[dependabot]

Bumps io.sentry:sentry from 8.60.0 to 8.61.0.

Release notes

Sourced from io.sentry:sentry's releases.

8.61.0

Fixes

• Session Replay: Backfill release, environment and SDK info for replays sent on the next launch after the app was killed or crashed (#6253)
• Fix SDK callback error handling (#6140)
  • Drop telemetry when a beforeSend* callback throws and report it using DiscardReason.CALLBACK_ERROR.
  • Drop transactions when tracesSampler throws instead of inheriting the parent sampling decision or falling back to tracesSampleRate (#6163).
  • Drop spans when beforeSpan throws without disrupting requests, covering OkHttp, OpenFeign, GraphQL, Ktor, and Apollo—including Apollo 5 (#6167, #6238).
  • Drop telemetry and record callback_error when a customer event processor throws instead of continuing with a potentially partially processed item. SDK-owned processor failures are logged and processing continues.
  • Drop breadcrumbs when beforeBreadcrumb throws instead of storing exception details on the breadcrumb.
  • No longer fail Spring requests when a TransactionNameProvider throws, falling back to <unlabeled transaction> (#6241).
  • No longer fail Spring requests when a SentryUserProvider throws and overwrite the user with an empty user object (#6240).
  • Disable profiling when profilesSampler throws instead of falling back to profilesSampleRate or inheriting the parent profiling decision (#6164).
  • Report attached profiles dropped by transaction callback errors as callback_error in client reports and OnDiscardCallback (#6166).
  • Skip replay capture when beforeErrorSampling throws while retaining the error event (#6165).
  • Skip Android screenshots or view hierarchies when their capture callbacks throw while retaining the error event (#6167).
  • Keep the Android feedback form available when its options configurator throws (#6239).
  • Isolate nonfatal callback throwables while continuing to propagate fatal JVM errors (#6251).

Internal

• Hold the hostname cache on SentryOptions instead of a static singleton (#6117)

Dependencies

• Bump Native SDK from v0.17.2 to v0.17.3 (#6250)
  • changelog
  • diff

Changelog

Sourced from io.sentry:sentry's changelog.

8.61.0

Fixes

• Session Replay: Backfill release, environment and SDK info for replays sent on the next launch after the app was killed or crashed (#6253)
• Fix SDK callback error handling (#6140)
  • Drop telemetry when a beforeSend* callback throws and report it using DiscardReason.CALLBACK_ERROR.
  • Drop transactions when tracesSampler throws instead of inheriting the parent sampling decision or falling back to tracesSampleRate (#6163).
  • Drop spans when beforeSpan throws without disrupting requests, covering OkHttp, OpenFeign, GraphQL, Ktor, and Apollo—including Apollo 5 (#6167, #6238).
  • Drop telemetry and record callback_error when a customer event processor throws instead of continuing with a potentially partially processed item. SDK-owned processor failures are logged and processing continues.
  • Drop breadcrumbs when beforeBreadcrumb throws instead of storing exception details on the breadcrumb.
  • No longer fail Spring requests when a TransactionNameProvider throws, falling back to <unlabeled transaction> (#6241).
  • No longer fail Spring requests when a SentryUserProvider throws and overwrite the user with an empty user object (#6240).
  • Disable profiling when profilesSampler throws instead of falling back to profilesSampleRate or inheriting the parent profiling decision (#6164).
  • Report attached profiles dropped by transaction callback errors as callback_error in client reports and OnDiscardCallback (#6166).
  • Skip replay capture when beforeErrorSampling throws while retaining the error event (#6165).
  • Skip Android screenshots or view hierarchies when their capture callbacks throw while retaining the error event (#6167).
  • Keep the Android feedback form available when its options configurator throws (#6239).
  • Isolate nonfatal callback throwables while continuing to propagate fatal JVM errors (#6251).

Internal

• Hold the hostname cache on SentryOptions instead of a static singleton (#6117)
• Measure the hostname cache TTL on the monotonic ticker the options provide, so that a device time change no longer shortens or extends it (#6100)

Dependencies

• Bump Native SDK from v0.17.2 to v0.17.3 (#6250)
  • changelog
  • diff

Commits

• 9998c98 release: 8.61.0
• e553354 fix(replay): Backfill release, environment and SDK for replays from the previ...
• 00442ad ref(core): Hold the hostname cache on SentryOptions (JAVA-579) (#6117)
• 48811f6 ci: Run Build job on Bitrise tahoe runners (#6226)
• e6ec71a fix(core): Handle callback errors (#6140)
• 9122a68 chore(deps): bump the github-actions group with 5 updates (#6246)
• 5ec987f chore: update scripts/update-sentry-native-ndk.sh to 0.17.3 (#6250)
• fb3079b docs(metrics): Explain metric unit API design (#6087)
• e017726 Merge commit 'c3a71c1b21bb3de41245e5694b14213204c2d783'
• c3a71c1 ci(craft): Give every registry entry the metadata craft needs for new package...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #88.