Update dependency @sentry/node to v11 by renovate[bot] · Pull Request #886 · ordermentum/steveo

renovate · 2025-02-09T15:14:21Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/node (source)	`^7.56.0` → `^11.0.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v11.10.0`

Compare Source

Important Changes

feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:
```
// browser
Sentry.init({ dsn, tunnel: true });

// server
Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });
```
If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:
```
app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());
```
The request option of handleTunnelRequest is deprecated and will be removed in v12.
feat: Make span origins spec compliant (#25602)

Some span origins changed their names to follow the trace origin spec:
- auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
- auto.vercelai.channel is now auto.ai.vercelai.
- auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
- auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
- auto.aws_lambda is now auto.function.aws_serverless.
- auto.mcp.notification is now auto.function.mcp_server.notification.
- auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
- auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.
If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.
feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.
feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

sentryBunPlugin from @sentry/bun/plugin now accepts the same options as sentryEsbuildPlugin (org, project, authToken, release, sourcemaps, ...). When Bun.build writes source maps to outdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to run sentry sourcemap inject and sentry sourcemap upload after the build.

Like the other bundler plugins, sentryBunPlugin now sends build telemetry and injects the release it detects (for example, from git). To turn off telemetry, set telemetry: false.
feat(cloudflare): Add incoming request span options to httpServerIntegration (#25582)

Cloudflare's httpServerIntegration now accepts ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated and onSpanEnd, with the same meaning as in the Node, Deno and Bun integrations. The callbacks receive the web Request.

ignoreStaticAssets defaults to true, so workers no longer create spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set httpServerIntegration({ ignoreStaticAssets: false }). Request spans also follow the client's tracing configuration by default, so the SDK does not start them when tracing is disabled. If ignoreRequestBody throws, the request no longer fails, and the SDK skips the body.
feat(cloudflare): Let users configure the channel integrations (#25584)

When the @sentry/cloudflare/vite plugin bundles an instrumented package (for example pg or openai), the SDK adds the matching integration with its default options. @sentry/cloudflare now exports these integrations, so you can set their options, for example in instrument.server.ts:
```
export default Sentry.defineCloudflareOptions(env => ({
  dsn: env.SENTRY_DSN,
  integrations: [Sentry.openAIIntegration({ recordInputs: false, recordOutputs: false })],
}));
```
These integrations need the vite plugin. Without it, they record nothing, and with debug: true the SDK logs a warning.
feat(node): Add onSpanEnd to httpIntegration (#25581)

httpIntegration and httpServerSpansIntegration now accept onSpanEnd, a hook that runs when the response for an incoming request finishes, before its span ends. Use it to change the span based on the response. Deno and Bun already have this option.
feat(node, bun, deno, cloudflare): Align portable exports across server SDKs (#25583)

Node, Bun, Deno and Cloudflare now export the same helpers from @sentry/core and @sentry/server-utils where they work on that runtime:
- Node and Bun now export moduleMetadataIntegration, instrumentPostgresJsSql, instrumentCreateReactAgent, awsIntegration and the FlueOptions type. awsIntegration was already in their default integrations.
- Deno and Cloudflare now export parameterize and instrumentStateGraphCompile.
- Bun and Cloudflare now export the Log and LogSeverityLevel types.
- Deno now exports fastifyIntegration, which was already in its default integrations.
feat(nuxt): Start the server SDK on the Nuxt Vite server (experimental) (#25524)

Sentry now supports Node.js production builds using Nuxt 4.6's experimental Vite server (server: { builder: 'vite' }). Your sentry.server.config loads automatically, enabling request tracing and automatic database spans for supported libraries.

Development mode, Cloudflare, automatic capture of server rendering errors, and connecting server and browser traces via HTML meta tags are not yet supported. This experimental support may change in minor releases.
ref(deno, bun): Use a shared request handler wrapper for Deno.serve and Bun.serve (#25586, #25587)

Deno.serve and Bun.serve now use the same request handler wrapper, which Cloudflare will also use. On both runtimes, errors in OPTIONS and HEAD requests now carry the request data, and the SDK keeps every Set-Cookie header of a response instead of only the last one.

