Repository navigation
chore(deps): update JavaScript SDK to v11.11.0 - #6773
github-actions[bot] wants to merge 1 commit into
Conversation
github-actions
Bot
added
the
dependencies
Semver Impact of This PR⚪ None (no version bump detected) 📋 Changelog PreviewThis is how your changes will appear in the changelog.
🤖 This preview updates automatically when you update the PR. |
antonis
left a comment
antonis
left a comment
There was a problem hiding this comment.
Marking as blocked since we will bump with our next major
|
Tested out the changes with #6730 |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
PII collected by default after v11
High Severity
Flagged because the review rules require PII to stay gated behind sendDefaultPii and require changelog review on JS dependency bumps. v11 replaces sendDefaultPii with dataCollection and collects user info, cookies, HTTP bodies, and similar data by default. This SDK still documents and implements sendDefaultPii (default off) and omits dataCollection from ReactNativeOptions, so JS-core collection turns on while apps cannot disable it through the public options type.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
Unmigrated v11 breaking JS APIs
High Severity
Flagged because the review rules require JS dependency bumps to be checked for breaking API and default-integration changes. This PR only retargets @sentry/core, @sentry/browser, and @sentry/react to 11.0.0. Default integrations still call removed inboundFiltersIntegration, the public entry still re-exports removed instrumentLangGraph and AI helpers that moved off @sentry/core, and tracing still imports startIdleSpan from the default @sentry/core entry. No code, types, or changelog migration accompanies the major bump.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
Span streaming default breaks tracing
High Severity
Flagged because the review rules call out silent default and telemetry-shape changes on dependency updates. v11 enables span streaming by default and deprecates transaction-mode hooks such as beforeSendTransaction and forceTransaction. This SDK's navigation, app-start, and idle-span pipeline still assumes root spans are buffered as transactions and discarded via transaction event processors. Streaming would emit child spans before those filters run and change the telemetry apps currently receive.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
5b99eba to
a7da763
Compare
![sentry-warden[bot]](https://avatars.githubusercontent.com/in/2755838?s=60&v=4){kind=small}
a5d19b4 to
5949ab3
Compare
github-actions
Bot
changed the title
9caf113 to
c8c3cc3
Compare
c2a203e to
c6bdd9e
Compare
8949646 to
b314359
Compare
github-actions
Bot
changed the title
e91ca5a to
4de25fc
Compare
849c853 to
255295a
Compare
github-actions
Bot
changed the title
14e4413 to
605c605
Compare
605c605 to
7ac8dcd
Compare
|
Any news? |
|
@sentry/react-native 8.31.0 still installs two Sentry CLIs: @sentry/cli@3.8.0 directly and @sentry/cli@2.58.6 through @sentry/bundler-plugins@10.76.2. Updating to bundler-plugins 11.x would remove the old one. Is there a date for this? |
Thanks for flagging this @mahnunchik 🙇 We have planned this for our next major v9 since the major JS SDK bump also includes breaking changes. This is planned for early 2027 since the React Native SDKs has many dependencies (including https://github.com/getsentry/sentry-cocoa and https://github.com/getsentry/sentry-java) and needs to align all in the next major. Until then the two CLIs are installed side by side and don't conflict. It only costs some extra install size. Sorry for the inconvenience. |
Bumps scripts/update-javascript.sh from 10.78.0 to 11.11.0.
Auto-generated by a dependency updater.
Changelog
11.11.0
Important Changes
ref(cloudflare): Use the shared request handler wrapper (#25588)
Cloudflare Workers now use the same request handler wrapper as
Deno.serveandBun.serve. Changes for Cloudflare users:client.addressfrom theCF-Connecting-IPheader (or another forwarding header), as on the other runtimes. This followsdataCollection.userInfo, which istrueby default. To leave it out, setdataCollection: { userInfo: false }.responsecontext with the status code.captureErrors: false, it does not capture it.Set-Cookieheader of a response, as on Deno and Bun.AsyncLocalStorage(for example on Shopify Oxygen), events now also get the request URL and method.feat(nestjs): Add an option to monitor every Cron method (#25471)
Set
monitorCronJobs: trueonnestIntegration()to send check-ins for everyCron()method, without addingSentryCronto each one. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. UseexcludeCronJobsto skip jobs by slug. Methods that also haveSentryCroncheck in once, with the slug and options passed toSentryCron.feat(node): Add cronJobIntegration to monitor cron jobs (#25477)
Add
Sentry.cronJobIntegration()tointegrationsto send check-ins for every namedCronJobof thecronpackage (4.3+), with the job name as the monitor slug. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. UseexcludeJobsto skip jobs by name.Sentry.cron.instrumentCronis deprecated; usecronJobIntegrationinstead.fix(server-utils): Instrument anthropic-ai/sdk 1.x and turn off its own OTel spans (#25750)
The Anthropic integration now instruments
anthropic-ai/sdk1.x. Since 0.134 the SDK also records its own OpenTelemetry spans, such asanthropic.messages.create, which duplicated Sentry'sgen_aispans. Once Sentry instruments the SDK, it setsANTHROPIC_OPEN_TELEMETRY=falseto turn those spans off. To keep them, setANTHROPIC_OPEN_TELEMETRY=trueor pass theopenTelemetryoption to the Anthropic client.feat(nextjs): Mark pageloads of cached pages (#25318)
When Next.js serves a page from its cache, for example an ISR page or a
cacheComponentsshell, the pageload now has thepage.server_rendering.typeattribute. It isstaticif the whole page came from the cache, andpartially_staticif parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.Other Changes
sentry/astro/integrationentry for the Astro integration (#25726)sourcemaps.deleteSourcemapsAfterUploadand staged uploads (#25637)applicationKeyExcludeDependenciesoption (#25818)awsLambdaWebIntegrationfor Lambda Web Functions (#25355)getSqlSpanNamefor SQL span names (#25929)getSqlQueryAttributeshelper for consistency (#25927)db.operation.nameon SQL spans (#25850)withSentryfromsentry/solidstart/vite(#25725)handleTunnelRequestform and reword theserveTunnelIntegrationdocs (#25844)Internal Changes
- chore(ci): Ignore Dependabot bumps for deps that are also peer deps ([#26015](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26015)) - chore(ci): Remove nightly sentry-lighthouse upload workflow ([#25966](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25966)) - chore(dependabot): Group related dependency updates ([#26059](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26059)) - chore(dependabot): Ignore major react-router updates ([#25892](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25892)) - chore(dependabot): Preserve SDK compatibility baselines ([#26013](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26013)) - chore(dependabot): Remove obsolete update rules ([#26007](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26007)) - chore(deps): Align AWS SDK clients to 3.1161.0 ([#26032](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26032)) - chore(deps): Bump actions/core and actions/github in internal GH actions ([#26109](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26109)) - chore(deps): Bump nuxt/devtools from 3.4.1 to 3.4.4 ([#26097](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26097)) - chore(deps): Bump sentry/conventions to 0.30.0 ([#25837](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25837)) - chore(deps): Bump undici from 6.24.1 to 6.29.1 ([#26108](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26108)) - chore(deps): Bump webpack from 5.104.1 to 5.112.2 ([#25910](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25910)) - chore(deps): Enable pnpm autoDedupe ([#25961](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25961)) - chore(deps): Group AWS SDK Dependabot updates ([#26030](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26030)) - chore(deps-dev): Bump babel/parser from 7.29.9 to 8.0.10 ([#26043](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26043)) - chore(deps-dev): Bump babel/plugin-transform-typescript from 7.29.7 to 8.0.6 ([#26012](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26012)) - chore(deps-dev): Bump hono/node-server from 2.1.3 to 2.1.5 ([#26054](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26054)) - chore(deps-dev): Bump rollup/plugin-terser from 