Skip to content

chore(deps): bump @sentry/browser from 8.51.0 to 10.39.0#8

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sentry/browser-10.39.0
Open

chore(deps): bump @sentry/browser from 8.51.0 to 10.39.0#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sentry/browser-10.39.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Feb 24, 2026

Bumps @sentry/browser from 8.51.0 to 10.39.0.

Release notes

Sourced from @​sentry/browser's releases.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.39.0

Important Changes

  • feat(tanstackstart-react)!: Export Vite plugin from @sentry/tanstackstart-react/vite subpath (#19182)

    The sentryTanstackStart Vite plugin is now exported from a dedicated subpath. Update your import:

    - import { sentryTanstackStart } from '@sentry/tanstackstart-react';
    + import { sentryTanstackStart } from '@sentry/tanstackstart-react/vite';
  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

... (truncated)

Commits
  • ab54c5c Make @sentry/opentelemetry not a peer dep in node-core
  • f822e69 chore: Lint lerna.json
  • c4708d2 release: 10.39.0
  • b5e3094 chore: Revert to lerna v8 (#19294)
  • 9dea581 Merge pull request #19281 from getsentry/prepare-release/10.39.0
  • 12e467f meta(changelog): Update changelog for 10.39.0
  • d7df7d4 ref(sveltekit): Use untrack to read route id without invalidation (#19272)
  • 24b2ef2 fix(sveltekit): Detect used adapter via svelte.config.js (#19270)
  • e051be4 feat(node-core): Add outgoing fetch trace propagation to light mode (#19262)
  • eaf297f ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#19258)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 8.51.0 to 10.39.0.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.51.0...10.39.0)

---
updated-dependencies:
- dependency-name: "@sentry/browser"
  dependency-version: 10.39.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Feb 24, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Feb 24, 2026

Assignees

The following users could not be added as assignees: protocol-galileo. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Feb 24, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​sentry/​browser@​8.51.0 ⏵ 10.39.079 -2010091 +196100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants