chore(deps): update sentry-javascript monorepo to v10 (major) by renovate[bot] · Pull Request #734 · microfleet/core

renovate · 2025-02-17T02:09:13Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/node (source)	`^8.51.0` → `^10.0.0`
@sentry/types (source)	`^8.51.0` → `^10.0.0`

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v10.47.0`

Compare Source

Important Changes

feat(node-core): Add OTLP integration for node-core/light (#19729)

Added otlpIntegration at @sentry/node-core/light/otlp for users who manage
their own OpenTelemetry setup and want to send trace data to Sentry without
adopting the full @sentry/node SDK.

import { NodeTracerProvider } from '@&#8203;opentelemetry/sdk-trace-node';
import * as Sentry from '@&#8203;sentry/node-core/light';
import { otlpIntegration } from '@&#8203;sentry/node-core/light/otlp';

const provider = new NodeTracerProvider();
provider.register();

Sentry.init({
  dsn: '__DSN__',
  integrations: [
    otlpIntegration({
      // Export OTel spans to Sentry via OTLP (default: true)
      setupOtlpTracesExporter: true,
    }),
  ],
});

The integration links Sentry errors to OTel traces and exports spans to Sentry via OTLP.

feat(node, bun): Add runtime metrics integrations for Node.js and Bun (#19923, #19979)

New nodeRuntimeMetricsIntegration and bunRuntimeMetricsIntegration automatically collect runtime health metrics and send them to Sentry on a configurable interval (default: 30s). Collected metrics include memory (RSS, heap used/total), CPU utilization, event loop utilization, and process uptime. Node additionally collects event loop delay percentiles (p50, p99). Extra metrics like CPU time and external memory are available as opt-in.
```
// Node.js
import * as Sentry from '@&#8203;sentry/node';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeRuntimeMetricsIntegration()],
});

// Bun
import * as Sentry from '@&#8203;sentry/bun';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.bunRuntimeMetricsIntegration()],
});
```
feat(core): Support embedding APIs in google-genai (#19797)

Adds instrumentation for the Google GenAI embedContent API, creating gen_ai.embeddings spans.
feat(browser): Add elementTimingIntegration for tracking element render and load times (#19869)

The new elementTimingIntegration captures Element Timing API data as Sentry metrics. It emits element_timing.render_time and element_timing.load_time distribution metrics for elements annotated with the elementtiming HTML attribute.
```
import * as Sentry from '@&#8203;sentry/browser';

Sentry.init({
  dsn: '__DSN__',
  integrations: [Sentry.browserTracingIntegration(), Sentry.elementTimingIntegration()],
});
```
```
<img src="hero.jpg" elementtiming="hero-image" />
```

Other Changes

feat(nuxt): Add middleware instrumentation compatibility for Nuxt 5 (#19968)
feat(nuxt): Support parametrized SSR routes in Nuxt 5 (#19977)
feat(solid): Add route parametrization for Solid Router (#20031)
fix(core): Guard nullish response in supabase PostgREST handler (#20033)
fix(node): Deduplicate sentry-trace and baggage headers on outgoing requests (#19960)
fix(node): Ensure startNewTrace propagates traceId in OTel environments (#19963)
fix(nuxt): Use virtual module for Nuxt pages data (SSR route parametrization) (#20020)
fix(opentelemetry): Convert seconds timestamps in span.end() to milliseconds (#19958)
fix(profiling): Disable profiling in worker threads (#20040)
fix(react-router): Disable debug ID injection in Vite plugin to prevent double injection (#19890)
refactor(browser): Reduce browser package bundle size (#19856)
feat(deps): Bump OpenTelemetry dependencies (#20046)