0.4.4 to 1.0.2 ([#25890](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25890)) - chore(deps-dev): Bump testing-library/user-event from 14.5.2 to 14.6.8 ([#26071](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26071)) - chore(deps-dev): Bump fake-indexeddb from 6.2.5 to 6.2.7 ([#26034](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26034)) - chore(deps-dev): Bump markdown-table from 3.0.3 to 3.0.4 ([#26074](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26074)) - chore(deps-dev): Bump node-schedule and types/node-schedule ([#26058](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26058)) - chore(deps-dev): Bump redux from 4.0.5 to 5.0.1 ([#25959](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25959)) - chore(deps-dev): Bump the nestjs group with 2 updates ([#26060](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26060)) - chore(deps-dev): Bump the react-router group across 1 directory with 3 updates ([#25955](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25955)) - chore(deps-dev): Bump tsx from 4.23.0 to 4.23.15 ([#25958](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25958)) - chore(deps-dev): Bump wrangler from 4.61.0 to 4.156.0 ([#26009](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26009)) - chore(dev-packages): Move dependencies to devDependencies ([#26046](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26046)) - chore(node-integration-tests): Remove unused dependencies ([#25942](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25942)) - chore: Add Bugbot guidance for cold imports in tests ([#25976](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25976)) - chore: Add external contributor to CHANGELOG.md ([#25862](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25862)) - chore: Add external contributor to CHANGELOG.md ([#25870](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25870)) - chore: Add external contributor to CHANGELOG.md ([#25872](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25872)) - chore: Add external contributor to CHANGELOG.md ([#26017](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26017)) - chore: Add external contributor to CHANGELOG.md ([#26062](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26062)) - chore: Batch npm dependency updates daily ([#26072](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26072)) - chore: Exclude integration and bundler tests from Dependabot updates ([#26075](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26075)) - chore: Ignore major Prisma dependency updates ([#26063](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26063)) - chore: Prune unused regexp dependencies from lockfile ([#25948](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25948)) - chore: Refresh Smithy deprecation metadata in lockfile ([#25971](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25971)) - chore: Remove unused eslint-plugin-regexp dependencies ([#25944](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25944)) - chore: Remove unused test and build dependencies ([#25945](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25945)) - ci(canary): Build the canary test matrix from `canaryVariants` ([#25866](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25866)) - ci(deps): Bump anthropics/claude-code-action from 1.0.236 to 1.0.264 ([#25952](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25952)) - ci(deps): Bump anthropics/claude-code-action from 1.0.264 to 1.0.266 ([#26008](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26008)) - ci(deps): Bump getsentry/craft from 2.31.2 to 3.4.0 ([#25987](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25987)) - ci(deps): Bump getsentry/craft from 3.4.0 to 3.5.0 ([#26011](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26011)) - ci(deps): Bump getsentry/github-workflows/validate-pr from 36c729264d2edc29ebae61950c50e1e9f043ad7e to 01bcb7fe69bb48bacd83e675840e3dc95b33c730 ([#25954](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25954)) - ci(deps): Group langchain dependabot updates and skip majors ([#26041](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26041)) - ci(deps): Ignore langchain in dependabot ([#26056](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26056)) - ci(node): Add optional Node 27 alpha tests ([#25984](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25984)) - ci: Drop dead matrix reference in Deno unit tests job ([#25852](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25852)) - ci: Include v10 in base-branch metadata ([#25977](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25977)) - ci: run CI on GitHub-hosted runners again ([#26057](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26057)) - ci: Split the E2E test matrix into two jobs ([#25913](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25913)) - docs(changelog): Add monitorCronJobs to Unreleased ([#25996](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25996)) - docs(changelog): Restore order of unreleased section in changelog ([#26006](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26006)) - feat(deps): Bump aws-sdk/client-lambda from 3.1068.0 to 3.1161.0 ([#26026](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26026)) - feat(deps): Bump embroider/addon-shim from 1.10.3 to 1.11.0 ([#26048](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26048)) - feat(deps): Bump flue/runtime from 2.0.3 to 2.3.0 ([#26044](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26044)) - feat(deps): Bump hapi/content from 6.0.2 to 6.0.3 ([#26021](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26021)) - feat(deps): Bump hono/node-server from 2.0.10 to 2.1.3 ([#26053](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26053)) - feat(deps): Bump sveltejs/acorn-typescript from 1.0.9 to 1.0.13 ([#26050](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26050)) - feat(deps): Bump types/aws-lambda from 8.10.161 to 8.10.164 ([#26066](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26066)) - feat(deps): Bump axios from 1.20.0 to 1.21.0 ([#26033](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26033)) - feat(deps): Bump dataloader from 2.2.2 to 2.2.3 ([#25891](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25891)) - feat(deps): Bump lodash.omit from 4.5.0 to 4.18.0 ([#26055](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26055)) - feat(deps): Bump node-forge from 1.4.0 to 1.4.2 ([#26020](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26020)) - feat(deps): Bump pg and types/pg ([#26042](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26042)) - feat(deps): Bump proxy from 2.1.1 to 4.1.0 ([#26029](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26029)) - feat(deps): Bump valibot from 1.4.2 to 1.5.0 ([#25957](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25957)) - feat(deps): Bump vite from 8.3.1 to 8.3.5 ([#26045](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26045)) - feat(deps): Bump yargs from 16.2.0 to 18.2.0 ([#26031](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26031)) - fix(build): Handle CRLF line endings in pnpm-workspace.yaml check ([#26083](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26083)) - fix(deps): Bump seroval to 1.6.12 and 1.7.7 ([#26047](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26047)) - fix(deps): Bump tar from 7.5.11 to 7.5.22 ([#26025](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26025)) - perf(ci): Increase tarball packing concurrency ([#25979](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25979)) - perf(ci): Speed up Next.js E2E tests by sharding into dev/prod ([#25960](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25960)) - perf(ci): Split Next.js application-key tests by environment ([#26040](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26040)) - ref(astro): Use convention constants for attribute keys ([#25894](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25894)) - ref(browser): Use convention constants for attribute keys ([#25895](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25895)) - ref(browser-utils): Use convention constants for attribute keys ([#25896](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25896)) - ref(bun): Use convention constants for attribute keys ([#25897](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25897)) - ref(cloudflare): Simplify shared SDK initialization ([#25864](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25864)) - ref(cloudflare): Use convention constants for attribute keys ([#25898](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25898)) - ref(core): Use convention constants for attribute keys ([#25899](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25899)) - ref(deno): Use convention constants for attribute keys ([#25900](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25900)) - ref(google-cloud-serverless): Use convention constants for attribute keys ([#25901](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25901)) - ref(nextjs): Use convention constants for attribute keys ([#25902](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25902)) - ref(node): Use convention constants for attribute keys ([#25903](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25903)) - ref(nuxt): Use convention constants for attribute keys ([#25904](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25904)) - ref(profiling-node): Use convention constants for attribute keys ([#25905](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25905)) - ref(react-router): Use convention constants for attribute keys ([#25906](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25906)) - ref(replay-internal): Use convention constants for attribute keys ([#25907](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25907)) - ref(server-utils): Clarify PostgreSQL instrumentation filenames ([#25939](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25939)) - ref(server-utils): Remove `requiresParentSpan` in favor of `onlyIfParent` ([#25926](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25926)) - ref(server-utils): Share the postgres.js query settlement logic ([#26094](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26094)) - ref(server-utils): Use convention constants for attribute keys ([#25908](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25908)) - ref(sveltekit): Use convention constants for attribute keys ([#25909](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25909)) - ref: Pass optional span attributes directly instead of conditional spreads ([#25878](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25878)) - test(aws-serverless): Move Lambda extension setup outside test timeout ([#25975](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25975)) - test(browser): Stabilize long animation frame tests ([#25974](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25974)) - test(bundler-plugins): Stabilize missing-parser test setup ([#25972](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25972)) - test(bundler-tests): Guard server runtime entries against build-time tooling ([#25724](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25724)) - test(e2e): Check node-openai-decisions through the event proxy ([#25840](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25840)) - test(e2e): Import Type from typebox in node-pi-durable ([#26018](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26018)) - test(e2e): Move canary variants into `canaryVariants` ([#25865](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25865)) - test(e2e): Move OpenAI and Anthropic send-to-sentry cases into gen-ai-libraries ([#25841](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25841)) - test(e2e): Point together-ai 1.x at OpenRouter's base URL in gen-ai-libraries ([#25947](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25947)) - test(e2e): Remove node-flue-send-to-sentry ([#25839](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25839)) - test(e2e): Rename nuxt-5 middleware files to avoid Nitro's dotted suffixes ([#25923](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25923)) - test(effect): Assert error severities without event ordering ([#25973](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25973)) - test(node-integration-tests): Install Flue and pi-durable as package dependencies ([#25933](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25933)) - test(node-integration-tests): Install Prisma suite dependencies as package dependencies ([#25943](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25943)) - test(node-integration-tests): Install single-version suite dependencies as package dependencies ([#25936](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25936)) - test(nuxt): cover the client plugin's pages-router instrumentation ([#25348](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/25348)) - test(nuxt): Make the `nuxt-5 (tunnel-dev)` e2e variant optional ([#26004](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26004)) - test(nuxt): Use Nuxt's own Nitro and add db0 in nuxt-5 E2E app ([#26095](https://github-redirect.dependabot.com/getsentry/sentry-javascript/pull/26095))Work in this release was contributed by lazerg, chiliec, 61465, jpdefo, and AyeshaWaseemAhmad. Thank you for your contributions!
11.10.0
feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)
Set
tunnel: truein your browserSentry.initcall to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.To serve the tunnel, add
serveTunnelIntegration()to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:If the browser uses a different DSN than the server, set
serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs exporthandleTunnelRequestIfMatched,handleTunnelRequest,isTunnelRequestandgetTunnelPath:The
requestoption ofhandleTunnelRequestis deprecated and will be removed in v12.feat: Make span origins spec compliant (#25602)
Some span origins changed their names to follow the trace origin spec:
auto.amqplib.*is nowauto.queue.amqplib.*, andauto.kafkajs.*is nowauto.queue.kafkajs.*.auto.vercelai.channelis nowauto.ai.vercelai.auto.firebase.firestoreis nowauto.db.firebase.firestore, andauto.firebase.functionsis nowauto.function.firebase.auto.aws.aws_sdkis nowauto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.auto.aws_lambdais nowauto.function.aws_serverless.auto.mcp.notificationis nowauto.function.mcp_server.notification.auto.db.cloudflare.durable_object.sqlis nowauto.db.cloudflare.durable_object_sql.auto.http.browser.{lcp,cls,inp}is nowauto.ui.browser.{lcp,cls,inp}.If you have
ignoreSpansrules, queries or alerts on the old origins, change them to use the new origins.feat(bun): Add incoming request options and request sessions to
