[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/node (source)	^7.118.0 → ^11.9.0

---

Release Notes

getsentry/sentry-javascript (@​sentry/node)

v11.9.0

Compare Source

Important Changes

• feat: Rename diagnostic_channel, fetch and gRPC span origins (#​25601)

  Some span origins changed their names to match the other v11 origins:

  • auto.graphql.diagnostic_channel is now auto.graphql.graphql.
  • auto.db.redis.diagnostic_channel, auto.db.mysql2.diagnostic_channel and auto.db.mongoose.diagnostic_channel now end in .native_channel.
  • auto.http.wintercg_fetch is now auto.http.fetch, as on Bun, Deno and Cloudflare.
  • auto.grpc.serverless is now auto.grpc.google_cloud.

  If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

• feat(deno): Add incoming request options to denoServeIntegration (#​25493)

  denoServeIntegration now accepts ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated and onSpanEnd, with the same meaning as in denoHttpIntegration. The callbacks receive the web Request.

  ignoreStaticAssets defaults to true, so Deno.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set denoServeIntegration({ ignoreStaticAssets: false }). Deno.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled.

• feat(deno): Record request sessions for Deno.serve (#​25496)

  denoServeIntegration now records a request session for each incoming request, as denoHttpIntegration does for node:http. This gives release health and crash-free rates for Deno.serve apps. Sessions are sent only when a release is set. To turn them off, set denoServeIntegration({ sessions: false }). sessionFlushingDelayMS sets how long the SDK waits before it sends the session aggregate.

• feat(deno): Register channel injection hooks from init() (#​25546)

  Sentry.init() in @sentry/deno now registers the diagnostics-channel injection hooks, as @sentry/node does. The channel integrations now record spans without --preload=npm:@sentry/deno/import, for modules that you import after init(). To also instrument modules that load before init(), such as static imports in your entry module, keep the preload. With debug: true, the SDK logs a warning when no injection is active.

  On Node.js, tracing-hooks messages now show with debug: true instead of with DEBUG=@apm-js-collab/*.

• feat(nextjs): Add a tunnel route handler that sends only the event payload to Sentry (#​25456)

  The tunnelRoute option can now send events through a route handler in your app. The handler forwards only the event payload to Sentry, and no request headers. To use it, add this file next to your tunnelRoute option:

  // app/sentry-tunnel/route.ts (or src/app/sentry-tunnel/route.ts)
  export { POST } from '@sentry/nextjs/tunnel';

  The handler accepts events for the DSN of your server SDK. To accept other DSNs, use createSentryTunnelRoute({ allowedDsns }) from the same import. Without the file, the tunnel route works as before.

  Also, the server no longer sends spans of tunnel requests when span streaming is on, because these spans only show the SDK's own traffic.

• feat(nextjs): Never emit trace meta tags from a prerender (#​25141)

  Pageloads of apps with cacheComponents enabled are connected to their server request again. Pages that Next.js prerenders no longer carry trace information, so a cached page can no longer connect visitors to a request that was not theirs. This also applies to ISR pages. The pageload waits for the trace information when it arrives with the part of the page that streams in after a cached shell.

  If you set up OpenTelemetry yourself and register SentryPropagator, register NextSentryPropagator instead and pass your tracer provider to markPrerendersOnTracerProvider, so that your prerendered pages carry no trace information either.

• feat(nextjs): Send tunnel route requests with credentials: 'omit' (#​25509)

  With tunnelRoute and no tunnel route handler, @sentry/nextjs now sends events from the browser with credentials: 'omit', because the tunnel route does not need cookies.
  If a layer in front of your app checks cookies before it lets requests through (for example Vercel Deployment Protection), you can send them again in your browser Sentry.init call:

  // instrumentation-client.ts
  Sentry.init({
    transportOptions: { fetchOptions: { credentials: 'same-origin' } },
  });

• feat(nitro): Report a single http.server span per request (#​25295)

  A Nitro request now creates only one http.server span. The nested http.server spans with the origins auto.http.nitro.srvx and auto.http.nitro.h3 are removed. h3 route handlers now get a handler span, and middleware spans are direct children of the http.server span. If you have queries or alerts on the removed spans, change them to use the http.server span or the handler span.

