Requested by: @buenaflor
Merge target: (default)
Quick links:
Assign the accepted label to this issue to approve the release.
Targets
Checked targets will be skipped (either already published or user-requested skip). Uncheck to retry a target.
📋 Changelog
Features
- (span-first) Add transaction and app start type span attributes by @buenaflor in #3678
- Prevent cross-organization trace continuation by @antonis in #3567
- By default, the SDK now extracts the organization ID from the DSN (e.g.
o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
- New option
strictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected.
- New option
orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN.
- Options are also applied to the native Android SDK. On iOS, only the Dart layer enforces strict trace continuation.
Fixes
Flutter
Dependencies
Deps
- chore(deps): update Android SDK to v8.41.0 by @github-actions in #3687
- chore(deps): update Cocoa SDK to v8.58.2 by @github-actions in #3664
- chore(deps): update Native SDK to v0.13.8 by @github-actions in #3667
Internal Changes
Requested by: @buenaflor
Merge target: (default)
Quick links:
Assign the accepted label to this issue to approve the release.
Targets
Checked targets will be skipped (either already published or user-requested skip). Uncheck to retry a target.
📋 Changelog
Features
o123.ingest.sentry.io) and compares it with thesentry-org_idvalue in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.strictTraceContinuation(defaultfalse): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected.orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN.Fixes
Flutter
Dependencies
Deps
Internal Changes