chore(deps): update dependency @sentry/browser to v10.39.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/browser (source)	10.38.0 → 10.39.0

⚠️ Note: Make sure to update the integrity hashes before merging this PR. You should be able to find the full HTML tag here: https://docs.sentry.io/platforms/javascript/install/cdn/ or https://github.com/getsentry/sentry-release-registry/tree/master/packages/npm/@sentry/browser

---

Release Notes

getsentry/sentry-javascript (@​sentry/browser)

v10.39.0

Compare Source

Important Changes

• feat(tanstackstart-react): Auto-instrument server function middleware (#​19001)

  The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

• feat(nextjs): New experimental automatic vercel cron monitoring (#​19192)

  Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

  Please note that this is an experimental unstable feature and subject to change.

  // next.config.ts
  export default withSentryConfig(nextConfig, {
    _experimental: {
      vercelCronMonitoring: true,
    },
  });

• feat(node-core): Add node-core/light (#​18502)

  This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

  Use this SDK when:

  • You only need error tracking, logs or metrics without tracing data (no spans)
  • You want to minimize bundle size and runtime overhead
  • You don't need spans emitted by OpenTelemetry instrumentation

  It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

  Install the SDK by running

  npm install @​sentry/node-core

  and add Sentry at the top of your application's entry file:

  import * as Sentry from '@​sentry/node-core/light';
  
  Sentry.init({
    dsn: '__DSN__',
  });

Other Changes

• feat(browser): Add mode option for the browser session integration (#​18997)
• feat(browser): Include culture context with events (#​19148)
• feat(browser): Trace continuation from server-timing headers (#​18673)
• feat(core,cloudflare): Enable certain fields with env variables (#​19245)
• feat(deps): bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 (#​19149)
• feat(deps): bump @​sentry/bundler-plugin-core from 4.8.0 to 4.9.0 (#​19190)
• feat(deps): Bump glob in @sentry/react-router (#​19162)
• feat(deps): bump hono from 4.11.1 to 4.11.7 (#​19068)
• feat(hono): Add base for Sentry Hono middleware (Cloudflare) (#​18787)
• feat(nextjs): Set cloudflare runtime (#​19084)
• feat(node-core): Add outgoing fetch trace propagation to light mode (#​19262)
• feat(react): Add lazyRouteManifest option to resolve lazy-route names (#​19086)
• feat(vercel-ai): Add rerank support and fix token attribute mapping (#​19144)
• fix(core): Avoid blocking the process for weightBasedFlushing (#​19174)
• fix(core): Avoid blocking the process when calling flush on empty buffer (#​19062)
• fix(core): Ensure partially set SDK metadata options are preserved (#​19102)
• fix(core): Fix truncation to only keep last message in vercel (#​19080)
• fix(core): Intercept .withResponse() to preserve OpenAI stream instrumentation (#​19122)
• fix(core): Prevent infinite recursion when event processor throws (#​19110)
• fix(core): Record client report with reason for HTTP 413 responses (#​19093)
• fix(core): Remove outdated _experiments.enableMetrics references from metrics JSDoc (#​19252)
• fix(core): Respect event.event_id in scope.captureEvent return value (#​19113)
• fix(core): use sessionId for MCP transport correlation (#​19172)
• fix(deps): Bump @nestjs/platform-express to 11.1.13 (#​19206)
• fix(deps): Bump diff to 5.2.2 (#​19228)
• fix(deps): Bump js-yaml to 3.14.2 and 4.1.1 (#​19216)
• fix(deps): Bump lodash to 4.17.23 (#​19211)
• fix(deps): Bump mdast-util-to-hast to 13.2.1 (#​19205)
• fix(deps): Bump node-forge to 1.3.2 (#​19183)
• fix(deps): Bump react-router to 6.30.3 (#​19212)
• fix(deps): Bump sinon to 21.0.1 in @sentry/ember (#​19246)
• fix(deps): Bump vite to 5.4.21 (#​19214)
• fix(nextjs): Expose an event id when captureUnderscoreErrorException captures an exception (#​19185)
• fix(nextjs): Populate SENTRY_SERVER_MODULES in Turbopack (#​19231)
• fix(node): Use snake_case for Fastify's request-handler op. (#​18729)
• fix(nuxt): Avoid logging database skip warning when debug is disabled (#​19095)
• fix(nuxt): Respect configured environment settings (#​19243)
• fix(profiling-node): 137 ABI should not be pruned for node 24 (#​19236)
• fix(replay): Improve error messages when compression worker fails to load (#​19008)
• fix(svelte): Bump svelte dev dependency to 3.59.2 (#​19208)
• fix(sveltekit): Detect used adapter via svelte.config.js (#​19270)
• fix(tanstackstart-react): Use auto.middleware.tanstackstart as middleware trace origin (#​19137)
• ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#​19254)
• ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#​19258)
• ref(sveltekit): Use untrack to read route id without invalidation (#​19272)