bunServerIntegration(#25580)bunServerIntegrationnow accepts the same options asdenoServeIntegration:ignoreRequestBody,ignoreIncomingRequests,ignoreStaticAssets,spans,onSpanCreated,onSpanEnd,sessionsandsessionFlushingDelayMS. The callbacks receive the webRequest.Bun.servenow records a request session for each incoming request. Sessions are sent only when areleaseis set. To turn them off, setbunServerIntegration({ sessions: false }).ignoreStaticAssetsdefaults totrue, soBun.serveno longer creates spans forGETrequests to common static assets such asfavicon.ico,robots.txtor*.jsfiles. To keep these spans, setbunServerIntegration({ ignoreStaticAssets: false }).Bun.servespans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown forOPTIONSandHEADrequests are now captured.feat(bun): Inject debug IDs and upload source maps in
sentryBunPlugin(#25670)sentryBunPluginfromsentry/bun/pluginnow accepts the same options assentryEsbuildPlugin(org,project,authToken,release,sourcemaps, ...). WhenBun.buildwrites source maps tooutdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to runsentry sourcemap injectandsentry sourcemap uploadafter the build.Like the other bundler plugins,
sentryBunPluginnow sends build telemetry and injects the release it detects (for example, from git). To turn off telemetry, settelemetry: false.feat(cloudflare): Add incoming request span options to
httpServerIntegration(#25582)Cloudflare's
httpServerIntegrationnow acceptsignoreIncomingRequests,ignoreStaticAssets,spans,onSpanCreatedandonSpanEnd, with the same meaning as in the Node, Deno and Bun integrations. The callbacks receive the webRequest.ignoreStaticAssetsdefaults totrue, so workers no longer create spans forGETrequests to common static assets such asfavicon.ico,robots.txtor*.jsfiles. To keep these spans, sethttpServerIntegration({ ignoreStaticAssets: false }). Request spans also follow the client's tracing configuration by default, so the SDK does not start them when tracing is disabled. IfignoreRequestBodythrows, the request no longer fails, and the SDK skips the body.feat(cloudflare): Let users configure the channel integrations (#25584)
When the
sentry/cloudflare/viteplugin bundles an instrumented package (for examplepgoropenai), the SDK adds the matching integration with its default options.sentry/cloudflarenow exports these integrations, so you can set their options, for example ininstrument.server.ts:These integrations need the vite plugin. Without it, they record nothing, and with
debug: truethe SDK logs a warning.feat(node): Add
onSpanEndtohttpIntegration(#25581)httpIntegrationandhttpServerSpansIntegrationnow acceptonSpanEnd, a hook that runs when the response for an incoming request finishes, before its span ends. Use it to change the span based on the response. Deno and Bun already have this option.feat(node, bun, deno, cloudflare): Align portable exports across server SDKs (#25583)
Node, Bun, Deno and Cloudflare now export the same helpers from
sentry/coreandsentry/server-utilswhere they work on that runtime:moduleMetadataIntegration,instrumentPostgresJsSql,instrumentCreateReactAgent,awsIntegrationand theFlueOptionstype.awsIntegrationwas already in their default integrations.parameterizeandinstrumentStateGraphCompile.LogandLogSeverityLeveltypes.fastifyIntegration, which was already in its default integrations.feat(nuxt): Start the server SDK on the Nuxt Vite server (experimental) (#25524)
Sentry now supports Node.js production builds using Nuxt 4.6's experimental Vite server (
server: { builder: 'vite' }). Yoursentry.server.configloads automatically, enabling request tracing and automatic database spans for supported libraries.Development mode, Cloudflare, automatic capture of server rendering errors, and connecting server and browser traces via HTML meta tags are not yet supported. This experimental support may change in minor releases.
ref(deno, bun): Use a shared request handler wrapper for
Deno.serveandBun.serve(#25586, #25587)Deno.serveandBun.servenow use the same request handler wrapper, which Cloudflare will also use. On both runtimes, errors inOPTIONSandHEADrequests now carry the request data, and the SDK keeps everySet-Cookieheader of a response instead of only the last one.For Deno users:
Bun.servespans now follow the Sentry conventions forhttp.serverspans, as on Node, Deno and Cloudflare:url.templateis nowhttp.route. Routes without parameters also gethttp.routeand theroutesource.url.domainis nowserver.address./gets theroutesource and the nameGET /.user_agent.originalandhttp.request.body.size.Other Changes
execute_toolspans for Anthropic'sbeta.sessions.events.toolRunner()(#25554)varin the Vite transform (#25663)defaultkeyword in the Vite transform (#25741)undicifetch andnode:http(#25441)Internal Changes
ServerRequestOptionstype across runtimes (#25579)GEN_AI_EXTRACTop fromsentry/conventions(#25734)Work in this release was contributed by 4ktLuffy, faizansaiyed123, itisrmk, kunal649, kyrylolvov, larcane97, lfantone, pcbeingused333, psh4607, and seongwon030. Thank you for your contributions!
