fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #255 · wolfstar-project/wolfstar

renovate · 2026-09-13T00:48:27Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@commitlint/cli (source)	`^21.2.2` → `^21.2.3`	devDependencies	patch
@commitlint/config-conventional (source)	`^21.2.2` → `^21.2.3`	devDependencies	patch
@sentry/node (source)	`^10.73.0` → `^10.76.1`	dependencies	minor	`10.76.2`
@types/ws (source)	`^8.18.1` → `^8.18.2`	devDependencies	patch
@vitest/coverage-v8 (source)	`^5.0.0` → `^5.0.3`	devDependencies	patch
evlog (source)	`^2.28.1` → `^2.30.0`	dependencies	minor	`2.30.1`
lint-staged	`^17.5.0` → `^17.6.0`	devDependencies	minor
oxfmt (source)	`^0.66.0` → `^0.72.0`	devDependencies	minor
oxlint (source)	`1.78.0` → `1.87.0`	devDependencies	minor
pg (source)	`^8.23.0` → `^8.23.1`	dependencies	patch
pnpm (source)	`12.3.4` → `12.10.0`	packageManager	minor	`12.10.1`
prettier (source)	`^3.9.6` → `^3.9.9`	devDependencies	patch
pullfrog/pullfrog	`v0.1.82` → `v0.1.95`	action	patch	`v0.1.98` (+1)
taze	`^21.1.0` → `^21.3.0`	devDependencies	minor
vitest (source)	`^5.0.0` → `^5.0.3`	devDependencies	patch

Release Notes

conventional-changelog/commitlint (@commitlint/cli)

`v21.2.3`

Compare Source

Bug Fixes

lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)

conventional-changelog/commitlint (@commitlint/config-conventional)

`v21.2.3`

Compare Source

Bug Fixes

rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)

getsentry/sentry-javascript (@sentry/node)

`v10.76.1`

Compare Source

chore(v10/deps): Bump rrweb to 2.44.1 (#25101)
fix(v10/browser-utils): Handle NS_ERROR_NOT_INITIALIZED from setTimeout in Firefox (#25051)
fix(v10/feedback): Correct overlapping screenshot annotations and drag dimming (#25046)
fix(v10/nextjs): Include basePath in request url of Pages Router errors (#25064)
fix(v10/nuxt): Do not inject debug IDs into the SSR build (#25094)
fix(v10/sveltekit): Export consoleLoggingIntegration from worker entry (#25063)
fix(v10/sveltekit): Resolve @opentelemetry/api via the SDK on SvelteKit 3 (#25105)
fix(v10/vue): Share one root render span debounce timer across components (#24887)

Internal Changes

test(v10/e2e): Backport CI fixes for cloudflare and sveltekit-3 e2e tests (#25102)
test(v10/nuxt): Wait for hydration instead of networkidle in dev-mode (#25103)

