fix(deps): update dependency @sentry/node to v10.70.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@sentry/node (source)	dependencies	minor	10.69.0 → 10.70.0

---

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v10.70.0

Compare Source

• feat(v10/core): Support stable MCP SDK v2 (#​22986)
• feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#​22992)
• feat(v10/solid,solidstart): Support @solidjs/router v1 (#​23163)
• fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#​23189)
• fix(v10/cloudflare): Get original waituntil in workflows (#​23192)
• fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#​23190)
• fix(v10/cloudflare): Set agent conversation id on the onRequest path (#​22985)
• fix(v10/cloudflare): Set conversation id independent of session name (#​23193)
• fix(v10/cloudflare): Try/catch on non-configurable prototypes (#​23191)
• fix(v10/cloudflare): Use gen_ai.agent.name for class names (#​22987)
• fix(v10/core,browser): Handle errors from other realms (#​23201)
• fix(v10/core): Sample errors after beforeSend while preserving session updates (#​22819)
• fix(v10/hono): Include originalException in captured exception hint (#​22990)
• fix(v10/nextjs): meriyah issue for standalone build (#​23055)
• fix(v10/nextjs): Remove tracing from middleware wrappers (#​22904)
• fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#​22940)
• fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#​22966)
• fix(v10/react): Remove routes from shared set on <Routes> unmount (#​22948)
• fix(v10/sveltekit): Export metrics from worker entry point (#​23027)

Internal Changes

• test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#​23009)
• test(v10/e2e): Fix failing sveltekit-3 test (#​23016)
• test(v10/e2e): Fix type error in nextjs ai-error tests (#​23011)
• test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#​23048)

Work in this release was contributed by @​davidmurdoch, @​Jxxunnn, and @​kamilogorek. Thank you for your contributions!

Bundle size 📦

Path	Size
@​sentry/browser	27.09 KB
@​sentry/browser - with treeshaking flags	25.58 KB
@​sentry/browser (incl. Tracing)	45.5 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.24 KB
@​sentry/browser (incl. Tracing, Profiling)	50.13 KB
@​sentry/browser (incl. Tracing, Replay)	83.82 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.7 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.42 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.78 KB
@​sentry/browser (incl. Feedback)	43.87 KB
@​sentry/browser (incl. sendFeedback)	31.78 KB
@​sentry/browser (incl. FeedbackAsync)	36.79 KB
@​sentry/browser (incl. Metrics)	28.16 KB
@​sentry/browser (incl. Logs)	28.38 KB
@​sentry/browser (incl. Metrics & Logs)	29.06 KB
@​sentry/react	28.86 KB
@​sentry/react (incl. Tracing)	47.7 KB
@​sentry/vue	32.39 KB
@​sentry/vue (incl. Tracing)	47.41 KB
@​sentry/svelte	27.12 KB
CDN Bundle	29.43 KB
CDN Bundle (incl. Tracing)	47.41 KB
CDN Bundle (incl. Logs, Metrics)	30.97 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.69 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.32 KB
CDN Bundle (incl. Tracing, Replay)	84.03 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.31 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.71 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.94 KB
CDN Bundle - uncompressed	87.76 KB
CDN Bundle (incl. Tracing) - uncompressed	143.3 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	92.36 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	147.19 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	214.2 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	259.75 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	263.62 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	273.13 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	276.99 KB
@​sentry/nextjs (client)	50.19 KB
@​sentry/sveltekit (client)	45.91 KB
@​sentry/core/server	78.66 KB
@​sentry/core/browser	65.21 KB
@​sentry/node-core	61.76 KB
@​sentry/node	122.92 KB
@​sentry/node (incl. diagnostics channel injection)	147.77 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	68.39 KB
@​sentry/node/light	50.2 KB
@​sentry/node - without tracing	73.18 KB
@​sentry/aws-serverless	82.22 KB
@​sentry/cloudflare (withSentry) - minified	197.26 KB
@​sentry/cloudflare (withSentry)	484.82 KB

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: package-lock.json

npm --before could not be enforced because existing locked packages were published after the minimumReleaseAge cutoff. This will resolve after the next lock file maintenance run.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​sentry/​node@​10.69.0 ⏵ 10.70.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @sentry/node-core is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: package-lock.json → npm/@sentry/node@10.70.0 → npm/@sentry/node-core@10.70.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@sentry/node-core@10.70.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report