Internal Changes

chore: Add shared validate-pr composite action (#20025)
chore: Update validate-pr action to latest version (#20027)
chore(deps): Bump @apollo/server from 5.4.0 to 5.5.0 (#20007)
chore(deps): Bump amqplib from 0.10.7 to 0.10.9 (#20000)
chore(deps): Bump srvx from 0.11.12 to 0.11.13 (#20001)
chore(deps-dev): Bump node-forge from 1.3.2 to 1.4.0 (#20012)
chore(deps-dev): Bump yaml from 2.8.2 to 2.8.3 (#19985)
ci(deps): Bump actions/upload-artifact from 6 to 7 (#19569)
docs(release): Update publishing-a-release.md (#19982)
feat(deps): Bump babel-loader from 10.0.0 to 10.1.1 (#19997)
feat(deps): Bump handlebars from 4.7.7 to 4.7.9 (#20008)
fix(browser-tests): Pin axios to 1.13.5 to avoid compromised 1.14.1 (#20047)
fix(ci): Update validate-pr action to remove draft enforcement (#20035)
fix(ci): Update validate-pr action to remove draft enforcement (#20037)
fix(e2e): Pin @opentelemetry/api to 1.9.0 in ts3.8 test app (#19992)
ref(browser-tests): Add waitForMetricRequest helper (#20002)
ref(core): Consolidate getOperationName into one shared utility (#19971)
ref(core): Introduce instrumented method registry for AI integrations (#19981)
test(deno): Expand Deno E2E test coverage (#19957)
test(e2e): Add e2e tests for nodeRuntimeMetricsIntegration (#19989)

Bundle size 📦

Path	Size
@sentry/browser	25.04 KB
@sentry/browser - with treeshaking flags	23.57 KB
@sentry/browser (incl. Tracing)	41.16 KB
@sentry/browser (incl. Tracing, Profiling)	45.67 KB
@sentry/browser (incl. Tracing, Replay)	79.04 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	68.91 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	83.64 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	95.62 KB
@sentry/browser (incl. Feedback)	41.42 KB
@sentry/browser (incl. sendFeedback)	29.59 KB
@sentry/browser (incl. FeedbackAsync)	34.46 KB
@sentry/browser (incl. Metrics)	26.32 KB
@sentry/browser (incl. Logs)	26.46 KB
@sentry/browser (incl. Metrics & Logs)	27.12 KB
@sentry/react	26.76 KB
@sentry/react (incl. Tracing)	43.44 KB
@sentry/vue	29.37 KB
@sentry/vue (incl. Tracing)	43.02 KB
@sentry/svelte	25.06 KB
CDN Bundle	27.65 KB
CDN Bundle (incl. Tracing)	42.09 KB
CDN Bundle (incl. Logs, Metrics)	28.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43.12 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.87 KB
CDN Bundle (incl. Tracing, Replay)	78.13 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.14 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.54 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.55 KB
CDN Bundle - uncompressed	80.72 KB
CDN Bundle (incl. Tracing) - uncompressed	124.81 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	84.77 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	128.14 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	204.87 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	238.95 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	242.26 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	251.56 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	254.86 KB
@sentry/nextjs (client)	45.79 KB
@sentry/sveltekit (client)	41.62 KB
@sentry/node-core	54.45 KB
@sentry/node	168.93 KB
@sentry/node - without tracing	93.76 KB
@sentry/aws-serverless	110.13 KB

`v10.46.0`

Compare Source

Important Changes

feat(elysia): @sentry/elysia - Alpha Release (#19509)

New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

Note: This is an alpha release. Please report any issues or feedback on GitHub.

Features
- Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
- Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
- Distributed tracing — sentry-trace and baggage headers propagated automatically on incoming/outgoing requests.
Usage
```
import * as Sentry from '@&#8203;sentry/elysia';
import { Elysia } from 'elysia';

Sentry.init({ dsn: '__DSN__', tracesSampleRate: 1.0 });

const app = Sentry.withElysia(new Elysia());
app.get('/', () => 'Hello World');
app.listen(3000);
```

Other Changes

feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
fix(cloudflare): Forward ctx argument to Workflow.do user callback (#19891)
fix(cloudflare): Send correct events in local development (#19900)
fix(core): Do not overwrite user provided conversation id in Vercel (#19903)
fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
fix(core): Send internal_error as span status for Vercel error spans (#19921)
fix(core): Truncate content array format in Vercel (#19911)
fix(deps): bump fast-xml-parser to 5.5.8 in @azure/core-xml chain (#19918)
fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#19880)
fix(nestjs): Add node to nest metadata (#19875)
fix(serverless): Add node to metadata (#19878)

Internal Changes

chore(ci): Fix "Gatbsy" typo in issue package label workflow (#19905)
chore(claude): Enable Claude Code Intelligence (LSP) (#19930)
chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#19888)
chore(deps-dev): bump @react-router/node from 7.13.0 to 7.13.1 (#19544)
chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#19926)
chore(deps-dev): bump qunit-dom from 3.2.1 to 3.5.0 (#19546)
chore(node-integration-tests): Remove unnecessary file-type dependency (#19824)
chore(remix): Replace glob with native recursive fs walk (#19531)
feat(deps): bump stacktrace-parser from 0.1.10 to 0.1.11 (#19887)
fix(craft): Add missing mainDocsUrl for @sentry/effect SDK (#19860)
fix(deps): bump next to 15.5.14 in nextjs-15 and nextjs-15-intl E2E test apps (#19917)
fix(deps): update lockfile to resolve h3@1.15.10 (#19933)
ref(core): Remove duplicate buildMethodPath utility from openai (#19969)
ref(elysia): Drop @elysiajs/opentelemetry dependency (#19947)
ref(nuxt): Extract core logic for storage/database to prepare for Nuxt v5 (#19920)
ref(nuxt): Extract handler patching to extra plugin for Nitro v2/v3 (#19915)
ref(sveltekit): Replace recast + @babel/parser with acorn (#19533)
test(astro): Re-enable server island tracing e2e test in Astro 6 (#19872)
test(cloudflare): Enable multi-worker tests for CF integration tests (#19938)

Work in this release was contributed by @roli-lpci. Thank you for your contributions!

Important Changes

feat(node): Add nodeRuntimeMetricsIntegration for automatic Node.js runtime metrics (#19923)

The new nodeRuntimeMetricsIntegration automatically collects Node.js runtime health metrics and sends them to Sentry. Eight metrics are emitted by default every 30 seconds: memory (RSS, heap used/total), CPU utilization, event loop delay (p50, p99), event loop utilization, and process uptime. Additional metrics are available as opt-in.
```
import * as Sentry from '@&#8203;sentry/node';

Sentry.init({
  dsn: '...',
  integrations: [Sentry.nodeRuntimeMetricsIntegration()],
});
```

`v10.45.0`

Compare Source

Important Changes

feat(remix): Server Timing Headers Trace Propagation (#18653)

The Remix SDK now supports automatic trace propagation via Server-Timing response headers to continue pageload traces on the client side.
This means, you no longer have to define a custom meta function to add Sentry <meta> tags to your page as previously.
We'll update out Remix tracing docs after this release.

Other Changes

fix(cloudflare): Use correct env types for withSentry (#19836)
fix(core): Align error span status message with core SpanStatusType for langchain/google-genai (#19863)
fix(deno): Clear pre-existing OTel global before registering TracerProvider (#19723)
fix(nextjs): Skip tracing for tunnel requests (#19861)
fix(node-core): Recycle propagationContext for each request (#19835)
ref(core): Simplify core utility functions for smaller bundle (#19854)

