Skip to content

meta(changelog): Update changelog for 10.42.0#19601

Merged
JPeer264 merged 11 commits intomasterfrom
prepare-release/10.42.0
Mar 3, 2026
Merged

meta(changelog): Update changelog for 10.42.0#19601
JPeer264 merged 11 commits intomasterfrom
prepare-release/10.42.0

Conversation

@JPeer264
Copy link
Member

@JPeer264 JPeer264 commented Mar 3, 2026

No description provided.

s1gr1d and others added 11 commits March 2, 2026 12:29
…ect as searchable attributes (#19534)

Aligns the Consola integration so object-first logs are structured and
fallback logs get template + parameters.

## Universal principle
- **Object-first** (first argument is a plain object): object keys
become log attributes, second argument (if string) is the message,
remaining arguments → sentry.message.parameter.{0, 1, 2, ...}.
- **Fallback** (first argument is not an object): message =
formatted(all args), args[1:] → sentry.message.template and
sentry.message.parameter.{0, 1, 2, ...} (same as console integration).


## Consola-specific behavior

- **Consola-merged**: For `consola.log({ message: "x", userId, action
})` Consola passes `args: ["x"]` and spreads the rest on the log object.
We detect this (single string in args + extra keys on logObj) and treat
it as one logical object: message = `args[0]`, attributes = extra keys.
- **Object-first** now applies to any plain object as first arg
(including objects with message or args keys), so e.g.
`consola.log.raw({ message: "raw-hello" })` produces attributes from the
object and an empty message.
- **Fallback** uses the same template/parameter pattern as the console
integration (no extraction of objects into top-level attributes; all
post-first args go into the formatted message and
`sentry.message.parameter.*`).

## Example
```ts
// Object-first
consola.log({ userId: 123, action: "login" }, "User logged in");
// → message: "User logged in", attributes: { userId: 123, action: "login" }

// With extra parameters
consola.log({ userId: 123 }, "User action", requestId, timestamp);
// → message: "User action", userId: 123, sentry.message.parameter.0: requestId, .1: timestamp

// Fallback (non-object first)
consola.log("Legacy log", { data: 1 }, 123);
// → message: "Legacy log {\"data\":1} 123", sentry.message.template: "Legacy log {} {}", sentry.message.parameter.0/1
```


Console String substitutions are not added as a template attribute
because parsing is too complicated on the client-side (see here:
#17703)

Closes #18593
[Gitflow] Merge master into develop
…ig` (#19464)

`vite:extendConfig` is deprecated, so source maps handling will be done
in a plugin which is added with `addVitePlugin` from Nuxt.

Also updated the existing tests so they can test the new plugin
functionality.

Closes #19345
Update lockfile to resolve fast-xml-parser@^4.4.1 (transitive via
@langchain/anthropic) to 4.5.4, which patches a critical entity encoding
bypass via regex injection in DOCTYPE entity names.

