Merge pull request #19085 from getsentry/prepare-release/10.38.0

meta(changelog): Update changelog for 10.38.0

Author: chargome

.claude/skills/add-cdn-bundle/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: add-cdn-bundle
+description: Create a new CDN bundle for the browser package with specified features
+argument-hint: <feature-combo> (e.g., replay.logs.metrics, tracing.logs, tracing.replay.feedback.logs.metrics)
+---
+
+# Add CDN Bundle Skill
+
+This skill creates a new CDN bundle for the browser package that includes a specific combination of features.
+
+## Input
+
+The user provides a feature combination using dot notation:
+
+- `logs.metrics` - Bundle with logs and metrics
+- `replay.logs.metrics` - Bundle with replay, logs, and metrics
+- `tracing.replay.logs` - Bundle with tracing, replay, and logs
+- `tracing.replay.feedback.logs.metrics` - Full featured bundle
+
+**Feature order in bundle names:** `tracing` → `replay` → `feedback` → `logs` → `metrics`
+
+## Instructions
+
+Follow the detailed guide at [docs/adding-cdn-bundle.md](../../../docs/adding-cdn-bundle.md) to create the bundle.
+
+### Quick Reference - Naming Conventions
+
+Given a feature combination, derive these variants:
+
+| Placeholder                     | Example (`replay.logs.metrics`) |
+| ------------------------------- | ------------------------------- |
+| `{FEATURE_COMBO}`               | `replay.logs.metrics`           |
+| `{feature_combo}`               | `replay_logs_metrics`           |
+| `{featureCombo}`                | `replayLogsMetrics`             |
+| `{Human Readable Features}`     | `Replay, Logs, Metrics`         |
+| `{Human Readable Feature List}` | `Replay, Logs, and Metrics`     |
+
+### Quick Reference - Files to Create/Modify
+
+1. **Create** `packages/browser/src/index.bundle.{FEATURE_COMBO}.ts`
+2. **Create** `packages/browser/test/index.bundle.{FEATURE_COMBO}.test.ts`
+3. **Modify** `packages/browser/rollup.bundle.config.mjs`
+4. **Modify** `.size-limit.js`
+5. **Modify** `dev-packages/browser-integration-tests/package.json`
+6. **Modify** `dev-packages/browser-integration-tests/utils/generatePlugin.ts`
+7. **Modify** `.github/workflows/build.yml`
+
+### Verification Steps
+
+After making changes:
+
+```bash
+yarn lint
+cd packages/browser && yarn build:dev
+cd packages/browser && yarn test
+```

.cursor/commands/add_cdn_bundle.md

@@ -0,0 +1,35 @@
+# Add CDN Bundle for `{FEATURE_COMBO}`
+
+Create a new CDN bundle for the browser package that includes `{FEATURE_COMBO}` (e.g., `replay.logs.metrics`, `tracing.logs`, etc.).
+
+## Instructions
+
+Follow the detailed guide at [docs/adding-cdn-bundle.md](../../docs/adding-cdn-bundle.md) to create the bundle.
+
+## Quick Reference - Naming Conventions
+
+| Placeholder                     | Example (`replay.logs.metrics`) |
+| ------------------------------- | ------------------------------- |
+| `{FEATURE_COMBO}`               | `replay.logs.metrics`           |
+| `{feature_combo}`               | `replay_logs_metrics`           |
+| `{featureCombo}`                | `replayLogsMetrics`             |
+| `{Human Readable Features}`     | `Replay, Logs, Metrics`         |
+| `{Human Readable Feature List}` | `Replay, Logs, and Metrics`     |
+
+## Quick Reference - Files to Create/Modify
+
+1. **Create** `packages/browser/src/index.bundle.{FEATURE_COMBO}.ts`
+2. **Create** `packages/browser/test/index.bundle.{FEATURE_COMBO}.test.ts`
+3. **Modify** `packages/browser/rollup.bundle.config.mjs`
+4. **Modify** `.size-limit.js`
+5. **Modify** `dev-packages/browser-integration-tests/package.json`
+6. **Modify** `dev-packages/browser-integration-tests/utils/generatePlugin.ts`
+7. **Modify** `.github/workflows/build.yml`
+
+## Verification Steps
+
+After making changes:
+
+1. Run `yarn lint` to check for linting issues
+2. Run `cd packages/browser && yarn build:dev` to verify TypeScript compilation
+3. Run `cd packages/browser && yarn test` to run the unit tests

.github/dependabot.yml

@@ -12,21 +12,21 @@ updates:
     directory: '/'
     schedule:
       interval: 'weekly'
-    allow:
-      - dependency-name: '@sentry/*'
-      - dependency-name: '@playwright/test'
-      - dependency-name: '@opentelemetry/*'
     ignore:
       - dependency-name: '@opentelemetry/instrumentation'
       - dependency-name: '@opentelemetry/instrumentation-*'
+      - dependency-name: 'typescript'
     groups:
       opentelemetry:
         patterns:
           - '@opentelemetry/*'
+      remix:
+        patterns:
+          - '@remix-run/*'
     versioning-strategy: increase
     commit-message:
       prefix: feat
-      prefix-development: feat
+      prefix-development: chore
       include: scope
     exclude-paths:
-      - 'dev-packages/e2e-tests/test-applications/'
+      - 'dev-packages/e2e-tests/test-applications/**'

.github/workflows/build.yml

@@ -566,21 +566,24 @@ jobs:
           - esm
           - bundle
           - bundle_min
+          - bundle_logs_metrics
           - bundle_replay
+          - bundle_replay_logs_metrics
           - bundle_tracing
           - bundle_tracing_logs_metrics
           - bundle_tracing_replay
+          - bundle_tracing_replay_logs_metrics
           - bundle_tracing_replay_feedback
-          - bundle_tracing_replay_feedback_min
           - bundle_tracing_replay_feedback_logs_metrics
+          - bundle_tracing_replay_feedback_logs_metrics_min
         project:
           - chromium
         include:
           # Only check all projects for full bundle
           # We also shard the tests as they take the longest
-          - bundle: bundle_tracing_replay_feedback_min
+          - bundle: bundle_tracing_replay_feedback_logs_metrics_min
             project: 'webkit'
-          - bundle: bundle_tracing_replay_feedback_min
+          - bundle: bundle_tracing_replay_feedback_logs_metrics_min
             project: 'firefox'
           - bundle: esm
             project: chromium

.github/workflows/external-contributors.yml

@@ -37,13 +37,13 @@ jobs:
 
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ vars.GITFLOW_APP_ID }}
           private-key: ${{ secrets.GITFLOW_APP_PRIVATE_KEY }}
 
       - name: Create PR with changes
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
         with:
           token: ${{ steps.app-token.outputs.token }}
           commit-message: 'chore: Add external contributor to CHANGELOG.md'

.github/workflows/gitflow-sync-develop.yml

@@ -27,7 +27,7 @@ jobs:
 
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ vars.GITFLOW_APP_ID }}
           private-key: ${{ secrets.GITFLOW_APP_PRIVATE_KEY }}

.gitignore

@@ -64,3 +64,6 @@ packages/gatsby/gatsby-node.d.ts
 
 #junit reports
 packages/**/*.junit.xml
+
+# Local Claude Code settings that should not be committed
+.claude/settings.local.json

.prettierignore

@@ -2,3 +2,6 @@ packages/browser/test/loader.js
 packages/replay-worker/examples/worker.min.js
 dev-packages/browser-integration-tests/fixtures
 **/test.ts-snapshots/**
+
+/.nx/cache
+/.nx/workspace-data

.size-limit.js

@@ -186,18 +186,36 @@ module.exports = [
     gzip: true,
     limit: '43 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Logs, Metrics)',
+    path: createCDNPath('bundle.logs.metrics.min.js'),
+    gzip: true,
+    limit: '29 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Logs, Metrics)',
     path: createCDNPath('bundle.tracing.logs.metrics.min.js'),
     gzip: true,
     limit: '44 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Replay, Logs, Metrics)',
+    path: createCDNPath('bundle.replay.logs.metrics.min.js'),
+    gzip: true,
+    limit: '69 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Replay)',
     path: createCDNPath('bundle.tracing.replay.min.js'),
     gzip: true,
     limit: '80 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Tracing, Replay, Logs, Metrics)',
+    path: createCDNPath('bundle.tracing.replay.logs.metrics.min.js'),
+    gzip: true,
+    limit: '81 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Replay, Feedback)',
     path: createCDNPath('bundle.tracing.replay.feedback.min.js'),
@@ -225,20 +243,41 @@ module.exports = [
     brotli: false,
     limit: '128 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Logs, Metrics) - uncompressed',
+    path: createCDNPath('bundle.logs.metrics.min.js'),
+    gzip: false,
+    brotli: false,
+    limit: '86 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed',
     path: createCDNPath('bundle.tracing.logs.metrics.min.js'),
     gzip: false,
     brotli: false,
     limit: '130 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed',
+    path: createCDNPath('bundle.replay.logs.metrics.min.js'),
+    gzip: false,
+    brotli: false,
+    limit: '209 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Replay) - uncompressed',
     path: createCDNPath('bundle.tracing.replay.min.js'),
     gzip: false,
     brotli: false,
     limit: '245 KB',
   },
+  {
+    name: 'CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed',
+    path: createCDNPath('bundle.tracing.replay.logs.metrics.min.js'),
+    gzip: false,
+    brotli: false,
+    limit: '250 KB',
+  },
   {
     name: 'CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed',
     path: createCDNPath('bundle.tracing.replay.feedback.min.js'),

