[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.sentry:sentry	8.58.0 → 8.62.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

getsentry/sentry-java (io.sentry:sentry)

v8.62.0

Compare Source

Improvements

• Support Navigation 3 integration for multi-Activity and multi-Fragment applications, where each Activity or Fragment has its own SentryNavEffect (#​6305)
  • See the Navigation for Android docs for a detailed list of supported vs unsupported app setups.

Fixes

• Fix a D8 crash (NullPointerException: Cannot invoke "String.length()") when dexing the SDK with AGP 8.0 and older, a regression from 8.61.1 (#​6356)
• Always remove the first-draw listener after the first frame, even if no layout pass follows it (#​6152)
• Prevent Reactor pool maintenance tasks from retaining unbounded Sentry scope chains (#​6283)

v8.61.1

Compare Source

Fixes

• Session Replay: Fix a native crash (SIGABRT on the RenderThread) when stopping a replay that uses the canvas screenshot strategy (#​6342)
• Session Replay: Keep the segment videos of a replay that stopped before the startup cleanup of previous replays ran (#​6343)
• Report the number of dropped spans in client reports when a batched span envelope item is discarded, instead of a quantity of 1 (e.g. for Flutter span streaming) (#​6265)
• Session Replay: Keep the flushed video and do not reuse its segment id when stop() is called right after flush() in buffer mode (#​6340)
• Keep sending events from Android 7.1.0 and older devices after Sentry changes its TLS certificate authority (#​6227)
  • In February 2027, Sentry moves its TLS certificates from DigiCert to Let's Encrypt and Google Trust Services (announcement).
  • Android 7.1.0 (API 25) and older don't trust the Let's Encrypt root certificate (ISRG Root X1), so without this fix, the SDK on those devices can no longer send events to Sentry after the switch.
  • The SDK now bundles ISRG Root X1 and trusts it in addition to the device's root certificates on API 25 and lower. This only applies to the SDK's own uploads to Sentry SaaS (DSNs on sentry.io), not to self-hosted Sentry, not to any other connection your app makes, and not if you set your own SentryOptions.setSslSocketFactory.
  • Apps need to update to an SDK version with this fix to keep sending events from these devices.
• Session Replay: Use a software canvas for video encoding on the Android Emulator to avoid a native crash in eglDestroySurface (#​6282)

Internal

• Measure the hostname cache TTL on the monotonic ticker the options provide, so that a device time change no longer shortens or extends it (#​6100)
• Measure Session Replay's 1h recording cap and its touch-move debounce on a monotonic clock, so a device time change no longer stops a healthy recording early, keeps a finished one alive, or suppresses gesture events (#​6090)
• Add ScreenshotUtils.takeMaskedScreenshot so Hybrid SDKs can capture screenshots masked according to SentryAndroidOptions.getScreenshot() (#​6281)

Dependencies

• Bump Native SDK from v0.17.3 to v0.17.4 (#​6278)
  • changelog
  • diff

v8.61.0

Compare Source

Fixes

• Session Replay: Backfill release, environment and SDK info for replays sent on the next launch after the app was killed or crashed (#​6253)
• Fix SDK callback error handling (#​6140)
  • Drop telemetry when a beforeSend* callback throws and report it using DiscardReason.CALLBACK_ERROR.
  • Drop transactions when tracesSampler throws instead of inheriting the parent sampling decision or falling back to tracesSampleRate (#​6163).
  • Drop spans when beforeSpan throws without disrupting requests, covering OkHttp, OpenFeign, GraphQL, Ktor, and Apollo—including Apollo 5 (#​6167, #​6238).
  • Drop telemetry and record callback_error when a customer event processor throws instead of continuing with a potentially partially processed item. SDK-owned processor failures are logged and processing continues.
  • Drop breadcrumbs when beforeBreadcrumb throws instead of storing exception details on the breadcrumb.
  • No longer fail Spring requests when a TransactionNameProvider throws, falling back to <unlabeled transaction> (#​6241).
  • No longer fail Spring requests when a SentryUserProvider throws and overwrite the user with an empty user object (#​6240).
  • Disable profiling when profilesSampler throws instead of falling back to profilesSampleRate or inheriting the parent profiling decision (#​6164).
  • Report attached profiles dropped by transaction callback errors as callback_error in client reports and OnDiscardCallback (#​6166).
  • Skip replay capture when beforeErrorSampling throws while retaining the error event (#​6165).
  • Skip Android screenshots or view hierarchies when their capture callbacks throw while retaining the error event (#​6167).
  • Keep the Android feedback form available when its options configurator throws (#​6239).
  • Isolate nonfatal callback throwables while continuing to propagate fatal JVM errors (#​6251).

Internal

• Hold the hostname cache on SentryOptions instead of a static singleton (#​6117)

Dependencies

• Bump Native SDK from v0.17.2 to v0.17.3 (#​6250)
  • changelog
  • diff

v8.60.0

Compare Source

Features

• Add support for Android Navigation 3 through the new sentry-android-navigation3 library (#​6233)
  • Use SentryNavEffect to record navigation transactions, breadcrumbs, screen names, and additional context as your nav back stack changes.
  • See the Navigation for Android docs for additional details.
• Report the cellular network technology generation in device.connection_effective_type, for example 4g or 5g (#​6146)

Dependencies

• Bump Native SDK from v0.17.1 to v0.17.2 (#​6230)
  • changelog
  • diff

v8.59.0

Compare Source

Breaking Changes

• Capture direct Sentry.logger() and Sentry.metrics() calls regardless of options.getLogs().isEnabled() and options.getMetrics().isEnabled() (#​6184)
  • Automatic logging integrations still only capture logs when options.getLogs().isEnabled() is true. options.getMetrics().setEnabled(...) currently has no effect because there are no automatic Metrics integrations. Both enable options will be removed in the upcoming major release, and each logging integration will then have a separate opt-in flag.
  • Use options.getLogs().setBeforeSend(...) and options.getMetrics().setBeforeSend(...) to filter manually emitted telemetry. Return null from either callback to drop it.

Fixes

• Keep the videos of already captured session replay segments when the replay stops, so segments that are still queued are no longer sent without their video (#​6177)

Features

• Deprecate sendDefaultPii in favor of dataCollection ahead of its removal in 9.0 (#​6158)
• Make the tombstone merge time threshold configurable via SentryAndroidOptions.setTombstoneMergeTimeThresholdMillis and the io.sentry.tombstone.merge-time-threshold-millis manifest option (#​6154)
• Add sentry-apollo-5 integration for Apollo Kotlin 5, providing HTTP tracing and failed GraphQL request reporting (#​6074)
• Add OkHttp autoconfiguration for Spring Boot (#​5797)

Fixes

• Prevent infinite loops when capturing exceptions with cyclic cause chains (#​6073)

Improvements

• Recover Android 17 MemoryLimiter app exits recorded as ApplicationExitInfo.REASON_MEMORY_LIMITER (#​6174)

Dependencies

• Bump Native SDK from v0.16.6 to v0.17.1 (#​6135)
  • changelog
  • diff

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[prof18]

@renovate rebase