Sentry JavaScript

Important Changes

• feat(deno): Redis diagnostics channel based integration for Deno (#21087)

  Adds Redis integration support for Deno, covering both redis and ioredis clients.

Other Changes

• feat(cloudflare): Only capture workflow step error on final retry attempt (#21025)
• feat(hono): Emit warning if @sentry/node was imported instead of @sentry/hono/node (#21240)
• feat(node): Use ioredis tracing channels (#21187)
• fix(browser): Correctly parse sampleRate when consistentTraceSampling is enabled (#21281)
• fix(cloudflare): Fix instrumentDurableObjectWithSentry breaking Cloudflare Agents (#21101)
• fix(cloudflare): Wait for span links to be set (#21167)
• fix(core): Use WeakRef for Span-Scope circular references (#21242)
• fix(node): Vendor InstrumentationNodeModuleFile to fix Bun --bytecode crash (#21262)
• fix(profiling-node): Ensure node version support warning includes latest 26 (#21229)

• chore: Ignore scheduled_tasks.lock (#21252)
• chore: Promote lint warnings to errors (#21213)
• chore(docs): Document how to support a new node version (#21228)
• chore(size-limit): Weekly auto-bump (#21243)
• chore(skills): Add linear-project-status skill (#21214)
• chore(skills): Add linear-project-update skill (#21233)
• chore(skills): Improve triage-issue skill (#21257)
• chore(skills): Update linear-project-status skill with more details & context (#21234)
• feat(deps): Bump axios from 1.15.0 to 1.16.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#21263)
• feat(server-utils): Initial scaffolding (#21200)
• ref(cloudflare): Move D1 instrumentation (#21266)
• ref(node): Refactor usage of hrTime utilities from @opentelemetry/core (#21191)
• ref(node): Stop mutating OTel RPC metadata to set http.route (#21193)
• ref(opentelemetry): Vendor minimal TraceState implementation (#21192)
• test(browser): Add unit test for http client header collection behavior (#21273)
• test(browser): Move browser integration tests to dataCollection (#21282)
• test(cloudflare): Remove vitest in CF e2e tests (#21259)

Bundle size 📦

Important Changes

• feat(hono): Promote @sentry/hono to stable and deprecate honoIntegration (#21208)

  The @sentry/hono SDK is now stable. See the Sentry Hono SDK docs to get started.

• docs(tanstackstart-react): Promote SDK status to beta (#21175)

  This release promotes the @sentry/tanstackstart-react SDK to beta. For details on how to use it, check out the Sentry TanStack Start SDK docs. Please reach out on GitHub if you have any feedback or concerns.

• feat(hono): Add shouldHandleError option to sentry() middleware (#21205)

  The sentry() middleware now accepts a shouldHandleError callback to control which errors are captured and sent to Sentry. By default, 3xx/4xx HTTP errors are ignored and 5xx errors and plain Error objects are captured. Return true from the callback to capture an error, false to suppress it.

  app.use(
    sentry(app, {
      dsn: '__DSN__',
      shouldHandleError(error) {
        const status = (error as { status?: number })?.status;
        // Capture 401/403 in addition to the default 5xx errors
        return status === 401 || status === 403 || typeof status !== 'number' || status >= 500;
      },
    }),
  );

• test(tanstackstart-react): Move initialization to client entry point (#21161)

  Change the recommended setup for the SDK to do Sentry.init() in the client entry file to capture telemetry that is emitted ahead of page hydration.

• feat(tanstackstart-react): Add distributed tracing (#21144)

  Server and client traces are now automatically connected, allowing you to see the full request lifecycle from server-side rendering through client-side hydration in a single trace.

• feat(tanstackstart-react): Add server-side route parametrization (#21147)

  Server transaction names are now parametrized automatically (e.g., GET /users/123 becomes GET /users/$userId), improving transaction grouping in Sentry.

• feat(tanstackstart-react): Show readable server function names in traces (#21190)

  Server function spans now show human-readable names (e.g., GET /_serverFn/greet instead of GET /_serverFn/a10e70b3...). The tanstackstart.function.hash.sha256 span attribute has been renamed to tanstackstart.function.id.

Other Changes

• feat(core): Migrate request data to dataCollection (#21071)
• feat(hono): Add warning in Bun for double init (#21195)
• feat(hono): Instrument main-app inline middleware spans (#20999)
• feat(metrics): Migrate metrics to use dataCollection instead of sendDefaultPii (#21078)
• feat(tanstackstart-react): Enable component tracking (#21149)
• feat(tanstackstart-react): Filter noisy dev transactions (#21145)
• fix(cloudflare): Use original waitUntil to not create a deadlock (#21197)
• fix(elysia): Widen accepted Elysia app type to support Elysia options (#21164)
• fix(tanstackstart-react): Add server-side replayIntegration no-op stub (#21148)

• chore(changelog): clarify array attributes impact on beforeSend* callbacks (#21186)
• chore(ci): Update bugbot instructions (#21168)
• chore(sentry-cli): Upgrade to 2.58.6 (#21165)
• chore(size-limit): weekly auto-bump (#21123)
• feat(deps-dev): Bump @sveltejs/kit from 2.52.2 to 2.60.1 in /dev-packages/e2e-tests/test-applications/sveltekit-cloudflare-pages (#21162)
• fix(e2e): Fix astro-6 e2e test build by relaxing astro version range (#21211)
• meta(agents): Update AI commit attribution guidance (#21166)
• ref(browser): Extract browser-specific normalize code out of core (#21172)
• ref(node): Stop custom-handling normalization of Domain/DomainEmitter (#21182)
• ref(node): Stop using registerSpanErrorInstrumentation() on server (#21169)
• test(nitro-3): Update e2e tests for h3 route handler tracing (#21152)
• test(nuxt): Fix flaky test and add note about hydration timing to skill (#21054)

Bundle size 📦

Important Changes

• feat(browser): Add fetchStreamPerformanceIntegration for streamed response tracking (#20778)

  A new integration that tracks the performance of streamed fetch responses. Use this to measure time-to-first-byte and streaming duration for APIs that return chunked/streamed data. This replaces the now deprecated trackFetchStreamPerformance option.

• feat(core): Add dataCollection client option (#20965)

  Adds a new dataCollection client option for controlling what data the SDK collects and sends to Sentry. This provides a centralized way to configure data collection behavior across different SDK features. In the future, this option will be used for fine-granular data filtering, while the simple sendDefaultPii boolean option will be deprecated and removed in a future release.

• feat(core): Support array attributes for spans, logs, and metrics (#20427)

  Arrays of primitive values (string, number, boolean) are now accepted as attribute values. Arrays containing non-primitive elements will be dropped and won't show up in Sentry. Note that array attributes on logs and metrics were previously stringified in certain cases and will now be sent as arrays instead.

• feat(hono): Add hono.request spans for internal .request() calls (#20843)

  The Hono SDK now creates spans for internal .request() calls, providing better visibility into request handling within Hono applications.

Other Changes

• feat(core): Add data collection filtering utilities (#20989)
• feat(core): Convert scope contexts to segment span attributes in span streaming (#20828)
• feat(core): Emit sentry.sdk.integrations on streamed segment spans (#20428)
• feat(core): HTTP server diagnostics channel utility (#20779)
• feat(core): Migrate span streaming envelope to dataCollection (#21080)
• feat(core): Migrate Supabase integration to dataCollection (#21085)
• feat(core): Migrate trpc to dataCollection (#21072)
• feat(deno): Instrument node:http on versions that support it (#21009)
• feat(ember): Extract ember-specific logic into custom browserTracingIntegration (#20702)
• feat(logs): Migrate log envelope user inference to dataCollection (#21073)
• feat(nuxt): Allow custom configuration files paths in Nuxt module (#20650)
• feat(replay): Update example worker script (#20899)
• feat(serverless): Add server-only context span attributes via processSegmentSpan hooks (#20842)
• fix(astro): Avoid injecting meta tags into <head> inside attribute values (#21089)
• fix(astro): Use explicit ResponseInit when injecting meta tags in response (#21021)
• fix(browser): Add a synthetic stack trace to DOMException with empty stack traces if attachStacktrace is true (#19988)
• fix(browser): Fix internal frame detection in minified bundles (#20802)
• fix(cloudflare): Avoid repeated flush lock wrapping (#21156)
• fix(cloudflare): Skip SDK initialization for OPTIONS/HEAD requests (#21090)
• fix(cloudflare, vercel-edge): Disable timer-based flush for serverless runtimes (#20889)
• fix(core): Sanitize lone surrogates in log body and attributes (#20245)
• fix(deno): Support Deno.serve instrumentation on Deno 2.8 (#21155)
• fix(hono): Preserve middleware handler metadata (#20954)
• fix(hono): Use generic Hono type in Bun/Node (#21060)
• fix(nextjs): Widen project option type to string | string[] (#21067)
• fix(node): Improve http.client double-wrap message (#20705)
• fix(node): Preserve CallbackManager handlers in LangChain instrumentation (#20849)
• fix(react-router): Do not re-write origin on router state changes (#21056)
• fix(replay): Set sentry.replay_id attribute on streamed spans (#20897)
• fix(replay): Set replay_id on DSC after buffer-to-session conversion (#20686)
• fix(solidstart): Use nitro module for build hooks to preserve preset hooks (#20861)
• ref(core): Rename types-hoist to types (#20979)

