Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

dependabot[bot] Contributor Powered by Pull Request Badge

Bumps @sentry/browser from 10.22.0 to 10.23.0.

Release notes

Sourced from @​sentry/browser's releases.

10.23.0

  • feat(core): Send user-agent header with envelope requests in server SDKs (#17929)
  • feat(browser): Limit transport buffer size (#18046)
  • feat(core): Remove default value of maxValueLength: 250 (#18043)
  • feat(react-router): Align options with shared build time options type (#18014)
  • fix(browser-utils): cache element names for INP (#18052)
  • fix(browser): Capture unhandled rejection errors for web worker integration (#18054)
  • fix(cloudflare): Ensure types for cloudflare handlers (#18064)
  • fix(nextjs): Update proxy template wrapping (#18086)
  • fix(nuxt): Added top-level fallback exports (#18083)
  • fix(nuxt): check for H3 error cause before re-capturing (#18035)
  • fix(replay): Linked errors not resetting session id (#17854)
  • fix(tracemetrics): Bump metrics buffer to 1k (#18039)
  • fix(vue): Make options parameter optional on attachErrorHandler (#18072)
  • ref(core): Set span status internal_error instead of unknown_error (#17909)
  • fix(tests): un-override nitro dep version for nuxt-3 test (#18056)
  • fix(e2e): Add p-map override to fix React Router 7 test builds (#18068)
  • feat: Add a note to save changes before starting (#17987)
  • test(browser): Add test for INP target name after navigation or DOM changes (#18033)
  • chore: Add external contributor to CHANGELOG.md (#18032)
  • chore(aws-serverless): Fix typo in timeout warning function name (#18031)
  • chore(browser): upgrade fake-indexeddb to v6 (#17975)
  • chore(tests): pass test flags through to the test command (#18062)

Work in this release was contributed by @​hanseo0507. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 24.06 KB
@​sentry/browser - with treeshaking flags 22.58 KB
@​sentry/browser (incl. Tracing) 40.29 KB
@​sentry/browser (incl. Tracing, Profiling) 44.47 KB
@​sentry/browser (incl. Tracing, Replay) 77.64 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 67.58 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 82.23 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 94.12 KB
@​sentry/browser (incl. Feedback) 40.34 KB
@​sentry/browser (incl. sendFeedback) 28.62 KB
@​sentry/browser (incl. FeedbackAsync) 33.44 KB
@​sentry/react 25.71 KB
@​sentry/react (incl. Tracing) 42.23 KB
@​sentry/vue 28.45 KB

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.23.0

  • feat(core): Send user-agent header with envelope requests in server SDKs (#17929)
  • feat(browser): Limit transport buffer size (#18046)
  • feat(core): Remove default value of maxValueLength: 250 (#18043)
  • feat(react-router): Align options with shared build time options type (#18014)
  • fix(browser-utils): cache element names for INP (#18052)
  • fix(browser): Capture unhandled rejection errors for web worker integration (#18054)
  • fix(cloudflare): Ensure types for cloudflare handlers (#18064)
  • fix(nextjs): Update proxy template wrapping (#18086)
  • fix(nuxt): Added top-level fallback exports (#18083)
  • fix(nuxt): check for H3 error cause before re-capturing (#18035)
  • fix(replay): Linked errors not resetting session id (#17854)
  • fix(tracemetrics): Bump metrics buffer to 1k (#18039)
  • fix(vue): Make options parameter optional on attachErrorHandler (#18072)
  • ref(core): Set span status internal_error instead of unknown_error (#17909)
  • fix(tests): un-override nitro dep version for nuxt-3 test (#18056)
  • fix(e2e): Add p-map override to fix React Router 7 test builds (#18068)
  • feat: Add a note to save changes before starting (#17987)
  • test(browser): Add test for INP target name after navigation or DOM changes (#18033)
  • chore: Add external contributor to CHANGELOG.md (#18032)
  • chore(aws-serverless): Fix typo in timeout warning function name (#18031)
  • chore(browser): upgrade fake-indexeddb to v6 (#17975)
  • chore(tests): pass test flags through to the test command (#18062)

Work in this release was contributed by @​hanseo0507. Thank you for your contribution!

