chore(deps): update dependency @sentry/node to v8.49.0 [security] #212

renovate · 2025-01-28T21:43:45Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/node (source)	`8.26.0` → `8.49.0`

GitHub Vulnerability Alerts

GHSA-r5w7-f542-q2j4

Impact

The ContextLines integration uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach source context to outgoing events.

The stream was not explicitly closed after use. This could lead to excessive amounts of file handles open on the system and potentially lead to a Denial of Service (DoS).

The ContextLines integration is enabled by default in the Node SDK (@sentry/node) and SDKs that run in Node.js environments (@sentry/astro, @sentry/aws-serverless, @sentry/bun, @sentry/google-cloud-serverless, @sentry/nestjs, @sentry/nextjs, @sentry/nuxt, @sentry/remix, @sentry/solidstart, @sentry/sveltekit).

Patches

Users should upgrade to version 8.49.0 or higher.

Workarounds

To remediate this issue in affected versions without upgrading to version 8.49.0 and above you can disable the ContextLines integration. See the docs for more details.

Sentry.init({
  // ...
  integrations: function (integrations) {
    // integrations will be all default integrations
    return integrations.filter(function (integration) {
      return integration.name !== "ContextLines";
    });
  },
});

If you disable the ContextLines integration, you will lose source context on your error events.

References

Reported issue: https://github.com/getsentry/sentry-javascript/issues/14892
PR Fix: https://github.com/getsentry/sentry-javascript/pull/14997

Release Notes

getsentry/sentry-javascript (@sentry/node)

`v8.49.0`

Compare Source

feat(v8/browser): Flush offline queue on flush and browser online event (#14969)
feat(v8/react): Add a handled prop to ErrorBoundary (#14978)
fix(profiling/v8): Don't put require, __filename and __dirname on global object (#14952)
fix(v8/node): Enforce that ContextLines integration does not leave open file handles (#14997)
fix(v8/replay): Disable mousemove sampling in rrweb for iOS browsers (#14944)
fix(v8/sveltekit): Ensure source maps deletion is called after source ma… (#14963)
fix(v8/vue): Re-throw error when no errorHandler exists (#14943)

Work in this release was contributed by @HHK1 and @mstrokin. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.85 KB
@sentry/browser (incl. Tracing, Replay)	73.19 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.58 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.5 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.44 KB
@sentry/browser (incl. Feedback)	39.5 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.69 KB
@sentry/react	25.97 KB
@sentry/react (incl. Tracing)	38.67 KB
@sentry/vue	27.57 KB
@sentry/vue (incl. Tracing)	37.71 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.49 KB
CDN Bundle (incl. Tracing)	37.56 KB
CDN Bundle (incl. Tracing, Replay)	72.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.2 KB
CDN Bundle - uncompressed	71.93 KB
CDN Bundle (incl. Tracing) - uncompressed	111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.68 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.78 KB
@sentry/nextjs (client)	38.92 KB
@sentry/sveltekit (client)	36.36 KB
@sentry/node	162.82 KB
@sentry/node - without tracing	98.95 KB
@sentry/aws-serverless	126.65 KB

`v8.48.0`

Compare Source

Deprecations

feat(v8/core): Deprecate getDomElement method (#14799)

Deprecates getDomElement. There is no replacement.

Other changes

fix(nestjs/v8): Use correct main/module path in package.json (#14791)
fix(v8/core): Use consistent continueTrace implementation in core (#14819)
fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#14823)
fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#14825)
fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#14828)
fix(aws-lambda): Remove version suffix from lambda layer (#14843)
fix(v8/node): Ensure express requests are properly handled (#14851)
feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
fix(v8/react): Improve handling of routes nested under path="/" (#14897)
feat(v8/core): Add normalizedRequest to samplingContext (#14903)
fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)

Work in this release was contributed by @arturovt. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.85 KB
@sentry/browser (incl. Tracing, Replay)	73.09 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.48 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.4 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.34 KB
@sentry/browser (incl. Feedback)	39.5 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.69 KB
@sentry/react	25.96 KB
@sentry/react (incl. Tracing)	38.66 KB
@sentry/vue	27.56 KB
@sentry/vue (incl. Tracing)	37.69 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.49 KB
CDN Bundle (incl. Tracing)	37.56 KB
CDN Bundle (incl. Tracing, Replay)	72.75 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.11 KB
CDN Bundle - uncompressed	71.93 KB
CDN Bundle (incl. Tracing) - uncompressed	111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.6 KB
@sentry/nextjs (client)	38.92 KB
@sentry/sveltekit (client)	36.36 KB
@sentry/node	162.8 KB
@sentry/node - without tracing	98.94 KB
@sentry/aws-serverless	126.63 KB

`v8.47.0`

Compare Source

feat(v8/core): Add updateSpanName helper function (#14736)
feat(v8/node): Do not overwrite prisma db.system in newer Prisma versions (#14772)
feat(v8/node/deps): Bump @prisma/instrumentation from 5.19.1 to 5.22.0 (#14755)
feat(v8/replay): Mask srcdoc iframe contents per default (#14779)
ref(v8/nextjs): Fix typo in source maps deletion warning (#14776)

Work in this release was contributed by @aloisklink and @benjick. Thank you for your contributions!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.81 KB
@sentry/browser (incl. Tracing, Replay)	73.06 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.45 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.37 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.85 KB
@sentry/browser (incl. Feedback)	40.04 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.68 KB
@sentry/react	25.96 KB
@sentry/react (incl. Tracing)	38.64 KB
@sentry/vue	27.52 KB
@sentry/vue (incl. Tracing)	37.67 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.47 KB
CDN Bundle (incl. Tracing)	37.51 KB
CDN Bundle (incl. Tracing, Replay)	72.71 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.1 KB
CDN Bundle - uncompressed	71.85 KB
CDN Bundle (incl. Tracing) - uncompressed	111.23 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.3 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.52 KB
@sentry/nextjs (client)	38.9 KB
@sentry/sveltekit (client)	36.32 KB
@sentry/node	162.7 KB
@sentry/node - without tracing	98.87 KB
@sentry/aws-serverless	126.53 KB

`v8.46.0`

Compare Source

feat: Allow capture of more than 1 ANR event [v8] (#14713)
feat(node): Detect Railway release name [v8] (#14714)
fix: Normalise ANR debug image file paths if appRoot was supplied [v8] (#14709)
fix(nuxt): Remove build config from tsconfig (#14737)

Work in this release was contributed by @conor-ob. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.79 KB
@sentry/browser (incl. Tracing, Replay)	73.01 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.41 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.32 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.81 KB
@sentry/browser (incl. Feedback)	40.04 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.68 KB
@sentry/react	25.96 KB
@sentry/react (incl. Tracing)	38.6 KB
@sentry/vue	27.49 KB
@sentry/vue (incl. Tracing)	37.63 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.43 KB
CDN Bundle (incl. Tracing)	37.46 KB
CDN Bundle (incl. Tracing, Replay)	72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.01 KB
CDN Bundle - uncompressed	71.74 KB
CDN Bundle (incl. Tracing) - uncompressed	111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.32 KB
@sentry/nextjs (client)	38.88 KB
@sentry/sveltekit (client)	36.29 KB
@sentry/node	162.53 KB
@sentry/node - without tracing	98.72 KB
@sentry/aws-serverless	126.4 KB

`v8.45.1`

Compare Source

fix(feedback): Return when the sendFeedback promise resolves (#14683)