CHANGELOG.md

@@ -4,6 +4,64 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+## 10.38.0
+
+### Important Changes
+
+- **feat(tanstackstart-react): Auto-instrument request middleware ([#18989](https://github.com/getsentry/sentry-javascript/pull/18989))**
+
+The `sentryTanstackStart` Vite plugin now automatically instruments `middleware` arrays in `createFileRoute()`. This captures performance data without requiring manual wrapping with `wrapMiddlewaresWithSentry()`.
+
+### Other Changes
+
+- feat: Use v4.8.0 bundler plugins ([#18993](https://github.com/getsentry/sentry-javascript/pull/18993))
+- feat(browser): Add `logs.metrics` bundle ([#19020](https://github.com/getsentry/sentry-javascript/pull/19020))
+- feat(browser): Add `replay.logs.metrics` bundle ([#19021](https://github.com/getsentry/sentry-javascript/pull/19021))
+- feat(browser): Add `tracing.replay.logs.metrics` bundle ([#19039](https://github.com/getsentry/sentry-javascript/pull/19039))
+- feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 ([#19042](https://github.com/getsentry/sentry-javascript/pull/19042))
+- feat(node): Add AI manual instrumentation exports to Node ([#19063](https://github.com/getsentry/sentry-javascript/pull/19063))
+- feat(wasm): initialised sentryWasmImages for webworkers ([#18812](https://github.com/getsentry/sentry-javascript/pull/18812))
+- fix(core): Classify custom `AggregateError`s as exception groups ([#19053](https://github.com/getsentry/sentry-javascript/pull/19053))
+- fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled ([#19010](https://github.com/getsentry/sentry-javascript/pull/19010))
+- fix(react): Avoid `String(key)` to fix Symbol conversion error ([#18982](https://github.com/getsentry/sentry-javascript/pull/18982))
+- fix(react): Prevent lazy route handlers from updating wrong navigation span ([#18898](https://github.com/getsentry/sentry-javascript/pull/18898))
+
+<details>
+  <summary><strong>Internal Changes</strong></summary>
+- feat(deps-dev): bump @types/rsvp from 4.0.4 to 4.0.9 ([#19038](https://github.com/getsentry/sentry-javascript/pull/19038))
+- ci(build): Run full test suite on new bundle with logs+metrics ([#19065](https://github.com/getsentry/sentry-javascript/pull/19065))
+- ci(deps): bump actions/create-github-app-token from 1 to 2 ([#19028](https://github.com/getsentry/sentry-javascript/pull/19028))
+- ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#19029](https://github.com/getsentry/sentry-javascript/pull/19029))
+- chore: Add external contributor to CHANGELOG.md ([#19005](https://github.com/getsentry/sentry-javascript/pull/19005))
+- chore(aws-serverless): Fix local cache issues ([#19081](https://github.com/getsentry/sentry-javascript/pull/19081))
+- chore(dependabot): Allow all packages to update ([#19024](https://github.com/getsentry/sentry-javascript/pull/19024))
+- chore(dependabot): Update ignore patterns and add more groups ([#19037](https://github.com/getsentry/sentry-javascript/pull/19037))
+- chore(dependabot): Update ignore patterns and add more groups ([#19043](https://github.com/getsentry/sentry-javascript/pull/19043))
+- chore(deps-dev): bump @edge-runtime/types from 3.0.1 to 4.0.0 ([#19032](https://github.com/getsentry/sentry-javascript/pull/19032))
+- chore(deps-dev): bump @vercel/nft from 0.29.4 to 1.3.0 ([#19030](https://github.com/getsentry/sentry-javascript/pull/19030))
+- chore(deps): bump @actions/artifact from 2.1.11 to 5.0.3 ([#19031](https://github.com/getsentry/sentry-javascript/pull/19031))
+- chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#19009](https://github.com/getsentry/sentry-javascript/pull/19009))
+- chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#19012](https://github.com/getsentry/sentry-javascript/pull/19012))
+- chore(deps): Bump trpc v11 dependency in e2e test ([#19061](https://github.com/getsentry/sentry-javascript/pull/19061))
+- chore(deps): Bump wrangler to 4.61.0 ([#19023](https://github.com/getsentry/sentry-javascript/pull/19023))
+- chore(deps): Upgrade @remix-run deps to 2.17.4 ([#19040](https://github.com/getsentry/sentry-javascript/pull/19040))
+- chore(deps): Upgrade `next` versions 15 and 16 ([#19057](https://github.com/getsentry/sentry-javascript/pull/19057))
+- chore(deps): Upgrade Lerna to v8 ([#19050](https://github.com/getsentry/sentry-javascript/pull/19050))
+- chore(deps): Upgrade next to 14.2.35 ([#19055](https://github.com/getsentry/sentry-javascript/pull/19055))
+- chore(deps): Upgrade react-router, @react-router/node, @react-router/serve, @react-router/dev to 7.13.0 ([#19026](https://github.com/getsentry/sentry-javascript/pull/19026))
+- chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#19048](https://github.com/getsentry/sentry-javascript/pull/19048))
+- chore(llm): Ignore local Claude settings ([#18893](https://github.com/getsentry/sentry-javascript/pull/18893))
+- chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#19047](https://github.com/getsentry/sentry-javascript/pull/19047))
+- chore(release): Add generate-changelog script ([#18999](https://github.com/getsentry/sentry-javascript/pull/18999))
+- chore(remix): Upgrade @remix-run/router to ^1.23.2 ([#19045](https://github.com/getsentry/sentry-javascript/pull/19045))
+- chore(solidstart): Bump peer dependencies of @solidjs/start ([#19051](https://github.com/getsentry/sentry-javascript/pull/19051))
+- chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#19018](https://github.com/getsentry/sentry-javascript/pull/19018))
+- chore(tests): Reject messages from unknown origins in integration tests ([#19016](https://github.com/getsentry/sentry-javascript/pull/19016))
+
+</details>
+
+Work in this release was contributed by @harshit078. Thank you for your contribution!
+
 ## 10.37.0
 
 ### Important Changes