For Deno users:
- When the source of a streamed response fails, the SDK now captures the error and marks the span as failed.
- The SDK no longer reads a streamed response ahead of the client.
Bun.serve spans now follow the Sentry conventions for http.server spans, as on Node, Deno and Cloudflare:
- url.template is now http.route. Routes without parameters also get http.route and the route source.
- url.domain is now server.address.
- A request to / gets the route source and the name GET /.
- Spans also get user_agent.original and http.request.body.size.

Other Changes

chore(deps): Bump rrweb to 2.45.0 (#25794)
feat: Export the Node bundler plugins from SDKs that wrap @sentry/node (#25536)
feat(cloudflare): instrument Workers KV bindings (#25488)
feat(nextjs): Warn when Next.js production builds miss the instrumentation file (#25603)
feat(react-router): Support renderToReadableStream in createSentryHandleRequest (#25254)
feat(server-utils): Emit execute_tool spans for Anthropic's beta.sessions.events.toolRunner() (#25554)
feat(server-utils): Record Workers AI Clairic calls as gen_ai.extract spans (#25624)
feat(server-utils): Instrument together-ai 1.x (#25823)
fix(browser): Preserve empty stacks in continuous profiles (#25764)
fix(browser): resolve request URLs against location.href in tracing (#25784)
fix(build): Make CJS re-exports visible to Node ESM imports (#25599)
fix(bun): Add systemErrorIntegration to default integrations (#25681)
fix(cloudflare): Bind a default re-export with var in the Vite transform (#25663)
fix(cloudflare): Do not add back channel integrations the user removed (#25585)
fix(cloudflare): Skip comments when locating the default keyword in the Vite transform (#25741)
fix(core): allow project arrays in framework build options (#25534)
fix(core): Drop sampled-out errors before they take a promise buffer slot (#25751)
fix(core): End node:http client spans when the response is destroyed (#25503)
fix(core): Preserve AI proxy property references (#22474)
fix(core): Resolve relative URLs when enhancing fetch error messages (#25555)
fix(feedback): Wait for frames without the form before capturing the screenshot (#25658)
fix(hono): Make the Hono middleware types compile on Hono 5 (#25452)
fix(node): Flush buffered streamed spans on process exit (#25539)
fix(node): Read module versions from the isolated layouts of pnpm and Bun (#25526)
fix(node): Set the eve conversation id on model.started for eve 0.84+ (#25809)
fix(node): Skip spans for outgoing requests to Sentry via undici fetch and node:http (#25441)
fix(node): Use the request method for Hapi routes with multiple methods (#25527)
fix(nuxt,nitro): Accept Nitro 3 betas without narrowing peer support (#25815)
fix(opentelemetry): Convert OpenTelemetry performance.now() timestamps (#25790)
fix(react): Avoid double slashes in manifest route names (#25770)
fix(react): Parameterize React Router transactions with encoded params (#25639)
fix(remix): Drop Remix 3 release candidates from the peer range (#25808)
fix(replay): Apply attribute masking to breadcrumb messages (#25180)
fix(server-utils): Cap the runs the LangChain callback handler keeps open (#25595)
fix(server-utils): Keep OpenAI streamed tool calls that have no index (#25622)
fix(server-utils): Keep OpenRouter evaluation confidence and legend on Vercel AI spans (#25644)
fix(server-utils): Nest Flue runs on Node under the request that dispatched them (#25549)
fix(server-utils): Record AI SDK tool spans for tools run outside its tool loop (#25820)
fix(server-utils): Use cumulative input and cache token counts from streamed message_delta (#25623)
fix(server-utils): Use the stored pi-durable session id as conversation id (#25792)
fix(tanstackstart-react): Unminify server errors in Nitro builds (#25360)