Commits
  • 1feb97e release: 10.23.0
  • ee9b20d Merge pull request #18090 from getsentry/prepare-release/10.23.0
  • ddaec08 meta(changelog): Update changelog for 10.23.0
  • 33d5898 fix(nextjs): Update proxy template wrapping (#18086)
  • 600e27a fix(browser): Capture unhandled rejection errors for web worker integration (...
  • b57ade1 fix(nuxt): Added top-level fallback exports (#18083)
  • 3deeecd fix(cloudflare): Ensure types for cloudflare handlers (#18064)
  • fbadeb8 fix(vue): Make options parameter optional on attachErrorHandler (#18072)
  • 94190f8 fix(browser-utils): cache element names for INP (#18052)
  • 9bdd19f chore(tests): pass test flags through to the test command (#18062)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 10.22.0 to 10.23.0.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.22.0...10.23.0)

---
updated-dependencies:
- dependency-name: "@sentry/browser"
  dependency-version: 10.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2025
@semanticdiff-com
Copy link

semanticdiff-com bot commented Nov 10, 2025

Review changes with  SemanticDiff

Changed Files
File Status
  package-lock.json  42% smaller
  package.json  0% smaller

@aviator-app
Copy link
Contributor

aviator-app bot commented Nov 10, 2025

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This pull request is currently open (not queued).

How to merge

To merge this PR, comment /aviator merge or add the mergequeue label.


See the real-time status of this PR on the Aviator webapp.
Use the Aviator Chrome Extension to see the status of your PR within GitHub.

@naming-conventions-bot
Copy link

Please follow naming conventions! 😿

@aviator-app
Copy link
Contributor

aviator-app bot commented Nov 10, 2025

Aviator Changeset actions:

@snyk-io
Copy link
Contributor

snyk-io bot commented Nov 10, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 10, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@deepsource-io
Copy link
Contributor

deepsource-io bot commented Nov 10, 2025

Here's the code health analysis summary for commits 45b993e..66008eb. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗
DeepSource PHP LogoPHP✅ SuccessView Check ↗
DeepSource Test coverage LogoTest coverage⚠️ Artifact not reportedTimed out: Artifact was never reportedView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@mergify
Copy link
Contributor

mergify bot commented Nov 10, 2025

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🔴 Do not merge outdated PRs

This rule is failing.

Make sure PRs are almost up to date before merging

  • #commits-behind <= 10

@github-actions
Copy link

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

@github-actions
Copy link

github-actions bot commented Nov 10, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@sentry-internal/browser-utils 10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits
npm/@sentry-internal/feedback 10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits
npm/@sentry-internal/replay 10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits
npm/@sentry-internal/replay-canvas 10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits
npm/@sentry/browser 10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits
npm/@sentry/browser ^10.23.0 🟢 5.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 081 existing vulnerabilities detected
SAST🟢 7SAST tool detected but not run on all commits

Scanned Files

  • package-lock.json
  • package.json

@aviator-app aviator-app bot added the blocked label Nov 10, 2025
@aviator-app
Copy link
Contributor

aviator-app bot commented Nov 10, 2025

This pull request failed to merge: new commit introduced for a queued PR, invalidating the status. After you have resolved the problem, you should remove the blocked pull request label from this PR and then try to re-queue the PR. Note that the pull request will be automatically re-queued if it has the mergequeue label.

Associated Draft PR #612

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@mergify
Copy link
Contributor

mergify bot commented Nov 10, 2025

👋 dependabot[bot] your PR is conflicting and needs to be updated to be merged

@mergify mergify bot added the conflict label Nov 10, 2025
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@sonarqubecloud
Copy link

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 17, 2025

A newer version of @​sentry/browser exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@naming-conventions-bot
Copy link

Please follow naming conventions! 😿

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AnyChange blocked conflict dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code release root size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant