Skip to content

Conversation

@isaacs
Copy link
Member

@isaacs isaacs commented Dec 12, 2025

Explicitly enable any usage in typescript in:

  • dev-packages, since those are largely integration and E2E tests. (This is done with the addition of a dev-packages/.eslintrc.js file.)
  • packages/*/test/, since those are all tests. (This is done with a rule override added to the root .eslintrc.js file.)
  • Several one-off allowances, generally for vendored types from third party sources, and cases involving method overwriting that TypeScript can't follow. (These are done with file/line overrides, explicit as casting, and adding type inference to the isInstanceOf method.)

In other places (ie, in exported production code paths), replace any with unknown, and upgrade the @typescript/no-explicit-any lint rule to an error.

This silences a lot of eslint warnings that were habitually ignored, and encourages us to not opt out of strict type safety in our exported code.

Closes #18489 (added automatically)

@github-actions
Copy link
Contributor

github-actions bot commented Dec 12, 2025

node-overhead report 🧳

Note: This is a synthetic benchmark with a minimal express app and does not necessarily reflect the real-world performance impact in an application.

Scenario Requests/s % of Baseline Prev. Requests/s Change %
GET Baseline 9,066 - 11,561 -22%
GET With Sentry 1,795 20% 1,986 -10%
GET With Sentry (error only) 6,160 68% 7,859 -22%
POST Baseline 1,204 - 1,188 +1%
POST With Sentry 595 49% 583 +2%
POST With Sentry (error only) 1,062 88% 1,047 +1%
MYSQL Baseline 3,378 - 4,051 -17%
MYSQL With Sentry 531 16% 570 -7%
MYSQL With Sentry (error only) 2,737 81% 3,351 -18%

View base workflow run

@isaacs isaacs force-pushed the isaacschlueter/any-to-unknown branch 2 times, most recently from ab3704a to 28f73dd Compare December 12, 2025 18:33
Copy link
Member

@Lms24 Lms24 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot for taking this on! Let's find a solution for the subtle breakage (see comments) but otherwise I think this is a really nice improvement and hopefully prevents us from using any without good reason in the future.

// Based on Kamil Ogórek's work on:
// https://github.com/supabase-community/sentry-integration-js

/* eslint-disable @typescript-eslint/no-explicit-any */
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Should we think about splitting this file up into type definitons and our functionality? My thinking is for type definitions the file-wide explicit any disabling makes sense but it could let stuff slip through in the functions we export. WDYT?

(feel free to disregad, there might be a good reason I'm missing to disable it also for the exported functions)

*/
export interface ExtendedError extends Error {
[key: string]: any;
[key: string]: unknown;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: This type is publicly exported. I think this is a (subtle) breaking change, right?

Update: I found a few more changes below with the same issue. I think in most cases the affected types are only supposed to be used on objects users would pass to the SDK (in which case, it's on us to do more through checking). But nothing holds them back from also working with said objects in which case TS could break their builds after updating. I'm leaning towards avoiding this kind of subtle breakage (but definitely fixing it in v11) but also happy to be convinced otherwise :D

WDYT?

*/
export interface ExtractedNodeRequestData {
[key: string]: any;
[key: string]: unknown;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: this is also exported, so same question as above

*/
export interface CustomSamplingContext {
[key: string]: any;
[key: string]: unknown;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: this is also exported, so same question as above

showEmail={options.showEmail || options.isEmailRequired}
defaultName={(userKey && user?.[userKey.name]) || ''}
defaultEmail={(userKey && user?.[userKey.email]) || ''}
defaultName={String((userKey && user?.[userKey.name]) || '')}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess this comes from the type change in User. Wondering if this would also apply to anyone outside of our SDK code. See comment above

Explicitly enable `any` usage in typescript in:

- `dev-packages`, since those are largely integration and E2E tests.
  (This is done with the addition of a `dev-packages/.eslintrc.js`
  file.)
- `packages/*/test/`, since those are all tests. (This is done with a
  rule override added to the root `.eslintrc.js` file.)
- Several one-off allowances, generally for vendored types from third
  party sources, and cases involving function type extension/overriding
  that TypeScript can't follow. (These are done with file/line
  overrides, explicit `as` casting, and adding type inference to the
  `isInstanceOf` method.)

In other places (ie, in exported production code paths), replace `any`
with `unknown`, and upgrade the `@typescript/no-explicit-any` lint rule
to an error.

