chore(deps): update JavaScript SDK to v11.2.0 - #6773
github-actions[bot] wants to merge 1 commit into
Conversation
Semver Impact of This PR⚪ None (no version bump detected) 📋 Changelog PreviewThis is how your changes will appear in the changelog.
🤖 This preview updates automatically when you update the PR. |
antonis
left a comment
There was a problem hiding this comment.
Marking as blocked since we will bump with our next major
|
Tested out the changes with #6730 |
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
PII collected by default after v11
High Severity
Flagged because the review rules require PII to stay gated behind sendDefaultPii and require changelog review on JS dependency bumps. v11 replaces sendDefaultPii with dataCollection and collects user info, cookies, HTTP bodies, and similar data by default. This SDK still documents and implements sendDefaultPii (default off) and omits dataCollection from ReactNativeOptions, so JS-core collection turns on while apps cannot disable it through the public options type.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
Unmigrated v11 breaking JS APIs
High Severity
Flagged because the review rules require JS dependency bumps to be checked for breaking API and default-integration changes. This PR only retargets @sentry/core, @sentry/browser, and @sentry/react to 11.0.0. Default integrations still call removed inboundFiltersIntegration, the public entry still re-exports removed instrumentLangGraph and AI helpers that moved off @sentry/core, and tracing still imports startIdleSpan from the default @sentry/core entry. No code, types, or changelog migration accompanies the major bump.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
| "@sentry/core": "11.0.0", | ||
| "@sentry/expo-upload-sourcemaps": "workspace:*", | ||
| "@sentry/react": "10.75.2" | ||
| "@sentry/react": "11.0.0" |
There was a problem hiding this comment.
Span streaming default breaks tracing
High Severity
Flagged because the review rules call out silent default and telemetry-shape changes on dependency updates. v11 enables span streaming by default and deprecates transaction-mode hooks such as beforeSendTransaction and forceTransaction. This SDK's navigation, app-start, and idle-span pipeline still assumes root spans are buffered as transactions and discarded via transaction event processors. Streaming would emit child spans before those filters run and change the telemetry apps currently receive.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit adfb87a. Configure here.
5b99eba to
a7da763
Compare
a5d19b4 to
5949ab3
Compare
9caf113 to
c8c3cc3
Compare
c2a203e to
c6bdd9e
Compare
27cdb2b to
21d6b41
Compare
21d6b41 to
af263e2
Compare


Bumps scripts/update-javascript.sh from 10.75.2 to 11.2.0.
Auto-generated by a dependency updater.
Changelog
11.2.0
Important Changes
feat(hono): add orchestrion-based auto-instrumentation (#24497)
Hono is now instrumented automatically. Request spans are named after the matched Hono route, each middleware gets its own span, and errors thrown in handlers are captured.
feat(node/bun): Enable dedupeIntegration by default (#24794)
sentry/nodeandsentry/bunnow includededupeIntegrationin their default integrations, like the browser, Deno, Vercel Edge and Cloudflare SDKs. When the same error is captured two times in a row, only the first event is sent. To keep the previous behavior, remove the integration:integrations: defaults => defaults.filter(integration => integration.name !== 'Dedupe').feat(remix): Instrument Remix 3 server requests via fetch-router (#24801)
On Remix 3, the SDK now adds the matched route as
http.route, the response status and a low-cardinality name to thehttp.serverspan of eachfetch-routerrequest. Start the app with--import sentry/remix/v3/nodein place of--import remix/node-tsx.Other Changes
bunRuntimeMetricsIntegration(#24892)fmt/parameterizemessages (#24770)nextis called (#24854)rolldownOptionsin instrumentation file plugin (#24863)Internal Changes
externallabel on PRs of external contributors (#24825)dedupeIntegration(#24893)test-utils/cloudflare(#24815)Work in this release was contributed by nabi-noor, LuccaRebelloToledo, andasan, breken-ai, EmileBrunelle, and diobriggs. Thank you for your contributions!
11.1.0
Important Changes
feat(server-utils): Auto-instrument MCP servers via orchestrion (#24529)
A new default
mcpServerIntegrationwraps everyMcpServerinstance (frommodelcontextprotocol/serverandmodelcontextprotocol/sdk) when it is created. You no longer need to callwrapMcpServerWithSentrymanually. You can still callwrapMcpServerWithSentryto override options, for examplerecordInputs: false.feat(node): Support Prisma 8 in
prismaIntegration(#24682)prismaIntegrationnow creates aprisma:client:operationspan for each Prisma 8 ORM call, with the database query spans nested below it. No code changes are necessary.feat(server-utils): Add TypeSafe integration (#24703)
A new default
typesafeIntegrationcreates agen_ai.evaluatespan for each TypeSafe Jev call throughtypesafe-ai/sdk(TypeSafeClient.systemOne). For runtimes without auto-instrumentation, useinstrumentTypeSafeClient().feat(server-utils): Instrument Vercel AI
experimental_evaluate(#24694)Vercel AI
experimental_evaluatecalls now create agen_ai.evaluatespan, with the state and questions as input messages and the answers as output messages.Other Changes
onErrorcallback toshowReportDialog(#24780)registerHookspath) (#24705)opentelemetry/apivia the SDK on SvelteKit 3 (#24736)Internal Changes
sentry/conventionsto 0.24.0 (#24645)cloudflare/think(#24660)Work in this release was contributed by camc314, ihsraham, zkasuran, Shubham-Padkonde, and itz-puneet. Thank you for your contributions!
11.0.0
Version
11.0.0marks a major release of the Sentry JavaScript SDKs containing breaking changes.The goal of this release is to be better compatible with OpenTelemetry, make our integrations work across Node.js, Cloudflare, Bun and Deno through run-time and build-time instrumentation, and make span streaming and more permissive data collection the default.
How To Upgrade
Please carefully read through the migration guide in the Sentry docs on how to upgrade from version 10 to version 11. Make sure to select your specific platform/framework in the top left corner: https://docs.sentry.io/platforms/javascript/migration/v10-to-v11/
A comprehensive migration guide outlining all changes can be found within the Sentry JavaScript SDK Repository: https://github.com/getsentry/sentry-javascript/blob/develop/MIGRATION.md
Breaking Changes
All SDKs
--require(#22513)http.*span attributes (#23574)net.span attributes (#23301)skipOpenTelemetrySetupwithenableOpenTelemetrySetup(#23199)http.targetspan attribute (#23575)>=20.19.0as minimum supported version (#22558)handlerspan op for terminal request handlers (#22871)middlewarespan op for web-server middleware (#22852)functionop for framework functions (#23047)honoIntegration(#22480)AI integrations
sentry/server-utils(#22954)sentry/server-utils(#22959)sentry/server-utils(#22962)sentry/server-utils(#22953)sentry/server-utils(#22964)sentry/server-utils(#22960)sentry/angular
routerspan op for frontend routers (#23086)ui.mountandfunctionspan ops for tracing decorators (#22667)sentry/astro
sourceMapsUploadOptionsbuild option (#23630)sentry/aws-serverless
nodejs18.xfrom the Lambda layer runtimes (#23155)disableAwsContextPropagationoption (#23170)faas.invocation_idandcloud.resource_id(#24384)startTraceoption andtryPatchHandler(#23219)function.awsspan op for Lambda invocations (#22677)queueSpan OP for AWS SQS & SNS messaging (#23757)sentry/browser
profilesSampleRate(#23220)performance.{mark,measure}spans into newuserTimingSpansIntegration(#22554)interactionsIntegration(#23295)bfcacheIntegrationtobfcacheMetricsIntegration(#23776)browser.navigation.typeexactly as web-vitals does (#24479)unhandledinstead ofcrashedfor unhandled errors (#22475)page(#21245)browser.paintspan op for paint entries (#22673)trackFetchStreamPerformanceflag (#23172)navigationStartfallback andpagehidelisteners (#21293)beforeSpanEndcallback in favor ofbeforeIdleSpanEndhook (#22818)sentry/bundler-plugins
webpack5entry point (#24455)sentry/cloudflare
functionspan op for cron, email and workflow steps (#22703)instrumentD1WithSentryexport (#23153)SentryTracerProviderfor OpenTelemetry interop (#23300)sentry/core
spanfromScopeData(#23225)attachStacktraceto true (#22572)genAIdefaults to collect it by default (#22706)dataCollection.httpBodies(#22834)beforeSendSpancompatible with streamed spans by default (#22643)tracePropagationTargetsmatching case-insensitive (#23534)enableMetricsoption (#23321)enableTruncationflag and all AI integrations truncation logic (#23045)endTimestampfromSentrySpanArguments(#23269)kindfor spans, move tosentry.kindattribute (#22528)queryParamsin favor ofurlQueryParams(#22711)scope.clear()method (#23230)sendDefaultPiiin favor ofdataCollection(#22918)sentry.sdk_meta.gen_ai.input.messages.original_lengthattribute (#22516)streamGenAiSpansflag (#22495)_experiments.enableLogsoption (#22808)inboundFiltersIntegration(#23008)instrumentLangGraph(#22485)StreamedSpanJSONfromspanToJSON(#23238)url.full,url.fragmentandurl.query(#22547)rpcspan op for tRPC spans (#22914)routerspan op for backend router layers (#23088)enableLogsoption (#23319)attributesin sampling context required (#24153)attributesrequired onScopeData(#23277)getComponentNameto browser-utils (#23716)getLocationHrefexport from core (#23717)startIdleSpanfrom server exports (#23420)supportsDOMError,supportsHistory,supportsReportingObserverexports (#23718)supportsNativeFetchexport (#23719)addAutoIpAddressToUserexport (#23174)htmlTreeAsStringfrom core (#23715)patchExpressModule(options)signature (#23175)spanOriginargument frominstrumentFetchRequest(#23177)enableMetrics/beforeSendMetricflags (#23276)gen_ai.request.available_toolstogen_ai.tool.definitions(#22820)gen_ai.systemtogen_ai.provider.name(#22814)gen_ai.tool.inputtogen_ai.tool.call.arguments(#22821)gen_ai.tool.outputtogen_ai.tool.call.result(#22822)code.*andfs_errorspan attributes (#23401)gen_ai.tool.typespan attribute (#22824)tracePropagationvspropagateTraceoption names (#23649)sentry/deno
sentry/ember
routerspan op for frontend routers (#23086)functionandui.taskspan ops for route hooks and runloop (#22669)'ui.ember.component.render'toui.render(#23587)sentry/feedback
sentry/google-cloud-serverless
function.gcpop for GCP functions (#23050)grpcspan op for GCP gRPC calls (#22666)http.clientspan op for GCP HTTP requests (#22660)sentry/nestjs
functionspan op for setup & lifecycle handlers (#22897)sentry/nextjs
vercel-prefix from default environment and deploys (#24197)middlewarespan op for Next.js middleware (#22674)withSentryConfigtosentry/nextjs/config(#23628)sentry/nitro
sentry/node
profilesSampleRateandprofilesSampler) (#23216)shouldHandleErrorfromsetupExpressErrorHandler(#23732)<3.21.0(#22752)init,preloadentry points andpreloadOpenTelemetry(#23074)db.queryanddbspan ops for Redis (#22690)sentry/node-coreback intosentry/node(#22418)opentelemetry/instrumentationdependency (#22843)prismaInstrumentationoption (#22898)setupFastifyErrorHandler(#23460)sentry/nuxt
sourceMapsUploadOptionsmodule option (#22875)sentry/opentelemetry
setupEventContextTrace(#23226).prefetchsuffix from inferred HTTP span ops (#23094)faas.trigger(#23053)SentrySpanProcessor&SentrySampler(#22557)contexts.otel.resource(#23013)OpenTelemetrySpanContext(#23285)setOpenTelemetryContextAsyncContextStrategy()(#22586)sentry/profiling-node
prune-profiler-binariesbin script (#23104)sentry/react
ui.*ops for component lifecycles (#23085)url.path.params.<key>attribute (#23506)sentry/react-router
sentry/react-router/vite(#23509)sentry/remix
sentry/remix/vite(#23989)sentry/server-utils
routerspan op for backend router layers (#23088)queue.*span ops for messaging spans (#23042)otlpIntegrationtoopenTelemetryIntegration(#23938)cachespans (#23933)ai.*andgen_ai.promptattributes (#23410)db.*span attributes (#23408)net.*span attributes on db and messaging spans (#23422)koa.nameon Koa spans (#24420)function.gcpop for firebase function spans (#23022)sentry/solidstart
sentry/svelte
ui.*ops for component lifecycles (#23085)sentry/sveltekit
routerspan op for frontend routers (#23086)sourceMapsUploadOptionsVite plugin option (#22874)sentrySvelteKitoff the runtime entry tosentry/sveltekit/vite(#23247)sentry/tanstackstart-react