Internal Changes

chore(deps): bump next from 16.1.5 to 16.1.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#19851)
ci(release): Switch from action-prepare-release to Craft (#18763)
fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 (#19849)
fix(deps): bump file-type to 21.3.2 and @nestjs/common to 11.1.17 (#19847)
fix(deps): bump flatted 3.3.1 to 3.4.2 to fix CVE-2026-32141 (#19842)
fix(deps): bump hono 4.12.5 to 4.12.7 in cloudflare-hono E2E test app (#19850)
fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 and related (#19870)
fix(deps): bump tar 7.5.10 to 7.5.11 to fix CVE-2026-31802 (#19846)
fix(deps): bump undici 6.23.0 to 6.24.1 to fix multiple CVEs (#19841)
fix(deps): bump unhead 2.1.4 to 2.1.12 to fix CVE-2026-31860 and CVE-2026-31873 (#19848)
test(nextjs): Skip broken ISR tests (#19871)
test(react): Add gql tests for react router (#19844)

`v10.44.0`

Compare Source

Important Changes

feat(effect): Add @sentry/effect SDK (Alpha) (#19644)

This release introduces @sentry/effect, a new SDK for Effect.ts applications. The SDK provides Sentry integration via composable Effect layers for both Node.js and browser environments.

Compose the effectLayer with optional tracing, logging, and metrics layers to instrument your Effect application:
```
import * as Sentry from '@&#8203;sentry/effect';
import * as Layer from 'effect/Layer';
import * as Logger from 'effect/Logger';

const SentryLive = Layer.mergeAll(
  Sentry.effectLayer({ dsn: '__DSN__', tracesSampleRate: 1.0, enableLogs: true }),
  Layer.setTracer(Sentry.SentryEffectTracer),
  Logger.replace(Logger.defaultLogger, Sentry.SentryEffectLogger),
  Sentry.SentryEffectMetricsLayer,
);
```
Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.
feat(astro): Add Astro 6 support (#19745)

This release enables full support for Astro v6 by adjusting our Astro SDK's middleware to some Astro-internal
changes. We cannot yet guarantee full support for server-islands, due to a bug in Astro v6
but we'll follow up on this once the bug is fixed.
feat(hono): Add basic instrumentation for Node runtime (#19817)

Adds a new package @sentry/hono/node (alpha) with basic instrumentation for Hono applications running in Node.js.
The Hono middleware for Cloudflare (@sentry/hono/cloudflare - alpha) comes with fixes, and it's now possible to access the Cloudflare Worker Bindings (env) from the options' callback.

Start using the new Hono middlewares by installing @sentry/hono and importing the respective middleware for your runtime.
More instructions can be found in the Hono readme.

Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.
feat(nestjs): Instrument @nestjs/bullmq @Processor decorator (#19759)

Automatically capture exceptions and create transactions for BullMQ queue processors in NestJS applications.

When using the @Processor decorator from @nestjs/bullmq, the SDK now automatically wraps the process() method
to create queue.process transactions with proper isolation scopes, preventing breadcrumb and scope leakage between
jobs and HTTP requests. Errors thrown in processors are captured with the auto.queue.nestjs.bullmq mechanism type.

Requires @nestjs/bullmq v10.0.0 or later.
feat(nestjs): Instrument @nestjs/schedule decorators (#19735)

Automatically capture exceptions thrown in @Cron, @Interval, and @Timeout decorated methods.

Previously, exceptions in @Cron methods were only captured if you used the SentryCron decorator. Now they are
captured automatically. The exception mechanism type changed from auto.cron.nestjs.async to
auto.function.nestjs.cron. If you have Sentry queries or alerts that filter on the old mechanism type, update them
accordingly.
feat(node): Expose headersToSpanAttributes option on nativeNodeFetchIntegration() (#19770)

Response headers like http.response.header.content-length were previously captured automatically on outgoing
fetch spans but are now opt-in since @opentelemetry/instrumentation-undici@0.22.0. You can now configure which
headers to capture via the headersToSpanAttributes option.
```
Sentry.init({
  integrations: [
    Sentry.nativeNodeFetchIntegration({
      headersToSpanAttributes: {
        requestHeaders: ['x-custom-header'],
        responseHeaders: ['content-length', 'content-type'],
      },
    }),
  ],
});
```

Other Changes

feat(browser/cloudflare): Export conversation id from browser and cloudflare runtimes (#19820)
feat(bun): Set http response header attributes instead of response context headers (#19821)
feat(core): Add sentry.timestamp.sequence attribute for timestamp tie-breaking (#19421)
feat(deno): Set http response header attributes instead of response context headers (#19822)
feat(deps): Bump OpenTelemetry dependencies (#19682)
feat(nestjs): Use more specific span origins for NestJS guards, pipes, interceptors, and exception filters (#19751)
feat(nextjs): Vercel queue instrumentation (#19799)
feat(node): Avoid OTEL instrumentation for outgoing requests on Node 22+ (#17355)
feat(deps): bump hono from 4.12.5 to 4.12.7 (#19747)
feat(deps): bump mysql2 from 3.14.4 to 3.19.1 (#19787)
feat(deps): bump simple-git from 3.30.0 to 3.33.0 (#19744)
feat(deps): bump yauzl from 3.2.0 to 3.2.1 (#19809)
fix(browser): Skip browserTracingIntegration setup for bot user agents (#19708)
fix(cloudflare): Recreate client when previous one was disposed (#19727)
fix(core): Align Vercel embedding spans with semantic conventions (#19795)
fix(core): Fallback to sendDefaultPii setting in langchain and langgraph in non-node environments (#19813)
fix(core): Improve Vercel AI SDK instrumentation attributes (#19717)
fix(hono): Align error mechanism (#19831)
fix(hono): Allow passing env and fix type issues (#19825)
fix(nestjs): Fork isolation scope in @nestjs/event-emitter instrumentation (#19725)
fix(nextjs): Log correct lastEventId when error is thrown in component render (#19764)
fix(nextjs): Strip sourceMappingURL comments after deleting source maps in turbopack builds (#19814)
fix(nuxt): Upload client source maps (#19805)
fix(profiling-node): Fix NODE_VERSION rendered as [object Object] in warning (#19788)

Internal Changes

chore: Add oxlint migration commits to blame ignore (#19784)
chore: add oxlint typescript program suppression to workspace settings (#19692)
chore: Bump oxlint and oxfmt (#19771)
chore: Clean up lint and format script names (#19719)
chore(agents): Be more explicit on linting and formatting (#19803)
chore(ci): Extract metadata workflow (#19680)
chore(deps): bump tedious from 18.6.1 to 19.2.1 (#19786)
chore(deps-dev): bump file-type from 20.5.0 to 21.3.1 (#19748)
chore(effect): Add Effect to craft, README and issue templates (#19837)
chore(lint): Rule adjustments and fix warnings (#19612)
chore(skills): Add skill-creator and update managed agent skills (#19713)
docs(changelog): Add entry for @sentry/hono alpha release (#19828)
docs(hono): Document usage without "*" (#19756)
docs(new-release): Document sdkName for craft (#19736)
docs(new-release): Update docs based on new Craft flow (#19731)
ref(cloudflare): Prepare for WorkerEntrypoint (#19742)
ref(nestjs): Move event instrumentation unit tests to separate file (#19738)
style: Auto changes made from "yarn fix" (#19710)
test(astro,cloudflare): Add an E2E test for Astro 6 on Cloudflare (#19781)
test(browser): Add simulated mfe integration test (#19768)
test(e2e): Add MFE e2e test using vite-plugin-federation (#19778)
test(nextjs): Add vercel queue tests to next-16 (#19798)
tests(core): Fix flaky metric sequence number test (#19754)

`v10.43.0`

Compare Source

Important Changes

feat(nextjs): Add Turbopack support for React component name annotation (#19604)

We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements
are annotated with data-sentry-component, data-sentry-element, and data-sentry-source-file attributes at build
time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance
monitoring — previously only available with webpack builds.

This feature requires Next.js 16+ and is currently behind an experimental flag:
```
// next.config.ts
import { withSentryConfig } from '@&#8203;sentry/nextjs';

export default withSentryConfig(nextConfig, {
  _experimental: {
    turbopackReactComponentAnnotation: {
      enabled: true,
      ignoredComponents: ['Header', 'Footer'], // optional
    },
  },
});
```
feat(hono): Instrument middlewares app.use() (#19611)

Hono middleware registered via app.use() is now automatically instrumented, creating spans for each middleware invocation.

Other Changes

feat(node-core,node): Add tracePropagation option to http and fetch integrations (#19712)
feat(hono): Use parametrized names for errors (#19577)
fix(browser): Fix missing traces for user feedback (#19660)
fix(cloudflare): Use correct Proxy receiver in instrumentDurableObjectStorage (#19662)
fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#19624)
fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#19653)
fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#19651)
fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#19650)
fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#19645)
fix(node): Prevent duplicate LangChain spans from double module patching (#19684)
fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#19617)
fix(sveltekit): Fix file system race condition in source map cleaning (#19714)
fix(tanstackstart-react): Add workerd and worker export conditions (#19461)
fix(vercel-ai): Prevent tool call span map memory leak (#19328)
feat(deps): Bump @sentry/rollup-plugin from 5.1.0 to 5.1.1 (#19658)

Internal Changes

chore: Migrate to oxlint (#19134)
chore(aws-serverless): Don't build layer in build:dev command (#19586)
chore(ci): Allow triage action to run on issues from external users (#19701)
chore(deps): Bump immutable from 4.0.0 to 4.3.8 (#19637)
chore(e2e): Expand microservices E2E application with auto-tracing tests (#19652)
chore(hono): Prepare readme and add craft entry (#19583)
chore(sourcemaps): Make sourcemaps e2e test more generic (#19678)
chore(tanstackstart-react): Add link to docs in README (#19697)
feat(deps): Bump @hono/node-server from 1.19.4 to 1.19.10 (#19634)
feat(deps): Bump underscore from 1.12.1 to 1.13.8 (#19616)
test(angular): Fix failing canary test (#19639)
test(nextjs): Add sourcemaps test for nextjs turbopack (#19647)
tests(e2e): Add microservices e2e for nestjs (#19642)
tests(e2e): Add websockets e2e for nestjs (#19630)

Work in this release was contributed by @dmmulroy, @lithdew, and @smorimoto. Thank you for your contributions!

`v10.42.0`

Compare Source

feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#19534)
fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
fix(core): Do not remove promiseBuffer entirely (#19592)
fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
fix(react-router): Set correct transaction name when navigating with object argument (#19590)
ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#19464)

Internal Changes

chore(deps-dev): bump @sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
chore(deps): Bump @sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#19594)
ci(deps): bump actions/checkout from 4 to 6 (#19570)

Bundle size 📦

Path	Size
@sentry/browser	25.02 KB
@sentry/browser - with treeshaking flags	23.57 KB
@sentry/browser (incl. Tracing)	41.44 KB
@sentry/browser (incl. Tracing, Profiling)	45.99 KB
@sentry/browser (incl. Tracing, Replay)	79.35 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	69.21 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	83.93 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	95.91 KB
@sentry/browser (incl. Feedback)	41.44 KB
@sentry/browser (incl. sendFeedback)	29.58 KB
@sentry/browser (incl. FeedbackAsync)	34.52 KB
@sentry/browser (incl. Metrics)	26.17 KB
@sentry/browser (incl. Logs)	26.31 KB
@sentry/browser (incl. Metrics & Logs)	26.96 KB
@sentry/react	26.74 KB
@sentry/react (incl. Tracing)	43.72 KB
@sentry/vue	29.37 KB
@sentry/vue (incl. Tracing)	43.26 KB
@sentry/svelte	25.05 KB
CDN Bundle	27.51 KB
CDN Bundle (incl. Tracing)	42.25 KB
CDN Bundle (incl. Logs, Metrics)	28.33 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43.07 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.49 KB
CDN Bundle (incl. Tracing, Replay)	78.26 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.5 KB
CDN Bundle - uncompressed	80.42 KB
CDN Bundle (incl. Tracing) - uncompressed	125.07 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	83.19 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	127.83 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	203.96 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	239.21 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	241.96 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	251.82 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	254.56 KB
@sentry/nextjs (client)	46.08 KB
@sentry/sveltekit (client)	41.89 KB
@sentry/node-core	51.01 KB
@sentry/node	170.6 KB
@sentry/node - without tracing	95.09 KB
@sentry/aws-serverless	110.53 KB

`v10.41.0`

Compare Source

`v10.40.0`

Compare Source

Important Changes

feat(tanstackstart-react): Add global sentry exception middlewares (#19330)

The sentryGlobalRequestMiddleware and sentryGlobalFunctionMiddleware global middlewares capture unhandled exceptions thrown in TanStack Start API routes and server functions. Add them as the first entries in the requestMiddleware and functionMiddleware arrays of createStart():

import { createStart } from '@&#8203;tanstack/react-start/server';
import { sentryGlobalRequestMiddleware, sentryGlobalFunctionMiddleware } from '@&#8203;sentry/tanstackstart-react/server';

export default createStart({
  requestMiddleware: [sentryGlobalRequestMiddleware, myRequestMiddleware],
  functionMiddleware: [sentryGlobalFunctionMiddleware, myFunctionMiddleware],
});

feat(tanstackstart-react)!: Export Vite plugin from @sentry/tanstackstart-react/vite subpath (#19182)

The sentryTanstackStart Vite plugin is now exported from a dedicated subpath. Update your import:
```
- import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react';
+ import { sentryTanstackStart } from '@&#8203;sentry/tanstackstart-react/vite';
```
fix(node-core): Reduce bundle size by removing apm-js-collab and requiring pino >= 9.10 (#18631)

In order to keep receiving pino logs, you need to update your pino version to >= 9.10, the reason for the support bump is to reduce the bundle size of the node-core SDK in frameworks that cannot tree-shake the apm-js-collab dependency.
fix(browser): Ensure user id is consistently added to sessions (#19341)

Previously, the SDK inconsistently set the user id on sessions, meaning sessions were often lacking proper coupling to the user set for example via Sentry.setUser().
Additionally, the SDK incorrectly skipped starting a new session for the first soft navigation after the pageload.
This patch fixes these issues. As a result, metrics around sessions, like "Crash Free Sessions" or "Crash Free Users" might change.
This could also trigger alerts, depending on your set thresholds and conditions.
We apologize for any inconvenience caused!

While we're at it, if you're using Sentry in a Single Page App or meta framework, you might want to give the new 'page' session lifecycle a try!
This new mode no longer creates a session per soft navigation but continues the initial session until the next hard page refresh.
Check out the docs to learn more!
ref!(gatsby): Drop Gatsby v2 support (#19467)

We drop support for Gatsby v2 (which still relies on webpack 4) for a critical security update in https://github.com/getsentry/sentry-javascript-bundler-plugins/releases/tag/5.0.0

Other Changes

feat(astro): Add support for Astro on CF Workers (#19265)
feat(cloudflare): Instrument async KV API (#19404)
feat(core): Add framework-agnostic tunnel handler (#18892)
feat(deno): Export logs API from Deno SDK (#19313)
feat(deno): Export metrics API from Deno SDK (#19305)
feat(deno): instrument Deno.serve with async context support (#19230)
feat(deps): bump babel-loader from 8.2.5 to 10.0.0 (#19303)
feat(deps): bump body-parser from 1.20.4 to 2.2.2 (#19191)
feat(deps): Bump hono from 4.11.7 to 4.11.10 (#19440)
feat(deps): bump qs from 6.14.1 to 6.14.2 (#19310)
feat(deps): bump the opentelemetry group with 4 updates (#19425)
feat(feedback): Add setTheme() to dynamically update feedback widget color scheme (#19430)
feat(nextjs): Add sourcemaps.filesToDeleteAfterUpload as a top-level option (#19280)
feat(node): Add ignoreConnectSpans option to postgresIntegration (#19291)
feat(node): Bump to latest @fastify/otel (#19452)
fix: Bump bundler plugins to v5 ([#19468](https://redirect.github.com/getsentry

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-02-17T02:10:26Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@sentry/node-core` is 80.0% likely obfuscated Confidence: 0.80 Location: Package overview From: pnpm-lock.yaml → `npm/@sentry/node@10.47.0` → `npm/@sentry/node-core@10.47.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.47.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

socket-security · 2026-03-17T17:52:53Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@sentry/types@8.51.0 ⏵ 10.47.0			⁺²	^-3
	@sentry/node@8.51.0 ⏵ 10.47.0	⁺⁸			^-3

View full report

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 78bc3a4 to 06fe1df Compare February 17, 2025 23:41

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 4 times, most recently from 2dc3a58 to 79788e0 Compare July 29, 2025 20:08

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 79788e0 to 0fb716e Compare July 31, 2025 18:54

renovate bot changed the title ~~chore(deps): update sentry-javascript monorepo to v9 (major)~~ chore(deps): update sentry-javascript monorepo to v10 (major) Jul 31, 2025

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 8831d37 to 4f0363a Compare August 8, 2025 12:37

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 84862b1 to 68e1410 Compare August 12, 2025 19:08

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 30a42c4 to 4a2dd53 Compare August 31, 2025 10:18

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from db163e0 to 4f18732 Compare September 9, 2025 14:03

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 3cbc85c to f853963 Compare September 23, 2025 12:49

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 4 times, most recently from bd05ca5 to fd22aee Compare September 30, 2025 13:27

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from e3eef83 to 28d6725 Compare October 9, 2025 15:18

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 28d6725 to b1e740b Compare October 15, 2025 18:06

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from a4ff928 to aff30c2 Compare November 11, 2025 17:47

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 2103096 to 9c82b2b Compare November 24, 2025 20:33

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from ec0494b to 16e8012 Compare December 4, 2025 21:49

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 9cf47d9 to fb57ed9 Compare December 16, 2025 18:15

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 0ac1176 to 68c343f Compare December 19, 2025 14:58

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 68c343f to 8f0f5cd Compare January 1, 2026 11:48

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 2adfbef to 0be0447 Compare January 14, 2026 17:30

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from b28a493 to 173dcdc Compare January 23, 2026 17:02

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from 62037dc to fa9220d Compare January 29, 2026 16:52

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from d1041cb to 3fb4845 Compare February 16, 2026 10:43

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 3 times, most recently from 20a8cad to 3d08e0c Compare March 5, 2026 20:55

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 3d08e0c to 2a62e9f Compare March 10, 2026 10:14

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 2a62e9f to 141ebee Compare March 17, 2026 17:51

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch 2 times, most recently from dc99737 to 8f7f9d9 Compare March 25, 2026 17:24

chore(deps): update sentry-javascript monorepo to v10

917faf8

renovate bot force-pushed the renovate/major-sentry-javascript-monorepo branch from 8f7f9d9 to 917faf8 Compare March 31, 2026 13:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update sentry-javascript monorepo to v10 (major)#734

chore(deps): update sentry-javascript monorepo to v10 (major)#734
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/major-sentry-javascript-monorepo

renovate bot commented Feb 17, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Feb 17, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Feb 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Important Changes

Other Changes

Bundle size 📦

Important Changes

Other Changes

Important Changes

Important Changes

Other Changes

Important Changes

Other Changes

Important Changes

Other Changes

Bundle size 📦

Important Changes

Other Changes

Configuration

Uh oh!

socket-security bot commented Feb 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Feb 17, 2025 •

edited

Loading

socket-security bot commented Feb 17, 2025 •

edited

Loading

socket-security bot commented Mar 17, 2026 •

edited

Loading