Fixes
https://github.com/getsentry/sentry-javascript/security/dependabot/1108

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Bumps
[@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit)
from 2.52.2 to 2.53.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/kit/releases"><code>@​sveltejs/kit</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​sveltejs/kit</code><a
href="https://github.com/2"><code>@​2</code></a>.53.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: prevent overlapping file metadata in remote functions
<code>form</code> (<a
href="https://github.com/sveltejs/kit/commit/faba869db3644077169bf5d7c6e41fd5f3d6c65e"><code>faba869</code></a>)</li>
</ul>
<h2><code>@​sveltejs/kit</code><a
href="https://github.com/2"><code>@​2</code></a>.53.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: server-render nested form value sets (<a
href="https://redirect.github.com/sveltejs/kit/pull/15378">#15378</a>)</p>
</li>
<li>
<p>fix: use deep partial types for form remote functions
<code>.value()</code> and <code>.set(...)</code> (<a
href="https://redirect.github.com/sveltejs/kit/pull/14837">#14837</a>)</p>
</li>
<li>
<p>fix: provide correct url info to remote functions (<a
href="https://redirect.github.com/sveltejs/kit/pull/15418">#15418</a>)</p>
</li>
<li>
<p>fix: allow optional types for remote query/command/prerender
functions (<a
href="https://redirect.github.com/sveltejs/kit/pull/15293">#15293</a>)</p>
</li>
<li>
<p>fix: allow commands in more places (<a
href="https://redirect.github.com/sveltejs/kit/pull/15288">#15288</a>)</p>
</li>
</ul>
<h2><code>@​sveltejs/kit</code><a
href="https://github.com/2"><code>@​2</code></a>.53.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: address warning about <code>inlineDynamicImports</code> when
using Vite 8 (<a
href="https://redirect.github.com/sveltejs/kit/pull/15403">#15403</a>)</li>
</ul>
<h2><code>@​sveltejs/kit</code><a
href="https://github.com/2"><code>@​2</code></a>.53.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>feat: support Vite 8 (<a
href="https://redirect.github.com/sveltejs/kit/pull/15024">#15024</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: remove event listeners on form attachment cleanup (<a
href="https://redirect.github.com/sveltejs/kit/pull/15286">#15286</a>)</p>
</li>
<li>
<p>fix: apply queries refreshed in a form remote function when a
redirect is thrown (<a
href="https://redirect.github.com/sveltejs/kit/pull/15362">#15362</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md"><code>@​sveltejs/kit</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>2.53.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: prevent overlapping file metadata in remote functions
<code>form</code> (<a
href="https://github.com/sveltejs/kit/commit/faba869db3644077169bf5d7c6e41fd5f3d6c65e"><code>faba869</code></a>)</li>
</ul>
<h2>2.53.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: server-render nested form value sets (<a
href="https://redirect.github.com/sveltejs/kit/pull/15378">#15378</a>)</p>
</li>
<li>
<p>fix: use deep partial types for form remote functions
<code>.value()</code> and <code>.set(...)</code> (<a
href="https://redirect.github.com/sveltejs/kit/pull/14837">#14837</a>)</p>
</li>
<li>
<p>fix: provide correct url info to remote functions (<a
href="https://redirect.github.com/sveltejs/kit/pull/15418">#15418</a>)</p>
</li>
<li>
<p>fix: allow optional types for remote query/command/prerender
functions (<a
href="https://redirect.github.com/sveltejs/kit/pull/15293">#15293</a>)</p>
</li>
<li>
<p>fix: allow commands in more places (<a
href="https://redirect.github.com/sveltejs/kit/pull/15288">#15288</a>)</p>
</li>
</ul>
<h2>2.53.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: address warning about <code>inlineDynamicImports</code> when
using Vite 8 (<a
href="https://redirect.github.com/sveltejs/kit/pull/15403">#15403</a>)</li>
</ul>
<h2>2.53.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>feat: support Vite 8 (<a
href="https://redirect.github.com/sveltejs/kit/pull/15024">#15024</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: remove event listeners on form attachment cleanup (<a
href="https://redirect.github.com/sveltejs/kit/pull/15286">#15286</a>)</p>
</li>
<li>
<p>fix: apply queries refreshed in a form remote function when a
redirect is thrown (<a
href="https://redirect.github.com/sveltejs/kit/pull/15362">#15362</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/kit/commit/66d88c93da40c48cf3f4aca871d74a4fc7ff3990"><code>66d88c9</code></a>
Version Packages (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15440">#15440</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/faba869db3644077169bf5d7c6e41fd5f3d6c65e"><code>faba869</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/sveltejs/kit/commit/708fc4b8a54f4b4b22ded6ea30793297ccce6d22"><code>708fc4b</code></a>
chore(deps): bump rollup to 4.59.0 (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15433">#15433</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/98496faaf3bc319034fcb4fac64940b75f7cfed9"><code>98496fa</code></a>
Version Packages (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15416">#15416</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/8c5048be1c5223144a9632dd318227d145f65ead"><code>8c5048b</code></a>
fix: provide correct url info to remote functions (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15418">#15418</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/ce4b57cfc1b6d0bdd1514440d0296b5d1385f7e7"><code>ce4b57c</code></a>
fix: allow commands in more places (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15288">#15288</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/7277edb6b00068e04985ebbcd40a2954bad1270b"><code>7277edb</code></a>
chore: fix CI lint (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15417">#15417</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/64f484fb34f362f296e4a96b5a5269cab4389a0c"><code>64f484f</code></a>
fix: deep partial <code>.value()</code> and <code>.set(...)</code> types
for forms (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/14837">#14837</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/d28d372ab5a7f500e41af940453e0333a4a256bf"><code>d28d372</code></a>
fix: allow optional types for remote query/command/prerender functions
(<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15293">#15293</a>)</li>
<li><a
href="https://github.com/sveltejs/kit/commit/244838cf3db806c5f92a09b8b860511da09f27ed"><code>244838c</code></a>
fix: server-render nested form value sets (<a
href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/15378">#15378</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.53.3/packages/kit">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@sveltejs/kit&package-manager=npm_and_yarn&previous-version=2.52.2&new-version=2.53.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to
6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>v6-beta by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li>
<li>update readme/changelog for v6 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p>
<h2>v6-beta</h2>
<h2>What's Changed</h2>
<p>Updated persist-credentials to store the credentials under
<code>$RUNNER_TEMP</code> instead of directly in the local git
config.</p>
<p>This requires a minimum Actions Runner version of <a
href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a>
to access the persisted credentials for <a
href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker
container action</a> scenarios.</p>
<h2>v5.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
</ul>
<h2>⚠️ Minimum Compatible Runner Version</h2>
<p><strong>v2.327.1</strong><br />
<a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></p>
<p>Make sure your runner is updated to this version or newer to use this
release.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
<h2>v4.3.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.3.1">https://github.com/actions/checkout/compare/v4...v4.3.1</a></p>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"><code>de0fac2</code></a>
Fix tag handling: preserve annotations and explicit fetch-tags (<a
href="https://redirect.github.com/actions/checkout/issues/2356">#2356</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"><code>064fe7f</code></a>
Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is
set (...</li>
<li><a
href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"><code>8e8c483</code></a>
Clarify v6 README (<a
href="https://redirect.github.com/actions/checkout/issues/2328">#2328</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"><code>033fa0d</code></a>
Add worktree support for persist-credentials includeIf (<a
href="https://redirect.github.com/actions/checkout/issues/2327">#2327</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"><code>c2d88d3</code></a>
Update all references from v5 and v4 to v6 (<a
href="https://redirect.github.com/actions/checkout/issues/2314">#2314</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"><code>1af3b93</code></a>
update readme/changelog for v6 (<a
href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"><code>71cf226</code></a>
v6-beta (<a
href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"><code>069c695</code></a>
Persist creds to a separate file (<a
href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"><code>ff7abcd</code></a>
Update README to include Node.js 24 support details and requirements (<a
href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
Prepare v5.0.0 release (<a
href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/v4...v6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…object argument (#19590)

