Bump @sentry/browser from 6.19.7 to 10.5.0

[dependabot]

Bumps @sentry/browser from 6.19.7 to 10.5.0.

Release notes

Sourced from @​sentry/browser's releases.

10.5.0

• feat(core): Better cause data extraction (#17375)
• feat(deps): Bump @​sentry/cli from 2.50.2 to 2.51.1 (#17382)
• feat(deps): Bump @​sentry/rollup-plugin and @​sentry/vite-plugin from 4.0.2 to 4.1.0 (#17383)
• feat(deps): Bump @​sentry/webpack-plugin from 4.0.2 to 4.1.0 (#17381)
• feat(node): Capture SystemError context and remove paths from message (#17331)
• fix(nextjs): Inject Next.js version for dev symbolication (#17379)
• fix(mcp-server): Add defensive patches for Transport edge cases (#17291)

• chore(repo): Adjust "Publishing a Release" document to include internal changes section in changelog (#17374)
• test(aws): Run E2E tests with AWS SAM (#17367)
• test(node): Add tests for full http.server span attribute coverage (#17373)

Work in this release was contributed by @​ha1fstack. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	23.59 KB
@​sentry/browser - with treeshaking flags	22.2 KB
@​sentry/browser (incl. Tracing)	38.94 KB
@​sentry/browser (incl. Tracing, Replay)	76.16 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	66.24 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	80.75 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	92.57 KB
@​sentry/browser (incl. Feedback)	39.87 KB
@​sentry/browser (incl. sendFeedback)	28.13 KB
@​sentry/browser (incl. FeedbackAsync)	32.92 KB
@​sentry/react	25.27 KB
@​sentry/react (incl. Tracing)	40.88 KB
@​sentry/vue	27.97 KB
@​sentry/vue (incl. Tracing)	40.72 KB
@​sentry/svelte	23.62 KB
CDN Bundle	25.06 KB
CDN Bundle (incl. Tracing)	38.82 KB
CDN Bundle (incl. Tracing, Replay)	74.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	79.36 KB
CDN Bundle - uncompressed	73.2 KB
CDN Bundle (incl. Tracing) - uncompressed	114.83 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	226.44 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	238.75 KB
@​sentry/nextjs (client)	42.86 KB
@​sentry/sveltekit (client)	39.38 KB
@​sentry/node-core	46.86 KB

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.5.0

• feat(core): better cause data extraction (#17375)
• feat(deps): Bump @​sentry/cli from 2.50.2 to 2.51.1 (#17382)
• feat(deps): Bump @​sentry/rollup-plugin and @​sentry/vite-plugin from 4.0.2 to 4.1.0 (#17383)
• feat(deps): Bump @​sentry/webpack-plugin from 4.0.2 to 4.1.0 (#17381)
• feat(node): Capture SystemError context and remove paths from message (#17331)
• fix(nextjs): Inject Next.js version for dev symbolication (#17379)
• fix(mcp-server): Add defensive patches for Transport edge cases (#17291)

• chore(repo): Adjust "Publishing a Release" document to include internal changes section in changelog (#17374)
• test(aws): Run E2E tests with AWS SAM (#17367)
• test(node): Add tests for full http.server span attribute coverage (#17373)

Work in this release was contributed by @​ha1fstack. Thank you for your contribution!

10.4.0

Important Changes

• fix(browser): Ensure IP address is only inferred by Relay if sendDefaultPii is true

This release includes a fix for a behaviour change that was originally introduced with v9 of the SDK: User IP Addresses should only be added to Sentry events automatically, if sendDefaultPii was set to true.

However, the change in v9 required further internal adjustment, which should have been included in v10 of the SDK. Unfortunately, the change did not make it into the initial v10 version but is now applied with 10.4.0. There is no API breakage involved and hence it is safe to update. However, after updating the SDK, events (errors, traces, replays, etc.) sent from the browser, will only include user IP addresses, if you set sendDefaultPii: true in your Sentry.init options.

We apologize for any inconvenience caused!

• feat(node): Add ignoreStaticAssets (#17370)

This release adds a new option to httpIntegration to ignore requests for static assets (e.g. favicon.xml or robots.txt). The option defaults to true, meaning that going forward, such requests will not be traced by default. You can still enable tracing for these requests by setting the option to false:

Sentry.init({
  integrations: [
    Sentry.httpIntegration({
      // defaults to true, set to false to enable traces for static assets
      ignoreStaticAssets: false,
    }),
</tr></table> 

... (truncated)

Commits

• 577fbef release: 10.5.0
• ddcf6d8 Merge pull request #17390 from getsentry/prepare-release/10.5.0
• e969998 meta(changelog): Update changelog for 10.5.0
• dcd7913 feat(deps): Bump @​sentry/webpack-plugin from 4.0.2 to 4.1.0 (#17381)
• 278496a test(node): Ensure runner does not create unused tmp files (#17392)
• 4abfe01 fix(mcp-server): Add defensive patches for Transport edge cases (#17291)
• 377c7fc feat(deps): Bump @​sentry/rollup-plugin and @​sentry/vite-plugin from 4.0.2 to ...
• a0c04a7 fix(nextjs): Inject Next.js version for dev symbolication (#17379)
• 9b65733 feat(node): Capture SystemError context and remove paths from message (#17331)
• a89aa3d feat(core): better cause data extraction (#17375)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Project	Deployment	Preview	Comments	Updated (UTC)
gitstats	❌ Failed			Aug 13, 2025 3:37pm