Skip to content

chore(deps): update dependency @sentry/nextjs to v8.49.0 [security]#412

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-sentry-nextjs-vulnerability
Open

chore(deps): update dependency @sentry/nextjs to v8.49.0 [security]#412
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-sentry-nextjs-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 28, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@sentry/nextjs (source) 8.40.08.49.0 age confidence

GitHub Vulnerability Alerts

GHSA-r5w7-f542-q2j4

Impact

The ContextLines integration uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach source context to outgoing events.

The stream was not explicitly closed after use. This could lead to excessive amounts of file handles open on the system and potentially lead to a Denial of Service (DoS).

The ContextLines integration is enabled by default in the Node SDK (@sentry/node) and SDKs that run in Node.js environments (@sentry/astro, @sentry/aws-serverless, @sentry/bun, @sentry/google-cloud-serverless, @sentry/nestjs, @sentry/nextjs, @sentry/nuxt, @sentry/remix, @sentry/solidstart, @sentry/sveltekit).

Patches

Users should upgrade to version 8.49.0 or higher.

Workarounds

To remediate this issue in affected versions without upgrading to version 8.49.0 and above you can disable the ContextLines integration. See the docs for more details.

Sentry.init({
  // ...
  integrations: function (integrations) {
    // integrations will be all default integrations
    return integrations.filter(function (integration) {
      return integration.name !== "ContextLines";
    });
  },
});

If you disable the ContextLines integration, you will lose source context on your error events.

References


Release Notes

getsentry/sentry-javascript (@​sentry/nextjs)

v8.49.0

Compare Source

  • feat(v8/browser): Flush offline queue on flush and browser online event (#​14969)
  • feat(v8/react): Add a handled prop to ErrorBoundary (#​14978)
  • fix(profiling/v8): Don't put require, __filename and __dirname on global object (#​14952)
  • fix(v8/node): Enforce that ContextLines integration does not leave open file handles (#​14997)
  • fix(v8/replay): Disable mousemove sampling in rrweb for iOS browsers (#​14944)
  • fix(v8/sveltekit): Ensure source maps deletion is called after source ma… (#​14963)
  • fix(v8/vue): Re-throw error when no errorHandler exists (#​14943)

Work in this release was contributed by @​HHK1 and @​mstrokin. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.85 KB
@​sentry/browser (incl. Tracing, Replay) 73.19 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.58 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.5 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.44 KB
@​sentry/browser (incl. Feedback) 39.5 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.69 KB
@​sentry/react 25.97 KB
@​sentry/react (incl. Tracing) 38.67 KB
@​sentry/vue 27.57 KB
@​sentry/vue (incl. Tracing) 37.71 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.49 KB
CDN Bundle (incl. Tracing) 37.56 KB
CDN Bundle (incl. Tracing, Replay) 72.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.2 KB
CDN Bundle - uncompressed 71.93 KB
CDN Bundle (incl. Tracing) - uncompressed 111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.68 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.78 KB
@​sentry/nextjs (client) 38.92 KB
@​sentry/sveltekit (client) 36.36 KB
@​sentry/node 162.82 KB
@​sentry/node - without tracing 98.95 KB
@​sentry/aws-serverless 126.65 KB

v8.48.0

Compare Source

Deprecations
  • feat(v8/core): Deprecate getDomElement method (#​14799)

    Deprecates getDomElement. There is no replacement.