When navigate() or <Link> is called with an object `to` prop (e.g. {
pathname: '/items/123' }), the transaction name currently is set to
`[object Object]`. This adds a `resolveNavigateArg` helper that extracts
the pathname from object arguments:
- If we get a string or number we use it directly as transaction name
- If we get an object with a pathname property we use that
- If we get an object without a pathname property we stay on the current
page so we try to grab the current path as transaction name, fallback to
`/`

Closes #19580
closes #19589
closes
[JS-1839](https://linear.app/getsentry/issue/JS-1839/flushanddispose-in-10410-crashes-when-workerentrypoint-rpc-methods-use)

It seems that there are way to rely on the memory leak on Cloudflare.
When that is the case the promise buffer is set to undefined and would
fail in a latter step. Creating a new promise buffer would release
everything we had before and mark with that it would be ready to be
released by the garbage collector.

The transport above is ok to be set to undefined, as it is readonly on
TypeScript level.
… test (#19594)

Resolves Dependabot alert #1079 (CPU exhaustion in SvelteKit remote form
deserialization, experimental only).

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
When running on Cloudflare Pages the `withSentry` function got bundled
and wrapped into the `index.js`. This actually didn't cause any problems
during the runtime, but it just added unnecessary code into the bundle.
This removes now the automatic wrapping, which is required for
Cloudflare Workers only.

