chore(deps): bump @opentelemetry/core and @sentry/electron - #6279
chore(deps): bump @opentelemetry/core and @sentry/electron#6279dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit d203b47. Configure here.
| "@redis-ui/table": "^3.7.0", | ||
| "@reduxjs/toolkit": "^2.12.0", | ||
| "@sentry/electron": "^7.8.0", | ||
| "@sentry/electron": "^7.15.0", |
There was a problem hiding this comment.
Dual @sentry/core versions cause SDK state split
Medium Severity
Bumping @sentry/electron to 7.15.0 (which depends on @sentry/core@10.62.0) without also bumping @sentry/react (still at 10.39.0, using @sentry/core@10.39.0) creates two copies of @sentry/core in the dependency tree. In sentryElectron.ts, @sentry/electron/renderer (core 10.62.0) and reactInit from @sentry/react (core 10.39.0) are used together in Sentry.init(…, reactInit). These two SDK instances may not properly share the global Sentry hub/scope/client state, potentially causing events to be silently dropped or misconfigured.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit d203b47. Configure here.
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d203b473ef
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@redis-ui/table": "^3.7.0", | ||
| "@reduxjs/toolkit": "^2.12.0", | ||
| "@sentry/electron": "^7.8.0", | ||
| "@sentry/electron": "^7.15.0", |
There was a problem hiding this comment.
In the Electron renderer, redisinsight/ui/src/services/sentryElectron.ts initializes @sentry/electron/renderer with reactInit from @sentry/react, but this bump installs Electron’s bundled Sentry JS SDKs at 10.62.0 while the direct @sentry/react dependency stays on 10.39.0 (package-lock.json shows both versions). When Sentry is enabled in the Electron renderer this combines two different Sentry core/browser versions, which can break the framework init/capture path; please bump @sentry/react to the matching 10.62.x version with this change.
Useful? React with 👍 / 👎.
Bumps [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) to 2.10.0 and updates ancestor dependency [@sentry/electron](https://github.com/getsentry/sentry-electron). These dependencies need to be updated together. Updates `@opentelemetry/core` from 2.5.0 to 2.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.5.0...v2.10.0) Updates `@sentry/electron` from 7.8.0 to 7.16.0 - [Release notes](https://github.com/getsentry/sentry-electron/releases) - [Changelog](https://github.com/getsentry/sentry-electron/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-electron@7.8.0...7.16.0) --- updated-dependencies: - dependency-name: "@opentelemetry/core" dependency-version: 2.10.0 dependency-type: indirect - dependency-name: "@sentry/electron" dependency-version: 7.15.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
d203b47 to
87980b9
Compare
Bumps @opentelemetry/core to 2.10.0 and updates ancestor dependency @sentry/electron. These dependencies need to be updated together.
Updates
@opentelemetry/corefrom 2.5.0 to 2.10.0Release notes
Sourced from @opentelemetry/core's releases.
... (truncated)
Changelog
Sourced from @opentelemetry/core's changelog.
... (truncated)
Commits
76fa6b5chore: prepare next release (#6942)3787896chore(deps): update dependency webpack-cli to v7.2.1 (#6934)be5f757fix(deps): update dependency body-parser to v2.3.0 [security] (#6941)f6d8fbechore(deps): lock file maintenance (#6559)9612732chore: remove examples/dice from workspaces (#6937)7107906chore: start using min-release-age in .npmrc, disable minimumReleaseAge for r...a7e5d11chore(deps): update dependency webpack to v5.108.4 (#6933)af7a82dchore(deps): update dependency msw to v2.15.0 (#6831)b9f57c6chore(deps): update dependency@types/webpack-envto v1.18.8 (#6877)cbb4abfchore(deps): update ubuntu docker tag to v26 (#6635)Updates
@sentry/electronfrom 7.8.0 to 7.16.0Release notes
Sourced from @sentry/electron's releases.
... (truncated)
Changelog
Sourced from @sentry/electron's changelog.
... (truncated)
Commits
2921a3erelease: 7.16.06ca4730feat: Update JavaScript SDKs to v10.67.0 (#1405)38a7d76chore: Tell Claude how to run e2e tests (#1406)5f351e6build(deps): Bump shell-quote from 1.8.4 to 1.10.0 (#1404)6de6ff7build(deps): Bump brace-expansion from 5.0.6 to 5.0.7 (#1403)24e8882feat: Update Sentry SDKs to v10.63.0 (#1399)091dd9bMerge branch 'release/7.15.0'e104094release: 7.15.07c28865feat: Parse JavaScript stack frames from renderer OOM minidump (#1382)9d20f6efix: Fix macOS keychain prompt in latest Electron (#1396)Note
Medium Risk
Changes Electron crash/error reporting and Node-side instrumentation without source edits; version skew between
@sentry/reactand the Electron SDK’s nested Sentry 10.67 packages warrants smoke-testing desktop builds and Sentry events.Overview
Bumps
@sentry/electronfrom 7.8.0 to 7.16.0 inpackage.json, with the matchingpackage-lock.jsonrefresh. There are no application code changes.The new Electron SDK pulls in Sentry JavaScript 10.67 for its main-process stack (
@sentry/node,@sentry/browser,@sentry/core), while the direct@sentry/reactdependency stays on 10.39.0, so renderer and Electron paths may run different Sentry core versions until aligned.The lockfile also reflects a slimmer
@sentry/nodedependency tree: many per-framework OpenTelemetry instrumentation packages are dropped in favor of@sentry/server-utilsand updated OpenTelemetry pieces (@opentelemetry/core2.10.0,import-in-the-middlev3, etc.).Reviewed by Cursor Bugbot for commit 87980b9. Bugbot is set up for automated code reviews on this repo. Configure here.