@sentry/browser 11.10.0

on Node.js Yarn

Important Changes

• feat: Add a managed tunnel that the SDK derives from the DSN (#25199, #25200, #25783)

  Set tunnel: true in your browser Sentry.init call to send events through your own server. This helps when ad blockers block requests to Sentry. The browser derives the tunnel path from the DSN, so older and newer builds of your client and server always agree on the path.

  To serve the tunnel, add serveTunnelIntegration() to your server SDK. Astro, Nuxt, Nitro, React Router, Remix 3, SolidStart, SvelteKit and TanStack Start then answer tunnel requests automatically:

  // browser
  Sentry.init({ dsn, tunnel: true });
  
  // server
  Sentry.init({ dsn, integrations: [Sentry.serveTunnelIntegration()] });

  If the browser uses a different DSN than the server, set serveTunnelIntegration({ allowedDsns: [browserDsn] }). For other setups, the server SDKs export handleTunnelRequestIfMatched, handleTunnelRequest, isTunnelRequest and getTunnelPath:

  app.use((req, res, next) => Sentry.handleTunnelRequestIfMatched(req, res) ?? next());

  The request option of handleTunnelRequest is deprecated and will be removed in v12.

• feat: Make span origins spec compliant (#25602)

  Some span origins changed their names to follow the trace origin spec:

  • auto.amqplib.* is now auto.queue.amqplib.*, and auto.kafkajs.* is now auto.queue.kafkajs.*.
  • auto.vercelai.channel is now auto.ai.vercelai.
  • auto.firebase.firestore is now auto.db.firebase.firestore, and auto.firebase.functions is now auto.function.firebase.
  • auto.aws.aws_sdk is now auto.{rpc,db,queue,ai}.aws_sdk, with the category from the span op.
  • auto.aws_lambda is now auto.function.aws_serverless.
  • auto.mcp.notification is now auto.function.mcp_server.notification.
  • auto.db.cloudflare.durable_object.sql is now auto.db.cloudflare.durable_object_sql.
  • auto.http.browser.{lcp,cls,inp} is now auto.ui.browser.{lcp,cls,inp}.

  If you have ignoreSpans rules, queries or alerts on the old origins, change them to use the new origins.

• feat(bun): Add incoming request options and request sessions to bunServerIntegration (#25580)

  bunServerIntegration now accepts the same options as denoServeIntegration: ignoreRequestBody, ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated, onSpanEnd, sessions and sessionFlushingDelayMS. The callbacks receive the web Request.

  Bun.serve now records a request session for each incoming request. Sessions are sent only when a release is set. To turn them off, set bunServerIntegration({ sessions: false }).

  ignoreStaticAssets defaults to true, so Bun.serve no longer creates spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set bunServerIntegration({ ignoreStaticAssets: false }). Bun.serve spans also follow the client's tracing configuration by default, so the integration does not start spans when tracing is disabled. Errors thrown for OPTIONS and HEAD requests are now captured.

• feat(bun): Inject debug IDs and upload source maps in sentryBunPlugin (#25670)

  sentryBunPlugin from @sentry/bun/plugin now accepts the same options as sentryEsbuildPlugin (org, project, authToken, release, sourcemaps, ...). When Bun.build writes source maps to outdir, the plugin injects the debug ID that Bun writes into each bundle, injects the release, and uploads the source maps at the end of the build. You no longer need to run sentry sourcemap inject and sentry sourcemap upload after the build.

  Like the other bundler plugins, sentryBunPlugin now sends build telemetry and injects the release it detects (for example, from git). To turn off telemetry, set telemetry: false.

• feat(cloudflare): Add incoming request span options to httpServerIntegration (#25582)

  Cloudflare's httpServerIntegration now accepts ignoreIncomingRequests, ignoreStaticAssets, spans, onSpanCreated and onSpanEnd, with the same meaning as in the Node, Deno and Bun integrations. The callbacks receive the web Request.

  ignoreStaticAssets defaults to true, so workers no longer create spans for GET requests to common static assets such as favicon.ico, robots.txt or *.js files. To keep these spans, set httpServerIntegration({ ignoreStaticAssets: false }). Request spans also follow the client's tracing configuration by default, so the SDK does not start them when tracing is disabled. If ignoreRequestBody throws, the request no longer fails, and the SDK skips the body.

• feat(cloudflare): Let users configure the channel integrations (#25584)

  When the @sentry/cloudflare/vite plugin bundles an instrumented package (for example pg or openai), the SDK adds the matching integration with its default options. @sentry/cloudflare now exports these integrations, so you can set their options, for example in instrument.server.ts:

  export default Sentry.defineCloudflareOptions(env => ({
    dsn: env.SENTRY_DSN,
    integrations: [Sentry.openAIIntegration({ recordInputs: false, recordOutputs: false })],
  }));

  These integrations need the vite plugin. Without it, they record nothing, and with debug: true the SDK logs a warning.

• feat(node): Add onSpanEnd to httpIntegration (#25581)

  httpIntegration and httpServerSpansIntegration now accept onSpanEnd, a hook that runs when the response for an incoming request finishes, before its span ends. Use it to change the span based on the response. Deno and Bun already have this option.

• feat(node, bun, deno, cloudflare): Align portable exports across server SDKs (#25583)

  Node, Bun, Deno and Cloudflare now export the same helpers from @sentry/core and @sentry/server-utils where they work on that runtime:

  • Node and Bun now export moduleMetadataIntegration, instrumentPostgresJsSql, instrumentCreateReactAgent, awsIntegration and the FlueOptions type. awsIntegration was already in their default integrations.
  • Deno and Cloudflare now export parameterize and instrumentStateGraphCompile.
  • Bun and Cloudflare now export the Log and LogSeverityLevel types.
  • Deno now exports fastifyIntegration, which was already in its default integrations.

• feat(nuxt): Start the server SDK on the Nuxt Vite server (experimental) (#25524)

  Sentry now supports Node.js production builds using Nuxt 4.6's experimental Vite server (server: { builder: 'vite' }). Your sentry.server.config loads automatically, enabling request tracing and automatic database spans for supported libraries.

  Development mode, Cloudflare, automatic capture of server rendering errors, and connecting server and browser traces via HTML meta tags are not yet supported. This experimental support may change in minor releases.

• ref(deno, bun): Use a shared request handler wrapper for Deno.serve and Bun.serve (#25586, #25587)

  Deno.serve and Bun.serve now use the same request handler wrapper, which Cloudflare will also use. On both runtimes, errors in OPTIONS and HEAD requests now carry the request data, and the SDK keeps every Set-Cookie header of a response instead of only the last one.

  For Deno users:

  • When the source of a streamed response fails, the SDK now captures the error and marks the span as failed.
  • The SDK no longer reads a streamed response ahead of the client.

  Bun.serve spans now follow the Sentry conventions for http.server spans, as on Node, Deno and Cloudflare:

  • url.template is now http.route. Routes without parameters also get http.route and the route source.
  • url.domain is now server.address.
  • A request to / gets the route source and the name GET /.
  • Spans also get user_agent.original and http.request.body.size.

Other Changes

• chore(deps): Bump rrweb to 2.45.0 (#25794)
• feat: Export the Node bundler plugins from SDKs that wrap @sentry/node (#25536)
• feat(cloudflare): instrument Workers KV bindings (#25488)
• feat(nextjs): Warn when Next.js production builds miss the instrumentation file (#25603)
• feat(react-router): Support renderToReadableStream in createSentryHandleRequest (#25254)
• feat(server-utils): Emit execute_tool spans for Anthropic's beta.sessions.events.toolRunner() (#25554)
• feat(server-utils): Record Workers AI Clairic calls as gen_ai.extract spans (#25624)
• feat(server-utils): Instrument together-ai 1.x (#25823)
• fix(browser): Preserve empty stacks in continuous profiles (#25764)
• fix(browser): resolve request URLs against location.href in tracing (#25784)
• fix(build): Make CJS re-exports visible to Node ESM imports (#25599)
• fix(bun): Add systemErrorIntegration to default integrations (#25681)
• fix(cloudflare): Bind a default re-export with var in the Vite transform (#25663)
• fix(cloudflare): Do not add back channel integrations the user removed (#25585)
• fix(cloudflare): Skip comments when locating the default keyword in the Vite transform (#25741)
• fix(core): allow project arrays in framework build options (#25534)
• fix(core): Drop sampled-out errors before they take a promise buffer slot (#25751)
• fix(core): End node:http client spans when the response is destroyed (#25503)
• fix(core): Preserve AI proxy property references (#22474)
• fix(core): Resolve relative URLs when enhancing fetch error messages (#25555)
• fix(feedback): Wait for frames without the form before capturing the screenshot (#25658)
• fix(hono): Make the Hono middleware types compile on Hono 5 (#25452)
• fix(node): Flush buffered streamed spans on process exit (#25539)
• fix(node): Read module versions from the isolated layouts of pnpm and Bun (#25526)
• fix(node): Set the eve conversation id on model.started for eve 0.84+ (#25809)
• fix(node): Skip spans for outgoing requests to Sentry via undici fetch and node:http (#25441)
• fix(node): Use the request method for Hapi routes with multiple methods (#25527)
• fix(nuxt,nitro): Accept Nitro 3 betas without narrowing peer support (#25815)
• fix(opentelemetry): Convert OpenTelemetry performance.now() timestamps (#25790)
• fix(react): Avoid double slashes in manifest route names (#25770)
• fix(react): Parameterize React Router transactions with encoded params (#25639)
• fix(remix): Drop Remix 3 release candidates from the peer range (#25808)
• fix(replay): Apply attribute masking to breadcrumb messages (#25180)
• fix(server-utils): Cap the runs the LangChain callback handler keeps open (#25595)
• fix(server-utils): Keep OpenAI streamed tool calls that have no index (#25622)
• fix(server-utils): Keep OpenRouter evaluation confidence and legend on Vercel AI spans (#25644)
• fix(server-utils): Nest Flue runs on Node under the request that dispatched them (#25549)
• fix(server-utils): Record AI SDK tool spans for tools run outside its tool loop (#25820)
• fix(server-utils): Use cumulative input and cache token counts from streamed message_delta (#25623)
• fix(server-utils): Use the stored pi-durable session id as conversation id (#25792)
• fix(tanstackstart-react): Unminify server errors in Nitro builds (#25360)

Work in this release was contributed by @4ktLuffy, @faizansaiyed123, @itisrmk, @kunal649, @kyrylolvov, @larcane97, @lfantone, @pcbeingused333, @psh4607, and @seongwon030. Thank you for your contributions!

Bundle size 📦