• chore: Add compatibility function for sendDefaultPii (#20967)
• chore: Add size-limit for core/server, core/browser (#20990)
• chore: Bump rrweb deps to v2.43.0 (#20844)
• chore(build): Replace sucrase with esbuild (#20865)
• chore(deps): Bump nitropack from 2.13.1 to 2.13.4 (#20713)
• chore(deps): Bump ws from 8.20.0 to 8.20.1 (#20998)
• chore(deps): Remove redundant yarn resolutions (#20877)
• feat(deps): Bump @tootallnate/once from 1.1.2 to 2.0.1 (#21108)
• feat(deps): Bump devalue from 4.3.3 to 5.8.1 (#20893)
• feat(deps): Bump protobufjs from 7.5.5 to 7.5.9 (#20846)
• ref(aws-serverless): Vendor aws-sdk instrumentation (#20988)
• ref(http): Use shared snippets for filtering headers and cookies (#20970)
• ref(nestjs): Vendor nestjs-core instrumentation (#20996)
• ref(node): Remove unused @opentelemetry/instrumentation-http dependency (#21113)
• ref(node): Vendor @fastify/otel (#21099)
• ref(node): Vendor @opentelemetry/instrumentation-pg (#21102)
• ref(node): Vendor @opentelemetry/sql-common (#21140)
• ref(node): Vendor @prisma/instrumentation (#21098)
• ref(node): Vendor amqplib instrumentation (#21003)
• ref(node): Vendor connect instrumentation (#20955)
• ref(node): Vendor dataloader instrumentation (#20950)
• ref(node): Vendor fs instrumentation (#20964)
• ref(node): Vendor generic-pool instrumentation (#20949)
• ref(node): Vendor graphql instrumentation (#21096)
• ref(node): Vendor hapi instrumentation (#21057)
• ref(node): Vendor kafkajs instrumentation (#21005)
• ref(node): Vendor knex instrumentation (#20963)
• ref(node): Vendor koa instrumentation (#20956)
• ref(node): Vendor lru-memoizer instrumentation (#20948)
• ref(node): Vendor minimal types for dataloader and generic-pool instrumentations (#21013)
• ref(node): Vendor mongodb instrumentation (#20966)
• ref(node): Vendor mongoose instrumentation (#21058)
• ref(node): Vendor mysql instrumentation (#21016)
• ref(node): Vendor mysql2 instrumentation (#21031)
• ref(node): Vendor tedious instrumentation (#21010)

Work in this release was contributed by @abcang, @ahmadio, @delorge, @mdnanocom, and @victorgarciaesgi. Thank you for your contributions!

Bundle size 📦

• fix(core): Don't gate user data for streamed spans at scope read time (#20827)
• fix(core): Include subpath type shims in published package (#20835)
• ref(hono): Consolidate route patching and add clarification comments (#20829)

• chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15-intl (#20821)

Bundle size 📦

Important Changes

• feat(core): Add streamGenAiSpans options to stream gen_ai spans (#20785)

  Adds a new streamGenAiSpans option that controls how gen_ai spans are sent to Sentry. When set, the SDK extracts all gen_ai spans out of a transaction and sends them as v2 envelope items.

  Enable this option if gen_ai spans are being dropped because the transaction payload exceeds size limits.

  Sentry.init({
    dsn: 'https://examplePublicKey@o0.ingest.sentry.io/0',
    streamGenAiSpans: true,
  });

Other Changes

• feat(browser): Migrate browser profiling thread data to span attributes (#20800)
• feat(core): Add addConsoleInstrumentationFilter utility (#20790)
• feat(core): Add applicationKey to BuildTimeOptionsBase (#20789)
• feat(core): split exports by browser/server for bundle size (#20435)
• feat(nextjs): Add top-level applicationKey option (#20794)
• feat(node): Support Node 26 (#20710)
• feat(profiling-node): Bump @sentry-internal/node-cpu-profiler to 2.4.0 (#20720)
• fix(cloudflare): avoid flush lock self-wait (#20719)
• fix(hono): Capture transaction name on request for correct culprit (#20801)
• fix(mcp): retroactively wrap handlers registered before wrapMcpServerWithSentry (#20699)
• fix(node-core): Guard against undefined util.getSystemErrorMap (#20660)
• fix(replay): Capture aborted/errored fetch requests in replay network tab (#20722)

• chore: bump replay dependencies (#20746)
• chore: Typo intergation -> integration (#20799)
• chore(deps): Bump @babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.4 (#20773)
• chore(deps): Bump next from 15.5.15 to 15.5.18 in /dev-packages/e2e-tests/test-applications/nextjs-15 (#20818)
• chore(deps): Bump next from 16.2.4 to 16.2.6 in /dev-packages/e2e-tests/test-applications/nextjs-16-streaming (#20811)
• chore(deps): Bump rollup from 4.59.0 to 4.60.3 (#20716)
• ci: Ensure PR reminder workflow considers new sub teams (#20814)
• ci: Remove codecov reporting (#20803)
• feat(deps): Bump bundler plugins to 5.3.0 (#20820)
• feat(deps): Bump fast-uri from 3.0.6 to 3.1.2 (#20774)
• feat(deps): Bump hono from 4.12.16 to 4.12.18 (#20777)
• test(cloudflare-hono): fix 'occured' -> 'occurred' typo in error log (#20783)
• test(deps): Bump hono from 4.12.14 to 4.12.16 (#20712)
• test(deps): Bump hono from 4.12.14 to 4.12.18 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#20776)
• test(e2e): Pin astro version in astro-6 test app (#20709)

Work in this release was contributed by @dmmulroy and @SAY-5. Thank you for your contributions!

Bundle size 📦

Important Changes

• Beta release of the official Hono Sentry SDK

  This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the Sentry Hono SDK docs. Please reach out on GitHub if you have any feedback or concerns.

• feat(browser): Add ingest_settings to v2 log envelope payload (#20453)

  Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes

• docs(hono): Add new docs link and move to BETA release (#20666)
• feat(browser): Add ingest_settings to v2 metrics envelope payload (#20454)
• feat(browser): Migrate spotlight event processor to ignoreSpans (#20595)
• feat(cloudflare): Capture request body via httpServerIntegration (#20614)
• feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#20523)
• feat(cloudflare): Support tracing for queue producer (#20529)
• feat(core): Apply request data to segment spans in span streaming (#20654)
• feat(core): Migrate Vercel AI event processor to span streaming (#20608)
• feat(deno): Add processSegmentSpan to Deno context integration (#20613)
• feat(http): Portable node:http client instrumentation (#20393)
• feat(nitro): Add unstorage tracing channel instrumentation (#20615)
• feat(node-core): Add processSegmentSpan to node context integration (#20678)
• feat(node): Use diagnostics_channel for redis >= 5.12.0 (#20573)
• feat(node): Vendor ioredis, redis instrumentations (#20510)
• feat(replay): Reset replay id from DSC on session expiry/refresh (#20129)
• fix: Bump fast-xml-parser to fix vulnerability (#20644)
• fix: Bump vite versions to fix vulnerability (#20646)
• fix(core): Drain buffers in flush() when there is no transport (#20207)
• fix(core): Guard against undefined chained in copyProps (#20637)
• fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#20636)
• fix(deps): Bump transitive deps for medium security fixes (#20683)
• fix(hono): Do not capture 3xx and 4xx errors and add tests (#20640)
• fix(nextjs): Skip build modification when SRI is enabled (#20694)
• fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#20509)

