chore(deps): bump the production-dependencies group with 11 updates by dependabot[bot] · Pull Request #304 · Neurowealth/Backend

dependabot · 2026-07-27T06:20:51Z

Bumps the production-dependencies group with 11 updates:

Package	From	To
@anthropic-ai/sdk	`0.112.3`	`0.115.0`
@opentelemetry/auto-instrumentations-node	`0.78.0`	`0.79.0`
@opentelemetry/exporter-trace-otlp-http	`0.220.0`	`0.221.0`
@opentelemetry/resources	`2.9.0`	`2.10.0`
@opentelemetry/sdk-node	`0.220.0`	`0.221.0`
@opentelemetry/sdk-trace-node	`2.9.0`	`2.10.0`
@prisma/instrumentation	`7.8.0`	`7.9.0`
@sentry/node	`10.66.0`	`10.68.0`
@sentry/profiling-node	`10.66.0`	`10.68.0`
@stellar/stellar-sdk	`16.0.1`	`16.1.0`
express-rate-limit	`8.6.0`	`8.6.1`

Updates @anthropic-ai/sdk from 0.112.3 to 0.115.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

api: add claude-opus-5 model (cdd3606)

api: add tool addition/removal blocks and tool_change events (cdd3606)

api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

api: add support for new refusal category (479efe8)

internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

api: add claude-opus-5 model (cdd3606)

api: add tool addition/removal blocks and tool_change events (cdd3606)

api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

api: add support for new refusal category (479efe8)

internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits

3b45cd3 chore: release main
f298e9a feat(api): add claude-opus-5 model
ce8e54b fix(client): release abort listeners when requests settle (#1129)
2d314b4 chore: release main
3d051df feat(api): add new stop reason 'model_context_window_exceeded'
4414d47 chore: release main
1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
c58a55b chore: release main
2fb7da5 chore(api): add support for new refusal category
d6ffc3c chore(internal): codegen related update
Additional commits viewable in compare view

Updates @opentelemetry/auto-instrumentations-node from 0.78.0 to 0.79.0

Release notes

Sourced from @opentelemetry/auto-instrumentations-node's releases.

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

... (truncated)

Changelog

Sourced from @opentelemetry/auto-instrumentations-node's changelog.

0.79.0 (2026-07-23)

Features

deps: update deps matching '@opentelemetry/*' (#3629) (466d5de)

Bug Fixes

auto-instrumentations-node: avoid duplicate diag logger warning in register.js (#3601) (3ae8a1b)

Dependencies

The following workspace dependencies were updated

dependencies

@opentelemetry/instrumentation-amqplib bumped from ^0.67.0 to ^0.68.0

@opentelemetry/instrumentation-aws-lambda bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-aws-sdk bumped from ^0.75.0 to ^0.76.0

@opentelemetry/instrumentation-bunyan bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-cassandra-driver bumped from ^0.65.0 to ^0.66.0

@opentelemetry/instrumentation-connect bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-cucumber bumped from ^0.36.0 to ^0.37.0

@opentelemetry/instrumentation-dataloader bumped from ^0.37.0 to ^0.38.0

@opentelemetry/instrumentation-dns bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-express bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-fs bumped from ^0.39.0 to ^0.40.0

@opentelemetry/instrumentation-generic-pool bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-graphql bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-hapi bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-host-metrics bumped from ^0.3.0 to ^0.4.0

@opentelemetry/instrumentation-ioredis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-kafkajs bumped from ^0.29.0 to ^0.30.0

@opentelemetry/instrumentation-knex bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-koa bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-lru-memoizer bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-memcached bumped from ^0.63.0 to ^0.64.0

@opentelemetry/instrumentation-mongodb bumped from ^0.73.0 to ^0.74.0

@opentelemetry/instrumentation-mongoose bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-mysql2 bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-nestjs-core bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-net bumped from ^0.64.0 to ^0.65.0

