fix(deps): update dependency io.sentry:sentry to v8.47.0

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
io.sentry:sentry	8.19.1 → 8.47.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

getsentry/sentry-java (io.sentry:sentry)

v8.47.0

Compare Source

Behavioral Changes

• SentryOkHttpInterceptor::intercept now throws IOException. This is a source-only and Java-only breaking change (#​5654)

Fixes

• Don't start a redundant UI interaction transaction when a transaction is already bound to the Scope (#​5491)
  • Previously, SentryGestureListener always started a UI transaction and only afterwards skipped binding it to the Scope when a manually-bound transaction already existed, leaving the new transaction to be dropped as an idle transaction without children.
• Fix potential NPE within Scope.endSession() (#​5657)
• Fix memory leak in ReplayIntegration due to persisting executor not being shut down (#​5627)
• Fix AbstractMethodError when compose-ui 1.11+ is used in combination with Modifier.sentryTag() or the Sentry Kotlin compiler plugin (#​5672)

Performance

• Speed up touch gesture target detection on deeply nested view hierarchies by hit-testing in local coordinates instead of calling getLocationOnScreen per view (#​5595)
• Probe class availability without initializing the class during SDK init (#​5635)
• Avoid constructing an exception per view when resolving view ids during view-hierarchy and gesture capture (#​5631)
• Start the frame metrics thread lazily on first collection instead of during SDK init (#​5641)
• Reduce SentryId and SpanId allocation overhead by replacing their per-instance LazyEvaluator (and its lock) with a lightweight lazily-generated String. (#​5645)
• Lazily allocate the ReentrantLock backing AutoClosableReentrantLock to avoid eager lock allocations for SDK objects that never contend during SentryAndroid.init (#​5643)

v8.46.0

Compare Source

Fixes

• Session Replay: Fix network detail response body size being unknown for gzip-compressed responses (#​5592)

Behavioral Changes

• Collections returned by scope (e.g. getBreadcrumbs, getTags, getAttachments) are shared state and should not be mutated. (#​5541)
  • Previously, when going through CombinedScopeView, we were returning a copy where mutations didn't show up in the underlying scopes.
  • This has now changed in order to reduce SDK overhead.
• Date objects returned by SDK data model getters are shared state and should not be mutated. (#​5603)
  • Previously, these getters returned defensive copies for some date fields.
  • This has now changed in order to reduce SDK overhead.

Performance

• Reduce writer buffer size from 8192 to 512 (#​5544)
• Remove redundant event map copies (#​5536)
• Optimize combined scope by adding an early return if only one scope has data (#​5541)
• Reduce model access overhead by avoiding defensive Date copies in SDK data model getters. (#​5603)
• Reduce timestamp parsing and formatting overhead with Sentry-specific ISO-8601 handling. (#​5602)
• Reduce JSON serialization overhead by creating the reflection serializer only when unknown-object fallback serialization is needed. (#​5601)
• Reduce JSON serialization overhead by allocating reflection cycle-tracking state only when reflection serialization is used. (#​5600)
• Reduce context serialization overhead by sorting key snapshots with arrays instead of temporary lists. (#​5599)
• Reduce breadcrumb allocation overhead by creating the Breadcrumb data map only when data is added. (#​5598)
• Reduce JSON serialization overhead by lowering the initial JsonWriter nesting stack size while preserving on-demand growth. (#​5591)
• Reduce timestamp helper overhead by replacing unnecessary Calendar usage in DateUtils with direct Date creation. (#​5589)
• Reduce Android startup overhead by using the default timezone directly on older devices or when no timezone info is available in the locale. (#​5587)

v8.45.0

Compare Source

Features

• On Android 15+ (API 35), the standalone app.start transaction now reports why the OS started the process via app.vitals.start.reason trace data (e.g. launcher, broadcast, service, content_provider), derived from ApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#​5552)

Fixes

• Use System.nanoTime() for cron check-in duration measurement to avoid incorrect durations from wall-clock adjustments (#​5611)
• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#​5597)
• Release MediaMuxer when a replay segment has no encodable frames to avoid a resource leak (#​5583)

Dependencies

• Bump Native SDK from v0.15.1 to v0.15.2 (#​5610)
  • changelog
  • diff

v8.44.1

Compare Source

Fixes

• Fix FirstDrawDoneListener leaking an OnGlobalLayoutListener per registration (#​5567)

Features

• Add experimental SentrySQLiteDriver to sentry-android-sqlite for instrumenting androidx.sqlite.SQLiteDriver (#​5563)
  • To use it, pass SQLiteDriver to SentrySQLiteDriver.create(...)
  • Requires androidx.sqlite:sqlite (2.5.0+) on runtime classpath (typically provided by Room or SQLDelight)

Dependencies

• Bump Native SDK from v0.15.0 to v0.15.1 (#​5570)
  • changelog
  • diff

v8.44.0

Compare Source

Features

• Add enableStandaloneAppStartTracing option to send app start as a standalone transaction instead of attaching it as a child span of the first activity transaction (#​5342)
  • Disabled by default; opt in via options.isEnableStandaloneAppStartTracing = true or manifest meta-data io.sentry.standalone-app-start-tracing.enable
  • Emits a transaction named App Start with op app.start, carrying the existing app start measurements and phase spans (process.load, contentprovider.load, application.load, activity lifecycle spans) as direct children of the root
  • The standalone transaction shares the same traceId as the first ui.load activity transaction so they remain linked in the trace view
  • Also covers non-activity starts (broadcast receivers, services, content providers)

Improvements

• Reduce boxing to improve performance (#​5523, #​5527, #​5551)
• Replace Date with a unix timestamp in SentryNanotimeDate to improve performance (#​5550)
  • SentryNanotimeDate is now marked @ApiStatus.Internal. A new (long unixDateMillis, long nanos) constructor was added, where unixDateMillis is milliseconds since the epoch. The existing (Date, long) constructor is retained but deprecated.