Work in this release was contributed by @antonis. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.79 KB
@sentry/browser (incl. Tracing, Replay)	73.01 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.41 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.32 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.81 KB
@sentry/browser (incl. Feedback)	40.04 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.68 KB
@sentry/react	25.96 KB
@sentry/react (incl. Tracing)	38.6 KB
@sentry/vue	27.49 KB
@sentry/vue (incl. Tracing)	37.63 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.43 KB
CDN Bundle (incl. Tracing)	37.46 KB
CDN Bundle (incl. Tracing, Replay)	72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.01 KB
CDN Bundle - uncompressed	71.74 KB
CDN Bundle (incl. Tracing) - uncompressed	111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.32 KB
@sentry/nextjs (client)	38.88 KB
@sentry/sveltekit (client)	36.29 KB
@sentry/node	162.52 KB
@sentry/node - without tracing	98.71 KB
@sentry/aws-serverless	126.39 KB

`v8.45.0`

Compare Source

feat(core): Add handled option to captureConsoleIntegration (#14664)
feat(browser): Attach virtual stack traces to HttpClient events (#14515)
feat(replay): Upgrade rrweb packages to 2.31.0 (#14689)
fix(aws-serverless): Remove v8 layer as it overwrites the current layer for docs (#14679)
fix(browser): Mark stack trace from captureMessage with attachStacktrace: true as synthetic (#14668)
fix(core): Mark stack trace from captureMessage with attatchStackTrace: true as synthetic (#14670)
fix(core): Set level in server runtime captureException (#10587)
fix(profiling-node): Guard invocation of native profiling methods (#14676)
fix(nuxt): Inline nitro-utils function (#14680)
fix(profiling-node): Ensure profileId is added to transaction event (#14681)
fix(react): Add React Router Descendant Routes support (#14304)
fix: Disable ANR and Local Variables if debugger is enabled via CLI args (#14643)

Work in this release was contributed by @anonrig and @Zih0. Thank you for your contributions!

Bundle size 📦

Path	Size
@sentry/browser	23.29 KB
@sentry/browser - with treeshaking flags	21.96 KB
@sentry/browser (incl. Tracing)	35.79 KB
@sentry/browser (incl. Tracing, Replay)	73.01 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.41 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.32 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.81 KB
@sentry/browser (incl. Feedback)	40.04 KB
@sentry/browser (incl. sendFeedback)	27.89 KB
@sentry/browser (incl. FeedbackAsync)	32.69 KB
@sentry/react	25.96 KB
@sentry/react (incl. Tracing)	38.6 KB
@sentry/vue	27.49 KB
@sentry/vue (incl. Tracing)	37.63 KB
@sentry/svelte	23.45 KB
CDN Bundle	24.43 KB
CDN Bundle (incl. Tracing)	37.46 KB
CDN Bundle (incl. Tracing, Replay)	72.64 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	78.01 KB
CDN Bundle - uncompressed	71.74 KB
CDN Bundle (incl. Tracing) - uncompressed	111.05 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.32 KB
@sentry/nextjs (client)	38.89 KB
@sentry/sveltekit (client)	36.29 KB
@sentry/node	162.52 KB
@sentry/node - without tracing	98.71 KB
@sentry/aws-serverless	126.38 KB

`v8.44.0`

Compare Source

Deprecations

feat: Deprecate autoSessionTracking (#14640)

Deprecates autoSessionTracking.
To enable session tracking, it is recommended to unset autoSessionTracking and ensure that either, in browser environments
the browserSessionIntegration is added, or in server environments the httpIntegration is added.

To disable session tracking, it is recommended to unset autoSessionTracking and to remove the browserSessionIntegration in
browser environments, or in server environments configure the httpIntegration with the trackIncomingRequestsAsSessions option set to false.

