dev: bump the safe group with 8 updates

[dependabot]

Bumps the safe group with 8 updates:

Package	From	To
@formatjs/intl-datetimeformat	7.8.0	7.8.1
@sentry/react	11.4.0	11.6.0
@tabler/icons-react	3.48.0	3.49.0
@inquirer/prompts	8.7.2	8.7.3
cypress	16.1.0	16.1.1
eslint-plugin-jsdoc	65.0.2	65.2.4
js-yaml	5.4.2	5.4.3
prettier	3.9.9	3.9.10

Updates @formatjs/intl-datetimeformat from 7.8.0 to 7.8.1

Release notes

Sourced from @​formatjs/intl-datetimeformat's releases.

@​formatjs/intl-datetimeformat: 7.8.1

7.8.1 (2026-10-05)

Bug Fixes

• @​formatjs/intl-datetimeformat: update IANA timezone database to 2026e (#7547) (ba169ba)

Commits

• 2a07f47 chore: release main (#7517)
• f1c3c35 chore(deps): update dependency @​rspack/core to v2.2.8 (#7553)
• a1ccd87 fix(formatjs_cli_napi): load glibc Node addons outside Node (#7536)
• cb514c4 feat(@​formatjs/ts-transformer): support [content] in `idInterpolationPatter...
• 6efc817 chore(deps): update pnpm to v12.8.0 (#7552)
• 324ba70 chore(deps): update dependency rolldown to v1.2.11 (#7537)
• fcb1bb7 chore(deps): update dependency react-live to v5 (#7542)
• 6161543 chore(deps): update pnpm to v12.5.1 (#7510)
• c97322a chore(deps): update dependency unplugin to v3.4.0 (#7505)
• 38e2070 fix(deps): update dependency eslint-plugin-formatjs to v8 (#7506)
• Additional commits viewable in compare view

Updates @sentry/react from 11.4.0 to 11.6.0

Release notes

Sourced from @​sentry/react's releases.

11.6.0

Important Changes

• feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

  The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

  import * as Sentry from '@sentry/nextjs/cloudflare';
  import handler from './.open-next/worker.js';
  export default Sentry.withSentry(
  env => ({
  dsn: env.SENTRY_DSN,
  tracesSampleRate: 1.0,
  }),
  handler,
  );

• feat(server-utils): Add instrumentation for pi-durable (#24993)

  The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

• fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

  When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

• feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
• feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
• feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
• feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
• fix(browser): Check for clock drift on page lifecycle events (#25091)
• fix(core): Exclude attachments from internal exception events (#25160)
• fix(effect): Convert Effect span times to the Sentry clock (#24972)
• fix(effect): Detect HTTP spans named after the request method (#25159)
• fix(node): Register Vercel keep-alive listeners once (#25146)
• fix(replay): Place CLS and INP web vitals at the right time (#24990)
• fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
• fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)

• chore: Add external contributor to CHANGELOG.md (#25136)
• chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
• chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)
• feat(cloudflare): Wrap vinext Worker entries with @sentry/nextjs/cloudflare (#25000)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

11.6.0

Important Changes

• feat(nextjs): Add @sentry/nextjs/cloudflare (#24998)

  The new @sentry/nextjs/cloudflare entry point exports withSentry for the Worker entry of a Next.js app on Cloudflare Workers, for example .open-next/worker.js of OpenNext. It is withSentry of @sentry/cloudflare with the Next.js server handling added, so a Next.js app on Workers gets the same spans as on Node.js.

  import * as Sentry from '@sentry/nextjs/cloudflare';
  import handler from './.open-next/worker.js';
  export default Sentry.withSentry(
  env => ({
  dsn: env.SENTRY_DSN,
  tracesSampleRate: 1.0,
  }),
  handler,
  );

• feat(server-utils): Add instrumentation for pi-durable (#24993)

  The new piDurableIntegration traces agents built with pi-durable: each run, with its model requests and tool calls.

• fix(core): Correct sleep clock drift on telemetry timestamps (#23054)

  When a device sleeps, the performance.now() clock of the browser stops. Before this change, timestamps of spans and other telemetry recorded after the sleep could be too early. The SDK now detects this drift and corrects its time origin, also for spans created from performance entries. Span end times are now computed from the performance.now() duration since the span start, like in OpenTelemetry (#24903).

Other Changes

• feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
• feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
• feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate spans (#25044)
• feat(server-utils): Record LangChain TypeSafeClassifier runs as gen_ai.evaluate spans (#25120)
• fix(browser): Check for clock drift on page lifecycle events (#25091)
• fix(core): Exclude attachments from internal exception events (#25160)
• fix(effect): Convert Effect span times to the Sentry clock (#24972)
• fix(effect): Detect HTTP spans named after the request method (#25159)
• fix(node): Register Vercel keep-alive listeners once (#25146)
• fix(replay): Place CLS and INP web vitals at the right time (#24990)
• fix(server-utils): Record LangGraph span I/O for non-MessagesAnnotation state (#23315)
• fix(sveltekit): Upload source maps with SvelteKit 3 (#25139)

• chore: Add external contributor to CHANGELOG.md (#25136)
• chore(deps-dev): Bump next from 15.5.24 to 15.5.27 (#25171)
• chore(nitro): Remove stale bundler-plugin-core rollup external (#25149)

... (truncated)

Commits

• 3c0c830 release: 11.6.0
• 13743e9 Merge pull request #25184 from getsentry/prepare-release/11.6.0
• 3605c50 chore(size-limit): Bump @​sentry/node size limits
• 53ae996 meta(changelog): Update changelog for 11.6.0
• e99e6e1 feat(remix): Propagate the server trace to Remix 3 page loads (#25145)
• 2fdcb23 test(e2e): Add Mastra Jev classifier test to node-mastra (#25115)
• 5bb9a68 feat(server-utils): Map Mastra classifier evaluations to gen_ai.evaluate span...
• 221dd86 test(e2e): Add a cloudflare-pi-durable end-to-end application (#25022)
• 966e1ff feat(cloudflare): Skip spans for the pi_ tables of PiHarness (#25028)
• b70f6bb test(e2e): Add a node-pi-durable end-to-end application (#24994)
• Additional commits viewable in compare view

Updates @tabler/icons-react from 3.48.0 to 3.49.0

Release notes

Sourced from @​tabler/icons-react's releases.

Release 3.49.0

18 new icons:

• outline/alphabet-chinese
• outline/alphabet-devanagari
• outline/alphabet-ethiopic
• outline/alphabet-georgian
• outline/alphabet-japanese
• outline/blob-dashed
• outline/circle-heart
• outline/circle-pause
• outline/circle-play
• outline/circle-stop
• outline/file-lock
• outline/folder-lock
• outline/lens-concave
• outline/lens-convex
• outline/memory
• outline/square-dashed-top-solid
• outline/square-dashed-x
• outline/triangle-dashed

Fixes and improvements

• Add alphabet, arabic, typography and character tags to alphabet-arabic (#1643)
• Match brand-instagram size to other square brand icons (#1615)
• Fix square-dashed icon drawn as a solid square (#1614)
• Redraw square-dashed and table-dashed icons (#1640)
• Add squircle tag to all square-rounded icons (#1641)
• Webfont: Fix filled home webfont glyph having zero width in Chrome (#1616)
• Webfont: Fix sass and style fields in package.json to point to dist/, and stop publishing the intermediate SVG fonts, which the CSS never referenced (#1633)
• Webfont: Make webfont builds reproducible, so font files no longer change between builds of the same icons (#1624)
• Webfont: Drop the unused svgtofont dependency (#1620)
• Astro, Preact, React, React Native, SolidJS, Vue: Stop publishing source maps, which made up about 70% of the package size (#1634)
• Svelte, Svelte Runes: Add default export conditions and document per-icon imports (#1630)
• React Native: Stop passing extra props (testID, style, onPress, …) to every node of the icon, only the root Svg gets them. title is now exposed to screen readers via accessibility props (#1628)

Changelog

Sourced from @​tabler/icons-react's changelog.

3.49.0

Patch Changes

• #1634 9fba485 - Stop publishing source maps, which made up about 70% of the package size
• Updated dependencies [c3ca84f, c3ca84f, c3ca84f, c3ca84f, c3ca84f]:
  • @​tabler/icons@​3.49.0

Commits

• 009744c Release (#1647)
• 9659394 Run Angular tests in CI, add React Native tests and lint Vue, Svelte and Astr...
• 1d8fd55 Add ESLint and Prettier checks and clean up .build/helpers.mjs (#1623)
• 4a4054d Speed up declaration bundling for JS framework packages (#1618)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tabler/icons-react since your current version.

Updates @inquirer/prompts from 8.7.2 to 8.7.3

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.3

What's new

• search() no longer submits a stale choice when Enter is pressed while an async search is still loading — the prompt waits for the fresh results, the query is preserved, and repeated Enter presses during validation no longer run the async validator more than once (@inquirer/search, #2291, closes #2290).
• confirm() now always accepts the single keystrokes y/n even with localized keywords, and unrecognized input no longer silently falls back on the default answer (@inquirer/confirm, #2281, closes #2279).
• expand() and rawlist() now ignore surrounding whitespace in answers (@inquirer/expand, @inquirer/rawlist, #2280).
• All package READMEs now document the Deno install command (deno add npm:@inquirer/prompts) alongside the npm/yarn/pnpm/bun ones (#2269).

Included

• @inquirer/checkbox@^5.2.6
• @inquirer/confirm@^6.3.3
• @inquirer/editor@^5.3.4
• @inquirer/expand@^5.1.6
• @inquirer/input@^5.1.7
• @inquirer/number@^4.2.4
• @inquirer/password@^5.2.3
• @inquirer/rawlist@^5.3.6
• @inquirer/search@^4.3.4
• @inquirer/select@^5.2.6

Commits

• a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
• 61be5df chore: Publish new release
• 7dc77e2 fix(search): prevent submissions while the prompt is loading
• 73b5eab docs: document Deno installation (#2269)
• 79a092a ci: add Deno compatibility test suite (#2271)
• 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
• e928543 chore: bump yarn to 4.18.1 via corepack
• 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
• 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
• eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
• Additional commits viewable in compare view

Updates cypress from 16.1.0 to 16.1.1

Release notes

Sourced from cypress's releases.

v16.1.1

Changelog: https://docs.cypress.io/app/references/changelog#16-1-1

Commits

• 727c47b misc: show cy.contains() as a parent command in the Command Log when it start...
• 6395a6d chore: migrate 2 @​packages/server unit specs to vitest (#34934)
• e952cc9 chore: release @​cypress/vue-v7.0.1
• f418e5d chore: release @​cypress/react-v10.0.1
• 0a34f86 dependency: update axios to 1.20.0 (#34918)
• 08ec143 perf: make shadow-aware .closest() linear instead of quadratic (#34925)
• 764fa3d misc: name the running command in the .each() and .spread() mixed async/sync ...
• 9fd0ea1 misc: show the injectDocumentDomain hint in the cross-origin command error (#...
• 21122f5 docs: add guidance on testing securely to SECURITY.md (#34923)
• 3e1949f misc: document the true default of multiple for .dblclick() in types (#34929)
• Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 65.0.2 to 65.2.4

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.2.4

65.2.4 (2026-10-10)

Bug Fixes

• require-param, require-jsdoc, tag-lines: use CRLF for added lines when the source uses CRLF (193bbb7)

v65.2.3

65.2.3 (2026-10-10)

Bug Fixes

• convert-to-jsdoc-comments: do not fix comments that contain the closing delimiter (59ea051)

v65.2.2

65.2.2 (2026-10-09)

Bug Fixes

• no-undefined-types: recognise export import aliases declared in a same-file namespace (fd8c10f)
• no-undefined-types: recognise enums, enum members and values declared in a same-file namespace (267229a)

v65.2.1

65.2.1 (2026-10-08)

Bug Fixes

• check-param-names: move closing delimiter to its own line when reordering params (118b797)
• add new tags after the last line of the previous tag and keep one-line blocks valid (21b129e)
• use CRLF line endings for lines added by fixers when the source uses them (53bad59)

v65.2.0

65.2.0 (2026-10-07)

Features

• check-alignment: add ignoreEmptyLines option; fixes #1789 (2095a3d)

v65.1.0

65.1.0 (2026-10-04)

Bug Fixes

• check-indentation: avoid resetting section indent with inline tags; fixes #1786 (c8bcbb7)

... (truncated)

Commits

• 193bbb7 fix(require-param, require-jsdoc, tag-lines): use CRLF for added lines ...
• 59ea051 fix(convert-to-jsdoc-comments): do not fix comments that contain the closin...
• 6d9b4fd chore(deps): bump handlebars from 4.7.9 to 4.7.10
• 640730e chore(deps): bump @​graphql-tools/executor-legacy-ws
• ce38084 chore(deps): bump @​fastify/busboy from 3.2.0 to 3.2.2
• fd8c10f fix(no-undefined-types): recognise export import aliases declared in a sa...
• 1694dce docs: clarify c8 ignore comment
• 267229a fix(no-undefined-types): recognise enums, enum members and values declared ...
• 53bad59 fix: use CRLF line endings for lines added by fixers when the source uses them
• 118b797 fix(check-param-names): move closing delimiter to its own line when reorder...
• Additional commits viewable in compare view

Updates js-yaml from 5.4.2 to 5.4.3

Changelog

Sourced from js-yaml's changelog.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

Commits

• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
cypress	[>= 9.a, < 10]
cypress	[>= 10.a, < 11]
eslint-plugin-jsdoc	[>= 39.6.a, < 39.7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions