, getSqlSpanName, toSqlDialect } from '../utils/sql';
 
 // NOTE: this uses the same name as the OTel integration by design. `@sentry/node`'s `knexIntegration`
 // picks this subscriber over the vendored OTel path when orchestrion injection is active.
@@ -165,15 +161,11 @@ function subscribeQuery(): void {
       const dbSystem = mapSystem(client?.driverName);
 
       const dialect = toSqlDialect(client?.driverName);
-      const queryAttributes = getSqlQueryAttributes(
-        query?.sql ? truncate(query.sql, MAX_QUERY_LENGTH) : undefined,
-        dialect,
-      );
       const attributes: SpanAttributes = {
         [SENTRY_OP]: DB,
         [SENTRY_KIND]: 'client',
         [SENTRY_ORIGIN]: ORIGIN,
-        ...queryAttributes,
+        ...getSqlQueryAttributes(query?.sql ? truncate(query.sql, MAX_QUERY_LENGTH) : undefined, dialect),
         'knex.version': data.moduleVersion,
         [DB_SYSTEM_NAME]: dbSystem,
         [ATTR_DB_SQL_TABLE]: table,
@@ -185,14 +177,8 @@ function subscribeQuery(): void {
         [NETWORK_TRANSPORT]: connection?.filename === ':memory:' ? 'inproc' : undefined,
       };
 
-      const sentryClient = getClient();
-      const spanName =
-        sentryClient && hasSpanStreamingEnabled(sentryClient)
-          ? queryAttributes[DB_QUERY_SUMMARY] || getSecondaryStreamName(dbSystem, dbNameSpace, operation, table)
-          : (queryAttributes[DB_QUERY_TEXT] ?? getName(dbNameSpace, operation, table) ?? 'knex.query');
-
       return startInactiveSpan({
-        name: spanName,
+        name: getSqlSpanName(attributes, 'knex.query'),
         parentSpan,
         attributes,
       });
@@ -261,40 +247,6 @@ function mapSystem(driverName: string | undefined): string | undefined {
   return driverName;
 }
 
-function getName(db: string | undefined, operation?: string, table?: string): string | undefined {
-  // `db` can be undefined when the database can't be determined from the knex config. Guard against
-  // interpolating it (which would emit the literal "undefined") and let the call site fall back.
-  if (operation && db) {
-    return table ? `${operation} ${db}.${table}` : `${operation} ${db}`;
-  }
-  return db;
-}
-
-function getSecondaryStreamName(
-  dbSystem: string | undefined,
-  dbNameSpace: string | undefined,
-  operation?: string,
-  table?: string,
-): string {
-  if (operation) {
-    if (table) {
-      return `${operation} ${table}`;
-    }
-    if (dbNameSpace) {
-      return `${operation} ${dbNameSpace}`;
-    }
-  }
-  if (table) {
-    return table;
-  }
-  if (dbNameSpace) {
-    return dbNameSpace;
-  }
-  // Mirrors the postgres integration, which falls back to `{db.system.name}` rather than to a static
-  // name. `db.system.name` is only unset when the knex client reports no driver.
-  return dbSystem ?? 'knex.query';
-}
-
 function extractTableName(builder: KnexBuilder | undefined): string | undefined {
   const table = builder?._single?.table;
   if (table && typeof table === 'object') {
diff --git a/packages/server-utils/src/integrations/mysql.ts b/packages/server-utils/src/integrations/mysql.ts
index 2d7105005ec1..32c2f6809b36 100644
--- a/packages/server-utils/src/integrations/mysql.ts
+++ b/packages/server-utils/src/integrations/mysql.ts
@@ -1,8 +1,6 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   DB_USER,
   SENTRY_KIND,
@@ -13,17 +11,9 @@ import {
   DB_CONNECTION_STRING,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
-import type { IntegrationFn, Scope } from '@sentry/core';
-import {
-  isObjectLike,
-  bindScopeToEmitter,
-  defineIntegration,
-  getClient,
-  getCurrentScope,
-  hasSpanStreamingEnabled,
-  startInactiveSpan,
-} from '@sentry/core';
-import { getSqlQueryAttributes } from '../utils/sql';
+import type { IntegrationFn, Scope, SpanAttributes } from '@sentry/core';
+import { isObjectLike, bindScopeToEmitter, defineIntegration, getCurrentScope, startInactiveSpan } from '@sentry/core';
+import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
@@ -81,30 +71,21 @@ function instrumentMysql(): void {
       // handler with the caller's context lost. `deferSpanEnd` replays this scope onto the emitter.
       data._sentryCallerScope = getCurrentScope();
 
-      const queryAttributes = getSqlQueryAttributes(sql, 'mysql');
-
-      const client = getClient();
-      const name =
-        client && hasSpanStreamingEnabled(client)
-          ? queryAttributes[DB_QUERY_SUMMARY] || database || DB_SYSTEM_NAME_VALUE_MYSQL
-          : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql.query');
-
-      return startInactiveSpan({
-        name,
-        attributes: {
-          [SENTRY_OP]: DB,
-          [SENTRY_KIND]: 'client',
-          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
-          [SENTRY_ORIGIN]: 'auto.db.mysql',
-          // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
-          [DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
-          [DB_NAMESPACE]: database,
-          [DB_USER]: user,
-          ...queryAttributes,
-          [SERVER_ADDRESS]: host,
-          [SERVER_PORT]: portIsNumber ? portNumber : undefined,
-        },
-      });
+      const attributes: SpanAttributes = {
+        [SENTRY_OP]: DB,
+        [SENTRY_KIND]: 'client',
+        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
+        [SENTRY_ORIGIN]: 'auto.db.mysql',
+        // oxlint-disable-next-line typescript/no-deprecated -- Preserve the existing attribute name.
+        [DB_CONNECTION_STRING]: getJDBCString(host, portIsNumber ? portNumber : undefined, database),
+        [DB_NAMESPACE]: database,
+        [DB_USER]: user,
+        ...getSqlQueryAttributes(sql, 'mysql'),
+        [SERVER_ADDRESS]: host,
+        [SERVER_PORT]: portIsNumber ? portNumber : undefined,
+      };
+
+      return startInactiveSpan({ name: getSqlSpanName(attributes, 'mysql.query'), attributes });
     },
     {
       // No-callback `query(sql)` returns a streamable `Query` emitter as `result`; it settles on the
diff --git a/packages/server-utils/src/integrations/mysql2/index.ts b/packages/server-utils/src/integrations/mysql2/index.ts
index 45b04f1797c5..7fde6937a09c 100644
--- a/packages/server-utils/src/integrations/mysql2/index.ts
+++ b/packages/server-utils/src/integrations/mysql2/index.ts
@@ -1,14 +1,7 @@
 import * as diagnosticsChannel from '../../utils/diagnosticsChannel';
 import type { IntegrationFn, SpanAttributes } from '@sentry/core';
-import {
-  defineIntegration,
-  getClient,
-  hasSpanStreamingEnabled,
-  isObjectLike,
-  startInactiveSpan,
-  waitForTracingChannelBinding,
-} from '@sentry/core';
-import { getSqlQueryAttributes } from '../../utils/sql';
+import { defineIntegration, isObjectLike, startInactiveSpan, waitForTracingChannelBinding } from '@sentry/core';
+import { getSqlQueryAttributes, getSqlSpanName } from '../../utils/sql';
 import { subscribeMysql2DiagnosticChannels } from './mysql2-dc-subscriber';
 import type { OrchestrionChannelContext } from '../../orchestrion/types';
 import type { ChannelName } from '../../orchestrion/channels';
@@ -18,8 +11,6 @@ import { mysql2ModuleNames } from '../../orchestrion/config/mysql2';
 import { invokeOrchestrionInstrumentation } from '../../orchestrion/instrumentation';
 import {
   DB_NAMESPACE,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   DB_USER,
   SENTRY_KIND,
@@ -76,29 +67,16 @@ function instrumentMysql2Orchestrion(): void {
 function subscribeQueryChannel(channelName: ChannelName): void {
   bindTracingChannelToSpan(diagnosticsChannel.tracingChannel<Mysql2QueryChannelContext>(channelName), data => {
     const statement = getQueryText(data.arguments);
-    const connectionAttributes = getConnectionAttributes(data.self?.config);
-    const queryAttributes = getSqlQueryAttributes(statement, 'mysql');
-
-    const client = getClient();
-    const name =
-      client && hasSpanStreamingEnabled(client)
-        ? queryAttributes[DB_QUERY_SUMMARY] ||
-          (connectionAttributes[DB_NAMESPACE] as string | undefined) ||
-          DB_SYSTEM_VALUE_MYSQL
-        : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql2.query');
+    const attributes: SpanAttributes = {
+      [SENTRY_KIND]: 'client',
+      [SENTRY_ORIGIN]: ORIGIN,
+      [SENTRY_OP]: DB,
+      [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
+      ...getSqlQueryAttributes(statement, 'mysql'),
+      ...getConnectionAttributes(data.self?.config),
+    };
 
-    return startInactiveSpan({
-      name,
-      onlyIfParent: true,
-      attributes: {
-        [SENTRY_KIND]: 'client',
-        [SENTRY_ORIGIN]: ORIGIN,
-        [SENTRY_OP]: DB,
-        [DB_SYSTEM_NAME]: DB_SYSTEM_VALUE_MYSQL,
-        ...queryAttributes,
-        ...connectionAttributes,
-      },
-    });
+    return startInactiveSpan({ name: getSqlSpanName(attributes, 'mysql2.query'), attributes, onlyIfParent: true });
   });
 }
 
diff --git a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
index 2377c0681fd6..e09481e51a66 100644
--- a/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
+++ b/packages/server-utils/src/integrations/mysql2/mysql2-dc-subscriber.ts
@@ -1,8 +1,6 @@
 import type { TracingChannel } from 'node:diagnostics_channel';
 import {
   DB_NAMESPACE,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   SENTRY_OP,
   SERVER_ADDRESS,
@@ -10,9 +8,10 @@ import {
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
-import { getClient, hasSpanStreamingEnabled, startInactiveSpan } from '@sentry/core';
+import type { SpanAttributes } from '@sentry/core';
+import { startInactiveSpan } from '@sentry/core';
 import { bindTracingChannelToSpan } from '../../tracing-channel';
-import { getSqlQueryAttributes } from '../../utils/sql';
+import { getSqlQueryAttributes, getSqlSpanName } from '../../utils/sql';
 
 // Channel names published by mysql2 >= 3.20.0 (see mysql2 `lib/tracing.js`).
 // Hardcoded so the subscriber does not have to import mysql2 — the channels
@@ -92,27 +91,17 @@ function setupQueryChannel(tracingChannel: MySQL2TracingChannelFactory, channelN
     // mysql2 does not sanitize its channel payload, so the statement may carry
     // raw user values (on the `query` channel they are inlined). Strip every
     // literal before it leaves the process; `values` is never attached.
-    const queryAttributes = getSqlQueryAttributes(data.query, 'mysql');
+    const attributes: SpanAttributes = {
+      [SENTRY_ORIGIN]: ORIGIN,
+      [SENTRY_OP]: DB,
+      [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
+      ...getSqlQueryAttributes(data.query, 'mysql'),
+      [DB_NAMESPACE]: data.database || undefined,
+      [SERVER_ADDRESS]: data.serverAddress,
+      [SERVER_PORT]: data.serverPort,
+    };
 
-    const client = getClient();
-    const name =
-      client && hasSpanStreamingEnabled(client)
-        ? queryAttributes[DB_QUERY_SUMMARY] || data.database || DB_SYSTEM_NAME_VALUE_MYSQL
-        : (queryAttributes[DB_QUERY_TEXT] ?? 'mysql2.query');
-
-    return startInactiveSpan({
-      name,
-      onlyIfParent: true,
-      attributes: {
-        [SENTRY_ORIGIN]: ORIGIN,
-        [SENTRY_OP]: DB,
-        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_VALUE_MYSQL,
-        ...queryAttributes,
-        [DB_NAMESPACE]: data.database || undefined,
-        [SERVER_ADDRESS]: data.serverAddress,
-        [SERVER_PORT]: data.serverPort,
-      },
-    });
+    return startInactiveSpan({ name: getSqlSpanName(attributes, 'mysql2.query'), attributes, onlyIfParent: true });
   });
 }
 
diff --git a/packages/server-utils/src/integrations/neon.ts b/packages/server-utils/src/integrations/neon.ts
index 1dd3eeceb468..187d0e532295 100644
--- a/packages/server-utils/src/integrations/neon.ts
+++ b/packages/server-utils/src/integrations/neon.ts
@@ -10,9 +10,9 @@ import {
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
-import type { IntegrationFn, Span } from '@sentry/core';
+import type { IntegrationFn, Span, SpanAttributes } from '@sentry/core';
 import { defineIntegration, getActiveSpan, startInactiveSpan } from '@sentry/core';
-import { getSqlQueryAttributes } from '../utils/sql';
+import { getLowCardinalitySqlSpanName, getSqlQueryAttributes } from '../utils/sql';
 import { CHANNELS } from '../orchestrion/channels';
 import { neonModuleNames } from '../orchestrion/config/neon';
 import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
@@ -104,22 +104,18 @@ function httpQuerySpanOptions(args: unknown[]): Parameters<typeof startInactiveS
   const querySummary = joinDefined(statements.map(s => s[DB_QUERY_SUMMARY]));
   const operationName =
     batchSize === undefined ? statements[0]?.[DB_OPERATION_NAME] : getBatchOperationName(statements);
-  const name = querySummary || DB_SYSTEM_POSTGRESQL;
-
-  return {
-    name,
-    onlyIfParent: true,
-    attributes: {
-      [SENTRY_OP]: DB,
-      [SENTRY_ORIGIN]: ORIGIN,
-      [SENTRY_KIND]: 'client',
-      [DB_SYSTEM_NAME]: DB_SYSTEM_POSTGRESQL,
-      [DB_QUERY_TEXT]: queryText || undefined,
-      [DB_QUERY_SUMMARY]: querySummary,
-      [DB_OPERATION_NAME]: operationName,
-      [DB_OPERATION_BATCH_SIZE]: batchSize,
-    },
+  const attributes: SpanAttributes = {
+    [SENTRY_OP]: DB,
+    [SENTRY_ORIGIN]: ORIGIN,
+    [SENTRY_KIND]: 'client',
+    [DB_SYSTEM_NAME]: DB_SYSTEM_POSTGRESQL,
+    [DB_QUERY_TEXT]: queryText || undefined,
+    [DB_QUERY_SUMMARY]: querySummary,
+    [DB_OPERATION_NAME]: operationName,
+    [DB_OPERATION_BATCH_SIZE]: batchSize,
   };
+
+  return { name: getLowCardinalitySqlSpanName(attributes, DB_SYSTEM_POSTGRESQL), onlyIfParent: true, attributes };
 }
 
 // OTel names a batch `BATCH <op>` when every statement shares one operation, plain `BATCH` otherwise.
diff --git a/packages/server-utils/src/integrations/pg.ts b/packages/server-utils/src/integrations/pg.ts
index 182d4f2752cf..24f648d92acb 100644
--- a/packages/server-utils/src/integrations/pg.ts
+++ b/packages/server-utils/src/integrations/pg.ts
@@ -1,8 +1,6 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_NAMESPACE,
-  DB_QUERY_SUMMARY,
-  DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   DB_USER,
   SENTRY_KIND,
@@ -14,16 +12,8 @@ import {
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Scope, SpanAttributes } from '@sentry/core';
-import {
-  isObjectLike,
-  bindScopeToEmitter,
-  defineIntegration,
-  getClient,
-  getCurrentScope,
-  hasSpanStreamingEnabled,
-  startInactiveSpan,
-} from '@sentry/core';
-import { getSqlQueryAttributes } from '../utils/sql';
+import { isObjectLike, bindScopeToEmitter, defineIntegration, getCurrentScope, startInactiveSpan } from '@sentry/core';
+import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
 import { bindTracingChannelToSpan } from '../tracing-channel';
@@ -188,23 +178,15 @@ function querySpanOptions(
 ): { name: string; attributes: SpanAttributes } {
   const params = (ctx.self as { connectionParameters?: PgConnectionParams } | undefined)?.connectionParameters ?? {};
   const queryConfig = extractQueryConfig(ctx.arguments);
-  const client = getClient();
-  const queryAttributes = getSqlQueryAttributes(queryConfig?.text);
-  const name =
-    client && hasSpanStreamingEnabled(client)
-      ? queryAttributes[DB_QUERY_SUMMARY] || params.database || DB_SYSTEM_POSTGRESQL
-      : (queryAttributes[DB_QUERY_TEXT] ?? SPAN_QUERY_FALLBACK);
-
-  return {
-    name,
-    attributes: {
-      [SENTRY_OP]: DB,
-      ...(connectionString ? getPgConnectionAttributes(params) : getConnectionAttributes(params)),
-      [SENTRY_ORIGIN]: origin,
-      ...queryAttributes,
-      [ATTR_PG_PLAN]: typeof queryConfig?.name === 'string' ? queryConfig.name : undefined,
-    },
+  const attributes: SpanAttributes = {
+    [SENTRY_OP]: DB,
+    ...(connectionString ? getPgConnectionAttributes(params) : getConnectionAttributes(params)),
+    [SENTRY_ORIGIN]: origin,
+    ...getSqlQueryAttributes(queryConfig?.text),
+    [ATTR_PG_PLAN]: typeof queryConfig?.name === 'string' ? queryConfig.name : undefined,
   };
+
+  return { name: getSqlSpanName(attributes, SPAN_QUERY_FALLBACK), attributes };
 }
 
 function connectSpanOptions(ctx: PgChannelContext): { name: string; attributes: SpanAttributes } {
diff --git a/packages/server-utils/src/integrations/postgresjs-wrapper.ts b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
index 3b42f0c80f50..24e651027aac 100644
--- a/packages/server-utils/src/integrations/postgresjs-wrapper.ts
+++ b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
@@ -6,8 +6,6 @@
 import {
   debug,
   getActiveSpan,
-  getClient,
-  hasSpanStreamingEnabled,
   isObjectLike,
   type Span,
   type SpanAttributes,
@@ -15,11 +13,10 @@ import {
   startSpanManual,
 } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQueryAttributes } from '../utils/sql';
+import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
 import {
   DB_NAMESPACE,
   DB_OPERATION_NAME,
-  DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   SENTRY_OP,
@@ -247,89 +244,78 @@ function _wrapSingleQueryHandle(
     const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
     const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
 
-    const client = getClient();
-
     const connectionContext = sqlInstance
       ? ((sqlInstance as Record<symbol, unknown>)[CONNECTION_CONTEXT_SYMBOL] as PostgresConnectionContext | undefined)
       : undefined;
 
-    const name =
-      client && hasSpanStreamingEnabled(client)
-        ? queryAttributes[DB_QUERY_SUMMARY] || connectionContext?.ATTR_DB_NAMESPACE || 'postgres'
-        : sanitizedSqlQuery || 'postgresjs.query';
-
-    return startSpanManual(
-      {
-        name,
-        attributes: {
-          [SENTRY_OP]: DB,
-          [SENTRY_ORIGIN]: 'auto.db.postgresjs',
-          [DB_SYSTEM_NAME]: 'postgres',
-          ...queryAttributes,
-          ...(connectionContext && _getConnectionAttributes(connectionContext)),
-        },
-      },
-      (span: Span) => {
-        if (options.requestHook) {
+    const attributes: SpanAttributes = {
+      [SENTRY_OP]: DB,
+      [SENTRY_ORIGIN]: 'auto.db.postgresjs',
+      [DB_SYSTEM_NAME]: 'postgres',
+      ...queryAttributes,
+      ...(connectionContext && _getConnectionAttributes(connectionContext)),
+    };
+
+    return startSpanManual({ name: getSqlSpanName(attributes, 'postgresjs.query'), attributes }, (span: Span) => {
+      if (options.requestHook) {
+        try {
+          options.requestHook(span, sanitizedSqlQuery, connectionContext);
+        } catch (e) {
+          span.setAttribute('sentry.hook.error', 'requestHook failed');
+          DEBUG_BUILD && debug.error('Error in requestHook for PostgresJs instrumentation:', e);
+        }
+      }
+
+      const queryWithCallbacks = this as {
+        resolve: unknown;
+        reject: unknown;
+      };
+
+      queryWithCallbacks.resolve = new Proxy(queryWithCallbacks.resolve as (...args: unknown[]) => unknown, {
+        apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
           try {
-            options.requestHook(span, sanitizedSqlQuery, connectionContext);
+            // Re-set the operation name with the server-reported command, which is more reliable than the query text.
+            span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
+            span.end();
           } catch (e) {
-            span.setAttribute('sentry.hook.error', 'requestHook failed');
-            DEBUG_BUILD && debug.error('Error in requestHook for PostgresJs instrumentation:', e);
+            DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
           }
-        }
 
-        const queryWithCallbacks = this as {
-          resolve: unknown;
-          reject: unknown;
-        };
-
-        queryWithCallbacks.resolve = new Proxy(queryWithCallbacks.resolve as (...args: unknown[]) => unknown, {
-          apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
-            try {
-              // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-              span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
-              span.end();
-            } catch (e) {
-              DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
-            }
-
-            return Reflect.apply(resolveTarget, resolveThisArg, resolveArgs);
-          },
-        });
+          return Reflect.apply(resolveTarget, resolveThisArg, resolveArgs);
+        },
+      });
 
-        queryWithCallbacks.reject = new Proxy(queryWithCallbacks.reject as (...args: unknown[]) => unknown, {
-          apply: (rejectTarget, rejectThisArg, rejectArgs: { message?: string; code?: string; name?: string }[]) => {
-            try {
-              span.setStatus({
-                code: SPAN_STATUS_ERROR,
-                message: rejectArgs?.[0]?.message || 'unknown_error',
-              });
-
-              span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
-              span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
-
-              span.end();
-            } catch (e) {
-              DEBUG_BUILD && debug.error('Error ending span in reject callback:', e);
-            }
-            return Reflect.apply(rejectTarget, rejectThisArg, rejectArgs);
-          },
-        });
+      queryWithCallbacks.reject = new Proxy(queryWithCallbacks.reject as (...args: unknown[]) => unknown, {
+        apply: (rejectTarget, rejectThisArg, rejectArgs: { message?: string; code?: string; name?: string }[]) => {
+          try {
+            span.setStatus({
+              code: SPAN_STATUS_ERROR,
+              message: rejectArgs?.[0]?.message || 'unknown_error',
+            });
 
-        // Handle synchronous errors that might occur before promise is created
-        try {
-          return originalHandle.apply(this, args);
-        } catch (e) {
-          span.setStatus({
-            code: SPAN_STATUS_ERROR,
-            message: e instanceof Error ? e.message : 'unknown_error',
-          });
-          span.end();
-          throw e;
-        }
-      },
-    );
+            span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
+            span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
+
+            span.end();
+          } catch (e) {
+            DEBUG_BUILD && debug.error('Error ending span in reject callback:', e);
+          }
+          return Reflect.apply(rejectTarget, rejectThisArg, rejectArgs);
+        },
+      });
+
+      // Handle synchronous errors that might occur before promise is created
+      try {
+        return originalHandle.apply(this, args);
+      } catch (e) {
+        span.setStatus({
+          code: SPAN_STATUS_ERROR,
+          message: e instanceof Error ? e.message : 'unknown_error',
+        });
+        span.end();
+        throw e;
+      }
+    });
   };
 
   (wrappedHandle as { __sentryWrapped?: boolean }).__sentryWrapped = true;
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs.ts
index 2cc11f64bf75..d67ef48c175a 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs.ts
@@ -1,7 +1,6 @@
 import * as diagnosticsChannel from '../utils/diagnosticsChannel';
 import {
   DB_OPERATION_NAME,
-  DB_QUERY_SUMMARY,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
   ERROR_TYPE,
@@ -11,17 +10,10 @@ import {
   DB_RESPONSE_STATUS_CODE,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
-import type { IntegrationFn, Span } from '@sentry/core';
-import {
-  debug,
-  defineIntegration,
-  getClient,
-  hasSpanStreamingEnabled,
-  SPAN_STATUS_ERROR,
-  startInactiveSpan,
-} from '@sentry/core';
+import type { IntegrationFn, Span, SpanAttributes } from '@sentry/core';
+import { debug, defineIntegration, SPAN_STATUS_ERROR, startInactiveSpan } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQueryAttributes } from '../utils/sql';
+import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
 import {
   _buildConnectionContext,
   _getConnectionAttributes,
@@ -50,9 +42,6 @@ const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.s
 // The query span, stashed on the `Query` so the `execute`/`connect` channels can
 // attach connection attributes to it.
 const QUERY_SPAN = Symbol('sentryPostgresJsSpan');
-// Set once connection attributes are on the span, so the fallback and the
-// `execute`/`connect` channels don't both write them.
-const CONNECTION_ATTRS_SET = Symbol('sentryPostgresJsConnectionAttrsSet');
 // Set on the channel context once the resolve/reject wrappers have ended the
 // span, so `deferSpanEnd` knows the wrappers own the lifecycle.
 const SPAN_ENDED = Symbol('sentryPostgresJsSpanEnded');
@@ -124,23 +113,11 @@ function recordConnectionFromChannel(message: PostgresJsQueryContext): void {
   registerEndpoint(context);
 }
 
-function setConnectionAttributes(span: Span, query: PostgresQuery, context: PostgresConnectionContext): void {
-  const queryRecord = query as Record<symbol, unknown>;
-  if (queryRecord[CONNECTION_ATTRS_SET]) {
-    return;
-  }
-  queryRecord[CONNECTION_ATTRS_SET] = true;
-  if (context) {
-    span.setAttributes(_getConnectionAttributes(context));
-  }
-}
-
 /**
  * Backfill connection attributes onto a query's span from a channel whose `self`
  * is the connection object and `arguments[0]` the query. Shared by the `execute`
  * and `connect` channels; both carry that shape and both resolve the context via
- * the `connectionContexts` WeakMap. Idempotent (guarded inside
- * `setConnectionAttributes`).
+ * the `connectionContexts` WeakMap.
  */
 function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext): void {
   const connection = message.self;
@@ -151,7 +128,7 @@ function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext):
   const span = (query as Record<symbol, unknown>)[QUERY_SPAN] as Span | undefined;
   const context = connectionContexts.get(connection);
   if (span && context) {
-    setConnectionAttributes(span, query, context);
+    span.setAttributes(_getConnectionAttributes(context));
   }
 }
 
@@ -170,16 +147,12 @@ function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operation
     return;
   }
 
-  // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
-  // wrapper even if `span.end()` below throws.
-  const markEnded = (): void => {
-    data[SPAN_ENDED] = true;
-  };
-
   const originalResolve = query.resolve;
   if (typeof originalResolve === 'function') {
     query.resolve = function (this: unknown, ...resolveArgs: unknown[]): unknown {
-      markEnded();
+      // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
+      // wrapper even if `span.end()` below throws.
+      data[SPAN_ENDED] = true;
       try {
         const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
         // Re-set the operation name with the server-reported command, which is more reliable than the query text.
@@ -195,7 +168,7 @@ function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operation
   const originalReject = query.reject;
   if (typeof originalReject === 'function') {
     query.reject = function (this: unknown, ...rejectArgs: unknown[]): unknown {
-      markEnded();
+      data[SPAN_ENDED] = true;
       try {
         const err = rejectArgs[0] as { message?: string; code?: string; name?: string } | undefined;
         span.setStatus({ code: SPAN_STATUS_ERROR, message: err?.message || 'unknown_error' });
@@ -272,42 +245,32 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
       }
 
       const queryAttributes = getSqlQueryAttributes(_reconstructQuery(query.strings));
-      const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
-
-      const client = getClient();
 
       // Single-endpoint fallback: resolve context now so the span name and `requestHook` have
       // it, and the first-query-per-connection (bare `execute`) path still gets attrs.
       const context = resolveSingleEndpoint();
 
-      const name =
-        client && hasSpanStreamingEnabled(client)
-          ? queryAttributes[DB_QUERY_SUMMARY] || context?.ATTR_DB_NAMESPACE || DB_SYSTEM_NAME_POSTGRES
-          : sanitizedSqlQuery || 'postgresjs.query';
-
       // `sentry.kind: client` matches the mysql/pg channel subscribers.
+      const attributes: SpanAttributes = {
+        [SENTRY_OP]: DB,
+        [SENTRY_KIND]: 'client',
+        [SENTRY_ORIGIN]: ORIGIN,
+        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
+        ...queryAttributes,
+        ...(context && _getConnectionAttributes(context)),
+      };
       const span = startInactiveSpan({
-        name,
+        name: getSqlSpanName(attributes, 'postgresjs.query'),
         onlyIfParent: requireParentSpan !== false,
-        attributes: {
-          [SENTRY_OP]: DB,
-          [SENTRY_KIND]: 'client',
-          [SENTRY_ORIGIN]: ORIGIN,
-          [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
-          ...queryAttributes,
-        },
+        attributes,
       });
 
       // Stash for the `execute`/`connect` channels to attach per-connection attributes.
       (query as Record<symbol, unknown>)[QUERY_SPAN] = span;
 
-      if (context) {
-        setConnectionAttributes(span, query, context);
-      }
-
       if (requestHook) {
         try {
-          requestHook(span, sanitizedSqlQuery, context);
+          requestHook(span, queryAttributes[DB_QUERY_TEXT] ?? '', context);
         } catch (e) {
           span.setAttribute('sentry.hook.error', 'requestHook failed');
           DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error in requestHook:', e);
@@ -321,17 +284,12 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
     {
       deferSpanEnd({ data }) {
         // `handle` is async: its promise settles on dispatch (asyncEnd), long
-        // before the query does. The resolve/reject wrappers own the ending.
-        if (data[SPAN_ENDED]) {
-          return true; // wrappers already ended it
-        }
-        if ('error' in data) {
-          return false; // `handle()` itself threw; the error subscriber annotated the span, let the helper end it
-        }
+        // before the query does, so the resolve/reject wrappers own the ending.
+        // The helper only ends the span if `handle()` itself threw.
         // NOTE: for a cursor consumed as an async iterator, only the first batch
         // reaches `handle` (the `executed` guard blocks the rest), so the span
         // ends on the first batch — a pre-existing flaw kept for parity.
-        return true; // query in flight; the wrappers will end the span when it settles
+        return !!data[SPAN_ENDED] || !('error' in data);
       },
     },
   );
diff --git a/packages/server-utils/src/integrations/prisma/tracing-helper.ts b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
index 9d26d09cf5b8..96e37e8cb912 100644
--- a/packages/server-utils/src/integrations/prisma/tracing-helper.ts
+++ b/packages/server-utils/src/integrations/prisma/tracing-helper.ts
@@ -14,15 +14,7 @@
  */
 
 import type { Span, SpanAttributes } from '@sentry/core';
-import {
-  debug,
-  getActiveSpan,
-  getClient,
-  hasSpanStreamingEnabled,
-  LRUMap,
-  startInactiveSpan,
-  startSpanManual,
-} from '@sentry/core';
+import { debug, getActiveSpan, LRUMap, startInactiveSpan, startSpanManual } from '@sentry/core';
 import { DEBUG_BUILD } from '../../debug-build';
 import type { EngineSpan, ExtendedSpanOptions, SpanCallback, TracingHelper } from './types';
 import {
@@ -35,7 +27,7 @@ import {
   SENTRY_OP,
   SENTRY_ORIGIN,
 } from '@sentry/conventions/attributes';
-import { getSqlQueryAttributes, type SqlDialect, toSqlDialect } from '../../utils/sql';
+import { getSqlQueryAttributes, getSqlSpanName, type SqlDialect, toSqlDialect } from '../../utils/sql';
 
 // Reading `process.env` can throw in runtimes that gate env access (e.g. Deno without `--allow-env`)
 // and `process` may be absent altogether (edge runtimes), so this degrades to `false` in those cases.
@@ -146,26 +138,23 @@ function getSqlStatement(name: string, attributes: SpanAttributes): string | und
     return dbStatement;
   }
   const queryText = attributes[DB_QUERY_TEXT];
-  if ((name === 'prisma:engine:db_query' || name === 'prisma:client:db_query') && typeof queryText === 'string') {
+  if (isDbQuerySpan(name) && typeof queryText === 'string') {
     return queryText;
   }
   return undefined;
 }
 
 /**
- * Db query spans are named after their SQL text (e.g. `SELECT * FROM "User"`) rather than the generic
- * engine name. v5/v6 emit `prisma:engine:db_query`; v7 inlined the engine and emits `prisma:client:db_query`.
+ * Db query spans are named like every other SQL span (see `getSqlSpanName`), falling back to the
+ * Prisma span name. v5/v6 emit `prisma:engine:db_query`; v7 inlined the engine and emits
+ * `prisma:client:db_query`. Other Prisma spans keep their own name, even when they carry db attributes.
  */
 function buildSpanName(name: string, attributes: SpanAttributes): string {
-  const client = getClient();
-
-  // With span streaming, span names have to be low cardinality, so `{db.query.summary}` is used
-  // instead of the full statement. Spans that report no SQL keep the engine span name.
-  if (client && hasSpanStreamingEnabled(client)) {
-    return (attributes[DB_QUERY_SUMMARY] as string | undefined) || name;
-  }
+  return isDbQuerySpan(name) ? getSqlSpanName(attributes, name) : name;
+}
 
-  return getSqlStatement(name, attributes) ?? name;
+function isDbQuerySpan(name: string): boolean {
+  return name === 'prisma:engine:db_query' || name === 'prisma:client:db_query';
 }
 
 /**
diff --git a/packages/server-utils/src/integrations/tedious.ts b/packages/server-utils/src/integrations/tedious.ts
index b75080aa7471..24c2b1547859 100644
--- a/packages/server-utils/src/integrations/tedious.ts
+++ b/packages/server-utils/src/integrations/tedious.ts
@@ -153,6 +153,9 @@ function subscribeQuery(channelName: string, operation: string): void {
       [SERVER_PORT]: connection.config?.options?.port,
     };
 
+    // Not `getSqlSpanName`: bulk loads and procedure calls carry no statement, and naming them
+    // after the operation (`execBulkLoad <table>`, `callProcedure <name>`) says more than the
+    // namespace or db system it would fall back to.
     const client = getClient();
 
     const span = startInactiveSpan({
diff --git a/packages/server-utils/src/utils/sql.ts b/packages/server-utils/src/utils/sql.ts
index 7b7d0da67efc..9be73df95c78 100644
--- a/packages/server-utils/src/utils/sql.ts
+++ b/packages/server-utils/src/utils/sql.ts
@@ -1,4 +1,12 @@
-import { DB_OPERATION_NAME, DB_QUERY_SUMMARY, DB_QUERY_TEXT } from '@sentry/conventions/attributes';
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
+import type { SpanAttributes } from '@sentry/core';
+import { getClient, hasSpanStreamingEnabled } from '@sentry/core';
 
 const MAX_SUMMARY_LENGTH = 255;
 
@@ -424,20 +432,19 @@ export function sanitizeSqlQuery(sqlQuery: string | undefined, dialect: SqlDiale
   );
 }
 
+export interface SqlQueryAttributes {
+  [DB_QUERY_TEXT]: string | undefined;
+  [DB_QUERY_SUMMARY]: string | undefined;
+  [DB_OPERATION_NAME]: string | undefined;
+}
+
 /**
  * Sanitizes a collected SQL statement into the query attributes the SQL integrations attach to
  * their spans: `db.query.text`, `db.query.summary` and `db.operation.name`. All are `undefined`
  * when there is no statement, so an empty query omits the attributes instead of reporting the
  * sanitizer's fallback text.
  */
-export function getSqlQueryAttributes(
-  sqlQuery: string | undefined,
-  dialect?: SqlDialect,
-): {
-  [DB_QUERY_TEXT]: string | undefined;
-  [DB_QUERY_SUMMARY]: string | undefined;
-  [DB_OPERATION_NAME]: string | undefined;
-} {
+export function getSqlQueryAttributes(sqlQuery: string | undefined, dialect?: SqlDialect): SqlQueryAttributes {
   const queryText = (sqlQuery && sanitizeSqlQuery(sqlQuery, dialect)) || undefined;
   return {
     [DB_QUERY_TEXT]: queryText,
@@ -445,3 +452,30 @@ export function getSqlQueryAttributes(
     [DB_OPERATION_NAME]: getSqlOperationName(queryText),
   };
 }
+
+/**
+ * Names a SQL span with a low-cardinality name: `db.query.summary`, falling back to `db.namespace`
+ * and then `db.system.name`. `fallback` is the integration's name for a span with none of those.
+ *
+ * New SQL integrations should name their spans with this regardless of span streaming.
+ */
+export function getLowCardinalitySqlSpanName(attributes: SpanAttributes, fallback: string): string {
+  return toSpanName(attributes[DB_QUERY_SUMMARY] || attributes[DB_NAMESPACE] || attributes[DB_SYSTEM_NAME], fallback);
+}
+
+/**
+ * Names a SQL span from its attributes. Streamed span names have to be low cardinality (see
+ * {@link getLowCardinalitySqlSpanName}); otherwise the sanitized `db.query.text` is used, which
+ * existing integrations keep for spans that aren't streamed.
+ */
+export function getSqlSpanName(attributes: SpanAttributes, fallback: string): string {
+  const client = getClient();
+  if (client && hasSpanStreamingEnabled(client)) {
+    return getLowCardinalitySqlSpanName(attributes, fallback);
+  }
+  return toSpanName(attributes[DB_QUERY_TEXT], fallback);
+}
+
+function toSpanName(value: unknown, fallback: string): string {
+  return typeof value === 'string' && value ? value : fallback;
+}
diff --git a/packages/server-utils/test/integrations/prisma.test.ts b/packages/server-utils/test/integrations/prisma.test.ts
index 967fcd9d827f..4ceb1a27f180 100644
--- a/packages/server-utils/test/integrations/prisma.test.ts
+++ b/packages/server-utils/test/integrations/prisma.test.ts
@@ -30,9 +30,10 @@ class TestClient extends Client<any> {
   }
 }
 
-function initTestClient(): void {
+function initTestClient(options: { traceLifecycle?: 'stream' | 'static' } = {}): void {
   getCurrentScope().setClient(undefined);
   initAndBind(TestClient, {
+    ...options,
     dsn: 'https://username@domain/123',
     integrations: [],
     sendClientReports: false,
@@ -120,6 +121,41 @@ describe('instrumentPrisma', () => {
     });
   });
 
+  describe('span name', () => {
+    it('names a streamed db_query span after its summary', () => {
+      initTestClient({ traceLifecycle: 'stream' });
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({
+        [DB_SYSTEM_NAME]: 'postgresql',
+        [DB_QUERY_TEXT]: 'SELECT * FROM "public"."User" WHERE "bio" = $1',
+      });
+
+      expect(spanToJSON(span).name).toBe('SELECT "public"."User"');
+    });
+
+    it('names a static db_query span after the sanitized statement, not the raw one', () => {
+      initTestClient({ traceLifecycle: 'static' });
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({
+        [DB_SYSTEM]: 'postgresql',
+        [DB_STATEMENT]: 'SELECT * FROM "public"."User" WHERE "bio" = \'secret\'',
+      });
+
+      expect(spanToJSON(span).name).toBe('SELECT * FROM "public"."User" WHERE "bio" = ?');
+    });
+
+    it('keeps the Prisma span name for db_query spans without a statement', () => {
+      initTestClient({ traceLifecycle: 'static' });
+      instrumentPrisma();
+
+      const span = runDbQuerySpan({ [DB_SYSTEM_NAME]: 'postgresql' });
+
+      expect(spanToJSON(span).name).toBe('prisma:client:db_query');
+    });
+  });
+
   describe('db.query.text', () => {
     it('backfills the sanitized statement when Prisma only reports db.statement', () => {
       initTestClient();
diff --git a/packages/server-utils/test/utils/sql.test.ts b/packages/server-utils/test/utils/sql.test.ts
index 580f1b4c847a..b04ce144b977 100644
--- a/packages/server-utils/test/utils/sql.test.ts
+++ b/packages/server-utils/test/utils/sql.test.ts
@@ -1,12 +1,22 @@
-import { DB_OPERATION_NAME, DB_QUERY_SUMMARY, DB_QUERY_TEXT } from '@sentry/conventions/attributes';
-import { describe, expect, it } from 'vitest';
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_SYSTEM_NAME,
+} from '@sentry/conventions/attributes';
+import { setCurrentClient } from '@sentry/core';
+import { afterEach, describe, expect, it } from 'vitest';
 import {
   getSqlOperationName,
   getSqlQuerySummary,
   getSqlQueryAttributes,
+  getLowCardinalitySqlSpanName,
+  getSqlSpanName,
   sanitizeSqlQuery,
   toSqlDialect,
 } from '../../src/utils/sql';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
 
 describe('getSqlQuerySummary', () => {
   it.each([undefined, ''])('returns undefined for %j', input => {
@@ -967,3 +977,74 @@ describe('getSqlQueryAttributes', () => {
     });
   });
 });
+
+describe('getLowCardinalitySqlSpanName', () => {
+  const query = getSqlQueryAttributes("SELECT * FROM users WHERE id = 'x'");
+  const noQuery = getSqlQueryAttributes(undefined);
+
+  afterEach(() => {
+    setCurrentClient(undefined as never);
+  });
+
+  it.each([
+    ['the query summary', { ...query, [DB_NAMESPACE]: 'mydb', [DB_SYSTEM_NAME]: 'postgresql' }, 'SELECT users'],
+    [
+      'db.namespace without a statement',
+      { ...noQuery, [DB_NAMESPACE]: 'mydb', [DB_SYSTEM_NAME]: 'postgresql' },
+      'mydb',
+    ],
+    ['db.system.name without a namespace', { ...noQuery, [DB_SYSTEM_NAME]: 'postgresql' }, 'postgresql'],
+    ['the fallback without any of those', noQuery, 'neon.query'],
+  ])('uses %s', (_, attributes, expected) => {
+    expect(getLowCardinalitySqlSpanName(attributes, 'neon.query')).toBe(expected);
+  });
+
+  it('stays low cardinality when spans are not streamed', () => {
+    const client = new TestClient(getDefaultTestClientOptions({ traceLifecycle: 'static', tracesSampleRate: 1 }));
+    setCurrentClient(client);
+    client.init();
+
+    expect(getLowCardinalitySqlSpanName(query, 'neon.query')).toBe('SELECT users');
+  });
+});
+
+describe('getSqlSpanName', () => {
+  const query = getSqlQueryAttributes("SELECT * FROM users WHERE id = 'x'");
+  const noQuery = getSqlQueryAttributes(undefined);
+
+  function setUpClient(traceLifecycle: 'stream' | 'static'): void {
+    const client = new TestClient(getDefaultTestClientOptions({ traceLifecycle, tracesSampleRate: 1 }));
+    setCurrentClient(client);
+    client.init();
+  }
+
+  afterEach(() => {
+    setCurrentClient(undefined as never);
+  });
+
+  describe('with span streaming', () => {
+    it.each([
+      ['the query summary', { ...query, [DB_NAMESPACE]: 'mydb', [DB_SYSTEM_NAME]: 'mysql' }, 'SELECT users'],
+      ['db.namespace without a statement', { ...noQuery, [DB_NAMESPACE]: 'mydb', [DB_SYSTEM_NAME]: 'mysql' }, 'mydb'],
+      ['db.system.name without a namespace', { ...noQuery, [DB_NAMESPACE]: '', [DB_SYSTEM_NAME]: 'mysql' }, 'mysql'],
+      ['the fallback without any of those', noQuery, 'mysql.query'],
+    ])('uses %s', (_, attributes, expected) => {
+      setUpClient('stream');
+      expect(getSqlSpanName(attributes, 'mysql.query')).toBe(expected);
+    });
+  });
+
+  describe('without span streaming', () => {
+    it.each([
+      ['the sanitized statement', { ...query, [DB_NAMESPACE]: 'mydb' }, 'SELECT * FROM users WHERE id = ?'],
+      [
+        'the fallback without a statement',
+        { ...noQuery, [DB_NAMESPACE]: 'mydb', [DB_SYSTEM_NAME]: 'mysql' },
+        'mysql.query',
+      ],
+    ])('uses %s', (_, attributes, expected) => {
+      setUpClient('static');
+      expect(getSqlSpanName(attributes, 'mysql.query')).toBe(expected);
+    });
+  });
+});

From bbec9a049c9dd07c415b41362b48e3e172c64f92 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 13:16:50 +0100
Subject: [PATCH 157/169] test(nuxt): Use Nuxt's own Nitro and add db0 in
 nuxt-5 E2E app (#26095)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The nuxt-5 app depended on `nitro: latest` (now
`3.0.261103-rc`) next to the Nuxt nightly, which depended on
`^3.0.261029-rc`. A caret range on a prerelease doesn't match the newer
RC, so pnpm installed both versions. In dev mode, Vite then fails to
load the app's `nitro/h3` from the second copy (`Failed to load url
nitro/h3 … Does the file exist?`), which breaks the optional `nuxt-5`
dev tests and `nuxt-5 (tunnel-dev)`. With the `kv` cache driver, Nitro's
cache and `@sentry/nuxt` also end up on different `useKV` storages, so
no cache spans are recorded. Dropping the direct dependency (the
existing TODO) leaves Nuxt's own Nitro as the only copy.

The Nuxt nightly from Nov 4 moved to Nitro `3.0.261103-rc`, which no
longer installs `db0` on demand in CI, so the app's `nitro.database`
config failed the build (including the required `nuxt-5
(tunnel-basepath)` job). The app now depends on `db0` directly.

**Unsure about:** `test:build-canary` still runs `pnpm add
nitro@npm:nitro-nightly@latest`, so the canary build could end up with
two copies again. I left it alone because it isn't part of these
failures.

