chore(deps-dev): bump the minor-and-patch group with 7 updates

[dependabot]

Bumps the minor-and-patch group with 7 updates:

Package	From	To
@cloudflare/workers-types	4.20260624.1	4.20260629.1
@sentry/core	10.60.0	10.62.0
@typescript-eslint/eslint-plugin	8.62.0	8.62.1
@typescript-eslint/parser	8.62.0	8.62.1
eslint	10.5.0	10.6.0
prettier	3.8.4	3.9.3
wrangler	4.104.0	4.105.0

Updates @cloudflare/workers-types from 4.20260624.1 to 4.20260629.1

Commits

• See full diff in compare view

Updates @sentry/core from 10.60.0 to 10.62.0

Release notes

Sourced from @​sentry/core's releases.

10.62.0

Important Changes

• feat(server-runtimes): Add v7 support for vercelAiIntegration (#21613)

  The vercelAiIntegration now supports v7 of the ai package. Note that v7 is not yet supported on Cloudflare.

Other Changes

• fix(node): Avoid failing at runtime if tracingChannel is not available (#21783)
• fix(sveltekit): Avoid capturing preloaded 400 errors on client (#21784)

Work in this release was contributed by @​hyunbinseo. Thank you for your contribution!

• chore(github): Update tracked packages (#21789)
• feat(core): Add spanKindToName helper for reverse span-kind lookup (#21780)
• ref(aws-serverless): Streamline AwsLambda instrumentation (#21758)
• ref(node): Fix server-utils name for VercelAI integration (#21809)
• ref(node): Streamline amqplib instrumentation (#21753)
• ref(node): Streamline Firebase instrumentation (#21748)
• test: Pin webpack to 5.107.0 (#21781)
• test(e2e): Add no-browser-session lighthouse e2e test mode (#21787)
• test(e2e): Add more test modes, pre-init and element timing (#21760)

Bundle size 📦

Path	Size
@​sentry/browser	26.83 KB
@​sentry/browser - with treeshaking flags	25.3 KB
@​sentry/browser (incl. Tracing)	44.89 KB
@​sentry/browser (incl. Tracing + Span Streaming)	46.6 KB
@​sentry/browser (incl. Tracing, Profiling)	49.57 KB
@​sentry/browser (incl. Tracing, Replay)	83.22 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.06 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	87.8 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.17 KB
@​sentry/browser (incl. Feedback)	43.61 KB
@​sentry/browser (incl. sendFeedback)	31.5 KB
@​sentry/browser (incl. FeedbackAsync)	36.52 KB
@​sentry/browser (incl. Metrics)	27.87 KB
@​sentry/browser (incl. Logs)	28.11 KB
@​sentry/browser (incl. Metrics & Logs)	28.78 KB
@​sentry/react	28.59 KB
@​sentry/react (incl. Tracing)	47.15 KB

... (truncated)

Changelog

Sourced from @​sentry/core's changelog.

10.62.0

Important Changes

• feat(server-runtimes): Add v7 support for vercelAiIntegration (#21613)

  The vercelAiIntegration now supports v7 of the ai package. Note that v7 is not yet supported on Cloudflare.

Other Changes

• fix(node): Avoid failing at runtime if tracingChannel is not available (#21783)
• fix(sveltekit): Avoid capturing preloaded 400 errors on client (#21784)

Work in this release was contributed by @​hyunbinseo. Thank you for your contribution!

• chore(github): Update tracked packages (#21789)
• feat(core): Add spanKindToName helper for reverse span-kind lookup (#21780)
• ref(aws-serverless): Streamline AwsLambda instrumentation (#21758)
• ref(node): Fix server-utils name for VercelAI integration (#21809)
• ref(node): Streamline amqplib instrumentation (#21753)
• ref(node): Streamline Firebase instrumentation (#21748)
• test: Pin webpack to 5.107.0 (#21781)
• test(e2e): Add no-browser-session lighthouse e2e test mode (#21787)
• test(e2e): Add more test modes, pre-init and element timing (#21760)

10.61.0

Important Changes

• feat(core): Enable streamGenAiSpans by default (#21732)

  The SDK now extracts all gen_ai spans out of a transaction and sends them as v2 envelope items by default. This prevents gen_ai spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated by default. Set enableTruncation: true on the respective AI integration to re-enable truncation. To keep the previous behavior, set streamGenAiSpans: false.