• chore: Remove bundle-analyzer-scenarios dev packages (#20680)
• chore(deps): Bump @hono/node-server from 1.19.10 to 1.19.13 (#20117)
• chore(deps): Bump @nestjs packages to fix path-to-regexp ReDoS (#20642)
• chore(deps): Bump axios from 1.15.0 to 1.15.2 (#20665)
• chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#20695)
• chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#20696)
• chore(deps): Bump vulnerable testem version (#20634)
• ci(deps): Bump actions/checkout from 4 to 6 (#20620)
• ci(deps): Bump actions/create-github-app-token from 2 to 3 (#20079)
• ci(deps): Bump denoland/setup-deno from 2.0.3 to 2.0.4 (#20080)
• ci(deps): Bump getsentry/craft from 2.24.1 to 2.26.2 (#20621)
• feat(deps): Bump @xmldom/xmldom from 0.8.12 to 0.8.13 (#20457)
• feat(deps): Bump follow-redirects from 1.15.11 to 1.16.0 (#20267)
• feat(deps): Bump hono from 4.12.12 to 4.12.14 (#20340)
• fix(tests): Use stable instrumentations api in rr tests (#20690)
• ref(tests): Rename streamed http.client span test folders (#20602)
• test(browser): Fix browserTracingIntegration unit test (#20604)
• test(browser): Fix flaky browser integration test for profiles (#20587)
• test(browser): Fix flaky loader test (#20596)
• test(browser): Fix flaky loader test (#20655)
• test(browser): Make browser profiling test less flaky (#20664)
• test(cloudflare): Add e2e test for MCPAgent with DurableObject instrumentation (#20601)
• test(cloudflare): Add integration tests for scheduled, D1, and workflow (#20609)
• test(cloudflare): Reduce flakiness for cloudflare with sub workers (#20632)
• test(cloudflare): Use Node v24 for Cloudflare e2e tests (#20628)
• test(deps): Bump Next.js in E2E test apps to fix Server Components DoS (#20633)
• test(e2e): Add node-express-streaming E2E test app (#20684)
• test(e2e): Add span streaming test app for Cloudflare Workers (#20681)
• test(e2e): Add span streaming test app for next 16 (#20648)
• test(e2e): Add span streaming test app for React Router 7 SPA (#20677)
• test(e2e): Remove remaining npmrc pointing to Verdaccio (#20611)
• test(nextjs): Fix flaky node runtime metrics E2E tests (#20624)
• test(node): Fix ANR test for flakiness (#20656)
• test(node): Fix flaky node cron test (#20661)
• test(node): Unflake mongodb test (#20662)
• test(react-router): Fix flaky E2E tests (#20630)
• test(test-utils): Add MemoryProfiler for heap snapshot testing via CDP (#20555)

Work in this release was contributed by @sbs44. Thank you for your contribution!

Bundle size 📦

Important Changes

• feat(cloudflare): Add trace propagation for RPC method calls (#20343)

  Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

  // Worker
  export default Sentry.withSentry(
    env => ({
      dsn: env.SENTRY_DSN,
      enableRpcTracePropagation: true,
    }),
    handler,
  );
  
  // Durable Object
  export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
    env => ({
      dsn: env.SENTRY_DSN,
      enableRpcTracePropagation: true,
    }),
    MyDurableObjectBase,
  );

• feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

  To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

  // instrument.mjs (or instrument.ts)
  import * as Sentry from '@sentry/hono/node';
  
  Sentry.init({
    dsn: '__DSN__',
    tracesSampleRate: 1.0,
  });

• feat(nitro): Add @sentry/nitro SDK (#19224)

  A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

• deps(minimatch): Upgrade patch version to use new brace-expansion peer-dep (#20198)
• docs: Add deprecation notices to bin scripts (#20570)
• feat(astro): Drop prerendered http.server filter via ignoreSpans (#20513)
• feat(aws-serverless): Validate extension tunnel DSN against SENTRY_DSN (#20528)
• feat(browser): Add ingest_settings to span v2 envelope payload (#20411)
• feat(browser): Add support for streamed spans in httpContextIntegration (#20464)
• feat(core): Backfill otel attributes on streamed spans (#20439)
• feat(core): clear up integrations on dispose (#20407)
• feat(core): Instrument langgraph createReactAgent (#20344)
• feat(core): Support attribute matching in ignoreSpans (#20512)
• feat(feedback): allow error messages to be customized (#20474)
• feat(hono): Support middleware spans defined in app groups (#20465)
• feat(nextjs): Filter unwanted segments when span streaming is enabled (#20384)
• feat(nextjs): Migrate edge event processors to span-first APIs (#20551)
• feat(nextjs): Migrate server event processors to span-first APIs (#20527)
• feat(nextjs): Set global attribute for turbopack usage (#20558)
• feat(nitro): Nitro SDK (#19224)
• feat(react-router): Clean up bogus * http.route attribute on segment spans (#20471)
• feat(react-router): Drop low-quality transactions via ignoreSpans (#20514)
• feat(sveltekit): Support span streaming in svelteKitSpansEnhancement integration (#20496)
• feat(tanstackstart-react): Add dynamic tunnel route helper and generator (#20264)
• fix: update prisma v7 spans descriptions (#20456)
• fix(core): Avoid parse-time SyntaxError on Safari <16.4 in postgresjs (#20498)
• fix(core): Ensure isSentryRequest handles subdomains properly (#20530)
• fix(core): Ensure ip address headers are stripped when lower case (#20484)
• fix(core): Filter more cookie names for PII (#20485)
• fix(core): Use symbol for normalization checks (#20486)
• fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers (#20554)
• fix(nextjs): Ensure we do not match tunnel endpoints too broadly (#20488)
• fix(opentelemetry): Add conditional browser export to avoid node deps (#20556)
• fix(replay): Avoid main-thread blocking in WorkerHandler under event bursts (#20548)
• fix(replay): Ensure maskAttributes works with maskAllText=false (#20491)
• fix(supabase): Consider sendDefaultPii for supabase integration (#20490)

• chore: Add size limit reports on PRs for Cloudflare (#20055)
• chore: Update CODEOWNERS (#20559)
• chore(build): Opt-out of nx analytics (#20487)
• chore(ci): Automatically bump size limit every week (#20531)
• chore(ci): Bump pnpm/action-setup to v5 and pin to commit SHA (#20462)
• chore(ci): Do not report flaky test issues if we cannot find a test name (#20589)
• chore(ci): Streamline CI setup to split bundle, layer, tarball generation (#20396)
• chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency (#20463)
• chore(e2e): Add vue and vue-router to nuxt-4 canary build step to fix rollup resolution (#20519)
• chore(e2e): Remove @tanstack/start-plugin-core override (#20518)
• chore(size-limit): weekly auto-bump (#20572)
• chore(skill): Add skill for writing unit and E2E tests (#20561)
• chore(test): Reduce unneeded idleTimeout test config (#20467)
• ci(size-bump): Fix path in size-limit auto-bump workflow (#20566)
• fix(e2e/tanstackstart-react): pin @tanstack/start-plugin-core to unblock CI (#20482)
• fix(tests): Remove nitro canary test job (#20473)
• ref(browser): Use safeSetSpanJSONAttributes in cultureContext integration (#20481)
• test(browser): Unflake some more tests (#20591)
• test(nextjs): Pin eslint-config-next package to major (#20552)
• test(node): Fix flaky ANR test (#20592)
• test(node): Fix flaky worker thread integration test (#20588)
• test(node): Unflake postgres tests (#20593)
• test(node): Update timeout for cron integration tests (#20586)
• test(supabase): Stop supabase before initializing (#20563)
• test(tanstack): Prefix test labels (#20569)

Bundle size 📦

• fix(v8/profiling-node): Restore install script to build binaries from source (#20517)
• fix(v8/publish): Ensure all packages are tagged with v8 on when publishing to NPM (#19974)

Important Changes

• feat(effect): Support v4 beta (#20394)

  The @sentry/effect integration now supports Effect v4 beta, enabling Sentry instrumentation for the latest Effect framework version. Read more in the Effect SDK readme.

• feat(hono): Add @sentry/hono/bun for Bun runtime (#20355)

  A new @sentry/hono/bun entry point adds first-class support for running Hono applications instrumented with Sentry on the Bun runtime. Read more in the Hono SDK readme.