This silences a lot of eslint warnings that were habitually ignored, and
encourages us to not opt out of strict type safety in our exported code.
@isaacs isaacs force-pushed the isaacschlueter/any-to-unknown branch from 28f73dd to 9fcac11 Compare December 15, 2025 18:40
actionTransformer: (action: string) => any;
stateTransformer: (state: Record<string, unknown>) => any;
actionTransformer: (action: string) => unknown;
stateTransformer: (state: Record<string, unknown>) => Record<string, unknown>;
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: stateTransformer return type doesn't match runtime null handling (Bugbot Rules)

The stateTransformer return type changed from any to Record<string, unknown>, but the runtime code at line 101 explicitly checks if (typeof allStates !== 'undefined' && allStates !== null), indicating that returning null was a valid use case to disable state tracking. Users who previously passed stateTransformer: () => null will now get TypeScript errors even though the runtime still handles this case. This is a breaking change to a public API (createSentryPiniaPlugin accepts this option) that could break existing user code. Flagging per the review rules about public API changes.

Fix in Cursor Fix in Web

vars?: { [key: string]: unknown };
debug_id?: string;
module_metadata?: any;
module_metadata?: unknown;
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: StackFrame type change is a public breaking change (Bugbot Rules)

The StackFrame interface is publicly exported from @sentry/core (verified in index.ts line 453). The vars property changed from { [key: string]: any } to { [key: string]: unknown } and module_metadata changed from any to unknown. This is a breaking change for users who access these properties without type narrowing, as unknown requires explicit type checks or assertions unlike any. This change wasn't flagged in the PR discussion unlike similar changes to User, ExtendedError, etc. Flagging per the review rules about public API changes.

Fix in Cursor Fix in Web

* @returns A boolean representing the result.
*/
export function isInstanceOf(wat: any, base: any): boolean {
export function isInstanceOf<T>(wat: unknown, base: { new (...args: any[]): T }): wat is T {
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: isInstanceOf public API signature is breaking change (Bugbot Rules)

The isInstanceOf function is publicly exported from @sentry/core and its signature changed from (wat: any, base: any): boolean to <T>(wat: unknown, base: { new (...args: any[]): T }): wat is T. This restricts the base parameter to only accept constructor types, whereas previously it accepted any. Users who called isInstanceOf(someValue, nonConstructorValue) will now get TypeScript errors, even though the runtime behavior is unchanged (the try-catch handles non-constructors). This wasn't flagged in the PR discussion. Flagging per the review rules about public API signature changes.

Fix in Cursor Fix in Web

@github-actions
Copy link
Contributor

size-limit report 📦

Path Size % Change Change
@sentry/browser 24.81 kB - -
@sentry/browser - with treeshaking flags 23.3 kB - -
@sentry/browser (incl. Tracing) 41.56 kB - -
@sentry/browser (incl. Tracing, Profiling) 46.15 kB - -
@sentry/browser (incl. Tracing, Replay) 79.98 kB - -
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 69.7 kB - -
@sentry/browser (incl. Tracing, Replay with Canvas) 84.65 kB - -
@sentry/browser (incl. Tracing, Replay, Feedback) 96.9 kB +0.01% +3 B 🔺
@sentry/browser (incl. Feedback) 41.52 kB +0.01% +3 B 🔺
@sentry/browser (incl. sendFeedback) 29.49 kB - -
@sentry/browser (incl. FeedbackAsync) 34.48 kB - -
@sentry/react 26.52 kB - -
@sentry/react (incl. Tracing) 43.76 kB - -
@sentry/vue 29.27 kB - -
@sentry/vue (incl. Tracing) 43.37 kB - -
@sentry/svelte 24.82 kB - -
CDN Bundle 27.24 kB - -
CDN Bundle (incl. Tracing) 42.23 kB - -
CDN Bundle (incl. Tracing, Replay) 78.75 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) 84.21 kB - -
CDN Bundle - uncompressed 80.04 kB - -
CDN Bundle (incl. Tracing) - uncompressed 125.39 kB - -
CDN Bundle (incl. Tracing, Replay) - uncompressed 241.42 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 254.18 kB - -
@sentry/nextjs (client) 45.98 kB - -
@sentry/sveltekit (client) 41.93 kB - -
@sentry/node-core 51.5 kB - -
@sentry/node 160.31 kB -0.01% -1 B 🔽
@sentry/node - without tracing 92.91 kB - -
@sentry/aws-serverless 108.4 kB -0.04% -36 B 🔽

View base workflow run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore(lint): prefer 'unknown' to 'any', fix lint warnings

3 participants