By adding the plugin `sentryCloudflareNodeWarningPlugin` we also remove
tons of warnings like following when building for Cloudflare Pages:

```
11:20:40 [WARN] [vite] [plugin vite:resolve] Automatically externalized node built-in module "node:diagnostics_channel" imported from "node_modules/.pnpm/@sentry+node@10.40.0/node_modules/@sentry/node/build/esm/integrations/tracing/fastify/index.js". Consider adding it to environments.ssr.external if it is intended.
11:20:40 [WARN] [vite] [plugin vite:resolve] Automatically externalized node built-in module "node:diagnostics_channel" imported from "node_modules/.pnpm/@sentry+node-core@10.40.0_@opentelemetry+api@1.9.0_@opentelemetry+context-async-hooks@2_feb79575758996d9eeb93d3eb9a5534b/node_modules/@sentry/node-core/build/esm/integrations/http/httpServerIntegration.js". Consider adding it to environments.ssr.external if it is intended.
```

Closes #19559 (added automatically)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@JPeer264 JPeer264 requested review from andreiborza and s1gr1d March 3, 2026 12:22
Copy link
Member

@andreiborza andreiborza left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@JPeer264 JPeer264 enabled auto-merge March 3, 2026 12:25
@github-actions
Copy link
Contributor

github-actions bot commented Mar 3, 2026

size-limit report 📦

Path Size % Change Change
@sentry/browser 25.63 kB added added
@sentry/browser - with treeshaking flags 24.13 kB added added
@sentry/browser (incl. Tracing) 42.43 kB added added
@sentry/browser (incl. Tracing, Profiling) 47.09 kB added added
@sentry/browser (incl. Tracing, Replay) 81.25 kB added added
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 70.87 kB added added
@sentry/browser (incl. Tracing, Replay with Canvas) 85.95 kB added added
@sentry/browser (incl. Tracing, Replay, Feedback) 98.21 kB added added
@sentry/browser (incl. Feedback) 42.44 kB added added
@sentry/browser (incl. sendFeedback) 30.29 kB added added
@sentry/browser (incl. FeedbackAsync) 35.35 kB added added
@sentry/browser (incl. Metrics) 26.8 kB added added
@sentry/browser (incl. Logs) 26.94 kB added added
@sentry/browser (incl. Metrics & Logs) 27.61 kB added added
@sentry/react 27.38 kB added added
@sentry/react (incl. Tracing) 44.77 kB added added
@sentry/vue 30.08 kB added added
@sentry/vue (incl. Tracing) 44.3 kB added added
@sentry/svelte 25.66 kB added added
CDN Bundle 28.17 kB added added
CDN Bundle (incl. Tracing) 43.26 kB added added
CDN Bundle (incl. Logs, Metrics) 29.01 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) 44.1 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) 68.09 kB added added
CDN Bundle (incl. Tracing, Replay) 80.14 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 81 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) 85.65 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 86.53 kB added added
CDN Bundle - uncompressed 82.35 kB added added
CDN Bundle (incl. Tracing) - uncompressed 128.07 kB added added
CDN Bundle (incl. Logs, Metrics) - uncompressed 85.19 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 130.9 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 208.85 kB added added
CDN Bundle (incl. Tracing, Replay) - uncompressed 244.95 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 247.77 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 257.86 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 260.67 kB added added
@sentry/nextjs (client) 47.18 kB added added
@sentry/sveltekit (client) 42.89 kB added added
@sentry/node-core 52.24 kB added added
@sentry/node 174.69 kB added added
@sentry/node - without tracing 97.39 kB added added
@sentry/aws-serverless 113.19 kB added added

@github-actions
Copy link
Contributor

github-actions bot commented Mar 3, 2026

node-overhead report 🧳

Note: This is a synthetic benchmark with a minimal express app and does not necessarily reflect the real-world performance impact in an application.

Scenario Requests/s % of Baseline Prev. Requests/s Change %
GET Baseline 8,691 - - added
GET With Sentry 1,695 20% - added
GET With Sentry (error only) 6,087 70% - added
POST Baseline 1,179 - - added
POST With Sentry 583 49% - added
POST With Sentry (error only) 1,040 88% - added
MYSQL Baseline 3,253 - - added
MYSQL With Sentry 440 14% - added
MYSQL With Sentry (error only) 2,650 81% - added

@JPeer264 JPeer264 merged commit 193a78d into master Mar 3, 2026
434 of 436 checks passed
@JPeer264 JPeer264 deleted the prepare-release/10.42.0 branch March 3, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants