Merge pull request #21703 from getsentry/prepare-release/10.60.0

meta(changelog): Update changelog for 10.60.0

Author: JPeer264

.craft.yml

@@ -148,6 +148,9 @@ targets:
 
   ## 7. Other Packages
   ## 7.1
+  - name: npm
+    id: '@sentry/bundler-plugins'
+    includeNames: /^sentry-bundler-plugins-\d.*\.tgz$/
   - name: npm
     id: '@sentry/typescript'
     includeNames: /^sentry-typescript-\d.*\.tgz$/

.github/dependency-review-config.yml

@@ -11,3 +11,12 @@ allow-ghsas:
   - GHSA-gp8f-8m3g-qvj9
   # devalue vulnerability - this is just used by nuxt & astro as transitive dependency
   - GHSA-vj54-72f3-p5jv
+  # vite 4, used in browser bundler plugin E2E tests
+  - GHSA-c27g-q93r-2cwf
+  - GHSA-fx2h-pf6j-xcff
+  # vite 6 7 and 8, used in browser bundler plugin E2E tests
+  - GHSA-p9ff-h696-f583
+  # vite 7 and 8, used in browser bundler plugin E2E tests
+  - GHSA-v2wj-q39q-566r
+  # esbuil, used in browser bundler plugin E2E tests
+  - GHSA-gv7w-rqvm-qjhr

.github/workflows/build.yml

@@ -812,6 +812,28 @@ jobs:
         working-directory: dev-packages/node-integration-tests
         run: yarn test
 
+  job_node_v18_compat:
+    name: Node v18.0.0 Compatibility Check
+    needs: [job_get_metadata, job_build]
+    if: needs.job_build.outputs.changed_node == 'true' || github.event_name != 'pull_request'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ env.HEAD_COMMIT }}
+      - name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: '18.0.0'
+      - name: Restore caches
+        uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
+      - name: Check Node v18.0.0 compatibility
+        run: node scripts/node-v18-compat-check.js
+
   job_node_core_integration_tests:
     name:
       Node (${{ matrix.node }})${{ (matrix.typescript && format(' (TS {0})', matrix.typescript)) || '' }} Node-Core
@@ -876,6 +898,33 @@ jobs:
         working-directory: dev-packages/cloudflare-integration-tests
         run: yarn test
 
+  job_bundler_plugin_integration_tests:
+    name: Bundler Plugin Integration Tests
+    needs: [job_get_metadata, job_build]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+    steps:
+      - name: Check out current commit (${{ needs.job_get_metadata.outputs.commit_label }})
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ env.HEAD_COMMIT }}
+      # The fixtures install the locally-packed `@sentry/bundler-plugins` tarball with pnpm.
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
+        with:
+          version: 9.15.9
+      - name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version-file: 'package.json'
+      - name: Restore caches
+        uses: ./.github/actions/restore-cache
+        with:
+          dependency_cache_key: ${{ needs.job_build.outputs.dependency_cache_key }}
+
+      - name: Run integration tests
+        working-directory: dev-packages/bundler-plugin-integration-tests
+        run: yarn test
+
   job_bun_integration_tests:
     name: Bun Integration Tests
     needs: [job_get_metadata, job_build]
@@ -1198,8 +1247,10 @@ jobs:
         job_deno_unit_tests,
         job_node_unit_tests,
         job_node_integration_tests,
+        job_node_v18_compat,
         job_node_core_integration_tests,
         job_cloudflare_integration_tests,
+        job_bundler_plugin_integration_tests,
         job_bun_integration_tests,
         job_browser_playwright_tests,
         job_browser_loader_tests,

.oxfmtrc.json

@@ -9,7 +9,9 @@
   "ignorePatterns": [
     "packages/browser/test/loader.js",
     "packages/replay-worker/examples/worker.min.js",
-    "dev-packages/browser-integration-tests/fixtures",
+    "dev-packages/browser-integration-tests/fixtures/**",
+    "dev-packages/bundler-plugin-integration-tests/fixtures/**",
+    "packages/bundler-plugins/test/core/fixtures/**",
     "**/test.ts-snapshots/**",
     "/.nx/cache",
     "/.nx/workspace-data"

.oxlintrc.json

@@ -38,6 +38,7 @@
     "test/manual/**",
     "types/**",
     "scripts/*.js",
-    "node_modules/**"
+    "node_modules/**",
+    "packages/bundler-plugins/test/core/fixtures/**"
   ]
 }

.size-limit.js

@@ -48,7 +48,7 @@ module.exports = [
     path: 'packages/browser/build/npm/esm/prod/index.js',
     import: createImport('init', 'browserTracingIntegration', 'spanStreamingIntegration'),
     gzip: true,
-    limit: '53 KB',
+    limit: '54 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -64,7 +64,7 @@ module.exports = [
     path: 'packages/browser/build/npm/esm/prod/index.js',
     import: createImport('init', 'browserTracingIntegration', 'replayIntegration'),
     gzip: true,
-    limit: '90 KB',
+    limit: '91 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -171,7 +171,7 @@ module.exports = [
     import: createImport('init', 'ErrorBoundary', 'reactRouterV6BrowserTracingIntegration'),
     ignore: ['react/jsx-runtime'],
     gzip: true,
-    limit: '53 KB',
+    limit: '54 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   // Vue SDK (ESM)
@@ -278,7 +278,7 @@ module.exports = [
     path: createCDNPath('bundle.tracing.min.js'),
     gzip: false,
     brotli: false,
-    limit: '151 KB',
+    limit: '152 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -294,15 +294,15 @@ module.exports = [
     path: createCDNPath('bundle.tracing.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
-    limit: '155 KB',
+    limit: '156 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
     name: 'CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed',
     path: createCDNPath('bundle.replay.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
-    limit: '223 KB',
+    limit: '224 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -391,15 +391,15 @@ module.exports = [
     import: createImport('init'),
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: true,
-    limit: '136 KB',
+    limit: '130 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
     name: '@sentry/node/import (ESM hook with diagnostics-channel injection)',
     path: ['node_modules/@apm-js-collab/tracing-hooks/hook.mjs', 'packages/node/build/import-hook.mjs'],
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: true,
-    limit: '100 KB',
+    limit: '76 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -408,7 +408,7 @@ module.exports = [
     import: createImport('init'),
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: true,
-    limit: '100 KB',
+    limit: '56 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -440,7 +440,7 @@ module.exports = [
     import: createImport('init'),
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: true,
-    limit: '92 KB',
+    limit: '91 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   // Cloudflare SDK (ESM) - compressed, minified to match `wrangler deploy --dry-run --minify` output
@@ -451,7 +451,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '175 KiB',
+    limit: '180 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {
@@ -471,7 +471,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '429 KiB',
+    limit: '450 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {

CHANGELOG.md

@@ -4,6 +4,33 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+## 10.60.0
+
+### Other Changes
+
+- feat(cloudflare): Add R2 bucket auto-instrumentation ([#21327](https://github.com/getsentry/sentry-javascript/pull/21327))
+- feat(core): Add `bindScopeToEmitter` to bind a scope to an event emitter ([#21594](https://github.com/getsentry/sentry-javascript/pull/21594))
+- feat(deps): Bump @hapi/wreck from 18.1.0 to 18.1.2 ([#21178](https://github.com/getsentry/sentry-javascript/pull/21178))
+- fix(browser): Ensure `url.full` and `http.url` attributes have the same values on `http.client` spans ([#21660](https://github.com/getsentry/sentry-javascript/pull/21660))
+- fix(server-utils): Avoid directly importing `tracingChannel` for Node v18 compatibility ([#21662](https://github.com/getsentry/sentry-javascript/pull/21662))
+- fix(server-utils): Remove optional `vite` peer dependency ([#21677](https://github.com/getsentry/sentry-javascript/pull/21677))
+
+<details>
+  <summary><strong>Internal Changes</strong></summary>
+
+- chore: Add bundler-plugins to craft ([#21701](https://github.com/getsentry/sentry-javascript/pull/21701))
+- chore: Cleanup unused imports of `@opentelemetry/core` ([#21679](https://github.com/getsentry/sentry-javascript/pull/21679))
+- fix(bundler-plugins): Integration with monorepo build ([#21479](https://github.com/getsentry/sentry-javascript/pull/21479))
+- ref(core): Gate updateName() custom source on an OTel inference brand ([#21649](https://github.com/getsentry/sentry-javascript/pull/21649))
+- ref(core/opentelemetry): Move OTel span data inference from `captureSpan` to `SentrySpanProcessor` ([#21648](https://github.com/getsentry/sentry-javascript/pull/21648))
+- ref(node): Remove unused sql-common helper and `@opentelemetry/core` dep ([#21688](https://github.com/getsentry/sentry-javascript/pull/21688))
+- ref(node): Streamline kafkajs instrumentation ([#21647](https://github.com/getsentry/sentry-javascript/pull/21647))
+- ref(node): Streamline undici (node-fetch) instrumentation ([#21650](https://github.com/getsentry/sentry-javascript/pull/21650))
+- ref(vercel-edge): Drop unused `@opentelemetry/semantic-conventions` dependency ([#21691](https://github.com/getsentry/sentry-javascript/pull/21691))
+- ref(vercel-edge): Remove `@opentelemetry/resources` dependency ([#21690](https://github.com/getsentry/sentry-javascript/pull/21690))
+
+</details>
+
 ## 10.59.0
 
 ### Important Changes

dev-packages/.oxlintrc.json

@@ -9,5 +9,6 @@
     "typescript/no-misused-spread": "off",
     "typescript/no-base-to-string": "off",
     "typescript/await-thenable": "off"
-  }
+  },
+  "ignorePatterns": ["bundler-plugin-integration-tests/fixtures/**"]
 }

dev-packages/browser-integration-tests/suites/integrations/graphqlClient/fetch/test.ts

@@ -50,6 +50,7 @@ sentryTest('should update spans for GraphQL fetch requests', async ({ getLocalTe
       type: 'fetch',
       'http.method': 'POST',
       'http.url': 'http://sentry-test.io/foo',
+      'url.full': 'http://sentry-test.io/foo',
       url: 'http://sentry-test.io/foo',
       'server.address': 'sentry-test.io',
       'sentry.op': 'http.client',

dev-packages/browser-integration-tests/suites/integrations/graphqlClient/persistedQuery-fetch/test.ts

@@ -44,6 +44,7 @@ sentryTest('should update spans for GraphQL persisted query fetch requests', asy
       type: 'fetch',
       'http.method': 'POST',
       'http.url': 'http://sentry-test.io/graphql',
+      'url.full': 'http://sentry-test.io/graphql',
       url: 'http://sentry-test.io/graphql',
       'server.address': 'sentry-test.io',
       'sentry.op': 'http.client',