Bundle size 📦

Path	Size
@sentry/browser	27.56 KB
@sentry/browser - with treeshaking flags	26.04 KB
@sentry/browser (incl. Tracing)	46.02 KB
@sentry/browser (incl. Tracing + Span Streaming)	47.77 KB
@sentry/browser (incl. Tracing, Profiling)	50.67 KB
@sentry/browser (incl. Tracing, Replay)	84.51 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	74.35 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	89.12 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	101.46 KB
@sentry/browser (incl. Feedback)	44.33 KB
@sentry/browser (incl. sendFeedback)	32.25 KB
@sentry/browser (incl. FeedbackAsync)	37.27 KB
@sentry/browser (incl. Metrics)	28.62 KB
@sentry/browser (incl. Logs)	28.84 KB
@sentry/browser (incl. Metrics & Logs)	29.52 KB
@sentry/react	29.32 KB
@sentry/react (incl. Tracing)	48.28 KB
@sentry/vue	33.24 KB
@sentry/vue (incl. Tracing)	48.34 KB
@sentry/svelte	27.58 KB
CDN Bundle	29.87 KB
CDN Bundle (incl. Tracing)	47.92 KB
CDN Bundle (incl. Logs, Metrics)	31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.91 KB
CDN Bundle (incl. Tracing, Replay)	84.72 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.97 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	90.4 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	91.64 KB
CDN Bundle - uncompressed	88.83 KB
CDN Bundle (incl. Tracing) - uncompressed	144.49 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	93.43 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	148.38 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	215.84 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	261.5 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	265.37 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	274.88 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	278.74 KB
@sentry/nextjs (client)	50.74 KB
@sentry/sveltekit (client)	46.46 KB
@sentry/core/server	79.23 KB
@sentry/core/browser	65.7 KB
@sentry/node-core	62.36 KB
@sentry/node	123.6 KB
@sentry/node (incl. diagnostics channel injection)	166.71 KB
@sentry/node/import (ESM hook with diagnostics-channel injection)	166 B
@sentry/node/light	50.75 KB
@sentry/node - without tracing	73.85 KB
@sentry/aws-serverless	82.82 KB
@sentry/cloudflare (withSentry) - minified	199.86 KB
@sentry/cloudflare (withSentry)	492.78 KB

`v10.76.0`

Compare Source

feat(v10/vue,nuxt): Record default UI spans without Options API (mixins) (#24885)
fix(v10/aws-serverless): Keep Lambda extension polling past 300s (#24828)
fix(v10/deno): Flush buffered metrics and logs before process exit (#24938)
fix(v10/nitro): Capture errors only through the Nitro error hook (#24963)
fix(v10/node-core): Flush buffered metrics on process exit (#24937)
fix(v10/react-router): Avoid duplicating Vite config arrays (#24936)
fix(v10/tanstackstart-react): Avoid duplicating Vite config arrays (#24935)

Internal Changes

test(v10/effect): Make effect/http stable (#24942)

Bundle size 📦

Path	Size
@sentry/browser	27.56 KB
@sentry/browser - with treeshaking flags	26.04 KB
@sentry/browser (incl. Tracing)	46.02 KB
@sentry/browser (incl. Tracing + Span Streaming)	47.77 KB
@sentry/browser (incl. Tracing, Profiling)	50.67 KB
@sentry/browser (incl. Tracing, Replay)	84.38 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	74.28 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	89 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	101.33 KB
@sentry/browser (incl. Feedback)	44.33 KB
@sentry/browser (incl. sendFeedback)	32.25 KB
@sentry/browser (incl. FeedbackAsync)	37.27 KB
@sentry/browser (incl. Metrics)	28.62 KB
@sentry/browser (incl. Logs)	28.84 KB
@sentry/browser (incl. Metrics & Logs)	29.52 KB
@sentry/react	29.32 KB
@sentry/react (incl. Tracing)	48.28 KB
@sentry/vue	33.2 KB
@sentry/vue (incl. Tracing)	48.3 KB
@sentry/svelte	27.58 KB
CDN Bundle	29.87 KB
CDN Bundle (incl. Tracing)	47.92 KB
CDN Bundle (incl. Logs, Metrics)	31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.82 KB
CDN Bundle (incl. Tracing, Replay)	84.64 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.87 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	90.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	91.55 KB
CDN Bundle - uncompressed	88.83 KB
CDN Bundle (incl. Tracing) - uncompressed	144.49 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	93.43 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	148.38 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	215.46 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	261.12 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	264.99 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	274.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	278.36 KB
@sentry/nextjs (client)	50.74 KB
@sentry/sveltekit (client)	46.46 KB
@sentry/core/server	79.23 KB
@sentry/core/browser	65.7 KB
@sentry/node-core	62.36 KB
@sentry/node	123.6 KB
@sentry/node (incl. diagnostics channel injection)	166.71 KB
@sentry/node/import (ESM hook with diagnostics-channel injection)	166 B
@sentry/node/light	50.75 KB
@sentry/node - without tracing	73.85 KB
@sentry/aws-serverless	82.82 KB
@sentry/cloudflare (withSentry) - minified	199.86 KB
@sentry/cloudflare (withSentry)	492.78 KB

`v10.75.3`

Compare Source

fix(v10/tanstackstart-react): Reject non-POST requests to the managed tunnel route (#24617)

Internal Changes

chore(v10/bundler-plugins): move traces sample rate from 1.0 to 0.3 (#24646)
chore(v10/publish): Tag all packages as v10 (#24619)

Bundle size 📦

Path	Size
@sentry/browser	27.56 KB
@sentry/browser - with treeshaking flags	26.04 KB
@sentry/browser (incl. Tracing)	46.02 KB
@sentry/browser (incl. Tracing + Span Streaming)	47.77 KB
@sentry/browser (incl. Tracing, Profiling)	50.67 KB
@sentry/browser (incl. Tracing, Replay)	84.38 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	74.28 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	89 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	101.33 KB
@sentry/browser (incl. Feedback)	44.33 KB
@sentry/browser (incl. sendFeedback)	32.25 KB
@sentry/browser (incl. FeedbackAsync)	37.27 KB
@sentry/browser (incl. Metrics)	28.63 KB
@sentry/browser (incl. Logs)	28.84 KB
@sentry/browser (incl. Metrics & Logs)	29.52 KB
@sentry/react	29.32 KB
@sentry/react (incl. Tracing)	48.28 KB
@sentry/vue	32.88 KB
@sentry/vue (incl. Tracing)	47.98 KB
@sentry/svelte	27.58 KB
CDN Bundle	29.87 KB
CDN Bundle (incl. Tracing)	47.92 KB
CDN Bundle (incl. Logs, Metrics)	31.41 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	49.21 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.82 KB
CDN Bundle (incl. Tracing, Replay)	84.64 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.87 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	90.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	91.55 KB
CDN Bundle - uncompressed	88.83 KB
CDN Bundle (incl. Tracing) - uncompressed	144.49 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	93.43 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	148.38 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	215.46 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	261.12 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	264.99 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	274.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	278.36 KB
@sentry/nextjs (client)	50.75 KB
@sentry/sveltekit (client)	46.46 KB
@sentry/core/server	79.23 KB
@sentry/core/browser	65.7 KB
@sentry/node-core	62.33 KB
@sentry/node	123.57 KB
@sentry/node (incl. diagnostics channel injection)	166.68 KB
@sentry/node/import (ESM hook with diagnostics-channel injection)	166 B
@sentry/node/light	50.72 KB
@sentry/node - without tracing	73.83 KB
@sentry/aws-serverless	82.79 KB
@sentry/cloudflare (withSentry) - minified	199.86 KB
@sentry/cloudflare (withSentry)	492.78 KB

`v10.75.2`

Compare Source

fix(v10/cloudflare): Enforce flush timeout across Workflow lifecycle (#24582)
fix(v10/core): Apply dataCollection.urlQueryParams to collected URLs and query strings (#24572)
fix(v10/nextjs): Align tunnel request matching in middleware with tunnel rewrite (#24565)
fix(v10/node): Stop leaking unhandled rejections on aborted Vercel AI streams (#24563)

`v10.75.1`

Compare Source

fix(v10/cloudflare): Capture telemetry from untraced Durable Object RPC calls (#24512)
fix(v10/cloudflare): Instrument namespaces returned by jurisdiction() (#24513)
fix(v10/hono): Allow @cloudflare/workers-types v5 as peer dependency (#24500)
fix(v10/nextjs): Resolve Next.js version relative to the SDK when cwd differs (#24475)

`v10.75.0`

Compare Source

Important Changes

feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

vitest-dev/vitest (@vitest/coverage-v8)

