[dependabot]

Bumps @sentry/browser from 10.70.0 to 11.8.0.

Release notes

Sourced from @​sentry/browser's releases.

11.8.0

Important Changes

• feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

  The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

  • Node.js 20.19.0 or higher is required.
  • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
  • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
  • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

• feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

  OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

• feat(core): Support SuppressedError in LinkedErrors integration (#25246)
• fix(astro): Delete generated source maps for static output (#25310)
• fix(astro): Upload source maps of Astro 7's prerender build (#25309)
• fix(browser): Apply urlQueryParams to the Referer header (#25324)
• fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
• fix(hono): Expose runtime-specific SDK options (#25290)
• fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)
• fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)
• fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)
• fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)
• fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
• fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)
• fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

• chore: Add external contributor to CHANGELOG.md (#25375)
• ci: Install the pnpm version that Volta pins (#25287)
• license: Add cli FSL notice to package licenses (#25314)
• ref(core): use shared MCP attribute conventions (#25059)
• ref(tanstackstart-react): Reuse shared component annotation options (#25313)
• test(browser): Keep whitespace text out of the handlers-lcp page (#25280)
• test(bun): Restore @​sentry/core spies after the Bun.serve tests (#25276)
• test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
• test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)
• test(e2e): Add node-openai-send-to-sentry test app (#24824)
• test(e2e): Add nuxt-5-sourcemaps test (#25268)
• test(e2e): Inherit root Volta config in all e2e test apps (#25369)
• test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)
• test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)
• test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#25279)

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

11.8.0

Important Changes

• feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#25095)

  The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

  • Node.js 20.19.0 or higher is required.
  • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
  • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
  • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

• feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#25285)

  OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

• feat(core): Support SuppressedError in LinkedErrors integration (#25246)
• fix(astro): Delete generated source maps for static output (#25310)
• fix(astro): Upload source maps of Astro 7's prerender build (#25309)
• fix(browser): Apply urlQueryParams to the Referer header (#25324)
• fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
• fix(hono): Expose runtime-specific SDK options (#25290)
• fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#25301)
• fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#25341)
• fix(server-utils): Read pi-durable 1.2.0 tool results from output (#25312)
• fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#25043)
• fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
• fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#25307)
• fix(tanstackstart-react): Rewrite source paths of split route modules (#25361)

• chore: Add external contributor to CHANGELOG.md (#25375)
• ci: Install the pnpm version that Volta pins (#25287)
• license: Add cli FSL notice to package licenses (#25314)
• ref(core): use shared MCP attribute conventions (#25059)
• ref(tanstackstart-react): Reuse shared component annotation options (#25313)
• test(browser): Keep whitespace text out of the handlers-lcp page (#25280)
• test(bun): Restore @​sentry/core spies after the Bun.serve tests (#25276)
• test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
• test(e2e): Add node-openai-decisions-send-to-sentry test app (#25331)
• test(e2e): Add node-openai-send-to-sentry test app (#24824)
• test(e2e): Add nuxt-5-sourcemaps test (#25268)
• test(e2e): Inherit root Volta config in all e2e test apps (#25369)
• test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#25282)
• test(nextjs): Run nextjs-16-tunnel on Cloudflare (#25161)

... (truncated)

Commits

• c6492ef release: 11.8.0
• e091f7f meta(changelog): Update changelog for 11.8.0 (#25388)
• 30ec754 meta(changelog): Update changelog for 11.8.0
• a309cf8 test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#25308)
• 71f1ef9 test(e2e): Inherit root Volta config in all e2e test apps (#25369)
• e54e577 chore: Add external contributor to CHANGELOG.md (#25375)
• 0ed4606 fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#25376)
• 9516aeb fix(cloudflare): auto-instrument when wrangler main is a package (#25343)
• 7471347 feat(core): Support SuppressedError in LinkedErrors integration (#25246)
• f4ae6c5 fix(browser): Apply urlQueryParams to the Referer header (#25324)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.