Internal Changes

chore: Add catch-all rule for shared packages in CODEOWNERS (#25789)
chore: Pin pnpm 10 in Volta and remove .npmrc (#25641)
chore: Replace Volta with pnpm-managed node versions (#25689)
chore: Update PR template and prompt agent to use it (#25763)
chore: Use the isolated pnpm node_modules layout (#25368)
chore(ci): remove browser flaky-test detector workflow (#25712)
chore(ci): remove PR review reminders (#25711)
chore(deps-dev): Bump @remix-run/route-pattern from 0.24.1 to 1.0.0 in the remix group across 1 directory (#25652)
chore(deps-dev): Bump es-check from 7.2.1 to 9.8.1 (#25656)
chore(deps-dev): Bump hono from 4.13.9 to 4.13.11 in /packages/hono (#25716)
chore(deps-dev): Bump next from 15.5.27 to 15.5.28 in /packages/nextjs (#25661)
chore(deps-dev): Bump zod from 3.25.76 to 4.6.7 (#25655)
chore(deps): Bump next from 16.3.8 to 16.4.1 in /dev-packages/e2e-tests/test-applications/vinext-cf-workers (#25672)
chore(deps): Bump zod from 4.5.4 to 4.6.6 in /dev-packages/e2e-tests/test-applications/node-eve (#25722)
chore(deps): Bump zod from 4.5.4 to 4.6.6 in /dev-packages/e2e-tests/test-applications/node-mastra (#25721)
ci: Always report optional E2E results and update the report on re-runs (#25651)
ci: Fail the optional E2E report job when it cannot update the PR comment (#25819)
ci: Prepare required workflows for develop merge queue (#25642)
ci: Remove temporary pull_request trigger from optional E2E workflow (#25817)
ci: Show an unknown status for optional E2E jobs without a final result (#25660)
ci: Upload the weekly flaky test report as an artifact (#25814)
ci(e2e): rightsize namespace runner jobs
ci(size-limit): Measure bundles when increases are accepted (#25788)
docs: Update contribution guidelines (#25714)
docs: Use dark-mode-aware Sentry logo in READMEs (#25775)
feat(deps): Bump fastify from 5.12.5 to 5.12.7 (#25654)
docs(changelog): Clarify React Router framework mode minimum in 11.0.0 (#25771)
ref(core): Add shared ServerRequestOptions type across runtimes (#25579)
ref(hono): Share the middleware classification (#25453)
ref(server-utils): Use GEN_AI_EXTRACT op from @sentry/conventions (#25734)
Remove permissions from settings.json (#25766)
test: Check that runtimes drop the server spans of managed tunnel requests (#25414)
test: Fix unit test timeouts from cold dynamic imports (#25811)
test: Wire the managed tunnel by hand in Node, Cloudflare and Next.js (#25785)
test(browser): Fix flaky long task, pageload cancellation and CLS timing assertions (#25518)
test(cloudflare): Add Workers AI E2E test for Clairic (#25625)
test(cloudflare): Bump agents and MCP SDK in cloudflare-mcp-agent e2e app (#25830)
test(cloudflare): Check that Durable Object invocations end when the method returns (#25511)
test(cloudflare): Fix flaky D1 query span naming test (#25810)
test(e2e): Add node-flue-send-to-sentry test app (#25550)
test(e2e): Assert source map upload and stripping with a shared helper (#25636)
test(e2e): Fix optional Anthropic and OpenAI decisions apps (#25795)
test(e2e): Pin @mastra/deployer in node-mastra to match @mastra/core (#25824)
test(e2e): Pull Supabase images from GHCR (#25718)
test(nextjs): Raise @opennextjs/cloudflare floor for nextjs-16 (#25682)
test(nextjs): Unpin nextjs-16-cf-workers latest variant back to next@latest (#25124)
test(node): Retry stalled npm installs in integration test setup (#25685)
test(react-router): Use a separate URL per loader error test in instrumentation API e2e test (#25607)
test(remix): Cover prefetched navigations in the Remix 3 E2E app (#25829)
test(replay): Fix flaky EventBufferCompressionWorker size limit test (#25519)
test(tanstackstart-react): Add source map E2E app (#25363)

Work in this release was contributed by @4ktLuffy, @faizansaiyed123, @itisrmk, @kunal649, @kyrylolvov, @larcane97, @lfantone, @pcbeingused333, @psh4607, and @seongwon030. Thank you for your contributions!

