fix(deps): update dependency @sentry/browser to v10

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/browser (source)	9.46.0 -> 10.5.0

---

Release Notes

getsentry/sentry-javascript (@​sentry/browser)

v10.5.0

Compare Source

• feat(core): better cause data extraction (#​17375)
• feat(deps): Bump @​sentry/cli from 2.50.2 to 2.51.1 (#​17382)
• feat(deps): Bump @​sentry/rollup-plugin and @​sentry/vite-plugin from 4.0.2 to 4.1.0 (#​17383)
• feat(deps): Bump @​sentry/webpack-plugin from 4.0.2 to 4.1.0 (#​17381)
• feat(node): Capture SystemError context and remove paths from message (#​17331)
• fix(nextjs): Inject Next.js version for dev symbolication (#​17379)
• fix(mcp-server): Add defensive patches for Transport edge cases (#​17291)

Internal Changes

• chore(repo): Adjust "Publishing a Release" document to include internal changes section in changelog (#​17374)
• test(aws): Run E2E tests with AWS SAM (#​17367)
• test(node): Add tests for full http.server span attribute coverage (#​17373)

Work in this release was contributed by @​ha1fstack. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	23.59 KB
@​sentry/browser - with treeshaking flags	22.2 KB
@​sentry/browser (incl. Tracing)	38.94 KB
@​sentry/browser (incl. Tracing, Replay)	76.16 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	66.24 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	80.75 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	92.57 KB
@​sentry/browser (incl. Feedback)	39.87 KB
@​sentry/browser (incl. sendFeedback)	28.13 KB
@​sentry/browser (incl. FeedbackAsync)	32.92 KB
@​sentry/react	25.27 KB
@​sentry/react (incl. Tracing)	40.88 KB
@​sentry/vue	27.97 KB
@​sentry/vue (incl. Tracing)	40.72 KB
@​sentry/svelte	23.62 KB
CDN Bundle	25.06 KB
CDN Bundle (incl. Tracing)	38.82 KB
CDN Bundle (incl. Tracing, Replay)	74.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	79.36 KB
CDN Bundle - uncompressed	73.2 KB
CDN Bundle (incl. Tracing) - uncompressed	114.83 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	226.44 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.75 KB
@​sentry/nextjs (client)	42.86 KB
@​sentry/sveltekit (client)	39.38 KB
@​sentry/node-core	46.86 KB
@​sentry/node	143.58 KB
@​sentry/node - without tracing	90.08 KB
@​sentry/aws-serverless	101.24 KB

v10.4.0

Compare Source

Important Changes

• fix(browser): Ensure IP address is only inferred by Relay if sendDefaultPii is true

This release includes a fix for a behaviour change
that was originally introduced with v9 of the SDK: User IP Addresses should only be added to Sentry events automatically,
if sendDefaultPii was set to true.

However, the change in v9 required further internal adjustment, which should have been included in v10 of the SDK.
Unfortunately, the change did not make it into the initial v10 version but is now applied with 10.4.0.
There is no API breakage involved and hence it is safe to update.
However, after updating the SDK, events (errors, traces, replays, etc.) sent from the browser, will only include
user IP addresses, if you set sendDefaultPii: true in your Sentry.init options.

We apologize for any inconvenience caused!

• feat(node): Add ignoreStaticAssets (#​17370)

This release adds a new option to httpIntegration to ignore requests for static assets (e.g. favicon.xml or robots.txt). The option defaults to true, meaning that going forward, such requests will not be traced by default. You can still enable tracing for these requests by setting the option to false:

Sentry.init({
  integrations: [
    Sentry.httpIntegration({
      // defaults to true, set to false to enable traces for static assets
      ignoreStaticAssets: false,
    }),
  ],
});

Other Changes

• fix(nuxt): Do not drop parametrized routes (#​17357)

Internal Changes

• ref(node): Split up incoming & outgoing http handling (#​17358)
• test(node): Enable additionalDependencies in integration runner (#​17361)

Bundle size 📦

Path	Size
@​sentry/browser	23.59 KB
@​sentry/browser - with treeshaking flags	22.2 KB
@​sentry/browser (incl. Tracing)	38.94 KB
@​sentry/browser (incl. Tracing, Replay)	76.16 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	66.24 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	80.75 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	92.57 KB
@​sentry/browser (incl. Feedback)	39.87 KB
@​sentry/browser (incl. sendFeedback)	28.13 KB
@​sentry/browser (incl. FeedbackAsync)	32.92 KB
@​sentry/react	25.27 KB
@​sentry/react (incl. Tracing)	40.88 KB
@​sentry/vue	27.97 KB
@​sentry/vue (incl. Tracing)	40.72 KB
@​sentry/svelte	23.62 KB
CDN Bundle	25.06 KB
CDN Bundle (incl. Tracing)	38.82 KB
CDN Bundle (incl. Tracing, Replay)	74.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	79.36 KB
CDN Bundle - uncompressed	73.2 KB
CDN Bundle (incl. Tracing) - uncompressed	114.83 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	226.44 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.75 KB
@​sentry/nextjs (client)	42.86 KB
@​sentry/sveltekit (client)	39.38 KB
@​sentry/node-core	46.69 KB
@​sentry/node	143.39 KB
@​sentry/node - without tracing	89.89 KB
@​sentry/aws-serverless	101.05 KB

v10.3.0

Compare Source

• feat(core): MCP Server - Capture prompt results from prompt function calls (#​17284)
• feat(bun): Export skipOpenTelemetrySetup option (#​17349)
• feat(sveltekit): Streamline build logs (#​17306)
• fix(browser): Handle data urls in errors caught by globalHandlersIntegration (#​17216)
• fix(browser): Improve navigation vs. redirect detection (#​17275)
• fix(react-router): Ensure source map upload fails silently if Sentry CLI fails (#​17081)
• fix(react): Add support for React Router sub-routes from handle (#​17277)

v10.2.0

Compare Source

Important Changes

• feat(core): Add ignoreSpans option (#​17078)

This release adds a new top-level Sentry.init option, ignoreSpans, that can be used as follows:

Sentry.init({
  ignoreSpans: [
    'partial match', // string matching on the span name
    /regex/, // regex matching on the span name
    {
      name: 'span name',
      op: /http.client/,
    },
  ],
});

Spans matching the filter criteria will not be recorded. Potential child spans of filtered spans will be re-parented, if possible.

• feat(cloudflare,vercel-edge): Add support for OpenAI instrumentation (#​17338)

Adds support for OpenAI manual instrumentation in @sentry/cloudflare and @sentry/vercel-edge.

To instrument the OpenAI client, wrap it with Sentry.instrumentOpenAiClient and set recording settings.

import * as Sentry from '@​sentry/cloudflare';
import OpenAI from 'openai';

const openai = new OpenAI();
const client = Sentry.instrumentOpenAiClient(openai, { recordInputs: true, recordOutputs: true });

// use the wrapped client

• ref(aws): Remove manual span creation (#​17310)

The startTrace option is deprecated and will be removed in a future major version. If you want to disable tracing, set SENTRY_TRACES_SAMPLE_RATE to 0.0. instead. As of today, the flag does not affect traces anymore.

Other Changes

• feat(astro): Streamline build logs (#​17301)
• feat(browser): Handles data URIs in chrome stack frames (#​17292)
• feat(core): Accumulate tokens for gen_ai.invoke_agent spans from child LLM calls (#​17281)
• feat(deps): Bump @​prisma/instrumentation from 6.12.0 to 6.13.0 (#​17315)
• feat(deps): Bump @​sentry/cli from 2.50.0 to 2.50.2 (#​17316)
• feat(deps): Bump @​sentry/rollup-plugin from 4.0.0 to 4.0.2 (#​17317)
• feat(deps): Bump @​sentry/webpack-plugin from 4.0.0 to 4.0.2 (#​17314)
• feat(nuxt): Do not inject trace meta-tags on cached HTML pages (#​17305)
• feat(nuxt): Streamline build logs (#​17308)
• feat(react-router): Add support for Hydrogen with RR7 (#​17145)
• feat(react-router): Streamline build logs (#​17303)
• feat(solidstart): Streamline build logs (#​17304)
• fix(nestjs): Add missing sentry.origin span attribute to SentryTraced decorator (#​17318)
• fix(node): Assign default export of openai to the instrumented fn (#​17320)
• fix(replay): Call sendBufferedReplayOrFlush when opening/sending feedback (#​17236)

v10.1.0

Compare Source

• feat(nuxt): Align build-time options to follow bundler plugins structure (#​17255)
• fix(browser-utils): Ensure web vital client hooks unsubscribe correctly (#​17272)
• fix(browser): Ensure request from diagnoseSdkConnectivity doesn't create span (#​17280)

v10.0.0

Compare Source

Version 10.0.0 marks a release of the Sentry JavaScript SDKs that contains breaking changes. The goal of this release is to primarily upgrade the underlying OpenTelemetry dependencies to v2 with minimal breaking changes.

How To Upgrade

Please carefully read through the migration guide in the Sentry docs on how to upgrade from version 9 to version 10. Make sure to select your specific platform/framework in the top left corner: https://docs.sentry.io/platforms/javascript/migration/v9-to-v10/

A comprehensive migration guide outlining all changes can be found within the Sentry JavaScript SDK Repository: https://github.com/getsentry/sentry-javascript/blob/develop/MIGRATION.md

Breaking Changes

• feat!: Bump to OpenTelemetry v2 (#​16872)
• feat(browser)!: Remove FID web vital collection (#​17076)
• feat(core)!: Remove BaseClient (#​17071)
• feat(core)!: Remove enableLogs and beforeSendLog experimental options (#​17063)
• feat(core)!: Remove hasTracingEnabled (#​17072)
• feat(core)!: Remove deprecated logger (#​17061)
• feat(replay)!: Promote _experiments.autoFlushOnFeedback option as default (#​17220)
• chore(deps)!: Bump bundler plugins to v4 (#​17089)

Other Changes

• feat(astro): Implement Request Route Parametrization for Astro 5 (#​17105)
• feat(astro): Parametrize routes on client-side (#​17133)
• feat(aws): Add SentryNodeServerlessSDKv10 v10 AWS Lambda Layer (#​17069)
• feat(aws): Create unified lambda layer for ESM and CJS (#​17012)
• feat(aws): Detect SDK source for AWS Lambda layer (#​17128)
• feat(core): Add missing openai tool calls attributes (#​17226)
• feat(core): Add shared flushIfServerless function (#​17177)
• feat(core): Implement strictTraceContinuation (#​16313)
• feat(core): MCP server instrumentation without breaking Miniflare (#​16817)
• feat(deps): bump @​prisma/instrumentation from 6.11.1 to 6.12.0 (#​17117)
• feat(meta): Unify detection of serverless environments and add Cloud Run (#​17168)
• feat(nestjs): Switch to OTel core instrumentation (#​17068)
• feat(node-native): Upgrade @sentry-internal/node-native-stacktrace to 0.2.2 (#​17207)
• feat(node): Add shouldHandleError option to fastifyIntegration (#​16845)
• feat(node): Add firebase integration (#​16719)
• feat(node): Instrument stream responses for openai (#​17110)
• feat(react-router): Add createSentryHandleError (#​17235)
• feat(react-router): Automatically flush on serverless for loaders/actions (#​17234)
• feat(react-router): Automatically flush on Vercel for request handlers (#​17232)
• fix(astro): Construct parametrized route during runtime (#​17190)
• fix(aws): Add layer build output to nx cache (#​17148)
• fix(aws): Fix path to packages directory (#​17112)
• fix(aws): Resolve all Sentry packages to local versions in layer build (#​17106)
• fix(aws): Use file link in dependency version (#​17111)
• fix(cloudflare): Allow non uuid workflow instance IDs (#​17121)
• fix(cloudflare): Avoid turning DurableObject sync methods into async (#​17184)
• fix(core): Fix OpenAI SDK private field access by binding non-instrumented fns (#​17163)
• fix(core): Fix operation name for openai responses API (#​17206)
• fix(core): Update ai.response.object to gen_ai.response.object (#​17153)
• fix(nextjs): Flush in route handlers (#​17223)
• fix(nextjs): Handle async params in url extraction (#​17162)
• fix(nextjs): Update stackframe calls for next v15.5 (#​17156)
• fix(node): Add mechanism to fastifyIntegration error handler (#​17208)
• fix(node): Ensure tool errors for vercelAiIntegration have correct trace connected (#​17132)
• fix(node): Fix exports for openai instrumentation (#​17238)
• fix(node): Handle stack traces with data URI filenames (#​17218)
• fix(react): Memoize wrapped component to prevent rerenders (#​17230)
• fix(remix): Ensure source maps upload fails silently if Sentry CLI fails (#​17082)
• fix(replay): Fix re-sampled sessions after a click (#​17008)
• fix(svelte): Do not insert preprocess code in script module in Svelte 5 (#​17114)
• fix(sveltekit): Align error status filtering and mechanism in handleErrorWithSentry (#​17157)

Work in this release was contributed by @​richardjelinek-fastest. Thank you for your contribution!

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​sentry/​browser@​9.46.0 ⏵ 10.5.0	+1		+1	+1

View full report