v1.5.3

Compare Source

Patch Changes

• #​167 32ab55e Thanks @​marsidev! - Fix nonce from scriptOptions not being set on the injected <script> tag. The script was assigned via the nonce IDL property, which only writes the element's internal slot and never reflects to the nonce content attribute in real browsers. It is now set with setAttribute, so the attribute appears on the tag and CSP nonce-... allowlists work as expected.

v8.29.0

Compare Source

We'd like to extend a big thank you to the 2 contributors who made this release possible. Here are some highlights ✨:

• ⚡️ Update exceljs fork (#​22668)
• 🐞 Bugfixes

The following team members contributed to this release:
@​brijeshb42, @​cherniavskii

Data Grid

@mui/x-data-grid@8.29.0

Internal changes.

@mui/x-data-grid-pro@8.29.0

Same changes as in @mui/x-data-grid@8.29.0.

@mui/x-data-grid-premium@8.29.0

This release includes a version bump of the @mui/x-internal-exceljs-fork package to address the vulnerable dependencies.
The following CVEs are fixed:

• GHSA-ph9p-34f9-6g65
• GHSA-23c5-xmqv-rm74
• GHSA-w5hq-g745-h8pq

To make this security update possible, we bumped the node version requirement from >=14.0.0 to >=14.17.0.
Node.js 14.17.0 was released in May 2021, so we consider it safe to bump the requirement without causing issues for our users.

Same changes as in @mui/x-data-grid-pro@8.29.0, plus:

• [DataGridPremium] Update exceljs fork (#​22668) @​cherniavskii

Date and Time Pickers

@mui/x-date-pickers@8.29.0

Internal changes.

@mui/x-date-pickers-pro@8.29.0

Same changes as in @mui/x-date-pickers@8.29.0.

Charts

@mui/x-charts@8.29.0

Internal changes.

@mui/x-charts-pro@8.29.0

Same changes as in @mui/x-charts@8.29.0.

@mui/x-charts-premium@8.29.0

Same changes as in @mui/x-charts-pro@8.29.0.

Tree View

@mui/x-tree-view@8.29.0

Internal changes.

@mui/x-tree-view-pro@8.29.0

Same changes as in @mui/x-tree-view@8.29.0.

Codemod

@mui/x-codemod@8.29.0

Internal changes.

Core

• [code-infra] Backport flat build setup to v8.x (#​22536) @​brijeshb42

v10.59.0

Compare Source

Important Changes

• feat(react-router): Add support for React Router v8 (#​21633)

  The SDK now supports React Router v8, in both the framework and SPA (@sentry/react) modes.

• feat(react): Add version-agnostic React Router SPA exports (#​21633)

  @sentry/react now exports version-agnostic wrappers for React Router v6+ SPA instrumentation.
  The new exports replace the version-specific V6/V7 variants, which are now deprecated:

  Deprecated	New
  reactRouterV6BrowserTracingIntegration / V7	reactRouterBrowserTracingIntegration
  withSentryReactRouterV6Routing / V7	wrapReactRouterRouting
  wrapCreateBrowserRouterV6 / V7	wrapCreateBrowserRouter
  wrapCreateMemoryRouterV6 / V7	wrapCreateMemoryRouter
  wrapUseRoutesV6 / V7	wrapUseRoutes

  The deprecated exports continue to work and will be removed in the next major version.

Other Changes

• feat(aws-serverless): Instrument aws-sdk clients >= 3.1046.0 (#​21548)
• feat(bun): Add orchestrion bun build plugin (#​21410)
• feat(cloudflare): Instrument sync KV (#​21316)
• feat(core): Disable gen_ai message truncation by default when streamGenAiSpans is enabled (#​21603)
• feat(deno): Add orchestrion deno runtime hook (#​21451)
• feat(hono): Extend peer dependency range (#​21550)
• feat(node): Collapse orchestrion opt-in to a single option (#​20900)
• fix: Diagnostics channel Node v18 (#​21631)
• fix(browser): Clean up pageload readystatechange listener (#​21632)
• fix(core): Capture scopes on span before emitting spanStart event (#​21644)
• fix(core): Defer TwP sampling by reading trace state from the scope (#​21549)
• fix(core): Prevent outgoing HTTP instrumentation from crashing on // request paths (#​21645)
• fix(core): Set production as default sentry.environment attribute value on streamed spans (#​21637)
• fix(nextjs): Register safe random ID context at module load (#​21573)

Bundle size 📦

v10.58.0

Compare Source

Important Changes

• feat(hono): Add support for the Deno runtime (#​21450)

  @sentry/hono now supports the Deno runtime via a new @sentry/hono/deno entry point.
  Install @sentry/deno as a peer dependency and initialize Sentry through the sentry() middleware:

  import { Hono } from 'hono';
  import { sentry } from '@​sentry/hono/deno';
  
  const app = new Hono();
  
  app.use(
    sentry(app, {
      dsn: '__DSN__', // or Deno.env.get('SENTRY_DSN')
      tracesSampleRate: 1.0,
    }),
  );
  
  Deno.serve(app.fetch);

• feat(core): Extract objects as structured logs in consoleLoggingIntegration (#​21385)

  The consoleLoggingIntegration now extracts structured log attributes when the first argument is a plain object.

  // Object keys become log attributes
  console.log({ userId: 123, action: 'login' }, 'User logged in');
  // → attributes: { userId: 123, action: "login" }
  
  // Non-object first args use template + parameters (unchanged)
  console.log('Hello', 'world', 123);
  // → sentry.message.template: "Hello {} {}"

• feat(react-router): Stabilize the instrumentation API (#​21470)

  React Router's instrumentation API is now stable — the @experimental markers have been removed from createSentryServerInstrumentation, createSentryClientInstrumentation, and the related helpers and types.
  The manual server wrappers wrapServerLoader and wrapServerAction are now deprecated in favor of it. Export instrumentations = [Sentry.createSentryServerInstrumentation()] from your entry.server.tsx to instrument all loaders and actions without wrapping them individually.

Other Changes

• feat(hono): Add HTTP connection info to server spans (#​21408)
• feat(node-core): Attach log message and fields to pino error events (#​21422)
• feat(react-router): Always build client instrumentation and deprecate useInstrumentationAPI (#​21432)
• feat(react-router): Rename client navigation roots from the route pattern (#​21463)
• fix(astro): Resolve middleware export types (#​21414)
• fix(browser): Ignore __sentry_wrapped__ inherited from Function.prototype (#​21506)
• fix(core): Avoid double counting cached input tokens for Vercel AI SDK v6 (#​21488)
• fix(core): Keep safeJoin side-effect-free for DOM elements (#​21356)
• fix(deno): Use correct paths for module and types fields in package.json (#​21449)
• fix(nextjs): Mark redirect server actions as ok instead of internal_error (#​21521)
• fix(react-router): Mark instrumentation API active on invocation (#​21420)
• fix(redis): Bring span attributes into alignment with conventions
• fix(sveltekit): Add default exports condition (#​21472)
• fix(tanstackstart-react): Preserve middleware context types (#​21441)
• perf(core): Reuse unchanged Vercel AI messages JSON

Work in this release was contributed by @​archievi, @​AyaanFaisal21, @​itosa-kazu, and @​bkchr. Thank you for your contributions!

Bundle size 📦

v10.57.0

Compare Source

Important Changes

• feat(angular): Add support for Angular 22 (#​21330)

  @sentry/angular now officially supports Angular 22.

• ref(core): Deprecate sendDefaultPii in favor of dataCollection (#​21277)

  sendDefaultPii is deprecated and will be removed in v11. The new dataCollection option lets you control each category of collected data.
  sendDefaultPii: true still works and maps to enabling all dataCollection categories.
  dataCollection.userInfo defaults to true when dataCollection is provided, meaning auto-populated user.* fields (e.g. IP address from a request) are collected by default.
  Data you set explicitly (like via Sentry.setUser()) is always sent regardless.
  When dataCollection is not set at all, the legacy sendDefaultPii behavior applies (userInfo: false by default) to preserve backward compatibility.

  Note that an empty dataCollection: {} falls back to more permissive defaults than sendDefaultPii: false, so replicate the old behavior by opting out explicitly:

  Sentry.init({
    dataCollection: {
      userInfo: false,
      genAI: { inputs: false, outputs: false },
      httpBodies: [],
      httpHeaders: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      cookies: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
      queryParams: { deny: ['forwarded', '-ip', 'remote-', 'via', '-user'] },
    },
  });

Other Changes

• feat: Use dataCollection.frameContextLines for ContextLines integration (#​21323)
• feat(cloudflare): Auto instrument D1 based on env (#​21276)
• feat(core): Change default of dataCollection.userInfo to true (#​21348)
• feat(core): Default dataCollection.httpBodies to all valid body types (#​21352)
• feat(hono): Filter noisy transactions (favicon etc) (#​21365)
• fix(cloudflare): Don't track negatively sampled spans (#​21367)
• fix(core): Use safeDateNow calls for new Date() reads (#​21351)
• fix(nextjs): Shim pinoIntegration on edge runtime (#​21347)
• fix(node): Prevent PostgresJs integration from emitting duplicate spans per query (#​21364)
• fix(node-core): Read __SENTRY_SERVER_MODULES__ lazily so Turbopack injection is honored (#​21339)
• fix(react): Detect React Router v6/v7 navigations in a layout effect to propagate the correct trace (#​21326)
• fix(react): Remove unused react.componentStack event context (#​21183)
• fix(replays): Record sentry._internal.replay_is_buffering for spans (#​21297)

Work in this release was contributed by @​zhongrenfei1-hub. Thank you for your contribution!

Bundle size 📦

✂ Note

PR body was truncated to here.