Dependencies

• Upgrade to asyncProfiler 4.4 (#​5418)
• Bump Native SDK from v0.14.2 to v0.15.0 (#​5528)
  • changelog
  • diff

Fixes

• Fix attachments being duplicated on native events that carry scope attachments (#​5548)
• Fix performance collector scheduling many tasks in a row (#​5524)

v8.43.3

Compare Source

Fixes

• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#​5597)

v8.43.2

Compare Source

Improvements

• Improve SDK init performance by replacing java.net.URI with custom string parsing for DSN (#​5448)
• Remove unnecessary boxing to improve performance (#​5520)

Fixes

• Session Replay: Fix VerifyError in Compose masking under DexGuard/R8 obfuscation (#​5507)
• Session Replay: Fix Compose view masking not working on obfuscated/minified builds (#​5503)

v8.43.1

Compare Source

Fixes

• Session Replay: Fix replay recording freezing on screens with continuous animations (#​5489)
• Session Replay: Populate trace_ids in replay events to enable searching replays by trace ID (#​5473)

v8.43.0

Compare Source

Features

• Session Replay: Add ReplayFrameObserver for observing captured replay frames (#​5386)

  SentryAndroid.init(context) { options ->
    options.sessionReplay.frameObserver =
      SentryReplayOptions.ReplayFrameObserver { hint, frameTimestamp, screenName ->
        val bitmap = hint.getAs(TypeCheckHint.REPLAY_FRAME_BITMAP, Bitmap::class.java)
        if (bitmap != null) {
          try {
            // Process the masked replay frame
            myAnalyzer.processFrame(bitmap, frameTimestamp, screenName)
          } finally {
            bitmap.recycle()
          }
        }
      }
  }

• Parse ART memory and garbage collector info from ANR tombstones into ART context (#​5428)

v8.42.0

Compare Source

Features

• Add option to attach raw tombstone protobuf on native crash events (#​5446)
  • Enable via options.isAttachRawTombstone = true or manifest: <meta-data android:name="io.sentry.tombstone.attach-raw" android:value="true" />
• Add API to clear feature flags from scopes (#​5426)
• Add support to configure reporting historical ANRs via AndroidManifest.xml using the io.sentry.anr.report-historical attribute (#​5387)

Dependencies

• Bump Gradle from v9.5.0 to v9.5.1 (#​5419)
  • changelog
  • diff
• Bump Native SDK from v0.14.0 to v0.14.2 (#​5433, #​5441)
  • changelog
  • diff
• Bump SAGP (Sentry Android Gradle Plugin) from v6.0.0-alpha.6 to v6.6.0 (#​5427)
  • changelog
  • diff

v8.41.0

Compare Source

Features

• Session Replay: experimental support for capturing SurfaceView content (e.g. Unity, video players, maps) (#​5333)
  • To enable, set options.sessionReplay.isCaptureSurfaceViews = true
  • Or via manifest: <meta-data android:name="io.sentry.session-replay.capture-surface-views" android:value="true" />
  • Warning: masking granularity is at the SurfaceView level only — the SDK cannot mask individual elements rendered inside the SurfaceView (e.g. native Unity UI, map labels, video frames). Only enable for SurfaceViews whose content is safe to record.
• Add Sentry.feedback() API for show() and capture() (#​5349)
  • Sentry.showUserFeedbackDialog() is deprecated in favor of Sentry.feedback().show()
  • Sentry.captureFeedback() is deprecated in favor of Sentry.feedback().capture()
  • Sentry.captureUserFeedback() and UserFeedback are deprecated in favor of Sentry.feedback().capture() with the new Feedback type
  • SentryUserFeedbackDialog is deprecated in favor of SentryUserFeedbackForm
  • All deprecated APIs will be removed in the next major version
• Deprecate SentryUserFeedbackButton (View-based and Compose-based) (#​5350)
  • It will be removed in the next major version
• Add per-form shake-to-show support for SentryUserFeedbackForm (#​5353)
  • Useful for enabling shake-to-report on specific screens instead of globally

  SentryUserFeedbackForm.Builder(activity)
    .configurator { it.isUseShakeGesture = true }
    .create()