Other changes
  • fix(nestjs/v8): Use correct main/module path in package.json (#​14791)
  • fix(v8/core): Use consistent continueTrace implementation in core (#​14819)
  • fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#​14823)
  • fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#​14825)
  • fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#​14828)
  • fix(aws-lambda): Remove version suffix from lambda layer (#​14843)
  • fix(v8/node): Ensure express requests are properly handled (#​14851)
  • feat(v8/node): Add openTelemetrySpanProcessors option (#​14853)
  • fix(v8/react): Use Set as the allRoutes container. (#​14878) (#​14884)
  • fix(v8/react): Improve handling of routes nested under path="/" (#​14897)
  • feat(v8/core): Add normalizedRequest to samplingContext (#​14903)
  • fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#​14918)

Work in this release was contributed by @​arturovt. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.85 KB
@​sentry/browser (incl. Tracing, Replay) 73.09 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.48 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.4 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.34 KB
@​sentry/browser (incl. Feedback) 39.5 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.69 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.66 KB
@​sentry/vue 27.56 KB
@​sentry/vue (incl. Tracing) 37.69 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.49 KB
CDN Bundle (incl. Tracing) 37.56 KB
CDN Bundle (incl. Tracing, Replay) 72.75 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.11 KB
CDN Bundle - uncompressed 71.93 KB
CDN Bundle (incl. Tracing) - uncompressed 111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.6 KB
@​sentry/nextjs (client) 38.92 KB
@​sentry/sveltekit (client) 36.36 KB
@​sentry/node 162.8 KB
@​sentry/node - without tracing 98.94 KB
@​sentry/aws-serverless 126.63 KB

v8.47.0

Compare Source

  • feat(v8/core): Add updateSpanName helper function (#​14736)
  • feat(v8/node): Do not overwrite prisma db.system in newer Prisma versions (#​14772)
  • feat(v8/node/deps): Bump @​prisma/instrumentation from 5.19.1 to 5.22.0 (#​14755)
  • feat(v8/replay): Mask srcdoc iframe contents per default (#​14779)
  • ref(v8/nextjs): Fix typo in source maps deletion warning (#​14776)

Work in this release was contributed by @​aloisklink and @​benjick. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.81 KB
@​sentry/browser (incl. Tracing, Replay) 73.06 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.45 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.37 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.85 KB
@​sentry/browser (incl. Feedback) 40.04 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.68 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.64 KB
@​sentry/vue 27.52 KB
@​sentry/vue (incl. Tracing) 37.67 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.47 KB
CDN Bundle (incl. Tracing) 37.51 KB
CDN Bundle (incl. Tracing, Replay) 72.71 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.1 KB
CDN Bundle - uncompressed 71.85 KB
CDN Bundle (incl. Tracing) - uncompressed 111.23 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.3 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.52 KB
@​sentry/nextjs (client) 38.9 KB
@​sentry/sveltekit (client) 36.32 KB
@​sentry/node 162.7 KB
@​sentry/node - without tracing 98.87 KB
@​sentry/aws-serverless 126.53 KB

v8.46.0

Compare Source

  • feat: Allow capture of more than 1 ANR event [v8] (#​14713)
  • feat(node): Detect Railway release name [v8] (#​14714)
  • fix: Normalise ANR debug image file paths if appRoot was supplied [v8] (#​14709)
  • fix(nuxt): Remove build config from tsconfig (#​14737)

Work in this release was contributed by @​conor-ob. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.79 KB
@​sentry/browser (incl. Tracing, Replay) 73.01 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.41 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.32 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.81 KB
@​sentry/browser (incl. Feedback) 40.04 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.68 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.6 KB
@​sentry/vue 27.49 KB
@​sentry/vue (incl. Tracing) 37.63 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.43 KB
CDN Bundle (incl. Tracing) 37.46 KB
CDN Bundle (incl. Tracing, Replay) 72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.01 KB
CDN Bundle - uncompressed 71.74 KB
CDN Bundle (incl. Tracing) - uncompressed 111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.32 KB
@​sentry/nextjs (client) 38.88 KB
@​sentry/sveltekit (client) 36.29 KB
@​sentry/node 162.53 KB
@​sentry/node - without tracing 98.72 KB
@​sentry/aws-serverless 126.4 KB

v8.45.1

Compare Source

  • fix(feedback): Return when the sendFeedback promise resolves (#​14683)

Work in this release was contributed by @​antonis. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.79 KB
@​sentry/browser (incl. Tracing, Replay) 73.01 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.41 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.32 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.81 KB
@​sentry/browser (incl. Feedback) 40.04 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.68 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.6 KB
@​sentry/vue 27.49 KB
@​sentry/vue (incl. Tracing) 37.63 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.43 KB
CDN Bundle (incl. Tracing) 37.46 KB
CDN Bundle (incl. Tracing, Replay) 72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.01 KB
CDN Bundle - uncompressed 71.74 KB
CDN Bundle (incl. Tracing) - uncompressed 111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.32 KB
@​sentry/nextjs (client) 38.88 KB
@​sentry/sveltekit (client) 36.29 KB
@​sentry/node 162.52 KB
@​sentry/node - without tracing 98.71 KB
@​sentry/aws-serverless 126.39 KB

v8.45.0

Compare Source

  • feat(core): Add handled option to captureConsoleIntegration (#​14664)
  • feat(browser): Attach virtual stack traces to HttpClient events (#​14515)
  • feat(replay): Upgrade rrweb packages to 2.31.0 (#​14689)
  • fix(aws-serverless): Remove v8 layer as it overwrites the current layer for docs (#​14679)
  • fix(browser): Mark stack trace from captureMessage with attachStacktrace: true as synthetic (#​14668)
  • fix(core): Mark stack trace from captureMessage with attatchStackTrace: true as synthetic (#​14670)
  • fix(core): Set level in server runtime captureException (#​10587)
  • fix(profiling-node): Guard invocation of native profiling methods (#​14676)
  • fix(nuxt): Inline nitro-utils function (#​14680)
  • fix(profiling-node): Ensure profileId is added to transaction event (#​14681)
  • fix(react): Add React Router Descendant Routes support (#​14304)
  • fix: Disable ANR and Local Variables if debugger is enabled via CLI args (#​14643)

Work in this release was contributed by @​anonrig and @​Zih0. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.79 KB
@​sentry/browser (incl. Tracing, Replay) 73.01 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.41 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.32 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.81 KB
@​sentry/browser (incl. Feedback) 40.04 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.69 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.6 KB
@​sentry/vue 27.49 KB
@​sentry/vue (incl. Tracing) 37.63 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.43 KB
CDN Bundle (incl. Tracing) 37.46 KB
CDN Bundle (incl. Tracing, Replay) 72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.01 KB
CDN Bundle - uncompressed 71.74 KB
CDN Bundle (incl. Tracing) - uncompressed 111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.32 KB
@​sentry/nextjs (client) 38.89 KB
@​sentry/sveltekit (client) 36.29 KB
@​sentry/node 162.52 KB
@​sentry/node - without tracing 98.71 KB
@​sentry/aws-serverless 126.38 KB

v8.44.0

Compare Source

Deprecations
  • feat: Deprecate autoSessionTracking (#​14640)

    Deprecates autoSessionTracking.
    To enable session tracking, it is recommended to unset autoSessionTracking and ensure that either, in browser environments
    the browserSessionIntegration is added, or in server environments the httpIntegration is added.

    To disable session tracking, it is recommended to unset autoSessionTracking and to remove the browserSessionIntegration in
    browser environments, or in server environments configure the httpIntegration with the trackIncomingRequestsAsSessions option set to false.

Other Changes
  • feat: Reword log message around unsent spans (#​14641)
  • feat(opentelemetry): Set response context for http.server spans (#​14634)
  • fix(google-cloud-serverless): Update homepage link in package.json (#​14411)
  • fix(nuxt): Add unbuild config to not fail on warn (#​14662)

Work in this release was contributed by @​robinvw1. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.27 KB
@​sentry/browser - with treeshaking flags 21.94 KB
@​sentry/browser (incl. Tracing) 35.77 KB
@​sentry/browser (incl. Tracing, Replay) 73 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.4 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.31 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.8 KB
@​sentry/browser (incl. Feedback) 40.02 KB
@​sentry/browser (incl. sendFeedback) 27.88 KB
@​sentry/browser (incl. FeedbackAsync) 32.67 KB
@​sentry/react 25.94 KB
@​sentry/react (incl. Tracing) 38.59 KB
@​sentry/vue 27.47 KB
@​sentry/vue (incl. Tracing) 37.61 KB
@​sentry/svelte 23.43 KB
CDN Bundle 24.41 KB
CDN Bundle (incl. Tracing) 37.43 KB
CDN Bundle (incl. Tracing, Replay) 72.62 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 77.98 KB
CDN Bundle - uncompressed 71.69 KB
CDN Bundle (incl. Tracing) - uncompressed 110.99 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.06 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.28 KB
@​sentry/nextjs (client) 38.88 KB
@​sentry/sveltekit (client) 36.27 KB
@​sentry/node 162.4 KB
@​sentry/node - without tracing 98.57 KB
@​sentry/aws-serverless 126.28 KB

v8.43.0

Compare Source

Important Changes
  • feat(nuxt): Add option autoInjectServerSentry (no default import()) (#​14553)

    Using the dynamic import() as the default behavior for initializing the SDK on the server-side did not work for every project.
    The default behavior of the SDK has been changed, and you now need to use the --import flag to initialize Sentry on the server-side to leverage full functionality.

    Example with --import:

    node --import ./.output/server/sentry.server.config.mjs .output/server/index.mjs

    In case you are not able to use the --import flag, you can enable auto-injecting Sentry in the nuxt.config.ts (comes with limitations):

    sentry: {
      autoInjectServerSentry: 'top-level-import', // or 'experimental_dynamic-import'
    },
  • feat(browser): Adds LaunchDarkly and OpenFeature integrations (#​14207)

    Adds browser SDK integrations for tracking feature flag evaluations through the LaunchDarkly JS SDK and OpenFeature Web SDK:

    import * as Sentry from '@​sentry/browser';
    
    Sentry.init({
      integrations: [
        // Track LaunchDarkly feature flags
        Sentry.launchDarklyIntegration(),
        // Track OpenFeature feature flags
        Sentry.openFeatureIntegration(),
      ],
    });
  • feat(browser): Add featureFlagsIntegration for custom tracking of flag evaluations (#​14582)

    Adds a browser integration to manually track feature flags with an API. Feature flags are attached to subsequent error events:

    import * as Sentry from '@​sentry/browser';
    
    const featureFlagsIntegrationInstance = Sentry.featureFlagsIntegration();
    
    Sentry.init({
      // Initialize the SDK with the feature flag integration
      integrations: [featureFlagsIntegrationInstance],
    });
    
    // Manually track a feature flag
    featureFlagsIntegrationInstance.addFeatureFlag('my-feature', true);
  • feat(astro): Add Astro 5 support (#​14613)

    With this release, the Sentry Astro SDK officially supports Astro 5.

Deprecations
  • feat(nextjs): Deprecate typedef for hideSourceMaps (#​14594)

    The functionality of hideSourceMaps was removed in version 8 but was forgotten to be deprecated and removed.
    It will be completely removed in the next major version.

  • feat(core): Deprecate APIs around RequestSessions (#​14566)

    The APIs around RequestSessions are mostly used internally.
    Going forward the SDK will not expose concepts around RequestSessions.
    Instead, functionality around server-side Release Health will be managed in integrations.

Other Changes
  • feat(browser): Add browserSessionIntegration (#​14551)
  • feat(core): Add raw_security envelope types (#​14562)
  • feat(deps): Bump @​opentelemetry/instrumentation from 0.55.0 to 0.56.0 (#​14625)
  • feat(deps): Bump @​sentry/cli from 2.38.2 to 2.39.1 (#​14626)
  • feat(deps): Bump @​sentry/rollup-plugin from 2.22.6 to 2.22.7 (#​14622)
  • feat(deps): Bump @​sentry/webpack-plugin from 2.22.6 to 2.22.7 (#​14623)
  • feat(nestjs): Add fastify support (#​14549)
  • feat(node): Add @​vercel/ai instrumentation (#​13892)
  • feat(node): Add disableAnrDetectionForCallback function (#​14359)
  • feat(node): Add trackIncomingRequestsAsSessions option to http integration (#​14567)
  • feat(nuxt): Add option autoInjectServerSentry (no default import()) (#​14553)
  • feat(nuxt): Add warning when Netlify or Vercel build is discovered (#​13868)
  • feat(nuxt): Improve serverless event flushing and scope isolation (#​14605)
  • feat(opentelemetry): Stop looking at propagation context for span creation (#​14481)
  • feat(opentelemetry): Update OpenTelemetry dependencies to ^1.29.0 (#​14590)
  • feat(opentelemetry): Update OpenTelemetry dependencies to 1.28.0 (#​14547)
  • feat(replay): Upgrade rrweb packages to 2.30.0 (#​14597)
  • fix(core): Decode filename and module stack frame properties in Node stack parser (#​14544)
  • fix(core): Filter out unactionable CEFSharp promise rejection error by default (#​14595)
  • fix(nextjs): Don't show warning about devtool option (#​14552)
  • fix(nextjs): Only apply tracing metadata to data fetcher data when data is an object (#​14575)
  • fix(node): Guard against invalid maxSpanWaitDuration values (#​14632)
  • fix(react): Match routes with parseSearch option in TanStack Router instrumentation (#​14328)
  • fix(sveltekit): Fix git SHA not being picked up for release (#​14540)
  • fix(types): Fix generic exports with default (#​14576)

Work in this release was contributed by @​lsmurray. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.27 KB
@​sentry/browser - with treeshaking flags 21.94 KB
@​sentry/browser (incl. Tracing) 35.75 KB
@​sentry/browser (incl. Tracing, Replay) 72.98 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.38 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.29 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.78 KB
@​sentry/browser (incl. Feedback) 40.02 KB
@​sentry/browser (incl. sendFeedback) 27.88 KB
@​sentry/browser (incl. FeedbackAsync) 32.67 KB
@​sentry/react 25.94 KB
@​sentry/react (incl. Tracing) 38.58 KB
@​sentry/vue 27.47 KB
@​sentry/vue (incl. Tracing) 37.59 KB
@​sentry/svelte 23.43 KB
CDN Bundle 24.41 KB
CDN Bundle (incl. Tracing) 37.4 KB
CDN Bundle (incl. Tracing, Replay) 72.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 77.96 KB
CDN Bundle - uncompressed 71.69 KB
CDN Bundle (incl. Tracing) - uncompressed 110.97 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 238.26 KB
@​sentry/nextjs (client) 38.86 KB
@​sentry/sveltekit (client) 36.26 KB
@​sentry/node 162.34 KB
@​sentry/node - without tracing 98.53 KB
@​sentry/aws-serverless 126.23 KB

v8.42.0

Compare Source

Important Changes
Deprecations
  • feat: Warn about source-map generation (#​14533)

    In the next major version of the SDK we will change how source maps are generated when the SDK is added to an application.
    Currently, the implementation varies a lot between different SDKs and can be difficult to understand.
    Moving forward, our goal is to turn on source maps for every framework, unless we detect that they are explicitly turned off.
    Additionally, if we end up enabling source maps, we will emit a log message that we did so.

    With this particular release, we are emitting warnings that source map generation will change in the future and we print instructions on how to prepare for the next major.

  • feat(nuxt): Deprecate tracingOptions in favor of vueIntegration (#​14530)

    Currently it is possible to configure tracing options in two places in the Sentry Nuxt SDK:

    • In Sentry.init()
    • Inside tracingOptions in Sentry.init()

    For tree-shaking purposes and alignment with the Vue SDK, it is now recommended to instead use the newly exported vueIntegration() and its tracingOptions option to configure tracing options in the Nuxt SDK:

    // sentry.client.config.ts
    import * as Sentry from '@​sentry/nuxt';
    