`v5.0.3`

Compare Source

🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11218 (5dbeb)
Don't print an interceptor warning in browser mode - by @sheremet-va in #11377 (15cc0)
Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11219 (b2458)
Scope cache key generators to projects - by @ecoyoung in #11281 and #11301 (92ba7)
browser:
- Delay server listen until tests start running - by @sheremet-va in #11366 (7d8ed)
- Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in #11361 and #11362 (1c388)
- Keep config of browser-consumed environments - by @kasperpeulen and Claude in #11378 (aafc0)
- Ignore page crash while cancelling - by @sheremet-va in #11386 (7c367)
- toMatchScreenshot uses wrong reference on retried tests - by @macarie in #11393 (c22ab)
cache:
- Revalidate imports of cached modules - by @sheremet-va in #11381 (38f98)
deps:
- Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in #11403 (f6c9a)
expect:
- Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in #11401 (3e794)
jsdom:
- Support Blob on jsdom 30.1 - by @sheremet-va in #11379 (6c49b)
pool:
- Preserve unique pool ids when groupOrder is set - by @mtorp in #11392 (50312)
ui:
- Split-pane handle overlapping iframe - by @macarie in #11221 (f91db)
vitest:
- Remove root temp dir on close - by @abhinav-phi in #11248 (7c711)
vm:
- Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #11329 and #11360 (caf28)
- Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in #11395 (346d3)

View changes on GitHub

`v5.0.2`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #11343 (0b792)
detect-async-leaks:
- Ignore process.stdio handles - by @AriPerkkio in #11333 (0fd6b)
expect:
- Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #11100 (42523)
jsdom:
- Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in #11295 (d1c3e)
reporter:
- agent to respect --silent - by @Raj4478 and @AriPerkkio in #11271 (5b95e)
reporters:
- Handle concurrent createReport calls - by @7rulnik in #11278 (e8e55)
- hanging-process to use ESM entrypoint - by @AriPerkkio in #11316 (4e91e)
spy:
- Fix stack overflow when spying Set.prototype.add - by @fengmk2 in #11299 (a0a93)
ui:
- Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11066 (f8819)

View changes on GitHub

`v5.0.1`

Compare Source

🚀 Features

ui:
- Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in #11189 (5dc4b)
- Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11190 (376dc)

🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in #11145 and #11146 (6108b)
Keep parse error details in static collection - by @hamed-bavar in #11150 and #11151 (7c818)
Avoid recursive prototype in automocking - by @sheremet-va in #11195 (99fc5)
Prevent false Vitest import resolution - by @sheremet-va in #11196 (b426c)
Keep metadata file when clearing the cache - by @sheremet-va in #11199 (73614)
Correct typos in error message and comments - by @shinji00222 and Shinji in #11187 (115c3)
Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in #11175 (498fb)
Share the server on self-referencing extends - by @sheremet-va in #11034 (23dda)
Warn when deprecated deps.optimizer.web is used - by @im10furry in #11214 (2ce29)
browser:
- Avoid double quotes in config.define - by @sheremet-va in #11198 (972e2)
doctor:
- Measure vm pools for custom environments - by @sheremet-va in #11212 (91ab1)
expect:
- Correct return value in toMatchAriaSnapshot - by @sheremet-va in #11208 (c119b)
fakeTimers:
- Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in #11261 (a47d7)
snapshot:
- Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11157 and #11158 (17e2b)
types:
- Make public declarations self-contained - by @ZoeySigel in #11141 (45546)
ui:
- Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in #11260 (0a712)
- Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11125 (05982)
utils:
- Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in #11215 (4944c)

View changes on GitHub

evloghq/evlog (evlog)

`v2.30.0`

Compare Source

What's Changed

Features 🚀

feat(evi): rebuild the vercel integration on a scoped mcp connection by @evlogai[bot] in #712
feat(evi): move memory to eve's native file memory by @evlogai[bot] in #716
feat(evi): add git__checkout to clone any installed repository into the sandbox by @HugoRCD in #723
feat(evi): carry the published skills and an adopt skill for evlog work by @HugoRCD in #726
feat(evi): add ELI5 explanations to technical replies by @HugoRCD in #727
feat(eve): turn-scoped enrichTurn on defineEvlogHook by @evlogai[bot] in #731
feat(evi): add repository simplification sweeps by @HugoRCD in #725
feat(core): add drop-in default export and warn on uninitialized production by @evlogai[bot] in #743
feat(core): add fatal and trace log levels by @evlogai[bot] in #742
feat(bench): add bundled-size comparison vs consola/pino/winston by @evlogai[bot] in #740
feat(cli): make init put missing drain variables in the manual steps by @evlogai[bot] in #747
feat(core): support printf-style interpolation in log messages by @evlogai[bot] in #741
feat(otlp): align exporter with the OTel spec by @HugoRCD in #748
feat(otlp): add http/protobuf protocol by @HugoRCD in #750
feat: ship the evlog executable and derive CLI framework support from one registry by @HugoRCD in #754
feat: add @evlog/signals by @HugoRCD in #764

Bug Fixes 🐞

fix: scan evi's docs and skills trees in content-lint by @evlogai[bot] in #706
fix(evi): quote authored skill descriptions that broke eve build by @evlogai[bot] in #707
fix(evi): default the write token to the vercel/mcp connector by @evlogai[bot] in #714
fix(evi): register a pointer skill for the write-evlog-content doctrine by @evlogai[bot] in [#715](https:/

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 12pm on Sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coldtea-pr-lens · 2026-09-13T00:48:31Z

◈ PR Lens

Note

This drawing shows f49e178, and the branch has new commits since. Tick Redraw to draw the latest one

Redraw

🟢 +0 new · 🟠 ~2 changed · 🔴 -0 removed · 0 flows · 5 files · commit f49e178

Architecture

2 components touched across 6 lanes.

Open the interactive canvas

Data flow

No data-flow sequence changed in this PR.

View

Architecture lens
Data flow lens
Expand every detail

Tip

The diagrams are links. Click one to open it on the canvas, then press W or click play to walk through the change.

🪧 More tips

Run npx skills add coldteadotai/pr-lens, then tell your coding agent: "Diagram the change you just made with PR Lens and attach it to the pull request."
Run npx @coldtea/pr-lens-cli analyze --base origin/main on a branch, then npx @coldtea/pr-lens-cli render .pr-lens/graph.json. Same lenses, your own model key, before the pull request exists.
Untick Architecture lens or Data flow lens under View to hide a diagram, or tick Expand every detail to open every section. The comment redraws in a few seconds.
Click the link under each diagram to open it on a canvas you can zoom, pan and step through.
Open a diagram on the canvas, then press W or click play to walk through the change one step at a time.
The CLI's render reads .github/pr-lens.yml and applies your renames, exclusions and lane pins at draw time.
Set github.comment.collapsed: true in .github/pr-lens.yml to fold the comment behind one View architecture and data flow row. Drawing still runs on every push.
Add .github/workflows/pr-lens.yml with coldteadotai/pr-lens/packages/action@v0 and your model provider's key as its api-key to run PR Lens from your own CI. Any /chat/completions endpoint works.
Push a commit and the comment redraws for the new head. A slow older run never overwrites a newer one.
Switch GitHub to dark mode and the diagrams follow. The moving dots are this pull request's data in motion.

Thanks for using PR Lens! It's built by Coldtea, free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

socket-security · 2026-09-13T00:48:49Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@commitlint/cli@21.2.2 ⏵ 21.2.3			⁺²
@types/ws@8.18.1 ⏵ 8.18.2	⁺¹	⁺¹
@vitest/coverage-v8@5.0.0 ⏵ 5.0.3			⁺¹
vitest@5.0.0 ⏵ 5.0.3		⁺¹
oxfmt@0.66.0 ⏵ 0.72.0	⁺⁸	⁺¹	⁺¹
oxlint@1.78.0 ⏵ 1.87.0		⁺¹	^-1
pg@8.23.0 ⏵ 8.23.1	⁺¹	⁺¹	⁺²
lint-staged@17.5.0 ⏵ 17.6.0	⁺¹		⁺¹
@sentry/node@10.74.0 ⏵ 10.76.2	⁺¹	⁺¹	⁺¹
@commitlint/config-conventional@21.2.2 ⏵ 21.2.3			⁺²
evlog@2.28.1 ⏵ 2.30.1
taze@21.1.0 ⏵ 21.3.0	⁺¹
prettier@3.9.6 ⏵ 3.9.9		⁺¹

View full report

macroscopeapp · 2026-09-13T00:49:01Z

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This is a narrowly scoped Renovate dependency update confined to ignored package metadata, with no application-source changes indicated. Human review is still recommended because both changed files are explicitly owned by another maintainer and dependency updates can affect installed runtime libraries and tooling.

Notes:

Macroscope's correctness review did not run, so approvability was decided on eligibility alone.

^{You can add or adjust custom eligibility rules. Learn more.}

renovate Bot added the dependencies label Sep 13, 2026

renovate Bot requested a review from RedStar071 as a code owner September 13, 2026 00:48

renovate Bot added the dependencies label Sep 13, 2026

github-project-automation Bot added this to Wolfstar Sep 13, 2026

github-project-automation Bot moved this to Todo in Wolfstar Sep 13, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from cac6417 to ff962be Compare September 14, 2026 01:54

macroscopeapp Bot previously approved these changes Sep 14, 2026

View reviewed changes

github-project-automation Bot moved this from Todo to Review Approved in Wolfstar Sep 14, 2026

renovate Bot dismissed macroscopeapp[bot]’s stale review via 74d0ace September 17, 2026 19:12

renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 84d3004 to ba0cb53 Compare September 23, 2026 18:12

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1232a80 to dad4d53 Compare September 26, 2026 11:44

RedStar071 previously approved these changes Sep 26, 2026

View reviewed changes

renovate Bot dismissed RedStar071’s stale review via 3d7e168 September 26, 2026 16:56

renovate Bot force-pushed the renovate/all-minor-patch branch from dad4d53 to 3d7e168 Compare September 26, 2026 16:56

renovate Bot dismissed RedStar071’s stale review via 7e5d5ec September 28, 2026 11:26

renovate Bot force-pushed the renovate/all-minor-patch branch 16 times, most recently from c8369d2 to 1c6f678 Compare October 5, 2026 04:41

renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from c461505 to 0646101 Compare October 9, 2026 12:59

fix(deps): update all non-major dependencies

8403ecd

renovate Bot force-pushed the renovate/all-minor-patch branch from 0646101 to 8403ecd Compare October 9, 2026 16:51

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #255

fix(deps): update all non-major dependencies#255
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 13, 2026 •

edited

Loading

Uh oh!

coldtea-pr-lens Bot commented Sep 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 13, 2026 •

edited

Loading

Uh oh!

macroscopeapp Bot commented Sep 13, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bundle size 📦

Bundle size 📦

Bundle size 📦

Important Changes

Other Changes

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

What's Changed

Features 🚀

Bug Fixes 🐞

Configuration

Uh oh!

coldtea-pr-lens Bot commented Sep 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

◈ PR Lens

Uh oh!

socket-security Bot commented Sep 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

macroscopeapp Bot commented Sep 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Approvability

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Sep 13, 2026 •

edited

Loading

coldtea-pr-lens Bot commented Sep 13, 2026 •

edited

Loading

socket-security Bot commented Sep 13, 2026 •

edited

Loading

macroscopeapp Bot commented Sep 13, 2026 •

edited

Loading