• Add support for Kafka (#​5249)
  • You will need to add the sentry-kafka dependency and opt-in via the new option.
    • Set options.setEnableQueueTracing(true) on Sentry.init
    • Or set sentry.enable-queue-tracing=true in application.properties
  • For Spring Boot Kafka is auto instrumented and no further configuration is needed.
    • also see https://docs.sentry.io/platforms/java/guides/spring-boot/integrations/kafka/
  • When using kafka-clients directly
    • you need to wrap your KafkaProducer via SentryKafkaProducer.wrap(kafkaProducer) to get queue.publish spans
    • and you may use our SentryKafkaConsumerTracing.withTracing helper to instrument the consumer side manually.
    • also see https://docs.sentry.io/platforms/java/integrations/kafka/

Fixes

• Fix soft input keyboard not being shown on the Feedback form (#​5359)
• Fix shake-to-report not triggering on some devices due to high acceleration threshold (#​5366)
• Fix feedback form retaining previous message when shown again via shake (#​5366)
• Avoid stack overflow when deserializing large flat JSON objects (#​5361)

Dependencies

• Bump Native SDK from v0.13.7 to v0.14.0 (#​5334, #​5365)
  • changelog
  • diff
• Bump Gradle from v9.4.1 to v9.5.0 (#​5344)
  • changelog
  • diff

v8.40.0

Compare Source

Fixes

• Fix NoSuchMethodError for LayoutCoordinates.localBoundingBoxOf$default on Compose touch dispatch with AGP 8.13 and minSdk < 24 (#​5302)
• Fix reporting OkHttp's synthetic 504 "Unsatisfiable Request" responses as errors for CacheControl.FORCE_CACHE cache misses (#​5299)
• Make SentryGestureDetector thread-safe and recycle VelocityTracker per gesture (#​5301)
• Fix duplicate ui.click breadcrumbs when another Window.Callback wraps SentryWindowCallback (#​5300)

Dependencies

• Bump Native SDK from v0.13.6 to v0.13.7 (#​5296)
  • changelog
  • diff

v8.39.1

Compare Source

Fixes

• Fix JsonObjectReader and MapObjectReader hanging indefinitely when deserialization errors leave the reader in an inconsistent state (#​5293)
  • Failed collection values are now skipped so parsing can continue
  • Skipped collection values emit WARNING logs
  • Unknown-key failures and unrecoverable recovery failures emit ERROR logs

v8.39.0

Compare Source

Fixes

• Fix ANR caused by GestureDetectorCompat Handler/MessageQueue lock contention in SentryWindowCallback (#​5138)

Internal

• Bump AGP version from v8.6.0 to v8.13.1 (#​5063)

Dependencies

• Bump Native SDK from v0.13.3 to v0.13.6 (#​5277)
  • changelog
  • diff
• Bump Gradle from v8.14.3 to v9.4.1 (#​5063)
  • changelog
  • diff

v8.38.0

Compare Source

Features

• Prevent cross-organization trace continuation (#​5136)
  • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
  • New option enableStrictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected. Configurable via code (setStrictTraceContinuation(true)), sentry.properties (enable-strict-trace-continuation=true), Android manifest (io.sentry.strict-trace-continuation.enabled), or Spring Boot (sentry.strict-trace-continuation=true).
  • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN. Configurable via code (setOrgId("123")), sentry.properties (org-id=123), Android manifest (io.sentry.org-id), or Spring Boot (sentry.org-id=123).
• Android: Attachments on the scope will now be synced to native (#​5211)
• Add THIRD_PARTY_NOTICES.md for vendored third-party code, bundled as SENTRY_THIRD_PARTY_NOTICES.md in the sentry JAR under META-INF (#​5186)

Improvements

• Do not retrieve ActivityManager if API < 35 on SDK init (#​5275)

v8.37.1

Compare Source

Fixes

• Fix deadlock in SentryContextStorage.root() with virtual threads and OpenTelemetry agent (#​5234)

v8.37.0

Compare Source

Fixes

• Session Replay: Fix Compose text masking mismatch with weighted text (#​5218)

Features

• Add cache tracing instrumentation for Spring Boot 2, 3, and 4 (#​5165)
  • Wraps Spring CacheManager and Cache beans to produce cache spans
  • Set sentry.enable-cache-tracing to true to enable this feature
• Add JCache (JSR-107) cache tracing via new sentry-jcache module (#​5165)
  • Wraps JCache Cache with SentryJCacheWrapper to produce cache spans
  • Set the enableCacheTracing option to true to enable this feature
• Add configurable IScopesStorageFactory to SentryOptions for providing a custom IScopesStorage, e.g. when the default ThreadLocal-backed storage is incompatible with non-pinning thread models (#​5199)
• Android: Add beforeErrorSampling callback to Session Replay (#​5214)
  • Allows filtering which errors trigger replay capture before the onErrorSampleRate is checked
  • Returning false skips replay capture entirely for that error; returning true proceeds with the normal sample rate check
  • Example usage:

    SentryAndroid.init(context) { options ->
        options.sessionReplay.beforeErrorSampling =
            SentryReplayOptions.BeforeErrorSamplingCallback { event, hint ->
                // Only capture replay for crashes (excluding e.g. handled exceptions)
                event.isCrashed
            }
    }

Dependencies

• Bump Native SDK from v0.13.2 to v0.13.3 (#​5215)
  • changelog
  • diff
• Bump OpenTelemetry (#​5225)
  • opentelemetry to 1.60.1 (was 1.57.0)
  • opentelemetry-instrumentation to 2.26.0 (was 2.23.0)
  • opentelemetry-instrumentation-alpha to 2.26.0-alpha (was 2.23.0-alpha)
  • opentelemetry-semconv to 1.40.0 (was 1.37.0)
  • opentelemetry-semconv-alpha to 1.40.0-alpha (was 1.37.0-alpha)

v8.36.0

Compare Source

Features

• Show feedback form on device shake (#​5150)
  • Enable via options.getFeedbackOptions().setUseShakeGesture(true) or manifest meta-data io.sentry.feedback.use-shake-gesture
  • Uses the device's accelerometer — no special permissions required

Fixes

• Support masking/unmasking and click/scroll detection for Jetpack Compose 1.10+ (#​5189)

Dependencies

• Bump Native SDK from v0.13.1 to v0.13.2 (#​5181)
  • changelog
  • diff
• Bump com.abovevacant:epitaph to 0.1.1 to avoid old D8/R8 dexing crashes in downstream Android builds on old AGP versions such as 7.4.x. (#​5200)
  • changelog
  • diff

v8.35.0

Compare Source

Fixes

• Android: Remove the dependency on protobuf-lite for tombstones (#​5157)

Features

• Add new experimental option to capture profiles for ANRs (#​4899)
  • This feature will capture a stack profile of the main thread when it gets unresponsive
  • The profile gets attached to the ANR event on the next app start, providing a flamegraph of the ANR issue on the sentry issue details page
  • Enable via options.setAnrProfilingSampleRate(<sample-rate>) or AndroidManifest.xml: <meta-data android:name="io.sentry.anr.profiling.sample-rate" android:value="[0.0-1.0]" />
  • The sample rate controls the probability of collecting a profile for each detected foreground ANR (0.0 to 1.0, null to disable)

Behavioral Changes

• Add enableAnrFingerprinting option which assigns static fingerprints to ANR events with system-only stacktraces
  • When enabled, ANRs whose stacktraces contain only system frames (e.g. java.lang or android.os) are grouped into a single issue instead of creating many separate issues
  • This will help to reduce overall ANR issue noise in the Sentry dashboard
  • IMPORTANT: This option is enabled by default.
  • Disable via options.setEnableAnrFingerprinting(false) or AndroidManifest.xml: <meta-data android:name="io.sentry.anr.enable-fingerprinting" android:value="false" />

v8.34.1

Compare Source

Fixes

• Common: Finalize previous session even when auto session tracking is disabled (#​5154)
• Android: Add filterTouchesWhenObscured to prevent Tapjacking on user feedback dialog (#​5155)
• Android: Add proguard rules to prevent error about missing Replay classes (#​5153)

v8.34.0

Compare Source

Features

• Allow configuring shutdown and session flush timeouts externally (#​4641)
  • sentry.properties: shutdown-timeout-millis, session-flush-timeout-millis
  • Environment variables: SENTRY_SHUTDOWN_TIMEOUT_MILLIS, SENTRY_SESSION_FLUSH_TIMEOUT_MILLIS
  • Spring Boot application.properties: sentry.shutdownTimeoutMillis, sentry.sessionFlushTimeoutMillis
• Add scope-level attributes API (#​5118) via (#​5148)
  • Automatically include scope attributes in logs and metrics (#​5120)
  • New APIs are Sentry.setAttribute, Sentry.setAttributes, Sentry.removeAttribute
• Support collections and arrays in attribute type inference (#​5124)
• Add support for SENTRY_SAMPLE_RATE environment variable / sample-rate property (#​5112)
• Create sentry-opentelemetry-otlp and sentry-opentelemetry-otlp-spring modules for combining OpenTelemetry SDK OTLP export with Sentry SDK (#​5100)
  • OpenTelemetry is configured to send spans to Sentry directly using an OTLP endpoint.
  • Sentry only uses trace and span ID from OpenTelemetry (via OpenTelemetryOtlpEventProcessor) but will not send spans through OpenTelemetry nor use OpenTelemetry Context for Scopes propagation.
  • See the OTLP setup docs for Java and Spring Boot for installation and configuration instructions.
• Add screenshot masking support using view hierarchy (#​5077)
  • Masks sensitive content (text, images) in error screenshots using the same view hierarchy approach as Session Replay
  • Requires the sentry-android-replay module to be present at runtime for masking to work
  • Enable via code:

    SentryAndroid.init(context) { options ->
        options.isAttachScreenshot = true
        options.screenshot.setMaskAllText(true)
        options.screenshot.setMaskAllImages(true)
        // Or mask specific view classes
        options.screenshot.addMaskViewClass("com.example.MyCustomView")
    }

  • Or via AndroidManifest.xml:

    <meta-data android:name="io.sentry.attach-screenshot" android:value="true" />
    <meta-data android:name="io.sentry.screenshot.mask-all-text" android:value="true" />
    <meta-data android:name="io.sentry.screenshot.mask-all-images" android:value="true" />

• The ManifestMetaDataReader now read the DIST (#​5107)

Fixes

• Fix attribute type detection for Long, Short, Byte, BigInteger, AtomicInteger, and AtomicLong being incorrectly inferred as double instead of integer (#​5122)
• Remove AndroidRuntimeManager StrictMode relaxation to prevent ANRs during SDK init (#​5127)
  • IMPORTANT: StrictMode violations may appear again in debug builds. This is intentional to prevent ANRs in production releases.
• Fix crash when unregistering SystemEventsBroadcastReceiver with try-catch block. (#​5106)
• Use peekDecorView instead of getDecorView in SentryGestureListener to avoid forcing view hierarchy construction (#​5134)
• Log an actionable error message when Relay returns HTTP 413 (Content Too Large) (#​5115)
  • Also switch the client report discard reason for all HTTP 4xx/5xx errors (except 429) from network_error to send_error
• Trim DSN string before parsing to avoid URISyntaxException caused by trailing whitespace (#​5113)
• Reduce allocations and bytecode instructions during Sentry.init (#​5135)

Dependencies

• Bump Native SDK from v0.12.7 to v0.13.1 (#​5104)
  • changelog
  • diff

v8.33.0

Compare Source

Features

• Add installGroupsOverride parameter to Build Distribution SDK for programmatic filtering, with support for configuration via properties file using io.sentry.distribution.install-groups-override (#​5066)

Fixes

• When merging tombstones with Native SDK, use the tombstone message if the Native SDK didn't explicitly provide one. (#​5095)
• Fix thread leak caused by eager creation of SentryExecutorService in SentryOptions (#​5093)
  • There were cases where we created options that ended up unused but we failed to clean those up.
• Attach user attributes to logs and metrics regardless of sendDefaultPii (#​5099)
• No longer log a warning if a logging integration cannot initialize Sentry due to missing DSN (#​5075)
  • While this may have been useful to some, it caused lots of confusion.
• Session Replay: Add androidx.camera.view.PreviewView to default maskedViewClasses to mask camera previews by default. (#​5097)

Dependencies

• Bump Native SDK from v0.12.4 to v0.12.7 (#​5071, #​5098)
  • changelog
  • diff

Internal

• Add integration to track session replay custom masking (#​5070)

v8.32.0

Compare Source

Features

• Add installGroups property to Build Distribution SDK (#​5062)
• Update Android targetSdk to API 36 (Android 16) (#​5016)
• Add AndroidManifest support for Spotlight configuration via io.sentry.spotlight.enable and io.sentry.spotlight.url (#​5064)
• Collect database transaction spans (BEGIN, COMMIT, ROLLBACK) (#​5072)
  • To enable creation of these spans, set options.enableDatabaseTransactionTracing to true
  • enable-database-transaction-tracing=true when using sentry.properties
  • For Spring Boot, use sentry.enable-database-transaction-tracing=true in application.properties or in application.yml:

    sentry:
      enable-database-transaction-tracing: true

• Add support for collecting native crashes using Tombstones (#​4933, #​5037)
  • Added Tombstone integration that detects native crashes using ApplicationExitInfo.REASON_CRASH_NATIVE on Android 12+
  • Crashes enriched with Tombstones contain more crash details and detailed thread info
  • Tombstone and NDK integrations are now automatically merged into a single crash event, eliminating duplicate reports
  • To enable it, add the integration in your Sentry initialization:

    SentryAndroid.init(context, options -> {
        options.isTombstoneEnabled = true
    })

    or in the AndroidManifest.xml using:

    <meta-data android:name="io.sentry.tombstone.enable" android:value="true" />

Fixes

• Extract SpotlightIntegration to separate sentry-spotlight module to prevent insecure HTTP URLs from appearing in release APKs (#​5064)
  • Breaking: Users who enable Spotlight must now add the io.sentry:sentry-spotlight dependency:

    dependencies {
        debugImplementation("io.sentry:sentry-spotlight:<version>")
    }

• Fix scroll target detection for Jetpack Compose (#​5017)
• No longer fork Sentry Scopes for reactor-kafka consumer poll Runnable (#​5080)
  • This was causing a memory leak because reactor-kafka's poll event reschedules itself infinitely, and each invocation of SentryScheduleHook created forked scopes with a parent reference, building an unbounded chain that couldn't be garbage collected.
• Fix cold/warm app start type detection for Android devices running API level 34+ (#​4999)

Internal

• Establish new native exception mechanisms to differentiate events generated by sentry-native from ApplicationExitInfo. (#​5052)
• Set write permission for statuses in the changelog preview GHA workflow. (#​5053)

Dependencies

• Bump Native SDK from v0.12.3 to v0.12.4 (#​5061)
  • changelog
  • diff

v8.31.0

Compare Source

Features

• Added io.sentry.ndk.sdk-name Android manifest option to configure the native SDK's name (#​5027)
• Replace sentry.trace.parent_span_id attribute with spanId property on SentryLogEvent (#​5040)

Fixes

• Only attach user attributes to logs if sendDefaultPii is enabled (#​5036)
• Reject new logs if LoggerBatchProcessor is shutting down (#​5041)
• Downgrade protobuf-javalite dependency from 4.33.1 to 3.25.8 (#​5044)

Dependencies

• Bump Native SDK from v0.12.2 to v0.12.3 (#​5012)
  • changelog
  • diff

v8.30.0

Compare Source

Fixes

• Fix ANRs when collecting device context (#​4970)
  • IMPORTANT: This disables collecting external storage size (total/free) by default, to enable it back
    use options.isCollectExternalStorageContext = true or <meta-data android:name="io.sentry.external-storage-context" android:value="true" />
• Fix NullPointerException when reading ANR marker (#​4979)
• Report discarded log in batch processor as log_byte (#​4971)

Improvements

• Expose MAX_EVENT_SIZE_BYTES constant in SentryOptions (#​4962)
• Discard envelopes on 4xx and 5xx response (#​4950)
  • This aims to not overwhelm Sentry after an outage or load shedding (including HTTP 429) where too many events are sent at once

Features

• Add a Tombstone integration that detects native crashes without relying on the NDK integration, but instead using ApplicationExitInfo.REASON_CRASH_NATIVE on Android 12+. (#​4933)
  • Currently exposed via options as an internal API only.
  • If enabled alongside the NDK integration, crashes will be reported as two separate events. Users should enable only one; deduplication between both integrations will be added in a future release.
• Add Sentry Metrics to Java SDK (#​5026)
  • Metrics are enabled by default
  • APIs are namespaced under Sentry.metrics()
  • We offer the following APIs:
    • count: A metric that increments counts
    • gauge: A metric that tracks a value that can go up or down
    • distribution: A metric that tracks the statistical distribution of values
  • For more details, see the Metrics documentation: https://docs.sentry.io/product/explore/metrics/getting-started/

v8.29.0

Compare Source

Fixes

• Support serialization of primitive arrays (boolean[], byte[], short[], char[], int[], long[], float[], double[]) (#​4968)
• Session Replay: Improve network body parsing and truncation handling (#​4958)

Internal

• Support metric envelope item type (#​4956)

v8.28.0

Compare Source

Features

• Android: Flush logs when app enters background (#​4951)
• Add option to capture additional OkHttp network request/response details in session replays (#​4919)
  • Depends on SentryOkHttpInterceptor to intercept the request and extract request/response bodies
  • To enable, add url regexes via the io.sentry.session-replay.network-detail-allow-urls metadata tag in AndroidManifest (code sample) - Or you can manually specify SentryReplayOptions via SentryAndroid#init:
    (Make sure you disable the auto init via manifest meta-data: io.sentry.auto-init=false)

Kotlin

SentryAndroid.init(
    this,
    options -> {
      // options.dsn = "https://examplePublicKey@o0.ingest.sentry.io/0"
      // options.sessionReplay.sessionSampleRate = 1.0
      // options.sessionReplay.onErrorSampleRate = 1.0
      // ..

      options.sessionReplay.networkDetailAllowUrls = listOf(".*")
      options.sessionReplay.networkDetailDenyUrls = listOf(".*deny.*")
      options.sessionReplay.networkRequestHeaders = listOf("Authorization", "X-Custom-Header", "X-Test-Request")
      options.sessionReplay.networkResponseHeaders = listOf("X-Response-Time", "X-Cache-Status", "X-Test-Response")
    });

Java

SentryAndroid.init(
    this,
    options -> {
        options.getSessionReplay().setNetworkDetailAllowUrls(Arrays.asList(".*"));
        options.getSessionReplay().setNetworkDetailDenyUrls(Arrays.asList(".*deny.*"));
        options.getSessionReplay().setNetworkRequestHeaders(
            Arrays.asList("Authorization", "X-Custom-Header", "X-Test-Request"));
        options.getSessionReplay().setNetworkResponseHeaders(
            Arrays.asList("X-Response-Time", "X-Cache-Status", "X-Test-Response"));
    });

Improvements

• Avoid forking rootScopes for Reactor if current thread has NoOpScopes (#​4793)
  • This reduces the SDKs overhead by avoiding unnecessary scope forks

Fixes

• Fix missing thread stacks for ANRv1 events (#​4918)
• Fix handling of unparseable mime-type on request filter (#​4939)

Internal

• Support span envelope item type (#​4935)

Dependencies

• Bump Native SDK from v0.12.1 to v0.12.2 (#​4944)
  • changelog
  • diff

v8.27.1

Compare Source

Fixes

• Do not log if sentry.properties in rundir has not been found (#​4929)

v8.27.0

Compare Source

Features

• Implement OpenFeature Integration that tracks Feature Flag evaluations (#​4910)
  • To make use of it, add the sentry-openfeature dependency and register the the hook using: openFeatureApiInstance.addHooks(new SentryOpenFeatureHook());
• Implement LaunchDarkly Integrations that track Feature Flag evaluations (#​4917)
  • For Android, please add sentry-launchdarkly-android as a dependency and register the SentryLaunchDarklyAndroidHook
  • For Server / JVM, please add sentry-launchdarkly-server as a dependency and register the SentryLaunchDarklyServerHook
• Detect oversized events and reduce their size (#​4903)
  • You can opt into this new behaviour by setting enableEventSizeLimiting to true (sentry.enable-event-size-limiting=true for Spring Boot application.properties)
  • You may optionally register an onOversizedEvent callback to implement custom logic that is executed in case an oversized event is detected
    • This is executed first and if event size was reduced sufficiently, no further truncation is performed
  • In case we detect an oversized event, we first drop breadcrumbs and if that isn't sufficient we also drop stack frames in order to get an events size down

Improvements

• Do not send manual log origin (#​4897)

Dependencies

• Bump Spring Boot 4 to GA (#​4923)

v8.26.0

Compare Source

Features

• Add feature flags API (#​4812) and (#​4831)
  • You may now keep track of your feature flag evaluations and have them show up in Sentry.
  • Top level API (Sentry.addFeatureFlag("my-feature-flag", true);) writes to scopes and the current span (if there is one)
  • It is also possible to use API on IScope, IScopes, ISpan and ITransaction directly
  • Feature flag evaluations tracked on scope(s) will be added to any errors reported to Sentry.
    • The SDK keeps the latest 100 evaluations from scope(s), replacing old entries as new evaluations are added.
  • For feature flag evaluations tracked on spans:
    • Only 10 evaluations are tracked per span, existing flags are updated but new ones exceeding the limit are ignored
    • Spans do not inherit evaluations from their parent
• Drop log events once buffer hits hard limit (#​4889)
  • If we have 1000 log events queued up, we drop any new logs coming in to prevent OOM
• Remove vendored code and upgrade to async profiler 4.2 (#​4856)
  • This adds support for JDK 23+

Fixes

• Removed SentryExecutorService limit for delayed scheduled tasks (#​4846)
• Fix visual artifacts for the Canvas strategy on some devices (#​4861)
• [Config] Trim whitespace on properties path (#​4880)
• Only set DefaultReplayBreadcrumbConverter if replay is available (#​4888)
• Session Replay: Cache connection status instead of using blocking calls (#​4891)
• Fix log count in client reports (#​4869)
• Fix profilerId propagation (#​4833)
• Fix profiling init for Spring and Spring Boot w Agent auto-init (#​4815)
• Copy active span on scope clone (#​4878)

Improvements

• Fallback to distinct-id as user.id logging attribute when user is not set (#​4847)
• Report Timber.tag() as timber.tag log attribute (#​4845)
• Session Replay: Add screenshot strategy serialization to RRWeb events (#​4851)
• Report discarded log bytes (#​4871)
• Log why a properties file was not loaded (#​4879)

Dependencies

• Bump Native SDK from v0.11.3 to v0.12.1 ([#​4859](https://red

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@build.gradle`:
- Line 44: Update the Sentry dependency version from 8.38.0 to 8.37.1 in the
implementation declaration (the line containing "io.sentry:sentry") so Gradle
can resolve the published SDK; also verify any other Sentry artifacts (e.g.,
sentry-android, sentry-okhttp) use 8.37.1 to avoid binary mismatches and, if
your code references SpotlightIntegration, add the separate "sentry-spotlight"
module at 8.37.1.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d0a04570-c9f1-4e87-ba89-a049f6c2a255

📥 Commits

Reviewing files that changed from the base of the PR and between e3c7bdb and 0a2a8aa.

📒 Files selected for processing (1)

• build.gradle

[coderabbitai]

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

io.sentry:sentry 8.38.0 release notes Java SDK breaking changes compatibility with 8.19.1

💡 Result:

As of April 8, 2026, there is no io.sentry:sentry (Sentry Java SDK) release 8.38.0. The Sentry Java SDK GitHub releases show 8.37.1 (released Mar 26, 2026) as the newest 8.x release at that time. [1]

What this means for “8.38.0 vs 8.19.1” compatibility

• If you try to upgrade from 8.19.1 → 8.38.0, it likely won’t resolve because 8.38.0 isn’t a Java SDK version (it’s commonly seen in other Sentry SDKs, e.g., JavaScript).
• If your real target is 8.37.1 (or another existing 8.x), then it’s a same-major (8.x → 8.x) upgrade, but there are noteworthy breaking/behavior changes across that range.

Notable breaking/behavior changes between 8.19.1 and newer 8.x

• 8.32.0 breaking change (Spotlight): SpotlightIntegration was extracted into a separate module; if you use Spotlight you must add io.sentry:sentry-spotlight explicitly. [2]
• 8.35.0 behavioral change (ANR grouping): enableAnrFingerprinting was introduced and is enabled by default, changing how some ANRs get grouped. [3]
• 8.34.0 API addition (attributes): new scope-level attribute APIs: Sentry.setAttribute, Sentry.setAttributes, Sentry.removeAttribute. (Not breaking, but may affect integrations/custom wrappers.) [4]

Important note about dependency alignment (common “incompatibility” cause)

If you use multiple Sentry artifacts (e.g., sentry, sentry-android, sentry-okhttp, etc.), they must all be on the same version; mismatches can cause runtime NoSuchMethodError / binary incompatibilities. [5]

Extra: 8.19.1 has a specific Android warning

The 8.19.1 release itself notes it’s incompatible with Android API levels below 26 and recommends upgrading (e.g., 8.20.0+). [6]

If you tell me which Sentry artifacts you use (plain JVM vs Android vs Spring Boot, plus your Gradle/Maven dependency list), I can point out the specific upgrade hazards from 8.19.1 to your intended target version.

