chore(deps): update Cocoa SDK to v9.10.0

[github-actions]

Bumps modules/sentry-cocoa from 9.8.0 to 9.10.0.

Auto-generated by a dependency updater.

Changelog

9.10.0

Features

• Prevent cross-organization trace continuation (#7705)
  • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
  • New option strictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected.
  • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN.

Fixes

• Scope clipOut masking to active clip bounds (#7780)
• Fix AOT interop with managed .NET runtimes (#6193)

9.9.0

Features

• Add attachAllThreads option to SentryOptions to attach full stack traces for all threads to captured events (#7764)
• Add per-call attachAllThreads parameter to capture(event:), capture(error:), capture(exception:), and capture(message:) to override the global option for specific calls (#7767)

Improvements

• Align app lifecycle breadcrumb state values with in_foreground/is_active app context (#7703)
  • Breaking: Update any beforeBreadcrumb filters or dashboard queries matching on the old state values:
    • iOS/tvOS/visionOS
      • didBecomeActive state changed from foreground to active
    • macOS
      • didBecomeActive state changed from foreground to active
      • willResignActive state changed from background to inactive

Fixes

• Copy incoming tags dict to prevent crash (#7763)
• Per-instance unmaskView propagates to child views (#7733)
  • Warning: If you relied on children of an unmasked view still being individually redacted, verify your Session Replay redaction after updating. An explicit maskView(_:) on a descendant still takes precedence.
• Move SessionTracker file I/O off the main thread (#7704)

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

New Features ✨

• Sync attachments on Android, Windows, and Linux by bitsandfoxes in #2609
• Improve Xbox native support by bitsandfoxes in #2617

Bug Fixes 🐛

• (metrics) Sync EnableMetrics setting to native SDK and default to true by JoshuaMoelans in #2635
• Remove dependency on AnalyticsSessionInfo by bitsandfoxes in #2625
• Pass failed request codes down to cocoa by bitsandfoxes in #2619

Internal Changes 🔧

Deps

• Update Cocoa SDK to v9.10.0 by github-actions[bot] in #2638

• Update Native SDK to v0.13.5 by github-actions in #2631
• Update .NET SDK to v6.3.1 by github-actions in #2632
• Update .NET SDK to v6.3.0 by github-actions in #2615
• Update Native SDK to v0.13.4 by github-actions in #2612
• Update CLI to v3.3.5 by github-actions in #2614
• Update CLI to v3.3.4 by github-actions in #2604
• Update Java SDK to v8.37.1 by github-actions in #2605
• Update Cocoa SDK to v9.8.0 by github-actions in #2596
• Update Native SDK to v0.13.3 by github-actions in #2597
• Update Java SDK to v8.36.0 by github-actions in #2591

Other

• Update validate-pr workflow by stephanie-anderson in #2618
• Add PR validation workflow by stephanie-anderson in #2608
• Pin GitHub Actions to full-length commit SHAs by joshuarli in #2601

Other

• Fix command injection vulnerability in iOS workflow by fix-it-felix-sentry in #2598

---

_{🤖 This preview updates automatically when you update the PR.}