11.9.0
Important Changes
feat: Rename
diagnostic_channel, fetch and gRPC span origins (#25601)Some span origins changed their names to match the other v11 origins:
auto.graphql.diagnostic_channelis nowauto.graphql.graphql.auto.db.redis.diagnostic_channel,auto.db.mysql2.diagnostic_channelandauto.db.mongoose.diagnostic_channelnow end in.native_channel.auto.http.wintercg_fetchis nowauto.http.fetch, as on Bun, Deno and Cloudflare.auto.grpc.serverlessis nowauto.grpc.google_cloud.If you have
ignoreSpansrules, queries or alerts on the old origins, change them to use the new origins.feat(deno): Add incoming request options to
denoServeIntegration(#25493)denoServeIntegrationnow acceptsignoreRequestBody,ignoreIncomingRequests,ignoreStaticAssets,spans,onSpanCreatedandonSpanEnd, with the same meaning as indenoHttpIntegration. The callbacks receive the webRequest.ignoreStaticAssetsdefaults totrue, soDeno.serveno longer creates spans forGETrequests to common static assets such asfavicon.ico,robots.txtor*.jsfiles. To keep these spans, setdenoServeIntegration({ ignoreStaticAssets: false }).Deno.servespans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled.feat(deno): Record request sessions for
Deno.serve(#25496)denoServeIntegrationnow records a request session for each incoming request, asdenoHttpIntegrationdoes fornode:http. This gives release health and crash-free rates forDeno.serveapps. Sessions are sent only when areleaseis set. To turn them off, setdenoServeIntegration({ sessions: false }).sessionFlushingDelayMSsets how long the SDK waits before it sends the session aggregate.feat(deno): Register channel injection hooks from
init()(#25546)Sentry.init()insentry/denonow registers the diagnostics-channel injection hooks, assentry/nodedoes. The channel integrations now record spans without--preload=npm:sentry/deno/import, for modules that you import afterinit(). To also instrument modules that load beforeinit(), such as static imports in your entry module, keep the preload. Withdebug: true, the SDK logs a warning when no injection is active.On Node.js, tracing-hooks messages now show with
debug: trueinstead of withDEBUG=apm-js-collab/*.feat(nextjs): Add a tunnel route handler that sends only the event payload to Sentry (#25456)
feat(nextjs): Never emit trace meta tags from a prerender (#25141)
Pageloads of apps with
cacheComponentsenabled are connected to their server request again. Pages that Next.js prerenders no longer carry trace information, so a cached page can no longer connect visitors to a request that was not theirs. This also applies to ISR pages. The pageload waits for the trace information when it arrives with the part of the page that streams in after a cached shell.If you set up OpenTelemetry yourself and register
SentryPropagator, registerNextSentryPropagatorinstead and pass your tracer provider tomarkPrerendersOnTracerProvider, so that your prerendered pages carry no trace information either.feat(nextjs): Send tunnel route requests with
credentials: 'omit'(#25509)feat(nitro): Report a single
http.serverspan per request (#25295)A Nitro request now creates only one
http.serverspan. The nestedhttp.serverspans with the originsauto.http.nitro.srvxandauto.http.nitro.h3are removed. h3 route handlers now get ahandlerspan, and middleware spans are direct children of thehttp.serverspan. If you have queries or alerts on the removed spans, change them to use thehttp.serverspan or thehandlerspan.fix: Use
auto.http.http_serverorigin for allnode:httpserver spans (#25604)On Bun and Deno,
node:httpserver spans now have the originauto.http.http_serverinstead ofauto.http.server, as on Node.js. On Node.js, nothing changes.Bun.servespans keepauto.http.bun.serveandDeno.servespans keepauto.http.deno. If you haveignoreSpansorbeforeSendSpanrules, queries or alerts onauto.http.server, change them to useauto.http.http_server.Other Changes
LoaderSentrytype export (#25357)isStreamingResponseoption and detect streamed RSC responses (#24932)dataCollection.mcpoption (#25553)use cachehits to their fill across instances (#25448)nitroIntegration(#25349)execute_toolspans for Anthropic'sbeta.messages.toolRunner()(#25320)sentry/cloudflare/viteon Cloudflare Workers (#25347)function.awsspan when a callback-style handler calls back (#25543)globalThisbeforeglobalin the injected snippet (#25365)