<!-- junior-request-attribution:start -->
via **Francesco Gringl-Novy**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AD0CA8FXFXAS%3A1793366214.663899 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AD0CA8FXFXAS%3A1793366214.663899)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AD0CA8FXFXAS%3A1793366214.663899/?project=4510944073809921)

<!-- junior-session-footer:end -->

---------

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Francesco Gringl-Novy <francesco.novy@sentry.io>
---
 dev-packages/e2e-tests/test-applications/nuxt-5/package.json | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/package.json b/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
index 955eb6c13c2d..517736025e41 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5/package.json
@@ -21,8 +21,7 @@
     "test:assert:tunnel-dev": "E2E_TEST_TUNNEL=1 TEST_ENV=development playwright test tunnel"
   },
   "//": [
-    "Currently, we need to install the latest version of Nitro and the Nuxt nightlies as those contain Nuxt v5",
-    "TODO: remove nitro from dependencies",
+    "Currently, we need to install the Nuxt nightlies as those contain Nuxt v5",
     "Nuxt generates `fetch.server.mjs` as a virtual module that imports `ofetch`, and since a virtual id is neither absolute nor on disk, Vite resolves from its `root` (the srcDir) instead of the importer's folder.",
     "This fails because `ofetch` is a dependency of `nuxt` rather than the app, so pnpm leaves it in `.pnpm/`",
     "TODO: remove ofetch from dependencies: https://github.com/getsentry/sentry-javascript/pull/24283#issuecomment-5615854158"
@@ -30,9 +29,9 @@
   "dependencies": {
     "@pinia/nuxt": "^0.11.3",
     "@sentry/nuxt": "file:../../packed/sentry-nuxt-packed.tgz",
+    "db0": "^0.4.2",
     "mongoose": "^9.10.2",
     "ofetch": "^2.0.0-alpha.3",
-    "nitro": "latest",
     "nuxt": "npm:nuxt-nightly@5x",
     "vue": "^3.5.41"
   },

From 8a102ea35fadf1da9add9428a6e141dbd4888ba3 Mon Sep 17 00:00:00 2001
From: Rola Abuhasna <rola.abuhasna@sentry.io>
Date: Wed, 4 Nov 2026 14:35:53 +0100
Subject: [PATCH 158/169] fix(server-utils): Instrument @anthropic-ai/sdk 1.x
 and turn off its own OTel spans (#25750)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Our Anthropic instrumentation was capped at `<1`, so `@anthropic-ai/sdk`
1.x wasn't instrumented. 1.x also emits its own OTel spans, and they
reach Sentry wherever we register the global tracer provider (the
default in Next.js, SvelteKit and Vercel Edge). Raising the range alone
gave two spans per call.

This raises the range to `<2` and sets `ANTHROPIC_OPEN_TELEMETRY=false`
unless the user set it, the same way we disable Next.js' own fetch spans
with `NEXT_OTEL_FETCH_DISABLED`.

**Follow-up.** Tool-runner `chat` spans don't reach Sentry on 1.x yet.

Fixes #25748

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   4 +
 .../node-suites/excludes.ts                   |   2 +
 .../node-integration-tests/package.json       |   2 +-
 .../anthropic/scenario-with-response.mjs      |  19 ---
 .../suites/tracing/anthropic/test.ts          |   5 +-
 .../tracing/anthropic/v0/instrument.mjs       |  10 ++
 .../suites/tracing/anthropic/v0/scenario.mjs  | 118 +++++++++++++
 .../suites/tracing/anthropic/v0/test.ts       |  70 ++++++++
 .../tracing/anthropic/v1/instrument.mjs       |  16 ++
 .../v1/scenario-session-tool-runner.mjs       | 107 ++++++++++++
 .../anthropic/v1/scenario-tool-runner.mjs     | 136 +++++++++++++++
 .../suites/tracing/anthropic/v1/scenario.mjs  |  98 +++++++++++
 .../suites/tracing/anthropic/v1/test.ts       | 158 ++++++++++++++++++
 .../src/integrations/anthropic.ts             |  12 ++
 .../src/orchestrion/config/anthropic-ai.ts    |  11 +-
 .../test/integrations/anthropic.test.ts       |  50 ++++++
 pnpm-lock.yaml                                |  21 ++-
 17 files changed, 809 insertions(+), 30 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v0/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v0/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v0/test.ts
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v1/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-session-tool-runner.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-tool-runner.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/anthropic/v1/test.ts
 create mode 100644 packages/server-utils/test/integrations/anthropic.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1cd97aa38ba7..eaa2099f88d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -30,6 +30,10 @@ Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and
 
   Add `Sentry.cronJobIntegration()` to `integrations` to send check-ins for every named `CronJob` of the `cron` package (4.3+), with the job name as the monitor slug. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeJobs` to skip jobs by name. `Sentry.cron.instrumentCron` is deprecated; use `cronJobIntegration` instead.
 
+- **fix(server-utils): Instrument @anthropic-ai/sdk 1.x and turn off its own OTel spans ([#25750](https://github.com/getsentry/sentry-javascript/pull/25750))**
+
+  The Anthropic integration now instruments `@anthropic-ai/sdk` 1.x. Since 0.134 the SDK also records its own OpenTelemetry spans, such as `anthropic.messages.create`, which duplicated Sentry's `gen_ai` spans. Once Sentry instruments the SDK, it sets `ANTHROPIC_OPEN_TELEMETRY=false` to turn those spans off. To keep them, set `ANTHROPIC_OPEN_TELEMETRY=true` or pass the `openTelemetry` option to the Anthropic client.
+
 - **feat(nextjs): Mark pageloads of cached pages ([#25318](https://github.com/getsentry/sentry-javascript/pull/25318))**
 
   When Next.js serves a page from its cache, for example an ISR page or a `cacheComponents` shell, the pageload now has the `page.server_rendering.type` attribute. It is `static` if the whole page came from the cache, and `partially_static` if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.
diff --git a/dev-packages/bun-integration-tests/node-suites/excludes.ts b/dev-packages/bun-integration-tests/node-suites/excludes.ts
index c16bf072fc8b..046e973354dd 100644
--- a/dev-packages/bun-integration-tests/node-suites/excludes.ts
+++ b/dev-packages/bun-integration-tests/node-suites/excludes.ts
@@ -75,7 +75,9 @@ export const NO_AUTO_INSTRUMENTATION = [
   'suites/pino/test.ts',
   'suites/tracing/amqplib/test.ts',
   'suites/tracing/anthropic/test.ts',
+  'suites/tracing/anthropic/v0/test.ts',
   'suites/tracing/anthropic/v0.129/test.ts',
+  'suites/tracing/anthropic/v1/test.ts',
   'suites/tracing/apollo-graphql/**',
   'suites/tracing/dataloader/test.ts',
   'suites/tracing/fastify/test.ts',
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
index 4c2842fc6d5a..c6413087ad1a 100644
--- a/dev-packages/node-integration-tests/package.json
+++ b/dev-packages/node-integration-tests/package.json
@@ -25,7 +25,7 @@
     "test:watch": "pnpm run test --watch"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "0.133.0",
+    "@anthropic-ai/sdk": "1.3.0",
     "@apollo/server": "^5.5.0",
     "@aws-sdk/client-bedrock-runtime": "^3.1161.0",
     "@aws-sdk/client-dynamodb": "^3.1161.0",
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/scenario-with-response.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/scenario-with-response.mjs
index 704453d9b158..d07da8fb6349 100644
--- a/dev-packages/node-integration-tests/suites/tracing/anthropic/scenario-with-response.mjs
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/scenario-with-response.mjs
@@ -6,16 +6,6 @@ function startMockAnthropicServer() {
   const app = express();
   app.use(express.json());
 
-  app.post('/anthropic/v1/complete', (req, res) => {
-    res.send({
-      id: 'compl_withresponse',
-      type: 'completion',
-      model: req.body.model,
-      completion: 'Testing .asResponse() method!',
-      stop_reason: 'stop_sequence',
-    });
-  });
-
   app.post('/anthropic/v1/messages', (req, res) => {
     const model = req.body.model;
 
@@ -210,15 +200,6 @@ async function run() {
       .asResponse();
     await betaResponse.json();
 
-    const completionResponse = await client.completions
-      .create({
-        model: 'claude-2',
-        max_tokens_to_sample: 100,
-        prompt: '\n\nHuman: Test asResponse\n\nAssistant:',
-      })
-      .asResponse();
-    await completionResponse.json();
-
     const rawStreamResponse = await client.messages
       .create({
         model: 'claude-3-haiku-20240307',
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/test.ts b/dev-packages/node-integration-tests/suites/tracing/anthropic/test.ts
index ad9ee334d927..144d1e16a827 100644
--- a/dev-packages/node-integration-tests/suites/tracing/anthropic/test.ts
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/test.ts
@@ -40,7 +40,7 @@ describe('Anthropic integration', () => {
           span: container => {
             expect(container.items.find(span => span.is_segment && span.name === 'main')).toBeDefined();
             const spans = container.items.filter(span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.anthropic');
-            expect(spans).toHaveLength(6);
+            expect(spans).toHaveLength(5);
             const nonStreamingSpans = spans.filter(
               span => span.attributes[GEN_AI_RESPONSE_ID]?.value === 'msg_withresponse',
             );
@@ -60,7 +60,7 @@ describe('Anthropic integration', () => {
             expect(streamingSpan!.attributes[GEN_AI_RESPONSE_STREAMING].value).toBe(true);
 
             const rawResponseSpans = spans.filter(span => span.attributes[GEN_AI_RESPONSE_ID] === undefined);
-            expect(rawResponseSpans).toHaveLength(4);
+            expect(rawResponseSpans).toHaveLength(3);
             for (const span of rawResponseSpans) {
               expect(span.name).toBe(`chat ${span.attributes[GEN_AI_REQUEST_MODEL].value}`);
               expect(span.status).toBe('ok');
@@ -70,7 +70,6 @@ describe('Anthropic integration', () => {
             expect(rawResponseSpans.map(span => span.attributes[GEN_AI_REQUEST_MODEL].value)).toEqual([
               'claude-3-haiku-20240307',
               'claude-3-haiku-20240307',
-              'claude-2',
               'claude-3-haiku-20240307',
             ]);
           },
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/instrument.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/instrument.mjs
new file mode 100644
index 000000000000..cc192fb89834
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/instrument.mjs
@@ -0,0 +1,10 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  tracesSampleRate: 1.0,
+  dataCollection: { genAI: { inputs: false, outputs: false } },
+  transport: loggingTransport,
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/scenario.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/scenario.mjs
new file mode 100644
index 000000000000..fb08dc7fcf76
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/scenario.mjs
@@ -0,0 +1,118 @@
+import Anthropic from '@anthropic-ai/sdk';
+import * as Sentry from '@sentry/node';
+import express from 'express';
+
+function streamEvents(id, model) {
+  return [
+    {
+      type: 'message_start',
+      message: { id, type: 'message', role: 'assistant', model, content: [], usage: { input_tokens: 10 } },
+    },
+    { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } },
+    { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text: 'Hello!' } },
+    { type: 'content_block_stop', index: 0 },
+    { type: 'message_delta', delta: { stop_reason: 'end_turn', stop_sequence: null }, usage: { output_tokens: 15 } },
+    { type: 'message_stop' },
+  ];
+}
+
+function startMockAnthropicServer() {
+  const app = express();
+  app.use(express.json());
+
+  app.post('/anthropic/v1/messages', (req, res) => {
+    // The prompt names the response id, so each call's span can be told apart.
+    const id = req.body.messages[0].content;
+
+    if (!req.body.stream) {
+      res.json({
+        id,
+        type: 'message',
+        role: 'assistant',
+        model: req.body.model,
+        content: [{ type: 'text', text: 'Hello!' }],
+        stop_reason: 'end_turn',
+        stop_sequence: null,
+        usage: { input_tokens: 10, output_tokens: 15 },
+      });
+      return;
+    }
+
+    res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache', Connection: 'keep-alive' });
+    const events = streamEvents(id, req.body.model);
+    events.forEach((event, index) => {
+      setTimeout(() => {
+        res.write(`event: ${event.type}\n`);
+        res.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (index === events.length - 1) {
+          res.end();
+        }
+      }, index * 10);
+    });
+  });
+
+  app.post('/anthropic/v1/complete', (req, res) => {
+    res.json({
+      id: req.body.prompt.includes('asResponse') ? 'compl_v0_as_response' : 'compl_v0',
+      type: 'completion',
+      model: req.body.model,
+      completion: 'Hello!',
+      stop_reason: 'stop_sequence',
+    });
+  });
+
+  return new Promise(resolve => {
+    const server = app.listen(0, () => {
+      resolve(server);
+    });
+  });
+}
+
+async function run() {
+  const server = await startMockAnthropicServer();
+
+  await Sentry.startSpan({ op: 'function', name: 'main' }, async () => {
+    const client = new Anthropic({
+      apiKey: 'mock-api-key',
+      baseURL: `http://localhost:${server.address().port}/anthropic`,
+    });
+    const model = 'claude-3-haiku-20240307';
+
+    await client.messages.create({ model, max_tokens: 100, messages: [{ role: 'user', content: 'msg_v0_create' }] });
+    await client.beta.messages.create({
+      model,
+      max_tokens: 100,
+      messages: [{ role: 'user', content: 'msg_v0_beta_create' }],
+    });
+
+    const stream = await client.messages.create({
+      model,
+      max_tokens: 100,
+      stream: true,
+      messages: [{ role: 'user', content: 'msg_v0_stream' }],
+    });
+    for await (const _ of stream) {
+      // consume
+    }
+
+    await client.messages
+      .stream({ model, max_tokens: 100, messages: [{ role: 'user', content: 'msg_v0_stream_helper' }] })
+      .finalMessage();
+
+    await client.completions.create({
+      model: 'claude-2',
+      max_tokens_to_sample: 100,
+      prompt: '\n\nHuman: Hello\n\nAssistant:',
+    });
+    const response = await client.completions
+      .create({ model: 'claude-2', max_tokens_to_sample: 100, prompt: '\n\nHuman: asResponse\n\nAssistant:' })
+      .asResponse();
+    await response.json();
+  });
+
+  await Sentry.flush(2000);
+
+  server.close();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/test.ts b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/test.ts
new file mode 100644
index 000000000000..784d48bbcbd4
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v0/test.ts
@@ -0,0 +1,70 @@
+import type { SerializedStreamedSpanContainer } from '@sentry/core';
+import {
+  GEN_AI_REQUEST_MODEL,
+  GEN_AI_RESPONSE_ID,
+  GEN_AI_RESPONSE_STREAMING,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../../utils/runner';
+
+type SerializedSpan = SerializedStreamedSpanContainer['items'][number];
+
+const MESSAGE_CALLS = [
+  { id: 'msg_v0_create', streaming: false },
+  { id: 'msg_v0_beta_create', streaming: false },
+  { id: 'msg_v0_stream', streaming: true },
+  { id: 'msg_v0_stream_helper', streaming: true },
+];
+
+// The main suite runs on 1.x. This keeps the last 0.x version covered, including `completions`,
+// which 1.0 removed.
+describe('Anthropic integration (0.x)', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(
+    __dirname,
+    'scenario.mjs',
+    'instrument.mjs',
+    (createRunner, test) => {
+      test('emits one span per call', async () => {
+        await createRunner()
+          .unordered()
+          .expect({
+            span: container => {
+              expect(container.items.find(span => span.is_segment && span.name === 'main')).toBeDefined();
+              const spans = container.items.filter(
+                span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.anthropic',
+              );
+              expect(spans).toHaveLength(6);
+              for (const span of spans) {
+                expect(span.attributes[SENTRY_OP]?.value, span.name).toBe('gen_ai.chat');
+                expect(span.status, span.name).toBe('ok');
+              }
+
+              const spanForId = (id: string): SerializedSpan[] =>
+                spans.filter(span => span.attributes[GEN_AI_RESPONSE_ID]?.value === id);
+
+              for (const { id, streaming } of MESSAGE_CALLS) {
+                expect(spanForId(id), id).toHaveLength(1);
+                expect(spanForId(id)[0]!.attributes[GEN_AI_RESPONSE_STREAMING]?.value ?? false, id).toBe(streaming);
+              }
+
+              // `.asResponse()` hands back the raw response, so its span has no response id.
+              const completionSpans = spans.filter(span => span.attributes[GEN_AI_REQUEST_MODEL]?.value === 'claude-2');
+              expect(completionSpans.map(span => span.attributes[GEN_AI_RESPONSE_ID]?.value)).toEqual([
+                'compl_v0',
+                undefined,
+              ]);
+            },
+          })
+          .start()
+          .completed();
+      });
+    },
+    { additionalDependencies: { '@anthropic-ai/sdk': '0.133.0' } },
+  );
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/instrument.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/instrument.mjs
new file mode 100644
index 000000000000..b5472310228b
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/instrument.mjs
@@ -0,0 +1,16 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  tracesSampleRate: 1.0,
+  dataCollection: { genAI: { inputs: false, outputs: false } },
+  transport: loggingTransport,
+  // Registers Sentry as the global tracer provider, which is what 1.x traces itself through.
+  enableOpenTelemetrySetup: process.env.OTEL_SETUP === 'true',
+  integrations:
+    process.env.WITHOUT_ANTHROPIC === 'true'
+      ? integrations => integrations.filter(integration => integration.name !== 'Anthropic_AI')
+      : undefined,
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-session-tool-runner.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-session-tool-runner.mjs
new file mode 100644
index 000000000000..07658baa87c1
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-session-tool-runner.mjs
@@ -0,0 +1,107 @@
+import Anthropic from '@anthropic-ai/sdk';
+import { SessionToolRunner } from '@anthropic-ai/sdk/resources/beta/sessions/events';
+import * as Sentry from '@sentry/node';
+import express from 'express';
+
+const STREAM_EVENTS = {
+  sesn_weather: [
+    { type: 'agent.tool_use', id: 'sevt_weather', name: 'weather', input: { city: 'Vienna' } },
+    { type: 'agent.tool_use', id: 'sevt_explode', name: 'explode', input: {} },
+    { type: 'session.status_terminated', id: 'sevt_weather_end' },
+  ],
+  // Served by a runner built with `new SessionToolRunner()`, as `EnvironmentWorker` does.
+  sesn_direct: [
+    { type: 'agent.tool_use', id: 'sevt_read', name: 'read', input: { file_path: 'README.md' } },
+    { type: 'session.status_terminated', id: 'sevt_direct_end' },
+  ],
+};
+
+function startMockSessionsServer() {
+  const app = express();
+  app.use(express.json());
+
+  app.get('/anthropic/v1/sessions/:sessionId/events/stream', (req, res) => {
+    res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache', Connection: 'keep-alive' });
+
+    const events = STREAM_EVENTS[req.params.sessionId];
+    events.forEach((event, index) => {
+      setTimeout(() => {
+        res.write(`event: ${event.type}\n`);
+        res.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (index === events.length - 1) {
+          res.end();
+        }
+      }, index * 10);
+    });
+  });
+  app.get('/anthropic/v1/sessions/:sessionId/events', (_req, res) => {
+    res.json({ data: [], next_page: null });
+  });
+  app.post('/anthropic/v1/sessions/:sessionId/events', (_req, res) => {
+    res.json({ data: [] });
+  });
+
+  return new Promise(resolve => {
+    const server = app.listen(0, () => {
+      resolve(server);
+    });
+  });
+}
+
+async function drain(runner) {
+  for await (const _call of runner) {
+    // drain
+  }
+}
+
+async function run() {
+  const server = await startMockSessionsServer();
+
+  await Sentry.startSpan({ op: 'function', name: 'main' }, async () => {
+    const client = new Anthropic({
+      apiKey: 'mock-api-key',
+      baseURL: `http://localhost:${server.address().port}/anthropic`,
+    });
+
+    await drain(
+      client.beta.sessions.events.toolRunner('sesn_weather', {
+        tools: [
+          {
+            name: 'weather',
+            description: 'Get the weather by city',
+            input_schema: { type: 'object', properties: { city: { type: 'string' } } },
+            run: () => 'sunny',
+          },
+          {
+            name: 'explode',
+            description: 'Always fails',
+            input_schema: { type: 'object', properties: {} },
+            run: () => {
+              throw new Error('Tool exploded');
+            },
+          },
+        ],
+      }),
+    );
+
+    await drain(
+      new SessionToolRunner('sesn_direct', {
+        client,
+        tools: [
+          {
+            name: 'read',
+            description: 'Read a file',
+            input_schema: { type: 'object', properties: { file_path: { type: 'string' } } },
+            run: () => '# Weather app',
+          },
+        ],
+      }),
+    );
+  });
+
+  await Sentry.flush(2000);
+
+  server.close();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-tool-runner.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-tool-runner.mjs
new file mode 100644
index 000000000000..b2bce0035220
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario-tool-runner.mjs
@@ -0,0 +1,136 @@
+import Anthropic from '@anthropic-ai/sdk';
+import * as Sentry from '@sentry/node';
+import express from 'express';
+
+const MODEL = 'claude-3-haiku-20240307';
+
+function toolUseEvents() {
+  const events = [
+    {
+      type: 'message_start',
+      message: {
+        id: 'msg_tools',
+        type: 'message',
+        role: 'assistant',
+        model: MODEL,
+        content: [],
+        usage: { input_tokens: 10 },
+      },
+    },
+  ];
+  [
+    { id: 'toolu_weather', name: 'weather', input: { city: 'Vienna' } },
+    { id: 'toolu_explode', name: 'explode', input: {} },
+  ].forEach((call, index) => {
+    events.push(
+      {
+        type: 'content_block_start',
+        index,
+        content_block: { type: 'tool_use', id: call.id, name: call.name, input: {} },
+      },
+      {
+        type: 'content_block_delta',
+        index,
+        delta: { type: 'input_json_delta', partial_json: JSON.stringify(call.input) },
+      },
+      { type: 'content_block_stop', index },
+    );
+  });
+  events.push(
+    { type: 'message_delta', delta: { stop_reason: 'tool_use', stop_sequence: null }, usage: { output_tokens: 20 } },
+    { type: 'message_stop' },
+  );
+  return events;
+}
+
+function finalEvents() {
+  return [
+    {
+      type: 'message_start',
+      message: {
+        id: 'msg_final',
+        type: 'message',
+        role: 'assistant',
+        model: MODEL,
+        content: [],
+        usage: { input_tokens: 30 },
+      },
+    },
+    { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } },
+    { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text: 'Sunny.' } },
+    { type: 'content_block_stop', index: 0 },
+    { type: 'message_delta', delta: { stop_reason: 'end_turn', stop_sequence: null }, usage: { output_tokens: 5 } },
+    { type: 'message_stop' },
+  ];
+}
+
+function startMockAnthropicServer() {
+  const app = express();
+  app.use(express.json());
+
+  let requests = 0;
+  app.post('/anthropic/v1/messages', (_req, res) => {
+    res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache', Connection: 'keep-alive' });
+
+    const events = requests++ === 0 ? toolUseEvents() : finalEvents();
+    events.forEach((event, index) => {
+      setTimeout(() => {
+        res.write(`event: ${event.type}\n`);
+        res.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (index === events.length - 1) {
+          res.end();
+        }
+      }, index * 10);
+    });
+  });
+
+  return new Promise(resolve => {
+    const server = app.listen(0, () => {
+      resolve(server);
+    });
+  });
+}
+
+async function run() {
+  const server = await startMockAnthropicServer();
+
+  await Sentry.startSpan({ op: 'function', name: 'main' }, async () => {
+    const client = new Anthropic({
+      apiKey: 'mock-api-key',
+      baseURL: `http://localhost:${server.address().port}/anthropic`,
+    });
+
+    const runner = client.beta.messages.toolRunner({
+      model: MODEL,
+      max_tokens: 100,
+      messages: [{ role: 'user', content: 'What is the weather in Vienna?' }],
+      tools: [
+        {
+          name: 'weather',
+          description: 'Get the weather by city',
+          input_schema: { type: 'object', properties: { city: { type: 'string' } } },
+          run: () => Sentry.startSpan({ name: 'weather lookup' }, () => 'sunny'),
+        },
+        {
+          name: 'explode',
+          description: 'Always fails',
+          input_schema: { type: 'object', properties: {} },
+          run: () => {
+            throw new Error('Tool exploded');
+          },
+        },
+      ],
+      stream: true,
+      runToolsEagerly: true,
+    });
+    for await (const stream of runner) {
+      await stream.finalMessage();
+    }
+  });
+
+  await Sentry.flush(2000);
+
+  server.close();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario.mjs b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario.mjs
new file mode 100644
index 000000000000..658486195624
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/scenario.mjs
@@ -0,0 +1,98 @@
+import Anthropic from '@anthropic-ai/sdk';
+import * as Sentry from '@sentry/node';
+import express from 'express';
+
+function streamEvents(id, model) {
+  return [
+    {
+      type: 'message_start',
+      message: { id, type: 'message', role: 'assistant', model, content: [], usage: { input_tokens: 10 } },
+    },
+    { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } },
+    { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text: 'Hello!' } },
+    { type: 'content_block_stop', index: 0 },
+    { type: 'message_delta', delta: { stop_reason: 'end_turn', stop_sequence: null }, usage: { output_tokens: 15 } },
+    { type: 'message_stop' },
+  ];
+}
+
+function startMockAnthropicServer() {
+  const app = express();
+  app.use(express.json());
+
+  app.post('/anthropic/v1/messages', (req, res) => {
+    // The prompt names the response id, so each call's span can be told apart.
+    const id = req.body.messages[0].content;
+
+    if (!req.body.stream) {
+      res.json({
+        id,
+        type: 'message',
+        role: 'assistant',
+        model: req.body.model,
+        content: [{ type: 'text', text: 'Hello!' }],
+        stop_reason: 'end_turn',
+        stop_sequence: null,
+        usage: { input_tokens: 10, output_tokens: 15 },
+      });
+      return;
+    }
+
+    res.writeHead(200, { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-cache', Connection: 'keep-alive' });
+    const events = streamEvents(id, req.body.model);
+    events.forEach((event, index) => {
+      setTimeout(() => {
+        res.write(`event: ${event.type}\n`);
+        res.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (index === events.length - 1) {
+          res.end();
+        }
+      }, index * 10);
+    });
+  });
+
+  return new Promise(resolve => {
+    const server = app.listen(0, () => {
+      resolve(server);
+    });
+  });
+}
+
+async function run() {
+  const server = await startMockAnthropicServer();
+
+  await Sentry.startSpan({ op: 'function', name: 'main' }, async () => {
+    const client = new Anthropic({
+      apiKey: 'mock-api-key',
+      baseURL: `http://localhost:${server.address().port}/anthropic`,
+    });
+    const model = 'claude-3-haiku-20240307';
+
+    await client.messages.create({ model, max_tokens: 100, messages: [{ role: 'user', content: 'msg_v1_create' }] });
+    await client.beta.messages.create({
+      model,
+      max_tokens: 100,
+      messages: [{ role: 'user', content: 'msg_v1_beta_create' }],
+    });
+
+    const stream = await client.messages.create({
+      model,
+      max_tokens: 100,
+      stream: true,
+      messages: [{ role: 'user', content: 'msg_v1_stream' }],
+    });
+    for await (const _ of stream) {
+      // consume
+    }
+
+    await client.messages
+      .stream({ model, max_tokens: 100, messages: [{ role: 'user', content: 'msg_v1_stream_helper' }] })
+      .finalMessage();
+  });
+
+  await Sentry.flush(2000);
+
+  server.close();
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/test.ts b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/test.ts
new file mode 100644
index 000000000000..0983283d178f
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/anthropic/v1/test.ts
@@ -0,0 +1,158 @@
+import type { Event, SerializedStreamedSpanContainer } from '@sentry/core';
+import {
+  GEN_AI_RESPONSE_ID,
+  GEN_AI_RESPONSE_STREAMING,
+  GEN_AI_TOOL_NAME,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { GEN_AI_EXECUTE_TOOL } from '@sentry/conventions/op';
+import { afterAll, describe, expect } from 'vitest';
+import { GEN_AI_TOOL_CALL_ID_ATTRIBUTE } from '../../../../../../packages/server-utils/src/ai/core/gen-ai-attributes';
+import { cleanupChildProcesses, createEsmAndCjsTests } from '../../../../utils/runner';
+
+type SerializedSpan = SerializedStreamedSpanContainer['items'][number];
+
+const CALLS = [
+  { id: 'msg_v1_create', streaming: false },
+  { id: 'msg_v1_beta_create', streaming: false },
+  { id: 'msg_v1_stream', streaming: true },
+  { id: 'msg_v1_stream_helper', streaming: true },
+];
+
+function spanForCall(spans: SerializedSpan[], id: string): SerializedSpan {
+  const callSpans = spans.filter(span => span.attributes[GEN_AI_RESPONSE_ID]?.value === id);
+  expect(callSpans, id).toHaveLength(1);
+  return callSpans[0]!;
+}
+
+function expectOneSentrySpanPerCall(container: SerializedStreamedSpanContainer): void {
+  const spans = container.items;
+  expect(spans.filter(span => span.name.startsWith('anthropic.'))).toEqual([]);
+
+  for (const { id, streaming } of CALLS) {
+    const chatSpan = spanForCall(spans, id);
+    expect(chatSpan.attributes[SENTRY_ORIGIN]?.value, id).toBe('auto.ai.anthropic');
+    expect(chatSpan.attributes[SENTRY_OP]?.value, id).toBe('gen_ai.chat');
+    expect(chatSpan.attributes[GEN_AI_RESPONSE_STREAMING]?.value ?? false, id).toBe(streaming);
+  }
+}
+
+describe('Anthropic integration (1.x)', () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario.mjs', 'instrument.mjs', (createRunner, test) => {
+    test('emits one span per call', async () => {
+      await createRunner().unordered().expect({ span: expectOneSentrySpanPerCall }).start().completed();
+    });
+
+    test('emits one span per call when Sentry is the global tracer provider', async () => {
+      await createRunner()
+        .withEnv({ OTEL_SETUP: 'true' })
+        .unordered()
+        .expect({ span: expectOneSentrySpanPerCall })
+        .start()
+        .completed();
+    });
+
+    test("records Anthropic's own spans when the integration is removed", async () => {
+      await createRunner()
+        .withEnv({ OTEL_SETUP: 'true', WITHOUT_ANTHROPIC: 'true' })
+        .unordered()
+        .expect({
+          span: container => {
+            const spans = container.items;
+            expect(spans.filter(span => span.attributes[SENTRY_ORIGIN]?.value === 'auto.ai.anthropic')).toEqual([]);
+
+            for (const { id } of CALLS) {
+              expect(spanForCall(spans, id).name, id).toBe('anthropic.messages.create');
+            }
+          },
+        })
+        .start()
+        .completed();
+    });
+  });
+
+  // 1.x makes its tool-runner and tool spans active around each tool run, even when they are no-ops.
+  createEsmAndCjsTests(__dirname, 'scenario-tool-runner.mjs', 'instrument.mjs', (createRunner, test) => {
+    for (const env of [{}, { OTEL_SETUP: 'true' }]) {
+      test(`keeps tool spans under the caller's span with ${JSON.stringify(env)}`, async () => {
+        await createRunner()
+          .withEnv(env)
+          .unordered()
+          .expect({
+            span: container => {
+              const spans = container.items;
+              expect(spans.filter(span => span.name.startsWith('anthropic.'))).toEqual([]);
+
+              const main = spans.find(span => span.is_segment && span.name === 'main')!;
+              const toolSpans = spans.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_EXECUTE_TOOL);
+              expect(toolSpans.map(span => span.attributes[GEN_AI_TOOL_NAME]?.value).sort()).toEqual([
+                'explode',
+                'weather',
+              ]);
+              for (const toolSpan of toolSpans) {
+                expect(toolSpan.parent_span_id, toolSpan.name).toBe(main.span_id);
+              }
+
+              const weather = toolSpans.find(span => span.attributes[GEN_AI_TOOL_NAME]?.value === 'weather')!;
+              const lookups = spans.filter(span => span.name === 'weather lookup');
+              expect(lookups).toHaveLength(1);
+              expect(lookups[0]!.parent_span_id).toBe(weather.span_id);
+            },
+          })
+          .expect({
+            event: event => {
+              expect(event.exception?.values?.[0]?.value).toBe('Tool exploded');
+            },
+          })
+          .start()
+          .completed();
+      });
+    }
+  });
+
+  createEsmAndCjsTests(__dirname, 'scenario-session-tool-runner.mjs', 'instrument.mjs', (createRunner, test) => {
+    for (const env of [{}, { OTEL_SETUP: 'true' }]) {
+      test(`emits an execute_tool span for each tool a session runner runs with ${JSON.stringify(env)}`, async () => {
+        let receivedEvent: Event | undefined;
+        let receivedSpans: SerializedStreamedSpanContainer['items'] = [];
+
+        await createRunner()
+          .withEnv(env)
+          .unordered()
+          .expect({
+            span: container => {
+              expect(container.items.find(span => span.is_segment && span.name === 'main')).toBeDefined();
+              receivedSpans = container.items;
+            },
+          })
+          .expect({
+            event: event => {
+              receivedEvent = event;
+            },
+          })
+          .start()
+          .completed();
+
+        const main = receivedSpans.find(span => span.is_segment && span.name === 'main')!;
+        expect(receivedSpans.filter(span => span.name.startsWith('anthropic.'))).toEqual([]);
+        const toolSpans = receivedSpans.filter(span => span.attributes[SENTRY_OP]?.value === GEN_AI_EXECUTE_TOOL);
+        expect(toolSpans.map(span => span.attributes[GEN_AI_TOOL_NAME]?.value).sort()).toEqual([
+          'explode',
+          'read',
+          'weather',
+        ]);
+        for (const toolSpan of toolSpans) {
+          expect(toolSpan.parent_span_id, toolSpan.name).toBe(main.span_id);
+        }
+        const weather = toolSpans.find(span => span.attributes[GEN_AI_TOOL_NAME]?.value === 'weather')!;
+        expect(weather.attributes[GEN_AI_TOOL_CALL_ID_ATTRIBUTE]).toEqual({ type: 'string', value: 'sevt_weather' });
+        expect(receivedEvent?.exception?.values?.[0]?.value).toBe('Tool exploded');
+      });
+    }
+  });
+});
diff --git a/packages/server-utils/src/integrations/anthropic.ts b/packages/server-utils/src/integrations/anthropic.ts
index 044b2d09ff43..c39ebcdfdeb2 100644
--- a/packages/server-utils/src/integrations/anthropic.ts
+++ b/packages/server-utils/src/integrations/anthropic.ts
@@ -47,7 +47,19 @@ const _anthropicAIIntegration = ((options: AnthropicAiOptions = {}) => {
   };
 }) satisfies IntegrationFn;
 
+// Since 0.134 `@anthropic-ai/sdk` traces itself through the global OTel tracer provider, which duplicates our
+// spans. Only turned off once our channels subscribe, so an app we do not instrument keeps the SDK's spans.
+// A value the user set wins.
+function disableNativeTracing(): void {
+  try {
+    process.env.ANTHROPIC_OPEN_TELEMETRY ??= 'false';
+  } catch {
+    // `process` is absent (edge runtimes) or env access is gated (Deno without `--allow-env`).
+  }
+}
+
 function instrumentAnthropic(options: AnthropicAiOptions): void {
+  disableNativeTracing();
   for (const { channel, operation, stream } of INSTRUMENTED_CHANNELS) {
     bindTracingChannelToSpan(
       diagnosticsChannel.tracingChannel<OrchestrionChannelContext>(channel),
diff --git a/packages/server-utils/src/orchestrion/config/anthropic-ai.ts b/packages/server-utils/src/orchestrion/config/anthropic-ai.ts
index bb7adcae14b2..f0a953e03ef1 100644
--- a/packages/server-utils/src/orchestrion/config/anthropic-ai.ts
+++ b/packages/server-utils/src/orchestrion/config/anthropic-ai.ts
@@ -6,9 +6,10 @@ export const anthropicAiConfig = [
   // One entry each for CJS/ESM
   ...['resources/messages/messages.js', 'resources/messages/messages.mjs'].map(filePath => ({
     channelName: 'chat',
-    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <1', filePath },
+    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <2', filePath },
     functionQuery: { className: 'Messages', methodName: 'create', kind: 'Sync' as const },
   })),
+  // Removed in 1.0.
   ...['resources/completions.js', 'resources/completions.mjs'].map(filePath => ({
     channelName: 'chat',
     module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <1', filePath },
@@ -16,25 +17,25 @@ export const anthropicAiConfig = [
   })),
   ...['resources/beta/messages/messages.js', 'resources/beta/messages/messages.mjs'].map(filePath => ({
     channelName: 'chat',
-    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <1', filePath },
+    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <2', filePath },
     functionQuery: { className: 'Messages', methodName: 'create', kind: 'Sync' as const },
   })),
   // `messages.stream()` returns a synchronous emitter, not a promise, so `kind: 'Sync'` is required:
   // `Auto`'s promise wrapper never publishes `end` for a non-thenable return, so the span would never end.
   ...['resources/messages/messages.js', 'resources/messages/messages.mjs'].map(filePath => ({
     channelName: 'messages-stream',
-    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <1', filePath },
+    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.19.2 <2', filePath },
     functionQuery: { className: 'Messages', methodName: 'stream', kind: 'Sync' as const },
   })),
   ...['resources/beta/messages/messages.js', 'resources/beta/messages/messages.mjs'].map(filePath => ({
     channelName: 'tool-runner',
-    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.63.0 <1', filePath },
+    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.63.0 <2', filePath },
     functionQuery: { className: 'Messages', methodName: 'toolRunner', kind: 'Sync' as const },
   })),
   // The constructor, not `sessions.events.toolRunner()`, so runners built directly (e.g. by `EnvironmentWorker`) are covered.
   ...['lib/tools/SessionToolRunner.js', 'lib/tools/SessionToolRunner.mjs'].map(filePath => ({
     channelName: 'session-tool-runner',
-    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.97.0 <1', filePath },
+    module: { name: '@anthropic-ai/sdk', versionRange: '>=0.97.0 <2', filePath },
     functionQuery: { className: 'SessionToolRunner' },
   })),
 ] satisfies InstrumentationConfig[];
diff --git a/packages/server-utils/test/integrations/anthropic.test.ts b/packages/server-utils/test/integrations/anthropic.test.ts
new file mode 100644
index 000000000000..c71b2a4bb05a
--- /dev/null
+++ b/packages/server-utils/test/integrations/anthropic.test.ts
@@ -0,0 +1,50 @@
+import type { AsyncContextStrategy } from '@sentry/core';
+import { GLOBAL_OBJ, setAsyncContextStrategy } from '@sentry/core';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { getDefaultTestClientOptions, TestClient } from '../mocks/client';
+
+// The channel subscription runs once per module instance, so each test loads a fresh copy.
+async function setUpIntegration(): Promise<void> {
+  const { anthropicAIIntegration } = await import('../../src/integrations/anthropic');
+  anthropicAIIntegration().setup!(new TestClient(getDefaultTestClientOptions()));
+}
+
+describe('anthropicAIIntegration', () => {
+  beforeEach(() => {
+    vi.resetModules();
+    // A tracing-channel binding, so the integration subscribes synchronously.
+    setAsyncContextStrategy({
+      getTracingChannelBinding: () => ({ asyncLocalStorage: {}, getStoreWithActiveSpan: () => ({}) as never }),
+    } as unknown as AsyncContextStrategy);
+    vi.stubEnv('ANTHROPIC_OPEN_TELEMETRY', undefined);
+  });
+
+  afterEach(() => {
+    vi.unstubAllEnvs();
+    setAsyncContextStrategy(undefined);
+    delete GLOBAL_OBJ.__SENTRY_ORCHESTRION__;
+  });
+
+  it("turns off the SDK's own OpenTelemetry spans once the SDK is instrumented", async () => {
+    GLOBAL_OBJ.__SENTRY_ORCHESTRION__ = { runtime: ['@anthropic-ai/sdk'] };
+
+    await setUpIntegration();
+
+    expect(process.env.ANTHROPIC_OPEN_TELEMETRY).toBe('false');
+  });
+
+  it("keeps the SDK's own spans when the SDK is not instrumented", async () => {
+    await setUpIntegration();
+
+    expect(process.env.ANTHROPIC_OPEN_TELEMETRY).toBeUndefined();
+  });
+
+  it('keeps a value the user set', async () => {
+    GLOBAL_OBJ.__SENTRY_ORCHESTRION__ = { runtime: ['@anthropic-ai/sdk'] };
+    vi.stubEnv('ANTHROPIC_OPEN_TELEMETRY', 'true');
+
+    await setUpIntegration();
+
+    expect(process.env.ANTHROPIC_OPEN_TELEMETRY).toBe('true');
+  });
+});
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4df512ed77de..4240a3794bdb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -592,8 +592,8 @@ importers:
   dev-packages/node-integration-tests:
     devDependencies:
       '@anthropic-ai/sdk':
-        specifier: 0.133.0
-        version: 0.133.0(zod@4.6.7)
+        specifier: 1.3.0
+        version: 1.3.0(zod@4.6.7)
       '@apollo/server':
         specifier: ^5.5.0
         version: 5.5.0(graphql@16.12.0)(supports-color@10.0.0)
@@ -2769,6 +2769,15 @@ packages:
       zod:
         optional: true
 
+  '@anthropic-ai/sdk@1.3.0':
+    resolution: {integrity: sha512-k7z9BlLLPxfZH+ov7dS6EnaN/wiZeV8YNT1LZfrpAHIy7oY7pHr4UzirF9f2OlHtFEnRBOX+AZQ91Y5fK+TPTw==}
+    hasBin: true
+    peerDependencies:
+      zod: ^3.25.0 || ^4.0.0
+    peerDependenciesMeta:
+      zod:
+        optional: true
+
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5':
     resolution: {integrity: sha512-/nmTAee5mBly9QiIQSGIKITv9TcEyLTQJFbYjfyWCEfYofxQgurMrT5fLDIRneSPqICucRTxgPMHmc6/q7cgfw==}
     engines: {node: '>=18.0.0'}
@@ -19960,6 +19969,14 @@ snapshots:
     optionalDependencies:
       zod: 4.6.7
 
+  '@anthropic-ai/sdk@1.3.0(zod@4.6.7)':
+    dependencies:
+      '@opentelemetry/api': 1.10.0
+      json-schema-to-ts: 3.1.1
+      standardwebhooks: 1.1.1
+    optionalDependencies:
+      zod: 4.6.7
+
   '@apm-js-collab/code-transformer-bundler-plugins@0.7.5(esbuild@0.28.1)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@apm-js-collab/code-transformer': 0.19.0

From 069f36afd2fd800e7b3deb51a8b236c08323c29c Mon Sep 17 00:00:00 2001
From: Francesco Gringl-Novy <francesco.novy@sentry.io>
Date: Wed, 4 Nov 2026 14:50:21 +0100
Subject: [PATCH 159/169] ref(server-utils): Share the postgres.js query
 settlement logic (#26094)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** The postgres.js integration and the portable
`instrumentPostgresJsSql` wrapper each had their own copy of the logic
that ends a span when a query settles. This moves it into one helper and
gives it direct unit tests, which it didn't have before.

**How to review:** Start with `_wrapQuerySettlement` in
`postgresjs-wrapper.ts`, which is the integration's existing function
plus an `onSettle` callback for its `SPAN_ENDED` flag. The integration
side should behave the same. The wrapper changes slightly: it uses plain
functions instead of Proxies (the callbacks have no properties to
forward), a missing callback no longer throws, and its debug messages
use the `[instrumentation:postgresjs]` prefix.

**Unsure about:** No integration or e2e test calls
`instrumentPostgresJsSql`, so the wrapper's side is only covered by unit
tests.

Stacked on #25929.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../src/integrations/postgresjs-wrapper.ts    | 98 ++++++++++++-------
 .../src/integrations/postgresjs.ts            | 67 ++-----------
 .../integrations/postgresjs-wrapper.test.ts   | 97 +++++++++++++++++-
 3 files changed, 165 insertions(+), 97 deletions(-)

diff --git a/packages/server-utils/src/integrations/postgresjs-wrapper.ts b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
index 24e651027aac..e3f07de34d75 100644
--- a/packages/server-utils/src/integrations/postgresjs-wrapper.ts
+++ b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
@@ -28,6 +28,12 @@ import {
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 
+/** The callbacks postgres.js calls on a `Query` when it settles. */
+export interface PostgresQuerySettlement {
+  resolve?: (...args: unknown[]) => unknown;
+  reject?: (...args: unknown[]) => unknown;
+}
+
 export type PostgresConnectionContext = {
   ATTR_DB_NAMESPACE?: string;
   ATTR_SERVER_ADDRESS?: string;
@@ -234,7 +240,10 @@ function _wrapSingleQueryHandle(
 
   // IMPORTANT: We must replace the handle function directly, not use a Proxy,
   // because Query.then() internally calls this.handle(), which would bypass a Proxy wrapper.
-  const wrappedHandle = async function (this: { executed?: boolean }, ...args: unknown[]): Promise<unknown> {
+  const wrappedHandle = async function (
+    this: PostgresQuerySettlement & { executed?: boolean },
+    ...args: unknown[]
+  ): Promise<unknown> {
     // postgres.js calls handle() from then/catch/finally — only the first call executes SQL,
     // subsequent calls are no-ops (guarded by this.executed). Skip span creation for no-ops.
     if (this.executed || !_shouldCreateSpans(options)) {
@@ -266,43 +275,7 @@ function _wrapSingleQueryHandle(
         }
       }
 
-      const queryWithCallbacks = this as {
-        resolve: unknown;
-        reject: unknown;
-      };
-
-      queryWithCallbacks.resolve = new Proxy(queryWithCallbacks.resolve as (...args: unknown[]) => unknown, {
-        apply: (resolveTarget, resolveThisArg, resolveArgs: [{ command?: string }]) => {
-          try {
-            // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-            span.setAttribute(DB_OPERATION_NAME, resolveArgs?.[0]?.command || queryAttributes[DB_OPERATION_NAME]);
-            span.end();
-          } catch (e) {
-            DEBUG_BUILD && debug.error('Error ending span in resolve callback:', e);
-          }
-
-          return Reflect.apply(resolveTarget, resolveThisArg, resolveArgs);
-        },
-      });
-
-      queryWithCallbacks.reject = new Proxy(queryWithCallbacks.reject as (...args: unknown[]) => unknown, {
-        apply: (rejectTarget, rejectThisArg, rejectArgs: { message?: string; code?: string; name?: string }[]) => {
-          try {
-            span.setStatus({
-              code: SPAN_STATUS_ERROR,
-              message: rejectArgs?.[0]?.message || 'unknown_error',
-            });
-
-            span.setAttribute(DB_RESPONSE_STATUS_CODE, rejectArgs?.[0]?.code || 'unknown');
-            span.setAttribute(ERROR_TYPE, rejectArgs?.[0]?.name || 'unknown');
-
-            span.end();
-          } catch (e) {
-            DEBUG_BUILD && debug.error('Error ending span in reject callback:', e);
-          }
-          return Reflect.apply(rejectTarget, rejectThisArg, rejectArgs);
-        },
-      });
+      _wrapQuerySettlement(this, span, queryAttributes[DB_OPERATION_NAME]);
 
       // Handle synchronous errors that might occur before promise is created
       try {
@@ -397,6 +370,55 @@ export function _buildConnectionContext(options: {
   };
 }
 
+/**
+ * Wrap `query.resolve`/`query.reject` so the span ends when the query settles.
+ *
+ * `Query extends Promise` and `async handle()` only dispatches — its promise
+ * resolves immediately, long before the query completes. postgres.js signals
+ * completion by calling `this.resolve`/`this.reject`, so we own the span end
+ * there. Wrapping happens at handle-start because `reject` can fire
+ * synchronously during dispatch and `cursor()` reassigns both before executing.
+ */
+export function _wrapQuerySettlement(
+  query: PostgresQuerySettlement,
+  span: Span,
+  operationName: string | undefined,
+  onSettle?: () => void,
+): void {
+  const originalResolve = query.resolve;
+  if (typeof originalResolve === 'function') {
+    query.resolve = function (this: unknown, ...resolveArgs: unknown[]): unknown {
+      onSettle?.();
+      try {
+        const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
+        // Re-set the operation name with the server-reported command, which is more reliable than the query text.
+        span.setAttribute(DB_OPERATION_NAME, command || operationName);
+        span.end();
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in resolve:', e);
+      }
+      return originalResolve.apply(this, resolveArgs);
+    };
+  }
+
+  const originalReject = query.reject;
+  if (typeof originalReject === 'function') {
+    query.reject = function (this: unknown, ...rejectArgs: unknown[]): unknown {
+      onSettle?.();
+      try {
+        const err = rejectArgs[0] as { message?: string; code?: string; name?: string } | undefined;
+        span.setStatus({ code: SPAN_STATUS_ERROR, message: err?.message || 'unknown_error' });
+        span.setAttribute(DB_RESPONSE_STATUS_CODE, err?.code || 'unknown');
+        span.setAttribute(ERROR_TYPE, err?.name || 'unknown');
+        span.end();
+      } catch (e) {
+        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in reject:', e);
+      }
+      return originalReject.apply(this, rejectArgs);
+    };
+  }
+}
+
 /**
  * Extracts and stores connection context from sql.options.
  */
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs.ts
index d67ef48c175a..f19d739176dc 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs.ts
@@ -3,22 +3,22 @@ import {
   DB_OPERATION_NAME,
   DB_QUERY_TEXT,
   DB_SYSTEM_NAME,
-  ERROR_TYPE,
   SENTRY_KIND,
   SENTRY_OP,
   SENTRY_ORIGIN,
-  DB_RESPONSE_STATUS_CODE,
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Span, SpanAttributes } from '@sentry/core';
-import { debug, defineIntegration, SPAN_STATUS_ERROR, startInactiveSpan } from '@sentry/core';
+import { debug, defineIntegration, startInactiveSpan } from '@sentry/core';
 import { DEBUG_BUILD } from '../debug-build';
 import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
 import {
   _buildConnectionContext,
   _getConnectionAttributes,
   _reconstructQuery,
+  _wrapQuerySettlement,
   type PostgresConnectionContext,
+  type PostgresQuerySettlement,
 } from './postgresjs-wrapper';
 import type { OrchestrionChannelContext } from '../orchestrion/types';
 import { CHANNELS } from '../orchestrion/channels';
@@ -60,11 +60,9 @@ export interface PostgresJsIntegrationOptions {
 }
 
 /** The `Query` instance postgres.js passes as `self` to `Query.prototype.handle`. */
-interface PostgresQuery {
+interface PostgresQuery extends PostgresQuerySettlement {
   strings?: string[];
   executed?: boolean;
-  resolve?: (...args: unknown[]) => unknown;
-  reject?: (...args: unknown[]) => unknown;
 }
 
 interface PostgresJsQueryContext extends OrchestrionChannelContext {
@@ -132,57 +130,6 @@ function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext):
   }
 }
 
-/**
- * Wrap `query.resolve`/`query.reject` so the span ends when the query settles.
- *
- * `Query extends Promise` and `async handle()` only dispatches — its promise
- * resolves immediately, long before the query completes. postgres.js signals
- * completion by calling `this.resolve`/`this.reject`, so we own the span end
- * there. Wrapping happens at handle-start because `reject` can fire
- * synchronously during dispatch and `cursor()` reassigns both before executing.
- */
-function wrapQuerySettlement(data: PostgresJsQueryContext, span: Span, operationName: string | undefined): void {
-  const query = data.self;
-  if (!query) {
-    return;
-  }
-
-  const originalResolve = query.resolve;
-  if (typeof originalResolve === 'function') {
-    query.resolve = function (this: unknown, ...resolveArgs: unknown[]): unknown {
-      // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
-      // wrapper even if `span.end()` below throws.
-      data[SPAN_ENDED] = true;
-      try {
-        const command = (resolveArgs[0] as { command?: string } | undefined)?.command;
-        // Re-set the operation name with the server-reported command, which is more reliable than the query text.
-        span.setAttribute(DB_OPERATION_NAME, command || operationName);
-        span.end();
-      } catch (e) {
-        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in resolve:', e);
-      }
-      return originalResolve.apply(this, resolveArgs);
-    };
-  }
-
-  const originalReject = query.reject;
-  if (typeof originalReject === 'function') {
-    query.reject = function (this: unknown, ...rejectArgs: unknown[]): unknown {
-      data[SPAN_ENDED] = true;
-      try {
-        const err = rejectArgs[0] as { message?: string; code?: string; name?: string } | undefined;
-        span.setStatus({ code: SPAN_STATUS_ERROR, message: err?.message || 'unknown_error' });
-        span.setAttribute(DB_RESPONSE_STATUS_CODE, err?.code || 'unknown');
-        span.setAttribute(ERROR_TYPE, err?.name || 'unknown');
-        span.end();
-      } catch (e) {
-        DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error ending span in reject:', e);
-      }
-      return originalReject.apply(this, rejectArgs);
-    };
-  }
-}
-
 const _postgresJsIntegration = ((options: PostgresJsIntegrationOptions = {}) => {
   return {
     name: INTEGRATION_NAME,
@@ -277,7 +224,11 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
         }
       }
 
-      wrapQuerySettlement(data, span, queryAttributes[DB_OPERATION_NAME]);
+      // Claim ownership of ending the span up front, so `deferSpanEnd` defers to the
+      // settlement wrappers even if `span.end()` throws in them.
+      _wrapQuerySettlement(query, span, queryAttributes[DB_OPERATION_NAME], () => {
+        data[SPAN_ENDED] = true;
+      });
 
       return span;
     },
diff --git a/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts b/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
index d1874a458589..40042c402bc5 100644
--- a/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
+++ b/packages/server-utils/test/integrations/postgresjs-wrapper.test.ts
@@ -1,6 +1,11 @@
+import { DB_OPERATION_NAME, DB_RESPONSE_STATUS_CODE, ERROR_TYPE } from '@sentry/conventions/attributes';
 import * as SentryCore from '@sentry/core';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-import { _reconstructQuery, instrumentPostgresJsSql } from '../../src/integrations/postgresjs-wrapper';
+import {
+  _reconstructQuery,
+  _wrapQuerySettlement,
+  instrumentPostgresJsSql,
+} from '../../src/integrations/postgresjs-wrapper';
 import { sanitizeSqlQuery } from '../../src/utils/sql';
 
 describe('PostgresJs portable instrumentation', () => {
@@ -87,6 +92,96 @@ describe('PostgresJs portable instrumentation', () => {
     });
   });
 
+  describe('_wrapQuerySettlement', () => {
+    const createSpan = () =>
+      ({ end: vi.fn(), setAttribute: vi.fn(), setStatus: vi.fn() }) as unknown as SentryCore.Span;
+
+    it('ends the span with the server-reported command on resolve', () => {
+      const span = createSpan();
+      const resolve = vi.fn((_result: unknown) => 'resolved');
+      const onSettle = vi.fn();
+      const query = { resolve, reject: vi.fn() };
+
+      _wrapQuerySettlement(query, span, 'SELECT', onSettle);
+      const result = query.resolve({ command: 'UPDATE' });
+
+      expect(span.setAttribute).toHaveBeenCalledWith(DB_OPERATION_NAME, 'UPDATE');
+      expect(span.end).toHaveBeenCalledTimes(1);
+      expect(onSettle).toHaveBeenCalledTimes(1);
+      expect(resolve).toHaveBeenCalledWith({ command: 'UPDATE' });
+      expect(result).toBe('resolved');
+    });
+
+    it('falls back to the given operation name on resolve', () => {
+      const span = createSpan();
+      const query = { resolve: vi.fn(), reject: vi.fn() };
+
+      _wrapQuerySettlement(query, span, 'SELECT');
+      query.resolve({});
+
+      expect(span.setAttribute).toHaveBeenCalledWith(DB_OPERATION_NAME, 'SELECT');
+    });
+
+    it('marks the span as errored and ends it on reject', () => {
+      const span = createSpan();
+      const reject = vi.fn((_error: unknown) => 'rejected');
+      const onSettle = vi.fn();
+      const query = { resolve: vi.fn(), reject };
+      const error = { message: 'boom', code: '42P01', name: 'PostgresError' };
+
+      _wrapQuerySettlement(query, span, 'SELECT', onSettle);
+      const result = query.reject(error);
+
+      expect(span.setStatus).toHaveBeenCalledWith({ code: SentryCore.SPAN_STATUS_ERROR, message: 'boom' });
+      expect(span.setAttribute).toHaveBeenCalledWith(DB_RESPONSE_STATUS_CODE, '42P01');
+      expect(span.setAttribute).toHaveBeenCalledWith(ERROR_TYPE, 'PostgresError');
+      expect(span.end).toHaveBeenCalledTimes(1);
+      expect(onSettle).toHaveBeenCalledTimes(1);
+      expect(reject).toHaveBeenCalledWith(error);
+      expect(result).toBe('rejected');
+    });
+
+    it('uses fallbacks for an error without details', () => {
+      const span = createSpan();
+      const query = { resolve: vi.fn(), reject: vi.fn() };
+
+      _wrapQuerySettlement(query, span, undefined);
+      query.reject(undefined);
+
+      expect(span.setStatus).toHaveBeenCalledWith({ code: SentryCore.SPAN_STATUS_ERROR, message: 'unknown_error' });
+      expect(span.setAttribute).toHaveBeenCalledWith(DB_RESPONSE_STATUS_CODE, 'unknown');
+      expect(span.setAttribute).toHaveBeenCalledWith(ERROR_TYPE, 'unknown');
+    });
+
+    it('still settles the query and runs onSettle when ending the span throws', () => {
+      const span = createSpan();
+      vi.mocked(span.end).mockImplementation(() => {
+        throw new Error('end failed');
+      });
+      const resolve = vi.fn();
+      const reject = vi.fn();
+      const onSettle = vi.fn();
+      const query = { resolve, reject };
+
+      _wrapQuerySettlement(query, span, 'SELECT', onSettle);
+      query.resolve({});
+      query.reject(new Error('boom'));
+
+      expect(resolve).toHaveBeenCalledTimes(1);
+      expect(reject).toHaveBeenCalledTimes(1);
+      expect(onSettle).toHaveBeenCalledTimes(2);
+    });
+
+    it('leaves missing callbacks alone', () => {
+      const query: { resolve?: () => void; reject?: () => void } = {};
+
+      _wrapQuerySettlement(query, createSpan(), 'SELECT');
+
+      expect(query.resolve).toBeUndefined();
+      expect(query.reject).toBeUndefined();
+    });
+  });
+
   describe('instrumentPostgresJsSql', () => {
     it('returns non-function values unchanged', () => {
       expect(instrumentPostgresJsSql(null as any)).toBe(null);

From 930a4c80cd10bc03c8c527d76813956ed04ecca7 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 14:51:06 +0100
Subject: [PATCH 160/169] chore(deps): Bump @nuxt/devtools from 3.4.1 to 3.4.4
 (#26097)

**Why:** Fixes the open simple-git advisories, including two critical
(GHSA-x6jw-m9v5-85vh, GHSA-v5rq-49vh-5v5c). `@nuxt/devtools` 3.4.3
dropped its `simple-git` dependency, so a lockfile-only bump removes it.
Dependabot alerts:
https://github.com/getsentry/sentry-javascript/security/dependabot/3324,
https://github.com/getsentry/sentry-javascript/security/dependabot/3325

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 pnpm-lock.yaml | 573 +++++++++++++++++++++++--------------------------
 1 file changed, 272 insertions(+), 301 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4240a3794bdb..b0bfb39a23d0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -494,16 +494,16 @@ importers:
         version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
       '@langchain/core':
         specifier: ^1.2.17
-        version: 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+        version: 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       '@langchain/langgraph':
         specifier: ^1.0.1
-        version: 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
+        version: 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
       '@langchain/openai':
         specifier: ^1.6.2
-        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)
+        version: 1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)
       '@langchain/typesafe':
         specifier: ^0.0.2
-        version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))
+        version: 0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.22.1))
       '@opentelemetry/api':
         specifier: ^1.9.1
         version: 1.10.0
@@ -536,10 +536,10 @@ importers:
         version: 4.13.11
       langchain:
         specifier: ^1.5.16
-        version: 1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3)
+        version: 1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.22.1)
       openai:
         specifier: 5.18.1
-        version: 5.18.1(ws@8.21.3)(zod@4.6.7)
+        version: 5.18.1(ws@8.22.1)(zod@4.6.7)
       prisma:
         specifier: 6.15.0
         version: 6.15.0(magicast@0.3.5)(typescript@7.0.2)
@@ -629,13 +629,13 @@ importers:
         version: 1.4.0
       '@earendil-works/pi-ai':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       '@earendil-works/pi-durable':
         specifier: ^1.4.0
-        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       '@flue/runtime':
         specifier: 2.3.0
-        version: 2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+        version: 2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       '@google/genai':
         specifier: ^1.20.0
         version: 1.52.0(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(supports-color@10.0.0)
@@ -656,16 +656,16 @@ importers:
         version: 12.0.2(supports-color@10.0.0)
       '@langchain/anthropic':
         specifier: ^0.3.10
-        version: 0.3.31(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(zod@4.6.7)
+        version: 0.3.31(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(zod@4.6.7)
       '@langchain/core':
         specifier: ^0.3.80
-        version: 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+        version: 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       '@langchain/langgraph':
         specifier: ^0.2.32
-        version: 0.2.74(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod-to-json-schema@3.25.2(zod@4.6.7))
+        version: 0.2.74(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod-to-json-schema@3.25.2(zod@4.6.7))
       '@langchain/openai':
         specifier: ^0.5.0
-        version: 0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(ws@8.21.3)
+        version: 0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(ws@8.22.1)
       '@mistralai/mistralai':
         specifier: 3.3.0
         version: 3.3.0(@aws-sdk/client-s3@3.1161.0)(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@cfworker/json-schema@4.1.1)(@opentelemetry/api@1.9.0)(supports-color@10.0.0)
@@ -830,7 +830,7 @@ importers:
         version: 2.1.2
       openai:
         specifier: 5.18.1
-        version: 5.18.1(ws@8.21.3)(zod@4.6.7)
+        version: 5.18.1(ws@8.22.1)(zod@4.6.7)
       pg:
         specifier: 8.23.1
         version: 8.23.1
@@ -884,7 +884,7 @@ importers:
         version: 4.9.0
       ws:
         specifier: ^8.20.1
-        version: 8.21.3
+        version: 8.22.1
       yargs:
         specifier: ^18.2.0
         version: 18.2.0
@@ -934,7 +934,7 @@ importers:
         version: 4.22.1(supports-color@10.0.0)
       ws:
         specifier: ^8.20.1
-        version: 8.21.3
+        version: 8.22.1
     devDependencies:
       '@playwright/test':
         specifier: 1.64.1
@@ -1764,7 +1764,7 @@ importers:
     dependencies:
       '@nuxt/kit':
         specifier: ^4.6.0
-        version: 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+        version: 4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@sentry/browser':
         specifier: 11.10.0
         version: link:../browser
@@ -1798,7 +1798,7 @@ importers:
         version: 4.20260519.1
       '@nuxt/nitro-server':
         specifier: ^3.21.11
-        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+        version: 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.5)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema':
         specifier: ^3.21.11
         version: 3.21.11
@@ -1822,7 +1822,7 @@ importers:
         version: 3.25.1
       nuxt:
         specifier: 3.21.11
-        version: 3.21.11(ebade832173a31b4adb92857b21c371a)
+        version: 3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3)
       unstorage:
         specifier: ^1.17.5
         version: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
@@ -4169,12 +4169,12 @@ packages:
   '@cfworker/json-schema@4.1.1':
     resolution: {integrity: sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==}
 
-  '@clack/core@1.4.3':
-    resolution: {integrity: sha512-/kr3UWNtdJfxZtPgDqUOmG2pvwlmcLGheex5yiZKdwbzZJxhV+HMNR9QNmyY5cGwTNV6LrR7Jtp+KjhUAP1qBQ==}
+  '@clack/core@1.5.1':
+    resolution: {integrity: sha512-iHTrHA8MtVuLl2TfZySmcKv1qO2PoyC9Z7pfSDozEuV5vtY3/wcOPKJXlqJ5Oq2Cx5DDGQGAMVx6HZfRRoVEbQ==}
     engines: {node: '>= 20.12.0'}
 
-  '@clack/prompts@1.7.0':
-    resolution: {integrity: sha512-y7/yvZ2TPAnR9+jnc00klvNNLkJiXFFrQA/hlLCcxA9a2A4zQIOimyFQ9XfwYKiGD1fb5GY8vbKIIgO8d5Tb2A==}
+  '@clack/prompts@1.8.1':
+    resolution: {integrity: sha512-dlT1m5e/0yUL0kRNcQn7yGLVThkgbB0Ga/1AmfDDC/8ik6AIiSf2QLQO2zPYvefsHP0aFgxO93cVLCCfDp7kzQ==}
     engines: {node: '>= 20.12.0'}
 
   '@cloudflare/kv-asset-handler@0.4.2':
@@ -5935,12 +5935,6 @@ packages:
     engines: {node: '>= 12'}
     deprecated: Please upgrade to v15 or higher. All reported bugs in this version are fixed in newer releases, dependencies have been updated, and security has been improved.
 
-  '@kwsites/file-exists@1.1.1':
-    resolution: {integrity: sha512-m9/5YGR18lIwxSFDwfE3oA7bWuq9kdau6ugN4H2rJeyhFQZcG9AgSHkQtSD15a8WvTgfz9aikZMrKPHvbpqFiw==}
-
-  '@kwsites/promise-deferred@1.1.1':
-    resolution: {integrity: sha512-GaHYm+c0O9MjZRu0ongGBRbinu8gVAMd2UZjji6jVmqKtZluZnptXGWhz1E8j8D2HJ3f/yMxKAUC0b+57wncIw==}
-
   '@langchain/anthropic@0.3.31':
     resolution: {integrity: sha512-XyjwE1mA1I6sirSlVZtI6tyv7nH3+b8F5IFDi9WNKA8+SidJ0o3cP90TxrK7x1sSLmdj+su3f8s2hOusw6xpaw==}
     engines: {node: '>=18'}
@@ -6318,17 +6312,17 @@ packages:
   '@nuxt/devalue@2.0.2':
     resolution: {integrity: sha512-GBzP8zOc7CGWyFQS6dv1lQz8VVpz5C2yRszbXufwG/9zhStTIH50EtD87NmWbTMwXDvZLNg8GIpb1UFdH93JCA==}
 
-  '@nuxt/devtools-kit@3.4.1':
-    resolution: {integrity: sha512-6ltPm2yUW8GvDdf3VJna7+flLi+ej7xRfSr+S4ovevKt/CuPf9EqYOn1jW7Kw/U1MXt/71zkn+/O2vu3G6O9Hg==}
+  '@nuxt/devtools-kit@3.4.4':
+    resolution: {integrity: sha512-q3aRKpnriK/kITYlYUXSE3O0R7WeJwSMLvtbo1HfcKXYg/q8688iIb5VURl0fbkSaFTk7ndU5HIbW+5f0JOJPQ==}
     peerDependencies:
       vite: '>=6.0'
 
-  '@nuxt/devtools-wizard@3.4.1':
-    resolution: {integrity: sha512-taGeuTnkHsZVjgD9r6NXvvHaBzB2j4mCgOmlmkz3ntsqgh1SJfmsD11Tmtl7FVAxJS8Wuvuzgt0GyTlADBW9Wg==}
+  '@nuxt/devtools-wizard@3.4.4':
+    resolution: {integrity: sha512-iGL6p2ZM926pfV0UUsnaseNGNEp/PWbX5f1zFqRgVxiDOEVsrBOfFA5sLgfuO2NWi3+3/84fy7ungcCP6zGYvA==}
     hasBin: true
 
-  '@nuxt/devtools@3.4.1':
-    resolution: {integrity: sha512-20zZs6k/zAdi+PM7s1BwxE3hanZ+R1OGi5DWCKPyzSnhUUeeNebvWNgec7Rwnx6iKLkJfK4WFIZ+FL2QurG/ZQ==}
+  '@nuxt/devtools@3.4.4':
+    resolution: {integrity: sha512-cPwBW+odVCCid6pllN3f93L0hyOCYRXrEZLmCiV2IgBoQ3lskhuu304JDJjv/VvtWB+OVWfHQ38aowX28WybXQ==}
     hasBin: true
     peerDependencies:
       '@vitejs/devtools': '*'
@@ -6341,8 +6335,8 @@ packages:
     resolution: {integrity: sha512-0Xi3tgwN77w43Q8GCPIrvWmF1J7Peehkts44E0uKNIml9lB8WoUn8YxyUjxBv47XtVR86NWoWALAT+/IEMHJEA==}
     engines: {node: '>=18.12.0'}
 
-  '@nuxt/kit@4.6.0':
-    resolution: {integrity: sha512-UXTajJ+MFJgwV9UL1CTNNd2PSw5PC3Pjb2rM7FsSYcr92ySQKXEslBnUKbvnXT+gG3NbZ/EF70+WenoNIHX2tw==}
+  '@nuxt/kit@4.6.4':
+    resolution: {integrity: sha512-S7JqP/CCJejDNGADlCIct/SHEPf+Jz3Chrxq7GDgyRPRkRD2flbxoanGq4bkib9kD9QBXJlF4TuCsqqL9a7COw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     peerDependencies:
       '@nuxt/schema': ^3.0.0 || ^4.0.0 || ^5.0.0-0
@@ -8224,12 +8218,6 @@ packages:
   '@simple-dom/interface@1.4.0':
     resolution: {integrity: sha512-l5qumKFWU0S+4ZzMaLXFU8tQZsicHEMEyAxI5kDFGhJsRqDwe0a7/iPA/GdxlGyDKseQQAgIz5kzU7eXTrlSpA==}
 
-  '@simple-git/args-pathspec@1.0.3':
-    resolution: {integrity: sha512-ngJMaHlsWDTfjyq9F3VIQ8b7NXbBLq5j9i5bJ6XLYtD6qlDXT7fdKY2KscWWUF8t18xx052Y/PUO1K1TRc9yKA==}
-
-  '@simple-git/argv-parser@1.1.1':
-    resolution: {integrity: sha512-Q9lBcfQ+VQCpQqGJFHe5yooOS5hGdLFFbJ5R+R5aDsnkPCahtn1hSkMcORX65J2Z5lxSkD0lQorMsncuBQxYUw==}
-
   '@sindresorhus/is@7.0.2':
     resolution: {integrity: sha512-d9xRovfKNz1SKieM0qJdO+PQonjnnIfSNWfHYnBSJ9hkjm0ZPw6HlxscDXYstp3z+7V2GOFHc+J0CYrYTjqCJw==}
     engines: {node: '>=18'}
@@ -10194,8 +10182,8 @@ packages:
   birpc@2.9.0:
     resolution: {integrity: sha512-KrayHS5pBi69Xi9JmvoqrIgYGDkD6mcSe/i6YKi3w5kekCLzrX4+nawcXqrj2tIp50Kw/mT/s3p+GVK0A0sKxw==}
 
-  birpc@4.1.0:
-    resolution: {integrity: sha512-O8L9vALWGqdEe0cG4HJckauw3WeJETlJnDRPUYpgwB7wrU43b/5NGMdVjdVcRo+4ROgd3ih2wha1glDe4HRVgw==}
+  birpc@4.2.0:
+    resolution: {integrity: sha512-KxgKcZPfrtzJDDALHPguGpGJUrzdgpymyiQQgzFjWreHMOpWrnFNVREr5J48x2DBh8ZVioscrV1SBkDipGiX+Q==}
 
   bl@2.2.1:
     resolution: {integrity: sha512-6Pesp1w0DEX1N550i/uGV/TqucVL4AM/pgThFSN/Qq9si1/DF9aIHs1BxD8V/QU0HoeHO6cQRTAuYnLPKq1e4g==}
@@ -10771,6 +10759,9 @@ packages:
   confbox@0.2.4:
     resolution: {integrity: sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ==}
 
+  confbox@0.3.2:
+    resolution: {integrity: sha512-ZUAKhKlkCOrIGKc8cj7zek9s9z1mveHif/25nUshI2BzCRzF7KH7KHa+Lnh2ubq+e1tIlaFuP763mzW4qVoehg==}
+
   connect-history-api-fallback@2.0.0:
     resolution: {integrity: sha512-U73+6lQFmfiNPrYbXqr6kZ1i1wiRqXnp2nhMsINseWXO8lDau0LGEffJ8kQi4EjLZympVgRdvqjAgiZ1tgzDDA==}
     engines: {node: '>=0.8'}
@@ -11333,6 +11324,10 @@ packages:
     resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==}
     engines: {node: '>=0.3.1'}
 
+  diff@9.0.0:
+    resolution: {integrity: sha512-svtcdpS8CgJyqAjEQIXdb3OjhFVVYjzGAPO8WGCmRbrml64SPw/jJD4GoE98aR7r25A0XcgrK3F02yw9R/vhQw==}
+    engines: {node: '>=0.3.1'}
+
   dir-glob@3.0.1:
     resolution: {integrity: sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA==}
     engines: {node: '>=8'}
@@ -12190,8 +12185,8 @@ packages:
     resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
     engines: {node: '>= 18'}
 
-  exsolve@1.1.3:
-    resolution: {integrity: sha512-kuzL9zherLQoqDeQaS55AiiIg1kb4KYXaSusTtgZTPlvKP2gGCI82LNmBNh5RjDVUXIcmgx+/Mx7vPwRzBbhJA==}
+  exsolve@1.2.0:
+    resolution: {integrity: sha512-h1pQPR9XoeSMdntRNCjyTznaume4UpfXrULBnlkZ2CUM/G5eSa+pBByGldO5uR8dxbPC+OuJXsPPNf+JZ81ADg==}
 
   extend-shallow@2.0.1:
     resolution: {integrity: sha512-zCnTtlxNoAiDc3gqY2aYAWFx7XWWiasuF2K8Me5WbN8otHKTUKBwjPtNpRs/rbUZm7KxWAaNj7P1a/p52GbVug==}
@@ -12913,8 +12908,8 @@ packages:
   hookable@5.5.3:
     resolution: {integrity: sha512-Yc+BQe8SvoXH1643Qez1zqLRmbA5rCL+sSmk6TVos0LWVfNIB7PGncdlId77WzLGSIB5KaWgTaNTs2lNVEI6VQ==}
 
-  hookable@6.1.1:
-    resolution: {integrity: sha512-U9LYDy1CwhMCnprUfeAZWZGByVbhd54hwepegYTK7Pi5NvqEj63ifz5z+xukznehT7i6NIZRu89Ay1AZmRsLEQ==}
+  hookable@6.1.2:
+    resolution: {integrity: sha512-+abwxtiEA52GCVIsQqut3S/uKTbUwYIp4Pe/vv+6py5XiXBCqMZHg6pA6Y5qhgLSEys0/cYuPbO0z1QFj5ZCmg==}
 
   hosted-git-info@5.1.0:
     resolution: {integrity: sha512-Ek+QmMEqZF8XrbFdwoDjSbm7rT23pCgEMOJmz6GPk/s4yH//RQfNPArhIxbguNxROq/+5lNBwCDHMhA903Kx1Q==}
@@ -13096,16 +13091,16 @@ packages:
     resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
     engines: {node: '>= 4'}
 
-  ignore@7.0.12:
-    resolution: {integrity: sha512-/8UvqAPU9DGTI9k4mxtf49U37Isfwr8Uts96+SBHIkFxPJnHS0Ew4f00sM4Scd8V8EjM0jUNtVDdv1kPdt35lg==}
+  ignore@7.0.14:
+    resolution: {integrity: sha512-wCBiZ77u1tuWde6G/nfOtLaCTYcFDU5yCzARzK10y+rLhzYoL7a7yEemcopcc2Mzow7gZOIjnV2ym1NYmdiJOQ==}
     engines: {node: '>= 4'}
 
   ignore@7.0.5:
     resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
     engines: {node: '>= 4'}
 
-  image-meta@0.2.2:
-    resolution: {integrity: sha512-3MOLanc3sb3LNGWQl1RlQlNWURE5g32aUphrDyFeCsxBTk08iE3VNe4CwsUZ0Qs1X+EfX0+r29Sxdpza4B+yRA==}
+  image-meta@0.3.1:
+    resolution: {integrity: sha512-rKANCbmsJCZ3/q87GTWZ+8MhOvhPLjsScznVtqvBoTu6Tyq8FzdPoBUMl/ZxQXy+/5I+C1vxXwS1jSwmHgmDLQ==}
 
   image-size@0.5.5:
     resolution: {integrity: sha512-6TDAlDPZxUFCv+fuOkIoXT/V/f3Qbq8e37p+YOiYrUv3v9cc3/6x78VdfPgFVaB9dZYeLUfKgHRebpkm/oP2VQ==}
@@ -13311,8 +13306,8 @@ packages:
     engines: {node: '>=14.16'}
     hasBin: true
 
-  is-installed-globally@1.0.0:
-    resolution: {integrity: sha512-K55T22lfpQ63N4KEN57jZUAaAYqYHEe8veb/TycJRk9DdSCLLcovXz/mL6mOnhQaZsQGwPhuFopdQIlqGSEjiQ==}
+  is-installed-globally@1.0.1:
+    resolution: {integrity: sha512-li88H4QGRoNMX27jEmY8nR515oJVspAgC/WFMlhHfFV8RJ4QyGpHhXnwAe9gH5RIgKmdYRUmrOhQobcgEjIdSw==}
     engines: {node: '>=18'}
 
   is-interactive@1.0.0:
@@ -13852,8 +13847,8 @@ packages:
       openai:
         optional: true
 
-  launch-editor@2.14.1:
-    resolution: {integrity: sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA==}
+  launch-editor@2.14.2:
+    resolution: {integrity: sha512-NHJEb30MGBCkmZXLZwz25t37QR4aY03ZzPYUJXOJaOa92uWwExI9SBQUuIznBYc1xkD7cJNGX7oc3Nl3sq2kQQ==}
 
   layerr@3.0.0:
     resolution: {integrity: sha512-tv754Ki2dXpPVApOrjTyRo4/QegVb9eVFq4mjqp4+NM5NaX7syQvN5BBNfV/ZpAHCEHV24XdUVrBAoka4jt3pA==}
@@ -14188,8 +14183,8 @@ packages:
   magicast@0.3.5:
     resolution: {integrity: sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ==}
 
-  magicast@0.5.4:
-    resolution: {integrity: sha512-llBEhWm1SacoRwgHUoQJYtwp4PBLF4faQi5TCpIGyGs9n4y5+juI0tDgyKIfpqxckRHaHzouUEph3THklWh03w==}
+  magicast@0.5.5:
+    resolution: {integrity: sha512-UicdXN8zQ3JHlxVq+28afMXPr1z7WNY6+7EJnzTdQWkTAlMLF5fNCCKxJHBQwGaNGR11581EiQmQzx73+MvszA==}
 
   make-dir@2.1.0:
     resolution: {integrity: sha512-LS9X+dc8KLxXCb8dni79fLIIUA5VyZoyjSMCwTluaXA0o27cCK0bhXkpgw+sTXVpPy/lSO57ilRixqk0vDmtRA==}
@@ -15258,8 +15253,8 @@ packages:
   ofetch@2.0.0-alpha.3:
     resolution: {integrity: sha512-zpYTCs2byOuft65vI3z43Dd6iSdFbOZZLb9/d21aCpx2rGastVU9dOCv0lu4ykc1Ur1anAYjDi3SUvR0vq50JA==}
 
-  ohash@2.0.11:
-    resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
+  ohash@2.0.12:
+    resolution: {integrity: sha512-65S/5gk9YSsaRjcyf7Nfa6h/d3E8/1gslpXfI4W7Dxn/oap8IKRuNT5VXkLQ1YFKIEg4apRY4Pj6aiwFzrDdmw==}
 
   on-change@6.0.2:
     resolution: {integrity: sha512-08+12qcOVEA0fS9g/VxKS27HaT94nRutUT77J2dr8zv/unzXopvhBuF8tNLWsoLQ5IgrQ6eptGeGqUYat82U1w==}
@@ -15838,8 +15833,8 @@ packages:
   pkg-types@1.3.1:
     resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
 
-  pkg-types@2.3.1:
-    resolution: {integrity: sha512-y+ichcgc2LrADuhLNAx8DFjVfgz91pRxfZdI3UDhxHvcVEZsenLO+7XaU5vOp0u/7V/wZ+plyuQxtrDlZJ+yeg==}
+  pkg-types@2.4.0:
+    resolution: {integrity: sha512-07Fys7iVx0X6TcviMOgogM1Lk33ZyqOezMnU79S+kffWqwolG/5W9V8EgQSeYCIfFTYVgssRbnH630Oa2+soBA==}
 
   pkg-up@3.1.0:
     resolution: {integrity: sha512-nDywThFk1i4BQK4twPQ6TA4RT8bDY96yeuCVBWL3ePARCiEKDRSrNGbFIgUJpLp+XeIR65v8ra7WuJOFUBtkMA==}
@@ -17337,9 +17332,6 @@ packages:
   silent-error@1.1.1:
     resolution: {integrity: sha512-n4iEKyNcg4v6/jpb3c0/iyH2G1nzUNl7Gpqtn/mHIJK9S/q/7MCfoO4rwVOoO59qPFIc0hVHvMbiOJ0NdtxKKw==}
 
-  simple-git@3.36.0:
-    resolution: {integrity: sha512-cGQjLjK8bxJw4QuYT7gxHw3/IouVESbhahSsHrX97MzCL1gu2u7oy38W6L2ZIGECEfIBG4BabsWDPjBxJENv9Q==}
-
   simple-html-tokenizer@0.5.11:
     resolution: {integrity: sha512-C2WEK/Z3HoSFbYq8tI7ni3eOo/NneSPRoPpcM7WdLjFOArFuyXEjAoCdOC3DgMfRyziZQ1hCNR4mrNdWEvD0og==}
 
@@ -19450,8 +19442,8 @@ packages:
       utf-8-validate:
         optional: true
 
-  ws@8.21.3:
-    resolution: {integrity: sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==}
+  ws@8.22.1:
+    resolution: {integrity: sha512-oyL6OPYme/CmiFvNuGzeoxCJ4nOrZE2O1FwM9MWM1AsGri6nLXB2pg+lNA8aLeXMSav0J6eIVS1j6vUPzUtK9g==}
     engines: {node: '>=10.0.0'}
     peerDependencies:
       bufferutil: ^4.0.1
@@ -23173,14 +23165,14 @@ snapshots:
 
   '@cfworker/json-schema@4.1.1': {}
 
-  '@clack/core@1.4.3':
+  '@clack/core@1.5.1':
     dependencies:
       fast-wrap-ansi: 0.2.2
       sisteransi: 1.0.5
 
-  '@clack/prompts@1.7.0':
+  '@clack/prompts@1.8.1':
     dependencies:
-      '@clack/core': 1.4.3
+      '@clack/core': 1.5.1
       fast-string-width: 3.0.2
       fast-wrap-ansi: 0.2.2
       sisteransi: 1.0.5
@@ -23460,7 +23452,7 @@ snapshots:
   '@dxup/nuxt@0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@dxup/unimport': 0.1.2
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/compiler-dom': 3.5.44
       chokidar: 5.0.0
       knitwork: 1.3.0
@@ -23493,9 +23485,9 @@ snapshots:
       '@earendil-works/pi-telemetry': 1.4.0
       typebox: 1.3.27
 
-  '@earendil-works/pi-agent-core@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-agent-core@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)':
     dependencies:
-      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       typebox: 1.3.27
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
@@ -23510,7 +23502,7 @@ snapshots:
       - ws
       - zod
 
-  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-ai@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)':
     dependencies:
       '@anthropic-ai/sdk': 0.129.0(zod@4.6.7)
       '@aws-sdk/client-bedrock-runtime': 3.1127.0
@@ -23519,7 +23511,7 @@ snapshots:
       '@smithy/node-http-handler': 4.12.1
       http-proxy-agent: 9.1.0(supports-color@10.0.0)
       https-proxy-agent: 9.1.0(supports-color@10.0.0)
-      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       partial-json: 0.1.7
       typebox: 1.3.27
     transitivePeerDependencies:
@@ -23539,10 +23531,10 @@ snapshots:
     dependencies:
       quickjs-wasi: 3.6.2
 
-  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@earendil-works/pi-durable@1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)':
     dependencies:
       '@earendil-works/chord': 1.4.0
-      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       '@earendil-works/pi-codemode': 1.4.0
       '@earendil-works/pi-telemetry': 1.4.0
       '@silvia-odwyer/photon': 0.3.3
@@ -24161,10 +24153,10 @@ snapshots:
       '@fastify/forwarded': 3.0.1
       ipaddr.js: 2.4.0
 
-  '@flue/runtime@2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)':
+  '@flue/runtime@2.3.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(typescript@7.0.2)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)':
     dependencies:
-      '@earendil-works/pi-agent-core': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
-      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      '@earendil-works/pi-agent-core': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
+      '@earendil-works/pi-ai': 1.4.0(@aws-sdk/credential-provider-node@3.972.92)(@modelcontextprotocol/sdk@1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7))(@smithy/signature-v4@5.7.5)(supports-color@10.0.0)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       '@hono/node-server': 2.1.5(hono@4.13.11)
       '@modelcontextprotocol/client': 2.0.0
       '@valibot/to-json-schema': 1.8.0(valibot@1.5.0(typescript@7.0.2))
@@ -24283,7 +24275,7 @@ snapshots:
       google-auth-library: 10.9.1(supports-color@10.0.0)
       p-retry: 4.6.2
       protobufjs: 7.6.6
-      ws: 8.21.3
+      ws: 8.22.1
     optionalDependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
     transitivePeerDependencies:
@@ -24296,7 +24288,7 @@ snapshots:
       google-auth-library: 10.9.1(supports-color@10.0.0)
       p-retry: 4.6.2
       protobufjs: 7.6.6
-      ws: 8.21.3
+      ws: 8.22.1
     optionalDependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
     transitivePeerDependencies:
@@ -24883,30 +24875,22 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@kwsites/file-exists@1.1.1(supports-color@10.0.0)':
-    dependencies:
-      debug: 4.4.3(supports-color@10.0.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@kwsites/promise-deferred@1.1.1': {}
-
-  '@langchain/anthropic@0.3.31(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(zod@4.6.7)':
+  '@langchain/anthropic@0.3.31(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(zod@4.6.7)':
     dependencies:
       '@anthropic-ai/sdk': 0.65.0(zod@4.6.7)
-      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       fast-xml-parser: 4.5.6
     transitivePeerDependencies:
       - zod
 
-  '@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))':
+  '@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))':
     dependencies:
       '@cfworker/json-schema': 4.1.1
       ansi-styles: 5.2.0
       camelcase: 6.3.0
       decamelize: 1.2.0
       js-tiktoken: 1.0.21
-      langsmith: 0.3.74(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+      langsmith: 0.3.74(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       mustache: 4.2.0
       p-queue: 6.6.2
       p-retry: 4.6.2
@@ -24919,12 +24903,12 @@ snapshots:
       - '@opentelemetry/sdk-trace-base'
       - openai
 
-  '@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)':
+  '@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)':
     dependencies:
       '@cfworker/json-schema': 4.1.1
       '@standard-schema/spec': 1.1.0
       js-tiktoken: 1.0.21
-      langsmith: 0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      langsmith: 0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       mustache: 4.2.0
       p-queue: 6.6.2
       zod: 4.6.7
@@ -24935,29 +24919,29 @@ snapshots:
       - openai
       - ws
 
-  '@langchain/langgraph-checkpoint@0.0.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))':
+  '@langchain/langgraph-checkpoint@0.0.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))':
     dependencies:
-      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       uuid: 10.0.0
 
-  '@langchain/langgraph-checkpoint@1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))':
+  '@langchain/langgraph-checkpoint@1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))':
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
 
-  '@langchain/langgraph-sdk@0.0.112(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
+  '@langchain/langgraph-sdk@0.0.112(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
     dependencies:
       '@types/json-schema': 7.0.15
       p-queue: 6.6.2
       p-retry: 4.6.2
       uuid: 9.0.1
     optionalDependencies:
-      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
 
-  '@langchain/langgraph-sdk@1.12.3(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
+  '@langchain/langgraph-sdk@1.12.3(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       '@langchain/protocol': 0.0.19
       '@types/json-schema': 7.0.15
       p-queue: 9.3.3
@@ -24966,11 +24950,11 @@ snapshots:
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
 
-  '@langchain/langgraph@0.2.74(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod-to-json-schema@3.25.2(zod@4.6.7))':
+  '@langchain/langgraph@0.2.74(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod-to-json-schema@3.25.2(zod@4.6.7))':
     dependencies:
-      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
-      '@langchain/langgraph-checkpoint': 0.0.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))
-      '@langchain/langgraph-sdk': 0.0.112(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
+      '@langchain/langgraph-checkpoint': 0.0.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))
+      '@langchain/langgraph-sdk': 0.0.112(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       uuid: 10.0.0
       zod: 3.25.76
     optionalDependencies:
@@ -24979,11 +24963,11 @@ snapshots:
       - react
       - react-dom
 
-  '@langchain/langgraph@1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)':
+  '@langchain/langgraph@1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)':
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
-      '@langchain/langgraph-checkpoint': 1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))
-      '@langchain/langgraph-sdk': 1.12.3(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
+      '@langchain/langgraph-checkpoint': 1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))
+      '@langchain/langgraph-sdk': 1.12.3(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       '@langchain/protocol': 0.0.19
       '@standard-schema/spec': 1.1.0
       zod: 4.6.7
@@ -24991,20 +24975,20 @@ snapshots:
       - react
       - react-dom
 
-  '@langchain/openai@0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)))(ws@8.21.3)':
+  '@langchain/openai@0.5.18(@langchain/core@0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)))(ws@8.22.1)':
     dependencies:
-      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))
+      '@langchain/core': 0.3.80(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))
       js-tiktoken: 1.0.21
-      openai: 5.18.1(ws@8.21.3)(zod@3.25.76)
+      openai: 5.18.1(ws@8.22.1)(zod@3.25.76)
       zod: 3.25.76
     transitivePeerDependencies:
       - ws
 
-  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)':
+  '@langchain/openai@1.6.2(@aws-sdk/credential-provider-node@3.972.92)(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)':
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       js-tiktoken: 1.0.21
-      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7)
+      openai: 7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
@@ -25015,12 +24999,12 @@ snapshots:
 
   '@langchain/protocol@0.0.19': {}
 
-  '@langchain/typesafe@0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3))':
+  '@langchain/typesafe@0.0.2(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.22.1))':
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       zod: 4.6.7
     optionalDependencies:
-      langchain: 1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3)
+      langchain: 1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.22.1)
 
   '@leichtgewicht/ip-codec@2.0.4': {}
 
@@ -25056,7 +25040,7 @@ snapshots:
     dependencies:
       '@modelcontextprotocol/sdk': 1.32.2(@cfworker/json-schema@4.1.1)(supports-color@10.0.0)(zod@4.6.7)
       '@opentelemetry/semantic-conventions': 1.43.0
-      ws: 8.21.3
+      ws: 8.22.1
       zod: 4.6.7
       zod-to-json-schema: 3.25.2(zod@4.6.7)
     optionalDependencies:
@@ -25278,17 +25262,17 @@ snapshots:
       - bluebird
       - supports-color
 
-  '@nuxt/cli@3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)':
+  '@nuxt/cli@3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.5)(supports-color@10.0.0)':
     dependencies:
       '@bomb.sh/tab': 0.0.19(cac@6.7.14)(citty@0.2.2)(commander@14.0.3)
-      '@clack/prompts': 1.7.0
-      c12: 3.3.4(magicast@0.5.4)
+      '@clack/prompts': 1.8.1
+      c12: 3.3.4(magicast@0.5.5)
       citty: 0.2.2
       confbox: 0.2.4
       consola: 3.4.2
       debug: 4.4.3(supports-color@10.0.0)
       defu: 6.1.7
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       fuse.js: 7.5.0
       fzf: 0.5.2
       giget: 3.3.1
@@ -25296,10 +25280,10 @@ snapshots:
       listhen: 1.10.1(@parcel/watcher@2.5.6)(srvx@0.11.22)
       nypm: 0.6.9
       ofetch: 1.5.1
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       scule: 1.3.0
       semver: 7.8.5
       srvx: 0.11.22
@@ -25319,9 +25303,9 @@ snapshots:
 
   '@nuxt/devalue@2.0.2': {}
 
-  '@nuxt/devtools-kit@3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
+  '@nuxt/devtools-kit@3.4.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))':
     dependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       execa: 8.0.1
       vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
     transitivePeerDependencies:
@@ -25336,53 +25320,53 @@ snapshots:
       - rolldown
       - unplugin
 
-  '@nuxt/devtools-wizard@3.4.1':
+  '@nuxt/devtools-wizard@3.4.4':
     dependencies:
-      '@clack/prompts': 1.7.0
+      '@clack/prompts': 1.8.1
       consola: 3.4.2
-      diff: 8.0.4
+      diff: 9.0.0
       execa: 8.0.1
-      magicast: 0.5.4
+      magicast: 0.5.5
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       semver: 7.8.5
 
-  '@nuxt/devtools@3.4.1(6d0e88762f54baf3e026c1dece53d30a)':
+  '@nuxt/devtools@3.4.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))':
     dependencies:
-      '@nuxt/devtools-kit': 3.4.1(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
-      '@nuxt/devtools-wizard': 3.4.1
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/devtools-kit': 3.4.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      '@nuxt/devtools-wizard': 3.4.4
+      '@nuxt/kit': 4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
       '@vue/devtools-core': 8.2.1(vue@3.5.44(typescript@7.0.2))
       '@vue/devtools-kit': 8.2.1
-      birpc: 4.1.0
+      birpc: 4.2.0
       consola: 3.4.2
       destr: 2.0.5
       error-stack-parser-es: 2.0.1
       execa: 8.0.1
       fast-npm-meta: 2.2.0
       get-port-please: 3.2.0
-      hookable: 6.1.1
-      image-meta: 0.2.2
-      is-installed-globally: 1.0.0
-      launch-editor: 2.14.1
+      hookable: 6.1.2
+      image-meta: 0.3.1
+      is-installed-globally: 1.0.1
+      launch-editor: 2.14.2
       local-pkg: 1.2.1
-      magicast: 0.5.4
-      nypm: 0.6.9
-      ohash: 2.0.11
+      magicast: 0.5.5
+      ohash: 2.0.12
+      package-manager-detector: 1.9.0
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       semver: 7.8.5
-      simple-git: 3.36.0(supports-color@10.0.0)
       sirv: 3.0.2
       structured-clone-es: 2.0.1
+      tinyexec: 1.3.1
       tinyglobby: 0.2.17
       unstorage: 1.17.5(@azure/storage-blob@12.31.0(supports-color@10.0.0))(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(ioredis@5.11.1(supports-color@10.0.0))
       vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
-      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
+      vite-plugin-inspect: 11.4.1(@nuxt/kit@4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
       vite-plugin-vue-tracer: 1.5.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       which: 6.0.1
-      ws: 8.21.3
+      ws: 8.22.1
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -25412,28 +25396,27 @@ snapshots:
       - mlly
       - oxc-parser
       - rolldown
-      - supports-color
       - unplugin
       - uploadthing
       - utf-8-validate
       - vue
 