`v11.9.0`

Compare Source

Important Changes

feat: Rename diagnostic_channel, fetch and gRPC span origins (#25601)

Some span origins changed their names to match the other v11 origins:
- auto.graphql.diagnostic_channel is now auto.graphql.graphql.
- auto.db.redis.diagnostic_channel, auto.db.mysql2.diagnostic_channel and auto.db.mongoose.diagnostic_channel now end in .native_channel.
- auto.http.wintercg_fetch is now auto.http.fetch, as on Bun, Deno and Cloudflare.
- auto.grpc.serverless is now auto.grpc.google_cloud.
If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.
feat(deno): Add incoming request options to denoServeIntegration (#25493)

denoServeIntegration now accepts ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated and onSpanEnd, with the same meaning as in denoHttpIntegration. The callbacks receive the web Request.

ignoreStaticAssets defaults to true, so Deno.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set denoServeIntegration({ ignoreStaticAssets: false }). Deno.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled.
feat(deno): Record request sessions for Deno.serve (#25496)

denoServeIntegration now records a request session for each incoming request, as denoHttpIntegration does for node:http. This gives release health and crash-free rates for Deno.serve apps. Sessions are sent only when a release is set. To turn them off, set denoServeIntegration({ sessions: false }). sessionFlushingDelayMS sets how long the SDK waits before it sends the session aggregate.
feat(deno): Register channel injection hooks from init() (#25546)

Sentry.init() in @sentry/deno now registers the diagnostics-channel injection hooks, as @sentry/node does. The channel integrations now record spans without --preload=npm:@sentry/deno/import, for modules that you import after init(). To also instrument modules that load before init(), such as static imports in your entry module, keep the preload. With debug: true, the SDK logs a warning when no injection is active.

On Node.js, tracing-hooks messages now show with debug: true instead of with DEBUG=@apm-js-collab/*.
feat(nextjs): Add a tunnel route handler that sends only the event payload to Sentry (#25456)

The tunnelRoute option can now send events through a route handler in your app. The handler forwards only the event payload to Sentry, and no request headers. To use it, add this file next to your tunnelRoute option:
```
// app/sentry-tunnel/route.ts (or src/app/sentry-tunnel/route.ts)
export { POST } from '@sentry/nextjs/tunnel';
```
The handler accepts events for the DSN of your server SDK. To accept other DSNs, use createSentryTunnelRoute({ allowedDsns }) from the same import. Without the file, the tunnel route works as before.

Also, the server no longer sends spans of tunnel requests when span streaming is on, because these spans only show the SDK's own traffic.
feat(nextjs): Never emit trace meta tags from a prerender (#25141)

Pageloads of apps with cacheComponents enabled are connected to their server request again. Pages that Next.js prerenders no longer carry trace information, so a cached page can no longer connect visitors to a request that was not theirs. This also applies to ISR pages. The pageload waits for the trace information when it arrives with the part of the page that streams in after a cached shell.

If you set up OpenTelemetry yourself and register SentryPropagator, register NextSentryPropagator instead and pass your tracer provider to markPrerendersOnTracerProvider, so that your prerendered pages carry no trace information either.
feat(nextjs): Send tunnel route requests with credentials: 'omit' (#25509)

With tunnelRoute and no tunnel route handler, @sentry/nextjs now sends events from the browser with credentials: 'omit', because the tunnel route does not need cookies.
If a layer in front of your app checks cookies before it lets requests through (for example Vercel Deployment Protection), you can send them again in your browser Sentry.init call:
```
// instrumentation-client.ts
Sentry.init({
  transportOptions: { fetchOptions: { credentials: 'same-origin' } },
});
```
feat(nitro): Report a single http.server span per request (#25295)

A Nitro request now creates only one http.server span. The nested http.server spans with the origins auto.http.nitro.srvx and auto.http.nitro.h3 are removed. h3 route handlers now get a handler span, and middleware spans are direct children of the http.server span. If you have queries or alerts on the removed spans, change them to use the http.server span or the handler span.
fix: Use auto.http.http_server origin for all node:http server spans (#25604)

On Bun and Deno, node:http server spans now have the origin auto.http.http_server instead of auto.http.server, as on Node.js. On Node.js, nothing changes. Bun.serve spans keep auto.http.bun.serve and Deno.serve spans keep auto.http.deno. If you have ignoreSpans or beforeSendSpan rules, queries or alerts on auto.http.server, change them to use auto.http.http_server.

Other Changes

feat(browser): Add LoaderSentry type export (#25357)
feat(cloudflare): Add isStreamingResponse option and detect streamed RSC responses (#24932)
feat(core): Add dataCollection.mcp option (#25553)
feat(core): Limit the body size of tunnel requests (#25515)
feat(nextjs): Link use cache hits to their fill across instances (#25448)
feat(nextjs): Wait for the resumed part of a document before starting the pageload (#25142)
feat(nitro): Merge the nitro integrations into a single nitroIntegration (#25349)
feat(server-utils): Emit execute_tool spans for Anthropic's beta.messages.toolRunner() (#25320)
fix(astro): defer to @sentry/cloudflare/vite on Cloudflare Workers (#25347)
fix(aws-serverless): End the function.aws span when a callback-style handler calls back (#25543)
fix(browser): Skip profiling for unsampled active root spans (#25498)
fix(bundler-plugins): Check globalThis before global in the injected snippet (#25365)
fix(bundler-plugins): Inject the release only into chunks that load at startup (#25541)
fix(cloudflare): auto-instrument a re-exported default export (#25345)
fix(cloudflare): Deliver check-ins and events from forked isolation scopes (#25374)
fix(cloudflare): Don't hold Durable Object invocations open with the segment-end flush timer (#25490)
fix(cloudflare): keep default exports intact when auto-instrumenting (#25372)
fix(core): Use trace_metric data category for metrics rate limits and client reports (#25606)
fix(deps): Allow @opentelemetry/api 1.9 again (#25684)
fix(deno): Re-export portable helpers that Cloudflare exposes (#25491)
fix(elysia): Set SDK metadata on the options passed to init (#24521)
fix(elysia): use Node transport on Node runtimes (#25015)
fix(hono): Read connection info from the runtime instead of Hono helpers (#25552)
fix(nextjs): Only inject applicationKey metadata into browser bundles (#25565)
fix(nitro): Use forward slashes for resolved plugin paths on Windows (#25023)
fix(node,vercel-edge,bundler-plugins): Ignore commit env vars set to their own name (#25244)
fix(node): Guard user callbacks in the node:http server instrumentation (#25592)
fix(node): Only read JavaScript and TypeScript source files in ContextLines (#25535)
fix(node): restore tsx runtime instrumentation (#25351)
fix(nuxt): Delete Sentry-enabled source maps from Nitro output directories (#25450)
fix(nuxt): Keep sourcesContent in Nuxt 5 server source maps (#25325)
fix(react): Don't crash ErrorBoundary when error.cause is not an Error (#25542)
fix(react): Match React Router navigations against root routes only (#25336)
fix(server-runtime-injection): Load ESM hook without the build/esm package.json marker (#25562)
fix(server-utils): Bundle the CommonJS dependencies of instrumented packages on Vite 8 (#25523)
fix(server-utils): Keep OpenAI decision confidence on Vercel AI decide spans (#25457)
fix(server-utils): Nest LangChain run spans under their parent run (#25364)
fix(server-utils): Stop the orchestrion Vite plugin from bundling the CJS build of @sentry/server-utils (#25359)
fix(solidstart): Read server action route from the request's root span (#25513)
fix(tanstackstart-react): Delete only the source maps that Sentry enabled (#25362)
fix(vercel-edge): expose portable tracing and feature flag helpers (#25377)
ref(bundler-plugins): Drop @babel/core peer dependency (#25406)
ref(nitro): Move channel-based instrumentation into @sentry/server-utils (#24861)

Internal Changes

build(node): Bump Node to 24.22.1 (#25634)
chore: Add external contributor to CHANGELOG.md (#25367)
chore: Add external contributor to CHANGELOG.md (#25468)
chore: Add external contributor to CHANGELOG.md (#25483)
chore: Add external contributor to CHANGELOG.md (#25485)
chore: Add external contributor to CHANGELOG.md (#25487)
chore: Add external contributor to CHANGELOG.md (#25500)
chore: Add external contributor to CHANGELOG.md (#25505)
chore: Add external contributor to CHANGELOG.md (#25596)
chore: Add external contributor to CHANGELOG.md (#25597)
chore: Add external contributor to CHANGELOG.md (#25611)
chore: Move the monorepo from Yarn 1 to pnpm 12 (#25354)
chore: Update comments related to span links with latest info (#25135)
chore(bugbot): Flag new Cloudflare tests that wrap the worker by hand (#25619)
chore(deps-dev): Bump oxlint and oxfmt (#25578)
chore(deps-dev): Bump vue from 3.2.45 to 3.5.43 (#25413)
chore(deps): Bump @types/node to 20 (#25501)
chore(deps): Bump Playwright to 1.64.1 and pin it exactly (#25382)
chore(hono): Remove "ALPHA" from package.json description (#25521)
chore(size-limit): weekly auto-bump (#25442)
ci: Check bundle size increases per PR (#24737)
ci: Empty cached node_modules that have broken .bin scripts (#25635)
ci: Fail when a Playwright version drifts from the pinned one (#25383)
ci: Keep Namespace cache volumes complete and cache the pnpm binary (#25569)
ci: Move size check reruns into a local action (#25600)
ci: Read the Playwright version from package.json in install-playwright (#25380)
ci: Run GitHub Actions jobs on Namespace runners (#25547)
ci: Run optional E2E tests in a separate workflow (#25548)
ci: Run the Playwright install's npx outside the repo (#25384)
ci: Share the E2E test setup between build.yml and optional-e2e.yml (#25616)
ci: Stop uploading duplicate tarballs to the release artifact (#25688)
ci(cloudflare): Run the integration tests on the latest wrangler too (#25508)
ci(e2e): Run all E2E tests when CI config changes (#25391)
ci(e2e): Run E2E tests with pnpm 12 (#25334)
ci(e2e): Run E2E tests without restoring the monorepo's node_modules (#25403)
ci(e2e): Stop pnpm run from installing the workspace in E2E jobs (#25514)
ci(size-limit): Don't enforce size limits on release PRs (#25631)
docs: Add guide for testing SDK packages with pnpm link (#25512)
feat(deps): Bump @actions/glob from 0.6.1 to 0.7.0 (#25411)
feat(deps): Bump @anthropic-ai/sdk from 0.63.0 to 0.133.0 (#25417)
feat(deps): Bump recast from 0.20.5 to 0.24.0 (#25416)
ref(core): Share the commit env var list used for release detection (#25478)
test(browser): Use blocking scripts in loader integration tests (#25395)
test(deps): Upgrade TanStack Start, Router, and Nitro (#25445)
test(e2e): Add node-otel-sdk-node-v3 e2e app for OpenTelemetry JS v3 (#25630)
test(e2e): Align Playwright versions with the root version (#25381)
test(e2e): Cover Vercel AI decisions in node-openai-decisions-send-to-sentry (#25458)
test(e2e): Drop OpenRouter's [DONE] frame in the Anthropic test app (#25594)
test(e2e): Drop unused @sentry/bundler-plugins dependency from bundler apps (#25399)
test(e2e): Fix peer dependency issues in hydrogen-react-router-7 (#25400)
test(e2e): Install test-utils from a tarball (#25402)
test(e2e): Move app port 38787 out of the ephemeral port range (#25504)
test(e2e): Remove event dumps and their normalization script (#25404)
test(e2e): Retry tests in all dev-mode variants (#25640)
test(e2e): Use nitro beta and Vite 8 in tanstackstart apps (#25451)
test(nestjs): Fix flaky schedule instrumentation error tests (#25447)
test(nextjs): Bump nextjs-16 E2E app to Next.js 16.4.2 (#25686)
test(nextjs): Fix flaky nextjs-16 metrics tests (#25517)
test(nextjs): Use React 19.3.1 in the vinext e2e variants (#25449)
test(nextjs): Warm the module graph before the tunnel route tests (#25593)
test(node): skip the Prisma 8 suite on Node 20 (#25421)
test(nuxt): Pin the nuxt-4 e2e MongoDB image to 8.0 (#25557)
test(nuxt): Pin the nuxt-5 e2e MongoDB image to 8.0 (#25564)
test(nuxt): Wait for hydration before clicking in error tests (#25520)
test(react): Fix flaky react-router-6 aborted SSE console assertion (#25398)
test(replay): Fix flaky bufferStalledRequests segmentId assertion (#25394)

Work in this release was contributed by @4ktLuffy, @adityareddy-dev, @dasilvaluis, @faizansaiyed123, @jpdefo, @Jxxunnn, @mikamikasuki, @philipatkinson, @rubas, and @Shubham-Padkonde. Thank you for your contributions!

`v11.8.0`

Compare Source

Important Changes

feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:
- Node.js 20.19.0 or higher is required.
- @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
- The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
- Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.
feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

feat(core): Support SuppressedError in LinkedErrors integration (#25246)
fix(astro): Delete generated source maps for static output (#25310)
fix(astro): Upload source maps of Astro 7's prerender build (#25309)
fix(browser): Apply urlQueryParams to the Referer header (#25324)
fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
fix(hono): Expose runtime-specific SDK options (#25290)
fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)
fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)
fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)
fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)
fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)
fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

Internal Changes

chore: Add external contributor to CHANGELOG.md (#25375)
ci: Install the pnpm version that Volta pins (#25287)
license: Add cli FSL notice to package licenses (#25314)
ref(core): use shared MCP attribute conventions (#25059)
ref(tanstackstart-react): Reuse shared component annotation options (#25313)
test(browser): Keep whitespace text out of the handlers-lcp page (#25280)
test(bun): Restore @sentry/core spies after the Bun.serve tests (#25276)
test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)
test(e2e): Add node-openai-send-to-sentry test app (#24824)
test(e2e): Add nuxt-5-sourcemaps test (#25268)
test(e2e): Inherit root Volta config in all e2e test apps (#25369)
test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)
test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)
test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#25279)
test(node): Await the child exit in the "should exit" integration tests (#25277)
test(node): Cover ioredis v6 in the diagnostics_channel suite (#25300)
test(node): Cover LangChain model calls made from a tool without config (#25326)
test(node): Log slow and failed Docker Compose starts in integration tests (#25278)
test(node): Unflake captureMessage with_level test (#25358)
test(sveltekit): Pin rollup to 4.64.5 (#25328)

Work in this release was contributed by @kunal649 and @mketiku. Thank you for your contributions!

`v11.7.0`

Compare Source

Important Changes

feat(cloudflare): Add opt-in cron monitoring for Cron Triggers (#25014)

The new cronTriggersIntegration sends check-ins for Cron Triggers. Each check-in includes the schedule from controller.cron, so Sentry creates the monitor on the first run. The i

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Australia/Sydney)

Branch creation
- At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-02-09T15:14:25Z

⚠️ No Changeset found

Latest commit: dc6e674

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

deepsource-io · 2025-03-29T12:40:31Z

DeepSource Code Review

We reviewed changes in ab0d430...dc6e674 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade	Security Reliability Complexity Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Oct 29, 2026 1:15p.m.	Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from abee8b4 to 73d8237 Compare February 10, 2025 15:13

renovate Bot changed the title ~~Update dependency @sentry/node to v8~~ Update dependency @sentry/node to v9 Feb 10, 2025

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 8b35b70 to 50d4a74 Compare February 12, 2025 17:09

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from eb444de to 0624254 Compare March 8, 2025 20:27

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 0624254 to e3e244a Compare March 29, 2025 12:39

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 4 times, most recently from 4a74cc5 to c6ed005 Compare July 30, 2025 18:35

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from c6ed005 to b0d5eaa Compare August 1, 2025 13:48

renovate Bot changed the title ~~Update dependency @sentry/node to v9~~ Update dependency @sentry/node to v10 Aug 1, 2025

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 9 times, most recently from 6a9a3ff to 644c04d Compare August 11, 2025 15:49

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 644c04d to 294525c Compare August 13, 2025 13:14

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from d519662 to 883cfca Compare September 3, 2025 14:08

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from f61707f to 9b496b5 Compare September 9, 2025 15:33

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 1640c74 to 4f8ed4e Compare October 24, 2025 21:28

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 4f8ed4e to 315f9d0 Compare November 6, 2025 14:58

renovate Bot changed the title ~~Update dependency @sentry/node to v10~~ fix(deps): update dependency @sentry/node to v10 Nov 6, 2025

renovate Bot changed the title ~~fix(deps): update dependency @sentry/node to v10~~ Update dependency @sentry/node to v10 Nov 7, 2025

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 28b9c28 to 70fe766 Compare November 15, 2025 23:39

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 2fb8d45 to 07d918b Compare November 19, 2025 15:38

renovate Bot changed the title ~~Update dependency @sentry/node to v10~~ fix(deps): update dependency @sentry/node to v10 Nov 20, 2025

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 07d918b to 4deb477 Compare November 25, 2025 12:01

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from f1ea162 to f246610 Compare December 5, 2025 15:08

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 4c051e3 to f530977 Compare December 16, 2025 15:40

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from e8fc780 to 487817d Compare December 19, 2025 16:02

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 75de6f2 to 3ee32e6 Compare January 15, 2026 11:55

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 9679814 to e8ccf0a Compare January 22, 2026 14:48

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 3051018 to ac00e5e Compare January 30, 2026 11:02

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 92ef8c3 to d627ce9 Compare February 16, 2026 11:52

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 4b95378 to d889785 Compare February 24, 2026 16:39

renovate Bot force-pushed the renovate/major-sentry-javascript-monorepo branch from d889785 to c29f3fa Compare March 2, 2026 15:43

Update dependency @sentry/node to v11

dc6e674

Navigation Menu

Repository navigation

Update dependency @sentry/node to v11 - #886

Update dependency @sentry/node to v11#886
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-sentry-javascript-monorepo

renovate Bot commented Feb 9, 2025 •

edited

Loading

Uh oh!

changeset-bot Bot commented Feb 9, 2025 •

edited

Loading

Uh oh!

deepsource-io Bot commented Mar 29, 2025 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Feb 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v11.10.0

Important Changes

Other Changes

v11.9.0

Important Changes

Other Changes

v11.8.0

Important Changes

Other Changes

v11.7.0

Important Changes

Configuration

Uh oh!

changeset-bot Bot commented Feb 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

deepsource-io Bot commented Mar 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DeepSource Code Review

PR Report Card

Code Review Summary

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 9, 2025 •

edited

Loading

`v11.10.0`

`v11.9.0`

`v11.8.0`

`v11.7.0`

changeset-bot Bot commented Feb 9, 2025 •

edited

Loading

deepsource-io Bot commented Mar 29, 2025 •

edited

Loading