• feat(replay): Add replayStart/replayEnd client lifecycle hooks (#20369)

  New replayStart and replayEnd client lifecycle hooks let you react to replay session start and end events in your application.

Other Changes

• feat(core): Emit no_parent_span client outcomes for discarded spans requiring a parent (#20350)
• feat(deps): Bump protobufjs from 7.5.4 to 7.5.5 (#20372)
• feat(hono): Add runtime packages as optional peer dependencies (#20423)
• feat(opentelemetry): Add tracingChannel utility for context propagation (#20358)
• fix(browser): Enrich graphqlClient spans for relative URLs (#20370)
• fix(browser): Filter implausible LCP values (#20338)
• fix(cloudflare): Use TransformStream to keep track of streams (#20452)
• fix(console): Re-patch console in AWS Lambda runtimes (#20337)
• fix(core): Correct GoogleGenAIIstrumentedMethod typo in type name
• fix(core): Handle stateless MCP wrapper transport correlation (#20293)
• fix(hono): Remove undefined from options type (#20419)
• fix(node): Guard against null httpVersion in outgoing request span attributes (#20430)
• fix(node-core): Pass rejection reason instead of Promise as originalException (#20366)

• chore: Ignore claude worktrees (#20440)
• chore: Prevent test from creating zombie process (#20392)
• chore: Update size-limit (#20412)
• chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#20458)
• chore(e2e-tests): Use tarball symlinks for E2E tests instead of verdaccio (#20386)
• chore(lint): Remove lint warnings (#20413)
• chore(test): Remove empty variant tests (#20443)
• chore(tests): Use verdaccio as node process instead of docker image (#20336)
• docs(readme): Update usage instructions for binary scripts (#20426)
• ref(node): Vendor undici instrumentation (#20190)
• test(aws-serverless): Ensure aws-serverless E2E tests run locally (#20441)
• test(aws-serverless): Split npm & layer tests (#20442)
• test(browser): Fix flaky sessions route-lifecycle test + upgrade axios (#20197)
• test(cloudflare): Use .makeRequestAndWaitForEnvelope to wait for envelopes (#20208)
• test(effect): Rename effect e2e tests to a versioned folder (#20390)
• test(hono): Add E2E test for Hono on Cloudflare, Node and Bun (#20406)
• test(hono): Add E2E tests for middleware spans (#20451)
• test(nextjs): Unskip blocked cf tests (#20356)
• test(node): Refactor integration tests for honoIntegration (#20397)
• test(node): Use docker-compose healthchecks for service readiness (#20429)
• test(node-core): Fix minute-boundary race in session-aggregate tests (#20437)
• test(nuxt): Fix flaky database error test (#20447)

Bundle size 📦

Important Changes

• feat(browser): Add View Hierarchy integration (#14981)

  A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

  import * as Sentry from '@sentry/browser';
  
  Sentry.init({
    dsn: '__DSN__',
    integrations: [Sentry.viewHierarchyIntegration()],
  });

• feat(cloudflare): Split alarms into multiple traces and link them (#19373)

  Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

• feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

  A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

• feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

  All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

• feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

  The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

• feat(core): Export a reusable function to add tracing headers (#20076)
• feat(core): Expose rewriteSources top level option (#20142)
• feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
• feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
• feat(node): Include global scope for eventLoopBlockIntegration (#20108)
• fix(core, node): Support loading Express options lazily (#20211)
• fix(core): Set conversation_id only on gen_ai spans (#20274)
• fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
• fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
• fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
• fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
• fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
• fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
• fix(replay): Use live click attributes in breadcrumbs (#20262)

• chore: Add PR review reminder workflow (#20175)
• chore: Fix lint warnings (#20250)
• chore(bugbot): Add rules to flag test-flake-provoking patterns (#20192)
• chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
• chore(ci): Bump dorny/paths-filter from v3.0.1 to v4.0.1 (#20251)
• chore(ci): Remove codecov steps from jobs that produce no coverage/JUnit data (#20244)
• chore(ci): Remove craft changelog preview (#20271)
• chore(ci): Remove node-overhead GitHub Action (#20246)
• chore(ci): Replace pr-labels-action with native GitHub expressions (#20252)
• chore(ci): Skip flaky issue creation for optional tests (#20288)
• chore(deps-dev): Bump @sveltejs/kit from 2.53.3 to 2.57.1 (#20216)
• chore(deps-dev): Bump vite from 7.2.0 to 7.3.2 in /dev-packages/e2e-tests/test-applications/tanstackstart-react (#20107)
• chore(deps): Bump axios from 1.13.5 to 1.15.0 (#20180)
• chore(deps): Bump axios from 1.13.5 to 1.15.0 in /dev-packages/e2e-tests/test-applications/nestjs-basic (#20179)
• chore(deps): Bump hono from 4.12.7 to 4.12.12 (#20118)
• chore(deps): Bump hono from 4.12.7 to 4.12.12 in /dev-packages/e2e-tests/test-applications/cloudflare-hono (#20119)
• chore(deps): Bump next from 16.1.7 to 16.2.3 in nextjs-16-cf-workers (#20289)
• chore(size-limit): Bump failing size limit scenario (#20186)
• ci: Add automatic flaky test detector (#18684)
• ci: Extract test names for flaky test issues (#20298)
• ci: Remove Docker container for Verdaccio package publishing (#20329)
• fix(ci): Prevent command injection in ci-metadata workflow (#19899)
• fix(e2e-tests): Remove flaky navigation breadcrumb assertions from parameterized-routes tests (#20202)
• fix(e2e): Add op check to waitForTransaction in React Router e2e tests (#20193)
• fix(node-integration-tests): Fix flaky kafkajs test race condition (#20189)
• ref(core): Add registry in Vercel ai integration (#20098)
• ref(core): Automatically disable truncation when span streaming is enabled in Anthropic AI integration (#20228)
• ref(core): Automatically disable truncation when span streaming is enabled in Google GenAI integration (#20229)
• ref(core): Automatically disable truncation when span streaming is enabled in LangChain integration (#20230)
• ref(core): Automatically disable truncation when span streaming is enabled in LangGraph integration (#20231)
• ref(core): Automatically disable truncation when span streaming is enabled in OpenAI integration (#20227)
• ref(core): Automatically disable truncation when span streaming is enabled in Vercel AI integration (#20232)
• ref(core): Merge embeddings operations constants (#20095)
• ref(core): Remove unused constants from vercel-ai-attributes.ts (#20096)
• ref(nextjs): Refactor findInjectionIndexAfterDirectives for better readability (#20310)
• ref(opentelemetry): Replace @opentelemetry/resources with inline getSentryResource() (#20327)
• test: Fix flaky ANR test by increasing blocking duration (#20239)
• test(bun): Add bun integration test folder (#20286)
• test(cloudflare): Skip flaky durableobject-spans test (#20282)
• test(openai): Use multi-message scenario in no-truncation test (#20194)
• test(react): Remove duplicated test mock (#20200)
• tests(ai): Fix streaming+truncation integration tests across AI integrations (#20326)

Bundle size 📦

Important Changes

• feat(aws-serverless): Ship Lambda extension in npm package for container image Lambdas (#20133)

  The Sentry Lambda extension is now included in the npm package, enabling container image-based Lambda functions to use it. Copy the extension files into your Docker image and set the tunnel option:

  RUN mkdir -p /opt/sentry-extension
  COPY node_modules/@sentry/aws-serverless/build/lambda-extension/sentry-extension /opt/extensions/sentry-extension
  COPY node_modules/@sentry/aws-serverless/build/lambda-extension/index.mjs /opt/sentry-extension/index.mjs
  RUN chmod +x /opt/extensions/sentry-extension /opt/sentry-extension/index.mjs

  Sentry.init({
    dsn: '__DSN__',
    tunnel: 'http://localhost:9000/envelope',
  });

  This works with any Sentry SDK (@sentry/aws-serverless, @sentry/sveltekit, @sentry/node, etc.).

• feat(cloudflare): Support basic WorkerEntrypoint (#19884)

  withSentry now supports instrumenting classes extending Cloudflare's WorkerEntrypoint. This instruments fetch, scheduled, queue, and tail handlers.

  import * as Sentry from '@sentry/cloudflare';
  import { WorkerEntrypoint } from 'cloudflare:workers';
  
  class MyWorker extends WorkerEntrypoint {
    async fetch(request: Request): Promise<Response> {
      return new Response('Hello World!');
    }
  }
  
  export default Sentry.withSentry(env => ({ dsn: env.SENTRY_DSN, tracesSampleRate: 1.0 }), MyWorker);

• ref(core): Unify .do* span ops to gen_ai.generate_content (#20074)

  All Vercel AI do* spans (ai.generateText.doGenerate, ai.streamText.doStream, ai.generateObject.doGenerate, ai.streamObject.doStream) now use a single unified span op gen_ai.generate_content instead of separate ops like gen_ai.generate_text, gen_ai.stream_text, gen_ai.generate_object, and gen_ai.stream_object.

• ref(core): Remove provider-specific AI span attributes in favor of gen_ai attributes in sentry conventions (#20011)

  The following provider-specific span attributes have been removed from the OpenAI and Anthropic AI integrations. Use the standardized gen_ai.* equivalents instead:

  Removed attribute	Replacement
  openai.response.id	gen_ai.response.id
  openai.response.model	gen_ai.response.model
  openai.usage.prompt_tokens	gen_ai.usage.input_tokens
  openai.usage.completion_tokens	gen_ai.usage.output_tokens
  openai.response.timestamp	(removed, no replacement)
  anthropic.response.timestamp	(removed, no replacement)

  If you reference these attributes in hooks (e.g. beforeSendTransaction), update them to the gen_ai.* equivalents.

• feat(core): Support embeddings in LangChain (#20017)

  Adds instrumentation for LangChain embeddings (embedQuery, embedDocuments), creating gen_ai.embeddings spans. In Node.js, embedding classes from @langchain/openai, @langchain/google-genai, @langchain/mistralai, and @langchain/google-vertexai are auto-instrumented. For other runtimes, use the new instrumentLangChainEmbeddings API:

  import * as Sentry from '@sentry/cloudflare';
  import { OpenAIEmbeddings } from '@langchain/openai';
  
  const embeddings = Sentry.instrumentLangChainEmbeddings(new OpenAIEmbeddings({ model: 'text-embedding-3-small' }));
  
  await embeddings.embedQuery('Hello world');

Other Changes

• feat(core): Support registerTool/registerResource/registerPrompt in MCP integration (#20071)
• feat(core, node): Portable Express integration (#19928)
• feat(deno): Add denoRuntimeMetricsIntegration (#20023)
• feat(deps): Bump bundler plugins to 5.2.0 (#20122)
• feat(deps): bump @hapi/content from 6.0.0 to 6.0.1 (#20102)
• feat(node, bun): Enforce minimum collection interval in runtime metrics integrations (#20068)
• feat(nuxt): Exclude tracing meta tags on cached pages in Nuxt 5 (#20168)
• feat(react-router): Export sentryOnError (#20120)
• fix(aws-serverless): Add timeout to _endSpan forceFlush to prevent Lambda hanging (#20064)
• fix(cloudflare): Ensure every request instruments functions (#20044)
• fix(core): Only attach flags context to error events (#20116)
• fix(core): Replace regex with string check in stack parser to prevent main thread blocking (#20089)
• fix(core): set span.status to error when MCP tool returns JSON-RPC error response (#20082)
• fix(gatsby): Fix errorHandler signature to match bundler-plugin-core API (#20048)
• ref(core): Do not emit spans for chats.create in google-genai (#19990)

• chore: Remove unused tsconfig-template folder (#20067)
• chore: Update validate-pr workflow (#20072)
• chore(deps-dev): Bump effect from 3.20.0 to 3.21.0 (#19999)
• chore(deps): Bump @xmldom/xmldom from 0.8.3 to 0.8.12 (#20066)
• chore(deps): Bump lodash.template from 4.5.0 to 4.18.1 (#20085)
• chore(oxlint): Add typeawareness into oxlintrc (#20075)
• ci(deps): Bump getsentry/craft/.github/workflows/changelog-preview.yml from 2.24.1 to 2.25.2 (#20081)
• ci(deps): Bump mshick/add-pr-comment (#20078)
• ref(core): Extract shared endStreamSpan for AI integrations (#20021)
• ref(core): Simplify addResponseAttributes in openai integration (#20013)
• test(angular): Bump TypeScript to ~6.0.0 in angular-21 E2E test app (#20134)
• test(nuxt): Make Nuxt 5 (nightly) E2E optional (#20113)
• tests(node): Add node integration tests for Vercel ToolLoopAgent (#20087)

Bundle size 📦

Important Changes

• feat(node-core): Add OTLP integration for node-core/light (#19729)

  Added otlpIntegration at @sentry/node-core/light/otlp for users who manage their own OpenTelemetry setup and want to send trace data to Sentry without adopting the full @sentry/node SDK.

  import { NodeTracerProvider } from '@opentelemetry/sdk-trace-node';
  import * as Sentry from '@sentry/node-core/light';
  import { otlpIntegration } from '@sentry/node-core/light/otlp';
  
  const provider = new NodeTracerProvider();
  provider.register();
  
  Sentry.init({
    dsn: '__DSN__',
    integrations: [
      otlpIntegration({
        // Export OTel spans to Sentry via OTLP (default: true)
        setupOtlpTracesExporter: true,
      }),
    ],
  });

  The integration links Sentry errors to OTel traces and exports spans to Sentry via OTLP.

• feat(node, bun): Add runtime metrics integrations for Node.js and Bun (#19923, #19979)

  New nodeRuntimeMetricsIntegration and bunRuntimeMetricsIntegration automatically collect runtime health metrics and send them to Sentry on a configurable interval (default: 30s). Collected metrics include memory (RSS, heap used/total), CPU utilization, event loop utilization, and process uptime. Node additionally collects event loop delay percentiles (p50, p99). Extra metrics like CPU time and external memory are available as opt-in.

  // Node.js
  import * as Sentry from '@sentry/node';
  
  Sentry.init({
    dsn: '...',
    integrations: [Sentry.nodeRuntimeMetricsIntegration()],
  });
  
  // Bun
  import * as Sentry from '@sentry/bun';
  
  Sentry.init({
    dsn: '...',
    integrations: [Sentry.bunRuntimeMetricsIntegration()],
  });

• feat(core): Support embedding APIs in google-genai (#19797)

  Adds instrumentation for the Google GenAI embedContent API, creating gen_ai.embeddings spans.

• feat(browser): Add elementTimingIntegration for tracking element render and load times (#19869)

  The new elementTimingIntegration captures Element Timing API data as Sentry metrics. It emits element_timing.render_time and element_timing.load_time distribution metrics for elements annotated with the elementtiming HTML attribute.

  import * as Sentry from '@sentry/browser';
  
  Sentry.init({
    dsn: '__DSN__',
    integrations: [Sentry.browserTracingIntegration(), Sentry.elementTimingIntegration()],
  });

  <img src="hero.jpg" elementtiming="hero-image" />

Other Changes

• feat(nuxt): Add middleware instrumentation compatibility for Nuxt 5 (#19968)
• feat(nuxt): Support parametrized SSR routes in Nuxt 5 (#19977)
• feat(solid): Add route parametrization for Solid Router (#20031)
• fix(core): Guard nullish response in supabase PostgREST handler (#20033)
• fix(node): Deduplicate sentry-trace and baggage headers on outgoing requests (#19960)
• fix(node): Ensure startNewTrace propagates traceId in OTel environments (#19963)
• fix(nuxt): Use virtual module for Nuxt pages data (SSR route parametrization) (#20020)
• fix(opentelemetry): Convert seconds timestamps in span.end() to milliseconds (#19958)
• fix(profiling): Disable profiling in worker threads (#20040)
• fix(react-router): Disable debug ID injection in Vite plugin to prevent double injection (#19890)
• refactor(browser): Reduce browser package bundle size (#19856)
• feat(deps): Bump OpenTelemetry dependencies (#20046)

• chore: Add shared validate-pr composite action (#20025)
• chore: Update validate-pr action to latest version (#20027)
• chore(deps): Bump @apollo/server from 5.4.0 to 5.5.0 (#20007)
• chore(deps): Bump amqplib from 0.10.7 to 0.10.9 (#20000)
• chore(deps): Bump srvx from 0.11.12 to 0.11.13 (#20001)
• chore(deps-dev): Bump node-forge from 1.3.2 to 1.4.0 (#20012)
• chore(deps-dev): Bump yaml from 2.8.2 to 2.8.3 (#19985)
• ci(deps): Bump actions/upload-artifact from 6 to 7 (#19569)
• docs(release): Update publishing-a-release.md (#19982)
• feat(deps): Bump babel-loader from 10.0.0 to 10.1.1 (#19997)
• feat(deps): Bump handlebars from 4.7.7 to 4.7.9 (#20008)
• fix(browser-tests): Pin axios to 1.13.5 to avoid compromised 1.14.1 (#20047)
• fix(ci): Update validate-pr action to remove draft enforcement (#20035)
• fix(ci): Update validate-pr action to remove draft enforcement (#20037)
• fix(e2e): Pin @opentelemetry/api to 1.9.0 in ts3.8 test app (#19992)
• ref(browser-tests): Add waitForMetricRequest helper (#20002)
• ref(core): Consolidate getOperationName into one shared utility (#19971)
• ref(core): Introduce instrumented method registry for AI integrations (#19981)
• test(deno): Expand Deno E2E test coverage (#19957)
• test(e2e): Add e2e tests for nodeRuntimeMetricsIntegration (#19989)

Bundle size 📦

Important Changes

• feat(elysia): @sentry/elysia - Alpha Release (#19509)

  New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

  Note: This is an alpha release. Please report any issues or feedback on GitHub.

  Features

  • Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
  • Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
  • Distributed tracing — sentry-trace and baggage headers propagated automatically on incoming/outgoing requests.

  Usage

  import * as Sentry from '@sentry/elysia';
  import { Elysia } from 'elysia';
  
  Sentry.init({ dsn: '__DSN__', tracesSampleRate: 1.0 });
  
  const app = Sentry.withElysia(new Elysia());
  app.get('/', () => 'Hello World');
  app.listen(3000);

Other Changes

• feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#19955)
• fix(cloudflare): Forward ctx argument to Workflow.do user callback (#19891)
• fix(cloudflare): Send correct events in local development (#19900)
• fix(core): Do not overwrite user provided conversation id in Vercel (#19903)
• fix(core): Preserve .withResponse() on Anthropic instrumentation (#19935)
• fix(core): Send internal_error as span status for Vercel error spans (#19921)
• fix(core): Truncate content array format in Vercel (#19911)
• fix(deps): bump fast-xml-parser to 5.5.8 in @azure/core-xml chain (#19918)
• fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#19880)
• fix(nestjs): Add node to nest metadata (#19875)
• fix(serverless): Add node to metadata (#19878)

• chore(ci): Fix "Gatbsy" typo in issue package label workflow (#19905)
• chore(claude): Enable Claude Code Intelligence (LSP) (#19930)
• chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#19888)
• chore(deps-dev): bump @react-router/node from 7.13.0 to 7.13.1 (#19544)
• chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#19926)
• chore(deps-dev): bump qunit-dom from 3.2.1 to 3.5.0 (#19546)
• chore(node-integration-tests): Remove unnecessary file-type dependency (#19824)
• chore(remix): Replace glob with native recursive fs walk (#19531)
• feat(deps): bump stacktrace-parser from 0.1.10 to 0.1.11 (#19887)
• fix(craft): Add missing mainDocsUrl for @sentry/effect SDK (#19860)
• fix(deps): bump next to 15.5.14 in nextjs-15 and nextjs-15-intl E2E test apps (#19917)
• fix(deps): update lockfile to resolve h3@1.15.10 (#19933)
• ref(core): Remove duplicate buildMethodPath utility from openai (#19969)
• ref(elysia): Drop @elysiajs/opentelemetry dependency (#19947)
• ref(nuxt): Extract core logic for storage/database to prepare for Nuxt v5 (#19920)
• ref(nuxt): Extract handler patching to extra plugin for Nitro v2/v3 (#19915)
• ref(sveltekit): Replace recast + @babel/parser with acorn (#19533)
• test(astro): Re-enable server island tracing e2e test in Astro 6 (#19872)
• test(cloudflare): Enable multi-worker tests for CF integration tests (#19938)

Work in this release was contributed by @roli-lpci. Thank you for your contributions!

Bundle size 📦

• fix(v8/browser): Ensure that performance.measure spans have a positive duration (#19959)
• fix(v8/core): Filter gmo error and Facebook mobile error (#15447)

Important Changes

• feat(remix): Server Timing Headers Trace Propagation (#18653)

  The Remix SDK now supports automatic trace propagation via Server-Timing response headers to continue pageload traces on the client side. This means, you no longer have to define a custom meta function to add Sentry <meta> tags to your page as previously. We'll update out Remix tracing docs after this release.

Other Changes

• fix(cloudflare): Use correct env types for withSentry (#19836)
• fix(core): Align error span status message with core SpanStatusType for langchain/google-genai (#19863)
• fix(deno): Clear pre-existing OTel global before registering TracerProvider (#19723)
• fix(nextjs): Skip tracing for tunnel requests (#19861)
• fix(node-core): Recycle propagationContext for each request (#19835)
• ref(core): Simplify core utility functions for smaller bundle (#19854)

• chore(deps): bump next from 16.1.5 to 16.1.7 in /dev-packages/e2e-tests/test-applications/nextjs-16 (#19851)
• ci(release): Switch from action-prepare-release to Craft (#18763)
• fix(deps): bump devalue 5.6.3 to 5.6.4 to fix CVE-2026-30226 (#19849)
• fix(deps): bump file-type to 21.3.2 and @nestjs/common to 11.1.17 (#19847)
• fix(deps): bump flatted 3.3.1 to 3.4.2 to fix CVE-2026-32141 (#19842)
• fix(deps): bump hono 4.12.5 to 4.12.7 in cloudflare-hono E2E test app (#19850)
• fix(deps): bump next to 15.5.13/16.1.7 to fix CVE-2026-1525, CVE-202-33036 and related (#19870)
• fix(deps): bump tar 7.5.10 to 7.5.11 to fix CVE-2026-31802 (#19846)
• fix(deps): bump undici 6.23.0 to 6.24.1 to fix multiple CVEs (#19841)
• fix(deps): bump unhead 2.1.4 to 2.1.12 to fix CVE-2026-31860 and CVE-2026-31873 (#19848)
• test(nextjs): Skip broken ISR tests (#19871)
• test(react): Add gql tests for react router (#19844)

Bundle size 📦

Important Changes

• feat(effect): Add @sentry/effect SDK (Alpha) (#19644)

  This release introduces @sentry/effect, a new SDK for Effect.ts applications. The SDK provides Sentry integration via composable Effect layers for both Node.js and browser environments.

  Compose the effectLayer with optional tracing, logging, and metrics layers to instrument your Effect application:

  import * as Sentry from '@sentry/effect';
  import * as Layer from 'effect/Layer';
  import * as Logger from 'effect/Logger';
  
  const SentryLive = Layer.mergeAll(
    Sentry.effectLayer({ dsn: '__DSN__', tracesSampleRate: 1.0, enableLogs: true }),
    Layer.setTracer(Sentry.SentryEffectTracer),
    Logger.replace(Logger.defaultLogger, Sentry.SentryEffectLogger),
    Sentry.SentryEffectMetricsLayer,
  );

  Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.

• feat(astro): Add Astro 6 support (#19745)

  This release enables full support for Astro v6 by adjusting our Astro SDK's middleware to some Astro-internal changes. We cannot yet guarantee full support for server-islands, due to a bug in Astro v6 but we'll follow up on this once the bug is fixed.

• feat(hono): Add basic instrumentation for Node runtime (#19817)

  Adds a new package @sentry/hono/node (alpha) with basic instrumentation for Hono applications running in Node.js. The Hono middleware for Cloudflare (@sentry/hono/cloudflare - alpha) comes with fixes, and it's now possible to access the Cloudflare Worker Bindings (env) from the options' callback.

  Start using the new Hono middlewares by installing @sentry/hono and importing the respective middleware for your runtime. More instructions can be found in the Hono readme.

  Alpha features are still in progress, may have bugs and might include breaking changes. Please reach out on GitHub if you have any feedback or concerns.

• feat(nestjs): Instrument @nestjs/bullmq @Processor decorator (#19759)

  Automatically capture exceptions and create transactions for BullMQ queue processors in NestJS applications.

  When using the @Processor decorator from @nestjs/bullmq, the SDK now automatically wraps the process() method to create queue.process transactions with proper isolation scopes, preventing breadcrumb and scope leakage between jobs and HTTP requests. Errors thrown in processors are captured with the auto.queue.nestjs.bullmq mechanism type.

  Requires @nestjs/bullmq v10.0.0 or later.

• feat(nestjs): Instrument @nestjs/schedule decorators (#19735)

  Automatically capture exceptions thrown in @Cron, @Interval, and @Timeout decorated methods.

  Previously, exceptions in @Cron methods were only captured if you used the SentryCron decorator. Now they are captured automatically. The exception mechanism type changed from auto.cron.nestjs.async to auto.function.nestjs.cron. If you have Sentry queries or alerts that filter on the old mechanism type, update them accordingly.

• feat(node): Expose headersToSpanAttributes option on nativeNodeFetchIntegration() (#19770)

  Response headers like http.response.header.content-length were previously captured automatically on outgoing fetch spans but are now opt-in since @opentelemetry/instrumentation-undici@0.22.0. You can now configure which headers to capture via the headersToSpanAttributes option.

  Sentry.init({
    integrations: [
      Sentry.nativeNodeFetchIntegration({
        headersToSpanAttributes: {
          requestHeaders: ['x-custom-header'],
          responseHeaders: ['content-length', 'content-type'],
        },
      }),
    ],
  });

Other Changes

• feat(browser/cloudflare): Export conversation id from browser and cloudflare runtimes (#19820)
• feat(bun): Set http response header attributes instead of response context headers (#19821)
• feat(core): Add sentry.timestamp.sequence attribute for timestamp tie-breaking (#19421)
• feat(deno): Set http response header attributes instead of response context headers (#19822)
• feat(deps): Bump OpenTelemetry dependencies (#19682)
• feat(nestjs): Use more specific span origins for NestJS guards, pipes, interceptors, and exception filters (#19751)
• feat(nextjs): Vercel queue instrumentation (#19799)
• feat(node): Avoid OTEL instrumentation for outgoing requests on Node 22+ (#17355)
• feat(deps): bump hono from 4.12.5 to 4.12.7 (#19747)
• feat(deps): bump mysql2 from 3.14.4 to 3.19.1 (#19787)
• feat(deps): bump simple-git from 3.30.0 to 3.33.0 (#19744)
• feat(deps): bump yauzl from 3.2.0 to 3.2.1 (#19809)
• fix(browser): Skip browserTracingIntegration setup for bot user agents (#19708)
• fix(cloudflare): Recreate client when previous one was disposed (#19727)
• fix(core): Align Vercel embedding spans with semantic conventions (#19795)
• fix(core): Fallback to sendDefaultPii setting in langchain and langgraph in non-node environments (#19813)
• fix(core): Improve Vercel AI SDK instrumentation attributes (#19717)
• fix(hono): Align error mechanism (#19831)
• fix(hono): Allow passing env and fix type issues (#19825)
• fix(nestjs): Fork isolation scope in @nestjs/event-emitter instrumentation (#19725)
• fix(nextjs): Log correct lastEventId when error is thrown in component render (#19764)
• fix(nextjs): Strip sourceMappingURL comments after deleting source maps in turbopack builds (#19814)
• fix(nuxt): Upload client source maps (#19805)
• fix(profiling-node): Fix NODE_VERSION rendered as [object Object] in warning (#19788)

• chore: Add oxlint migration commits to blame ignore (#19784)
• chore: add oxlint typescript program suppression to workspace settings (#19692)
• chore: Bump oxlint and oxfmt (#19771)
• chore: Clean up lint and format script names (#19719)
• chore(agents): Be more explicit on linting and formatting (#19803)
• chore(ci): Extract metadata workflow (#19680)
• chore(deps): bump tedious from 18.6.1 to 19.2.1 (#19786)
• chore(deps-dev): bump file-type from 20.5.0 to 21.3.1 (#19748)
• chore(effect): Add Effect to craft, README and issue templates (#19837)
• chore(lint): Rule adjustments and fix warnings (#19612)
• chore(skills): Add skill-creator and update managed agent skills (#19713)
• docs(changelog): Add entry for @sentry/hono alpha release (#19828)
• docs(hono): Document usage without "*" (#19756)
• docs(new-release): Document sdkName for craft (#19736)
• docs(new-release): Update docs based on new Craft flow (#19731)
• ref(cloudflare): Prepare for WorkerEntrypoint (#19742)
• ref(nestjs): Move event instrumentation unit tests to separate file (#19738)
• style: Auto changes made from "yarn fix" (#19710)
• test(astro,cloudflare): Add an E2E test for Astro 6 on Cloudflare (#19781)
• test(browser): Add simulated mfe integration test (#19768)
• test(e2e): Add MFE e2e test using vite-plugin-federation (#19778)
• test(nextjs): Add vercel queue tests to next-16 (#19798)
• tests(core): Fix flaky metric sequence number test (#19754)

Bundle size 📦

Important Changes

• feat(nextjs): Add Turbopack support for React component name annotation (#19604)

  We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements are annotated with data-sentry-component, data-sentry-element, and data-sentry-source-file attributes at build time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance monitoring — previously only available with webpack builds.

  This feature requires Next.js 16+ and is currently behind an experimental flag:

  // next.config.ts
  import { withSentryConfig } from '@sentry/nextjs';
  
  export default withSentryConfig(nextConfig, {
    _experimental: {
      turbopackReactComponentAnnotation: {
        enabled: true,
        ignoredComponents: ['Header', 'Footer'], // optional
      },
    },
  });

• feat(hono): Instrument middlewares app.use() (#19611)

  Hono middleware registered via app.use() is now automatically instrumented, creating spans for each middleware invocation.

Other Changes

• feat(node-core,node): Add tracePropagation option to http and fetch integrations (#19712)
• feat(hono): Use parametrized names for errors (#19577)
• fix(browser): Fix missing traces for user feedback (#19660)
• fix(cloudflare): Use correct Proxy receiver in instrumentDurableObjectStorage (#19662)
• fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#19624)
• fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#19653)
• fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#19651)
• fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#19650)
• fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#19645)
• fix(node): Prevent duplicate LangChain spans from double module patching (#19684)
• fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#19617)
• fix(sveltekit): Fix file system race condition in source map cleaning (#19714)
• fix(tanstackstart-react): Add workerd and worker export conditions (#19461)
• fix(vercel-ai): Prevent tool call span map memory leak (#19328)
• feat(deps): Bump @sentry/rollup-plugin from 5.1.0 to 5.1.1 (#19658)

• chore: Migrate to oxlint (#19134)
• chore(aws-serverless): Don't build layer in build:dev command (#19586)
• chore(ci): Allow triage action to run on issues from external users (#19701)
• chore(deps): Bump immutable from 4.0.0 to 4.3.8 (#19637)
• chore(e2e): Expand microservices E2E application with auto-tracing tests (#19652)
• chore(hono): Prepare readme and add craft entry (#19583)
• chore(sourcemaps): Make sourcemaps e2e test more generic (#19678)
• chore(tanstackstart-react): Add link to docs in README (#19697)
• feat(deps): Bump @hono/node-server from 1.19.4 to 1.19.10 (#19634)
• feat(deps): Bump underscore from 1.12.1 to 1.13.8 (#19616)
• test(angular): Fix failing canary test (#19639)
• test(nextjs): Add sourcemaps test for nextjs turbopack (#19647)
• tests(e2e): Add microservices e2e for nestjs (#19642)
• tests(e2e): Add websockets e2e for nestjs (#19630)

Work in this release was contributed by @dmmulroy, @lithdew, and @smorimoto. Thank you for your contributions!

Bundle size 📦

• feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#19534)
• fix(astro): Do not inject withSentry into Cloudflare Pages (#19558)
• fix(core): Do not remove promiseBuffer entirely (#19592)
• fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#19588)
• fix(react-router): Set correct transaction name when navigating with object argument (#19590)
• ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#19464)

• chore(deps-dev): bump @sveltejs/kit from 2.52.2 to 2.53.3 (#19571)
• chore(deps): Bump @sveltejs/kit to 2.53.3 in sveltekit-2-svelte-5 E2E test (#19594)
• ci(deps): bump actions/checkout from 4 to 6 (#19570)

Bundle size 📦

Important Changes

• feat(core,cloudflare,deno): Add instrumentPostgresJsSql instrumentation (#19566)

  Added a new instrumentation helper for the postgres (postgres.js) library, designed for SDKs that are not based on OpenTelemetry (e.g. Cloudflare, Deno). This wraps a postgres.js sql tagged template instance so that all queries automatically create Sentry spans.

  import postgres from 'postgres';
  import * as Sentry from '@sentry/cloudflare'; // or '@sentry/deno'
  
  export default Sentry.withSentry(env => ({ dsn: '__DSN__' }), {
    async fetch(request, env, ctx) {
      const sql = Sentry.instrumentPostgresJsSql(postgres(env.DATABASE_URL));
  
      // All queries now create Sentry spans
      const users = await sql`SELECT * FROM users WHERE id = ${userId}`;
      return Response.json(users);
    },
  });

  The instrumentation is available in @sentry/core, @sentry/cloudflare, and @sentry/deno.

• feat(nextjs): Add Turbopack support for thirdPartyErrorFilterIntegration (#19542)

  We added experimental support for the thirdPartyErrorFilterIntegration with Turbopack builds.

  This feature requires Next.js 16+ and is currently behind an experimental flag:

  // next.config.ts
  import { withSentryConfig } from '@sentry/nextjs';
  
  export default withSentryConfig(nextConfig, {
    _experimental: {
      turbopackApplicationKey: 'my-app-key',
    },
  });

  Then configure the integration in your client instrumentation file with a matching key:

  // instrumentation-client.ts
  import * as Sentry from '@sentry/nextjs';
  
  Sentry.init({
    integrations: [
      Sentry.thirdPartyErrorFilterIntegration({
        filterKeys: ['my-app-key'],
        behaviour: 'apply-tag-if-exclusively-contains-third-party-frames',
      }),
    ],
  });

Other Changes

• feat(core,cloudflare): Add dispose to the client for proper cleanup (#19506)
• feat(deps): Bump rxjs from 7.8.1 to 7.8.2 (#19545)
• feat(nextjs): Use not: foreign condition in turbopack loaders (#19502)
• feat(react-router): Include middleware function names and indices (#19109)
• fix(consola): Normalize extra keys from consola (#19511)
• fix(core): Improve message truncation for multimodal content and normalize streaming span names (#19500)
• fix(core): Strip inline media from multimodal content before stringification (#19540)
• fix(deps): Bump transitive rollup deps to patch CVE-2026-27606 (#19565)
• fix(langchain): Use runName argument in handleChainStart to fix unknown_chain spans (#19554)
• fix(nestjs): Improve control flow exception filtering (#19524)
• fix(tanstackstart-react): Flush events in server entry point for serverless environments (#19513)
• fix(vue): Avoid triggering deprecated next callback from router instrumentation (#19476)

• chore: Updating minimatch (#19434)
• chore(agents): Add dotagents (#19526)
• chore(agents): Add nested AGENTS.md for browser (#19551)
• chore(agents): Add nested AGENTS.md for nextjs (#19556)
• chore(agents): Consolidate SDK dev rules into AGENTS.md (#19521)
• chore(agents): Migrate repo-wide cursor rules to skills (#19549)
• chore(agents): Remove stale cursor commands (#19560)
• chore(ci): Validate alert id (#19499)
• chore(deps): Bump rollup to 4.59.0 to fix path traversal vulnerability (#19538)
• chore(lint): Remove junit report file (#19491)
• chore(svelte,sveltekit): Use version range for magic-string (#19520)
• chore(tanstackstart): Fix leftover formatting issue (#19536)
• test(consola): Restructure tests (#19517)
• test(node): Test runName parameter in handleChainStart for langchain (#19562)

Work in this release was contributed by @YevheniiKotyrlo. Thank you for your contribution!

Bundle size 📦

Important Changes

• feat(tanstackstart-react): Add global sentry exception middlewares (#19330)

  The sentryGlobalRequestMiddleware and sentryGlobalFunctionMiddleware global middlewares capture unhandled exceptions thrown in TanStack Start API routes and server functions. Add them as the first entries in the requestMiddleware and functionMiddleware arrays of createStart():

  import { createStart } from '@tanstack/react-start/server';
  import { sentryGlobalRequestMiddleware, sentryGlobalFunctionMiddleware } from '@sentry/tanstackstart-react';
  
  export default createStart({
    requestMiddleware: [sentryGlobalRequestMiddleware, myRequestMiddleware],
    functionMiddleware: [sentryGlobalFunctionMiddleware, myFunctionMiddleware],
  });

• feat(tanstackstart-react)!: Export Vite plugin from @sentry/tanstackstart-react/vite subpath (#19182)

  The sentryTanstackStart Vite plugin is now exported from a dedicated subpath. Update your import:

  - import { sentryTanstackStart } from '@sentry/tanstackstart-react';
  + import { sentryTanstackStart } from '@sentry/tanstackstart-react/vite';

• fix(node-core): Reduce bundle size by removing apm-js-collab and requiring pino >= 9.10 (#18631)

  In order to keep receiving pino logs, you need to update your pino version to >= 9.10, the reason for the support bump is to reduce the bundle size of the node-core SDK in frameworks that cannot tree-shake the apm-js-collab dependency.

• fix(browser): Ensure user id is consistently added to sessions (#19341)

  Previously, the SDK inconsistently set the user id on sessions, meaning sessions were often lacking proper coupling to the user set for example via Sentry.setUser(). Additionally, the SDK incorrectly skipped starting a new session for the first soft navigation after the pageload. This patch fixes these issues. As a result, metrics around sessions, like "Crash Free Sessions" or "Crash Free Users" might change. This could also trigger alerts, depending on your set thresholds and conditions. We apologize for any inconvenience caused!

  While we're at it, if you're using Sentry in a Single Page App or meta framework, you might want to give the new 'page' session lifecycle a try! This new mode no longer creates a session per soft navigation but continues the initial session until the next hard page refresh. Check out the docs to learn more!

• ref!(gatsby): Drop Gatsby v2 support (#19467)

  We drop support for Gatsby v2 (which still relies on webpack 4) for a critical security update in https://github.com/getsentry/sentry-javascript-bundler-plugins/releases/tag/5.0.0

Other Changes

• feat(astro): Add support for Astro on CF Workers (#19265)
• feat(cloudflare): Instrument async KV API (#19404)
• feat(core): Add framework-agnostic tunnel handler (#18892)
• feat(deno): Export logs API from Deno SDK (#19313)
• feat(deno): Export metrics API from Deno SDK (#19305)
• feat(deno): instrument Deno.serve with async context support (#19230)
• feat(deps): bump babel-loader from 8.2.5 to 10.0.0 (#19303)
• feat(deps): bump body-parser from 1.20.4 to 2.2.2 (#19191)
• feat(deps): Bump hono from 4.11.7 to 4.11.10 (#19440)
• feat(deps): bump qs from 6.14.1 to 6.14.2 (#19310)
• feat(deps): bump the opentelemetry group with 4 updates (#19425)
• feat(feedback): Add setTheme() to dynamically update feedback widget color scheme (#19430)
• feat(nextjs): Add sourcemaps.filesToDeleteAfterUpload as a top-level option (#19280)
• feat(node): Add ignoreConnectSpans option to postgresIntegration (#19291)
• feat(node): Bump to latest @fastify/otel (#19452)
• fix: Bump bundler plugins to v5 (#19468)
• fix: updated the codecov config (#19350)
• fix(aws-serverless): Prevent crash in isPromiseAllSettledResult with null/undefined array elements (#19346)
• fix(bun) Export pinoIntegration from @sentry/node (#17990)
• fix(core,browser): Delete SentryNonRecordingSpan from fetch/xhr map (#19336)
• fix(core): Explicitly flush log buffer in client.close() (#19371)
• fix(core): Langgraph state graph invoke accepts null to resume (#19374)
• fix(core): Wrap decodeURI in node stack trace parser to handle malformed URIs (#19400)
• fix(deps): Bump nuxt devDependency to fix CVE-2026-24001 (#19249)
• fix(deps): Bump to latest version of each minimatch major (#19486)
• fix(nextjs): Apply environment from options if set (#19274)
• fix(nextjs): Don't set sentry.drop_transaction attribute on spans when skipOpenTelemetrySetup is enabled (#19333)
• fix(nextjs): Normalize trailing slashes in App Router route parameterization (#19365)
• fix(nextjs): Return correct lastEventId for SSR pages (#19240)
• fix(nextjs): Set parameterized transaction name for non-transaction events (#19316)
• fix(node-core): Align pino mechanism type with spec conventions (#19363)
• fix(nuxt): Use options.rootDir instead of options.srcDir (#19343)

Work in this release was contributed by @LudvigHz and @jadengis. Thank you for your contributions!

Bundle size 📦