-  '@nuxt/kit@3.21.11(magicast@0.5.4)':
+  '@nuxt/kit@3.21.11(magicast@0.5.5)':
     dependencies:
-      c12: 3.3.4(magicast@0.5.4)
+      c12: 3.3.4(magicast@0.5.5)
       consola: 3.4.2
       defu: 6.1.7
       destr: 2.0.5
       errx: 0.1.2
-      exsolve: 1.1.3
-      ignore: 7.0.12
+      exsolve: 1.2.0
+      ignore: 7.0.14
       jiti: 2.7.0
       klona: 2.0.6
       knitwork: 1.3.0
       mlly: 1.8.2
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rc9: 3.1.0
       scule: 1.3.0
       semver: 7.8.5
@@ -25444,14 +25427,14 @@ snapshots:
     transitivePeerDependencies:
       - magicast
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
       destr: 2.0.5
       errx: 0.2.2
-      exsolve: 1.1.3
-      ignore: 7.0.12
+      exsolve: 1.2.0
+      ignore: 7.0.14
       klona: 2.0.6
       microdiff: 1.6.0
       nostics: 1.3.0
@@ -25477,14 +25460,14 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
       destr: 2.0.5
       errx: 0.2.2
-      exsolve: 1.1.3
-      ignore: 7.0.12
+      exsolve: 1.2.0
+      ignore: 7.0.14
       klona: 2.0.6
       microdiff: 1.6.0
       nostics: 1.3.0
@@ -25510,14 +25493,14 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
+  '@nuxt/kit@4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@1.1.0)(mlly@1.8.2)(oxc-parser@0.152.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))':
     dependencies:
       consola: 3.4.2
       defu: 6.1.7
       destr: 2.0.5
       errx: 0.2.2
-      exsolve: 1.1.3
-      ignore: 7.0.12
+      exsolve: 1.2.0
+      ignore: 7.0.14
       klona: 2.0.6
       microdiff: 1.6.0
       nostics: 1.3.0
@@ -25543,10 +25526,10 @@ snapshots:
       - magic-string
       - unplugin
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.5)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
-      '@nuxt/kit': 3.21.11(magicast@0.5.4)
+      '@nuxt/kit': 3.21.11(magicast@0.5.5)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       consola: 3.4.2
@@ -25555,16 +25538,16 @@ snapshots:
       devalue: 5.9.4
       errx: 0.1.2
       escape-string-regexp: 5.0.0
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       h3: 1.15.11
       impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
       nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.143.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
-      ohash: 2.0.11
+      nuxt: 3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3)
+      ohash: 2.0.12
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rou3: 0.9.1
       std-env: 4.3.0
       ufo: 1.6.4
@@ -25617,10 +25600,10 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
+  '@nuxt/nitro-server@3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.5)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(oxc-parser@0.152.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))':
     dependencies:
       '@nuxt/devalue': 2.0.2
-      '@nuxt/kit': 3.21.11(magicast@0.5.4)
+      '@nuxt/kit': 3.21.11(magicast@0.5.5)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
       consola: 3.4.2
@@ -25629,16 +25612,16 @@ snapshots:
       devalue: 5.9.4
       errx: 0.1.2
       escape-string-regexp: 5.0.0
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       h3: 1.15.11
       impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       klona: 2.0.6
       mocked-exports: 0.1.1
       nitropack: 2.13.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(encoding@0.1.13)(mysql2@3.23.3(@types/node@20.19.43))(oxc-parser@0.152.0)(rolldown@1.2.16)(srvx@0.11.22)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
-      ohash: 2.0.11
+      nuxt: 3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3)
+      ohash: 2.0.12
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rou3: 0.9.1
       std-env: 4.3.0
       ufo: 1.6.4
@@ -25696,21 +25679,21 @@ snapshots:
       '@vue/shared': 3.5.44
       defu: 6.1.7
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       std-env: 4.3.0
 
-  '@nuxt/telemetry@2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))':
+  '@nuxt/telemetry@2.8.0(@nuxt/kit@3.21.11(magicast@0.5.5))':
     dependencies:
-      '@nuxt/kit': 3.21.11(magicast@0.5.4)
+      '@nuxt/kit': 3.21.11(magicast@0.5.5)
       citty: 0.2.2
       consola: 3.4.2
       ofetch: 2.0.0-alpha.3
       rc9: 3.1.0
       std-env: 4.3.0
 
-  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
+  '@nuxt/vite-builder@3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.5)(meow@13.2.0)(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)':
     dependencies:
-      '@nuxt/kit': 3.21.11(magicast@0.5.4)
+      '@nuxt/kit': 3.21.11(magicast@0.5.5)
       '@rollup/plugin-replace': 6.0.3(rollup@4.62.3)
       '@vitejs/plugin-vue': 6.0.8(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
       '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.0.0)(vite@7.3.6(@types/node@20.19.43)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
@@ -25719,7 +25702,7 @@ snapshots:
       cssnano: 7.1.9(postcss@8.5.31)
       defu: 6.1.7
       escape-string-regexp: 5.0.0
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       externality: 1.0.2
       generic-names: 4.0.0
       get-port-please: 3.2.0
@@ -25728,12 +25711,12 @@ snapshots:
       magic-string: 0.30.21
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 3.21.11(ebade832173a31b4adb92857b21c371a)
+      nuxt: 3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3)
       nypm: 0.6.9
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       postcss: 8.5.31
       seroval: 1.6.12
       std-env: 4.3.0
@@ -26636,7 +26619,7 @@ snapshots:
       p-map: 7.0.7
       pathe: 1.1.2
       picocolors: 1.1.1
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       prettier: 3.9.10
       react-refresh: 0.14.2
       react-router: 7.18.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
@@ -27142,12 +27125,6 @@ snapshots:
 
   '@simple-dom/interface@1.4.0': {}
 
-  '@simple-git/args-pathspec@1.0.3': {}
-
-  '@simple-git/argv-parser@1.1.1':
-    dependencies:
-      '@simple-git/args-pathspec': 1.0.3
-
   '@sindresorhus/is@7.0.2': {}
 
   '@sindresorhus/merge-streams@4.0.0': {}
@@ -28475,7 +28452,7 @@ snapshots:
 
   '@unhead/vue@2.1.17(vue@3.5.44(typescript@7.0.2))':
     dependencies:
-      hookable: 6.1.1
+      hookable: 6.1.2
       unhead: 2.1.17
       vue: 3.5.44(typescript@7.0.2)
 
@@ -28595,7 +28572,7 @@ snapshots:
       istanbul-lib-coverage: 3.2.2
       istanbul-lib-report: 3.0.1
       istanbul-reports: 3.2.0
-      magicast: 0.5.4
+      magicast: 0.5.5
       obug: 2.1.4
       std-env: 4.3.0
       tinyrainbow: 3.1.1
@@ -29789,7 +29766,7 @@ snapshots:
 
   birpc@2.9.0: {}
 
-  birpc@4.1.0: {}
+  birpc@4.2.0: {}
 
   bl@2.2.1:
     dependencies:
@@ -30128,13 +30105,13 @@ snapshots:
       confbox: 0.2.4
       defu: 6.1.7
       dotenv: 16.6.1
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       giget: 2.0.0
       jiti: 2.7.0
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 1.0.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rc9: 2.1.2
     optionalDependencies:
       magicast: 0.3.5
@@ -30145,33 +30122,33 @@ snapshots:
       confbox: 0.2.4
       defu: 6.1.7
       dotenv: 17.4.2
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       giget: 3.3.1
       jiti: 2.7.0
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rc9: 3.1.0
     optionalDependencies:
       magicast: 0.3.5
 
-  c12@3.3.4(magicast@0.5.4):
+  c12@3.3.4(magicast@0.5.5):
     dependencies:
       chokidar: 5.0.0
       confbox: 0.2.4
       defu: 6.1.7
       dotenv: 17.4.2
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       giget: 3.3.1
       jiti: 2.7.0
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rc9: 3.1.0
     optionalDependencies:
-      magicast: 0.5.4
+      magicast: 0.5.5
 
   cac@6.7.14: {}
 
@@ -30544,6 +30521,8 @@ snapshots:
 
   confbox@0.2.4: {}
 
+  confbox@0.3.2: {}
+
   connect-history-api-fallback@2.0.0: {}
 
   connect@3.7.0(supports-color@10.0.0):
@@ -31128,6 +31107,8 @@ snapshots:
 
   diff@8.0.4: {}
 
+  diff@9.0.0: {}
+
   dir-glob@3.0.1:
     dependencies:
       path-type: 4.0.0
@@ -31456,7 +31437,7 @@ snapshots:
   env-runner@0.1.7(miniflare@4.20260426.0):
     dependencies:
       crossws: 0.4.10(srvx@0.11.22)
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       httpxy: 0.5.1
       srvx: 0.11.22
     optionalDependencies:
@@ -32222,7 +32203,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  exsolve@1.1.3: {}
+  exsolve@1.2.0: {}
 
   extend-shallow@2.0.1:
     dependencies:
@@ -32910,7 +32891,7 @@ snapshots:
     dependencies:
       '@sindresorhus/merge-streams': 4.0.0
       fast-glob: 3.3.3
-      ignore: 7.0.12
+      ignore: 7.0.14
       is-path-inside: 4.0.0
       slash: 5.1.0
       unicorn-magic: 0.4.0
@@ -33215,7 +33196,7 @@ snapshots:
 
   hookable@5.5.3: {}
 
-  hookable@6.1.1: {}
+  hookable@6.1.2: {}
 
   hosted-git-info@5.1.0:
     dependencies:
@@ -33472,11 +33453,11 @@ snapshots:
 
   ignore@5.3.2: {}
 
-  ignore@7.0.12: {}
+  ignore@7.0.14: {}
 
   ignore@7.0.5: {}
 
-  image-meta@0.2.2: {}
+  image-meta@0.3.1: {}
 
   image-size@0.5.5:
     optional: true
@@ -33720,7 +33701,7 @@ snapshots:
     dependencies:
       is-docker: 3.0.0
 
-  is-installed-globally@1.0.0:
+  is-installed-globally@1.0.1:
     dependencies:
       global-directory: 4.0.1
       is-path-inside: 4.0.0
@@ -33981,7 +33962,7 @@ snapshots:
       whatwg-encoding: 2.0.0
       whatwg-mimetype: 3.0.0
       whatwg-url: 12.0.1
-      ws: 8.21.3
+      ws: 8.22.1
       xml-name-validator: 4.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -34014,7 +33995,7 @@ snapshots:
       whatwg-encoding: 2.0.0
       whatwg-mimetype: 3.0.0
       whatwg-url: 12.0.1
-      ws: 8.21.3
+      ws: 8.22.1
       xml-name-validator: 4.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -34043,7 +34024,7 @@ snapshots:
       whatwg-encoding: 3.1.1
       whatwg-mimetype: 4.0.0
       whatwg-url: 14.2.0
-      ws: 8.21.3
+      ws: 8.22.1
       xml-name-validator: 5.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -34070,7 +34051,7 @@ snapshots:
       whatwg-encoding: 3.1.1
       whatwg-mimetype: 4.0.0
       whatwg-url: 14.2.0
-      ws: 8.21.3
+      ws: 8.22.1
       xml-name-validator: 5.0.0
     transitivePeerDependencies:
       - bufferutil
@@ -34259,12 +34240,12 @@ snapshots:
 
   ky@1.7.5: {}
 
-  langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.21.3):
+  langchain@1.5.16(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(ws@8.22.1):
     dependencies:
-      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
-      '@langchain/langgraph': 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
-      '@langchain/langgraph-checkpoint': 1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3))
-      langsmith: 0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3)
+      '@langchain/core': 1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
+      '@langchain/langgraph': 1.4.21(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(zod@4.6.7)
+      '@langchain/langgraph-checkpoint': 1.1.6(@langchain/core@1.2.17(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1))
+      langsmith: 0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1)
       zod: 4.6.7
     transitivePeerDependencies:
       - '@opentelemetry/api'
@@ -34275,15 +34256,15 @@ snapshots:
       - react-dom
       - ws
 
-  langsmith@0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7))(ws@8.21.3):
+  langsmith@0.10.10(@opentelemetry/api@1.10.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7))(ws@8.22.1):
     dependencies:
       p-queue: 6.6.2
     optionalDependencies:
       '@opentelemetry/api': 1.10.0
-      openai: 5.18.1(ws@8.21.3)(zod@4.6.7)
-      ws: 8.21.3
+      openai: 5.18.1(ws@8.22.1)(zod@4.6.7)
+      ws: 8.22.1
 
-  langsmith@0.3.74(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.21.3)(zod@4.6.7)):
+  langsmith@0.3.74(@opentelemetry/api@1.9.0)(openai@5.18.1(ws@8.22.1)(zod@4.6.7)):
     dependencies:
       '@types/uuid': 10.0.0
       chalk: 4.1.2
@@ -34294,9 +34275,9 @@ snapshots:
       uuid: 10.0.0
     optionalDependencies:
       '@opentelemetry/api': 1.9.0
-      openai: 5.18.1(ws@8.21.3)(zod@4.6.7)
+      openai: 5.18.1(ws@8.22.1)(zod@4.6.7)
 
-  launch-editor@2.14.1:
+  launch-editor@2.14.2:
     dependencies:
       picocolors: 1.1.1
       shell-quote: 1.12.0
@@ -34481,7 +34462,7 @@ snapshots:
   local-pkg@1.2.1:
     dependencies:
       mlly: 1.8.2
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       quansync: 0.2.11
 
   locate-character@3.0.0: {}
@@ -34650,7 +34631,7 @@ snapshots:
       '@babel/types': 7.29.8
       source-map-js: 1.2.2
 
-  magicast@0.5.4:
+  magicast@0.5.5:
     dependencies:
       '@babel/parser': 7.29.9
       '@babel/types': 7.29.8
@@ -35592,11 +35573,11 @@ snapshots:
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
       env-runner: 0.1.7(miniflare@4.20260426.0)
       h3: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
-      hookable: 6.1.1
+      hookable: 6.1.2
       nf3: 0.3.16
       ocache: 0.1.4
       ofetch: 2.0.0-alpha.3
-      ohash: 2.0.11
+      ohash: 2.0.12
       rolldown: 1.2.16
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
@@ -35645,11 +35626,11 @@ snapshots:
       db0: 0.3.4(mysql2@3.23.3(@types/node@20.19.43))
       env-runner: 0.1.7(miniflare@4.20260426.0)
       h3: 2.0.1-rc.22(crossws@0.4.10(srvx@0.11.22))
-      hookable: 6.1.1
+      hookable: 6.1.2
       nf3: 0.3.16
       ocache: 0.1.4
       ofetch: 2.0.0-alpha.3
-      ohash: 2.0.11
+      ohash: 2.0.12
       rolldown: 1.2.16
       srvx: 0.11.22
       unenv: 2.0.0-rc.24
@@ -35703,7 +35684,7 @@ snapshots:
       '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
-      c12: 3.3.4(magicast@0.5.4)
+      c12: 3.3.4(magicast@0.5.5)
       chokidar: 5.0.0
       citty: 0.2.2
       compatx: 0.2.0
@@ -35719,7 +35700,7 @@ snapshots:
       esbuild: 0.28.1
       escape-string-regexp: 5.0.0
       etag: 1.8.1
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       globby: 16.2.0
       gzip-size: 7.0.0
       h3: 1.15.11
@@ -35731,16 +35712,16 @@ snapshots:
       knitwork: 1.3.0
       listhen: 1.10.1(@parcel/watcher@2.5.6)(srvx@0.11.22)
       magic-string: 0.30.21
-      magicast: 0.5.4
+      magicast: 0.5.5
       mime: 4.1.0
       mlly: 1.8.2
       node-fetch-native: 1.6.7
       node-mock-http: 1.0.4
       ofetch: 1.5.1
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
@@ -35812,7 +35793,7 @@ snapshots:
       '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
-      c12: 3.3.4(magicast@0.5.4)
+      c12: 3.3.4(magicast@0.5.5)
       chokidar: 5.0.0
       citty: 0.2.2
       compatx: 0.2.0
@@ -35828,7 +35809,7 @@ snapshots:
       esbuild: 0.28.1
       escape-string-regexp: 5.0.0
       etag: 1.8.1
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       globby: 16.2.0
       gzip-size: 7.0.0
       h3: 1.15.11
@@ -35840,16 +35821,16 @@ snapshots:
       knitwork: 1.3.0
       listhen: 1.10.1(@parcel/watcher@2.5.6)(srvx@0.11.22)
       magic-string: 0.30.21
-      magicast: 0.5.4
+      magicast: 0.5.5
       mime: 4.1.0
       mlly: 1.8.2
       node-fetch-native: 1.6.7
       node-mock-http: 1.0.4
       ofetch: 1.5.1
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
@@ -35921,7 +35902,7 @@ snapshots:
       '@rollup/plugin-terser': 1.0.2(rollup@4.62.3)
       '@vercel/nft': 1.11.0(encoding@0.1.13)(rollup@4.62.3)(supports-color@10.0.0)
       archiver: 7.0.1
-      c12: 3.3.4(magicast@0.5.4)
+      c12: 3.3.4(magicast@0.5.5)
       chokidar: 5.0.0
       citty: 0.2.2
       compatx: 0.2.0
@@ -35937,7 +35918,7 @@ snapshots:
       esbuild: 0.28.1
       escape-string-regexp: 5.0.0
       etag: 1.8.1
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       globby: 16.2.0
       gzip-size: 7.0.0
       h3: 1.15.11
@@ -35949,16 +35930,16 @@ snapshots:
       knitwork: 1.3.0
       listhen: 1.10.1(@parcel/watcher@2.5.6)(srvx@0.11.22)
       magic-string: 0.30.21
-      magicast: 0.5.4
+      magicast: 0.5.5
       mime: 4.1.0
       mlly: 1.8.2
       node-fetch-native: 1.6.7
       node-mock-http: 1.0.4
       ofetch: 1.5.1
-      ohash: 2.0.11
+      ohash: 2.0.12
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.3
@@ -36234,19 +36215,19 @@ snapshots:
 
   nuxi@3.25.1: {}
 
-  nuxt@3.21.11(ebade832173a31b4adb92857b21c371a):
+  nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3):
     dependencies:
       '@dxup/nuxt': 0.5.6(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(esbuild@0.28.1)(giget@3.3.1)(jiti@2.7.0)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
-      '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.4)(supports-color@10.0.0)
-      '@nuxt/devtools': 3.4.1(6d0e88762f54baf3e026c1dece53d30a)
-      '@nuxt/kit': 3.21.11(magicast@0.5.4)
-      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.4)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
+      '@nuxt/cli': 3.37.0(@nuxt/schema@3.21.11)(@parcel/watcher@2.5.6)(cac@6.7.14)(commander@14.0.3)(magicast@0.5.5)(supports-color@10.0.0)
+      '@nuxt/devtools': 3.4.4(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@nuxt/schema@3.21.11)(confbox@0.2.4)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(dotenv@17.4.2)(giget@3.3.1)(ioredis@5.11.1(supports-color@10.0.0))(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2))
+      '@nuxt/kit': 3.21.11(magicast@0.5.5)
+      '@nuxt/nitro-server': 3.21.11(@azure/storage-blob@12.31.0(supports-color@10.0.0))(@parcel/watcher@2.5.6)(db0@0.3.4(mysql2@3.23.3(@types/node@20.19.43)))(encoding@0.1.13)(esbuild@0.28.1)(ioredis@5.11.1(supports-color@10.0.0))(magicast@0.5.5)(mysql2@3.23.3(@types/node@20.19.43))(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(oxc-parser@0.143.0)(rolldown@1.2.16)(rollup@4.62.3)(srvx@0.11.22)(supports-color@10.0.0)(typescript@7.0.2)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       '@nuxt/schema': 3.21.11
-      '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.4))
-      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.4)(meow@13.2.0)(nuxt@3.21.11(ebade832173a31b4adb92857b21c371a))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
+      '@nuxt/telemetry': 2.8.0(@nuxt/kit@3.21.11(magicast@0.5.5))
+      '@nuxt/vite-builder': 3.21.11(@types/node@20.19.43)(less@4.2.0(supports-color@10.0.0))(lightningcss@1.33.0)(magicast@0.5.5)(meow@13.2.0)(nuxt@3.21.11(8ad65ef44c1ddb5619f9223b1cfc84d3))(optionator@0.9.4)(oxlint@1.89.0(oxlint-tsgolint@7.0.2004))(rolldown@1.2.16)(rollup-plugin-visualizer@6.0.11(rolldown@1.2.16)(rollup@4.62.3))(rollup@4.62.3)(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(supports-color@10.0.0)(terser@5.51.2)(tsx@4.23.15)(typescript@7.0.2)(vue@3.5.44(typescript@7.0.2))(yaml@2.9.0)
       '@unhead/vue': 2.1.17(vue@3.5.44(typescript@7.0.2))
       '@vue/shared': 3.5.44
-      c12: 3.3.4(magicast@0.5.4)
+      c12: 3.3.4(magicast@0.5.5)
       chokidar: 5.0.0
       compatx: 0.2.0
       consola: 3.4.2
@@ -36256,10 +36237,10 @@ snapshots:
       devalue: 5.9.4
       errx: 0.1.2
       escape-string-regexp: 5.0.0
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       h3: 1.15.11
       hookable: 5.5.3
-      ignore: 7.0.12
+      ignore: 7.0.14
       impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))
       jiti: 2.7.0
       klona: 2.0.6
@@ -36269,7 +36250,7 @@ snapshots:
       nanotar: 0.3.0
       nypm: 0.6.9
       ofetch: 1.5.1
-      ohash: 2.0.11
+      ohash: 2.0.12
       on-change: 6.0.2
       oxc-minify: 0.143.0
       oxc-parser: 0.143.0
@@ -36277,7 +36258,7 @@ snapshots:
       oxc-walker: 1.1.1(@oxc-project/types@0.152.0)(oxc-parser@0.143.0)(rolldown@1.2.16)
       pathe: 2.0.3
       perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       rou3: 0.9.1
       scule: 1.3.0
       semver: 7.8.5
@@ -36553,7 +36534,7 @@ snapshots:
 
   ocache@0.1.4:
     dependencies:
-      ohash: 2.0.11
+      ohash: 2.0.12
 
   ofetch@1.5.1:
     dependencies:
@@ -36563,7 +36544,7 @@ snapshots:
 
   ofetch@2.0.0-alpha.3: {}
 
-  ohash@2.0.11: {}
+  ohash@2.0.12: {}
 
   on-change@6.0.2: {}
 
@@ -36632,30 +36613,30 @@ snapshots:
       is-docker: 2.2.1
       is-wsl: 2.2.0
 
-  openai@5.18.1(ws@8.21.3)(zod@3.25.76):
+  openai@5.18.1(ws@8.22.1)(zod@3.25.76):
     optionalDependencies:
-      ws: 8.21.3
+      ws: 8.22.1
       zod: 3.25.76
 
-  openai@5.18.1(ws@8.21.3)(zod@4.6.7):
+  openai@5.18.1(ws@8.22.1)(zod@4.6.7):
     optionalDependencies:
-      ws: 8.21.3
+      ws: 8.22.1
       zod: 4.6.7
 
-  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.19.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7):
     optionalDependencies:
       '@aws-sdk/credential-provider-node': 3.972.92
       '@smithy/signature-v4': 5.7.5
       undici: 7.24.8
-      ws: 8.21.3
+      ws: 8.22.1
       zod: 4.6.7
 
-  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.21.3)(zod@4.6.7):
+  openai@7.31.0(@aws-sdk/credential-provider-node@3.972.92)(@smithy/signature-v4@5.7.5)(undici@7.24.8)(ws@8.22.1)(zod@4.6.7):
     optionalDependencies:
       '@aws-sdk/credential-provider-node': 3.972.92
       '@smithy/signature-v4': 5.7.5
       undici: 7.24.8
-      ws: 8.21.3
+      ws: 8.22.1
       zod: 4.6.7
 
   optional-require@1.1.8:
@@ -37251,10 +37232,10 @@ snapshots:
       mlly: 1.8.2
       pathe: 2.0.3
 
-  pkg-types@2.3.1:
+  pkg-types@2.4.0:
     dependencies:
-      confbox: 0.2.4
-      exsolve: 1.1.3
+      confbox: 0.3.2
+      exsolve: 1.2.0
       pathe: 2.0.3
 
   pkg-up@3.1.0:
@@ -39256,16 +39237,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  simple-git@3.36.0(supports-color@10.0.0):
-    dependencies:
-      '@kwsites/file-exists': 1.1.1(supports-color@10.0.0)
-      '@kwsites/promise-deferred': 1.1.1
-      '@simple-git/args-pathspec': 1.0.3
-      '@simple-git/argv-parser': 1.1.1
-      debug: 4.4.3(supports-color@10.0.0)
-    transitivePeerDependencies:
-      - supports-color
-
   simple-html-tokenizer@0.5.11: {}
 
   simple-swizzle@0.2.2:
@@ -40297,7 +40268,7 @@ snapshots:
 
   unhead@2.1.17:
     dependencies:
-      hookable: 6.1.1
+      hookable: 6.1.2
 
   unicode-canonical-property-names-ecmascript@2.0.0: {}
 
@@ -40338,7 +40309,7 @@ snapshots:
       mlly: 1.8.2
       pathe: 2.0.3
       picomatch: 4.0.7
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
@@ -40367,7 +40338,7 @@ snapshots:
       mlly: 1.8.2
       pathe: 2.0.3
       picomatch: 4.0.7
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
@@ -40396,7 +40367,7 @@ snapshots:
       mlly: 1.8.2
       pathe: 2.0.3
       picomatch: 4.0.7
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
       scule: 1.3.0
       strip-literal: 4.0.0
       tinyglobby: 0.2.17
@@ -40629,12 +40600,12 @@ snapshots:
 
   unwasm@0.5.3:
     dependencies:
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       knitwork: 1.3.0
       magic-string: 0.30.21
       mlly: 1.8.2
       pathe: 2.0.3
-      pkg-types: 2.3.1
+      pkg-types: 2.4.0
 
   unzip-stream@0.3.4:
     dependencies:
@@ -40820,7 +40791,7 @@ snapshots:
 
   vite-dev-rpc@2.0.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
-      birpc: 4.1.0
+      birpc: 4.2.0
       vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-hot-client: 2.2.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
 
@@ -40885,12 +40856,12 @@ snapshots:
       oxlint: 1.89.0(oxlint-tsgolint@7.0.2004)
       typescript: 7.0.2
 
-  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
+  vite-plugin-inspect@11.4.1(@nuxt/kit@4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3))))(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
       ansis: 4.3.1
       error-stack-parser-es: 1.0.5
       obug: 2.1.4
-      ohash: 2.0.11
+      ohash: 2.0.12
       open: 11.0.0
       perfect-debounce: 2.1.0
       sirv: 3.0.2
@@ -40898,7 +40869,7 @@ snapshots:
       vite: 8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)
       vite-dev-rpc: 2.0.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))
     optionalDependencies:
-      '@nuxt/kit': 4.6.0(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
+      '@nuxt/kit': 4.6.4(@nuxt/schema@3.21.11)(confbox@0.2.4)(dotenv@17.4.2)(giget@3.3.1)(jiti@2.7.0)(magic-string@0.30.21)(mlly@1.8.2)(oxc-parser@0.143.0)(rolldown@1.2.16)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.16)(rollup@4.62.3)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(webpack@5.112.2(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.28.1)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.5.31)(sharp@0.35.5(@types/node@20.19.43))(svgo@4.1.0)(uglify-js@3.13.3)))
 
   vite-plugin-solid@2.11.14(@testing-library/jest-dom@6.9.1)(solid-js@1.9.18)(supports-color@10.0.0)(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0)):
     dependencies:
@@ -40918,7 +40889,7 @@ snapshots:
   vite-plugin-vue-tracer@1.5.0(vite@8.3.5(@types/node@20.19.43)(esbuild@0.28.1)(jiti@2.7.0)(less@4.2.0(supports-color@10.0.0))(sass@1.72.0)(stylus@0.59.0(supports-color@10.0.0))(terser@5.51.2)(tsx@4.23.15)(yaml@2.9.0))(vue@3.5.44(typescript@7.0.2)):
     dependencies:
       estree-walker: 3.0.3
-      exsolve: 1.1.3
+      exsolve: 1.2.0
       magic-string: 1.1.0
       pathe: 2.0.3
       source-map-js: 1.2.2
@@ -41308,7 +41279,7 @@ snapshots:
       spdy: 4.0.2(supports-color@10.0.0)
       webpack: 5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3)
       webpack-dev-middleware: 5.3.3(webpack@5.76.1(clean-css@5.2.2)(cssnano@7.1.9(postcss@8.5.31))(csso@5.0.5)(esbuild@0.15.5)(html-minifier-terser@6.1.0)(lightningcss@1.33.0)(postcss@8.4.31)(uglify-js@3.13.3))
-      ws: 8.21.3
+      ws: 8.22.1
     transitivePeerDependencies:
       - bufferutil
       - debug
@@ -41691,7 +41662,7 @@ snapshots:
 
   ws@8.21.0: {}
 
-  ws@8.21.3: {}
+  ws@8.22.1: {}
 
   wsl-utils@0.3.1:
     dependencies:

From f2ee787dd28f458650bb6f40973594826ba0eb01 Mon Sep 17 00:00:00 2001
From: joshuarli <joshuarli98@gmail.com>
Date: Wed, 4 Nov 2026 06:08:50 -0800
Subject: [PATCH 161/169] ci: run CI on GitHub-hosted runners again (#26057)

for now we're only doing this on private repos

---------

Co-authored-by: JPeer264 <jan.peer@sentry.io>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../actions/install-dependencies/action.yml   |  68 ++-----
 .../install-dependencies/find-broken-bin.mjs  |  34 ----
 .github/actions/install-playwright/action.yml |  47 +++--
 .github/actions/mount-pnpm-store/action.yml   |  33 ----
 .github/actions/prepare-e2e-test/action.yml   |   3 -
 .github/actions/restore-cache/action.yml      |  21 ++-
 .github/workflows/auto-fix-issue.yml          |   2 +-
 .github/workflows/auto-release.yml            |   2 +-
 .github/workflows/build.yml                   | 176 ++++++++----------
 .github/workflows/canary.yml                  |   7 +-
 .github/workflows/ci-metadata.yml             |   2 +-
 .github/workflows/cleanup-e2e-workers.yml     |   2 +-
 .github/workflows/cleanup-pr-caches.yml       |   2 +-
 .github/workflows/clear-cache.yml             |   2 +-
 .github/workflows/codeql-analysis.yml         |   2 +-
 .github/workflows/dependabot-auto-triage.yml  |  11 +-
 .../workflows/enforce-license-compliance.yml  |   2 +-
 .github/workflows/external-contributors.yml   |   2 +-
 .github/workflows/gitflow-merge-conflict.yml  |   2 +-
 .github/workflows/gitflow-sync-develop.yml    |   2 +-
 .github/workflows/issue-package-label.yml     |   2 +-
 .github/workflows/label-external-prs.yml      |   2 +-
 .github/workflows/optional-e2e.yml            |   6 +-
 .github/workflows/pr-stale-notifier.yml       |   2 +-
 .github/workflows/release-comment-issues.yml  |   2 +-
 .github/workflows/release-size-info.yml       |   2 +-
 .github/workflows/release.yml                 |   2 +-
 .github/workflows/size-check.yml              |   9 +-
 .github/workflows/track-framework-updates.yml |   2 +-
 .github/workflows/validate-pr.yml             |   2 +-
 .github/workflows/weekly-flaky-tests.yml      |   2 +-
 dev-packages/e2e-tests/README.md              |   4 -
 dev-packages/e2e-tests/lib/getTestMatrix.mjs  |   3 +-
 .../aws-serverless-layer/package.json         |   1 -
 .../browser-bfcache/package.json              |   3 -
 .../nextjs-15-basepath/package.json           |   3 -
 .../nextjs-15-intl/package.json               |   3 -
 .../nextjs-15-t3/package.json                 |   3 -
 .../test-applications/nextjs-15/package.json  |   1 -
 .../nextjs-16-cacheComponents/package.json    |   1 -
 .../nextjs-16-static/package.json             |   1 -
 .../package.json                              |   1 -
 .../nextjs-16-streaming/package.json          |   1 -
 .../nextjs-16-tunnel/package.json             |   1 -
 .../test-applications/nextjs-16/package.json  |   1 -
 .../nextjs-app-dir/package.json               |   1 -
 .../nextjs-pages-dir/package.json             |   1 -
 .../test-applications/nuxt-3-min/package.json |   3 -
 .../nuxt-4-static/package.json                |   1 -
 .../nuxt-4/docker-compose.yml                 |   4 +-
 .../test-applications/nuxt-4/package.json     |   1 -
 .../nuxt-5/docker-compose.yml                 |   4 +-
 .../react-router-6/package.json               |   1 -
 .../react-router-7-lazy-routes/package.json   |   3 -
 .../react-router-8-framework/package.json     |   1 -
 scripts/dependency-hash-key.js                |  75 ++++++++
 56 files changed, 261 insertions(+), 316 deletions(-)
 delete mode 100644 .github/actions/install-dependencies/find-broken-bin.mjs
 delete mode 100644 .github/actions/mount-pnpm-store/action.yml
 create mode 100644 scripts/dependency-hash-key.js

diff --git a/.github/actions/install-dependencies/action.yml b/.github/actions/install-dependencies/action.yml
index 2a4b331fd3f6..5f51f918c34b 100644
--- a/.github/actions/install-dependencies/action.yml
+++ b/.github/actions/install-dependencies/action.yml
@@ -1,64 +1,30 @@
 name: 'Install pnpm dependencies'
-description: 'Installs pnpm dependencies into node_modules folders on the Namespace cache volume.'
+description: 'Installs pnpm dependencies and caches them.'
+
+outputs:
+  cache_key:
+    description: 'The dependency cache key'
+    value: ${{ steps.compute_lockfile_hash.outputs.hash }}
 
 runs:
   using: 'composite'
   steps:
-    - name: List dependency paths
-      id: paths
-      run: |
-        {
-          echo 'paths<<EOF'
-          node -e 'const { workspaces } = require("./package.json"); for (const dir of [".", ...workspaces]) console.log(require("path").resolve(dir, "node_modules"))'
-          echo '~/.cache/mongodb-binaries'
-          echo '~/.cache/prisma'
-          echo 'EOF'
-        } >> "$GITHUB_OUTPUT"
-      shell: bash
-
-    - name: Mount dependency cache
-      uses: ./.github/actions/mount-pnpm-store
-      with:
-        path: ${{ steps.paths.outputs.paths }}
-
     - name: Install pnpm
       uses: ./.github/actions/install-pnpm
 
-    # When the node_modules layout changes, `pnpm install` keeps the `.bin` scripts of the workspace packages, which
-    # then point into a folder that the new layout does not have. Branches that change `nodeLinker` share this cache
-    # volume, so start from empty node_modules folders when the layout on the volume differs, or when an earlier
-    # install already left such broken `.bin` scripts behind.
-    - name: Remove node_modules of another layout
-      run: |
-        mapfile -t dirs < <(grep '/node_modules$' <<< "$DEPENDENCY_PATHS")
-        expected=$(pnpm config get node-linker)
-        if [[ "$expected" == undefined ]]; then
-          expected=isolated
-        fi
-        actual=$(node -p 'try { JSON.parse(require("fs").readFileSync("node_modules/.modules.yaml", "utf8")).nodeLinker ?? "" } catch { "" }')
-        if [[ -n "$actual" && "$actual" != "$expected" ]]; then
-          reason="The node_modules folders use the $actual layout, but nodeLinker is $expected."
-        else
-          broken=$(node "$GITHUB_ACTION_PATH/find-broken-bin.mjs" "${dirs[@]}")
-          if [[ -n "$broken" ]]; then
-            reason="The target of $broken does not exist."
-          fi
-        fi
-        if [[ -n "$reason" ]]; then
-          echo "$reason Removing the node_modules folders."
-          for dir in "${dirs[@]}"; do
-            if [[ -d "$dir" ]]; then
-              # The folders are mounted from the cache volume, so empty them instead of removing them
-              find "$dir/" -mindepth 1 -maxdepth 1 -exec rm -rf {} +
-            fi
-          done
-        fi
-      env:
-        DEPENDENCY_PATHS: ${{ steps.paths.outputs.paths }}
+    - name: Compute dependency cache key
+      id: compute_lockfile_hash
+      run: node ./scripts/dependency-hash-key.js >> "$GITHUB_OUTPUT"
       shell: bash
 
-    # The cache volume can hold node_modules of another commit or branch. This is a no-op when they match
-    # pnpm-lock.yaml.
+    - name: Check dependency cache
+      uses: actions/cache@v6.1.0
+      id: cache_dependencies
+      with:
+        path: ${{ env.CACHED_DEPENDENCY_PATHS }}
+        key: ${{ steps.compute_lockfile_hash.outputs.hash }}
+
     - name: Install dependencies
+      if: steps.cache_dependencies.outputs.cache-hit != 'true'
       run: pnpm install --frozen-lockfile
       shell: bash
diff --git a/.github/actions/install-dependencies/find-broken-bin.mjs b/.github/actions/install-dependencies/find-broken-bin.mjs
deleted file mode 100644
index 24aa8753cac5..000000000000
--- a/.github/actions/install-dependencies/find-broken-bin.mjs
+++ /dev/null
@@ -1,34 +0,0 @@
-// Prints the first `.bin` entry in the given node_modules folders whose target does not exist.
-import { existsSync, lstatSync, readdirSync, readFileSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-
-// The pnpm shell shim runs the target with `exec <node> "$basedir_abs/<path>"` (`$basedir` in older versions)
-const SHIM_TARGET = /^\s*exec \S+\s+"\$basedir(?:_abs)?\/([^"]+)"/m;
-
-for (const dir of process.argv.slice(2)) {
-  const binDir = join(dir, '.bin');
-  let names;
-  try {
-    names = readdirSync(binDir);
-  } catch {
-    continue;
-  }
-
-  for (const name of names) {
-    const bin = join(binDir, name);
-    const stat = lstatSync(bin);
-    let target;
-    if (stat.isSymbolicLink()) {
-      target = bin;
-    } else if (stat.isFile() && stat.size < 64 * 1024) {
-      const match = readFileSync(bin, 'utf8').match(SHIM_TARGET);
-      target = match && resolve(binDir, match[1]);
-    }
-
-    if (target && !existsSync(target)) {
-      // eslint-disable-next-line no-console
-      console.log(bin);
-      process.exit(0);
-    }
-  }
-}
diff --git a/.github/actions/install-playwright/action.yml b/.github/actions/install-playwright/action.yml
index 378e77666093..ca6c8a2d9583 100644
--- a/.github/actions/install-playwright/action.yml
+++ b/.github/actions/install-playwright/action.yml
@@ -1,5 +1,5 @@
 name: 'Install Playwright dependencies'
-description: 'Installs Playwright browsers and system dependencies, keeping both on the Namespace cache volume.'
+description: 'Installs Playwright dependencies and caches them.'
 inputs:
   browsers:
     description: 'What browsers to install.'
@@ -26,28 +26,43 @@ runs:
       shell: bash
       working-directory: ${{ inputs.cwd }}
 
-    - name: Mount Playwright cache
-      uses: namespacelabs/nscloud-cache-action@1124a6f3ce44e5cf84cc22111530961f4d2a15f9 # v1.7.0
+    - name: Restore cached playwright binaries
+      uses: actions/cache/restore@v6.1.0
+      id: playwright-cache
       if: steps.playwright-version.outputs.version != ''
       with:
-        cache: |
-          playwright
-          apt
+        path: |
+          ~/.cache/ms-playwright
+        # Bump the iteration when bumping runner images to use a new cache
+        key: playwright-${{ runner.os }}-iteration-1-${{ steps.playwright-version.outputs.version }}
 
-    # `--with-deps` names packages that the runner image already has (glib, mesa, nss, ...), and `apt-get install` would
-    # upgrade them to the latest Ubuntu update. That is half of the download on a cold cache, and the image versions work.
-    - name: Keep installed apt packages
-      if: steps.playwright-version.outputs.version != ''
-      run: echo 'APT::Get::Upgrade "false";' | sudo tee /etc/apt/apt.conf.d/99-no-upgrade > /dev/null
+    # We always install all browsers, if uncached
+    # `npx` runs outside the repo, so it can't pick up a `playwright` that a parallel `pnpm install` is still linking.
+    - name: Install Playwright dependencies (uncached)
+      env:
+        PLAYWRIGHT_VERSION: ${{ steps.playwright-version.outputs.version }}
+      run: npx -y "playwright@$PLAYWRIGHT_VERSION" install chromium webkit firefox --with-deps
+      if: steps.playwright-version.outputs.version != '' && steps.playwright-cache.outputs.cache-hit != 'true'
       shell: bash
+      working-directory: ${{ runner.temp }}
 
-    # Downloads only the browsers and apt packages that are not on the cache volume yet. `npx` runs outside the repo,
-    # so it can't pick up a `playwright` that a parallel `pnpm install` is still linking.
-    - name: Install Playwright
-      if: steps.playwright-version.outputs.version != ''
+    - name: Install Playwright system dependencies only (cached)
       env:
         PLAYWRIGHT_BROWSERS: ${{ inputs.browsers || 'chromium webkit firefox' }}
         PLAYWRIGHT_VERSION: ${{ steps.playwright-version.outputs.version }}
-      run: npx -y "playwright@$PLAYWRIGHT_VERSION" install --with-deps $PLAYWRIGHT_BROWSERS
+      run: npx -y "playwright@$PLAYWRIGHT_VERSION" install-deps $PLAYWRIGHT_BROWSERS
+      if: steps.playwright-version.outputs.version != '' && steps.playwright-cache.outputs.cache-hit == 'true'
       shell: bash
       working-directory: ${{ runner.temp }}
+
+    # Only store cache on develop branch
+    - name: Store cached playwright binaries
+      uses: actions/cache/save@v6.1.0
+      if:
+        steps.playwright-version.outputs.version != '' && github.event_name == 'push' && github.ref ==
+        'refs/heads/develop'
+      with:
+        path: |
+          ~/.cache/ms-playwright
+        # Bump the iteration when bumping runner images to use a new cache
+        key: playwright-${{ runner.os }}-iteration-1-${{ steps.playwright-version.outputs.version }}
diff --git a/.github/actions/mount-pnpm-store/action.yml b/.github/actions/mount-pnpm-store/action.yml
deleted file mode 100644
index fed4e40c1b73..000000000000
--- a/.github/actions/mount-pnpm-store/action.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: 'Mount pnpm store'
-description:
-  'Mounts the pnpm store, the pnpm and npm caches and the given paths from the Namespace cache volume. Use it before
-  `install-pnpm`, so `install-pnpm` takes pnpm from the cache volume.'
-
-inputs:
-  path:
-    description: 'Paths to mount from the cache volume in addition to the pnpm store and caches, one per line.'
-    required: false
-    default: ''
-
-runs:
-  using: 'composite'
-  steps:
-    # Replaces the `pnpm` mode of nscloud-cache-action until it works without pnpm on PATH. The mode runs `pnpm store
-    # path`, so it only works after `install-pnpm`, when `pnpm self-update` has already downloaded pnpm.
-    # The cache directory holds `lockfile-verified.jsonl`. With it, `pnpm install` skips the supply-chain check of a
-    # lockfile that was already verified, which otherwise fetches the metadata of every package from the registry.
-    - name: Set pnpm store and cache directories
-      run: |
-        echo "PNPM_CONFIG_STORE_DIR=$HOME/.cache/pnpm-store" >> "$GITHUB_ENV"
-        echo "PNPM_CONFIG_CACHE_DIR=$HOME/.cache/pnpm" >> "$GITHUB_ENV"
-      shell: bash
-
-    # The `npm` mode keeps the npm cache of the `npm ci` in `pnpm/action-setup`, which installs the bootstrap pnpm
-    - name: Mount cache paths
-      uses: namespacelabs/nscloud-cache-action@1124a6f3ce44e5cf84cc22111530961f4d2a15f9 # v1.7.0
-      with:
-        cache: npm
-        path: |
-          ~/.cache/pnpm-store
-          ~/.cache/pnpm
-          ${{ inputs.path }}
diff --git a/.github/actions/prepare-e2e-test/action.yml b/.github/actions/prepare-e2e-test/action.yml
index 4a4c8a012026..6af9d8ce37a6 100644
--- a/.github/actions/prepare-e2e-test/action.yml
+++ b/.github/actions/prepare-e2e-test/action.yml
@@ -46,9 +46,6 @@ runs:
       uses: denoland/setup-deno@v2.0.5
       with:
         deno-version: ${{ inputs.deno-version || 'v2.8.3' }}
-    # Keeps the pnpm store on the cache volume for the `pnpm install` of the test application
-    - name: Mount pnpm store
-      uses: ./.github/actions/mount-pnpm-store
     - name: Install pnpm
       uses: ./.github/actions/install-pnpm
 
diff --git a/.github/actions/restore-cache/action.yml b/.github/actions/restore-cache/action.yml
index c647c74405b9..daa5943f9877 100644
--- a/.github/actions/restore-cache/action.yml
+++ b/.github/actions/restore-cache/action.yml
@@ -1,13 +1,30 @@
 name: 'Restore dependency & build cache'
-description: 'Installs dependencies from the Namespace cache volume and restores the build output.'
+description: 'Restore the dependency & build cache.'
+
+inputs:
+  dependency_cache_key:
+    description: 'The dependency cache key'
+    required: true
 
 runs:
   using: 'composite'
   steps:
+    - name: Install pnpm
+      uses: ./.github/actions/install-pnpm
+
+    - name: Check dependency cache
+      id: dep-cache
+      uses: actions/cache/restore@v6.1.0
+      with:
+        path: ${{ env.CACHED_DEPENDENCY_PATHS }}
+        key: ${{ inputs.dependency_cache_key }}
+
     - name: Restore build artifacts
       uses: actions/download-artifact@v7
       with:
         name: build-output
 
     - name: Install dependencies
-      uses: ./.github/actions/install-dependencies
+      if: steps.dep-cache.outputs.cache-hit != 'true'
+      run: pnpm install --frozen-lockfile
+      shell: bash
diff --git a/.github/workflows/auto-fix-issue.yml b/.github/workflows/auto-fix-issue.yml
index d832fa29af15..f495e8bc8e6b 100644
--- a/.github/workflows/auto-fix-issue.yml
+++ b/.github/workflows/auto-fix-issue.yml
@@ -23,7 +23,7 @@ concurrency:
 
 jobs:
   auto-fix-issue:
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-latest
     environment: ci-triage
     permissions:
       # Required to create a new branch and commit the fix
diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index aad81a1c4f3b..ab50a76d818b 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     name: 'Prepare a new version'
 
     steps:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5b20be22bbed..9c408c806846 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -29,6 +29,12 @@ concurrency:
 env:
   HEAD_COMMIT: ${{ github.event.inputs.commit || github.sha }}
 
+  CACHED_DEPENDENCY_PATHS: |
+    ${{ github.workspace }}/node_modules
+    ${{ github.workspace }}/packages/*/node_modules
+    ${{ github.workspace }}/dev-packages/*/node_modules
+    ~/.cache/mongodb-binaries/
+
   # build-output artifact paths are computed in job_build (step output from
   # pnpm run ci:print-build-artifact-paths — Nx merged outputs for build:transpile, and build:types).
 
@@ -52,11 +58,8 @@ env:
   # This option both controls the `v8-compile-cache-lib` and `v8-compile-cache` packages.
   DISABLE_V8_COMPILE_CACHE: '1'
 
-# Jobs that install the monorepo dependencies share one Namespace cache volume through `overrides.cache-tag`, E2E jobs
-# share another one (`-e2e`). The optional Cloudflare integration tests replace the installed wrangler with the latest
-# one, so they use a third one (`-latest-wrangler`). Jobs that do not use a cache volume have no cache tag. Pull request
-# jobs get their own volumes (`-pr`), so they cannot change the node_modules that develop and release builds install
-# from.
+# Jobs that need the monorepo dependencies restore them from the GitHub Actions cache (see `restore-cache`),
+# keyed by the lockfile hash. E2E jobs install their test application separately and do not use that cache.
 jobs:
   job_get_metadata:
     uses: ./.github/workflows/ci-metadata.yml
@@ -69,9 +72,7 @@ jobs:
   job_build:
     name: Build
     needs: job_get_metadata
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     if: |
       needs.job_get_metadata.outputs.changed_any_code == 'true' ||
@@ -97,6 +98,7 @@ jobs:
 
       - name: Install Dependencies
         uses: ./.github/actions/install-dependencies
+        id: install_dependencies
 
       - name: Check for Affected Nx Projects
         uses: ./.github/actions/nx-affected-list
@@ -154,6 +156,7 @@ jobs:
         working-directory: dev-packages/e2e-tests
 
     outputs:
+      dependency_cache_key: ${{ steps.install_dependencies.outputs.cache_key }}
       changed_node_integration:
         ${{ needs.job_get_metadata.outputs.changed_ci == 'true' || contains(steps.checkForAffected.outputs.affected,
         '@sentry-internal/node-integration-tests') }}
@@ -196,9 +199,7 @@ jobs:
       'aws-serverless') || contains(needs.job_build.outputs.e2e-matrix-2, 'aws-serverless') || github.event_name !=
       'pull_request'
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
@@ -218,6 +219,8 @@ jobs:
 
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Build Lambda layer
         run: pnpm run build:layer
@@ -235,9 +238,7 @@ jobs:
     name: Build bundles
     needs: [job_get_metadata, job_build]
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
@@ -257,6 +258,8 @@ jobs:
 
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Build bundles
         run: pnpm run build:bundle
@@ -273,7 +276,7 @@ jobs:
   job_check_branches:
     name: Check PR branches
     needs: job_get_metadata
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     if: github.event_name == 'pull_request'
     permissions:
       pull-requests: write
@@ -289,9 +292,7 @@ jobs:
     name: Size Check
     needs: [job_get_metadata, job_build, job_build_bundles]
     timeout-minutes: 15
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     if:
       github.event_name == 'pull_request' || needs.job_get_metadata.outputs.is_base_branch == 'true' ||
       needs.job_get_metadata.outputs.is_release == 'true'
@@ -306,6 +307,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       - name: Restore build bundle artifacts
         uses: actions/download-artifact@v8
         with:
@@ -324,9 +327,7 @@ jobs:
     # inter-package dependencies resolve cleanly.
     needs: [job_get_metadata, job_build]
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
@@ -338,6 +339,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       - parallel:
           - name: Lint source files
             run: pnpm run lint
@@ -366,7 +369,7 @@ jobs:
     needs: [job_get_metadata]
     # `pnpm dedupe --check` fetches metadata for every package from npm, so this job can take 8+ min on PRs.
     timeout-minutes: 20
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     if: |
       needs.job_get_metadata.outputs.changed_deps == 'true' ||
       needs.job_get_metadata.outputs.is_base_branch == 'true' ||
@@ -397,9 +400,7 @@ jobs:
     name: Check file formatting
     needs: [job_get_metadata]
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
@@ -420,9 +421,7 @@ jobs:
   job_artifacts:
     name: Upload Artifacts
     needs: [job_get_metadata, job_build, job_build_layer, job_build_bundles, job_build_tarballs]
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     # Build artifacts are only needed for releasing workflow.
     if: needs.job_get_metadata.outputs.is_release == 'true'
     steps:
@@ -436,6 +435,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Restore tarball artifacts
         uses: actions/download-artifact@v8
@@ -474,9 +475,7 @@ jobs:
     name: Browser Unit Tests
     needs: [job_get_metadata, job_build]
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out base commit (${{ github.event.pull_request.base.sha }})
         uses: actions/checkout@v7
@@ -494,6 +493,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Run affected tests
         run: pnpm run test:pr:browser --base=${{ github.event.pull_request.base.sha }}
@@ -508,9 +509,7 @@ jobs:
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_bun == 'true' || github.event_name != 'pull_request'
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
@@ -531,6 +530,8 @@ jobs:
           bun-version: ${{ matrix.bun }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       - name: Run tests
         run: |
           pnpm run test:ci:bun
@@ -540,9 +541,7 @@ jobs:
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_deno == 'true' || github.event_name != 'pull_request'
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
         uses: actions/checkout@v7
@@ -558,6 +557,8 @@ jobs:
           deno-version: 'v2.8.3'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       - name: Run tests
         run: |
           cd packages/deno
@@ -568,9 +569,7 @@ jobs:
     name: Node (${{ matrix.node }}) Unit Tests
     needs: [job_get_metadata, job_build]
     timeout-minutes: 10
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
     continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
     strategy:
@@ -593,6 +592,8 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       # The native modules have no prebuilt binaries for the Node 27 alpha, so compile them like an install on a
       # user's machine does.
       - name: Compile native modules
@@ -617,9 +618,7 @@ jobs:
       matrix.project) || ''}}${{ matrix.shard && format(' ({0}/{1})', matrix.shard, matrix.shards) || ''}} Tests
     needs: [job_get_metadata, job_build, job_build_bundles]
     if: needs.job_build.outputs.changed_browser_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04-large-js
     timeout-minutes: 25
     strategy:
       fail-fast: false
@@ -679,6 +678,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Restore build bundle artifacts
         uses: actions/download-artifact@v8
@@ -715,9 +716,7 @@ jobs:
     name: PW ${{ matrix.bundle }} Tests
     needs: [job_get_metadata, job_build, job_build_bundles]
     if: needs.job_build.outputs.changed_browser_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -742,6 +741,8 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Restore build bundle artifacts
         uses: actions/download-artifact@v8
@@ -775,9 +776,7 @@ jobs:
     name: Node (${{ matrix.node }}) Integration Tests (${{ matrix.shard }}/3)
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_node_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
     continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
@@ -810,6 +809,8 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       # The native modules have no prebuilt binaries for the Node 27 alpha, so compile them like an install on a
       # user's machine does.
       - name: Compile native modules
@@ -825,9 +826,7 @@ jobs:
     name: Cloudflare Integration Tests (${{ matrix.shard }}/2)
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_cloudflare_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript${{ github.event_name == 'pull_request'
-      && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -844,11 +843,12 @@ jobs:
           node-version-file: 'package.json'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       # The Vite plugin depends on wrangler and writes config for it, so both move together. In the hoisted layout,
       # pnpm keeps the nested `node_modules` folders of the old versions (for example an old workerd under
-      # `node_modules/wrangler`), so the install starts from empty `node_modules` folders. They are mount points of the
-      # cache volume, so only their contents are deleted.
+      # `node_modules/wrangler`), so the install starts from empty `node_modules` folders.
       - name: Install the latest wrangler
         if: matrix.wrangler == 'latest'
         run: |
@@ -868,9 +868,7 @@ jobs:
     if:
       needs.job_get_metadata.outputs.is_release != 'true' && (needs.job_build.outputs.changed_cloudflare_integration ==
       'true' || github.event_name != 'pull_request')
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript-latest-wrangler${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -883,9 +881,7 @@ jobs:
     name: Bundler Plugin Integration Tests (Node ${{ matrix.node }})
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_bundler_plugin_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     # Node 27 is an alpha: its ABI and APIs can change, so its failures must not fail the required checks.
     continue-on-error: ${{ matrix.node == '^27.0.0-0' }}
@@ -904,6 +900,8 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Run integration tests
         working-directory: dev-packages/bundler-plugin-integration-tests
@@ -913,9 +911,7 @@ jobs:
     name: Bun (${{ matrix.bun }}) Integration Tests (${{ matrix.shard }}/2)
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_bun_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -938,6 +934,8 @@ jobs:
           bun-version: ${{ matrix.bun }}
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Run integration tests
         working-directory: dev-packages/bun-integration-tests
@@ -947,9 +945,7 @@ jobs:
     name: Deno Integration Tests (${{ matrix.shard }}/2)
     needs: [job_get_metadata, job_build]
     if: needs.job_build.outputs.changed_deno_integration == 'true' || github.event_name != 'pull_request'
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -970,6 +966,8 @@ jobs:
           deno-version: 'v2.8.3'
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
       - name: Build @sentry/deno
         working-directory: packages/deno
         run: pnpm run build
@@ -992,9 +990,7 @@ jobs:
       always() &&
       needs.job_build.result == 'success'
     needs: [job_get_metadata, job_build]
-    runs-on:
-      namespace-profile-sentry-javascript-large;overrides.cache-tag=sentry-javascript${{ github.event_name ==
-      'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     steps:
       - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
@@ -1015,6 +1011,8 @@ jobs:
 
       - name: Restore caches
         uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
 
       - name: Build tarballs
         run: |
@@ -1051,10 +1049,7 @@ jobs:
       always() && needs.job_build_tarballs.result == 'success' && needs.job_build.outputs.e2e-matrix-1 !=
       '{"include":[]}'
     needs: [job_get_metadata, job_build, job_build_layer, job_build_tarballs]
-    # Most apps finish in under a minute on 4 vCPUs, so they run on 2. Apps that take longer set `sentryTest.runner`.
-    runs-on:
-      ${{ matrix.runner || 'namespace-profile-sentry-javascript-small' }};overrides.cache-tag=sentry-javascript-e2e${{
-      github.event_name == 'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     # We just use a dummy DSN here, only send to the tunnel anyhow
     env: &e2e-env
@@ -1084,10 +1079,9 @@ jobs:
           runtime: ${{ matrix.runtime }}
           deno-version: ${{ matrix.deno-version }}
 
-      # Installs Playwright while the app installs and builds. Keep it right before the install: the runner sets up a
-      # background composite action's steps from the job's shared `github` context, which fails with "Collection was
-      # modified" if a foreground step starts at that moment. Starting next to `download-artifact` also made it fail to
-      # read the event file.
+      # Installs Playwright while the app builds. Keep it right before the build: the runner sets up a background
+      # composite action's steps from the job's shared `github` context, which fails with "Collection was modified" if
+      # a foreground step starts at that moment. Starting next to `download-artifact` also made it fail to read the event file.
       - name: Install Playwright
         id: install-playwright
         background: true
@@ -1096,23 +1090,6 @@ jobs:
           browsers: chromium
           cwd: dev-packages/e2e-tests/test-applications/${{ matrix.test-application }}
 
-      # Every build command runs `pnpm install`, so installing first makes that a no-op. Some downloads from the npm
-      # registry crawl at tens of kB/s for the whole 7 minutes of the build step, and pnpm does not give up on a slow
-      # download. Another attempt reuses what is already in the store and opens new connections.
-      # The hoisted variant installs with another node linker, so installing first would only redo the install.
-      - name: Install E2E app dependencies
-        if: ${{ !contains(matrix.build-command, 'hoisted') }}
-        working-directory: ${{ runner.temp }}/test-application
-        timeout-minutes: 7
-        run: |
-          for attempt in 1 2; do
-            timeout 150 pnpm install && exit 0
-            echo "::warning::pnpm install attempt $attempt failed or did not finish in 150 s, retrying"
-          done
-          pnpm install
-        env:
-          SENTRY_E2E_WORKSPACE_ROOT: ${{ github.workspace }}
-
       - name: Build E2E app
         working-directory: ${{ runner.temp }}/test-application
         timeout-minutes: 7
@@ -1144,9 +1121,7 @@ jobs:
       always() && needs.job_build_tarballs.result == 'success' && needs.job_build.outputs.e2e-matrix-2 !=
       '{"include":[]}'
     needs: [job_get_metadata, job_build, job_build_layer, job_build_tarballs]
-    runs-on:
-      ${{ matrix.runner || 'namespace-profile-sentry-javascript-small' }};overrides.cache-tag=sentry-javascript-e2e${{
-      github.event_name == 'pull_request' && '-pr' || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     env: *e2e-env
     strategy:
@@ -1167,8 +1142,7 @@ jobs:
       needs.job_build.outputs.e2e-matrix-optional != '{"include":[]}' && (github.event_name != 'pull_request' ||
       github.event.pull_request.head.repo.full_name == github.repository) && github.actor != 'dependabot[bot]'
     needs: [job_get_metadata, job_build, job_build_tarballs]
-    # This job only waits for optional-e2e.yml, which can take most of an hour. GitHub runners are free for public
-    # repos and Namespace runners are paid per minute, so the wait runs here and the tests run on Namespace.
+    # This job only waits for optional-e2e.yml, which can take most of an hour.
     runs-on: ubuntu-24.04
     timeout-minutes: 60
     permissions:
@@ -1185,7 +1159,7 @@ jobs:
           node-version-file: 'package.json'
       - name: Install pnpm
         uses: ./.github/actions/install-pnpm
-      # The Namespace cache volume is not available here, so only install what the action needs
+      # Only install what the action needs
       - name: Install action dependencies
         run: pnpm install --frozen-lockfile --filter @sentry-internal/optional-e2e-gh-action
       - name: Run optional E2E tests
@@ -1224,7 +1198,7 @@ jobs:
       ]
     # Always run this, even if a dependent job failed
     if: always()
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     permissions: {}
     steps:
       - name: Check for failures
diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 62cc55309d3a..422cecffa19c 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -19,7 +19,7 @@ permissions:
 jobs:
   job_e2e_prepare:
     name: Prepare E2E Canary tests
-    runs-on: namespace-profile-sentry-javascript-large
+    runs-on: ubuntu-24.04
     timeout-minutes: 30
     outputs:
       matrix: ${{ steps.matrix.outputs.matrix }}
@@ -72,10 +72,7 @@ jobs:
     name: E2E ${{ matrix.label || matrix.test-application }} Test
     needs: [job_e2e_prepare]
     if: needs.job_e2e_prepare.outputs.matrix != '{"include":[]}'
-    # Canary builds install prerelease dependencies, so they get their own cache volume.
-    runs-on:
-      ${{ matrix.runner || 'namespace-profile-sentry-javascript-small'
-      }};overrides.cache-tag=sentry-javascript-e2e-canary
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     env:
       # We just use a dummy DSN here, only send to the tunnel anyhow
diff --git a/.github/workflows/ci-metadata.yml b/.github/workflows/ci-metadata.yml
index f93c93c296c3..3b5969cc1803 100644
--- a/.github/workflows/ci-metadata.yml
+++ b/.github/workflows/ci-metadata.yml
@@ -38,7 +38,7 @@ on:
 jobs:
   get_metadata:
     name: Get Metadata
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: read
     steps:
diff --git a/.github/workflows/cleanup-e2e-workers.yml b/.github/workflows/cleanup-e2e-workers.yml
index 917de52e997d..69aae225e408 100644
--- a/.github/workflows/cleanup-e2e-workers.yml
+++ b/.github/workflows/cleanup-e2e-workers.yml
@@ -8,7 +8,7 @@ jobs:
   cleanup:
     # The optional E2E job deploys only for PRs from this repository, so forks never have a worker to delete.
     if: github.event.pull_request.head.repo.full_name == github.repository
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-latest
     permissions: {}
     timeout-minutes: 5
     env:
diff --git a/.github/workflows/cleanup-pr-caches.yml b/.github/workflows/cleanup-pr-caches.yml
index 4b7dbb4ee476..e4543e524c91 100644
--- a/.github/workflows/cleanup-pr-caches.yml
+++ b/.github/workflows/cleanup-pr-caches.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   cleanup:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-latest
     permissions:
       # `actions:write` permission is required to delete caches
       #   See also: https://docs.github.com/en/rest/actions/cache?apiVersion=2022-11-28#delete-a-github-actions-cache-for-a-repository-using-a-cache-id
diff --git a/.github/workflows/clear-cache.yml b/.github/workflows/clear-cache.yml
index 28dba37b8d7c..750b39305d1f 100644
--- a/.github/workflows/clear-cache.yml
+++ b/.github/workflows/clear-cache.yml
@@ -21,7 +21,7 @@ on:
 jobs:
   clear-caches:
     name: Delete all caches
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7
 
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 79b9bb42a677..4e41c7f5d145 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -32,7 +32,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze
-    runs-on: namespace-profile-sentry-javascript-large
+    runs-on: ubuntu-latest
     # Skip for pushes from dependabot, which is not supported
     if: github.event_name == 'pull_request' || github.actor != 'dependabot[bot]'
 
diff --git a/.github/workflows/dependabot-auto-triage.yml b/.github/workflows/dependabot-auto-triage.yml
index 5a8f79e2c866..d20178d76b9a 100644
--- a/.github/workflows/dependabot-auto-triage.yml
+++ b/.github/workflows/dependabot-auto-triage.yml
@@ -35,6 +35,11 @@ env:
   FIX_CAP_DEV: '3'
   # ⬇️ debatable but let's start off with this
   PR_REVIEWERS: 'getsentry/team-javascript-sdks-framework'
+  CACHED_DEPENDENCY_PATHS: |
+    ${{ github.workspace }}/node_modules
+    ${{ github.workspace }}/packages/*/node_modules
+    ${{ github.workspace }}/dev-packages/*/node_modules
+    ~/.cache/mongodb-binaries/
 
 concurrency:
   group: dependabot-auto-triage
@@ -43,7 +48,7 @@ concurrency:
 jobs:
   classify:
     name: Classify alerts & auto-dismiss noise
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     outputs:
       runtime_alerts: ${{ steps.select.outputs.runtime_alerts }}
@@ -124,7 +129,7 @@ jobs:
     if:
       (github.event_name == 'schedule' || github.event.inputs.mode == 'full') && needs.classify.outputs.runtime_alerts
       != ''
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     timeout-minutes: 40
     environment: ci-triage
     steps:
@@ -213,7 +218,7 @@ jobs:
     needs: classify
     if:
       (github.event_name == 'schedule' || github.event.inputs.mode == 'full') && needs.classify.outputs.dev_alerts != ''
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     timeout-minutes: 40
     environment: ci-triage
     steps:
diff --git a/.github/workflows/enforce-license-compliance.yml b/.github/workflows/enforce-license-compliance.yml
index 997cfc71ff30..8d09e421768f 100644
--- a/.github/workflows/enforce-license-compliance.yml
+++ b/.github/workflows/enforce-license-compliance.yml
@@ -27,7 +27,7 @@ concurrency:
 
 jobs:
   enforce-license-compliance:
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     steps:
       - name: 'Enforce License Compliance'
         uses: getsentry/action-enforce-license-compliance@main
diff --git a/.github/workflows/external-contributors.yml b/.github/workflows/external-contributors.yml
index 6e3a3c5aff8c..1b131781dc05 100644
--- a/.github/workflows/external-contributors.yml
+++ b/.github/workflows/external-contributors.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       pull-requests: write
       contents: write
-    runs-on: namespace-profile-sentry-javascript
+    runs-on: ubuntu-24.04
     if: |
       github.event.pull_request.merged == true
       && github.event.pull_request.author_association != 'COLLABORATOR'
diff --git a/.github/workflows/gitflow-merge-conflict.yml b/.github/workflows/gitflow-merge-conflict.yml
index 6195a73350d5..102d05b6d03b 100644
--- a/.github/workflows/gitflow-merge-conflict.yml
+++ b/.github/workflows/gitflow-merge-conflict.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   check-merge-conflicts:
     name: Detect merge conflicts in gitflow PRs
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     if: |
       ${{ contains(github.event.pull_request.labels.*.name, 'Dev: Gitflow') }}
     permissions:
diff --git a/.github/workflows/gitflow-sync-develop.yml b/.github/workflows/gitflow-sync-develop.yml
index 21d3c45dc1d0..20f8b335fd0f 100644
--- a/.github/workflows/gitflow-sync-develop.yml
+++ b/.github/workflows/gitflow-sync-develop.yml
@@ -17,7 +17,7 @@ env:
 jobs:
   main:
     name: Create PR master->develop
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: write
       contents: write
diff --git a/.github/workflows/issue-package-label.yml b/.github/workflows/issue-package-label.yml
index c855066f318f..8ac1c7987801 100644
--- a/.github/workflows/issue-package-label.yml
+++ b/.github/workflows/issue-package-label.yml
@@ -7,7 +7,7 @@ on:
 jobs:
   add_labels:
     name: Add package label
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-latest
     if: ${{ !github.event.issue.pull_request }}
     steps:
       - name: Get used package from issue body
diff --git a/.github/workflows/label-external-prs.yml b/.github/workflows/label-external-prs.yml
index 6caf6fae7387..e6a73aaae5a7 100644
--- a/.github/workflows/label-external-prs.yml
+++ b/.github/workflows/label-external-prs.yml
@@ -9,7 +9,7 @@ jobs:
     name: Add external label
     permissions:
       pull-requests: write
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     if: |
       github.event.pull_request.author_association != 'COLLABORATOR'
       && github.event.pull_request.author_association != 'MEMBER'
diff --git a/.github/workflows/optional-e2e.yml b/.github/workflows/optional-e2e.yml
index cff2e2437ad1..0fc020c9b327 100644
--- a/.github/workflows/optional-e2e.yml
+++ b/.github/workflows/optional-e2e.yml
@@ -37,11 +37,7 @@ env:
 jobs:
   job_optional_e2e_tests:
     name: E2E ${{ matrix.label || matrix.test-application }} Test (optional)
-    # Same cache volume as the E2E jobs in build.yml. The event is always `workflow_dispatch`, so the PR number
-    # decides if the run gets the PR volume.
-    runs-on:
-      namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript-e2e${{ inputs.pr_number != '' && '-pr'
-      || '' }}
+    runs-on: ubuntu-24.04
     timeout-minutes: 15
     permissions:
       contents: read
diff --git a/.github/workflows/pr-stale-notifier.yml b/.github/workflows/pr-stale-notifier.yml
index 3c4816dafebe..13bba260a0b0 100644
--- a/.github/workflows/pr-stale-notifier.yml
+++ b/.github/workflows/pr-stale-notifier.yml
@@ -15,7 +15,7 @@ concurrency:
 
 jobs:
   stale:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-latest
     steps:
       - name: Warn and close stale PRs
         uses: actions/stale@v11
diff --git a/.github/workflows/release-comment-issues.yml b/.github/workflows/release-comment-issues.yml
index 88055af892c8..dfb782b1b6d8 100644
--- a/.github/workflows/release-comment-issues.yml
+++ b/.github/workflows/release-comment-issues.yml
@@ -12,7 +12,7 @@ on:
 # This workflow is triggered when a release is published
 jobs:
   release-comment-issues:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     name: 'Notify issues'
     steps:
       - name: Get version
diff --git a/.github/workflows/release-size-info.yml b/.github/workflows/release-size-info.yml
index 591a14b6b553..a1f75303d1ff 100644
--- a/.github/workflows/release-size-info.yml
+++ b/.github/workflows/release-size-info.yml
@@ -13,7 +13,7 @@ on:
 # It fetches the size-limit info from the release branch and adds it to the release
 jobs:
   release-size-info:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     name: 'Add size-limit info to release'
 
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff44869570f5..0d9d491c87a4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     name: 'Release a new version'
     steps:
       - name: Get auth token
diff --git a/.github/workflows/size-check.yml b/.github/workflows/size-check.yml
index ababb321b866..3321585750bb 100644
--- a/.github/workflows/size-check.yml
+++ b/.github/workflows/size-check.yml
@@ -13,10 +13,17 @@ concurrency:
   group: size-check-label-${{ github.event.pull_request.number }}-${{ github.event.label.name }}
   cancel-in-progress: true
 
+env:
+  CACHED_DEPENDENCY_PATHS: |
+    ${{ github.workspace }}/node_modules
+    ${{ github.workspace }}/packages/*/node_modules
+    ${{ github.workspace }}/dev-packages/*/node_modules
+    ~/.cache/mongodb-binaries/
+
 jobs:
   rerun:
     if: github.event.label.name == 'Accept Bundlesize Increase'
-    runs-on: namespace-profile-sentry-javascript;overrides.cache-tag=sentry-javascript
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     steps:
       - name: Check out workflow commit
diff --git a/.github/workflows/track-framework-updates.yml b/.github/workflows/track-framework-updates.yml
index d1660afaddef..cebb7ef821dc 100644
--- a/.github/workflows/track-framework-updates.yml
+++ b/.github/workflows/track-framework-updates.yml
@@ -18,7 +18,7 @@ concurrency:
 
 jobs:
   track-updates:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-latest
     environment: ci-triage
     permissions:
       contents: read
diff --git a/.github/workflows/validate-pr.yml b/.github/workflows/validate-pr.yml
index 0c19a310e8dc..251134290f00 100644
--- a/.github/workflows/validate-pr.yml
+++ b/.github/workflows/validate-pr.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   validate-pr:
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: write
     steps:
diff --git a/.github/workflows/weekly-flaky-tests.yml b/.github/workflows/weekly-flaky-tests.yml
index 23d0f340b174..b9c02c1b0421 100644
--- a/.github/workflows/weekly-flaky-tests.yml
+++ b/.github/workflows/weekly-flaky-tests.yml
@@ -18,7 +18,7 @@ concurrency:
 jobs:
   report:
     name: Weekly flaky test report
-    runs-on: namespace-profile-sentry-javascript-small
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v7
diff --git a/dev-packages/e2e-tests/README.md b/dev-packages/e2e-tests/README.md
index b5cdf556befd..be2b94586ece 100644
--- a/dev-packages/e2e-tests/README.md
+++ b/dev-packages/e2e-tests/README.md
@@ -296,10 +296,6 @@ of a test application.
 set its `assert-command` to run production tests and add a development variant to run both environments in parallel.
 The local `test:assert` script can still run both; select the base variant locally with `--variant <label>`.
 
-The required E2E jobs run on 2 vCPUs (`namespace-profile-sentry-javascript-small`). If an app's job takes longer than
-about 90 seconds, set `"sentryTest": { "runner": "namespace-profile-sentry-javascript" }` to run it and its variants on
-4 vCPUs.
-
 Variants that build against upstream prereleases (for example `canary`, `next` or nightly builds of a framework) go into
 `canaryVariants`. They do not run on PRs, only in the nightly `CI: Canary Tests` workflow (`.github/workflows/canary.yml`),
 so failures caused by an upstream prerelease do not show up on unrelated PRs. Run one locally with
diff --git a/dev-packages/e2e-tests/lib/getTestMatrix.mjs b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
index 69f5d3d7806b..447ff5ad6f01 100644
--- a/dev-packages/e2e-tests/lib/getTestMatrix.mjs
+++ b/dev-packages/e2e-tests/lib/getTestMatrix.mjs
@@ -108,8 +108,7 @@ function addIncludesForTestApp(testApp, includes, { variant }) {
   const shouldSkip = packageJson.sentryTest?.skip || false;
   const isOptional = packageJson.sentryTest?.optional || false;
   const variants = packageJson.sentryTest?.[VARIANT_FIELDS[variant]] || [];
-  const runner = packageJson.sentryTest?.runner;
-  const baseInclude = { 'test-application': testApp, ...(runner ? { runner } : {}) };
+  const baseInclude = { 'test-application': testApp };
 
   if (shouldSkip) {
     return;
diff --git a/dev-packages/e2e-tests/test-applications/aws-serverless-layer/package.json b/dev-packages/e2e-tests/test-applications/aws-serverless-layer/package.json
index eb082877e055..d6f7553e52e5 100644
--- a/dev-packages/e2e-tests/test-applications/aws-serverless-layer/package.json
+++ b/dev-packages/e2e-tests/test-applications/aws-serverless-layer/package.json
@@ -21,7 +21,6 @@
     "rimraf": "^5.0.10"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "NODE_VERSION=22 pnpm test:build",
diff --git a/dev-packages/e2e-tests/test-applications/browser-bfcache/package.json b/dev-packages/e2e-tests/test-applications/browser-bfcache/package.json
index 6ea89590f8c5..17d525126209 100644
--- a/dev-packages/e2e-tests/test-applications/browser-bfcache/package.json
+++ b/dev-packages/e2e-tests/test-applications/browser-bfcache/package.json
@@ -20,8 +20,5 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
     "typescript": "~5.8.3",
     "vite": "^7.3.2"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-15-basepath/package.json b/dev-packages/e2e-tests/test-applications/nextjs-15-basepath/package.json
index 576cd662335d..998bd43f1e1d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-15-basepath/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-15-basepath/package.json
@@ -23,8 +23,5 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-15-intl/package.json b/dev-packages/e2e-tests/test-applications/nextjs-15-intl/package.json
index 59d044708b93..78014972b88e 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-15-intl/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-15-intl/package.json
@@ -24,8 +24,5 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-15-t3/package.json b/dev-packages/e2e-tests/test-applications/nextjs-15-t3/package.json
index 115787f8fbbd..5529013fa11e 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-15-t3/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-15-t3/package.json
@@ -43,8 +43,5 @@
   },
   "ct3aMetadata": {
     "initVersion": "7.47.1"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-15/package.json b/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
index fad802048973..237b2b221229 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-15/package.json
@@ -31,7 +31,6 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "optionalVariants": [
       {
         "build-command": "pnpm test:build-latest",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
index 2534a55b6b69..e9e2ba77131e 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
@@ -44,7 +44,6 @@
     "typescript": "^5"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-webpack",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
index bca5addb2fae..062c709ae23d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-static/package.json
@@ -41,7 +41,6 @@
     "typescript": "^5"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "baseVariant": {
       "build-command": "pnpm test:build",
       "label": "nextjs-16-static (production)",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
index c78827f5595f..c6ee4a2dca46 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming-cacheComponents/package.json
@@ -44,7 +44,6 @@
     "typescript": "^5"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-webpack",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming/package.json
index 9870a3f02d64..1dcd01c56f8e 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-streaming/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-streaming/package.json
@@ -41,7 +41,6 @@
     "typescript": "^5"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-webpack",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
index 4e887a8425ec..cf85a2193e40 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-tunnel/package.json
@@ -51,7 +51,6 @@
     "wrangler": "^4.61.0"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-webpack",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
index d8e485e2ce6a..2da1fec6e7cb 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16/package.json
@@ -65,7 +65,6 @@
     "wrangler": "^4.61.0"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm install",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json b/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
index 7b27a0bb2504..d4bd74483a34 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-app-dir/package.json
@@ -30,7 +30,6 @@
     "ts-node": "10.9.1"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm install",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-pages-dir/package.json b/dev-packages/e2e-tests/test-applications/nextjs-pages-dir/package.json
index d3e2f51b92ff..23d94904f614 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-pages-dir/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-pages-dir/package.json
@@ -30,7 +30,6 @@
     "ts-node": "10.9.1"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-15",
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-3-min/package.json b/dev-packages/e2e-tests/test-applications/nuxt-3-min/package.json
index a1fe29e4acc4..60b06db8c87f 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-3-min/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-3-min/package.json
@@ -24,8 +24,5 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
index 8fcd03d53834..f62cc242e350 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4-static/package.json
@@ -30,7 +30,6 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "E2E_TEST_OTEL_SETUP=true pnpm test:build",
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4/docker-compose.yml b/dev-packages/e2e-tests/test-applications/nuxt-4/docker-compose.yml
index bcb384119acb..a8b2856402a5 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4/docker-compose.yml
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4/docker-compose.yml
@@ -18,8 +18,8 @@ services:
       start_period: 10s
 
   mongo:
-    # `mongo:8` floats to the newest 8.x release, which keeps failing its healthcheck on CI.
-    image: mongo:8.0
+    # MongoDB 8 does not start on Linux kernel 6.19 to 7.0.13 (SERVER-121912), which GitHub-hosted runners use.
+    image: mongo:7.0
     restart: always
     container_name: e2e-tests-nuxt-4-mongo
     ports:
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-4/package.json b/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
index 38b6d60024a3..35f5a25b7a42 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
+++ b/dev-packages/e2e-tests/test-applications/nuxt-4/package.json
@@ -35,7 +35,6 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "E2E_TEST_OTEL_SETUP=true pnpm test:build",
diff --git a/dev-packages/e2e-tests/test-applications/nuxt-5/docker-compose.yml b/dev-packages/e2e-tests/test-applications/nuxt-5/docker-compose.yml
index 804b73fcee00..1aca60f85dd2 100644
--- a/dev-packages/e2e-tests/test-applications/nuxt-5/docker-compose.yml
+++ b/dev-packages/e2e-tests/test-applications/nuxt-5/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
   mongo:
-    # `mongo:8` floats to the newest 8.x release, whose server sometimes exits right after start on CI.
-    image: mongo:8.0
+    # MongoDB 8 does not start on Linux kernel 6.19 to 7.0.13 (SERVER-121912), which GitHub-hosted runners use.
+    image: mongo:7.0
     restart: always
     container_name: e2e-tests-nuxt-5-mongo
     ports:
diff --git a/dev-packages/e2e-tests/test-applications/react-router-6/package.json b/dev-packages/e2e-tests/test-applications/react-router-6/package.json
index afa0bdf2dda5..d61d433093d3 100644
--- a/dev-packages/e2e-tests/test-applications/react-router-6/package.json
+++ b/dev-packages/e2e-tests/test-applications/react-router-6/package.json
@@ -49,7 +49,6 @@
     "npm-run-all2": "^6.2.0"
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "canaryVariants": [
       {
         "build-command": "pnpm test:build-canary",
diff --git a/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json b/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json
index 7d01de919ad9..c0525a3ddc64 100644
--- a/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json
+++ b/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json
@@ -45,8 +45,5 @@
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
     "serve": "14.0.1",
     "npm-run-all2": "^6.2.0"
-  },
-  "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript"
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/react-router-8-framework/package.json b/dev-packages/e2e-tests/test-applications/react-router-8-framework/package.json
index 56c20ce35f2d..151640418a31 100644
--- a/dev-packages/e2e-tests/test-applications/react-router-8-framework/package.json
+++ b/dev-packages/e2e-tests/test-applications/react-router-8-framework/package.json
@@ -69,7 +69,6 @@
     ]
   },
   "sentryTest": {
-    "runner": "namespace-profile-sentry-javascript",
     "variants": [
       {
         "build-command": "pnpm test:build-latest",
diff --git a/scripts/dependency-hash-key.js b/scripts/dependency-hash-key.js
new file mode 100644
index 000000000000..9af70a756561
--- /dev/null
+++ b/scripts/dependency-hash-key.js
@@ -0,0 +1,75 @@
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+
+/**
+ * Build a cache key for the dependencies of the monorepo.
+ * In addition to the content of the pnpm-lock.yaml and pnpm-workspace.yaml files, we also include
+ * dependencies of all workspace packages in the cache key.
+ * This ensures that we get a consistent cache key even if a dependency change does not affect
+ * the pnpm-lock.yaml file.
+ */
+function outputDependencyCacheKey() {
+  const lockfileContent = fs.readFileSync(path.join(process.cwd(), 'pnpm-lock.yaml'), 'utf8');
+
+  const workspaceContent = fs.readFileSync(path.join(process.cwd(), 'pnpm-workspace.yaml'), 'utf8');
+
+  const hashParts = [lockfileContent, workspaceContent];
+
+  const packageJson = require(path.join(process.cwd(), 'package.json'));
+
+  const workspacePackages = packageJson.workspaces || [];
+
+  // Get the package name (e.g. @sentry/browser) of all workspace packages
+  // we want to ignore their version numbers later
+  const workspacePackageNames = getWorkspacePackageNames(workspacePackages);
+
+  // Add the dependencies of the workspace itself
+  hashParts.push(getNormalizedDependencies(packageJson, workspacePackageNames));
+
+  // Now for each workspace package, add the dependencies
+  workspacePackages.forEach(workspace => {
+    const packageJsonPath = path.join(process.cwd(), workspace, 'package.json');
+    const packageJson = require(packageJsonPath);
+    hashParts.push(getNormalizedDependencies(packageJson, workspacePackageNames));
+  });
+
+  const hash = crypto.createHash('md5').update(hashParts.join('\n')).digest('hex');
+  // We log the output in a way that the GitHub Actions can append it to the output
+  // We prefix it with `dependencies-` so it is easier to identify in the logs
+  // eslint-disable-next-line no-console
+  console.log(`hash=dependencies-${hash}`);
+}
+
+function getNormalizedDependencies(packageJson, workspacePackageNames) {
+  const { dependencies, devDependencies } = packageJson;
+
+  const mergedDependencies = {
+    ...devDependencies,
+    ...dependencies,
+  };
+
+  const normalizedDependencies = {};
+
+  // Sort the keys to ensure a consistent order
+  Object.keys(mergedDependencies)
+    .sort()
+    .forEach(key => {
+      // If the dependency is a workspace package, ignore the version
+      // No need to invalidate a cache after every release
+      const version = workspacePackageNames.includes(key) ? '**workspace**' : mergedDependencies[key];
+      normalizedDependencies[key] = version;
+    });
+
+  return JSON.stringify(normalizedDependencies);
+}
+
+function getWorkspacePackageNames(workspacePackages) {
+  return workspacePackages.map(workspace => {
+    const packageJsonPath = path.join(process.cwd(), workspace, 'package.json');
+    const packageJson = require(packageJsonPath);
+    return packageJson.name;
+  });
+}
+
+outputDependencyCacheKey();

From 77f71ea96b16897ec714f84a5bca1a89a19ecffe Mon Sep 17 00:00:00 2001
From: Tim Fish <tim@timfish.uk>
Date: Wed, 4 Nov 2026 15:54:35 +0000
Subject: [PATCH 162/169] fix(bundler-plugins): Inject debug IDs into every
 esbuild rebuild (#26099)

The esbuild plugin cleared its set of wrapped entry points in `setup`,
which esbuild runs once per context. On `context().rebuild()` and in
watch mode, every entry point after the first build counted as already
wrapped, so the rebuilt bundles carried no debug ID and the upload
warned that no source maps were found. The reset now runs in an
`onStart` hook, once per build.

Found while reviewing getsentry/sentry-javascript#25648, where the
missing debug IDs also kept the plugin from cleaning up the maps it had
turned on.

Fixes #26098
---
 packages/bundler-plugins/src/esbuild/index.ts |  8 ++-
 .../test/esbuild/rebuild.test.ts              | 57 +++++++++++++++++++
 2 files changed, 62 insertions(+), 3 deletions(-)
 create mode 100644 packages/bundler-plugins/test/esbuild/rebuild.test.ts

diff --git a/packages/bundler-plugins/src/esbuild/index.ts b/packages/bundler-plugins/src/esbuild/index.ts
index fc17904624be..b369bc67a3ec 100644
--- a/packages/bundler-plugins/src/esbuild/index.ts
+++ b/packages/bundler-plugins/src/esbuild/index.ts
@@ -67,6 +67,7 @@ interface EsbuildPluginBuild {
     options: { filter: RegExp },
     callback: (args: EsbuildOnResolveArgs) => EsbuildOnResolveResult | undefined,
   ) => void;
+  onStart: (callback: () => void) => void;
   onEnd: (callback: (result: EsbuildOnEndArgs) => void | Promise<void>) => void;
 }
 
@@ -156,7 +157,7 @@ export function sentryEsbuildPlugin(userOptions: Options = {}): any {
 
   return {
     name: pluginName,
-    setup({ initialOptions, onLoad, onResolve, onEnd }: EsbuildPluginBuild) {
+    setup({ initialOptions, onLoad, onResolve, onStart, onEnd }: EsbuildPluginBuild) {
       // Release and/or metadata injection
       if (!staticInjectionCode.isEmpty()) {
         const virtualInjectionFilePath = path.resolve('_sentry-injection-stub');
@@ -194,8 +195,9 @@ export function sentryEsbuildPlugin(userOptions: Options = {}): any {
 
       // Debug ID injection - requires per-entry-point unique IDs
       if (sourcemapsEnabled) {
-        // Clear state from previous builds (important for watch mode and test suites)
-        debugIdWrappedPaths.clear();
+        // `setup` runs once per context, `onStart` once per build, so a
+        // rebuild wraps the entry points again.
+        onStart(() => debugIdWrappedPaths.clear());
 
         if (!initialOptions.bundle) {
           logger.warn(
diff --git a/packages/bundler-plugins/test/esbuild/rebuild.test.ts b/packages/bundler-plugins/test/esbuild/rebuild.test.ts
new file mode 100644
index 000000000000..be9b74d558c9
--- /dev/null
+++ b/packages/bundler-plugins/test/esbuild/rebuild.test.ts
@@ -0,0 +1,57 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import * as esbuild from 'esbuild';
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { sentryEsbuildPlugin } from '../../src/esbuild';
+
+const DEBUG_ID_MARKER = /sentry-dbid-([0-9a-f-]{36})/;
+
+describe('rebuilds', () => {
+  let tmpDir: string;
+  let entry: string;
+  let outDir: string;
+
+  beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sentry-esbuild-rebuild-'));
+    entry = path.join(tmpDir, 'entry.js');
+    outDir = path.join(tmpDir, 'dist');
+    fs.writeFileSync(entry, 'export const answer = 42;\nconsole.log(answer);\n');
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  });
+
+  function readDebugIds(): { bundle: string | undefined; map: unknown } {
+    const bundle = fs.readFileSync(path.join(outDir, 'entry.js'), 'utf8');
+    const map = JSON.parse(fs.readFileSync(path.join(outDir, 'entry.js.map'), 'utf8'));
+    return { bundle: bundle.match(DEBUG_ID_MARKER)?.[1], map: map.debug_id };
+  }
+
+  it('injects a debug ID into every rebuild of a context', async () => {
+    const context = await esbuild.context({
+      entryPoints: [entry],
+      bundle: true,
+      sourcemap: true,
+      outdir: outDir,
+      absWorkingDir: tmpDir,
+      plugins: [sentryEsbuildPlugin({ telemetry: false, sourcemaps: { disable: 'disable-upload' } })],
+    });
+
+    try {
+      await context.rebuild();
+      const first = readDebugIds();
+      expect(first.bundle).toBeDefined();
+      expect(first.map).toBe(first.bundle);
+
+      fs.writeFileSync(entry, 'export const answer = 43;\nconsole.log(answer);\n');
+      await context.rebuild();
+      const second = readDebugIds();
+      expect(second.bundle).toBeDefined();
+      expect(second.map).toBe(second.bundle);
+    } finally {
+      await context.dispose();
+    }
+  });
+});

From e4eff2c1bec12b9a16937a4b5bf29e38b82c3bf6 Mon Sep 17 00:00:00 2001
From: "sentry-junior[bot]"
 <264270552+sentry-junior[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 17:48:18 +0100
Subject: [PATCH 163/169] fix(browser): Attribute long animation frame spans to
 the longest script (#25990)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** `long-tasks-and-animation-frame-enabled-static` › "should
capture long animation frame for event listener" failed in 3 `develop`
runs last week ([weekly
report](https://github.com/getsentry/sentry-javascript/actions/runs/41398913334)).
In the [Playwright
trace](https://github.com/getsentry/sentry-javascript/actions/runs/40905241359)
from one failure, the click frame's span was there, but its invoker was
`DOMWindow.onmousedown`, in `sentryWrapped` in the SDK bundle. That's
the SDK's own capture-phase INP listener, not `BUTTON#clickme.onclick`,
which blocks for 105ms. The span takes its attributes from
`entry.scripts[0]`. The browser only lists scripts that run longer than
5ms, so on a loaded runner the SDK's `mousedown` listener sometimes
crosses that bar and becomes the first entry.

The same thing can happen in production: a frame blocked by app code
gets blamed on our own listener. This change uses the script with the
longest `duration` instead. That's also how web-vitals' INP attribution
picks `longestScript`. The new unit test fails on `develop` and passes
with the fix. The long task and LoAF browser suites pass locally on
Chromium.

**Unsure about:** this changes which script the `browser.script.*` /
`code.*` attributes describe, so it's a small behavior change rather
than a test-only fix. If you'd rather keep `scripts[0]`, the alternative
is to loosen the browser test. I kept it in `fix` scope for that reason.

<!-- junior-request-attribution:start -->
via [automation
`sched_91b21536e9d59370f48bbec448287393`](https://junior-prod.sentry.dev/automations/sched_91b21536e9d59370f48bbec448287393)
· Run ID `sched_91b21536e9d59370f48bbec448287393:1793610000000`.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!--
junior-conversation-id:agent-dispatch%3Adispatch_ccfe01b282608cdc694b25f9a04d217d
-->

--

[View
Session](https://junior-prod.sentry.dev/conversations/agent-dispatch%3Adispatch_ccfe01b282608cdc694b25f9a04d217d)
[[Sentry]](https://sentry.sentry.io/explore/conversations/agent-dispatch%3Adispatch_ccfe01b282608cdc694b25f9a04d217d/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
---
 .../browser-utils/src/performance/entries.ts  |  8 +-
 .../performance/longAnimationFrames.test.ts   | 88 +++++++++++++++++++
 2 files changed, 94 insertions(+), 2 deletions(-)
 create mode 100644 packages/browser-utils/test/performance/longAnimationFrames.test.ts

diff --git a/packages/browser-utils/src/performance/entries.ts b/packages/browser-utils/src/performance/entries.ts
index 8beb84e555af..c8c020ef6982 100644
--- a/packages/browser-utils/src/performance/entries.ts
+++ b/packages/browser-utils/src/performance/entries.ts
@@ -180,8 +180,12 @@ export function startTrackingLongAnimationFrames(): void {
         [SENTRY_ORIGIN]: 'auto.ui.browser.metrics',
       };
 
-      const initialScript = entry.scripts[0];
-      const { invoker, invokerType, sourceURL, sourceFunctionName, sourceCharPosition } = initialScript;
+      // The first script can be a short listener (e.g. the SDK's own INP listener on `mousedown`)
+      // that runs before the script that actually blocked the frame.
+      const longestScript = entry.scripts.reduce((longest, script) =>
+        script.duration > longest.duration ? script : longest,
+      );
+      const { invoker, invokerType, sourceURL, sourceFunctionName, sourceCharPosition } = longestScript;
       attributes[BROWSER_SCRIPT_INVOKER] = invoker;
       attributes[BROWSER_SCRIPT_INVOKER_TYPE] = invokerType;
       if (sourceURL) {
diff --git a/packages/browser-utils/test/performance/longAnimationFrames.test.ts b/packages/browser-utils/test/performance/longAnimationFrames.test.ts
new file mode 100644
index 000000000000..7721f4387644
--- /dev/null
+++ b/packages/browser-utils/test/performance/longAnimationFrames.test.ts
@@ -0,0 +1,88 @@
+import {
+  BROWSER_SCRIPT_INVOKER,
+  BROWSER_SCRIPT_INVOKER_TYPE,
+  BROWSER_SCRIPT_SOURCE_CHAR_POSITION,
+  CODE_FILE_PATH,
+  CODE_FUNCTION_NAME,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { UI_LONG_ANIMATION_FRAME } from '@sentry/conventions/op';
+import { getMainCarrier, getSpanDescendants, setCurrentClient, spanToJSON, startSpan } from '@sentry/core';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { startTrackingLongAnimationFrames } from '../../src/performance/entries';
+import { getDefaultClientOptions, TestClient } from '../utils/TestClient';
+
+function mockScript(invoker: string, duration: number, sourceFunctionName: string, sourceCharPosition: number) {
+  return {
+    invoker,
+    invokerType: 'event-listener',
+    sourceURL: 'https://example.com/assets/app.js',
+    sourceFunctionName,
+    sourceCharPosition,
+    duration,
+  };
+}
+
+describe('startTrackingLongAnimationFrames', () => {
+  let observerCallback: ((list: PerformanceObserverEntryList) => void) | undefined;
+
+  beforeEach(() => {
+    getMainCarrier().__SENTRY__ = undefined;
+    const client = new TestClient(getDefaultClientOptions({ tracesSampleRate: 1 }));
+    setCurrentClient(client);
+    client.init();
+
+    vi.stubGlobal(
+      'PerformanceObserver',
+      class {
+        public constructor(callback: (list: PerformanceObserverEntryList) => void) {
+          observerCallback = callback;
+        }
+
+        public observe(): void {
+          // noop
+        }
+      },
+    );
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('attributes the frame to its longest script, not its first one', () => {
+    startTrackingLongAnimationFrames();
+
+    const uiSpans = startSpan({ name: 'pageload', op: 'pageload' }, pageloadSpan => {
+      observerCallback!({
+        getEntries: () => [
+          {
+            startTime: 1200,
+            duration: 140,
+            scripts: [
+              mockScript('DOMWindow.onmousedown', 8, 'captureElementFromEvent', 204910),
+              mockScript('BUTTON#checkout.onclick', 110, 'handleCheckoutClick', 512),
+              mockScript('DOCUMENT.onclick', 6, 'recordBreadcrumb', 1024),
+            ],
+          },
+        ],
+      } as unknown as PerformanceObserverEntryList);
+
+      return getSpanDescendants(pageloadSpan).filter(
+        span => spanToJSON(span).attributes[SENTRY_OP] === UI_LONG_ANIMATION_FRAME,
+      );
+    });
+
+    expect(uiSpans).toHaveLength(1);
+    expect(spanToJSON(uiSpans[0]!).attributes).toEqual({
+      [SENTRY_OP]: UI_LONG_ANIMATION_FRAME,
+      [SENTRY_ORIGIN]: 'auto.ui.browser.metrics',
+      [BROWSER_SCRIPT_INVOKER]: 'BUTTON#checkout.onclick',
+      [BROWSER_SCRIPT_INVOKER_TYPE]: 'event-listener',
+      [CODE_FILE_PATH]: 'https://example.com/assets/app.js',
+      [CODE_FUNCTION_NAME]: 'handleCheckoutClick',
+      [BROWSER_SCRIPT_SOURCE_CHAR_POSITION]: 512,
+    });
+  });
+});

From a1162e303db36cf061bcf73339618c7bf833664f Mon Sep 17 00:00:00 2001
From: Abdelrahman Awad <abdelrahman.awad@sentry.io>
Date: Wed, 4 Nov 2026 12:23:16 -0500
Subject: [PATCH 164/169] feat(node): Support postgres v4 through its native
 tracing channels (#26076)

postgres@4 dropped the internals our orchestrion transform hooks into,
so v4 queries got no spans, fixed by subscribing to the `postgres:query`
tracing channel it now publishes natively.

I added a v4 integration suite that asserts the same span tree as the v3
one, including the URL, unsafe, requestHook and
`instrumentPostgresJsSql` double-span cases.
---
 .../docker-compose.yml                        |  16 +
 .../instrument-requestHook.mjs                |  21 +
 .../postgresjs-tracing-channel/instrument.mjs |   9 +
 .../scenario-unsafe.mjs                       |  37 +
 .../scenario-url.mjs                          |  44 ++
 .../scenario-wrapper.mjs                      |  28 +
 .../postgresjs-tracing-channel/scenario.mjs   |  74 ++
 .../postgresjs-tracing-channel/test.ts        | 651 ++++++++++++++++++
 .../src/integrations/postgresjs-wrapper.ts    |  17 +-
 .../{postgresjs.ts => postgresjs/index.ts}    |  47 +-
 .../postgresjs/postgresjs-dc-subscriber.ts    | 152 ++++
 .../src/orchestrion/config/postgres.ts        |  11 +-
 .../postgresjs-dc-subscriber.test.ts          | 325 +++++++++
 13 files changed, 1413 insertions(+), 19 deletions(-)
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/docker-compose.yml
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument-requestHook.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-unsafe.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-url.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-wrapper.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario.mjs
 create mode 100644 dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/test.ts
 rename packages/server-utils/src/integrations/{postgresjs.ts => postgresjs/index.ts} (84%)
 create mode 100644 packages/server-utils/src/integrations/postgresjs/postgresjs-dc-subscriber.ts
 create mode 100644 packages/server-utils/test/integrations/postgresjs/postgresjs-dc-subscriber.test.ts

diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/docker-compose.yml b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/docker-compose.yml
new file mode 100644
index 000000000000..df5154fc8f27
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/docker-compose.yml
@@ -0,0 +1,16 @@
+services:
+  db:
+    image: postgres:13
+    restart: always
+    ports:
+      - '5445:5432'
+    environment:
+      POSTGRES_USER: test
+      POSTGRES_PASSWORD: test
+      POSTGRES_DB: test_db
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U test -d test_db']
+      interval: 2s
+      timeout: 3s
+      retries: 30
+      start_period: 5s
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument-requestHook.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument-requestHook.mjs
new file mode 100644
index 000000000000..746f07de61f6
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument-requestHook.mjs
@@ -0,0 +1,21 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+const requestHook = (span, sanitizedSqlQuery, connectionContext) => {
+  span.setAttributes({
+    'custom.requestHook': 'called',
+    'custom.requestHook.query': sanitizedSqlQuery,
+    'custom.requestHook.database': connectionContext?.ATTR_DB_NAMESPACE,
+    'custom.requestHook.host': connectionContext?.ATTR_SERVER_ADDRESS,
+    'custom.requestHook.port': connectionContext?.ATTR_SERVER_PORT,
+  });
+};
+
+// `postgresJsIntegration()` forwards the `requestHook` to the `postgres:query` channel subscriber.
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  tracesSampleRate: 1.0,
+  transport: loggingTransport,
+  integrations: [Sentry.postgresJsIntegration({ requestHook })],
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument.mjs
new file mode 100644
index 000000000000..46a27dd03b74
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/instrument.mjs
@@ -0,0 +1,9 @@
+import * as Sentry from '@sentry/node';
+import { loggingTransport } from '@sentry-internal/node-integration-tests';
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  release: '1.0',
+  tracesSampleRate: 1.0,
+  transport: loggingTransport,
+});
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-unsafe.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-unsafe.mjs
new file mode 100644
index 000000000000..deafe3408630
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-unsafe.mjs
@@ -0,0 +1,37 @@
+import * as Sentry from '@sentry/node';
+import { uuid4 } from '@sentry/core';
+import postgres from 'postgres';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+
+// Test with plain object options
+const sql = postgres({ port: 5445, user: 'test', password: 'test', database: 'test_db' });
+
+async function run() {
+  await Sentry.startSpan(
+    {
+      name: 'Test Transaction',
+      op: 'transaction',
+    },
+    async () => {
+      try {
+        await waitForConnection(() => sql`SELECT 1`);
+        // Test sql.unsafe() - this was not being instrumented before the fix
+        await sql.unsafe('CREATE TABLE "User" ("id" SERIAL NOT NULL, "email" TEXT NOT NULL, PRIMARY KEY ("id"))');
+
+        const email = `${uuid4()}@domain.com`;
+        await sql.unsafe('INSERT INTO "User" ("email") VALUES ($1)', [email]);
+
+        await sql.unsafe('SELECT * FROM "User" WHERE "email" = $1', [email]);
+
+        await sql.unsafe('DROP TABLE "User"');
+
+        // This will be captured as an error as the table no longer exists
+        await sql.unsafe('SELECT * FROM "User"');
+      } finally {
+        await sql.end();
+      }
+    },
+  );
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-url.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-url.mjs
new file mode 100644
index 000000000000..259d2c7db90e
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-url.mjs
@@ -0,0 +1,44 @@
+import * as Sentry from '@sentry/node';
+import { uuid4 } from '@sentry/core';
+import postgres from 'postgres';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+
+// Test URL-based initialization - this is the common pattern that was causing the regression
+const sql = postgres('postgres://test:test@localhost:5445/test_db');
+
+async function run() {
+  await Sentry.startSpan(
+    {
+      name: 'Test Transaction',
+      op: 'transaction',
+    },
+    async () => {
+      try {
+        await waitForConnection(() => sql`SELECT 1`);
+        await sql`
+          CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"));
+        `;
+
+        const email = `${uuid4()}@domain.com`;
+        await sql`
+          INSERT INTO "User" ("email", "name") VALUES (${email}, 'tim');
+        `;
+
+        await sql`
+          SELECT * FROM "User" WHERE "email" = ${email};
+        `;
+
+        await sql`
+          DELETE FROM "User" WHERE "email" = ${email};
+        `;
+      } finally {
+        await sql`
+          DROP TABLE "User";
+        `;
+        await sql.end();
+      }
+    },
+  );
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-wrapper.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-wrapper.mjs
new file mode 100644
index 000000000000..992d92979f35
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario-wrapper.mjs
@@ -0,0 +1,28 @@
+import * as Sentry from '@sentry/node';
+import postgres from 'postgres';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+
+const sql = Sentry.instrumentPostgresJsSql(
+  postgres({ port: 5445, user: 'test', password: 'test', database: 'test_db' }),
+);
+
+async function run() {
+  await waitForConnection(() => sql`SELECT 1`);
+
+  await Sentry.startSpan(
+    {
+      name: 'Test Transaction',
+      op: 'transaction',
+    },
+    async () => {
+      try {
+        await sql`SELECT 1 AS one`;
+        await sql.unsafe('SELECT 2 AS two');
+      } finally {
+        await sql.end();
+      }
+    },
+  );
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario.mjs b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario.mjs
new file mode 100644
index 000000000000..3be2e0d51998
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/scenario.mjs
@@ -0,0 +1,74 @@
+import * as Sentry from '@sentry/node';
+import { uuid4 } from '@sentry/core';
+import postgres from 'postgres';
+import { waitForConnection } from '@sentry-internal/node-integration-tests';
+
+const sql = postgres({ port: 5445, user: 'test', password: 'test', database: 'test_db' });
+
+async function run() {
+  await Sentry.startSpan(
+    {
+      name: 'Test Transaction',
+      op: 'transaction',
+    },
+    async () => {
+      try {
+        await waitForConnection(() => sql`SELECT 1`);
+        await sql`
+          CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"));
+        `;
+
+        const email = `${uuid4()}@domain.com`;
+        await sql`
+          INSERT INTO "User" ("email", "name") VALUES (${email}, 'tim');
+        `;
+
+        await sql`
+          UPDATE "User" SET "name" = 'Foo' WHERE "email" = ${email};
+        `;
+
+        await sql`
+          SELECT * FROM "User" WHERE "email" = ${email};
+        `;
+
+        // Test parameterized queries
+        await sql`
+          SELECT * FROM "User" WHERE "email" = ${email} AND "name" = ${'Foo'};
+        `;
+
+        // Test DELETE operation
+        await sql`
+          DELETE FROM "User" WHERE "email" = ${email};
+        `;
+
+        // Test INSERT with RETURNING
+        await sql`
+          INSERT INTO "User" ("email", "name") VALUES (${email}, 'Test User') RETURNING *;
+        `;
+
+        // Test cursor-based queries
+        await sql`SELECT * from generate_series(1,1000) as x `.cursor(10, async rows => {
+          await Promise.all(rows);
+        });
+
+        // Test multiple rows at once
+        await sql`
+          SELECT * FROM "User" LIMIT 10;
+        `;
+
+        await sql`
+          DROP TABLE "User";
+        `;
+
+        // This will be captured as an error as the table no longer exists
+        await sql`
+          SELECT * FROM "User" WHERE "email" = ${email};
+        `;
+      } finally {
+        await sql.end();
+      }
+    },
+  );
+}
+
+run();
diff --git a/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/test.ts b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/test.ts
new file mode 100644
index 000000000000..13f97d03d277
--- /dev/null
+++ b/dev-packages/node-integration-tests/suites/tracing/postgresjs-tracing-channel/test.ts
@@ -0,0 +1,651 @@
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_SUMMARY,
+  DB_QUERY_TEXT,
+  DB_RESPONSE_STATUS_CODE,
+  DB_SYSTEM_NAME,
+  ERROR_TYPE,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  SENTRY_STATUS_MESSAGE,
+  SERVER_ADDRESS,
+  SERVER_PORT,
+} from '@sentry/conventions/attributes';
+import { DB } from '@sentry/conventions/op';
+import type { Event, SerializedStreamedSpanContainer } from '@sentry/core';
+import { afterAll, describe, expect } from 'vitest';
+import { cleanupChildProcesses, createEsmTests, describeWithDockerCompose } from '../../../utils/runner';
+
+// postgres >= 4 publishes `postgres:query` on `node:diagnostics_channel` itself, so these spans come from
+// `subscribePostgresJsDiagnosticChannels`, not the orchestrion transform (gated to `< 4`). v4 is ESM-only.
+const OPTIONS = { additionalDependencies: { postgres: '^4.0.0' } };
+
+describeWithDockerCompose('postgresjs v4 tracing channel', { workingDirectory: [__dirname] }, () => {
+  afterAll(() => {
+    cleanupChildProcesses();
+  });
+
+  const ORIGIN = 'auto.db.postgresjs';
+
+  describe('basic', () => {
+    const EXPECTED_SPANS = {
+      items: expect.arrayContaining([
+        expect.objectContaining({ name: 'Test Transaction', is_segment: true }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE TABLE' },
+            [DB_QUERY_TEXT]: {
+              type: 'string',
+              value:
+                'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
+            },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+          }),
+          name: 'CREATE TABLE "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'INSERT INTO "User" ("email", "name") VALUES ($1, ?)' },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+          }),
+          name: 'INSERT "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'UPDATE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'UPDATE "User" SET "name" = ? WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'UPDATE "User"' },
+          }),
+          name: 'UPDATE "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+          }),
+          name: 'SELECT "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        // Parameterized query test - verifies that tagged template queries with interpolations
+        // are properly reconstructed with $1, $2 placeholders which are PRESERVED per OTEL spec
+        // (PostgreSQL $n placeholders indicate parameterized queries that don't leak sensitive data)
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1 AND "name" = $2' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+          }),
+          name: 'SELECT "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * from generate_series(?,?) as x' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT generate_series' },
+          }),
+          name: 'SELECT generate_series',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DROP TABLE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "User"' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "User"' },
+          }),
+          name: 'DROP TABLE "User"',
+          status: 'ok',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_RESPONSE_STATUS_CODE]: { type: 'string', value: '42P01' },
+            [ERROR_TYPE]: { type: 'string', value: 'PostgresError' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+            [SENTRY_STATUS_MESSAGE]: { type: 'string', value: 'relation "User" does not exist' },
+          }),
+          name: 'SELECT "User"',
+          status: 'error',
+          parent_span_id: expect.any(String),
+          span_id: expect.any(String),
+          start_timestamp: expect.any(Number),
+          end_timestamp: expect.any(Number),
+          trace_id: expect.any(String),
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          name: 'DELETE "User"',
+          is_segment: false,
+          status: 'ok',
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DELETE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'DELETE FROM "User" WHERE "email" = $1' },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'DELETE "User"' },
+          }),
+        }),
+        expect.objectContaining({
+          name: 'INSERT "User"',
+          is_segment: false,
+          status: 'ok',
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
+            [DB_QUERY_TEXT]: {
+              type: 'string',
+              value: 'INSERT INTO "User" ("email", "name") VALUES ($1, ?) RETURNING *',
+            },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+          }),
+        }),
+      ]),
+    };
+
+    const EXPECTED_ERROR_EVENT = {
+      event_id: expect.any(String),
+      contexts: {
+        trace: {
+          trace_id: expect.any(String),
+          span_id: expect.any(String),
+        },
+      },
+      exception: {
+        values: [
+          {
+            type: 'PostgresError',
+            value: 'relation "User" does not exist',
+            stacktrace: {
+              frames: expect.arrayContaining([
+                // v4 rewrites the error stack to point at the caller rather than its own connection code.
+                expect.objectContaining({
+                  module: 'scenario',
+                  filename: expect.stringMatching(/scenario\.mjs$/),
+                  lineno: expect.any(Number),
+                  colno: expect.any(Number),
+                }),
+              ]),
+            },
+          },
+        ],
+      },
+    };
+
+    createEsmTests(
+      __dirname,
+      'scenario.mjs',
+      'instrument.mjs',
+      (createTestRunner, test) => {
+        test('should auto-instrument `postgres` package', { timeout: 60_000 }, async () => {
+          let receivedSpans: SerializedStreamedSpanContainer['items'] = [];
+          let errorEvent: Event | undefined;
+          await createTestRunner()
+            .expect({
+              span: container => {
+                expect(container.items.find(span => span.is_segment)?.name).toBe('Test Transaction');
+                receivedSpans = container.items;
+              },
+            })
+            .expect({
+              event: event => {
+                errorEvent = event;
+              },
+            })
+            // The error event is captured via an unhandled rejection processed on a later tick than
+            // the spans, so the two envelopes can reach the transport in either order.
+            .unordered()
+            .start()
+            .completed();
+          expect({ items: receivedSpans }).toMatchObject(EXPECTED_SPANS);
+          for (const span of receivedSpans.filter(span => span.attributes[SENTRY_OP]?.value === DB)) {
+            expect(span.attributes[DB_QUERY_SUMMARY]).toEqual({ type: 'string', value: span.name });
+          }
+          expect(errorEvent).toMatchObject(EXPECTED_ERROR_EVENT);
+
+          const segmentSpanId = receivedSpans.find(span => span.is_segment)?.span_id;
+          for (const span of receivedSpans.filter(span => span.attributes[SENTRY_OP]?.value === DB)) {
+            expect(span.parent_span_id).toBe(segmentSpanId);
+          }
+        });
+      },
+      OPTIONS,
+    );
+  });
+
+  describe('requestHook', () => {
+    const EXPECTED_SPANS = {
+      items: expect.arrayContaining([
+        expect.objectContaining({ name: 'Test Transaction', is_segment: true }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE TABLE' },
+            [DB_QUERY_TEXT]: {
+              type: 'string',
+              value:
+                'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
+            },
+            'custom.requestHook': { type: 'string', value: 'called' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+            'custom.requestHook.query': {
+              type: 'string',
+              value:
+                'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
+            },
+            'custom.requestHook.database': { type: 'string', value: 'test_db' },
+          }),
+          name: 'CREATE TABLE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'INSERT INTO "User" ("email", "name") VALUES ($1, ?)' },
+            'custom.requestHook': { type: 'string', value: 'called' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+            'custom.requestHook.query': {
+              type: 'string',
+              value: 'INSERT INTO "User" ("email", "name") VALUES ($1, ?)',
+            },
+            'custom.requestHook.database': { type: 'string', value: 'test_db' },
+          }),
+          name: 'INSERT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            'custom.requestHook': { type: 'string', value: 'called' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+            'custom.requestHook.query': { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            'custom.requestHook.database': { type: 'string', value: 'test_db' },
+          }),
+          name: 'SELECT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DROP TABLE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "User"' },
+            'custom.requestHook': { type: 'string', value: 'called' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "User"' },
+            'custom.requestHook.query': { type: 'string', value: 'DROP TABLE "User"' },
+            'custom.requestHook.database': { type: 'string', value: 'test_db' },
+          }),
+          name: 'DROP TABLE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+      ]),
+    };
+
+    createEsmTests(
+      __dirname,
+      'scenario.mjs',
+      'instrument-requestHook.mjs',
+      (createTestRunner, test) => {
+        test('should call requestHook when provided', { timeout: 60_000 }, async () => {
+          // The scenario's last query fails on purpose, so ignore its error event.
+          await createTestRunner()
+            .ignore('event')
+            .expect({
+              span: container => {
+                expect(container).toMatchObject(EXPECTED_SPANS);
+                // v4 only sets `host`/`port` on the channel context once the query is sent, after the hook ran.
+                for (const span of container.items.filter(span => span.attributes['custom.requestHook'])) {
+                  expect(span.attributes['custom.requestHook.host']).toBeUndefined();
+                  expect(span.attributes['custom.requestHook.port']).toBeUndefined();
+                }
+              },
+            })
+            .start()
+            .completed();
+        });
+      },
+      OPTIONS,
+    );
+  });
+
+  describe('url initialization', () => {
+    const EXPECTED_SPANS = {
+      items: expect.arrayContaining([
+        expect.objectContaining({ name: 'Test Transaction', is_segment: true }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE TABLE' },
+            [DB_QUERY_TEXT]: {
+              type: 'string',
+              value:
+                'CREATE TABLE "User" ("id" SERIAL NOT NULL,"createdAt" TIMESTAMP(?) NOT NULL DEFAULT CURRENT_TIMESTAMP,"email" TEXT NOT NULL,"name" TEXT,CONSTRAINT "User_pkey" PRIMARY KEY ("id"))',
+            },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+          }),
+          name: 'CREATE TABLE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'INSERT INTO "User" ("email", "name") VALUES ($1, ?)' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+          }),
+          name: 'INSERT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+          }),
+          name: 'SELECT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DELETE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'DELETE FROM "User" WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'DELETE "User"' },
+          }),
+          name: 'DELETE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+      ]),
+    };
+
+    createEsmTests(
+      __dirname,
+      'scenario-url.mjs',
+      'instrument.mjs',
+      (createTestRunner, test) => {
+        test('should instrument postgres package with URL initialization', { timeout: 90_000 }, async () => {
+          await createTestRunner().ignore('event').expect({ span: EXPECTED_SPANS }).start().completed();
+        });
+      },
+      OPTIONS,
+    );
+  });
+
+  describe('sql.unsafe()', () => {
+    const EXPECTED_SPANS = {
+      items: expect.arrayContaining([
+        expect.objectContaining({ name: 'Test Transaction', is_segment: true }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'CREATE TABLE' },
+            [DB_QUERY_TEXT]: {
+              type: 'string',
+              value: 'CREATE TABLE "User" ("id" SERIAL NOT NULL, "email" TEXT NOT NULL, PRIMARY KEY ("id"))',
+            },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'CREATE TABLE "User"' },
+          }),
+          name: 'CREATE TABLE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        // sql.unsafe() with $1 placeholders - preserved per OTEL spec
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'INSERT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'INSERT INTO "User" ("email") VALUES ($1)' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'INSERT "User"' },
+          }),
+          name: 'INSERT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'SELECT' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'SELECT * FROM "User" WHERE "email" = $1' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'SELECT "User"' },
+          }),
+          name: 'SELECT "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+        expect.objectContaining({
+          attributes: expect.objectContaining({
+            [DB_NAMESPACE]: { type: 'string', value: 'test_db' },
+            [DB_SYSTEM_NAME]: { type: 'string', value: 'postgres' },
+            [DB_OPERATION_NAME]: { type: 'string', value: 'DROP TABLE' },
+            [DB_QUERY_TEXT]: { type: 'string', value: 'DROP TABLE "User"' },
+            [SENTRY_OP]: { type: 'string', value: DB },
+            [SENTRY_ORIGIN]: { type: 'string', value: ORIGIN },
+            [SERVER_ADDRESS]: { type: 'string', value: 'localhost' },
+            [SERVER_PORT]: { type: 'integer', value: 5445 },
+            [DB_QUERY_SUMMARY]: { type: 'string', value: 'DROP TABLE "User"' },
+          }),
+          name: 'DROP TABLE "User"',
+          status: 'ok',
+          is_segment: false,
+        }),
+      ]),
+    };
+
+    createEsmTests(
+      __dirname,
+      'scenario-unsafe.mjs',
+      'instrument.mjs',
+      (createTestRunner, test) => {
+        test('should instrument sql.unsafe() queries', { timeout: 90_000 }, async () => {
+          // The last query fails on purpose, and its unhandled rejection also sends an error event, which can
+          // arrive before the transaction.
+          await createTestRunner().ignore('event').expect({ span: EXPECTED_SPANS }).start().completed();
+        });
+      },
+      OPTIONS,
+    );
+  });
+
+  describe('instrumentPostgresJsSql()', () => {
+    createEsmTests(
+      __dirname,
+      'scenario-wrapper.mjs',
+      'instrument.mjs',
+      (createTestRunner, test) => {
+        test('creates one span per query when the native channel fires too', { timeout: 60_000 }, async () => {
+          await createTestRunner()
+            .expect({
+              span: container => {
+                const segment = container.items.find(span => span.is_segment);
+                expect(segment?.name).toBe('Test Transaction');
+
+                const dbSpans = container.items.filter(span => span.attributes[SENTRY_OP]?.value === DB);
+                expect(dbSpans.map(span => span.attributes[DB_QUERY_TEXT]?.value)).toEqual([
+                  'SELECT ? AS one',
+                  'SELECT ? AS two',
+                ]);
+                for (const span of dbSpans) {
+                  expect(span.parent_span_id).toBe(segment?.span_id);
+                  expect(span.attributes[SENTRY_ORIGIN]).toEqual({ type: 'string', value: ORIGIN });
+                }
+              },
+            })
+            .start()
+            .completed();
+        });
+      },
+      OPTIONS,
+    );
+  });
+});
diff --git a/packages/server-utils/src/integrations/postgresjs-wrapper.ts b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
index e3f07de34d75..d387c299ffc9 100644
--- a/packages/server-utils/src/integrations/postgresjs-wrapper.ts
+++ b/packages/server-utils/src/integrations/postgresjs-wrapper.ts
@@ -4,6 +4,7 @@
 /* eslint-disable max-lines */
 
 import {
+  addNonEnumerableProperty,
   debug,
   getActiveSpan,
   isObjectLike,
@@ -40,7 +41,7 @@ export type PostgresConnectionContext = {
   ATTR_SERVER_PORT?: string;
 };
 
-interface PostgresJsSqlInstrumentationOptions {
+export interface PostgresJsSqlInstrumentationOptions {
   /**
    * Whether to require a parent span for the instrumentation.
    * If set to true, the instrumentation will only create spans if there is a parent span
@@ -64,6 +65,9 @@ const INSTRUMENTED_MARKER = Symbol.for('sentry.instrumented.postgresjs');
 // This prevents double-spanning when both the wrapper and the Node.js Query.prototype
 // fallback patch are active simultaneously.
 const QUERY_FROM_INSTRUMENTED_SQL = Symbol.for('sentry.query.from.instrumented.sql');
+// postgres >= 4 publishes `postgres:query` without exposing the `Query`, so the native channel
+// subscriber can't read QUERY_FROM_INSTRUMENTED_SQL. It checks this marker on the active span instead.
+const POSTGRESJS_WRAPPER_SPAN = Symbol.for('sentry.postgresjs.wrapper.span');
 
 /**
  * Instruments a postgres.js `sql` instance with Sentry tracing.
@@ -266,6 +270,8 @@ function _wrapSingleQueryHandle(
     };
 
     return startSpanManual({ name: getSqlSpanName(attributes, 'postgresjs.query'), attributes }, (span: Span) => {
+      addNonEnumerableProperty(span, POSTGRESJS_WRAPPER_SPAN, true);
+
       if (options.requestHook) {
         try {
           options.requestHook(span, sanitizedSqlQuery, connectionContext);
@@ -295,6 +301,15 @@ function _wrapSingleQueryHandle(
   query.handle = wrappedHandle;
 }
 
+/**
+ * Whether `span` was started by {@link instrumentPostgresJsSql}.
+ *
+ * @internal Exported for the diagnostics-channel integration.
+ */
+export function _isPostgresJsWrapperSpan(span: Span | undefined): boolean {
+  return !!span && POSTGRESJS_WRAPPER_SPAN in span;
+}
+
 /**
  * Determines whether a span should be created based on the current context.
  * If `requireParentSpan` is set to true in the options, a span will
diff --git a/packages/server-utils/src/integrations/postgresjs.ts b/packages/server-utils/src/integrations/postgresjs/index.ts
similarity index 84%
rename from packages/server-utils/src/integrations/postgresjs.ts
rename to packages/server-utils/src/integrations/postgresjs/index.ts
index f19d739176dc..86c46f6b26ac 100644
--- a/packages/server-utils/src/integrations/postgresjs.ts
+++ b/packages/server-utils/src/integrations/postgresjs/index.ts
@@ -1,4 +1,4 @@
-import * as diagnosticsChannel from '../utils/diagnosticsChannel';
+import * as diagnosticsChannel from '../../utils/diagnosticsChannel';
 import {
   DB_OPERATION_NAME,
   DB_QUERY_TEXT,
@@ -9,9 +9,9 @@ import {
 } from '@sentry/conventions/attributes';
 import { DB } from '@sentry/conventions/op';
 import type { IntegrationFn, Span, SpanAttributes } from '@sentry/core';
-import { debug, defineIntegration, startInactiveSpan } from '@sentry/core';
-import { DEBUG_BUILD } from '../debug-build';
-import { getSqlQueryAttributes, getSqlSpanName } from '../utils/sql';
+import { debug, defineIntegration, startInactiveSpan, waitForTracingChannelBinding } from '@sentry/core';
+import { DEBUG_BUILD } from '../../debug-build';
+import { getSqlQueryAttributes, getSqlSpanName } from '../../utils/sql';
 import {
   _buildConnectionContext,
   _getConnectionAttributes,
@@ -19,12 +19,13 @@ import {
   _wrapQuerySettlement,
   type PostgresConnectionContext,
   type PostgresQuerySettlement,
-} from './postgresjs-wrapper';
-import type { OrchestrionChannelContext } from '../orchestrion/types';
-import { CHANNELS } from '../orchestrion/channels';
-import { bindTracingChannelToSpan } from '../tracing-channel';
-import { postgresJsModuleNames } from '../orchestrion/config/postgres';
-import { invokeOrchestrionInstrumentation } from '../orchestrion/instrumentation';
+} from '../postgresjs-wrapper';
+import type { OrchestrionChannelContext } from '../../orchestrion/types';
+import { CHANNELS } from '../../orchestrion/channels';
+import { bindTracingChannelToSpan } from '../../tracing-channel';
+import { postgresJsModuleNames } from '../../orchestrion/config/postgres';
+import { invokeOrchestrionInstrumentation } from '../../orchestrion/instrumentation';
+import { subscribePostgresJsDiagnosticChannels } from './postgresjs-dc-subscriber';
 
 // Same name as the OTel `PostgresJs` integration by design, so the OTel
 // integration of the same name is deduplicated out of the default set.
@@ -133,7 +134,18 @@ function attachConnectionAttributesFromChannel(message: PostgresJsQueryContext):
 const _postgresJsIntegration = ((options: PostgresJsIntegrationOptions = {}) => {
   return {
     name: INTEGRATION_NAME,
+    setupOnce() {
+      // postgres >= 4 publishes its own `postgres:query` tracing channel, with no orchestrion event to
+      // signal that it was loaded, so subscribe eagerly.
+      if (!diagnosticsChannel.tracingChannel) {
+        return;
+      }
+      waitForTracingChannelBinding(() => {
+        subscribePostgresJsDiagnosticChannels(diagnosticsChannel.tracingChannel, options);
+      });
+    },
     setup(client) {
+      // postgres 3.x is covered by the orchestrion-injected channels, subscribed lazily.
       invokeOrchestrionInstrumentation(client, postgresJsModuleNames, instrumentPostgresJs, [options]);
     },
   };
@@ -247,12 +259,15 @@ function instrumentPostgresJs(options: PostgresJsIntegrationOptions): void {
 }
 
 /**
- * Diagnostics-channel-based postgres.js (`postgres` v3.x) integration.
+ * Diagnostics-channel-based postgres.js integration.
+ *
+ * - `postgres` 3.x: subscribes to the `orchestrion:postgres:handle` / `:connection` /
+ *   `:execute` / `:connect` channels injected into postgres.js' `Query.prototype.handle`
+ *   and `Connection`/`execute`/`connect` (in `src/*` and `cjs/src/*`). Requires the
+ *   Sentry runtime hook or bundler plugin.
+ * - `postgres` >= 4.0.0: subscribes to the `postgres:query` tracing channel the library
+ *   publishes natively.
  *
- * Subscribes to the `orchestrion:postgres:handle` / `:connection` / `:execute` /
- * `:connect` diagnostics channels injected into postgres.js' `Query.prototype.handle`
- * and `Connection`/`execute`/`connect` (in `src/*` and `cjs/src/*`) and creates db
- * spans matching the OTel `postgresJsIntegration`. Requires the Sentry runtime
- * hook or bundler plugin.
+ * Both paths create the same db spans.
  */
 export const postgresJsIntegration = defineIntegration(_postgresJsIntegration);
diff --git a/packages/server-utils/src/integrations/postgresjs/postgresjs-dc-subscriber.ts b/packages/server-utils/src/integrations/postgresjs/postgresjs-dc-subscriber.ts
new file mode 100644
index 000000000000..813607a441ef
--- /dev/null
+++ b/packages/server-utils/src/integrations/postgresjs/postgresjs-dc-subscriber.ts
@@ -0,0 +1,152 @@
+import type { TracingChannel } from 'node:diagnostics_channel';
+import {
+  DB_OPERATION_NAME,
+  DB_QUERY_TEXT,
+  DB_RESPONSE_STATUS_CODE,
+  DB_SYSTEM_NAME,
+  SENTRY_KIND,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+} from '@sentry/conventions/attributes';
+import { DB } from '@sentry/conventions/op';
+import type { Span, SpanAttributes } from '@sentry/core';
+import { debug, getActiveSpan, isObjectLike, startInactiveSpan } from '@sentry/core';
+import { DEBUG_BUILD } from '../../debug-build';
+import { bindTracingChannelToSpan } from '../../tracing-channel';
+import { getSqlQueryAttributes, getSqlSpanName } from '../../utils/sql';
+import {
+  _getConnectionAttributes,
+  _isPostgresJsWrapperSpan,
+  type PostgresConnectionContext,
+  type PostgresJsSqlInstrumentationOptions,
+} from '../postgresjs-wrapper';
+
+/**
+ * Tracing channel published by `postgres` >= 4.0.0 for every query (see postgres `src/diagnostics.js`).
+ */
+export const POSTGRESJS_DC_CHANNEL_QUERY = 'postgres:query';
+
+const ORIGIN = 'auto.db.postgresjs';
+const DB_SYSTEM_NAME_POSTGRES = 'postgres';
+
+/**
+ * The context `postgres` >= 4.0.0 publishes on `postgres:query`. `host`, `port` and `connection`
+ * stay `null` until the query is written to a connection, and `command`/`count` until it completes,
+ * so they can only be read once the span ends.
+ */
+export interface PostgresJsQueryData {
+  query?: string | null;
+  database?: string;
+  user?: string | null;
+  host?: string | null;
+  port?: number | null;
+  command?: string | null;
+  result?: unknown;
+  error?: unknown;
+}
+
+/**
+ * Platform-provided factory for a native tracing channel. Node passes `node:diagnostics_channel`'s
+ * `tracingChannel` directly.
+ */
+export type PostgresJsTracingChannelFactory = <T extends object>(name: string) => TracingChannel<T, T>;
+
+/**
+ * Subscribe Sentry span handlers to the `postgres:query` tracing channel published natively by
+ * `postgres` >= 4.0.0. Older versions never publish it, and the orchestrion transform is gated to
+ * `< 4`, so no query gets two spans.
+ */
+export function subscribePostgresJsDiagnosticChannels(
+  tracingChannel: PostgresJsTracingChannelFactory,
+  options: PostgresJsSqlInstrumentationOptions = {},
+): void {
+  const { requireParentSpan, requestHook } = options;
+
+  bindTracingChannelToSpan(
+    tracingChannel<PostgresJsQueryData>(POSTGRESJS_DC_CHANNEL_QUERY),
+    data => {
+      // `instrumentPostgresJsSql` already spans this query, and its span is active when postgres runs it.
+      if (_isPostgresJsWrapperSpan(getActiveSpan())) {
+        return undefined;
+      }
+
+      const queryAttributes = getSqlQueryAttributes(data.query ?? undefined);
+      const sanitizedSqlQuery = queryAttributes[DB_QUERY_TEXT] ?? '';
+      const connectionContext = getPostgresJsConnectionContext(data);
+
+      const attributes: SpanAttributes = {
+        [SENTRY_OP]: DB,
+        [SENTRY_KIND]: 'client',
+        [SENTRY_ORIGIN]: ORIGIN,
+        [DB_SYSTEM_NAME]: DB_SYSTEM_NAME_POSTGRES,
+        ...queryAttributes,
+        ..._getConnectionAttributes(connectionContext),
+      };
+      const span = startInactiveSpan({
+        name: getSqlSpanName(attributes, 'postgresjs.query'),
+        onlyIfParent: requireParentSpan !== false,
+        attributes,
+      });
+
+      if (requestHook) {
+        callRequestHook(requestHook, span, sanitizedSqlQuery, connectionContext);
+      }
+
+      return span;
+    },
+    {
+      beforeSpanEnd(span, data) {
+        span.setAttributes(getPostgresJsQueryEndAttributes(data));
+      },
+    },
+  );
+}
+
+/**
+ * Maps a `postgres:query` context to a {@link PostgresConnectionContext}. At `start` only the
+ * database is known; `host`/`port` are filled in once the query is sent.
+ *
+ * @internal Exported for testing only
+ */
+export function getPostgresJsConnectionContext(data: PostgresJsQueryData): PostgresConnectionContext {
+  return {
+    ATTR_DB_NAMESPACE: data.database || undefined,
+    ATTR_SERVER_ADDRESS: data.host || undefined,
+    ATTR_SERVER_PORT: typeof data.port === 'number' ? String(data.port) : undefined,
+  };
+}
+
+/**
+ * Attributes only known once the query settled: the connection it ran on, the server-reported
+ * command and, on failure, the Postgres error code.
+ *
+ * @internal Exported for testing only
+ */
+export function getPostgresJsQueryEndAttributes(data: PostgresJsQueryData): SpanAttributes {
+  const attributes = _getConnectionAttributes(getPostgresJsConnectionContext(data));
+
+  if (data.command) {
+    attributes[DB_OPERATION_NAME] = data.command;
+  }
+
+  if ('error' in data) {
+    const code = isObjectLike(data.error) && 'code' in data.error ? data.error.code : undefined;
+    attributes[DB_RESPONSE_STATUS_CODE] = typeof code === 'string' && code ? code : 'unknown';
+  }
+
+  return attributes;
+}
+
+function callRequestHook(
+  requestHook: NonNullable<PostgresJsSqlInstrumentationOptions['requestHook']>,
+  span: Span,
+  sanitizedSqlQuery: string,
+  connectionContext: PostgresConnectionContext,
+): void {
+  try {
+    requestHook(span, sanitizedSqlQuery, connectionContext);
+  } catch (e) {
+    span.setAttribute('sentry.hook.error', 'requestHook failed');
+    DEBUG_BUILD && debug.error('[instrumentation:postgresjs] error in requestHook:', e);
+  }
+}
diff --git a/packages/server-utils/src/orchestrion/config/postgres.ts b/packages/server-utils/src/orchestrion/config/postgres.ts
index b091bbde53ca..b58899b44b7d 100644
--- a/packages/server-utils/src/orchestrion/config/postgres.ts
+++ b/packages/server-utils/src/orchestrion/config/postgres.ts
@@ -1,8 +1,9 @@
 import type { InstrumentationConfig } from '../apmTypes';
 
 import { getModuleNames } from './module-names';
+import { registrationOnly } from './registration-only';
 
-// postgres.js (`postgres` npm package, v3.x). Named after the npm package;
+// postgres.js (`postgres` npm package). Named after the npm package;
 // `postgres` doesn't collide with `pg.ts` (that file instruments `pg`/`pg-pool`).
 //
 // The ESM build lives under `src/*`, the CJS build under `cjs/src/*` (the
@@ -47,7 +48,13 @@ const postgresJsInstrumentationConfig = (dir: string): InstrumentationConfig[] =
   },
 ];
 
-export const postgresJsConfig = ['src', 'cjs/src'].flatMap(postgresJsInstrumentationConfig);
+// Gated to `< 4`: from 4.0.0 postgres publishes `postgres:query` natively, which
+// `subscribePostgresJsDiagnosticChannels` instruments. The registration-only entry
+// lets bundler-only SDKs detect v4 and register the integration.
+export const postgresJsConfig = [
+  registrationOnly({ name: 'postgres', versionRange: '>=4.0.0', filePath: 'src/query.js' }),
+  ...['src', 'cjs/src'].flatMap(postgresJsInstrumentationConfig),
+];
 
 export const postgresJsModuleNames = getModuleNames(postgresJsConfig);
 
diff --git a/packages/server-utils/test/integrations/postgresjs/postgresjs-dc-subscriber.test.ts b/packages/server-utils/test/integrations/postgresjs/postgresjs-dc-subscriber.test.ts
new file mode 100644
index 000000000000..038435288d9f
--- /dev/null
+++ b/packages/server-utils/test/integrations/postgresjs/postgresjs-dc-subscriber.test.ts
@@ -0,0 +1,325 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { tracingChannel } from 'node:diagnostics_channel';
+import {
+  DB_NAMESPACE,
+  DB_OPERATION_NAME,
+  DB_QUERY_TEXT,
+  DB_RESPONSE_STATUS_CODE,
+  DB_SYSTEM_NAME,
+  ERROR_TYPE,
+  SENTRY_OP,
+  SENTRY_ORIGIN,
+  SENTRY_STATUS_MESSAGE,
+  SERVER_ADDRESS,
+  SERVER_PORT,
+} from '@sentry/conventions/attributes';
+import { DB } from '@sentry/conventions/op';
+import type { Scope, Span } from '@sentry/core';
+import {
+  _INTERNAL_setSpanForScope,
+  addNonEnumerableProperty,
+  Client,
+  createTransport,
+  getActiveSpan,
+  getAsyncContextStrategy,
+  getCurrentScope,
+  getDefaultCurrentScope,
+  getDefaultIsolationScope,
+  getMainCarrier,
+  initAndBind,
+  resolvedSyncPromise,
+  setAsyncContextStrategy,
+  spanToJSON,
+  startSpan,
+} from '@sentry/core';
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
+import {
+  getPostgresJsConnectionContext,
+  getPostgresJsQueryEndAttributes,
+  POSTGRESJS_DC_CHANNEL_QUERY,
+  type PostgresJsQueryData,
+  type PostgresJsTracingChannelFactory,
+  subscribePostgresJsDiagnosticChannels,
+} from '../../../src/integrations/postgresjs/postgresjs-dc-subscriber';
+
+interface TestStore {
+  scope: Scope;
+  isolationScope: Scope;
+}
+
+class TestClient extends Client<any> {
+  public eventFromException(): PromiseLike<any> {
+    return resolvedSyncPromise({});
+  }
+  public eventFromMessage(): PromiseLike<any> {
+    return resolvedSyncPromise({});
+  }
+}
+
+function initTestClient(): void {
+  getCurrentScope().setClient(undefined);
+  initAndBind(TestClient, {
+    dsn: 'https://username@domain/123',
+    integrations: [],
+    sendClientReports: false,
+    stackParser: () => [],
+    traceLifecycle: 'static',
+    tracesSampleRate: 1,
+    transport: () => createTransport({ recordDroppedEvent: () => undefined }, () => resolvedSyncPromise({})),
+  });
+}
+
+function installTestAsyncContextStrategy(): void {
+  const asyncStorage = new AsyncLocalStorage<TestStore>();
+
+  function getScopes(): TestStore {
+    return (
+      asyncStorage.getStore() || {
+        scope: getDefaultCurrentScope(),
+        isolationScope: getDefaultIsolationScope(),
+      }
+    );
+  }
+
+  setAsyncContextStrategy({
+    withScope: callback => {
+      const scope = getScopes().scope.clone();
+      const isolationScope = getScopes().isolationScope;
+      return asyncStorage.run({ scope, isolationScope }, () => callback(scope));
+    },
+    withSetScope: (scope, callback) => {
+      const isolationScope = getScopes().isolationScope;
+      return asyncStorage.run({ scope, isolationScope }, () => callback(scope));
+    },
+    withIsolationScope: callback => {
+      const scope = getScopes().scope;
+      const isolationScope = getScopes().isolationScope.clone();
+      return asyncStorage.run({ scope, isolationScope }, () => callback(isolationScope));
+    },
+    withSetIsolationScope: (isolationScope, callback) => {
+      const scope = getScopes().scope;
+      return asyncStorage.run({ scope, isolationScope }, () => callback(isolationScope));
+    },
+    getCurrentScope: () => getScopes().scope,
+    getIsolationScope: () => getScopes().isolationScope,
+    getTracingChannelBinding: () => ({
+      asyncLocalStorage: asyncStorage,
+      getStoreWithActiveSpan: span => {
+        const scope = getScopes().scope.clone();
+        const isolationScope = getScopes().isolationScope;
+        _INTERNAL_setSpanForScope(scope, span);
+        return { scope, isolationScope };
+      },
+    }),
+  });
+}
+
+/**
+ * Publishes a query the way postgres v4 does (`src/diagnostics.js`): `start` around the dispatch,
+ * then the connection fields are filled in, then `error`/`asyncStart`/`asyncEnd` on completion.
+ */
+function publishQuery(
+  context: PostgresJsQueryData,
+  outcome: { sent?: Partial<PostgresJsQueryData>; result?: unknown; error?: unknown },
+): Span | undefined {
+  const channel = tracingChannel<object, PostgresJsQueryData>(POSTGRESJS_DC_CHANNEL_QUERY);
+  let activeSpan: Span | undefined;
+
+  channel.start.runStores(context, () => {
+    activeSpan = getActiveSpan();
+    channel.end.publish(context);
+  });
+
+  Object.assign(context, outcome.sent);
+
+  if (outcome.error) {
+    context.error = outcome.error;
+    channel.error.publish(context);
+  } else {
+    context.result = outcome.result;
+  }
+  channel.asyncStart.publish(context);
+  channel.asyncEnd.publish(context);
+
+  return activeSpan;
+}
+
+function newContext(query: string | null): PostgresJsQueryData {
+  return {
+    query,
+    database: 'test_db',
+    user: 'test',
+    host: null,
+    port: null,
+    command: null,
+  };
+}
+
+const requestHook = vi.fn();
+
+describe('postgresjs diagnostics-channel subscriber', () => {
+  describe('getPostgresJsConnectionContext', () => {
+    it('only has the database before the query is sent', () => {
+      expect(getPostgresJsConnectionContext(newContext('SELECT 1'))).toEqual({
+        ATTR_DB_NAMESPACE: 'test_db',
+        ATTR_SERVER_ADDRESS: undefined,
+        ATTR_SERVER_PORT: undefined,
+      });
+    });
+
+    it('has the host and port once the query is sent', () => {
+      expect(getPostgresJsConnectionContext({ ...newContext('SELECT 1'), host: 'localhost', port: 5444 })).toEqual({
+        ATTR_DB_NAMESPACE: 'test_db',
+        ATTR_SERVER_ADDRESS: 'localhost',
+        ATTR_SERVER_PORT: '5444',
+      });
+    });
+
+    it('drops an empty database', () => {
+      expect(getPostgresJsConnectionContext({ ...newContext('SELECT 1'), database: '' }).ATTR_DB_NAMESPACE).toBe(
+        undefined,
+      );
+    });
+  });
+
+  describe('getPostgresJsQueryEndAttributes', () => {
+    it('maps the connection and the server-reported command', () => {
+      expect(
+        getPostgresJsQueryEndAttributes({
+          ...newContext('SELECT 1'),
+          host: 'localhost',
+          port: 5444,
+          command: 'SELECT',
+          result: [],
+        }),
+      ).toEqual({
+        [DB_NAMESPACE]: 'test_db',
+        [SERVER_ADDRESS]: 'localhost',
+        [SERVER_PORT]: 5444,
+        [DB_OPERATION_NAME]: 'SELECT',
+      });
+    });
+
+    it('maps the Postgres error code', () => {
+      expect(
+        getPostgresJsQueryEndAttributes({
+          ...newContext('SELECT 1'),
+          error: Object.assign(new Error('relation "User" does not exist'), { code: '42P01' }),
+        }),
+      ).toEqual({ [DB_NAMESPACE]: 'test_db', [DB_RESPONSE_STATUS_CODE]: '42P01' });
+    });
+
+    it('falls back to `unknown` when the error has no code', () => {
+      expect(
+        getPostgresJsQueryEndAttributes({ ...newContext('SELECT 1'), error: new Error('boom') })[
+          DB_RESPONSE_STATUS_CODE
+        ],
+      ).toBe('unknown');
+    });
+  });
+
+  describe('subscribePostgresJsDiagnosticChannels', () => {
+    beforeAll(() => {
+      installTestAsyncContextStrategy();
+      subscribePostgresJsDiagnosticChannels(tracingChannel as PostgresJsTracingChannelFactory, { requestHook });
+    });
+
+    afterAll(() => {
+      setAsyncContextStrategy(undefined);
+    });
+
+    beforeEach(() => {
+      initTestClient();
+    });
+
+    afterEach(() => {
+      const acs = getAsyncContextStrategy(getMainCarrier());
+      getMainCarrier().__SENTRY__ = undefined;
+      setAsyncContextStrategy(acs);
+      vi.clearAllMocks();
+    });
+
+    it('creates a db span parented to the caller and enriched on completion', () => {
+      let parentSpanId: string | undefined;
+      let span: Span | undefined;
+
+      startSpan({ name: 'parent' }, parent => {
+        parentSpanId = parent.spanContext().spanId;
+        span = publishQuery(newContext('SELECT * FROM "User" WHERE "email" = $1 AND "name" = \'tim\''), {
+          sent: { host: 'localhost', port: 5444, command: 'SELECT' },
+          result: [],
+        });
+      });
+
+      expect(spanToJSON(span!)).toEqual(
+        expect.objectContaining({
+          name: 'SELECT * FROM "User" WHERE "email" = $1 AND "name" = ?',
+          parent_span_id: parentSpanId,
+          status: 'ok',
+          attributes: expect.objectContaining({
+            [SENTRY_ORIGIN]: 'auto.db.postgresjs',
+            [SENTRY_OP]: DB,
+            [DB_SYSTEM_NAME]: 'postgres',
+            [DB_QUERY_TEXT]: 'SELECT * FROM "User" WHERE "email" = $1 AND "name" = ?',
+            [DB_OPERATION_NAME]: 'SELECT',
+            [DB_NAMESPACE]: 'test_db',
+            [SERVER_ADDRESS]: 'localhost',
+            [SERVER_PORT]: 5444,
+          }),
+          end_timestamp: expect.any(Number),
+        }),
+      );
+    });
+
+    it('marks a failed query as errored', () => {
+      let span: Span | undefined;
+
+      startSpan({ name: 'parent' }, () => {
+        span = publishQuery(newContext('SELECT * FROM "User"'), {
+          sent: { host: 'localhost', port: 5444 },
+          error: Object.assign(new Error('relation "User" does not exist'), { name: 'PostgresError', code: '42P01' }),
+        });
+      });
+
+      expect(spanToJSON(span!)).toEqual(
+        expect.objectContaining({
+          status: 'error',
+          attributes: expect.objectContaining({
+            [SENTRY_STATUS_MESSAGE]: 'relation "User" does not exist',
+            [DB_RESPONSE_STATUS_CODE]: '42P01',
+            [ERROR_TYPE]: 'PostgresError',
+          }),
+          end_timestamp: expect.any(Number),
+        }),
+      );
+    });
+
+    it('calls requestHook with the context known at start', () => {
+      startSpan({ name: 'parent' }, () => {
+        publishQuery(newContext('DROP TABLE "User"'), { sent: { host: 'localhost', port: 5444 }, result: [] });
+      });
+
+      expect(requestHook).toHaveBeenCalledWith(expect.anything(), 'DROP TABLE "User"', {
+        ATTR_DB_NAMESPACE: 'test_db',
+        ATTR_SERVER_ADDRESS: undefined,
+        ATTR_SERVER_PORT: undefined,
+      });
+    });
+
+    it('does not create a span without a parent', () => {
+      const span = publishQuery(newContext('SELECT 1'), { result: [] });
+
+      expect(span?.isRecording()).toBe(false);
+    });
+
+    it('skips queries already spanned by instrumentPostgresJsSql', () => {
+      startSpan({ name: 'wrapper' }, wrapperSpan => {
+        addNonEnumerableProperty(wrapperSpan, Symbol.for('sentry.postgresjs.wrapper.span'), true);
+        const span = publishQuery(newContext('SELECT 1'), { result: [] });
+
+        expect(span).toBe(wrapperSpan);
+        expect(requestHook).not.toHaveBeenCalled();
+      });
+    });
+  });
+});

From 1bd51368533451b4ca62a959ada0d0d9deda9563 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 18:33:43 +0100
Subject: [PATCH 165/169] fix(nextjs): Don't abort Cache Components renders on
 Cloudflare Workers when requests overlap (#25315)

### What

Fixes a bug where `@sentry/nextjs` on Cloudflare Workers broke Next.js
Cache Components pages when two requests ran at the same time. One of
the requests came back as an empty page.

Next.js has a check that fails a render when random values (like trace
or span IDs) are generated during it. To avoid that, the SDK generates
its IDs outside the render. On Cloudflare Workers that mechanism broke
in two ways, both fixed here:

- The SDK stepped out of the render using a snapshot that Cloudflare
ties to a single request. When a second request reused it, the snapshot
was rebuilt inside that request's render and triggered the check. The
SDK now exits the Next.js render store directly, which Next.js 16.4 and
newer expose on `globalThis`. On older Next.js versions the Cloudflare
case stays as before.
- `@sentry/core` only looks for the SDK hook once. On Cloudflare the
Worker's copy of core generated its first ID before Next.js loaded and
missed the hook forever. The Cloudflare entry of `@sentry/nextjs` now
sets the hook up when the Worker starts.

Also adds an optional Cloudflare e2e variant for the Cache Components
app with a test that fires overlapping requests.

### Why

Users running Cache Components on Cloudflare Workers saw random pages
fail under normal traffic, see #25245.

The new e2e variant is optional because released OpenNext does not run
Cache Components renders on Cloudflare yet
(opennextjs/opennextjs-cloudflare#1318). The fix was verified locally
against their preview build of that PR.

Fixes #25245

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .../nextjs-16-cacheComponents/.gitignore      |   3 +
 .../app/prefetch-overlap/[id]/page.tsx        |  14 ++
 .../open-next.config.ts                       |   3 +
 .../nextjs-16-cacheComponents/package.json    |  16 +-
 .../playwright.config.mjs                     |   9 +-
 .../pnpm-workspace.yaml                       |   2 +
 .../tests/prefetchOverlap.spec.ts             |  21 +++
 .../nextjs-16-cacheComponents/worker.ts       |  19 +++
 .../nextjs-16-cacheComponents/wrangler.jsonc  |  21 +++
 packages/nextjs/src/cloudflare/index.ts       |   5 +
 .../server/prepareSafeIdGeneratorContext.ts   |  54 ++++++-
 .../prepareSafeIdGeneratorContext.test.ts     |  12 ++
 .../prepareSafeIdGeneratorContext.test.ts     | 147 ++++++++++++++++++
 13 files changed, 319 insertions(+), 7 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/prefetch-overlap/[id]/page.tsx
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/open-next.config.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/prefetchOverlap.spec.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/worker.ts
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/wrangler.jsonc
 create mode 100644 packages/nextjs/test/cloudflare/prepareSafeIdGeneratorContext.test.ts
 create mode 100644 packages/nextjs/test/server/prepareSafeIdGeneratorContext.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/.gitignore b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/.gitignore
index dd146b53d966..e0fc7baa1ebc 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/.gitignore
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/.gitignore
@@ -42,3 +42,6 @@ next-env.d.ts
 
 # Sentry Config File
 .env.sentry-build-plugin
+
+# OpenNext build output
+/.open-next/
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/prefetch-overlap/[id]/page.tsx b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/prefetch-overlap/[id]/page.tsx
new file mode 100644
index 000000000000..0e176752416b
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/app/prefetch-overlap/[id]/page.tsx
@@ -0,0 +1,14 @@
+import { Suspense } from 'react';
+
+export default function Page({ params }: { params: Promise<{ id: string }> }) {
+  return (
+    <Suspense fallback={<p>Loading...</p>}>
+      <Result params={params} />
+    </Suspense>
+  );
+}
+
+async function Result({ params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params;
+  return <p id="result">{`prefetched ${id}`}</p>;
+}
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/open-next.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/open-next.config.ts
new file mode 100644
index 000000000000..fa6cb73ebf69
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/open-next.config.ts
@@ -0,0 +1,3 @@
+import { defineCloudflareConfig } from '@opennextjs/cloudflare';
+
+export default defineCloudflareConfig({});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
index e9e2ba77131e..6174845c517d 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/package.json
@@ -20,9 +20,12 @@
     "test:build-latest-webpack": "pnpm install && pnpm add next@latest && pnpm build-webpack",
     "test:build-canary-webpack": "pnpm install && pnpm add next@canary && pnpm build-webpack",
     "test:assert": "pnpm test:prod && pnpm test:dev",
-    "test:assert-webpack": "TEST_BUNDLER=webpack pnpm test:prod && pnpm test:dev-webpack"
+    "test:assert-webpack": "TEST_BUNDLER=webpack pnpm test:prod && pnpm test:dev-webpack",
+    "test:build:cloudflare": "pnpm install && opennextjs-cloudflare build",
+    "start:cloudflare": "opennextjs-cloudflare preview --var \"E2E_TEST_DSN:$E2E_TEST_DSN\""
   },
   "dependencies": {
+    "@opennextjs/cloudflare": "^1.20.12",
     "@sentry/nextjs": "file:../../packed/sentry-nextjs-packed.tgz",
     "@sentry/core": "file:../../packed/sentry-core-packed.tgz",
     "import-in-the-middle": "^1",
@@ -41,7 +44,8 @@
     "@types/react-dom": "^19",
     "eslint": "^9",
     "eslint-config-next": "^16",
-    "typescript": "^5"
+    "typescript": "^5",
+    "wrangler": "^4.148.0"
   },
   "sentryTest": {
     "variants": [
@@ -50,6 +54,14 @@
         "label": "nextjs-16-cacheComponents (webpack)",
         "assert-command": "pnpm test:assert-webpack"
       }
+    ],
+    "optionalVariants": [
+      {
+        "runtime": "cloudflare",
+        "build-command": "pnpm test:build:cloudflare",
+        "assert-command": "pnpm test:prod",
+        "label": "nextjs-16-cacheComponents (cloudflare)"
+      }
     ]
   }
 }
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/playwright.config.mjs b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/playwright.config.mjs
index 797418b8cf7d..43c2eb7e575e 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/playwright.config.mjs
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/playwright.config.mjs
@@ -1,10 +1,15 @@
-import { getPlaywrightConfig } from '@sentry-internal/test-utils';
+import { getPlaywrightConfig, getRuntime } from '@sentry-internal/test-utils';
 const testEnv = process.env.TEST_ENV;
 
 if (!testEnv) {
   throw new Error('No test env defined');
 }
 
+const productionStartCommands = {
+  node: 'pnpm next start -p 3030',
+  cloudflare: 'pnpm start:cloudflare --port 3030',
+};
+
 const getStartCommand = () => {
   if (testEnv === 'development-webpack') {
     return 'pnpm next dev -p 3030 --webpack 2>&1 | tee .tmp_dev_server_logs';
@@ -15,7 +20,7 @@ const getStartCommand = () => {
   }
 
   if (testEnv === 'production') {
-    return 'pnpm next start -p 3030';
+    return productionStartCommands[getRuntime()];
   }
 
   throw new Error(`Unknown test env: ${testEnv}`);
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/pnpm-workspace.yaml b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/pnpm-workspace.yaml
index bde9dfb7b138..0aaed65978c9 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/pnpm-workspace.yaml
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/pnpm-workspace.yaml
@@ -1,3 +1,5 @@
 allowBuilds:
+  esbuild: true
   unrs-resolver: true
+  workerd: true
 minimumReleaseAge: 0
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/prefetchOverlap.spec.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/prefetchOverlap.spec.ts
new file mode 100644
index 000000000000..e5666a4f909e
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/tests/prefetchOverlap.spec.ts
@@ -0,0 +1,21 @@
+import { expect, test } from '@playwright/test';
+
+const REQUEST_COUNT = 12;
+
+// Next.js aborts a Cache Components prerender when randomness is generated while it runs. On Cloudflare Workers the
+// SDK used to generate it inside the prerender of another request once prefetches overlapped, which turned their
+// responses into the one byte partial marker `~` (https://github.com/getsentry/sentry-javascript/issues/25245).
+test('overlapping runtime prefetch requests render their pages', async ({ request }) => {
+  // `Next-Router-Prefetch: 2` is what the Next.js router sends for a runtime prefetch, which Next.js answers with a
+  // prerender at request time.
+  const responses = await Promise.all(
+    Array.from({ length: REQUEST_COUNT }, (_, index) =>
+      request.get(`/prefetch-overlap/overlap-${index + 1}`, { headers: { RSC: '1', 'Next-Router-Prefetch': '2' } }),
+    ),
+  );
+
+  for (const [index, response] of responses.entries()) {
+    expect(response.ok()).toBe(true);
+    expect(await response.text()).toContain(`prefetched overlap-${index + 1}`);
+  }
+});
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/worker.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/worker.ts
new file mode 100644
index 000000000000..44cb2e195eea
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/worker.ts
@@ -0,0 +1,19 @@
+import * as Sentry from '@sentry/nextjs/cloudflare';
+// @ts-ignore the file exists only after `opennextjs-cloudflare build`
+import handler from './.open-next/worker.js';
+
+// @ts-ignore the file exists only after `opennextjs-cloudflare build`
+export { DOQueueHandler, DOShardedTagCache, BucketCachePurge } from './.open-next/worker.js';
+
+export default Sentry.withSentry(
+  (env: { E2E_TEST_DSN: string }) => ({
+    // The specs of this app assert transaction envelopes, like `sentry.server.config.ts`. On Workers the request
+    // transaction belongs to this client, so with span streaming here they would never see one.
+    traceLifecycle: 'static',
+    environment: 'qa', // dynamic sampling bias to keep transactions
+    dsn: env.E2E_TEST_DSN,
+    tunnel: `http://localhost:3031/`, // proxy server
+    tracesSampleRate: 1.0,
+  }),
+  handler,
+);
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/wrangler.jsonc b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/wrangler.jsonc
new file mode 100644
index 000000000000..ec500c50130d
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents/wrangler.jsonc
@@ -0,0 +1,21 @@
+{
+  "$schema": "node_modules/wrangler/config-schema.json",
+  "name": "nextjs-16-cachecomponents",
+  "main": "./worker.ts",
+  // From 2025-06-16 on, workerd binds an `AsyncLocalStorage` snapshot to the request that took it, which
+  // tests/prefetchOverlap.spec.ts relies on.
+  "compatibility_date": "2026-02-19",
+  "compatibility_flags": ["nodejs_compat", "global_fetch_strictly_public"],
+  "assets": {
+    "binding": "ASSETS",
+    "directory": ".open-next/assets",
+  },
+  "services": [
+    {
+      // Self-reference service binding, the service name must match the worker name
+      // see https://opennext.js.org/cloudflare/caching
+      "binding": "WORKER_SELF_REFERENCE",
+      "service": "nextjs-16-cachecomponents",
+    },
+  ],
+}
diff --git a/packages/nextjs/src/cloudflare/index.ts b/packages/nextjs/src/cloudflare/index.ts
index 9c43cff4b5a3..5c8b65007cd4 100644
--- a/packages/nextjs/src/cloudflare/index.ts
+++ b/packages/nextjs/src/cloudflare/index.ts
@@ -11,12 +11,17 @@ import { isTunnelRouteSpan } from '../common/utils/dropMiddlewareTunnelRequests'
 import { dropReactControlFlowErrorsEventProcessor } from '../common/utils/dropReactControlFlowErrors';
 import { markAsyncContextOwnedByNextjsCloudflare } from '../common/utils/responseEnd';
 import { NextSentryPropagator } from '../server/nextSentryPropagator';
+import { prepareSafeIdGeneratorContext } from '../server/prepareSafeIdGeneratorContext';
 import { getGlobalTracerProvider, markPrerendersOnTracerProvider } from '../server/prerenderContext';
 import { addNextjsServerSpanHooks, NEXTJS_SERVER_IGNORE_SPANS } from '../server/serverSpanHooks';
 import { nextjsUseCacheIntegration } from '../server/useCacheInstrumentation';
 
 export * from '@sentry/cloudflare';
 
+// At isolate startup, so the copy of `@sentry/core` in the Worker bundle finds the runner on its first ID. A snapshot
+// taken here is not bound to a request, unlike one taken while OpenNext loads Next.js inside the first request.
+prepareSafeIdGeneratorContext();
+
 class NextjsCloudflarePropagator extends NextSentryPropagator {
   /** @inheritDoc */
   public extract(ctx: Context, carrier: unknown, getter: TextMapGetter): Context {
diff --git a/packages/nextjs/src/server/prepareSafeIdGeneratorContext.ts b/packages/nextjs/src/server/prepareSafeIdGeneratorContext.ts
index 7bef06fe211b..08346e4de857 100644
--- a/packages/nextjs/src/server/prepareSafeIdGeneratorContext.ts
+++ b/packages/nextjs/src/server/prepareSafeIdGeneratorContext.ts
@@ -5,6 +5,14 @@ import { DEBUG_BUILD } from '../common/debug-build';
 // Avoids conflict with resolving it from getBuiltinModule
 type OriginalAsyncLocalStorage = typeof AsyncLocalStorage;
 
+interface WorkUnitAsyncStorage {
+  exit<T>(callback: () => T): T;
+}
+
+// Next.js >= 16.4 anchors its async storages to `globalThis` under `Symbol.for('@next/<name>@<version>')`
+// (`next/src/server/app-render/async-local-storage.ts`).
+const NEXT_WORK_UNIT_ASYNC_STORAGE_KEY_PREFIX = '@next/work-unit-async-storage@';
+
 /**
  * Prepares the global object to generate safe random IDs in cache components contexts
  * See: https://github.com/getsentry/sentry-javascript/blob/ceb003c15973c2d8f437dfb7025eedffbc8bc8b0/packages/core/src/utils/propagationContext.ts#L1
@@ -13,9 +21,11 @@ export function prepareSafeIdGeneratorContext(): void {
   const sym = Symbol.for('__SENTRY_SAFE_RANDOM_ID_WRAPPER__');
   const globalWithSymbol: typeof GLOBAL_OBJ & { [sym]?: RandomSafeContextRunner } = GLOBAL_OBJ;
 
-  // Get initial snapshot - if unavailable, don't set up the wrapper at all
+  let workUnitAsyncStorage = getNextWorkUnitAsyncStorage();
+
+  // Without a snapshot or the Next.js storage there is nothing to run the callback in, so don't set up the wrapper
   const initialSnapshot = getAsyncLocalStorageSnapshot();
-  if (!initialSnapshot) {
+  if (!initialSnapshot && !workUnitAsyncStorage) {
     return;
   }
 
@@ -23,9 +33,19 @@ export function prepareSafeIdGeneratorContext(): void {
   // environments (e.g., Cloudflare Workers), the snapshot is bound to the request
   // context it was created in. Once that request ends, the snapshot becomes invalid.
   // The wrapper catches this and creates a fresh snapshot for the current request context.
-  let cachedSnapshot: RandomSafeContextRunner = initialSnapshot;
+  let cachedSnapshot = initialSnapshot;
 
   globalWithSymbol[sym] = <T>(callback: () => T): T => {
+    // Next.js only flags sync IO while its work unit store is active, so exiting that store is enough and works in
+    // any request. A snapshot is only safe when taken outside of a render and, on Cloudflare Workers, only in the
+    // request that took it (`bind_asynclocalstorage_snapshot_to_request`).
+    if (workUnitAsyncStorage) {
+      return workUnitAsyncStorage.exit(callback);
+    }
+    if (!cachedSnapshot) {
+      return callback();
+    }
+
     try {
       return cachedSnapshot(callback);
     } catch (error) {
@@ -34,6 +54,11 @@ export function prepareSafeIdGeneratorContext(): void {
         throw error;
       }
 
+      workUnitAsyncStorage = getNextWorkUnitAsyncStorage();
+      if (workUnitAsyncStorage) {
+        return workUnitAsyncStorage.exit(callback);
+      }
+
       // Snapshot likely stale, try to get a fresh one and retry
       const freshSnapshot = getAsyncLocalStorageSnapshot();
       // No snapshot available, fall back to direct execution
@@ -61,6 +86,29 @@ export function prepareSafeIdGeneratorContext(): void {
   DEBUG_BUILD && debug.log('[@sentry/nextjs] Prepared safe random ID generator context');
 }
 
+function getNextWorkUnitAsyncStorage(): WorkUnitAsyncStorage | undefined {
+  const globalWithStorages = GLOBAL_OBJ as typeof GLOBAL_OBJ & Record<symbol, unknown>;
+
+  for (const key of Object.getOwnPropertySymbols(globalWithStorages)) {
+    if (!key.description?.startsWith(NEXT_WORK_UNIT_ASYNC_STORAGE_KEY_PREFIX)) {
+      continue;
+    }
+    const storage = globalWithStorages[key] as WorkUnitAsyncStorage | undefined;
+    if (typeof storage?.exit !== 'function') {
+      continue;
+    }
+    try {
+      // Where no AsyncLocalStorage exists, Next.js registers a `FakeAsyncLocalStorage` whose `exit` always throws
+      storage.exit(() => undefined);
+      return storage;
+    } catch {
+      // not usable
+    }
+  }
+
+  return undefined;
+}
+
 function getAsyncLocalStorage(): OriginalAsyncLocalStorage | undefined {
   // May exist in the Next.js runtime globals
   // Doesn't exist in some of our tests
diff --git a/packages/nextjs/test/cloudflare/prepareSafeIdGeneratorContext.test.ts b/packages/nextjs/test/cloudflare/prepareSafeIdGeneratorContext.test.ts
new file mode 100644
index 000000000000..9838296d6df6
--- /dev/null
+++ b/packages/nextjs/test/cloudflare/prepareSafeIdGeneratorContext.test.ts
@@ -0,0 +1,12 @@
+import { describe, expect, it } from 'vitest';
+import '../../src/cloudflare';
+
+const RUNNER_KEY = Symbol.for('__SENTRY_SAFE_RANDOM_ID_WRAPPER__');
+
+describe('@sentry/nextjs/cloudflare', () => {
+  it('registers the safe random ID runner when the module loads', () => {
+    const runner = (globalThis as Record<symbol, unknown>)[RUNNER_KEY] as (<T>(callback: () => T) => T) | undefined;
+    expect(runner).toBeTypeOf('function');
+    expect(runner!(() => 'ok')).toBe('ok');
+  });
+});
diff --git a/packages/nextjs/test/server/prepareSafeIdGeneratorContext.test.ts b/packages/nextjs/test/server/prepareSafeIdGeneratorContext.test.ts
new file mode 100644
index 000000000000..9fce481d75e8
--- /dev/null
+++ b/packages/nextjs/test/server/prepareSafeIdGeneratorContext.test.ts
@@ -0,0 +1,147 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { prepareSafeIdGeneratorContext } from '../../src/server/prepareSafeIdGeneratorContext';
+
+const RUNNER_KEY = Symbol.for('__SENTRY_SAFE_RANDOM_ID_WRAPPER__');
+const NEXT_WORK_UNIT_STORAGE_KEY = Symbol.for('@next/work-unit-async-storage@16.4.0');
+
+type Runner = <T>(callback: () => T) => T;
+
+function getRunner(): Runner {
+  const runner = (globalThis as Record<symbol, unknown>)[RUNNER_KEY];
+  if (typeof runner !== 'function') {
+    throw new Error('runner not registered');
+  }
+  return runner as Runner;
+}
+
+function registerNextWorkUnitStorage(storage: AsyncLocalStorage<unknown>): void {
+  (globalThis as Record<symbol, unknown>)[NEXT_WORK_UNIT_STORAGE_KEY] = storage;
+}
+
+/**
+ * Mimics workerd with `bind_asynclocalstorage_snapshot_to_request`: a snapshot taken during one request throws when
+ * it is called during another one.
+ */
+function bindSnapshotsToRequest(): { enterRequest: (id: number) => void } {
+  const originalSnapshot = AsyncLocalStorage.snapshot.bind(AsyncLocalStorage);
+  let currentRequest = 0;
+
+  vi.spyOn(AsyncLocalStorage, 'snapshot').mockImplementation(() => {
+    const boundRequest = currentRequest;
+    const snapshot = originalSnapshot();
+    return ((callback: () => unknown) => {
+      if (currentRequest !== boundRequest) {
+        throw new Error(
+          'Cannot call this AsyncLocalStorage bound function outside of the request in which it was created.',
+        );
+      }
+      return snapshot(callback);
+    }) as ReturnType<typeof AsyncLocalStorage.snapshot>;
+  });
+
+  return {
+    enterRequest: id => {
+      currentRequest = id;
+    },
+  };
+}
+
+describe('prepareSafeIdGeneratorContext', () => {
+  let workUnitStorage: AsyncLocalStorage<{ type: string }>;
+  const prerenderStore = { type: 'prerender' };
+
+  beforeEach(() => {
+    workUnitStorage = new AsyncLocalStorage();
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+    Reflect.deleteProperty(globalThis, RUNNER_KEY);
+    Reflect.deleteProperty(globalThis, NEXT_WORK_UNIT_STORAGE_KEY);
+  });
+
+  it('runs the callback outside of the Next.js work unit store using a snapshot', () => {
+    prepareSafeIdGeneratorContext();
+
+    const storeSeen = workUnitStorage.run(prerenderStore, () => getRunner()(() => workUnitStorage.getStore()));
+
+    expect(storeSeen).toBeUndefined();
+  });
+
+  it('exits the work unit storage that Next.js registers on globalThis', () => {
+    registerNextWorkUnitStorage(workUnitStorage);
+    prepareSafeIdGeneratorContext();
+
+    const storeSeen = workUnitStorage.run(prerenderStore, () => getRunner()(() => workUnitStorage.getStore()));
+
+    expect(storeSeen).toBeUndefined();
+  });
+
+  it('keeps unrelated stores intact when exiting the work unit storage', () => {
+    registerNextWorkUnitStorage(workUnitStorage);
+    prepareSafeIdGeneratorContext();
+    const otherStorage = new AsyncLocalStorage<string>();
+
+    const storeSeen = otherStorage.run('request-data', () =>
+      workUnitStorage.run(prerenderStore, () => getRunner()(() => otherStorage.getStore())),
+    );
+
+    expect(storeSeen).toBe('request-data');
+  });
+
+  it('does not run the callback inside a prerender of another request when snapshots are request-bound', () => {
+    const { enterRequest } = bindSnapshotsToRequest();
+    registerNextWorkUnitStorage(workUnitStorage);
+
+    enterRequest(1);
+    prepareSafeIdGeneratorContext();
+    const runner = getRunner();
+
+    enterRequest(2);
+    const storeSeen = workUnitStorage.run(prerenderStore, () => runner(() => workUnitStorage.getStore()));
+
+    expect(storeSeen).toBeUndefined();
+  });
+
+  it('finds the work unit storage that Next.js registers after the runner was prepared', () => {
+    const { enterRequest } = bindSnapshotsToRequest();
+
+    enterRequest(1);
+    prepareSafeIdGeneratorContext();
+    const runner = getRunner();
+    registerNextWorkUnitStorage(workUnitStorage);
+
+    enterRequest(2);
+    const storeSeen = workUnitStorage.run(prerenderStore, () => runner(() => workUnitStorage.getStore()));
+
+    expect(storeSeen).toBeUndefined();
+  });
+
+  it('ignores a registered storage whose exit throws, like the Next.js FakeAsyncLocalStorage', () => {
+    const fakeStorage = {
+      getStore: () => undefined,
+      exit: () => {
+        throw new Error('Invariant: AsyncLocalStorage accessed in runtime where it is not available');
+      },
+    };
+    (globalThis as Record<symbol, unknown>)[NEXT_WORK_UNIT_STORAGE_KEY] = fakeStorage;
+    prepareSafeIdGeneratorContext();
+
+    const storeSeen = workUnitStorage.run(prerenderStore, () => getRunner()(() => workUnitStorage.getStore()));
+
+    expect(storeSeen).toBeUndefined();
+  });
+
+  it('falls back to a fresh snapshot when Next.js does not register its storage', () => {
+    const { enterRequest } = bindSnapshotsToRequest();
+
+    enterRequest(1);
+    prepareSafeIdGeneratorContext();
+    const runner = getRunner();
+
+    enterRequest(2);
+    expect(runner(() => 'value')).toBe('value');
+    expect(AsyncLocalStorage.snapshot).toHaveBeenCalledTimes(2);
+  });
+});

From b31070429c289bbbc8cdb99b6151440dabf975f4 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 18:34:01 +0100
Subject: [PATCH 166/169] chore(deps): Bump undici from 6.24.1 to 6.29.1
 (#26108)

**Why:** Fixes the open undici 6.x advisories. All parents
(`@actions/*`, `@remix-run/node`) already allow `^6.21`, so this only
changes the lockfile. Dependabot alert:
https://github.com/getsentry/sentry-javascript/security/dependabot/3393

**Unsure about:** `undici@5.29.0` (from `@actions/core@1.10.1` and
`@actions/github@5` in our internal GH actions) and `undici@7.24.8`
(pinned by `miniflare@4`, the optional peer of the nitro 3 betas) are
left for a follow-up, since neither has a lockfile-only fix.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 pnpm-lock.yaml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b0bfb39a23d0..df68e87aa0e9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -18323,8 +18323,8 @@ packages:
     resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==}
     engines: {node: '>=14.0'}
 
-  undici@6.24.1:
-    resolution: {integrity: sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA==}
+  undici@6.29.1:
+    resolution: {integrity: sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==}
     engines: {node: '>=18.17'}
 
   undici@7.24.8:
@@ -19650,7 +19650,7 @@ snapshots:
       '@octokit/plugin-rest-endpoint-methods': 17.0.0(@octokit/core@7.0.6)
       '@octokit/request': 10.0.7
       '@octokit/request-error': 7.1.0
-      undici: 6.24.1
+      undici: 6.29.1
 
   '@actions/http-client@2.2.3':
     dependencies:
@@ -19660,12 +19660,12 @@ snapshots:
   '@actions/http-client@3.0.2':
     dependencies:
       tunnel: 0.0.6
-      undici: 6.24.1
+      undici: 6.29.1
 
   '@actions/http-client@4.0.0':
     dependencies:
       tunnel: 0.0.6
-      undici: 6.24.1
+      undici: 6.29.1
 
   '@actions/io@1.1.3': {}
 
@@ -26731,7 +26731,7 @@ snapshots:
       cookie-signature: 1.2.2
       source-map-support: 0.5.21
       stream-slice: 0.1.2
-      undici: 6.24.1
+      undici: 6.29.1
     optionalDependencies:
       typescript: 5.8.3
 
@@ -40248,7 +40248,7 @@ snapshots:
     dependencies:
       '@fastify/busboy': 2.0.0
 
-  undici@6.24.1: {}
+  undici@6.29.1: {}
 
   undici@7.24.8: {}
 

From 88a5e3b6cc5d2575abc7c00e03707de6393bd805 Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Wed, 4 Nov 2026 20:40:05 +0100
Subject: [PATCH 167/169] chore(deps): Bump @actions/core and @actions/github
 in internal GH actions (#26109)

**Why:** `@actions/core@1.10.1` and `@actions/github@5` pull in
`undici@5.29.0`, which has open advisories and no patched 5.x. Moving
our internal GH actions to the current majors drops it. The actions are
already ESM, and the APIs they use (`core.*`, `context`, `getOctokit`,
`octokit.rest.*`) are unchanged. Dependabot alert:
https://github.com/getsentry/sentry-javascript/security/dependabot/3393

**How to review:** size-limit and optional-e2e run on this PR's own CI.
clear-cache and external-contributor only run on their own triggers, so
they're covered by an API check and lint only.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../clear-cache-gh-action/package.json        |   4 +-
 .../package.json                              |   2 +-
 .../optional-e2e-gh-action/package.json       |   4 +-
 .../size-limit-gh-action/package.json         |   4 +-
 pnpm-lock.yaml                                | 205 ++----------------
 5 files changed, 29 insertions(+), 190 deletions(-)

diff --git a/dev-packages/clear-cache-gh-action/package.json b/dev-packages/clear-cache-gh-action/package.json
index e57c7360bda4..c5fd1253c0c0 100644
--- a/dev-packages/clear-cache-gh-action/package.json
+++ b/dev-packages/clear-cache-gh-action/package.json
@@ -14,7 +14,7 @@
     "lint:fix": "oxlint . --fix --type-aware"
   },
   "devDependencies": {
-    "@actions/core": "1.10.1",
-    "@actions/github": "^5.0.0"
+    "@actions/core": "3.0.1",
+    "@actions/github": "^9.1.1"
   }
 }
diff --git a/dev-packages/external-contributor-gh-action/package.json b/dev-packages/external-contributor-gh-action/package.json
index 47c2639db3c2..b6ea59defd34 100644
--- a/dev-packages/external-contributor-gh-action/package.json
+++ b/dev-packages/external-contributor-gh-action/package.json
@@ -14,6 +14,6 @@
     "lint:fix": "oxlint . --fix --type-aware"
   },
   "devDependencies": {
-    "@actions/core": "1.10.1"
+    "@actions/core": "3.0.1"
   }
 }
diff --git a/dev-packages/optional-e2e-gh-action/package.json b/dev-packages/optional-e2e-gh-action/package.json
index 43fb84c71133..980cb58dbc2a 100644
--- a/dev-packages/optional-e2e-gh-action/package.json
+++ b/dev-packages/optional-e2e-gh-action/package.json
@@ -14,8 +14,8 @@
     "lint:fix": "oxlint . --fix --type-aware"
   },
   "devDependencies": {
-    "@actions/core": "1.10.1",
-    "@actions/github": "^5.0.0",
+    "@actions/core": "3.0.1",
+    "@actions/github": "^9.1.1",
     "markdown-table": "3.0.4"
   }
 }
diff --git a/dev-packages/size-limit-gh-action/package.json b/dev-packages/size-limit-gh-action/package.json
index 5ca7a02c805c..653fa8ffe05a 100644
--- a/dev-packages/size-limit-gh-action/package.json
+++ b/dev-packages/size-limit-gh-action/package.json
@@ -15,9 +15,9 @@
   },
   "devDependencies": {
     "@actions/artifact": "^6.2.1",
-    "@actions/core": "1.10.1",
+    "@actions/core": "3.0.1",
     "@actions/exec": "1.1.1",
-    "@actions/github": "^5.0.0",
+    "@actions/github": "^9.1.1",
     "bytes-iec": "3.1.1",
     "markdown-table": "3.0.4"
   }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index df68e87aa0e9..753171def2ad 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -469,11 +469,11 @@ importers:
   dev-packages/clear-cache-gh-action:
     devDependencies:
       '@actions/core':
-        specifier: 1.10.1
-        version: 1.10.1
+        specifier: 3.0.1
+        version: 3.0.1
       '@actions/github':
-        specifier: ^5.0.0
-        version: 5.1.1(encoding@0.1.13)
+        specifier: ^9.1.1
+        version: 9.1.1
 
   dev-packages/cloudflare-integration-tests:
     devDependencies:
@@ -586,8 +586,8 @@ importers:
   dev-packages/external-contributor-gh-action:
     devDependencies:
       '@actions/core':
-        specifier: 1.10.1
-        version: 1.10.1
+        specifier: 3.0.1
+        version: 3.0.1
 
   dev-packages/node-integration-tests:
     devDependencies:
@@ -895,11 +895,11 @@ importers:
   dev-packages/optional-e2e-gh-action:
     devDependencies:
       '@actions/core':
-        specifier: 1.10.1
-        version: 1.10.1
+        specifier: 3.0.1
+        version: 3.0.1
       '@actions/github':
-        specifier: ^5.0.0
-        version: 5.1.1(encoding@0.1.13)
+        specifier: ^9.1.1
+        version: 9.1.1
       markdown-table:
         specifier: 3.0.4
         version: 3.0.4
@@ -912,14 +912,14 @@ importers:
         specifier: ^6.2.1
         version: 6.2.1(supports-color@10.0.0)
       '@actions/core':
-        specifier: 1.10.1
-        version: 1.10.1
+        specifier: 3.0.1
+        version: 3.0.1
       '@actions/exec':
         specifier: 1.1.1
         version: 1.1.1
       '@actions/github':
-        specifier: ^5.0.0
-        version: 5.1.1(encoding@0.1.13)
+        specifier: ^9.1.1
+        version: 9.1.1
       bytes-iec:
         specifier: 3.1.1
         version: 3.1.1
@@ -2541,11 +2541,8 @@ packages:
   '@actions/artifact@6.2.1':
     resolution: {integrity: sha512-sJGH0mhEbEjBCw7o6SaLhUU66u27aFW8HTfkIb5Tk2/Wy0caUDc+oYQEgnuFN7a0HCpAbQyK0U6U7XUJDgDWrw==}
 
-  '@actions/core@1.10.1':
-    resolution: {integrity: sha512-3lBR9EDAY+iYIpTnTIXmWcNbX3T2kCkAEQGIQx4NVQ0575nk2k3GRZDTPQG+vVtS2izSLmINlxXf0uLtnrTP+g==}
-
-  '@actions/core@3.0.0':
-    resolution: {integrity: sha512-zYt6cz+ivnTmiT/ksRVriMBOiuoUpDCJJlZ5KPl2/FRdvwU3f7MPh9qftvbkXJThragzUZieit2nyHUyw53Seg==}
+  '@actions/core@3.0.1':
+    resolution: {integrity: sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA==}
 
   '@actions/exec@1.1.1':
     resolution: {integrity: sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==}
@@ -2553,14 +2550,8 @@ packages:
   '@actions/exec@3.0.0':
     resolution: {integrity: sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==}
 
-  '@actions/github@5.1.1':
-    resolution: {integrity: sha512-Nk59rMDoJaV+mHCOJPXuvB1zIbomlKS0dmSIqPGxd0enAXBnOfn4VWF+CGtRCwXZG9Epa54tZA7VIRlJDS8A6g==}
-
-  '@actions/github@9.0.0':
-    resolution: {integrity: sha512-yJ0RoswsAaKcvkmpCE4XxBRiy/whH2SdTBHWzs0gi4wkqTDhXMChjSdqBz/F4AeiDlP28rQqL33iHb+kjAMX6w==}
-
-  '@actions/http-client@2.2.3':
-    resolution: {integrity: sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==}
+  '@actions/github@9.1.1':
+    resolution: {integrity: sha512-tL5JbYOBZHc0ngEnCsaDcryUizIUIlQyIMwy1Wkx93H5HzbBJ7TbiPx2PnFjBwZW0Vh05JmfFZhecE6gglYegA==}
 
   '@actions/http-client@3.0.2':
     resolution: {integrity: sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==}
@@ -5197,10 +5188,6 @@ packages:
   '@fastify/ajv-compiler@4.0.5':
     resolution: {integrity: sha512-KoWKW+MhvfTRWL4qrhUwAAZoaChluo0m0vbiJlGMt2GXvL4LVPQEjt8kSpHI3IBq5Rez8fg+XeH3cneztq+C7A==}
 
-  '@fastify/busboy@2.0.0':
-    resolution: {integrity: sha512-JUFJad5lv7jxj926GPgymrWQxxjPYuJNiNjNMzqT+HiuP6Vl3dk5xzG+8sTX96np0ZAluvaMzPsjhHZ5rNuNQQ==}
-    engines: {node: '>=14'}
-
   '@fastify/error@4.2.0':
     resolution: {integrity: sha512-RSo3sVDXfHskiBZKBPRgnQTtIqpi/7zhJOEmAxCiBcM7d0uwdGdxLlsCaLzGs8v8NnxIRlfG0N51p5yFaOentQ==}
 
@@ -6455,16 +6442,10 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@octokit/auth-token@2.5.0':
-    resolution: {integrity: sha512-r5FVUJCOLl19AxiuZD2VRZ/ORjp/4IN98Of6YJoJOkY75CIBuYfmiNHGrDwXr+aLGG55igl9QrxX3hbiXlLb+g==}
-
   '@octokit/auth-token@6.0.0':
     resolution: {integrity: sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==}
     engines: {node: '>= 20'}
 
-  '@octokit/core@3.6.0':
-    resolution: {integrity: sha512-7RKRKuA4xTjMhY+eG3jthb3hlZCsOwg3rztWh75Xc+ShDWOfDDATWbeZpAHBNRpm4Tv9WgBMOy1zEJYXG6NJ7Q==}
-
   '@octokit/core@7.0.6':
     resolution: {integrity: sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==}
     engines: {node: '>= 20'}
@@ -6473,19 +6454,10 @@ packages:
     resolution: {integrity: sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==}
     engines: {node: '>= 20'}
 
-  '@octokit/endpoint@6.0.12':
-    resolution: {integrity: sha512-lF3puPwkQWGfkMClXb4k/eUT/nZKQfxinRWJrdZaJO85Dqwo/G0yOC434Jr2ojwafWJMYqFGFa5ms4jJUgujdA==}
-
-  '@octokit/graphql@4.8.0':
-    resolution: {integrity: sha512-0gv+qLSBLKF0z8TKaSKTsS39scVKF9dbMxJpj3U0vC7wjNWFuIpL/z76Qe2fiuCbDRcJSavkXsVtMS6/dtQQsg==}
-
   '@octokit/graphql@9.0.3':
     resolution: {integrity: sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==}
     engines: {node: '>= 20'}
 
-  '@octokit/openapi-types@12.11.0':
-    resolution: {integrity: sha512-VsXyi8peyRq9PqIz/tpqiL2w3w80OgVMwBHltTml3LmVvXiphgeqmY9mvBw9Wu7e0QWk/fqD37ux8yP5uVekyQ==}
-
   '@octokit/openapi-types@27.0.0':
     resolution: {integrity: sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==}
 
@@ -6495,11 +6467,6 @@ packages:
     peerDependencies:
       '@octokit/core': '>=6'
 
-  '@octokit/plugin-paginate-rest@2.21.3':
-    resolution: {integrity: sha512-aCZTEf0y2h3OLbrgKkrfFdjRL6eSOo8komneVQJnYecAxIej7Bafor2xhuDJOIFau4pk0i/P28/XgtbyPF0ZHw==}
-    peerDependencies:
-      '@octokit/core': '>=2'
-
   '@octokit/plugin-request-log@6.0.0':
     resolution: {integrity: sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==}
     engines: {node: '>= 20'}
@@ -6512,20 +6479,12 @@ packages:
     peerDependencies:
       '@octokit/core': '>=6'
 
-  '@octokit/plugin-rest-endpoint-methods@5.16.2':
-    resolution: {integrity: sha512-8QFz29Fg5jDuTPXVtey05BLm7OB+M8fnvE64RNegzX7U+5NUXcOcnpTIK0YfSHBg8gYd0oxIq3IZTe9SfPZiRw==}
-    peerDependencies:
-      '@octokit/core': '>=3'
-
   '@octokit/plugin-retry@8.1.0':
     resolution: {integrity: sha512-O1FZgXeiGb2sowEr/hYTr6YunGdSAFWnr2fyW39Ah85H8O33ELASQxcvOFF5LE6Tjekcyu2ms4qAzJVhSaJxTw==}
     engines: {node: '>= 20'}
     peerDependencies:
       '@octokit/core': '>=7'
 
-  '@octokit/request-error@2.1.0':
-    resolution: {integrity: sha512-1VIvgXxs9WHSjicsRwq8PlR2LR2x6DwsJAaFgzdi0JfJoGSO8mYI/cHJQ+9FbN21aa+DrgNLnwObmyeSC8Rmpg==}
-
   '@octokit/request-error@7.1.0':
     resolution: {integrity: sha512-KMQIfq5sOPpkQYajXHwnhjCC0slzCNScLHs9JafXc4RAJI+9f+jNDlBNaIMTvazOPLgb4BnlhGJOTbnN0wIjPw==}
     engines: {node: '>= 20'}
@@ -6534,15 +6493,9 @@ packages:
     resolution: {integrity: sha512-v93h0i1yu4idj8qFPZwjehoJx4j3Ntn+JhXsdJrG9pYaX6j/XRz2RmasMUHtNgQD39nrv/VwTWSqK0RNXR8upA==}
     engines: {node: '>= 20'}
 
-  '@octokit/request@5.6.3':
-    resolution: {integrity: sha512-bFJl0I1KVc9jYTe9tdGGpAMPy32dLBXXo1dS/YwSCTL/2nd9XeHsY616RE3HPXDVk+a+dBuzyz5YdlXwcDTr2A==}
-
   '@octokit/types@16.0.0':
     resolution: {integrity: sha512-sKq+9r1Mm4efXW1FCk7hFSeJo4QKreL/tTbR0rz/qx/r1Oa2VV83LTA/H/MuCOX7uCIJmQVRKBcbmWoySjAnSg==}
 
-  '@octokit/types@6.41.0':
-    resolution: {integrity: sha512-eJ2jbzjdijiL3B4PrSQaSjuF2sPEQPVCPzBvTHJD9Nz+9dw2SGH4K4xeQJ77YfTq5bRQ+bD8wT11JbeDPmxmGg==}
-
   '@open-draft/deferred-promise@2.2.0':
     resolution: {integrity: sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA==}
 
@@ -10140,9 +10093,6 @@ packages:
   batch@0.6.1:
     resolution: {integrity: sha512-x+VAiMRL6UPkx+kudNvxTl6hB2XNNCG2r+7wixVfIYwu/2HKRXimwQyaumLjMveWvT2Hkd/cAJw+QBMfJ/EKVw==}
 
-  before-after-hook@2.2.3:
-    resolution: {integrity: sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==}
-
   before-after-hook@4.0.0:
     resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
 
@@ -11231,9 +11181,6 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
-  deprecation@2.3.1:
-    resolution: {integrity: sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==}
-
   dequal@2.0.3:
     resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
     engines: {node: '>=6'}
@@ -13371,10 +13318,6 @@ packages:
     resolution: {integrity: sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==}
     engines: {node: '>=0.10.0'}
 
-  is-plain-object@5.0.0:
-    resolution: {integrity: sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==}
-    engines: {node: '>=0.10.0'}
-
   is-potential-custom-element-name@1.0.1:
     resolution: {integrity: sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==}
 
@@ -18319,10 +18262,6 @@ packages:
   undici-types@8.3.0:
     resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
 
-  undici@5.29.0:
-    resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==}
-    engines: {node: '>=14.0'}
-
   undici@6.29.1:
     resolution: {integrity: sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==}
     engines: {node: '>=18.17'}
@@ -18428,9 +18367,6 @@ packages:
   unist-util-visit@5.0.0:
     resolution: {integrity: sha512-MR04uvD+07cwl/yhVuVWAtw+3GOR/knlL55Nd/wAdblk27GCVt3lqpTivy/tkJcZoNPzTwS1Y+KMojlLDhoTzg==}
 
-  universal-user-agent@6.0.0:
-    resolution: {integrity: sha512-isyNax3wXoKaulPDZWHQqbmIx1k2tb9fb3GGDBRxCscfYV2Ch7WxPArBsFEG8s/safwXTT7H4QGhaIkTp9447w==}
-
   universal-user-agent@7.0.3:
     resolution: {integrity: sha512-TmnEAEAsBJVZM/AADELsK76llnwcf9vMKuPz8JflO1frO8Lchitr0fNaN9d+Ap0BjKtqWqd/J17qeDnXh8CL2A==}
 
@@ -19598,8 +19534,8 @@ snapshots:
 
   '@actions/artifact@6.2.1(supports-color@10.0.0)':
     dependencies:
-      '@actions/core': 3.0.0
-      '@actions/github': 9.0.0
+      '@actions/core': 3.0.1
+      '@actions/github': 9.1.1
       '@actions/http-client': 4.0.0
       '@azure/storage-blob': 12.31.0(supports-color@10.0.0)
       '@octokit/core': 7.0.6
@@ -19615,12 +19551,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@actions/core@1.10.1':
-    dependencies:
-      '@actions/http-client': 2.2.3
-      uuid: 8.3.2
-
-  '@actions/core@3.0.0':
+  '@actions/core@3.0.1':
     dependencies:
       '@actions/exec': 3.0.0
       '@actions/http-client': 4.0.0
@@ -19633,16 +19564,7 @@ snapshots:
     dependencies:
       '@actions/io': 3.0.2
 
-  '@actions/github@5.1.1(encoding@0.1.13)':
-    dependencies:
-      '@actions/http-client': 2.2.3
-      '@octokit/core': 3.6.0(encoding@0.1.13)
-      '@octokit/plugin-paginate-rest': 2.21.3(@octokit/core@3.6.0(encoding@0.1.13))
-      '@octokit/plugin-rest-endpoint-methods': 5.16.2(@octokit/core@3.6.0(encoding@0.1.13))
-    transitivePeerDependencies:
-      - encoding
-
-  '@actions/github@9.0.0':
+  '@actions/github@9.1.1':
     dependencies:
       '@actions/http-client': 3.0.2
       '@octokit/core': 7.0.6
@@ -19652,11 +19574,6 @@ snapshots:
       '@octokit/request-error': 7.1.0
       undici: 6.29.1
 
-  '@actions/http-client@2.2.3':
-    dependencies:
-      tunnel: 0.0.6
-      undici: 5.29.0
-
   '@actions/http-client@3.0.2':
     dependencies:
       tunnel: 0.0.6
@@ -24134,8 +24051,6 @@ snapshots:
       ajv-formats: 3.0.1
       fast-uri: 3.1.8
 
-  '@fastify/busboy@2.0.0': {}
-
   '@fastify/error@4.2.0': {}
 
   '@fastify/fast-json-stringify-compiler@5.0.3':
@@ -25791,24 +25706,8 @@ snapshots:
   '@nx/nx-win32-x64-msvc@22.7.10':
     optional: true
 
-  '@octokit/auth-token@2.5.0':
-    dependencies:
-      '@octokit/types': 6.41.0
-
   '@octokit/auth-token@6.0.0': {}
 
-  '@octokit/core@3.6.0(encoding@0.1.13)':
-    dependencies:
-      '@octokit/auth-token': 2.5.0
-      '@octokit/graphql': 4.8.0(encoding@0.1.13)
-      '@octokit/request': 5.6.3(encoding@0.1.13)
-      '@octokit/request-error': 2.1.0
-      '@octokit/types': 6.41.0
-      before-after-hook: 2.2.3
-      universal-user-agent: 6.0.0
-    transitivePeerDependencies:
-      - encoding
-
   '@octokit/core@7.0.6':
     dependencies:
       '@octokit/auth-token': 6.0.0
@@ -25824,28 +25723,12 @@ snapshots:
       '@octokit/types': 16.0.0
       universal-user-agent: 7.0.3
 
-  '@octokit/endpoint@6.0.12':
-    dependencies:
-      '@octokit/types': 6.41.0
-      is-plain-object: 5.0.0
-      universal-user-agent: 6.0.0
-
-  '@octokit/graphql@4.8.0(encoding@0.1.13)':
-    dependencies:
-      '@octokit/request': 5.6.3(encoding@0.1.13)
-      '@octokit/types': 6.41.0
-      universal-user-agent: 6.0.0
-    transitivePeerDependencies:
-      - encoding
-
   '@octokit/graphql@9.0.3':
     dependencies:
       '@octokit/request': 10.0.7
       '@octokit/types': 16.0.0
       universal-user-agent: 7.0.3
 
-  '@octokit/openapi-types@12.11.0': {}
-
   '@octokit/openapi-types@27.0.0': {}
 
   '@octokit/plugin-paginate-rest@14.0.0(@octokit/core@7.0.6)':
@@ -25853,11 +25736,6 @@ snapshots:
       '@octokit/core': 7.0.6
       '@octokit/types': 16.0.0
 
-  '@octokit/plugin-paginate-rest@2.21.3(@octokit/core@3.6.0(encoding@0.1.13))':
-    dependencies:
-      '@octokit/core': 3.6.0(encoding@0.1.13)
-      '@octokit/types': 6.41.0
-
   '@octokit/plugin-request-log@6.0.0(@octokit/core@7.0.6)':
     dependencies:
       '@octokit/core': 7.0.6
@@ -25867,12 +25745,6 @@ snapshots:
       '@octokit/core': 7.0.6
       '@octokit/types': 16.0.0
 
-  '@octokit/plugin-rest-endpoint-methods@5.16.2(@octokit/core@3.6.0(encoding@0.1.13))':
-    dependencies:
-      '@octokit/core': 3.6.0(encoding@0.1.13)
-      '@octokit/types': 6.41.0
-      deprecation: 2.3.1
-
   '@octokit/plugin-retry@8.1.0(@octokit/core@7.0.6)':
     dependencies:
       '@octokit/core': 7.0.6
@@ -25880,12 +25752,6 @@ snapshots:
       '@octokit/types': 16.0.0
       bottleneck: 2.19.5
 
-  '@octokit/request-error@2.1.0':
-    dependencies:
-      '@octokit/types': 6.41.0
-      deprecation: 2.3.1
-      once: 1.4.0
-
   '@octokit/request-error@7.1.0':
     dependencies:
       '@octokit/types': 16.0.0
@@ -25898,25 +25764,10 @@ snapshots:
       fast-content-type-parse: 3.0.0
       universal-user-agent: 7.0.3
 
-  '@octokit/request@5.6.3(encoding@0.1.13)':
-    dependencies:
-      '@octokit/endpoint': 6.0.12
-      '@octokit/request-error': 2.1.0
-      '@octokit/types': 6.41.0
-      is-plain-object: 5.0.0
-      node-fetch: 2.7.0(encoding@0.1.13)
-      universal-user-agent: 6.0.0
-    transitivePeerDependencies:
-      - encoding
-
   '@octokit/types@16.0.0':
     dependencies:
       '@octokit/openapi-types': 27.0.0
 
-  '@octokit/types@6.41.0':
-    dependencies:
-      '@octokit/openapi-types': 12.11.0
-
   '@open-draft/deferred-promise@2.2.0': {}
 
   '@open-draft/logger@0.3.0':
@@ -29733,8 +29584,6 @@ snapshots:
 
   batch@0.6.1: {}
 
-  before-after-hook@2.2.3: {}
-
   before-after-hook@4.0.0: {}
 
   better-path-resolve@1.0.0:
@@ -31019,8 +30868,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  deprecation@2.3.1: {}
-
   dequal@2.0.3: {}
 
   destr@2.0.5: {}
@@ -33743,8 +33590,6 @@ snapshots:
     dependencies:
       isobject: 3.0.1
 
-  is-plain-object@5.0.0: {}
-
   is-potential-custom-element-name@1.0.1: {}
 
   is-promise@4.0.0: {}
@@ -40244,10 +40089,6 @@ snapshots:
 
   undici-types@8.3.0: {}
 
-  undici@5.29.0:
-    dependencies:
-      '@fastify/busboy': 2.0.0
-
   undici@6.29.1: {}
 
   undici@7.24.8: {}
@@ -40444,8 +40285,6 @@ snapshots:
       unist-util-is: 6.0.0
       unist-util-visit-parents: 6.0.2
 
-  universal-user-agent@6.0.0: {}
-
   universal-user-agent@7.0.3: {}
 
   universalify@0.1.2: {}

From b7659402e4ef4a6bcaf3d4da44e7c13b32e8327a Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Thu, 5 Nov 2026 10:37:38 +0100
Subject: [PATCH 168/169] fix(nextjs): Drop tunnel requests under the
 Next.request proxy root span (#26096)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

**Why:** Since Next.js 16.4.3, a proxy that runs separately from the
render gets a `Next.request` root span. Our tunnel filter only knew
`Middleware.execute`, so only the child span was dropped. Tunnel
requests through the proxy were still sent as transactions.

With span streaming, `ignoreSpans` only runs when a span starts. In
rewrite mode, the existing pattern needs the `?o=…&p=…` query, but
`Next.request` only carries the pathname. So it gets its own entry that
matches on the tunnel path alone.

**How to review:** The change is in `dropMiddlewareTunnelRequests.ts`,
and the e2e test is `nextjs-16-adapter/tests/proxy-tunnel.test.ts`.
Follow-up to #26084.

**Unsure about:** The pathname-only match for `Next.request` also drops
a request to the exact tunnel path that isn't a tunnel request, for
example one without the query. The static-mode drop flag already works
this way, but under span streaming this is a little wider than before.

Closes JS-4064

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../nextjs-16-adapter/next.config.ts          |  1 +
 .../nextjs-16-adapter/package.json            |  1 +
 .../nextjs-16-adapter/proxy.ts                |  6 +++-
 .../tests/proxy-tunnel.test.ts                | 30 ++++++++++++++++
 .../utils/dropMiddlewareTunnelRequests.ts     | 20 ++++++++---
 .../dropMiddlewareTunnelRequests.test.ts      | 34 +++++++++++++++++++
 6 files changed, 87 insertions(+), 5 deletions(-)
 create mode 100644 dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-tunnel.test.ts

diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
index 6fb632853c16..660eddbbfe1f 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/next.config.ts
@@ -7,4 +7,5 @@ const nextConfig: NextConfig = {
 
 export default withSentryConfig(nextConfig, {
   silent: true,
+  tunnelRoute: '/monitoring',
 });
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
index 4411d949fef3..f26999360e44 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/package.json
@@ -20,6 +20,7 @@
   "devDependencies": {
     "@playwright/test": "1.64.1",
     "@sentry-internal/test-utils": "file:../../packed/sentry-internal-test-utils-packed.tgz",
+    "@sentry/conventions": "0.30.0",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
index e104e3864459..b5cda0cfaa92 100644
--- a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/proxy.ts
@@ -3,6 +3,10 @@ import { NextResponse } from 'next/server';
 import type { NextRequest } from 'next/server';
 
 export async function proxy(request: NextRequest) {
+  if (request.nextUrl.pathname !== '/api/proxy-isolation') {
+    return NextResponse.next();
+  }
+
   const requestId = request.nextUrl.searchParams.get('id');
 
   Sentry.addBreadcrumb({ message: `proxy breadcrumb ${requestId}` });
@@ -16,5 +20,5 @@ export async function proxy(request: NextRequest) {
 }
 
 export const config = {
-  matcher: ['/api/proxy-isolation'],
+  matcher: ['/api/proxy-isolation', '/api/proxy-ok', '/monitoring'],
 };
diff --git a/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-tunnel.test.ts b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-tunnel.test.ts
new file mode 100644
index 000000000000..4c8807745ea0
--- /dev/null
+++ b/dev-packages/e2e-tests/test-applications/nextjs-16-adapter/tests/proxy-tunnel.test.ts
@@ -0,0 +1,30 @@
+import { expect, test } from '@playwright/test';
+import { HTTP_TARGET } from '@sentry/conventions/attributes';
+import { waitForStreamedSpan, waitForStreamedSpans } from '@sentry-internal/test-utils';
+
+test('drops the `Next.request` root span of tunnel requests through the proxy', async ({ request }) => {
+  // The callback never returns true, so this promise is deliberately left unsettled. The assertions read the array.
+  const segmentSpans: Awaited<ReturnType<typeof waitForStreamedSpan>>[] = [];
+  void waitForStreamedSpans('nextjs-16-adapter', spans => {
+    segmentSpans.push(...spans.filter(span => span.is_segment));
+    return false;
+  });
+
+  const proxyOkSpanPromise = waitForStreamedSpan('nextjs-16-adapter', span => {
+    return (
+      span.is_segment &&
+      span.attributes['next.span_type']?.value === 'Next.request' &&
+      span.attributes[HTTP_TARGET]?.value === '/api/proxy-ok'
+    );
+  });
+
+  const tunnelResponse = await request.post('/monitoring?o=123&p=456', { data: '{}' });
+  expect(tunnelResponse.headers()['x-middleware-next']).toBe('1');
+
+  await request.get('/api/proxy-ok');
+  await proxyOkSpanPromise;
+
+  expect(segmentSpans.filter(span => String(span.attributes[HTTP_TARGET]?.value).startsWith('/monitoring'))).toEqual(
+    [],
+  );
+});
diff --git a/packages/nextjs/src/common/utils/dropMiddlewareTunnelRequests.ts b/packages/nextjs/src/common/utils/dropMiddlewareTunnelRequests.ts
index f2d4774f3c54..8baa168fa031 100644
--- a/packages/nextjs/src/common/utils/dropMiddlewareTunnelRequests.ts
+++ b/packages/nextjs/src/common/utils/dropMiddlewareTunnelRequests.ts
@@ -34,8 +34,10 @@ export function dropMiddlewareTunnelRequests(
     return;
   }
 
-  // Only filter middleware spans, HTTP fetch spans, or BaseServer.handleRequest spans
-  const isMiddleware = attrs?.[ATTR_NEXT_SPAN_TYPE] === 'Middleware.execute';
+  // Only filter middleware spans, HTTP fetch spans, or BaseServer.handleRequest spans. Since Next.js 16.4.3, a proxy
+  // invoked separately from the render runs under a `Next.request` root span, which has to be dropped too.
+  const isMiddleware =
+    attrs?.[ATTR_NEXT_SPAN_TYPE] === 'Middleware.execute' || attrs?.[ATTR_NEXT_SPAN_TYPE] === 'Next.request';
   // The fetch span could be originating from rewrites re-writing a tunnel request
   // So we want to filter it out
   const isFetchSpan = attrs?.[SENTRY_ORIGIN] === 'auto.http.node_fetch';
@@ -114,8 +116,18 @@ export function getTunnelRouteIgnoreSpans(): NonNullable<ClientOptions['ignoreSp
     },
   };
 
+  // Since Next.js 16.4.3, a proxy invoked separately from the render runs under a `Next.request` root span. Its
+  // `http.target` is the pathname only, so the query of a rewrite-mode tunnel request can't be matched.
+  const proxyRootSpanIgnoreSpan = {
+    attributes: {
+      [ATTR_NEXT_SPAN_TYPE]: /^Next\.request$/,
+      // eslint-disable-next-line typescript/no-deprecated
+      [HTTP_TARGET]: new RegExp(`^${escapeStringForRegex(tunnelPath)}/?$`),
+    },
+  };
+
   if (tunnelRouteMode !== 'handler') {
-    return [tunnelRequestIgnoreSpan];
+    return [tunnelRequestIgnoreSpan, proxyRootSpanIgnoreSpan];
   }
 
   // On edge, the root span of a route handler has only `next.route`, with a `/route` suffix before Next.js 16.
@@ -125,5 +137,5 @@ export function getTunnelRouteIgnoreSpans(): NonNullable<ClientOptions['ignoreSp
       [ATTR_NEXT_ROUTE]: new RegExp(`^${escapeStringForRegex(TUNNEL_ROUTE_HANDLER_PATH)}(?:/route)?$`),
     },
   };
-  return [tunnelRequestIgnoreSpan, tunnelRouteHandlerIgnoreSpan];
+  return [tunnelRequestIgnoreSpan, proxyRootSpanIgnoreSpan, tunnelRouteHandlerIgnoreSpan];
 }
diff --git a/packages/nextjs/test/utils/dropMiddlewareTunnelRequests.test.ts b/packages/nextjs/test/utils/dropMiddlewareTunnelRequests.test.ts
index 5fa91525bd68..e5b506d02c81 100644
--- a/packages/nextjs/test/utils/dropMiddlewareTunnelRequests.test.ts
+++ b/packages/nextjs/test/utils/dropMiddlewareTunnelRequests.test.ts
@@ -125,6 +125,20 @@ describe('dropMiddlewareTunnelRequests', () => {
     });
   });
 
+  describe('Next.request spans', () => {
+    it('marks the proxy root span for dropping when http.target matches tunnel path', () => {
+      globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
+      const span = createMockSpan();
+
+      dropMiddlewareTunnelRequests(span as any, {
+        'next.span_type': 'Next.request',
+        'http.target': '/monitoring',
+      });
+
+      expect(span.setAttribute).toHaveBeenCalledWith(TRANSACTION_ATTR_SHOULD_DROP_TRANSACTION, true);
+    });
+  });
+
   describe('unrelated spans', () => {
     it('does not process spans without matching span type or origin', () => {
       globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
@@ -211,6 +225,26 @@ describe('getTunnelRouteIgnoreSpans', () => {
     },
   );
 
+  it.each([
+    ['rewrite', '/monitoring'],
+    ['rewrite', '/monitoring/'],
+    ['handler', '/monitoring'],
+  ] as const)('ignores a Next.request proxy root span in %s mode for %s', (mode, target) => {
+    globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
+    globalWithInjectedValues._sentryTunnelRouteMode = mode;
+
+    expect(isIgnored(nextRequestSpanAttributes('Next.request', target))).toBe(true);
+  });
+
+  it.each(['/monitoring/dashboard', '/monitoring-dashboard', '/api/monitoring'])(
+    'does not ignore a Next.request proxy root span for %s',
+    target => {
+      globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
+
+      expect(isIgnored(nextRequestSpanAttributes('Next.request', target))).toBe(false);
+    },
+  );
+
   it('does not ignore a request span for a sub-path in handler mode', () => {
     globalWithInjectedValues._sentryRewritesTunnelPath = '/monitoring';
     globalWithInjectedValues._sentryTunnelRouteMode = 'handler';

From 3b15c56f0e3e8386f111bbe740c93de6e099036c Mon Sep 17 00:00:00 2001
From: Charly Gomez <charly.gomez1310@gmail.com>
Date: Thu, 5 Nov 2026 11:05:27 +0100
Subject: [PATCH 169/169] meta(changelog): Update changelog for 11.11.0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md | 180 +++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 174 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eaa2099f88d0..bf3624e80c8a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,11 +4,11 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
-Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and @AyeshaWaseemAhmad. Thank you for your contributions!
+## 11.11.0
 
 ### Important Changes
 
-- **ref(cloudflare): Use the shared request handler wrapper**
+- **ref(cloudflare): Use the shared request handler wrapper ([#25588](https://github.com/getsentry/sentry-javascript/pull/25588))**
 
   Cloudflare Workers now use the same request handler wrapper as `Deno.serve` and `Bun.serve`. Changes for Cloudflare users:
 
@@ -22,10 +22,6 @@ Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and
 
   Set `monitorCronJobs: true` on `nestIntegration()` to send check-ins for every `@Cron()` method, without adding `@SentryCron` to each one. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeCronJobs` to skip jobs by slug. Methods that also have `@SentryCron` check in once, with the slug and options passed to `@SentryCron`.
 
-- **feat(nestjs): Derive SentryCron monitor config from @Cron ([#25013](https://github.com/getsentry/sentry-javascript/pull/25013))**
-
-  `@SentryCron` now sends the schedule and time zone from the method's `@Cron()` decorator, so Sentry creates the monitor on the first run. If you use `@SentryCron` without a `schedule`, Sentry now creates missing monitors, which are billed, and overwrites schedules and time zones set by hand. Pass `fromCronDecorator: false` to turn this off.
-
 - **feat(node): Add cronJobIntegration to monitor cron jobs ([#25477](https://github.com/getsentry/sentry-javascript/pull/25477))**
 
   Add `Sentry.cronJobIntegration()` to `integrations` to send check-ins for every named `CronJob` of the `cron` package (4.3+), with the job name as the monitor slug. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use `excludeJobs` to skip jobs by name. `Sentry.cron.instrumentCron` is deprecated; use `cronJobIntegration` instead.
@@ -38,6 +34,178 @@ Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and
 
   When Next.js serves a page from its cache, for example an ISR page or a `cacheComponents` shell, the pageload now has the `page.server_rendering.type` attribute. It is `static` if the whole page came from the cache, and `partially_static` if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.
 
+### Other Changes
+
+- feat(astro): Add `@sentry/astro/integration` entry for the Astro integration ([#25726](https://github.com/getsentry/sentry-javascript/pull/25726))
+- feat(bundler-plugins): Add `sourcemaps.deleteSourcemapsAfterUpload` and staged uploads ([#25637](https://github.com/getsentry/sentry-javascript/pull/25637))
+- feat(nestjs): Derive SentryCron monitor config from @Cron ([#25013](https://github.com/getsentry/sentry-javascript/pull/25013))
+- feat(nextjs): Add `applicationKeyExcludeDependencies` option ([#25818](https://github.com/getsentry/sentry-javascript/pull/25818))
+- feat(node): Add `awsLambdaWebIntegration` for Lambda Web Functions ([#25355](https://github.com/getsentry/sentry-javascript/pull/25355))
+- feat(node): Add BullMQ integration ([#21777](https://github.com/getsentry/sentry-javascript/pull/21777))
+- feat(node): Add nodeCronIntegration to monitor node-cron tasks ([#25473](https://github.com/getsentry/sentry-javascript/pull/25473))
+- feat(node): Add nodeScheduleIntegration to monitor node-schedule jobs ([#25474](https://github.com/getsentry/sentry-javascript/pull/25474))
+- feat(node): Support postgres v4 through its native tracing channels ([#26076](https://github.com/getsentry/sentry-javascript/pull/26076))
+- feat(server-utils): Extract `getSqlSpanName` for SQL span names ([#25929](https://github.com/getsentry/sentry-javascript/pull/25929))
+- feat(server-utils): Move to new `getSqlQueryAttributes` helper for consistency ([#25927](https://github.com/getsentry/sentry-javascript/pull/25927))
+- feat(server-utils): Record AI SDK v7 runtime and tool context on Vercel AI spans ([#25774](https://github.com/getsentry/sentry-javascript/pull/25774))
+- feat(server-utils): Set `db.operation.name` on SQL spans ([#25850](https://github.com/getsentry/sentry-javascript/pull/25850))
+- feat(server-utils): Support @mistralai/mistralai v3 ([#25827](https://github.com/getsentry/sentry-javascript/pull/25827))
+- feat(solidstart): Export `withSentry` from `@sentry/solidstart/vite` ([#25725](https://github.com/getsentry/sentry-javascript/pull/25725))
+- fix(astro): Initialize the server SDK on the first endpoint request ([#25731](https://github.com/getsentry/sentry-javascript/pull/25731))
+- fix(browser): Attribute long animation frame spans to the longest script ([#25990](https://github.com/getsentry/sentry-javascript/pull/25990))
+- fix(bundler-plugins): Inject debug IDs into every esbuild rebuild ([#26099](https://github.com/getsentry/sentry-javascript/pull/26099))
+- fix(bundler-plugins): upload literal artifact paths ([#25356](https://github.com/getsentry/sentry-javascript/pull/25356))
+- fix(cloudflare): Run build-time instrumentation in vite dev ([#25777](https://github.com/getsentry/sentry-javascript/pull/25777))
+- fix(core): Call native toString without page-replaceable lookups in FunctionToString ([#25921](https://github.com/getsentry/sentry-javascript/pull/25921))
+- fix(core): Enforce linked error limits for aggregate and suppressed errors ([#25873](https://github.com/getsentry/sentry-javascript/pull/25873))
+- fix(core): Only create Supabase db spans when there is a parent span ([#25807](https://github.com/getsentry/sentry-javascript/pull/25807))
+- fix(core): preserve span links through beforeSendSpan ([#25566](https://github.com/getsentry/sentry-javascript/pull/25566))
+- fix(core): Respect header collection for session user agents ([#25871](https://github.com/getsentry/sentry-javascript/pull/25871))
+- fix(deps): Bump glob to 14 and drop the direct dependency from react-router ([#26014](https://github.com/getsentry/sentry-javascript/pull/26014))
+- fix(nextjs): Don't abort Cache Components renders on Cloudflare Workers when requests overlap ([#25315](https://github.com/getsentry/sentry-javascript/pull/25315))
+- fix(nextjs): Drop tunnel requests under the Next.request proxy root span ([#26096](https://github.com/getsentry/sentry-javascript/pull/26096))
+- fix(nextjs): Fork isolation scope for Next.request proxy root spans ([#26084](https://github.com/getsentry/sentry-javascript/pull/26084))
+- fix(nextjs): Strip source map comments before trailing debug IDs ([#25881](https://github.com/getsentry/sentry-javascript/pull/25881))
+- fix(nitro): Capture errors thrown in tasks ([#26089](https://github.com/getsentry/sentry-javascript/pull/26089))
+- fix(nuxt): Keep storage instrumentation plugin synchronous ([#25949](https://github.com/getsentry/sentry-javascript/pull/25949))
+- fix(replay): Skip buffered replays for captureMessage stacks from the attachStacktrace default ([#25846](https://github.com/getsentry/sentry-javascript/pull/25846))
+- fix(server-utils): Fix orchestrion source maps of instrumented modules ([#25772](https://github.com/getsentry/sentry-javascript/pull/25772))
+- fix(server-utils): Read the pi-durable session id in every phase outside a run ([#25838](https://github.com/getsentry/sentry-javascript/pull/25838))
+- fix(server-utils): Require a parent span for Firestore operations ([#25855](https://github.com/getsentry/sentry-javascript/pull/25855))
+- fix(server-utils): Require a parent span for Tedious queries ([#25822](https://github.com/getsentry/sentry-javascript/pull/25822))
+- fix(server-utils): Use onlyIfParent for Firestore spans ([#25877](https://github.com/getsentry/sentry-javascript/pull/25877))
+- fix(server-utils): Use onlyIfParent for Tedious spans ([#25876](https://github.com/getsentry/sentry-javascript/pull/25876))
+- fix(solidstart): Serve the managed tunnel under Vite's base on SolidStart 2 ([#25848](https://github.com/getsentry/sentry-javascript/pull/25848))
+- fix(sveltekit): Resolve Handle and ResolveOptions types on SvelteKit 3 ([#26085](https://github.com/getsentry/sentry-javascript/pull/26085))
+- fix(wasm): Skip length prefix in 16-byte build IDs ([#24857](https://github.com/getsentry/sentry-javascript/pull/24857))
+- ref(core): Deprecate the released `handleTunnelRequest` form and reword the `serveTunnelIntegration` docs ([#25844](https://github.com/getsentry/sentry-javascript/pull/25844))
+
+<details>
+  <summary><strong>Internal Changes</strong></summary>
+
+- chore(ci): Ignore Dependabot bumps for deps that are also peer deps ([#26015](https://github.com/getsentry/sentry-javascript/pull/26015))
+- chore(ci): Remove nightly sentry-lighthouse upload workflow ([#25966](https://github.com/getsentry/sentry-javascript/pull/25966))
+- chore(dependabot): Group related dependency updates ([#26059](https://github.com/getsentry/sentry-javascript/pull/26059))
+- chore(dependabot): Ignore major react-router updates ([#25892](https://github.com/getsentry/sentry-javascript/pull/25892))
+- chore(dependabot): Preserve SDK compatibility baselines ([#26013](https://github.com/getsentry/sentry-javascript/pull/26013))
+- chore(dependabot): Remove obsolete update rules ([#26007](https://github.com/getsentry/sentry-javascript/pull/26007))
+- chore(deps): Align AWS SDK clients to 3.1161.0 ([#26032](https://github.com/getsentry/sentry-javascript/pull/26032))
+- chore(deps): Bump @actions/core and @actions/github in internal GH actions ([#26109](https://github.com/getsentry/sentry-javascript/pull/26109))
+- chore(deps): Bump @nuxt/devtools from 3.4.1 to 3.4.4 ([#26097](https://github.com/getsentry/sentry-javascript/pull/26097))
+- chore(deps): Bump @sentry/conventions to 0.30.0 ([#25837](https://github.com/getsentry/sentry-javascript/pull/25837))
+- chore(deps): Bump undici from 6.24.1 to 6.29.1 ([#26108](https://github.com/getsentry/sentry-javascript/pull/26108))
+- chore(deps): Bump webpack from 5.104.1 to 5.112.2 ([#25910](https://github.com/getsentry/sentry-javascript/pull/25910))
+- chore(deps): Enable pnpm autoDedupe ([#25961](https://github.com/getsentry/sentry-javascript/pull/25961))
+- chore(deps): Group AWS SDK Dependabot updates ([#26030](https://github.com/getsentry/sentry-javascript/pull/26030))
+- chore(deps-dev): Bump @babel/parser from 7.29.9 to 8.0.10 ([#26043](https://github.com/getsentry/sentry-javascript/pull/26043))
+- chore(deps-dev): Bump @babel/plugin-transform-typescript from 7.29.7 to 8.0.6 ([#26012](https://github.com/getsentry/sentry-javascript/pull/26012))
+- chore(deps-dev): Bump @hono/node-server from 2.1.3 to 2.1.5 ([#26054](https://github.com/getsentry/sentry-javascript/pull/26054))
+- chore(deps-dev): Bump @rollup/plugin-terser from 0.4.4 to 1.0.2 ([#25890](https://github.com/getsentry/sentry-javascript/pull/25890))
+- chore(deps-dev): Bump @testing-library/user-event from 14.5.2 to 14.6.8 ([#26071](https://github.com/getsentry/sentry-javascript/pull/26071))
+- chore(deps-dev): Bump fake-indexeddb from 6.2.5 to 6.2.7 ([#26034](https://github.com/getsentry/sentry-javascript/pull/26034))
+- chore(deps-dev): Bump markdown-table from 3.0.3 to 3.0.4 ([#26074](https://github.com/getsentry/sentry-javascript/pull/26074))
+- chore(deps-dev): Bump node-schedule and @types/node-schedule ([#26058](https://github.com/getsentry/sentry-javascript/pull/26058))
+- chore(deps-dev): Bump redux from 4.0.5 to 5.0.1 ([#25959](https://github.com/getsentry/sentry-javascript/pull/25959))
+- chore(deps-dev): Bump the nestjs group with 2 updates ([#26060](https://github.com/getsentry/sentry-javascript/pull/26060))
+- chore(deps-dev): Bump the react-router group across 1 directory with 3 updates ([#25955](https://github.com/getsentry/sentry-javascript/pull/25955))
+- chore(deps-dev): Bump tsx from 4.23.0 to 4.23.15 ([#25958](https://github.com/getsentry/sentry-javascript/pull/25958))
+- chore(deps-dev): Bump wrangler from 4.61.0 to 4.156.0 ([#26009](https://github.com/getsentry/sentry-javascript/pull/26009))
+- chore(dev-packages): Move dependencies to devDependencies ([#26046](https://github.com/getsentry/sentry-javascript/pull/26046))
+- chore(node-integration-tests): Remove unused dependencies ([#25942](https://github.com/getsentry/sentry-javascript/pull/25942))
+- chore: Add Bugbot guidance for cold imports in tests ([#25976](https://github.com/getsentry/sentry-javascript/pull/25976))
+- chore: Add external contributor to CHANGELOG.md ([#25862](https://github.com/getsentry/sentry-javascript/pull/25862))
+- chore: Add external contributor to CHANGELOG.md ([#25870](https://github.com/getsentry/sentry-javascript/pull/25870))
+- chore: Add external contributor to CHANGELOG.md ([#25872](https://github.com/getsentry/sentry-javascript/pull/25872))
+- chore: Add external contributor to CHANGELOG.md ([#26017](https://github.com/getsentry/sentry-javascript/pull/26017))
+- chore: Add external contributor to CHANGELOG.md ([#26062](https://github.com/getsentry/sentry-javascript/pull/26062))
+- chore: Batch npm dependency updates daily ([#26072](https://github.com/getsentry/sentry-javascript/pull/26072))
+- chore: Exclude integration and bundler tests from Dependabot updates ([#26075](https://github.com/getsentry/sentry-javascript/pull/26075))
+- chore: Ignore major Prisma dependency updates ([#26063](https://github.com/getsentry/sentry-javascript/pull/26063))
+- chore: Prune unused regexp dependencies from lockfile ([#25948](https://github.com/getsentry/sentry-javascript/pull/25948))
+- chore: Refresh Smithy deprecation metadata in lockfile ([#25971](https://github.com/getsentry/sentry-javascript/pull/25971))
+- chore: Remove unused eslint-plugin-regexp dependencies ([#25944](https://github.com/getsentry/sentry-javascript/pull/25944))
+- chore: Remove unused test and build dependencies ([#25945](https://github.com/getsentry/sentry-javascript/pull/25945))
+- ci(canary): Build the canary test matrix from `canaryVariants` ([#25866](https://github.com/getsentry/sentry-javascript/pull/25866))
+- ci(deps): Bump anthropics/claude-code-action from 1.0.236 to 1.0.264 ([#25952](https://github.com/getsentry/sentry-javascript/pull/25952))
+- ci(deps): Bump anthropics/claude-code-action from 1.0.264 to 1.0.266 ([#26008](https://github.com/getsentry/sentry-javascript/pull/26008))
+- ci(deps): Bump getsentry/craft from 2.31.2 to 3.4.0 ([#25987](https://github.com/getsentry/sentry-javascript/pull/25987))
+- ci(deps): Bump getsentry/craft from 3.4.0 to 3.5.0 ([#26011](https://github.com/getsentry/sentry-javascript/pull/26011))
+- ci(deps): Bump getsentry/github-workflows/validate-pr from 36c729264d2edc29ebae61950c50e1e9f043ad7e to 01bcb7fe69bb48bacd83e675840e3dc95b33c730 ([#25954](https://github.com/getsentry/sentry-javascript/pull/25954))
+- ci(deps): Group langchain dependabot updates and skip majors ([#26041](https://github.com/getsentry/sentry-javascript/pull/26041))
+- ci(deps): Ignore langchain in dependabot ([#26056](https://github.com/getsentry/sentry-javascript/pull/26056))
+- ci(node): Add optional Node 27 alpha tests ([#25984](https://github.com/getsentry/sentry-javascript/pull/25984))
+- ci: Drop dead matrix reference in Deno unit tests job ([#25852](https://github.com/getsentry/sentry-javascript/pull/25852))
+- ci: Include v10 in base-branch metadata ([#25977](https://github.com/getsentry/sentry-javascript/pull/25977))
+- ci: run CI on GitHub-hosted runners again ([#26057](https://github.com/getsentry/sentry-javascript/pull/26057))
+- ci: Split the E2E test matrix into two jobs ([#25913](https://github.com/getsentry/sentry-javascript/pull/25913))
+- docs(changelog): Add monitorCronJobs to Unreleased ([#25996](https://github.com/getsentry/sentry-javascript/pull/25996))
+- docs(changelog): Restore order of unreleased section in changelog ([#26006](https://github.com/getsentry/sentry-javascript/pull/26006))
+- feat(deps): Bump @aws-sdk/client-lambda from 3.1068.0 to 3.1161.0 ([#26026](https://github.com/getsentry/sentry-javascript/pull/26026))
+- feat(deps): Bump @embroider/addon-shim from 1.10.3 to 1.11.0 ([#26048](https://github.com/getsentry/sentry-javascript/pull/26048))
+- feat(deps): Bump @flue/runtime from 2.0.3 to 2.3.0 ([#26044](https://github.com/getsentry/sentry-javascript/pull/26044))
+- feat(deps): Bump @hapi/content from 6.0.2 to 6.0.3 ([#26021](https://github.com/getsentry/sentry-javascript/pull/26021))
+- feat(deps): Bump @hono/node-server from 2.0.10 to 2.1.3 ([#26053](https://github.com/getsentry/sentry-javascript/pull/26053))
+- feat(deps): Bump @sveltejs/acorn-typescript from 1.0.9 to 1.0.13 ([#26050](https://github.com/getsentry/sentry-javascript/pull/26050))
+- feat(deps): Bump @types/aws-lambda from 8.10.161 to 8.10.164 ([#26066](https://github.com/getsentry/sentry-javascript/pull/26066))
+- feat(deps): Bump axios from 1.20.0 to 1.21.0 ([#26033](https://github.com/getsentry/sentry-javascript/pull/26033))
+- feat(deps): Bump dataloader from 2.2.2 to 2.2.3 ([#25891](https://github.com/getsentry/sentry-javascript/pull/25891))
+- feat(deps): Bump lodash.omit from 4.5.0 to 4.18.0 ([#26055](https://github.com/getsentry/sentry-javascript/pull/26055))
+- feat(deps): Bump node-forge from 1.4.0 to 1.4.2 ([#26020](https://github.com/getsentry/sentry-javascript/pull/26020))
+- feat(deps): Bump pg and @types/pg ([#26042](https://github.com/getsentry/sentry-javascript/pull/26042))
+- feat(deps): Bump proxy from 2.1.1 to 4.1.0 ([#26029](https://github.com/getsentry/sentry-javascript/pull/26029))
+- feat(deps): Bump valibot from 1.4.2 to 1.5.0 ([#25957](https://github.com/getsentry/sentry-javascript/pull/25957))
+- feat(deps): Bump vite from 8.3.1 to 8.3.5 ([#26045](https://github.com/getsentry/sentry-javascript/pull/26045))
+- feat(deps): Bump yargs from 16.2.0 to 18.2.0 ([#26031](https://github.com/getsentry/sentry-javascript/pull/26031))
+- fix(build): Handle CRLF line endings in pnpm-workspace.yaml check ([#26083](https://github.com/getsentry/sentry-javascript/pull/26083))
+- fix(deps): Bump seroval to 1.6.12 and 1.7.7 ([#26047](https://github.com/getsentry/sentry-javascript/pull/26047))
+- fix(deps): Bump tar from 7.5.11 to 7.5.22 ([#26025](https://github.com/getsentry/sentry-javascript/pull/26025))
+- perf(ci): Increase tarball packing concurrency ([#25979](https://github.com/getsentry/sentry-javascript/pull/25979))
+- perf(ci): Speed up Next.js E2E tests by sharding into dev/prod ([#25960](https://github.com/getsentry/sentry-javascript/pull/25960))
+- perf(ci): Split Next.js application-key tests by environment ([#26040](https://github.com/getsentry/sentry-javascript/pull/26040))
+- ref(astro): Use convention constants for attribute keys ([#25894](https://github.com/getsentry/sentry-javascript/pull/25894))
+- ref(browser): Use convention constants for attribute keys ([#25895](https://github.com/getsentry/sentry-javascript/pull/25895))
+- ref(browser-utils): Use convention constants for attribute keys ([#25896](https://github.com/getsentry/sentry-javascript/pull/25896))
+- ref(bun): Use convention constants for attribute keys ([#25897](https://github.com/getsentry/sentry-javascript/pull/25897))
+- ref(cloudflare): Simplify shared SDK initialization ([#25864](https://github.com/getsentry/sentry-javascript/pull/25864))
+- ref(cloudflare): Use convention constants for attribute keys ([#25898](https://github.com/getsentry/sentry-javascript/pull/25898))
+- ref(core): Use convention constants for attribute keys ([#25899](https://github.com/getsentry/sentry-javascript/pull/25899))
+- ref(deno): Use convention constants for attribute keys ([#25900](https://github.com/getsentry/sentry-javascript/pull/25900))
+- ref(google-cloud-serverless): Use convention constants for attribute keys ([#25901](https://github.com/getsentry/sentry-javascript/pull/25901))
+- ref(nextjs): Use convention constants for attribute keys ([#25902](https://github.com/getsentry/sentry-javascript/pull/25902))
+- ref(node): Use convention constants for attribute keys ([#25903](https://github.com/getsentry/sentry-javascript/pull/25903))
+- ref(nuxt): Use convention constants for attribute keys ([#25904](https://github.com/getsentry/sentry-javascript/pull/25904))
+- ref(profiling-node): Use convention constants for attribute keys ([#25905](https://github.com/getsentry/sentry-javascript/pull/25905))
+- ref(react-router): Use convention constants for attribute keys ([#25906](https://github.com/getsentry/sentry-javascript/pull/25906))
+- ref(replay-internal): Use convention constants for attribute keys ([#25907](https://github.com/getsentry/sentry-javascript/pull/25907))
+- ref(server-utils): Clarify PostgreSQL instrumentation filenames ([#25939](https://github.com/getsentry/sentry-javascript/pull/25939))
+- ref(server-utils): Remove `requiresParentSpan` in favor of `onlyIfParent` ([#25926](https://github.com/getsentry/sentry-javascript/pull/25926))
+- ref(server-utils): Share the postgres.js query settlement logic ([#26094](https://github.com/getsentry/sentry-javascript/pull/26094))
+- ref(server-utils): Use convention constants for attribute keys ([#25908](https://github.com/getsentry/sentry-javascript/pull/25908))
+- ref(sveltekit): Use convention constants for attribute keys ([#25909](https://github.com/getsentry/sentry-javascript/pull/25909))
+- ref: Pass optional span attributes directly instead of conditional spreads ([#25878](https://github.com/getsentry/sentry-javascript/pull/25878))
+- test(aws-serverless): Move Lambda extension setup outside test timeout ([#25975](https://github.com/getsentry/sentry-javascript/pull/25975))
+- test(browser): Stabilize long animation frame tests ([#25974](https://github.com/getsentry/sentry-javascript/pull/25974))
+- test(bundler-plugins): Stabilize missing-parser test setup ([#25972](https://github.com/getsentry/sentry-javascript/pull/25972))
+- test(bundler-tests): Guard server runtime entries against build-time tooling ([#25724](https://github.com/getsentry/sentry-javascript/pull/25724))
+- test(e2e): Check node-openai-decisions through the event proxy ([#25840](https://github.com/getsentry/sentry-javascript/pull/25840))
+- test(e2e): Import Type from typebox in node-pi-durable ([#26018](https://github.com/getsentry/sentry-javascript/pull/26018))
+- test(e2e): Move canary variants into `canaryVariants` ([#25865](https://github.com/getsentry/sentry-javascript/pull/25865))
+- test(e2e): Move OpenAI and Anthropic send-to-sentry cases into gen-ai-libraries ([#25841](https://github.com/getsentry/sentry-javascript/pull/25841))
+- test(e2e): Point together-ai 1.x at OpenRouter's base URL in gen-ai-libraries ([#25947](https://github.com/getsentry/sentry-javascript/pull/25947))
+- test(e2e): Remove node-flue-send-to-sentry ([#25839](https://github.com/getsentry/sentry-javascript/pull/25839))
+- test(e2e): Rename nuxt-5 middleware files to avoid Nitro's dotted suffixes ([#25923](https://github.com/getsentry/sentry-javascript/pull/25923))
+- test(effect): Assert error severities without event ordering ([#25973](https://github.com/getsentry/sentry-javascript/pull/25973))
+- test(node-integration-tests): Install Flue and pi-durable as package dependencies ([#25933](https://github.com/getsentry/sentry-javascript/pull/25933))
+- test(node-integration-tests): Install Prisma suite dependencies as package dependencies ([#25943](https://github.com/getsentry/sentry-javascript/pull/25943))
+- test(node-integration-tests): Install single-version suite dependencies as package dependencies ([#25936](https://github.com/getsentry/sentry-javascript/pull/25936))
+- test(nuxt): cover the client plugin's pages-router instrumentation ([#25348](https://github.com/getsentry/sentry-javascript/pull/25348))
+- test(nuxt): Make the `nuxt-5 (tunnel-dev)` e2e variant optional ([#26004](https://github.com/getsentry/sentry-javascript/pull/26004))
+- test(nuxt): Use Nuxt's own Nitro and add db0 in nuxt-5 E2E app ([#26095](https://github.com/getsentry/sentry-javascript/pull/26095))
+
+</details>
+
+Work in this release was contributed by @lazerg, @chiliec, @61465, @jpdefo, and @AyeshaWaseemAhmad. Thank you for your contributions!
+
 ## 11.10.0
 
 ### Important Changes