  Self-hosted Sentry users should opt out with streamGenAiSpans: false, since streamed gen_ai spans may not be ingested by their Sentry instance.

Other Changes

• feat(cloudflare): Add batch, exec, and withSession D1 instrumentation (#21292)
• feat(cloudflare): Instrument SQL API in sqlite durable objects (#21656)
• feat(core): Add db.query.summary functionality (#21670)
• feat(core): Add top-level Sentry.setAttribute(s) APIs (#21705)
• fix(hono): Name transactions after the matched route handler (#21700)
• fix(react-router): Bump peerDependencies for react-router 8 (#21762)
• fix(replays): Record replay trace_ids with span streaming (#21714)

... (truncated)

Commits

• 1fc539e release: 10.62.0
• 5ee7977 Merge pull request #21792 from getsentry/prepare-release/10.62.0
• f36645c meta(changelog): Update changelog for 10.62.0
• e562f94 ref(node): Streamline amqplib instrumentation (#21753)
• e1312df ref(node): Fix server-utils name for VercelAI integration (#21809)
• fc29e61 ref(node): Streamline Firebase instrumentation (#21748)
• 2081179 ref(cloudflare): Revert vercelAi change (#21793)
• 2309fb5 chore(github): Update tracked packages (#21789)
• 3bfeb64 feat(server-runtimes): Add v7 support for vercelAiIntegration (#21613)
• a15e2a8 fix(sveltekit): Avoid capturing preloaded 400 errors on client (#21784)
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.62.0 to 8.62.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.62.1 (2026-06-29)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 3ea32f4 chore(release): publish 8.62.1
• 4ecca6d fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...
• f3a7ec7 chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...
• 301f350 fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...
• ebce2d4 fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...
• See full diff in compare view

Updates @typescript-eslint/parser from 8.62.0 to 8.62.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 3ea32f4 chore(release): publish 8.62.1
• See full diff in compare view

Updates eslint from 10.5.0 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
• f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

• 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
• bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
• 8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
• 5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
• 9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
• d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
• 2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
• 63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
• 7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
• 399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

• a83683d docs: Update README (GitHub Actions Bot)
• f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
• bea49f7 docs: Update README (GitHub Actions Bot)
• e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
• 8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
• 3eb3d9b docs: Update README (GitHub Actions Bot)
• c5bb59c docs: Update README (GitHub Actions Bot)
• eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

• 6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
• 3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
• c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
• a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
• 27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
• 865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
• 27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
• 970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
• b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
• 6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

Commits

• 5d12a04 10.6.0
• f7ca54b Build: changelog update for 10.6.0
• 6a42034 ci: run ecosystem tests on main branch (#20891)
• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
• 3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
• c3abfca chore: correct JSDoc param types in html formatter (#21018)
• a83683d docs: Update README
• a832320 ci: split ecosystem tests into separate jobs (#21001)
• 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
• bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
• Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.3

Release notes

Sourced from prettier's releases.

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

// Input
<!-- Input -->
{{ page.title
}} text
<!-- Prettier 3.9.1 -->
{{ page.title
text
<!-- Prettier 3.9.3 -->
{{ page.title
}} text

TypeScript: Allow decorators to be used with declare on class fields (#19492 by @​evoactivity)

Extensively used within the Ember ecosystem, decorators with declare on class fields will ignore the babel parser error and allow Prettier to format the code without breaking it.