Internal Changes

• chore: Add cursor rules for AI integrations contributions (#​19167)
• chore: Add Makefiles for dev-packages to make it convenient to run tests (#​19203)
• chore: bump prettier to 3.8 (#​19198)
• chore(bugbot): Add rule to flag not-unref'd timers (#​19082)
• chore(deps-dev): bump @​sveltejs/kit from 2.49.5 to 2.50.1 (#​19089)
• chore(deps-dev): bump ts-node from 10.9.1 to 10.9.2 (#​19189)
• chore(deps-dev): bump vite from 3.2.11 to 5.4.21 (#​19227)
• chore(deps-dev): bump webpack from 5.95.0 to 5.104.1 (#​19199)
• chore(deps-dev): bump yaml from 2.2.2 to 2.8.2 (#​19087)
• chore(deps): Bump Apollo Server from v3 to v5 in integration tests (#​19202)
• chore(deps): Bump express in test utils + e2e apps (#​19159)
• chore(deps): Bump Lerna to v9 (#​19244)
• chore(deps): Bump mongoose in integration tests (#​19175)
• chore(deps): Bump solidjs to 1.9.11 to fix seroval alerts (#​19150)
• chore(deps): Bump webpack from 5.97.0 to 5.104.0 in ember-classic e2e test (#​19239)
• chore(deps): Bump webpack from 5.104.0 to 5.104.1 in ember-classic e2e test (#​19247)
• chore(e2e): Add banner to readme (#​19138)
• chore(llm): Add skill for fixing security vulnerabilities (#​19178)
• chore(node-core): Fix node-core integration test assertions (#​19219)
• ci: Ignore ticket creation for base branches other than develop/master (#​19103)
• ci(e2e): Remove nextjs-turbo canary tests (#​19118)
• ref: Removes unused eslint rule (via yarn fix) (#​19266)
• test(e2e): Bump nextjs-t3 to next 15 (#​19130)
• test(e2e): Migrate test app nextjs-turbo into nextjs-15 (#​19107)

Work in this release was contributed by @​limbonaut and @​rfoel. Thank you for your contributions!

Bundle size 📦

Path	Size
@​sentry/browser	24.96 KB
@​sentry/browser - with treeshaking flags	23.51 KB
@​sentry/browser (incl. Tracing)	41.37 KB
@​sentry/browser (incl. Tracing, Profiling)	45.93 KB
@​sentry/browser (incl. Tracing, Replay)	79.28 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	69.14 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	83.85 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	95.73 KB
@​sentry/browser (incl. Feedback)	41.3 KB
@​sentry/browser (incl. sendFeedback)	29.53 KB
@​sentry/browser (incl. FeedbackAsync)	34.4 KB
@​sentry/browser (incl. Metrics)	26.11 KB
@​sentry/browser (incl. Logs)	26.25 KB
@​sentry/browser (incl. Metrics & Logs)	26.91 KB
@​sentry/react	26.69 KB
@​sentry/react (incl. Tracing)	43.67 KB
@​sentry/vue	29.31 KB
@​sentry/vue (incl. Tracing)	43.18 KB
@​sentry/svelte	24.98 KB
CDN Bundle	27.45 KB
CDN Bundle (incl. Tracing)	42.19 KB
CDN Bundle (incl. Logs, Metrics)	28.27 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	43 KB
CDN Bundle (incl. Replay, Logs, Metrics)	66.43 KB
CDN Bundle (incl. Tracing, Replay)	78.2 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	79.05 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	83.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	84.37 KB
CDN Bundle - uncompressed	80.29 KB
CDN Bundle (incl. Tracing) - uncompressed	124.93 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	83.06 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	127.7 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	203.82 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	239.07 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	241.83 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	251.57 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	254.32 KB
@​sentry/nextjs (client)	45.94 KB
@​sentry/sveltekit (client)	41.81 KB
@​sentry/node-core	50.93 KB
@​sentry/node	162.61 KB
@​sentry/node - without tracing	91.75 KB
@​sentry/aws-serverless	106.89 KB

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.61%. Comparing base (b6a0b0e) to head (bf42d85).

Additional details and impacted files

@@           Coverage Diff            @@
##           staging    #1235   +/-   ##
========================================
  Coverage    77.61%   77.61%           
========================================
  Files           54       54           
  Lines         1407     1407           
========================================
  Hits          1092     1092           
  Misses         315      315           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.