Bump sentry-rails from 6.7.0 to 7.0.0

[dependabot]

Bumps sentry-rails from 6.7.0 to 7.0.0.

Changelog

Sourced from sentry-rails's changelog.

7.0.0

Breaking Changes 🛠

• Logs are now enabled by default and enable_logs is removed. by @​sl0thentr0py in #3053

  Using sentry-rails will automatically turn on automatic structured logging from Rails. if you want to turn it off, use:

  Sentry.init do |config
    # ...
    config.rails.structured_logging.enabled = false
  end

• Metrics are now enabled by default and enable_metrics is removed. by @​sl0thentr0py in #3061

• config.otlp.setup_otlp_traces_exporter and config.otlp.setup_propagator now default to false. by @​sl0thentr0py in #3063

New Features ✨

Data Collection

We are moving away from send_default_pii to a more granular configuration called data_collection.
It allows you to precisely control the data that Sentry collects from your app.

Sentry.init do |config|
  # ...
  config.data_collection.user_info = false
  config.data_collection.http_bodies = []
end

send_default_pii is deprecated but will continue to default to false.
data_collection will be backfilled when send_default_pii = false with the following values in 7.0.0:

data_collection.user_info = false
data_collection.cookies.mode = :off
data_collection.http_headers.request.mode = :deny_list
data_collection.http_headers.request.terms = %w[forwarded -ip _ip remote via _user -user]
data_collection.http_headers.response.mode = :deny_list
data_collection.http_headers.response.terms = %w[forwarded -ip _ip remote via _user -user]
data_collection.http_bodies = []
data_collection.url_query_params.mode = :off
data_collection.graphql.document = false
data_collection.graphql.variables = false
data_collection.database_query_data = false
data_collection.queues = false
data_collection.frame_context_lines = 3

... (truncated)

Commits

• 28e4246 release: 7.0.0
• b6c4ddd feat(data-collection): Make rails breadcrumbs respect data collection (#3068)
• 3bf6552 feat(data-collection): Change stack_frame_variables to KeyValueCollection (#3...
• caa1b0c feat(data-collection): Gate ActiveJob arguments and ExecutionContext inclusio...
• 685e82a ci: 🤖 Update pinned CI lockfiles (#3060)
• 100cdc9 feat!: Remove enable_logs (#3053)
• 040fb0d fix(rails): set dummy rails app before calling initializers (#3055)
• f34bffb ci: 🤖 Update pinned CI lockfiles (#3054)
• c071bcd feat(data-collection): Port Rails log subscribers (#3034)
• 5a2f1ed feat(data-collection): Port Rails controller and ActiveStorage (#3033)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

PR author is in the excluded authors list.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	gem/​sentry-ruby@​6.7.0 ⏵ 7.0.0	+1
	gem/​sentry-rails@​6.7.0 ⏵ 7.0.0

View full report