Merge pull request #21369 from getsentry/prepare-release/10.57.0

meta(changelog): Update changelog for 10.57.0

Author: Lms24

.claude/settings.json

@@ -4,7 +4,6 @@
     "allow": [
       "Bash(find:*)",
       "Bash(ls:*)",
-      "Bash(git:*)",
       "Bash(git status:*)",
       "Bash(git log:*)",
       "Bash(git diff:*)",

.github/workflows/canary.yml

@@ -69,9 +69,9 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - test-application: 'angular-21'
+          - test-application: 'angular-22'
             build-command: 'test:build-canary'
-            label: 'angular-21 (next)'
+            label: 'angular-22 (next)'
           - test-application: 'create-react-app'
             build-command: 'test:build-canary'
             label: 'create-react-app (canary)'

.size-limit.js

@@ -120,7 +120,7 @@ module.exports = [
     path: 'packages/browser/build/npm/esm/prod/index.js',
     import: createImport('init', 'sendFeedback'),
     gzip: true,
-    limit: '37 KB',
+    limit: '38 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -162,7 +162,7 @@ module.exports = [
     import: createImport('init', 'ErrorBoundary'),
     ignore: ['react/jsx-runtime'],
     gzip: true,
-    limit: '34 KB',
+    limit: '35 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -294,7 +294,7 @@ module.exports = [
     path: createCDNPath('bundle.tracing.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
-    limit: '153 KB',
+    limit: '154 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -310,31 +310,31 @@ module.exports = [
     path: createCDNPath('bundle.tracing.replay.min.js'),
     gzip: false,
     brotli: false,
-    limit: '268 KB',
+    limit: '269 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
     name: 'CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed',
     path: createCDNPath('bundle.tracing.replay.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
-    limit: '272 KB',
+    limit: '273 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
     name: 'CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed',
     path: createCDNPath('bundle.tracing.replay.feedback.min.js'),
     gzip: false,
     brotli: false,
-    limit: '282 KB',
+    limit: '283 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
     name: 'CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed',
     path: createCDNPath('bundle.tracing.replay.feedback.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
-    limit: '286 KB',
+    limit: '287 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   // Next.js SDK (ESM)
@@ -434,7 +434,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '173 KiB',
+    limit: '175 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {
@@ -454,7 +454,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '425 KiB',
+    limit: '429 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {

CHANGELOG.md

@@ -4,6 +4,76 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+## 10.57.0
+
+### Important Changes
+
+- **feat(angular): Add support for Angular 22 ([#21330](https://github.com/getsentry/sentry-javascript/pull/21330))**
+
+  `@sentry/angular` now officially supports Angular 22.
+
+- **ref(core): Deprecate `sendDefaultPii` in favor of `dataCollection` ([#21277](https://github.com/getsentry/sentry-javascript/pull/21277))**
+
+  `sendDefaultPii` is deprecated and will be removed in v11. The new `dataCollection` option lets you control each category of collected data.
+  `sendDefaultPii: true` still works and maps to enabling all `dataCollection` categories.
+  `dataCollection.userInfo` defaults to `true` when `dataCollection` is provided, meaning auto-populated `user.*` fields (e.g. IP address from a request) are collected by default.
+  Data you set explicitly (like via `Sentry.setUser()`) is always sent regardless.
+  When `dataCollection` is not set at all, the legacy `sendDefaultPii` behavior applies (`userInfo: false` by default) to preserve backward compatibility.
+
+  Note that an empty `dataCollection: {}` falls back to more permissive defaults than `sendDefaultPii: false`, so replicate the old behavior by opting out explicitly:
+
+  ```js
+  Sentry.init({
+    dataCollection: {
+      userInfo: false,
+      genAI: { inputs: false, outputs: false },
+      httpBodies: [],
+      httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
+      cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
+      queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
+    },
+  });
+  ```
+
+### Other Changes
+
+- feat: Use `dataCollection.frameContextLines` for ContextLines integration ([#21323](https://github.com/getsentry/sentry-javascript/pull/21323))
+- feat(cloudflare): Auto instrument D1 based on env ([#21276](https://github.com/getsentry/sentry-javascript/pull/21276))
+- feat(core): Change default of `dataCollection.userInfo` to `true` ([#21348](https://github.com/getsentry/sentry-javascript/pull/21348))
+- feat(core): Default `dataCollection.httpBodies` to all valid body types ([#21352](https://github.com/getsentry/sentry-javascript/pull/21352))
+- feat(hono): Filter noisy transactions (`favicon` etc) ([#21365](https://github.com/getsentry/sentry-javascript/pull/21365))
+- fix(cloudflare): Don't track negatively sampled spans ([#21367](https://github.com/getsentry/sentry-javascript/pull/21367))
+- fix(core): Use `safeDateNow` calls for `new Date()` reads ([#21351](https://github.com/getsentry/sentry-javascript/pull/21351))
+- fix(nextjs): Shim `pinoIntegration` on edge runtime ([#21347](https://github.com/getsentry/sentry-javascript/pull/21347))
+- fix(node): Prevent PostgresJs integration from emitting duplicate spans per query ([#21364](https://github.com/getsentry/sentry-javascript/pull/21364))
+- fix(node-core): Read `__SENTRY_SERVER_MODULES__` lazily so Turbopack injection is honored ([#21339](https://github.com/getsentry/sentry-javascript/pull/21339))
+- fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace ([#21326](https://github.com/getsentry/sentry-javascript/pull/21326))
+- fix(react): Remove unused `react.componentStack` event context ([#21183](https://github.com/getsentry/sentry-javascript/pull/21183))
+- fix(replays): Record `sentry._internal.replay_is_buffering` for spans ([#21297](https://github.com/getsentry/sentry-javascript/pull/21297))
+
+<details>
+  <summary> <strong>Internal Changes</strong> </summary>
+
+- chore: Bump volta node version from 20.19.2 to 20.19.5 ([#21359](https://github.com/getsentry/sentry-javascript/pull/21359))
+- chore: Remove git:\* allowed permissions ([#21328](https://github.com/getsentry/sentry-javascript/pull/21328))
+- chore(deps-dev): Bump eslint-plugin-regexp from 1.15.0 to 3.1.0 ([#21104](https://github.com/getsentry/sentry-javascript/pull/21104))
+- chore(deps-dev): Bump react-router from 7.13.0 to 7.15.0 ([#21337](https://github.com/getsentry/sentry-javascript/pull/21337))
+- chore(size-limit): weekly auto-bump ([#21344](https://github.com/getsentry/sentry-javascript/pull/21344))
+- docs(remix): Add notice about capturing http bodies for form data keys ([#21296](https://github.com/getsentry/sentry-javascript/pull/21296))
+- feat(deps): Bump @types/aws-lambda from 8.10.150 to 8.10.161 ([#21105](https://github.com/getsentry/sentry-javascript/pull/21105))
+- feat(deps): Bump axios from 1.15.2 to 1.16.0 ([#21251](https://github.com/getsentry/sentry-javascript/pull/21251))
+- feat(deps): Bump hono from 4.12.18 to 4.12.21 ([#21341](https://github.com/getsentry/sentry-javascript/pull/21341))
+- ref(browser): Split web vitals integration ([#21210](https://github.com/getsentry/sentry-javascript/pull/21210))
+- ref(node): Streamline lru-memoizer instrumentation ([#21350](https://github.com/getsentry/sentry-javascript/pull/21350))
+- ref(node): Streamline sql-common ([#21360](https://github.com/getsentry/sentry-javascript/pull/21360))
+- test(e2e): Migrate `sendDefaultPii` to `dataCollection` option ([#21288](https://github.com/getsentry/sentry-javascript/pull/21288))
+- test(nextjs): Remove assertion on conditional span ([#21329](https://github.com/getsentry/sentry-javascript/pull/21329))
+- test(node): Move node integration tests to data collection ([#21283](https://github.com/getsentry/sentry-javascript/pull/21283))
+
+</details>
+
+Work in this release was contributed by @zhongrenfei1-hub. Thank you for your contribution!
+
 ## 10.56.0
 
 ### Important Changes

dev-packages/browser-integration-tests/package.json

@@ -64,15 +64,15 @@
     "@sentry-internal/replay": "10.56.0",
     "@sentry/opentelemetry": "10.56.0",
     "@supabase/supabase-js": "2.49.3",
-    "axios": "1.15.2",
+    "axios": "1.16.0",
     "babel-loader": "^10.1.1",
     "fflate": "0.8.2",
     "html-webpack-plugin": "^5.5.0",
     "webpack": "^5.95.0"
   },
   "devDependencies": {
     "@types/node": "^18.19.1",
-    "eslint-plugin-regexp": "^1.15.0",
+    "eslint-plugin-regexp": "^3.1.0",
     "glob": "^13.0.6"
   },
   "volta": {

dev-packages/browser-integration-tests/suites/tracing/metrics/connection-rtt-navigation/init.js

@@ -0,0 +1,13 @@
+import * as Sentry from '@sentry/browser';
+
+window.Sentry = Sentry;
+
+Sentry.init({
+  dsn: 'https://public@dsn.ingest.sentry.io/1337',
+  integrations: [
+    Sentry.browserTracingIntegration({
+      idleTimeout: 1000,
+    }),
+  ],
+  tracesSampleRate: 1,
+});

dev-packages/browser-integration-tests/suites/tracing/metrics/connection-rtt-navigation/template.html

@@ -0,0 +1,9 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+  </head>
+  <body>
+    <div>Rendered</div>
+  </body>
+</html>

dev-packages/browser-integration-tests/suites/tracing/metrics/connection-rtt-navigation/test.ts

@@ -0,0 +1,37 @@
+import { expect } from '@playwright/test';
+import type { Event } from '@sentry/core';
+import { sentryTest } from '../../../../utils/fixtures';
+import { envelopeRequestParser, shouldSkipTracingTest, waitForTransactionRequest } from '../../../../utils/helpers';
+
+sentryTest.beforeEach(({ browserName }) => {
+  if (shouldSkipTracingTest() || browserName !== 'chromium') {
+    sentryTest.skip();
+  }
+});
+
+// `connection.rtt` is recorded as a measurement, which is only flushed on the pageload
+// transaction. It must not leak onto navigation transactions.
+sentryTest(
+  'records `connection.rtt` as a measurement on pageload but not on navigation transactions',
+  async ({ getLocalTestUrl, page }) => {
+    const pageloadRequestPromise = waitForTransactionRequest(page, event => event.contexts?.trace?.op === 'pageload');
+    const url = await getLocalTestUrl({ testDir: __dirname });
+    await page.goto(url);
+
+    const pageloadRequest = envelopeRequestParser(await pageloadRequestPromise) as Event;
+
+    const navigationRequestPromise = waitForTransactionRequest(
+      page,
+      event => event.contexts?.trace?.op === 'navigation',
+    );
+    await page.goto(`${url}#foo`);
+
+    const navigationRequest = envelopeRequestParser(await navigationRequestPromise) as Event;
+
+    expect(pageloadRequest.contexts?.trace?.op).toBe('pageload');
+    expect(navigationRequest.contexts?.trace?.op).toBe('navigation');
+
+    expect(pageloadRequest.measurements?.['connection.rtt']?.value).toBeDefined();
+    expect(navigationRequest.measurements?.['connection.rtt']).toBeUndefined();
+  },
+);

dev-packages/bun-integration-tests/package.json

@@ -15,7 +15,7 @@
   "dependencies": {
     "@sentry/bun": "10.56.0",
     "@sentry/hono": "10.56.0",
-    "hono": "^4.12.18"
+    "hono": "^4.12.21"
   },
   "devDependencies": {
     "@sentry-internal/test-utils": "10.56.0",

dev-packages/clear-cache-gh-action/package.json

@@ -18,7 +18,7 @@
     "@actions/github": "^5.0.0"
   },
   "devDependencies": {
-    "eslint-plugin-regexp": "^1.15.0"
+    "eslint-plugin-regexp": "^3.1.0"
   },
   "volta": {
     "extends": "../../package.json"