// Input
export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
  @service declare server: ServerService;
}
// Prettier 3.9.1
// SyntaxError: Decorators can't be used with a declare field. (2:3)
//  1 | export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
//> 2 |   @​service declare server: ServerService;
//    |   ^
//  3 | }
// Prettier 3.9.3
export default class ProjectStatusComponent extends Component<ProjectStatusSig> {
@​service declare server: ServerService;
}

3.9.1

diff

... (truncated)

Commits

• 3732e1d Release 3.9.3
• a74a7b0 Allow decorators to be used with declare on class fields (#19492)
• bd9e11a Correct text identification in liquid syntax (#19489)
• 269eee3 Bump Prettier dependency to 3.9.1
• ec7ccd1 Clean changelog_unreleased
• c47654c Release 3.9.1
• 06159aa Fix bug in release script
• 4bc5ab4 Update file-entry-cache to 11.1.5 (#19483)
• b7fd58b Release @prettier/plugin-oxc@0.2.0 and @prettier/plugin-hermes@0.2.0
• 3006400 Revert changes in release script
• Additional commits viewable in compare view

Updates wrangler from 4.104.0 to 4.105.0

Release notes

Sourced from wrangler's releases.

wrangler@4.105.0

Minor Changes

• #14311 34e0cef Thanks @​sherryliu-lsy! - Add Google Artifact Registry support to containers registries configure

  wrangler containers registries configure now recognizes *-docker.pkg.dev (Google Artifact Registry) domains.

  • The Google service account email is the public credential, supplied with --gar-email. It must match the client_email in the service account key.
  • The service account JSON key is the private credential. It is provided via stdin (a file path, raw JSON, or base64) or an interactive prompt (a file path or base64) — never as a CLI flag, so it does not appear in shell history. The key is validated against --gar-email and stored base64-encoded.
  • Secret reuse inherits the existence-first flow: when the target Secrets Store secret already exists, it is reused by reference and the key is not required. In that case the email cannot be verified locally; it is validated against the key when images are pulled.

  <path-to-key>.json | npx wrangler@latest containers registries configure <region>-docker.pkg.dev --gar-email=<service-account-email> --secret-name=Google_Service_Account_JSON_Key

Patch Changes

• #14424 5f40dd5 Thanks @​MattieTK! - Bump am-i-vibing from 0.4.0 to 0.5.0

  This updates the agentic environment detection library to the latest version, which adds detection for the Pi coding agent (earendil-works/pi).

• #14406 3b743c1 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260623.1	1.20260625.1

• #14343 daa5389 Thanks @​th0m! - Use digest-pinned image references for Dockerfile container deploys

  Dockerfile-backed container deploys now use the pushed image digest when deploying the container application. This lets snapshot-enabled container apps pass Cloudchamber validation while keeping local, non-pushed builds and registry image URI deploys unchanged.

• #14394 8a5cf8c Thanks @​Partha-Shankar! - fix(d1): escape migrationsTableName and filenames in SQLite queries

  D1 migration commands in both wrangler and @cloudflare/vitest-pool-workers interpolated the migrationsTableName config value and migration filenames directly into SQL strings without any escaping. This meant:

  • A table name such as my"table would produce invalid SQL in CREATE TABLE, SELECT, and INSERT statements, and
  • A migration filename containing an apostrophe (e.g. what's-new.sql) would break the INSERT INTO ... VALUES ('...') statement appended after each migration in wrangler.

  Both identifiers are now properly escaped before interpolation: migrationsTableName is wrapped in double-quotes with internal double-quotes doubled (SQL-standard identifier quoting), and migration filenames used as string literals have their single-quotes doubled before insertion.

• Updated dependencies [3b743c1]:

  • miniflare@4.20260625.0

Commits

• 70d97d9 Version Packages (#14401)
• 5f40dd5 [wrangler] Bump am-i-vibing from 0.4.0 to 0.5.0 (#14424)
• 3b743c1 Bump workerd from 1.20260623.1 to 1.20260625.1 in the workerd-and-workers-typ...
• 10543c1 [wrangler] interpolate current date to fix brittle test (#14421)
• 76cc8d6 extremely minor refactor of versions upload/deploy validation (#14400)
• daa5389 Use digest-pinned images for Dockerfile container deploys (#14343)
• 34e0cef CC-7948 Update wrangler CLI to support GAR (#14311)
• 8a5cf8c [wrangler] fix(d1): escape migrationsTableName and filenames in SQLite querie...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.