    Sentry.init({
      // ...
      integrations: [
        Sentry.vueIntegration({
          tracingOptions: {
            trackComponents: true,
          },
        }),
      ],
    });
Other Changes
  • feat(browser-utils): Update web-vitals to v4.2.4 (#​14439)
  • feat(nuxt): Expose vueIntegration (#​14526)
  • fix(feedback): Handle css correctly in screenshot mode (#​14535)

Bundle size 📦

Path Size
@​sentry/browser 23.1 KB
@​sentry/browser - with treeshaking flags 21.84 KB
@​sentry/browser (incl. Tracing) 35.61 KB
@​sentry/browser (incl. Tracing, Replay) 72.47 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 62.96 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 76.79 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.28 KB
@​sentry/browser (incl. Feedback) 39.86 KB
@​sentry/browser (incl. sendFeedback) 27.72 KB
@​sentry/browser (incl. FeedbackAsync) 32.53 KB
@​sentry/react 25.8 KB
@​sentry/react (incl. Tracing) 38.49 KB
@​sentry/vue 27.25 KB
@​sentry/vue (incl. Tracing) 37.38 KB
@​sentry/svelte 23.25 KB
CDN Bundle

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from GoldElysium as a code owner January 28, 2025 22:08
@renovate renovate bot added the Type: Dependencies Dependency updates label Jan 28, 2025
@vercel
Copy link
Copy Markdown

vercel bot commented Jan 28, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hef-website Ready Ready Preview, Comment Apr 8, 2026 7:55pm

@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 177e44f to 7a0ca59 Compare January 30, 2025 17:08
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 7a0ca59 to e3c38b4 Compare February 9, 2025 14:43
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from e3c38b4 to 9bfcb06 Compare March 3, 2025 17:56
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 9bfcb06 to 634001e Compare March 11, 2025 13:26
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 634001e to 2bae7c0 Compare March 13, 2025 19:27
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 2bae7c0 to 34d24f4 Compare March 17, 2025 17:10
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 34d24f4 to a1a9c71 Compare April 1, 2025 13:35
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from a1a9c71 to 7992897 Compare April 8, 2025 10:38
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 7992897 to 4319c66 Compare April 24, 2025 06:47
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 4319c66 to b75bdb5 Compare May 19, 2025 17:15
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from b75bdb5 to 01ec11a Compare May 28, 2025 14:36
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 01ec11a to a92a359 Compare June 4, 2025 11:41
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from a92a359 to 7ae614b Compare June 22, 2025 10:46
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 94ca751 to 62d1f19 Compare September 25, 2025 21:28
@renovate renovate bot changed the title fix(deps): update dependency @sentry/nextjs to v8.49.0 [security] chore(deps): update dependency @sentry/nextjs to v8.49.0 [security] Sep 25, 2025
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 62d1f19 to ff62a08 Compare October 21, 2025 10:05
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from ff62a08 to 710c37d Compare November 19, 2025 23:52
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 710c37d to 8e5b434 Compare December 3, 2025 19:38
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 8e5b434 to 33ef395 Compare December 31, 2025 15:44
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 33ef395 to d14c1df Compare January 8, 2026 18:12
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from d14c1df to f47c72b Compare January 19, 2026 15:53
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from f47c72b to e6e305f Compare January 23, 2026 19:25
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from e6e305f to 7198965 Compare February 2, 2026 16:55
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 7198965 to 671fa6e Compare February 12, 2026 12:07
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 671fa6e to 7cda29e Compare February 17, 2026 21:40
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from 7cda29e to b2eb761 Compare March 5, 2026 17:58
@renovate renovate bot force-pushed the renovate/npm-sentry-nextjs-vulnerability branch from b2eb761 to 48cd501 Compare March 13, 2026 17:41
@renovate renovate bot changed the title chore(deps): update dependency @sentry/nextjs to v8.49.0 [security] chore(deps): update dependency @sentry/nextjs to v8.49.0 [security] - autoclosed Mar 27, 2026
@renovate renovate bot closed this Mar 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants