chore(deps): update Sentry Android Gradle Plugin to v6.4.0#5974
chore(deps): update Sentry Android Gradle Plugin to v6.4.0#5974github-actions[bot] wants to merge 1 commit intomainfrom
Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 8aea7fd. Configure here.
| } | ||
|
|
||
| export const sentryAndroidGradlePluginVersion = '6.3.0'; | ||
| export const sentryAndroidGradlePluginVersion = '6.4.0'; |
There was a problem hiding this comment.
AGP 6.4.0 bundles SDK 8.38.0 but repo pins 8.37.1
High Severity
Per the PR changelog, AGP 6.4.0 bumps its bundled sentry-android SDK from 8.37.1 to 8.38.0. However, packages/core/android/build.gradle still explicitly declares api 'io.sentry:sentry-android:8.37.1' and debugImplementation 'io.sentry:sentry-spotlight:8.37.1', and packages/core/android/expo-handler/build.gradle still declares compileOnly 'io.sentry:sentry-android:8.37.1'. This introduces a version mismatch that didn't exist with AGP 6.3.0. The repo's own check-android-sdk-mismatch.js CI check is designed to catch and fail on exactly this scenario due to the risk of IllegalStateException: Sentry SDK has detected a mix of versions. Flagged per the dependency update review rule (project-0b61c077c0c2).
Additional Locations (1)
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit 8aea7fd. Configure here.
8aea7fd to
be669e4
Compare
Semver Impact of This PR⚪ None (no version bump detected) 📋 Changelog PreviewThis is how your changes will appear in the changelog.
🤖 This preview updates automatically when you update the PR. |
|
| } | ||
|
|
||
| export const sentryAndroidGradlePluginVersion = '6.3.0'; | ||
| export const sentryAndroidGradlePluginVersion = '6.4.0'; |
There was a problem hiding this comment.
Bug: A version mismatch between the Android Gradle Plugin's bundled SDK (8.38.0) and the declared dependency (8.37.1) will cause a fatal IllegalStateException on Android.
Severity: CRITICAL
Suggested Fix
Update the sentry-android dependency version in packages/core/android/build.gradle from 8.37.1 to 8.38.0 to match the version bundled by the updated Gradle plugin.
Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.
Location: packages/core/plugin/src/withSentryAndroidGradlePlugin.ts#L18
Potential issue: The update to `withSentryAndroidGradlePlugin.ts` implies the use of a
newer Sentry Android Gradle Plugin, which bundles Android SDK version 8.38.0. However,
the corresponding dependency version in `packages/core/android/build.gradle` was not
updated and remains at 8.37.1. This version mismatch between the SDK bundled by the
plugin and the one declared as a dependency is known to cause a fatal
`IllegalStateException: Sentry SDK has detected a mix of versions` at runtime, which
will crash Android applications during initialization.
Did we get this right? 👍 / 👎 to inform future reviews.
Sentry Build Distribution
|


Bumps scripts/update-sentry-android-gradle-plugin.sh from 6.3.0 to 6.4.0.
Auto-generated by a dependency updater.
Changelog
6.4.0
Dependencies
6.4.0-alpha.6
Internal Changes 🔧
Deps
6.4.0-alpha.5
Internal Changes 🔧
Deps
6.4.0-alpha.4
Internal Changes 🔧
Deps
6.4.0-alpha.3
Dependencies