Update dependency @sentry/nuxt to v8.49.0 [SECURITY] (#5357)

* Update dependency @sentry/nuxt to v8.49.0 [SECURITY]
* Revert unnecessary dependency updates
* Try fixing corepack/pnpm; update axios
* Use corepack 0.31.0
---------
Co-authored-by: Olga Bulat <[email protected]>

.devcontainer/post_create.sh

@@ -7,7 +7,7 @@
 
 # The Node.js feature installs the latest version of pnpm, not the one we want.
 # So we enable Corepack to provision the right pnpm version.
-corepack enable
+npm install -g corepack@0.31.0 && corepack enable pnpm
 
 # Install dependencies for projects that run outside of the Docker context. This
 # includes Node.js packages, Python automations and documentation.

.github/actions/setup-env/action.yml

@@ -49,7 +49,8 @@ runs:
     - name: Setup pnpm
       if: inputs.setup_nodejs == 'true'
       shell: bash
-      run: corepack enable pnpm
+      # Fix for https://github.com/nodejs/corepack/issues/612
+      run: npm install -g [email protected] && corepack enable pnpm
 
     - name: Setup Node.js
       if: inputs.setup_nodejs == 'true'

docker/dev_env/Dockerfile

@@ -85,7 +85,7 @@ RUN mkdir -p $HOME/.local/bin \
     pre-commit \
   && npm install -g \
     n \
-    corepack \
+    corepack@0.31.0 \
   && corepack enable
 
 # Avoid overwriting `.venv`'s from the host

frontend/Dockerfile

@@ -14,7 +14,7 @@ ARG SEMANTIC_VERSION
 
 # Install system packages needed to build on macOS
 RUN apk add --no-cache --virtual .gyp python3 make g++ \
-  && corepack enable pnpm
+  && npm install -g [email protected] && corepack enable pnpm
 
 USER node
 

frontend/Dockerfile.playwright

@@ -16,7 +16,7 @@ RUN mkdir -p /.cache/node/corepack/ && chmod -R 777 /.cache/node/corepack/
 RUN mkdir -p /.cache/pnpm/dlx/ && chmod -R 777 /.cache/pnpm/dlx/
 
 # Requires `packageManager` field to be present in `frontend/package.json`.
-RUN corepack enable pnpm
+RUN npm install -g [email protected] && corepack enable pnpm
 
 # DO NOT actually run `pnpm install` here. Doing so requires us to copy the the source into the container.
 # However, that's a waste of time because we mount the source in the compose file anyway.

frontend/package.json

@@ -3,7 +3,7 @@
   "description": "Openverse frontend",
   "private": true,
   "version": "2.2.1",
-  "packageManager": "pnpm@9.15.4",
+  "packageManager": "pnpm@10.1.0",
   "scripts": {
     "predev": "pnpm install && pnpm i18n:en",
     "dev": "run-p dev:only 'i18n:en --watch'",
@@ -63,12 +63,12 @@
     "@nuxtjs/sitemap": "^7.0.0",
     "@nuxtjs/tailwindcss": "^6.12.1",
     "@pinia/nuxt": "^0.9.0",
-    "@sentry/nuxt": "^8.45.0",
+    "@sentry/nuxt": "^8.53.0",
     "@tailwindcss/typography": "^0.5.13",
     "@vueuse/core": "^12.0.0",
     "@wordpress/is-shallow-equal": "^5.3.0",
     "async-mutex": "^0.5.0",
-    "axios": "^1.7.2",
+    "axios": "^1.7.9",
     "axios-mock-adapter": "^1.22.0",
     "clipboard": "^2.0.11",
     "focus-trap": "^7.5.4",

package.json

@@ -11,7 +11,7 @@
   "scripts": {
     "prepare:nuxt": "pnpm --filter frontend run prepare:nuxt"
   },
-  "packageManager": "pnpm@9.15.4",
+  "packageManager": "pnpm@10.1.0",
   "engines": {
     "node": ">= 22.0.0 <23"
   },