@opentelemetry/instrumentation-openai bumped from ^0.18.0 to ^0.19.0

@opentelemetry/instrumentation-oracledb bumped from ^0.45.0 to ^0.46.0

@opentelemetry/instrumentation-pg bumped from ^0.72.0 to ^0.73.0

@opentelemetry/instrumentation-pino bumped from ^0.66.0 to ^0.67.0

@opentelemetry/instrumentation-redis bumped from ^0.68.0 to ^0.69.0

@opentelemetry/instrumentation-restify bumped from ^0.65.0 to ^0.66.0

... (truncated)

Commits

27e172a chore: release main (#3596)
466d5de feat(deps): update deps matching '@opentelemetry/*' (#3629)
b7efd7b chore(*): migrate to sdk-trace (#3599)
3ae8a1b fix(auto-instrumentations-node): avoid duplicate diag logger warning in regis...
See full diff in compare view

Updates @opentelemetry/exporter-trace-otlp-http from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/exporter-trace-otlp-http's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/resources from 2.9.0 to 2.10.0

Release notes

Sourced from @opentelemetry/resources's releases.

v2.10.0

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Changelog

Sourced from @opentelemetry/resources's changelog.

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.220.0 to 0.221.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.221.0

0.221.0

💥 Breaking Changes

feat(sdk-logs)!: configure the force flush timeout per call #6931 @LarryHu0217

(user-facing): LoggerProviderOptions.forceFlushTimeoutMillis has been removed; pass timeoutMillis to LoggerProvider.forceFlush() instead.

feat(instrumentation-http)!: emit only stable HTTP semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes HTTP attribute or metric emission — old (v1.7.0) and duplicate (http/http/dup) semconv outputs have been removed. #6819 @maryliag

feat(instrumentation-fetch)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-xml-http-request)!: emit only stable HTTP semantic conventions. The semconvStabilityOptIn instrumentation config option has been removed; old (v1.7.0) and duplicate semconv outputs are no longer emitted. #6819 @maryliag

feat(instrumentation-grpc)!: emit only stable network semantic conventions. The OTEL_SEMCONV_STABILITY_OPT_IN environment variable no longer changes attribute emission — net.peer.name and net.peer.port (old) are no longer set; only server.address and server.port (stable). #6819 @maryliag

🚀 Features

feat(sdk-logs): allow modifying ReadWriteLogRecord properties (including hrTime, hrTimeObserved, and spanContext) in accordance with the OpenTelemetry Logs specification #6923 @Babul422

feat(sdk-node): emit a deprecation warning when the JaegerPropagator is selected via OTEL_PROPAGATORS or declarative config; use tracecontext instead. @pichlermarc

feat(instrumentation-http): set error.type to status code in metrics for error requests. #6919 @raphael-theriault-swi

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-node from 2.9.0 to 2.10.0

Release notes

Sourced from @opentelemetry/sdk-trace-node's releases.

v2.10.0

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Changelog

Sourced from @opentelemetry/sdk-trace-node's changelog.

2.10.0

🚀 Features

feat(sdk-logs): implement log processor metrics #6554 @anuraaga

feat(otlp-exporter): implement exporter metrics #6480 @anuraaga

feat(propagator-jaeger): Notice: The @opentelemetry/propagator-jaeger package will be removed in SDK 3.x, planned for approximately September 2026. @pichlermarc

The Jaeger propagator has been deprecated by the OpenTelemetry specification in favor of W3CTraceContextPropagator. This package will be removed in a future release.

🐛 Bug Fixes

fix(sdk-trace): reject SimpleSpanProcessor.forceFlush() when a pending export fails #6771 @LarryHu0217

fix(sdk-trace): include trace IDs at the ratio 1 upper bound in TraceIdRatioBasedSampler #6890 @LarryHu0217