References:
[1] https://github.com/getsentry/sentry-java/releases/tag/8.37.1
[2] https://github.com/getsentry/sentry-java/releases/tag/8.32.0
[3] https://github.com/getsentry/sentry-java/releases/tag/8.35.0
[4] https://github.com/getsentry/sentry-java/releases/tag/8.34.0
[5] https://sentry.zendesk.com/hc/en-us/articles/33646017632027--Android-Application-crashes-with-error-No-static-method-addIntegrationToSdkVersion
[6] https://github.com/getsentry/sentry-java/releases/tag/8.19.1

---

🌐 Web query:

Sentry Java SDK 8.38.0 API docs Sentry.init captureException startTransaction setExtra

💡 Result:

Sentry Java SDK “8.38.0” docs?

For the Java artifact io.sentry:sentry, 8.38.0 isn’t published on javadoc.io; the current line there goes up to 8.37.1. (javadoc.io) (The 8.38.0 number you’re seeing is commonly a JavaScript SDK version.)

Java SDK Javadocs (pick the version you actually use):

https://javadoc.io/doc/io.sentry/sentry
https://javadoc.io/doc/io.sentry/sentry/8.37.1

(javadoc.io)

---

API references (Java) for the methods you listed

Sentry.init(...)

Javadoc (example version 8.8.0):

https://javadoc.io/static/io.sentry/sentry/8.8.0/io/sentry/Sentry.html

Overloads include:

• Sentry.init() / Sentry.init(String dsn)
• Sentry.init(Sentry.OptionsConfiguration<SentryOptions> optionsConfiguration)
  (javadoc.io)

Sentry docs page showing the typical Sentry.init(options -> { ... }) pattern:
(docs.sentry.dev)

Sentry.captureException(...)

Javadoc (8.8.0) shows overloads like:

• Sentry.captureException(Throwable throwable)
• Sentry.captureException(Throwable throwable, Hint hint)
  (javadoc.io)

Sentry.startTransaction(...)

Javadoc (8.8.0) shows overloads like:

• Sentry.startTransaction(String name, String operation)
• Sentry.startTransaction(TransactionContext transactionContext, TransactionOptions transactionOptions)
  (javadoc.io)

Sentry.setExtra(...)

Javadoc (8.8.0):

• Sentry.setExtra(String key, String value)
  (javadoc.io)

Citations:

• 1: https://javadoc.io/doc/io.sentry/sentry/latest/allclasses-index.html
• 2: https://javadoc.io/doc/io.sentry/sentry/latest/allclasses-index.html
• 3: https://javadoc.io/static/io.sentry/sentry/8.8.0/io/sentry/Sentry.html
• 4: https://docs.sentry.dev/platforms/java/guides/spring/configuration/options/?utm_source=openai
• 5: https://javadoc.io/static/io.sentry/sentry/8.8.0/io/sentry/Sentry.html
• 6: https://javadoc.io/static/io.sentry/sentry/8.8.0/io/sentry/Sentry.html
• 7: https://javadoc.io/static/io.sentry/sentry/8.8.0/io/sentry/Sentry.html

---

Change version 8.38.0 to 8.37.1—8.38.0 does not exist for the Sentry Java SDK.

The Sentry Java SDK has no published version 8.38.0; the latest 8.x release is 8.37.1 (Mar 26, 2026). Gradle will fail to resolve or silently pick an incorrect version. Align with the PR objective and update to 8.37.1.

When upgrading from 8.19.1 to 8.37.1, note these breaking/behavior changes:

• 8.32.0: SpotlightIntegration moved to separate sentry-spotlight module; add explicitly if used.
• 8.35.0: enableAnrFingerprinting enabled by default, affecting ANR grouping.
• Ensure all other Sentry artifacts (sentry-android, sentry-okhttp, etc., if used) are also updated to 8.37.1 to avoid binary incompatibilities.

The methods you use (Sentry.init, captureException, setExtra, startTransaction) remain compatible in 8.37.1.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@build.gradle` at line 44, Update the Sentry dependency version from 8.38.0 to
8.37.1 in the implementation declaration (the line containing
"io.sentry:sentry") so Gradle can resolve the published SDK; also verify any
other Sentry artifacts (e.g., sentry-android, sentry-okhttp) use 8.37.1 to avoid
binary mismatches and, if your code references SpotlightIntegration, add the
separate "sentry-spotlight" module at 8.37.1.

[josealexisosorio0082-cpu]

For this specific issue — “fix(deps): update dependency io.sentry:sentry to v8.46.0” — I would not start from Unity's final generic error line.

I would look for the first real Gradle/Android error above Unity's final generic failure line.

I would check this first:

1. Scroll above Unity's final error and find the first Gradle/Android error.
2. Do not debug only the final CommandInvokationFailure line.
3. Classify the real error first: duplicate class, AAPT, manifest merger, SDK/JDK, or Gradle plugin mismatch.

I also put together a focused Unity Android build-error checklist here:
https://josealexisosorio0082-cpu.github.io/unity-android-build-errors/traffic-gradle-real-error.html?utm_source=manual_reply&utm_medium=community_comment&utm_campaign=aos_unity_android_build_errors&utm_content=github_gradle_real_error_fix_deps_update_dependency_io_sentry_sentry_to_v8_46_0

Disclosure: this is my own checklist/resource. Posting it because it matches this kind of Unity Android build failure.