• fix: Use auto.http.http_server origin for all node:http server spans (#​25604)

  On Bun and Deno, node:http server spans now have the origin auto.http.http_server instead of auto.http.server, as on Node.js. On Node.js, nothing changes. Bun.serve spans keep auto.http.bun.serve and Deno.serve spans keep auto.http.deno. If you have ignoreSpans or beforeSendSpan rules, queries or alerts on auto.http.server, change them to use auto.http.http_server.

Other Changes

• feat(browser): Add LoaderSentry type export (#​25357)
• feat(cloudflare): Add isStreamingResponse option and detect streamed RSC responses (#​24932)
• feat(core): Add dataCollection.mcp option (#​25553)
• feat(core): Limit the body size of tunnel requests (#​25515)
• feat(nextjs): Link use cache hits to their fill across instances (#​25448)
• feat(nextjs): Wait for the resumed part of a document before starting the pageload (#​25142)
• feat(nitro): Merge the nitro integrations into a single nitroIntegration (#​25349)
• feat(server-utils): Emit execute_tool spans for Anthropic's beta.messages.toolRunner() (#​25320)
• fix(astro): defer to @sentry/cloudflare/vite on Cloudflare Workers (#​25347)
• fix(aws-serverless): End the function.aws span when a callback-style handler calls back (#​25543)
• fix(browser): Skip profiling for unsampled active root spans (#​25498)
• fix(bundler-plugins): Check globalThis before global in the injected snippet (#​25365)
• fix(bundler-plugins): Inject the release only into chunks that load at startup (#​25541)
• fix(cloudflare): auto-instrument a re-exported default export (#​25345)
• fix(cloudflare): Deliver check-ins and events from forked isolation scopes (#​25374)
• fix(cloudflare): Don't hold Durable Object invocations open with the segment-end flush timer (#​25490)
• fix(cloudflare): keep default exports intact when auto-instrumenting (#​25372)
• fix(core): Use trace_metric data category for metrics rate limits and client reports (#​25606)
• fix(deps): Allow @opentelemetry/api 1.9 again (#​25684)
• fix(deno): Re-export portable helpers that Cloudflare exposes (#​25491)
• fix(elysia): Set SDK metadata on the options passed to init (#​24521)
• fix(elysia): use Node transport on Node runtimes (#​25015)
• fix(hono): Read connection info from the runtime instead of Hono helpers (#​25552)
• fix(nextjs): Only inject applicationKey metadata into browser bundles (#​25565)
• fix(nitro): Use forward slashes for resolved plugin paths on Windows (#​25023)
• fix(node,vercel-edge,bundler-plugins): Ignore commit env vars set to their own name (#​25244)
• fix(node): Guard user callbacks in the node:http server instrumentation (#​25592)
• fix(node): Only read JavaScript and TypeScript source files in ContextLines (#​25535)
• fix(node): restore tsx runtime instrumentation (#​25351)
• fix(nuxt): Delete Sentry-enabled source maps from Nitro output directories (#​25450)
• fix(nuxt): Keep sourcesContent in Nuxt 5 server source maps (#​25325)
• fix(react): Don't crash ErrorBoundary when error.cause is not an Error (#​25542)
• fix(react): Match React Router navigations against root routes only (#​25336)
• fix(server-runtime-injection): Load ESM hook without the build/esm package.json marker (#​25562)
• fix(server-utils): Bundle the CommonJS dependencies of instrumented packages on Vite 8 (#​25523)
• fix(server-utils): Keep OpenAI decision confidence on Vercel AI decide spans (#​25457)
• fix(server-utils): Nest LangChain run spans under their parent run (#​25364)
• fix(server-utils): Stop the orchestrion Vite plugin from bundling the CJS build of @​sentry/server-utils (#​25359)
• fix(solidstart): Read server action route from the request's root span (#​25513)
• fix(tanstackstart-react): Delete only the source maps that Sentry enabled (#​25362)
• fix(vercel-edge): expose portable tracing and feature flag helpers (#​25377)
• ref(bundler-plugins): Drop @​babel/core peer dependency (#​25406)
• ref(nitro): Move channel-based instrumentation into @​sentry/server-utils (#​24861)

Internal Changes

• build(node): Bump Node to 24.22.1 (#​25634)
• chore: Add external contributor to CHANGELOG.md (#​25367)
• chore: Add external contributor to CHANGELOG.md (#​25468)
• chore: Add external contributor to CHANGELOG.md (#​25483)
• chore: Add external contributor to CHANGELOG.md (#​25485)
• chore: Add external contributor to CHANGELOG.md (#​25487)
• chore: Add external contributor to CHANGELOG.md (#​25500)
• chore: Add external contributor to CHANGELOG.md (#​25505)
• chore: Add external contributor to CHANGELOG.md (#​25596)
• chore: Add external contributor to CHANGELOG.md (#​25597)
• chore: Add external contributor to CHANGELOG.md (#​25611)
• chore: Move the monorepo from Yarn 1 to pnpm 12 (#​25354)
• chore: Update comments related to span links with latest info (#​25135)
• chore(bugbot): Flag new Cloudflare tests that wrap the worker by hand (#​25619)
• chore(deps-dev): Bump oxlint and oxfmt (#​25578)
• chore(deps-dev): Bump vue from 3.2.45 to 3.5.43 (#​25413)
• chore(deps): Bump @types/node to 20 (#​25501)
• chore(deps): Bump Playwright to 1.64.1 and pin it exactly (#​25382)
• chore(hono): Remove "ALPHA" from package.json description (#​25521)
• chore(size-limit): weekly auto-bump (#​25442)
• ci: Check bundle size increases per PR (#​24737)
• ci: Empty cached node_modules that have broken .bin scripts (#​25635)
• ci: Fail when a Playwright version drifts from the pinned one (#​25383)
• ci: Keep Namespace cache volumes complete and cache the pnpm binary (#​25569)
• ci: Move size check reruns into a local action (#​25600)
• ci: Read the Playwright version from package.json in install-playwright (#​25380)
• ci: Run GitHub Actions jobs on Namespace runners (#​25547)
• ci: Run optional E2E tests in a separate workflow (#​25548)
• ci: Run the Playwright install's npx outside the repo (#​25384)
• ci: Share the E2E test setup between build.yml and optional-e2e.yml (#​25616)
• ci: Stop uploading duplicate tarballs to the release artifact (#​25688)
• ci(cloudflare): Run the integration tests on the latest wrangler too (#​25508)
• ci(e2e): Run all E2E tests when CI config changes (#​25391)
• ci(e2e): Run E2E tests with pnpm 12 (#​25334)
• ci(e2e): Run E2E tests without restoring the monorepo's node_modules (#​25403)
• ci(e2e): Stop pnpm run from installing the workspace in E2E jobs (#​25514)
• ci(size-limit): Don't enforce size limits on release PRs (#​25631)
• docs: Add guide for testing SDK packages with pnpm link (#​25512)
• feat(deps): Bump @​actions/glob from 0.6.1 to 0.7.0 (#​25411)
• feat(deps): Bump @​anthropic-ai/sdk from 0.63.0 to 0.133.0 (#​25417)
• feat(deps): Bump recast from 0.20.5 to 0.24.0 (#​25416)
• ref(core): Share the commit env var list used for release detection (#​25478)
• test(browser): Use blocking scripts in loader integration tests (#​25395)
• test(deps): Upgrade TanStack Start, Router, and Nitro (#​25445)
• test(e2e): Add node-otel-sdk-node-v3 e2e app for OpenTelemetry JS v3 (#​25630)
• test(e2e): Align Playwright versions with the root version (#​25381)
• test(e2e): Cover Vercel AI decisions in node-openai-decisions-send-to-sentry (#​25458)
• test(e2e): Drop OpenRouter's [DONE] frame in the Anthropic test app (#​25594)
• test(e2e): Drop unused @​sentry/bundler-plugins dependency from bundler apps (#​25399)
• test(e2e): Fix peer dependency issues in hydrogen-react-router-7 (#​25400)
• test(e2e): Install test-utils from a tarball (#​25402)
• test(e2e): Move app port 38787 out of the ephemeral port range (#​25504)
• test(e2e): Remove event dumps and their normalization script (#​25404)
• test(e2e): Retry tests in all dev-mode variants (#​25640)
• test(e2e): Use nitro beta and Vite 8 in tanstackstart apps (#​25451)
• test(nestjs): Fix flaky schedule instrumentation error tests (#​25447)
• test(nextjs): Bump nextjs-16 E2E app to Next.js 16.4.2 (#​25686)
• test(nextjs): Fix flaky nextjs-16 metrics tests (#​25517)
• test(nextjs): Use React 19.3.1 in the vinext e2e variants (#​25449)
• test(nextjs): Warm the module graph before the tunnel route tests (#​25593)
• test(node): skip the Prisma 8 suite on Node 20 (#​25421)
• test(nuxt): Pin the nuxt-4 e2e MongoDB image to 8.0 (#​25557)
• test(nuxt): Pin the nuxt-5 e2e MongoDB image to 8.0 (#​25564)
• test(nuxt): Wait for hydration before clicking in error tests (#​25520)
• test(react): Fix flaky react-router-6 aborted SSE console assertion (#​25398)
• test(replay): Fix flaky bufferStalledRequests segmentId assertion (#​25394)

Work in this release was contributed by @​4ktLuffy, @​adityareddy-dev, @​dasilvaluis, @​faizansaiyed123, @​jpdefo, @​Jxxunnn, @​mikamikasuki, @​philipatkinson, @​rubas, and @​Shubham-Padkonde. Thank you for your contributions!

• feat(bun): Add incoming request options and request sessions to bunServerIntegration

  bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

  Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

  ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

• feat(node): Add onSpanEnd to httpIntegration

  httpIntegration and httpServerSpansIntegration now accept onSpanEnd, a hook that runs when the response for an incoming request finishes, before its span ends. Use it to change the span based on the response. Deno and Bun already have this option.

• feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#​25670)

  sentryBunPlugin from @sentry/bun/plugin now accepts the same options as sentryEsbuildPlugin (org, project, authToken, release, sourcemaps, ...). When Bun.build writes source maps to outdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to run sentry sourcemap inject and sentry sourcemap upload after the build.

  Like the other bundler plugins, sentryBunPlugin now sends build telemetry and injects the release it detects (for example, from git). To turn off telemetry, set telemetry: false.

v11.8.0

Compare Source

Important Changes

• feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#​25095)

  The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

  • Node.js 20.19.0 or higher is required.
  • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
  • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
  • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

• feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#​25285)

  OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

• feat(core): Support SuppressedError in LinkedErrors integration (#​25246)
• fix(astro): Delete generated source maps for static output (#​25310)
• fix(astro): Upload source maps of Astro 7's prerender build (#​25309)
• fix(browser): Apply urlQueryParams to the Referer header (#​25324)
• fix(cloudflare): auto-instrument when wrangler main is a package (#​25343)
• fix(hono): Expose runtime-specific SDK options (#​25290)
• fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#​25301)
• fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#​25341)
• fix(server-utils): Read pi-durable 1.2.0 tool results from output (#​25312)
• fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#​25043)
• fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#​25376)
• fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#​25307)
• fix(tanstackstart-react): Rewrite source paths of split route modules (#​25361)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​25375)
• ci: Install the pnpm version that Volta pins (#​25287)
• license: Add cli FSL notice to package licenses (#​25314)
• ref(core): use shared MCP attribute conventions (#​25059)
• ref(tanstackstart-react): Reuse shared component annotation options (#​25313)
• test(browser): Keep whitespace text out of the handlers-lcp page (#​25280)
• test(bun): Restore @​sentry/core spies after the Bun.serve tests (#​25276)
• test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#​25308)
• test(e2e): Add node-openai-decisions-send-to-sentry test app (#​25331)
• test(e2e): Add node-openai-send-to-sentry test app (#​24824)
• test(e2e): Add nuxt-5-sourcemaps test (#​25268)
• test(e2e): Inherit root Volta config in all e2e test apps (#​25369)
• test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#​25282)
• test(nextjs): Run nextjs-16-tunnel on Cloudflare (#​25161)
• test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#​25279)
• test(node): Await the child exit in the "should exit" integration tests (#​25277)
• test(node): Cover ioredis v6 in the diagnostics_channel suite (#​25300)
• test(node): Cover LangChain model calls made from a tool without config (#​25326)
• test(node): Log slow and failed Docker Compose starts in integration tests (#​25278)
• test(node): Unflake captureMessage with_level test (#​25358)
• test(sveltekit): Pin rollup to 4.64.5 (#​25328)

Work in this release was contributed by @​kunal649 and @​mketiku. Thank you for your contributions!

v11.7.0

Compare Source

Important Changes

• feat(cloudflare): Add opt-in cron monitoring for Cron Triggers (#​25014)

  The new cronTriggersIntegration sends check-ins for Cron Triggers. Each check-in includes the schedule from controller.cron, so Sentry creates the monitor on the first run. The integration is opt-in, because monitors are billed.

  Cron Triggers have no names, so map each cron expression of your wrangler config to a monitor slug. With the Sentry Cloudflare Vite plugin, add the integration to src/instrument.server.ts:

  // src/monitorSlugs.ts
  export const monitorSlugs: Record<string, string> = {
    '30 9 * * MON-FRI': 'daily-report',
  };
  
  // src/instrument.server.ts
  import * as Sentry from '@sentry/cloudflare';
  import { monitorSlugs } from './monitorSlugs';
  
  export default Sentry.defineCloudflareOptions(env => ({
    dsn: env.SENTRY_DSN,
    integrations: [Sentry.cronTriggersIntegration({ monitorSlug: cron => monitorSlugs[cron] })],
  }));
  
  // src/index.ts
  import { monitorSlugs } from './monitorSlugs';
  
  export default {
    async scheduled(controller, env) {
      switch (monitorSlugs[controller.cron]) {
        case 'daily-report':
          // Your daily report job
          break;
      }
    },
  };

  The monitorSlug function can also return monitor settings, for example { monitorSlug: 'daily-report', maxRuntime: 30 }, or undefined to send no check-ins for a trigger. Without monitorSlug, the SDK derives the slug from the cron expression. If you deploy with wrangler directly, pass the same integration to Sentry.withSentry.

• feat(node): Add neonIntegration for @​neondatabase/serverless (#​25164, #​25176)

  The new neonIntegration creates db spans for queries of the @neondatabase/serverless driver: for the WebSocket Client and Pool, and for the HTTP neon() function. This includes the neon-http and neon-serverless adapters of Drizzle. The integration is on by default when tracing is enabled.

• feat(node): Stop sending the process session once request sessions are tracked (#​24915)

  Node servers sent release health data two times: as request session aggregates, and as the process session of processSessionIntegration. An error in a request also marked the process session as errored, so the SDK counted the error two times. Now the SDK drops the process session when it tracks the first request session. Scripts, CLIs and workers that do not serve requests keep the process session, and so do servers with httpServerIntegration({ sessions: false }). This changes the release health numbers of Node servers, because they no longer send the errored or crashed update of the process session.

• feat(server-utils): Record decide calls as gen_ai.decide spans (#​25270, #​25272, #​25274, #​25281)

  Vercel AI experimental_decide calls, Mastra classifier evaluations, TypeSafe and LangChain Jev calls, and Workers AI calls to TypeSafe Jev and Cloudflare Clef models now create decide <model> spans with the op gen_ai.decide. Before, these spans had the op gen_ai.evaluate, which is now deprecated in the Sentry conventions. If you use gen_ai.evaluate in queries, alerts or dashboards, change it to gen_ai.decide.

• fix(browser): Apply urlQueryParams to more URLs (#​25262, #​25289)

  The dataCollection.urlQueryParams option now also filters the query parameters of these URLs:

  • the page URL in event.request.url
  • the browser.* and resource.* span names with traceLifecycle: 'static'
  • the LCP URL attributes lcp.url and browser.web_vital.lcp.url
  • the URLs in fetch, XHR and navigation breadcrumbs
  • the ui.element.url attribute of elementTimingIntegration

  Before this fix, these URLs could send sensitive query values, for example ?jwt=..., to Sentry.

• fix(nextjs): Apply top-level bundleSizeOptimizations to webpack and Turbopack builds (#​24818)

  The top-level bundleSizeOptimizations option now removes unused SDK code in webpack and in Turbopack builds. Before, the tree-shaking options had no effect on Turbopack. The webpack.treeshake option is deprecated. It still works, but when you set both options, bundleSizeOptimizations takes precedence.

Other Changes

• feat(nuxt): Detect the server API with @nuxt/kit 4.6 (#​25138)
• fix(bundler-plugins): Escape JSON in generated injection code (#​25265)
• fix(core): Don't mark http client spans as errors when the caller aborts (#​25260)
• fix(core): Record span client report outcomes when discarding transactions (#​25006)
• fix(core): Record client outcomes when beforeSend callbacks return invalid values (#​25049)
• fix(core): Record span outcomes for spans dropped when building a transaction (#​25048)
• fix(core): Report actual item count in client reports of envelope send failures (#​25185)
• fix(core): Strip internal custom span name from streamed spans (#​25212)
• fix(nextjs): Filter query parameters in request error context (#​25233)
• fix(node): Don't mark fetch spans as errors when the caller aborts (#​25129)
• fix(nuxt): Delete public source maps before Nitro lists its public assets (#​25267)
• fix(nuxt): Keep @sentry/server-runtime-injection external on Nitro v3 (#​24901)
• fix(nuxt): Remove @​opentelemetry/resources dev alias (#​25216)
• fix(profiling-node): Stop the trace lifecycle profiler when spans are unsampled (#​25210)
• fix(react-router): Respect custom default integrations (#​25259)
• fix(remix): Respect custom default integrations (#​25258)
• fix(server-utils): avoid quadratic SQL summary regex backtracking (#​25255)
• fix(server-utils): End Express layer spans when the client aborts (#​25209)
• fix(server-utils): Record amqplib consumer info before the first delivery and instrument the callback API (#​25047)
• fix(server-utils): Stop treating previous_response_id as the OpenAI conversation id (#​25269)
• fix(sveltekit): Read load event pathname untracked (#​25235)
• fix(sveltekit): Stop adapter-node 6 output dir probe from deleting the build (#​25193)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​25230)
• chore: Add external contributor to CHANGELOG.md (#​25271)
• chore(deps-dev): Bump oxlint-tsgolint from 7.0.2001 to 7.0.2003 (#​25237)
• chore(deps-dev): Bump rimraf from 5.0.10 to 6.1.3 (#​25241)
• chore(deps): Bump @sentry/conventions to 0.27.0 (#​25264)
• chore(deps): Bump next from 16.2.11 to 16.3.8 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#​25179)
• chore(deps): Bump next from 16.2.11 to 16.3.8 in /dev-packages/e2e-tests/test-applications/nextjs-16-tunnel (#​25190)
• chore(size-limit): weekly auto-bump (#​25213)
• ci: Install Playwright in the background during E2E app builds (#​25207)
• ci: Run lint steps in parallel (#​25187)
• ci(bun): Test the oldest supported Bun version and the newest 1.4 (#​25203)
• docs: Scope pre-PR tests to affected suites (#​25198)
• feat(deps): Bump @​aws-sdk/client-kinesis from 3.1068.0 to 3.1146.0 (#​25240)
• feat(deps): Bump handlebars from 4.7.9 to 4.7.10 (#​25206)
• feat(deps): Bump pino from 9.10.0 to 10.4.0 (#​25238)
• feat(deps): Bump reflect-metadata from 0.2.1 to 0.2.2 (#​25239)
• ref(core): Simplify transport item loss recording (#​25224)
• ref(server-utils): Export the pg query span helpers (#​25163)
• ref(server-utils): Share Orchestrion channel context (#​25208)
• test(browser): migrate trace lifecycle and span API tests to streaming (#​24881)
• test(browser): port browser tracing suites to span streaming (#​24888)
• test(browser): port requests and web vitals to span streaming (#​24886)
• test(browser): Register the LCP handlers in the bundle of the SDK (#​25263)
• test(bun): Run the Node suites that need Bun 1.4 on the Bun 1.4 job (#​25204)
• test(cloudflare): Add LangChain TypeSafeClassifier integration test (#​25234)
• test(core): Fix flaky span end timestamp test (#​25211)
• test(deno): Type-check Deno unit tests (#​25227)
• test(nextjs): Add vinext e2e tests (#​25001)
• test(node-integration): Replace conditionalTest with a supports helper (#​25202)
• test(node-integration): Stop exporting NODE_VERSION and RUNTIME from the test utils (#​25292)
• test(node): Add integration tests for the Neon serverless driver (#​25177)
• test(node): Port baggage and metadata tests to span streaming (#​25220)
• test(node): Port basic and nested startSpan tests to streaming (#​25214)
• test(node): Port fetch request suites to span streaming (#​25189)
• test(node): Port HTTP options and hooks to span streaming (#​25195)
• test(node): Port HTTP propagation and transport suites to streaming (#​25197)
• test(node): Port HTTP request suites to span streaming (#​25191)
• test(node): Port incoming HTTP behavior to span streaming (#​25194)
• test(node): Port MongoDB integration tests to span streaming (#​25150)
• test(node): Port Mongoose integration tests to span streaming (#​25151)
• test(node): Port outgoing HTTP client spans to streaming (#​25192)
• test(node): Port parallel span and naming tests to streaming (#​25217)
• test(node): Port Postgres integration tests to span streaming (#​25140)
• test(node): Port Prisma integration tests to span streaming (#​25152)
• test(node): Port Redis integration tests to span streaming (#​25153)
• test(node): Port span linking and raw OTel tests to streaming (#​25219)
• test(node): Port trace context tests to span streaming (#​25218)
• test(node): Run sampling propagation tests with default streaming (#​25221)
• test(node): Use default streaming in scope and span suites (#​25222)
• test(nuxt): Test imports from nuxt/server in the nuxt-5 E2E app (#​25232)

Work in this release was contributed by @​Philip-Nwabuwa and @​4ktLuffy. Thank you for your contributions!

Bundle size 📦

Path	Size
@​sentry/browser	29.13 KB
@​sentry/browser - with treeshaking flags	27.3 KB
@​sentry/browser - with treeshaking flags tracing without tracing	27.22 KB
@​sentry/browser (incl. Tracing)	50.8 KB
@​sentry/browser (incl. Tracing + Span Streaming)	50.8 KB
@​sentry/browser (incl. Tracing, Profiling)	53.68 KB
@​sentry/browser (incl. Tracing, Replay)	89.6 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	78.73 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	94.21 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	106.87 KB
@​sentry/browser (incl. Feedback)	46.24 KB
@​sentry/browser (incl. sendFeedback)	34.07 KB
@​sentry/browser (incl. FeedbackAsync)	39.07 KB
@​sentry/browser (incl. Metrics)	30.13 KB
@​sentry/browser (incl. Logs)	30.4 KB
@​sentry/browser (incl. Metrics & Logs)	31.03 KB
@​sentry/react	30.9 KB
@​sentry/react (incl. Tracing)	53.07 KB
@​sentry/vue	37.09 KB
@​sentry/vue (incl. Tracing)	53.66 KB
@​sentry/svelte	29.16 KB
@​sentry/remix (Remix 3 client bundle)	55.68 KB
CDN Bundle	30.82 KB
CDN Bundle (incl. Tracing)	51.29 KB
CDN Bundle (incl. Logs, Metrics)	32.98 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	53.19 KB
CDN Bundle (incl. Replay, Logs, Metrics)	72.95 KB
CDN Bundle (incl. Tracing, Replay)	88.08 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	89.95 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	94.08 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	95.98 KB
CDN Bundle - uncompressed	90.8 KB
CDN Bundle (incl. Tracing) - uncompressed	152.18 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	97.19 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	158 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	224.18 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	269.53 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	275.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	282.91 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	288.71 KB
@​sentry/nextjs (client)	55.42 KB
@​sentry/sveltekit (client)	51.18 KB
@​sentry/core/server	40.03 KB
@​sentry/core/browser	13.49 KB
@​sentry/node	148.39 KB
@​sentry/node/import (ESM hook with diagnostics-channel injection)	81.82 KB
@​sentry/node - without tracing	92.32 KB
@​sentry/node - without channel injection	127.08 KB
@​sentry/aws-serverless	100.28 KB
[@​sentry/cloudf

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
statsify	Ignored	Preview	Oct 25, 2026 10:42pm UTC