Other Changes

feat: Reword log message around unsent spans (#14641)
feat(opentelemetry): Set response context for http.server spans (#14634)
fix(google-cloud-serverless): Update homepage link in package.json (#14411)
fix(nuxt): Add unbuild config to not fail on warn (#14662)

Work in this release was contributed by @robinvw1. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.27 KB
@sentry/browser - with treeshaking flags	21.94 KB
@sentry/browser (incl. Tracing)	35.77 KB
@sentry/browser (incl. Tracing, Replay)	73 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.4 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.31 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.8 KB
@sentry/browser (incl. Feedback)	40.02 KB
@sentry/browser (incl. sendFeedback)	27.88 KB
@sentry/browser (incl. FeedbackAsync)	32.67 KB
@sentry/react	25.94 KB
@sentry/react (incl. Tracing)	38.59 KB
@sentry/vue	27.47 KB
@sentry/vue (incl. Tracing)	37.61 KB
@sentry/svelte	23.43 KB
CDN Bundle	24.41 KB
CDN Bundle (incl. Tracing)	37.43 KB
CDN Bundle (incl. Tracing, Replay)	72.62 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	77.98 KB
CDN Bundle - uncompressed	71.69 KB
CDN Bundle (incl. Tracing) - uncompressed	110.99 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.06 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.28 KB
@sentry/nextjs (client)	38.88 KB
@sentry/sveltekit (client)	36.27 KB
@sentry/node	162.4 KB
@sentry/node - without tracing	98.57 KB
@sentry/aws-serverless	126.28 KB

`v8.43.0`

Compare Source

Important Changes

feat(nuxt): Add option autoInjectServerSentry (no default import()) (#14553)

Using the dynamic import() as the default behavior for initializing the SDK on the server-side did not work for every project.
The default behavior of the SDK has been changed, and you now need to use the --import flag to initialize Sentry on the server-side to leverage full functionality.

Example with --import:
```
node --import ./.output/server/sentry.server.config.mjs .output/server/index.mjs
```
In case you are not able to use the --import flag, you can enable auto-injecting Sentry in the nuxt.config.ts (comes with limitations):
```
sentry: {
  autoInjectServerSentry: 'top-level-import', // or 'experimental_dynamic-import'
},
```
feat(browser): Adds LaunchDarkly and OpenFeature integrations (#14207)

Adds browser SDK integrations for tracking feature flag evaluations through the LaunchDarkly JS SDK and OpenFeature Web SDK:
```
import * as Sentry from '@&#8203;sentry/browser';

Sentry.init({
  integrations: [
    // Track LaunchDarkly feature flags
    Sentry.launchDarklyIntegration(),
    // Track OpenFeature feature flags
    Sentry.openFeatureIntegration(),
  ],
});
```
- Read more about the Feature Flags feature in Sentry.
- Read more about the LaunchDarkly SDK Integration.
- Read more about the OpenFeature SDK Integration.

feat(browser): Add featureFlagsIntegration for custom tracking of flag evaluations (#14582)

Adds a browser integration to manually track feature flags with an API. Feature flags are attached to subsequent error events:

import * as Sentry from '@&#8203;sentry/browser';

const featureFlagsIntegrationInstance = Sentry.featureFlagsIntegration();

Sentry.init({
  // Initialize the SDK with the feature flag integration
  integrations: [featureFlagsIntegrationInstance],
});

// Manually track a feature flag
featureFlagsIntegrationInstance.addFeatureFlag('my-feature', true);

feat(astro): Add Astro 5 support (#14613)

With this release, the Sentry Astro SDK officially supports Astro 5.

Deprecations

feat(nextjs): Deprecate typedef for hideSourceMaps (#14594)

The functionality of hideSourceMaps was removed in version 8 but was forgotten to be deprecated and removed.
It will be completely removed in the next major version.
feat(core): Deprecate APIs around RequestSessions (#14566)

The APIs around RequestSessions are mostly used internally.
Going forward the SDK will not expose concepts around RequestSessions.
Instead, functionality around server-side Release Health will be managed in integrations.

Other Changes

feat(browser): Add browserSessionIntegration (#14551)
feat(core): Add raw_security envelope types (#14562)
feat(deps): Bump @opentelemetry/instrumentation from 0.55.0 to 0.56.0 (#14625)
feat(deps): Bump @sentry/cli from 2.38.2 to 2.39.1 (#14626)
feat(deps): Bump @sentry/rollup-plugin from 2.22.6 to 2.22.7 (#14622)
feat(deps): Bump @sentry/webpack-plugin from 2.22.6 to 2.22.7 (#14623)
feat(nestjs): Add fastify support (#14549)
feat(node): Add @vercel/ai instrumentation (#13892)
feat(node): Add disableAnrDetectionForCallback function (#14359)
feat(node): Add trackIncomingRequestsAsSessions option to http integration (#14567)
feat(nuxt): Add option autoInjectServerSentry (no default import()) (#14553)
feat(nuxt): Add warning when Netlify or Vercel build is discovered (#13868)
feat(nuxt): Improve serverless event flushing and scope isolation (#14605)
feat(opentelemetry): Stop looking at propagation context for span creation (#14481)
feat(opentelemetry): Update OpenTelemetry dependencies to ^1.29.0 (#14590)
feat(opentelemetry): Update OpenTelemetry dependencies to 1.28.0 (#14547)
feat(replay): Upgrade rrweb packages to 2.30.0 (#14597)
fix(core): Decode filename and module stack frame properties in Node stack parser (#14544)
fix(core): Filter out unactionable CEFSharp promise rejection error by default (#14595)
fix(nextjs): Don't show warning about devtool option (#14552)
fix(nextjs): Only apply tracing metadata to data fetcher data when data is an object (#14575)
fix(node): Guard against invalid maxSpanWaitDuration values (#14632)
fix(react): Match routes with parseSearch option in TanStack Router instrumentation (#14328)
fix(sveltekit): Fix git SHA not being picked up for release (#14540)
fix(types): Fix generic exports with default (#14576)

Work in this release was contributed by @lsmurray. Thank you for your contribution!

Bundle size 📦

Path	Size
@sentry/browser	23.27 KB
@sentry/browser - with treeshaking flags	21.94 KB
@sentry/browser (incl. Tracing)	35.75 KB
@sentry/browser (incl. Tracing, Replay)	72.98 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	63.38 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	77.29 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.78 KB
@sentry/browser (incl. Feedback)	40.02 KB
@sentry/browser (incl. sendFeedback)	27.88 KB
@sentry/browser (incl. FeedbackAsync)	32.67 KB
@sentry/react	25.94 KB
@sentry/react (incl. Tracing)	38.58 KB
@sentry/vue	27.47 KB
@sentry/vue (incl. Tracing)	37.59 KB
@sentry/svelte	23.43 KB
CDN Bundle	24.41 KB
CDN Bundle (incl. Tracing)	37.4 KB
CDN Bundle (incl. Tracing, Replay)	72.6 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	77.96 KB
CDN Bundle - uncompressed	71.69 KB
CDN Bundle (incl. Tracing) - uncompressed	110.97 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	225.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.26 KB
@sentry/nextjs (client)	38.86 KB
@sentry/sveltekit (client)	36.26 KB
@sentry/node	162.34 KB
@sentry/node - without tracing	98.53 KB
@sentry/aws-serverless	126.23 KB

`v8.42.0`

Compare Source

Important Changes

feat(react): React Router v7 support (library) (#14513)

This release adds support for React Router v7 (library mode).
Check out the docs on how to set up the integration: Sentry React Router v7 Integration Docs

Deprecations

feat: Warn about source-map generation (#14533)

In the next major version of the SDK we will change how source maps are generated when the SDK is added to an application.
Currently, the implementation varies a lot between different SDKs and can be difficult to understand.
Moving forward, our goal is to turn on source maps for every framework, unless we detect that they are explicitly turned off.
Additionally, if we end up enabling source maps, we will emit a log message that we did so.

With this particular release, we are emitting warnings that source map generation will change in the future and we print instructions on how to prepare for the next major.
feat(nuxt): Deprecate tracingOptions in favor of vueIntegration (#14530)

Currently it is possible to configure tracing options in two places in the Sentry Nuxt SDK:
- In Sentry.init()
- Inside tracingOptions in Sentry.init()
For tree-shaking purposes and alignment with the Vue SDK, it is now recommended to instead use the newly exported vueIntegration() and its tracingOptions option to configure tracing options in the Nuxt SDK:
```
// sentry.client.config.ts
import * as Sentry from '@&#8203;sentry/nuxt';

Sentry.init({
  // ...
  integrations: [
    Sentry.vueIntegration({
      tracingOptions: {
        trackComponents: true,
      },
    }),
  ],
});
```

Other Changes

feat(browser-utils): Update web-vitals to v4.2.4 (#14439)
feat(nuxt): Expose vueIntegration (#14526)
fix(feedback): Handle css correctly in screenshot mode (#14535)

Bundle size 📦

Path	Size
@sentry/browser	23.1 KB
@sentry/browser - with treeshaking flags	21.84 KB
@sentry/browser (incl. Tracing)	35.61 KB
@sentry/browser (incl. Tracing, Replay)	72.47 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	62.96 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	76.79 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	89.28 KB
@sentry/browser (incl. Feedback)	39.86 KB
@sentry/browser (incl. sendFeedback)	27.72 KB
@sentry/browser (incl. FeedbackAsync)	32.53 KB
@sentry/react	25.8 KB
@sentry/react (incl. Tracing)	38.49 KB
@sentry/vue	27.25 KB
@sentry/vue (incl. Tracing)	37.38 KB
@sentry/svelte	23.25 KB
CDN Bundle

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the security label Jan 28, 2025

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from 43b1ff4 to bf01b6e Compare February 9, 2025 13:10

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from bf01b6e to dc9cce3 Compare March 3, 2025 16:16

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from dc9cce3 to 2fb07b3 Compare April 24, 2025 08:35

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from 2fb07b3 to cf3ad49 Compare May 19, 2025 20:45

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from cf3ad49 to 3aff128 Compare May 28, 2025 07:41

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from 3aff128 to ea013d4 Compare August 10, 2025 14:58

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from ea013d4 to 3ca55e7 Compare August 31, 2025 10:44

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from 3ca55e7 to b124836 Compare September 25, 2025 20:13

renovate bot changed the title ~~fix(deps): update dependency @sentry/node to v8.49.0 [security]~~ chore(deps): update dependency @sentry/node to v8.49.0 [security] Sep 25, 2025

renovate bot changed the title ~~chore(deps): update dependency @sentry/node to v8.49.0 [security]~~ Update dependency @sentry/node to v8.49.0 [SECURITY] Oct 10, 2025

renovate bot changed the title ~~Update dependency @sentry/node to v8.49.0 [SECURITY]~~ chore(deps): update dependency @sentry/node to v8.49.0 [security] Oct 10, 2025

MatiasSinisalo force-pushed the master branch from 3e5c636 to 311dd06 Compare October 14, 2025 11:27

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from b124836 to 2af49d0 Compare October 14, 2025 15:38

chore(deps): update dependency @sentry/node to v8.49.0 [security]

b51c9cf

renovate bot force-pushed the renovate/npm-sentry-node-vulnerability branch from 2af49d0 to b51c9cf Compare November 11, 2025 00:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency @sentry/node to v8.49.0 [security] #212

chore(deps): update dependency @sentry/node to v8.49.0 [security] #212

Uh oh!

renovate bot commented Jan 28, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update dependency @sentry/node to v8.49.0 [security] #212

Are you sure you want to change the base?

chore(deps): update dependency @sentry/node to v8.49.0 [security] #212

Uh oh!

Conversation

renovate bot commented Jan 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

GitHub Vulnerability Alerts

Impact

Patches

Workarounds

References

Release Notes

Bundle size 📦

Deprecations

Other changes

Bundle size 📦

Bundle size 📦

Bundle size 📦

Bundle size 📦

Bundle size 📦

Deprecations

Other Changes

Bundle size 📦

Important Changes

Deprecations

Other Changes

Bundle size 📦

Important Changes

Deprecations

Other Changes

Bundle size 📦

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jan 28, 2025 •

edited

Loading