Merge branch 'develop' into timfish/feat/fetch-breadcrumbs-without-tracing

Author: timfish

.craft.yml

@@ -5,36 +5,30 @@ targets:
   # NPM Targets
   ## 1. Base Packages, node or browser SDKs depend on
   ## 1.1 Types
-  # TODO(v9): Remove
   - name: npm
     id: '@sentry/types'
     includeNames: /^sentry-types-\d.*\.tgz$/
-  ## 1.2 Utils
-  # TODO(v9): Remove
-  - name: npm
-    id: '@sentry/utils'
-    includeNames: /^sentry-utils-\d.*\.tgz$/
-  ## 1.3 Core SDK
+  ## 1.2 Core SDK
   - name: npm
     id: '@sentry/core'
     includeNames: /^sentry-core-\d.*\.tgz$/
-  ## 1.4 Browser Utils package
+  ## 1.3 Browser Utils package
   - name: npm
     id: '@sentry-internal/browser-utils'
     includeNames: /^sentry-internal-browser-utils-\d.*\.tgz$/
-  ## 1.5 Replay Internal package (browser only)
+  ## 1.4 Replay Internal package (browser only)
   - name: npm
     id: '@sentry-internal/replay'
     includeNames: /^sentry-internal-replay-\d.*\.tgz$/
-  ## 1.6 OpenTelemetry package
+  ## 1.5 OpenTelemetry package
   - name: npm
     id: '@sentry/opentelemetry'
     includeNames: /^sentry-opentelemetry-\d.*\.tgz$/
-  ## 1.7 Feedback package (browser only)
+  ## 1.6 Feedback package (browser only)
   - name: npm
     id: '@sentry-internal/feedback'
     includeNames: /^sentry-internal-feedback-\d.*\.tgz$/
-  ## 1.8 ReplayCanvas package (browser only)
+  ## 1.7 ReplayCanvas package (browser only)
   - name: npm
     id: '@sentry-internal/replay-canvas'
     includeNames: /^sentry-internal-replay-canvas-\d.*\.tgz$/
@@ -83,14 +77,6 @@ targets:
   - name: npm
     id: '@sentry/deno'
     includeNames: /^sentry-deno-\d.*\.tgz$/
-  - name: commit-on-git-repository
-    # This will publish on the Deno registry
-    id: getsentry/deno
-    archive: /^sentry-deno-\d.*\.tgz$/
-    repositoryUrl: https://github.com/getsentry/sentry-deno.git
-    stripComponents: 1
-    branch: main
-    createTag: true
 
   ## 5. Node-based Packages
   - name: npm
@@ -122,12 +108,21 @@ targets:
   - name: npm
     id: '@sentry/sveltekit'
     includeNames: /^sentry-sveltekit-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/tanstackstart'
+    includeNames: /^sentry-tanstackstart-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/tanstackstart-react'
+    includeNames: /^sentry-tanstackstart-react-\d.*\.tgz$/
   - name: npm
     id: '@sentry/gatsby'
     includeNames: /^sentry-gatsby-\d.*\.tgz$/
   - name: npm
     id: '@sentry/astro'
     includeNames: /^sentry-astro-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/react-router'
+    includeNames: /^sentry-react-router-\d.*\.tgz$/
 
   ## 7. Other Packages
   ## 7.1
@@ -145,7 +140,7 @@ targets:
   # AWS Lambda Layer target
   - name: aws-lambda-layer
     includeNames: /^sentry-node-serverless-\d+.\d+.\d+(-(beta|alpha|rc)\.\d+)?\.zip$/
-    layerName: SentryNodeServerlessSDK
+    layerName: SentryNodeServerlessSDKv9
     compatibleRuntimes:
       - name: node
         versions:
@@ -198,12 +193,18 @@ targets:
         onlyIfPresent: /^sentry-gatsby-\d.*\.tgz$/
       'npm:@sentry/google-cloud-serverless':
         onlyIfPresent: /^sentry-google-cloud-serverless-\d.*\.tgz$/
+      'npm:@sentry/nestjs':
+        onlyIfPresent: /^sentry-nestjs-\d.*\.tgz$/
       'npm:@sentry/nextjs':
         onlyIfPresent: /^sentry-nextjs-\d.*\.tgz$/
+      'npm:@sentry/nuxt':
+        onlyIfPresent: /^sentry-nuxt-\d.*\.tgz$/
       'npm:@sentry/node':
         onlyIfPresent: /^sentry-node-\d.*\.tgz$/
       'npm:@sentry/react':
         onlyIfPresent: /^sentry-react-\d.*\.tgz$/
+      'npm:@sentry/react-router':
+        onlyIfPresent: /^sentry-react-router-\d.*\.tgz$/
       'npm:@sentry/remix':
         onlyIfPresent: /^sentry-remix-\d.*\.tgz$/
       'npm:@sentry/solid':
@@ -214,6 +215,8 @@ targets:
         onlyIfPresent: /^sentry-svelte-\d.*\.tgz$/
       'npm:@sentry/sveltekit':
         onlyIfPresent: /^sentry-sveltekit-\d.*\.tgz$/
+      'npm:@sentry/tanstackstart-react':
+        onlyIfPresent: /^sentry-tanstackstart-react-\d.*\.tgz$/
       'npm:@sentry/vercel-edge':
         onlyIfPresent: /^sentry-vercel-edge-\d.*\.tgz$/
       'npm:@sentry/vue':

.eslintrc.js

@@ -38,7 +38,7 @@ module.exports = {
       },
     },
     {
-      files: ['jest/**/*.ts', 'scripts/**/*.ts'],
+      files: ['scripts/**/*.ts'],
       parserOptions: {
         project: ['tsconfig.dev.json'],
       },

.github/ISSUE_TEMPLATE/bug.yml

@@ -50,6 +50,7 @@ body:
         - '@sentry/solidstart'
         - '@sentry/svelte'
         - '@sentry/sveltekit'
+        - '@sentry/tanstackstart-react'
         - '@sentry/vue'
         - '@sentry/wasm'
         - Sentry Browser Loader
@@ -85,9 +86,9 @@ body:
     attributes:
       label: Reproduction Example/SDK Setup
       description:
-        To ensure that we can help you as fast as possible, please share a link to a reproduction example (GitHub repo or online code editor).
-        This enables us to quickly understand and address your issue.
-        If you do not post a link, kindly paste your `Sentry.init` code, so we can see how you set up Sentry.
+        To ensure that we can help you as fast as possible, please share a link to a reproduction example (GitHub repo
+        or online code editor). This enables us to quickly understand and address your issue. If you do not post a link,
+        kindly paste your `Sentry.init` code, so we can see how you set up Sentry.
       placeholder: |-
         https://some-JS-online-code-editor.com/my-example
 

.github/ISSUE_TEMPLATE/flaky.yml

@@ -19,7 +19,7 @@ body:
     id: job-name
     attributes:
       label: Name of Job
-      placeholder: "CI: Build & Test / Nextjs (Node 14) Tests"
+      placeholder: 'CI: Build & Test / Nextjs (Node 18) Tests'
       description: name of job as reported in the status report
     validations:
       required: true

.github/actions/install-dependencies/action.yml

@@ -1,13 +1,13 @@
-name: "Install yarn dependencies"
-description: "Installs yarn dependencies and caches them."
+name: 'Install yarn dependencies'
+description: 'Installs yarn dependencies and caches them.'
 
 outputs:
   cache_key:
-    description: "The dependency cache key"
+    description: 'The dependency cache key'
     value: ${{ steps.compute_lockfile_hash.outputs.hash }}
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - name: Compute dependency cache key
       id: compute_lockfile_hash

.github/actions/install-playwright/action.yml

@@ -1,42 +1,50 @@
-name: "Install Playwright dependencies"
-description: "Installs Playwright dependencies and caches them."
+name: 'Install Playwright dependencies'
+description: 'Installs Playwright dependencies and caches them.'
 inputs:
   browsers:
     description: 'What browsers to install.'
     default: 'chromium webkit firefox'
+  cwd:
+    description: 'The working directory to run Playwright in.'
+    default: '.'
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
-      - name: Get Playwright version
-        id: playwright-version
-        run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> $GITHUB_OUTPUT
-        shell: bash
+    - name: Get Playwright version
+      id: playwright-version
+      run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> $GITHUB_OUTPUT
+      shell: bash
+      working-directory: ${{ inputs.cwd }}
 
-      - name: Restore cached playwright binaries
-        uses: actions/cache/restore@v4
-        id: playwright-cache
-        with:
-          path: |
-            ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}
+    - name: Restore cached playwright binaries
+      uses: actions/cache/restore@v4
+      id: playwright-cache
+      with:
+        path: |
+          ~/.cache/ms-playwright
+        # Bump the iteration when bumping runner images to use a new cache
+        key: playwright-${{ runner.os }}-iteration-1-${{ steps.playwright-version.outputs.version }}
 
-      # We always install all browsers, if uncached
-      - name: Install Playwright dependencies (uncached)
-        run: npx playwright install chromium webkit firefox --with-deps
-        if: steps.playwright-cache.outputs.cache-hit != 'true'
-        shell: bash
+    # We always install all browsers, if uncached
+    - name: Install Playwright dependencies (uncached)
+      run: npx playwright install chromium webkit firefox --with-deps
+      if: steps.playwright-cache.outputs.cache-hit != 'true'
+      shell: bash
+      working-directory: ${{ inputs.cwd }}
 
-      - name: Install Playwright system dependencies only (cached)
-        run: npx playwright install-deps ${{ inputs.browsers || 'chromium webkit firefox' }}
-        if: steps.playwright-cache.outputs.cache-hit == 'true'
-        shell: bash
+    - name: Install Playwright system dependencies only (cached)
+      run: npx playwright install-deps ${{ inputs.browsers || 'chromium webkit firefox' }}
+      if: steps.playwright-cache.outputs.cache-hit == 'true'
+      shell: bash
+      working-directory: ${{ inputs.cwd }}
 
-      # Only store cache on develop branch
-      - name: Store cached playwright binaries
-        uses: actions/cache/save@v4
-        if: github.event_name == 'push' && github.ref == 'refs/heads/develop'
-        with:
-          path: |
-            ~/.cache/ms-playwright
-          key: playwright-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}
+    # Only store cache on develop branch
+    - name: Store cached playwright binaries
+      uses: actions/cache/save@v4
+      if: github.event_name == 'push' && github.ref == 'refs/heads/develop'
+      with:
+        path: |
+          ~/.cache/ms-playwright
+        # Bump the iteration when bumping runner images to use a new cache
+        key: playwright-${{ runner.os }}-iteration-1-${{ steps.playwright-version.outputs.version }}

.github/actions/restore-cache/action.yml

@@ -1,42 +1,27 @@
-name: "Restore dependency & build cache"
-description: "Restore the dependency & build cache."
+name: 'Restore dependency & build cache'
+description: 'Restore the dependency & build cache.'
 
 inputs:
   dependency_cache_key:
-    description: "The dependency cache key"
+    description: 'The dependency cache key'
     required: true
-  node_version:
-    description: "If set, temporarily set node version to default one before installing, then revert to this version after."
-    required: false
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
-      - name: Check dependency cache
-        id: dep-cache
-        uses: actions/cache/restore@v4
-        with:
-          path: ${{ env.CACHED_DEPENDENCY_PATHS }}
-          key: ${{ inputs.dependency_cache_key }}
+    - name: Check dependency cache
+      id: dep-cache
+      uses: actions/cache/restore@v4
+      with:
+        path: ${{ env.CACHED_DEPENDENCY_PATHS }}
+        key: ${{ inputs.dependency_cache_key }}
 
-      - name: Restore build artifacts
-        uses: actions/download-artifact@v4
-        with:
-          name: build-output
+    - name: Restore build artifacts
+      uses: actions/download-artifact@v4
+      with:
+        name: build-output
 
-      - name: Use default node version for install
-        if: inputs.node_version && steps.dep-cache.outputs.cache-hit != 'true'
-        uses: actions/setup-node@v4
-        with:
-          node-version-file: 'package.json'
-
-      - name: Install dependencies
-        if: steps.dep-cache.outputs.cache-hit != 'true'
-        run: yarn install --ignore-engines --frozen-lockfile
-        shell: bash
-
-      - name: Revert node version to ${{ inputs.node_version }}
-        if: inputs.node_version && steps.dep-cache.outputs.cache-hit != 'true'
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ inputs.node_version }}
+    - name: Install dependencies
+      if: steps.dep-cache.outputs.cache-hit != 'true'
+      run: yarn install --ignore-engines --frozen-lockfile
+      shell: bash

.github/dependabot.yml

@@ -13,10 +13,10 @@ updates:
     schedule:
       interval: 'weekly'
     allow:
-      - dependency-name: "@sentry/*"
-      - dependency-name: "@opentelemetry/*"
-      - dependency-name: "@prisma/instrumentation"
-      - dependency-name: "opentelemetry-instrumentation-remix"
+      - dependency-name: '@sentry/*'
+      - dependency-name: '@opentelemetry/*'
+      - dependency-name: '@prisma/instrumentation'
+      - dependency-name: 'opentelemetry-instrumentation-remix'
     versioning-strategy: increase
     commit-message:
       prefix: feat

.github/dependency-review-config.yml

@@ -7,3 +7,5 @@ allow-ghsas:
   - GHSA-fr5h-rqp8-mj6g
   # we need this for an E2E test for the minimum required version of Nuxt 3.7.0
   - GHSA-v784-fjjh-f8r4
+  # Next.js Cache poisoning - We require a vulnerable version for E2E testing
+  - GHSA-gp8f-8m3g-qvj9

.github/workflows/auto-release.yml

@@ -1,4 +1,4 @@
-name: "Gitflow: Auto prepare release"
+name: 'Gitflow: Auto prepare release'
 on:
   pull_request:
     types:
@@ -9,13 +9,20 @@ on:
 # This workflow tirggers a release when merging a branch with the pattern `prepare-release/VERSION` into master.
 jobs:
   release:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     name: 'Prepare a new version'
 
     steps:
+      - name: Get auth token
+        id: token
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
+        with:
+          app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }}
+          private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}
+
       - uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GH_RELEASE_PAT }}
+          token: ${{ steps.token.outputs.token }}
           fetch-depth: 0
 
       # https://github.com/actions-ecosystem/action-regex-match
@@ -34,11 +41,18 @@ jobs:
           version=${version/'prepare-release/'/''}
           echo "version=$version" >> $GITHUB_OUTPUT
 
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: 'package.json'
+
       - name: Prepare release
         uses: getsentry/action-prepare-release@v1
-        if: github.event.pull_request.merged == true && steps.version-regex.outputs.match != '' && steps.get_version.outputs.version != ''
+        if:
+          github.event.pull_request.merged == true && steps.version-regex.outputs.match != '' &&
+          steps.get_version.outputs.version != ''
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_RELEASE_PAT }}
+          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with:
           version: ${{ steps.get_version.outputs.version }}
           force: false