🏠 Internal

chore: build on Node 26 in CI #6887 @overbalance

chore: bump to typescript@5.2.2 @pichlermarc

Commits

76fa6b5 chore: prepare next release (#6942)
3787896 chore(deps): update dependency webpack-cli to v7.2.1 (#6934)
be5f757 fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)
f6d8fbe chore(deps): lock file maintenance (#6559)
9612732 chore: remove examples/dice from workspaces (#6937)
7107906 chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...
a7e5d11 chore(deps): update dependency webpack to v5.108.4 (#6933)
af7a82d chore(deps): update dependency msw to v2.15.0 (#6831)
b9f57c6 chore(deps): update dependency @types/webpack-env to v1.18.8 (#6877)
cbb4abf chore(deps): update ubuntu docker tag to v26 (#6635)
Additional commits viewable in compare view

Updates @prisma/instrumentation from 7.8.0 to 7.9.0

Release notes

Sourced from @prisma/instrumentation's releases.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:
# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab
2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):
echo 'source <(tab pnpm zsh)'  >> ~/.zshrc            # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc           # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish  # fish
tab pnpm powershell > ~/.tab-pnpm.ps1                 # PowerShell (then dot-source it from $PROFILE)
@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @AmirSa12 (#28351) — thank you!

prisma.mp4

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.
npx prisma@latest init
A safer default around destructive commands (#29684, #29691, #29713)

... (truncated)

Commits

See full diff in compare view

Updates @sentry/node from 10.66.0 to 10.68.0

Release notes

Sourced from @sentry/node's releases.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)

feat(deps): Bump axios from 1.16.0 to 1.18.0 (#22396)

ref(server-utils): Remove unneeded orchestrion config (#22384)

ref(server-utils): Small fastify cleanup (#22385)

test: Remove unnecessary test waits (#22383)

test(sveltekit-3): Fix import defineEnvVars from @sveltejs/kit/env (#22390)

test(v10/cloudflare): Add Vite-build support to the integration-test runner (#22539)

Work in this release was contributed by @psh4607 and @trinitiwowka. Thank you for your contributions!

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.68.0

feat(cloudflare): Add @sentry/cloudflare/vite orchestrion plugin (#21967)

feat(nestjs): Support WebSocket errors in SentryGlobalFilter (#22224)

feat(node,server-utils): Set cache.key on dataloader spans and capture redis delete operations as cache.remove (#22389)

feat(server-utils): Allow integrations to be part of marker (#22094)

feat(server-utils): Migrate FirebaseInstrumentation to orchestrion (#22141)

feat(server-utils): Warn when bundler config has instrumented module in external (#22379)

feat(v10): Add http.route attribute to http.server spans with parameterized routes (#22564)

feat(v10): Add url.full and url.path to http.server spans (#22533)

feat(v10/cloudflare): Auto-instrument Durable Object classes (#22541)

feat(v10/cloudflare): Auto-instrument the worker entry with withSentry (#22540)

feat(v10/cloudflare): Auto-instrument WorkerEntrypoint classes (#22543)

feat(v10/cloudflare): Auto-instrument Workflow classes (#22542)

feat(v10/cloudflare): Read wrangler config and resolve the Sentry options module (#22538)

feat(v10/core): Add instrumentStateGraph API (#22491)

feat(v10/core): Add url.full attribute to core fetch instrumentation (#22436)

feat(v10/core): Support filtering stackFrameVariables by variable name (#22526)

feat(v10/react-router): Make instrumentation API the default (#22525)

fix(cloudflare,deno,node): Align types of vercelai (#22343)

fix(core): Instrument Anthropic client in place instead of via a deep proxy (#22305)

fix(replay): Set text/javascript MIME type on compression worker Blob (#22377)

fix(sveltekit): Adapt frame rewriting for kit 3 (#22407)

fix(v10): Pin @apm-js-collab/code-transformer-bundler-plugins to 0.7.1 (#22497)

fix(v10/cloudflare): Import prismaIntegration from server-utils (#22535)

fix(v10/core): Avoid functionToStringIntegration causing infinite recursions (#22527)

fix(v10/core): Avoid propagating baggage: "undefined" when DSC is missing (#22440)

chore: Add external contributor to CHANGELOG.md (#22342)

chore: Add external contributor to CHANGELOG.md (#22405)

chore(deps): Bump axios from 1.16.0 to 1.18.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#22395)

chore(deps): Bump morgan from 1.10.0 to 1.11.0 (#22187)

chore(size-limit): weekly auto-bump (#22182)

ci(v10): Add v10 to build and license-compliance branch filters (#22499)...
Description has been truncated

Bumps the production-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.112.3` | `0.115.0` | | [@opentelemetry/auto-instrumentations-node](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/auto-instrumentations-node) | `0.78.0` | `0.79.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `2.9.0` | `2.10.0` | | [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` | | [@opentelemetry/sdk-trace-node](https://github.com/open-telemetry/opentelemetry-js) | `2.9.0` | `2.10.0` | | [@prisma/instrumentation](https://github.com/prisma/prisma/tree/HEAD/packages/instrumentation) | `7.8.0` | `7.9.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.68.0` | | [@sentry/profiling-node](https://github.com/getsentry/sentry-javascript) | `10.66.0` | `10.68.0` | | [@stellar/stellar-sdk](https://github.com/stellar/js-stellar-sdk) | `16.0.1` | `16.1.0` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.6.0` | `8.6.1` | Updates `@anthropic-ai/sdk` from 0.112.3 to 0.115.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.112.3...sdk-v0.115.0) Updates `@opentelemetry/auto-instrumentations-node` from 0.78.0 to 0.79.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/auto-instrumentations-node/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/auto-instrumentations-node-v0.79.0/packages/auto-instrumentations-node) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) Updates `@opentelemetry/resources` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0) Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0) Updates `@opentelemetry/sdk-trace-node` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0) Updates `@prisma/instrumentation` from 7.8.0 to 7.9.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/7.9.0/packages/instrumentation) Updates `@sentry/node` from 10.66.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.66.0...10.68.0) Updates `@sentry/profiling-node` from 10.66.0 to 10.68.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.68.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.66.0...10.68.0) Updates `@stellar/stellar-sdk` from 16.0.1 to 16.1.0 - [Release notes](https://github.com/stellar/js-stellar-sdk/releases) - [Changelog](https://github.com/stellar/js-stellar-sdk/blob/main/CHANGELOG.md) - [Commits](stellar/js-stellar-sdk@v16.0.1...v16.1.0) Updates `express-rate-limit` from 8.6.0 to 8.6.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.6.0...v8.6.1) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.115.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/auto-instrumentations-node" dependency-version: 0.79.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/resources" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.221.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@opentelemetry/sdk-trace-node" dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@prisma/instrumentation" dependency-version: 7.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/profiling-node" dependency-version: 10.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@stellar/stellar-sdk" dependency-version: 16.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-version: 8.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T06:20:52Z

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group with 11 updates - #304

chore(deps): bump the production-dependencies group with 11 updates#304
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-dbd57cc3db

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

sdk: v0.115.0

0.115.0 (2026-07-24)

Features

Bug Fixes

sdk: v0.114.0

0.114.0 (2026-07-23)

Features

sdk: v0.113.0

0.113.0 (2026-07-22)

Features

sdk: v0.112.5

0.112.5 (2026-07-21)

Chores

sdk: v0.112.4

0.112.4 (2026-07-20)

Bug Fixes

0.115.0 (2026-07-24)

Features

Bug Fixes

0.114.0 (2026-07-23)

Features

0.113.0 (2026-07-22)

Features

0.112.5 (2026-07-21)

Chores

0.112.4 (2026-07-20)

Bug Fixes

Chores

auto-instrumentations-node: v0.79.0

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

0.79.0 (2026-07-23)

Features

Bug Fixes

Dependencies

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.10.0

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

experimental/v0.221.0

0.221.0

💥 Breaking Changes

🚀 Features

v2.10.0

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.10.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

7.9.0

Highlights

ORM

Tab completions for the Prisma CLI

Prisma ORM, ready for AI agents

10.68.0

Bundle size 📦

10.68.0

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Labels

Uh oh!

Reviewers

Assignees