Merge pull request #21874 from getsentry/prepare-release/10.63.0

meta(changelog): Update changelog for 10.63.0

Author: JPeer264

.oxlintrc.base.json

@@ -169,7 +169,6 @@
         "**/integrations/tracing/amqplib/vendored/**/*.ts",
         "**/integrations/tracing/prisma/vendored/**/*.ts",
         "**/integrations/tracing/postgres/vendored/**/*.ts",
-        "**/integrations/tracing/fastify/vendored/**/*.ts",
         "**/integrations/tracing/redis/vendored/**/*.ts"
       ],
       "rules": {

CHANGELOG.md

@@ -4,6 +4,51 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+## 10.63.0
+
+- feat(browser): Add `url.full` attribute to resource spans ([#21846](https://github.com/getsentry/sentry-javascript/pull/21846))
+- feat(core): Add `extendIntegration` method ([#21759](https://github.com/getsentry/sentry-javascript/pull/21759))
+- feat(core): Add `isTracingSuppressed` to the async context strategy ([#21785](https://github.com/getsentry/sentry-javascript/pull/21785))
+- feat(core): Pass normalizedRequest to the sampling context for root spans ([#21833](https://github.com/getsentry/sentry-javascript/pull/21833))
+- feat(node): Add lru-memoizer diagnostics-channel integration to experimentalUseDiagnosticsChannelInjection ([#21786](https://github.com/getsentry/sentry-javascript/pull/21786))
+- feat(node): Expose channel-based, streamlined `fastifyIntegration` ([#21706](https://github.com/getsentry/sentry-javascript/pull/21706))
+- fix(browser): Defer sending session envelope until browser is idle ([#21844](https://github.com/getsentry/sentry-javascript/pull/21844))
+- fix(core): Improve waiting for tracing channel bindings ([#21815](https://github.com/getsentry/sentry-javascript/pull/21815))
+- fix(core): Serialize streamed span status message to `sentry.status.message` attribute ([#21811](https://github.com/getsentry/sentry-javascript/pull/21811))
+- fix(nextjs): Don't inject trace meta tags when Cache Components is enabled ([#21141](https://github.com/getsentry/sentry-javascript/pull/21141))
+- fix(opentelemetry): Strip leading ? and # from inferred http.query and http.fragment ([#21848](https://github.com/getsentry/sentry-javascript/pull/21848))
+- fix(tanstackstart-react): Drop server transactions for tunnel route requests ([#21769](https://github.com/getsentry/sentry-javascript/pull/21769))
+
+<details>
+  <summary><strong>Internal Changes</strong></summary>
+
+- chore: Add external contributor to CHANGELOG.md ([#21832](https://github.com/getsentry/sentry-javascript/pull/21832))
+- chore: Hoist transitive imports for bundles ([#21858](https://github.com/getsentry/sentry-javascript/pull/21858))
+- chore: Mark http.query/http.fragment stripping for v11 url.query migration ([#21852](https://github.com/getsentry/sentry-javascript/pull/21852))
+- docs: Use Cloudflare nodejs_compat flag ([#21659](https://github.com/getsentry/sentry-javascript/pull/21659))
+- feat(server-utils): Add lru-memoizer diagnostics-channel integration ([#21786](https://github.com/getsentry/sentry-javascript/pull/21786))
+- feat(server-utils): Expose channel-based, streamlined `fastifyIntegration` ([#21706](https://github.com/getsentry/sentry-javascript/pull/21706))
+- feat(server-utils): Restore caller context for callback tracing channels ([#21863](https://github.com/getsentry/sentry-javascript/pull/21863))
+- ref(core): Move `spanStreamingIntegration` setup into `ServerRuntimeClient` ([#21814](https://github.com/getsentry/sentry-javascript/pull/21814))
+- ref(node): Infer orchestrion integration names ([#21834](https://github.com/getsentry/sentry-javascript/pull/21834))
+- ref(node): Move node-fetch instrumentation away from InstrumentBase ([#21778](https://github.com/getsentry/sentry-javascript/pull/21778))
+- ref(node): Streamline Prisma instrumentation (v6 and v7) ([#21819](https://github.com/getsentry/sentry-javascript/pull/21819))
+- ref(node): Streamline vendored mysql instrumentation ([#21568](https://github.com/getsentry/sentry-javascript/pull/21568))
+- ref(server-utils): Ensure ts3.8 has diagnostics channel shim ([#21845](https://github.com/getsentry/sentry-javascript/pull/21845))
+- ref(server-utils): Move mysql orchestrion integration onto bindTracingChannelToSpan ([#21865](https://github.com/getsentry/sentry-javascript/pull/21865))
+- ref(server-utils): Set error attributes on span and simplify error info extraction ([#21822](https://github.com/getsentry/sentry-javascript/pull/21822))
+- test: Introduce .unordered in node-integration-tests ([#21697](https://github.com/getsentry/sentry-javascript/pull/21697))
+- test(cloudflare): Align CF types and compat flags ([#21835](https://github.com/getsentry/sentry-javascript/pull/21835))
+- test(e2e/hono): Isolate request-data extraction tests onto a dedicated route ([#21869](https://github.com/getsentry/sentry-javascript/pull/21869))
+- test(node-integration): Harden knex mysql2 healthcheck to fix flaky test ([#21868](https://github.com/getsentry/sentry-javascript/pull/21868))
+- test(node-integration-tests): Fix flaky postgresjs basic transaction/error ordering ([#21870](https://github.com/getsentry/sentry-javascript/pull/21870))
+- test(node-integration-tests): Retry transient docker compose up failures ([#21860](https://github.com/getsentry/sentry-javascript/pull/21860))
+- test(nuxt): Test `mysql` instrumentation with orchestrion bundler plugin ([#21782](https://github.com/getsentry/sentry-javascript/pull/21782))
+
+</details>
+
+Work in this release was contributed by @suzunn. Thank you for your contribution!
+
 ## 10.62.0
 
 ### Important Changes

dev-packages/browser-integration-tests/suites/public-api/debug/test.ts

@@ -17,6 +17,15 @@ sentryTest('logs debug messages correctly', async ({ getLocalTestUrl, page }) =>
 
   await page.goto(url);
 
+  if (hasDebug) {
+    // The initial session capture is deferred to the browser's idle period, so its
+    // "Discarded session" warning is emitted asynchronously. Wait for it before
+    // logging so the console message order stays deterministic.
+    await expect
+      .poll(() => consoleMessages)
+      .toContain('Sentry Logger [warn]: Discarded session because of missing or non-string release');
+  }
+
   await page.evaluate(() => console.log('test log'));
 
   expect(consoleMessages).toEqual(
@@ -34,8 +43,8 @@ sentryTest('logs debug messages correctly', async ({ getLocalTestUrl, page }) =>
           'Sentry Logger [log]: Integration installed: Dedupe',
           'Sentry Logger [log]: Integration installed: HttpContext',
           'Sentry Logger [log]: Integration installed: CultureContext',
-          'Sentry Logger [warn]: Discarded session because of missing or non-string release',
           'Sentry Logger [log]: Integration installed: BrowserSession',
+          'Sentry Logger [warn]: Discarded session because of missing or non-string release',
           'test log',
         ]
       : ['[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle.', 'test log'],

dev-packages/browser-integration-tests/suites/public-api/startSpan/streamed/subject.js

@@ -7,7 +7,9 @@ Sentry.startSpan({ name: 'test-span', op: 'test' }, () => {
   inactiveSpan.end();
 
   Sentry.startSpanManual({ name: 'test-manual-span' }, span => {
-    // noop
+    // 2 = SPAN_STATUS_ERROR. The message must be preserved as the `sentry.status.message`
+    // attribute on the streamed span, since v2 statuses are reduced to ok/error.
+    span.setStatus({ code: 2, message: 'Connection Refused' });
     span.end();
   });
 });

dev-packages/browser-integration-tests/suites/public-api/startSpan/streamed/test.ts

@@ -11,6 +11,7 @@ import {
   SEMANTIC_ATTRIBUTE_SENTRY_SEGMENT_ID,
   SEMANTIC_ATTRIBUTE_SENTRY_SEGMENT_NAME,
   SEMANTIC_ATTRIBUTE_SENTRY_SOURCE,
+  SEMANTIC_ATTRIBUTE_SENTRY_STATUS_MESSAGE,
 } from '@sentry/core';
 import { sentryTest } from '../../../../utils/fixtures';
 import { shouldSkipTracingTest } from '../../../../utils/helpers';
@@ -171,14 +172,18 @@ sentryTest(
             type: 'string',
             value: 'production',
           },
+          [SEMANTIC_ATTRIBUTE_SENTRY_STATUS_MESSAGE]: {
+            type: 'string',
+            value: 'Connection Refused',
+          },
         },
         end_timestamp: expect.any(Number),
         is_segment: false,
         name: 'test-manual-span',
         parent_span_id: segmentSpanId,
         span_id: expect.stringMatching(/^[\da-f]{16}$/),
         start_timestamp: expect.any(Number),
-        status: 'ok',
+        status: 'error',
         trace_id: traceId,
       },
       {

dev-packages/browser-integration-tests/suites/sessions/user/subject.js

@@ -1,5 +1,7 @@
-Sentry.setUser({
-  id: '1337',
-  email: 'user@name.com',
-  username: 'user1337',
+document.getElementById('set-user').addEventListener('click', () => {
+  Sentry.setUser({
+    id: '1337',
+    email: 'user@name.com',
+    username: 'user1337',
+  });
 });

dev-packages/browser-integration-tests/suites/sessions/user/template.html

@@ -5,5 +5,6 @@
   </head>
   <body>
     <a id="navigate" href="#foo">Navigate</a>
+    <button id="set-user">Set user</button>
   </body>
 </html>

dev-packages/browser-integration-tests/suites/sessions/user/test.ts

@@ -2,15 +2,15 @@ import { expect } from '@playwright/test';
 import { sentryTest } from '../../../utils/fixtures';
 import { waitForSession } from '../../../utils/helpers';
 
-sentryTest('updates the session when setting the user', async ({ getLocalTestUrl, page }) => {
+sentryTest('updates the session when the user is set after the initial session', async ({ getLocalTestUrl, page }) => {
   const initialSessionPromise = waitForSession(page, s => !!s.init && s.status === 'ok');
-  const updatedSessionPromise = waitForSession(page, s => !s.init && s.status === 'ok');
 
   const url = await getLocalTestUrl({ testDir: __dirname });
   await page.goto(url);
 
+  // The initial session envelope is deferred (sent once the browser is idle). At this point
+  // no user has been set yet, so it carries no `did`.
   const initialSession = await initialSessionPromise;
-  const updatedSession = await updatedSessionPromise;
 
   expect(initialSession).toEqual({
     attrs: {
@@ -26,6 +26,12 @@ sentryTest('updates the session when setting the user', async ({ getLocalTestUrl
     timestamp: expect.any(String),
   });
 
+  // Setting the user _after_ the initial session was sent must still be captured as a
+  // dedicated session update carrying the `did`.
+  const updatedSessionPromise = waitForSession(page, s => !s.init && s.status === 'ok');
+  await page.locator('#set-user').click();
+  const updatedSession = await updatedSessionPromise;
+
   expect(updatedSession).toEqual({
     ...initialSession,
     init: false,
@@ -42,6 +48,10 @@ sentryTest('includes the user id in the exited session', async ({ getLocalTestUr
 
   const initialSession = await initialSessionPromise;
 
+  // Set the user after the initial session was sent, then navigate so the (now exited)
+  // initial session carries the `did`.
+  await page.locator('#set-user').click();
+
   const exitedInitialSessionPromise = waitForSession(page, s => !s.init && s.status === 'exited');
 
   await page.locator('#navigate').click();
@@ -79,6 +89,10 @@ sentryTest('includes the user id in the subsequent session', async ({ getLocalTe
     timestamp: expect.any(String),
   });
 
+  // Set the user after the initial session was sent, then navigate so the subsequent
+  // session inherits the `did`.
+  await page.locator('#set-user').click();
+
   const secondSessionPromise = waitForSession(page, s => !!s.init && s.status === 'ok' && s.sid !== initialSession.sid);
 
   await page.locator('#navigate').click();

dev-packages/browser-integration-tests/suites/tracing/metrics/pageload-resource-spans/test.ts

@@ -65,6 +65,12 @@ sentryTest('adds resource spans to pageload transaction', async ({ getLocalTestU
   expect(scriptSpans?.map(({ description }) => description).sort()).toEqual(expectedScripts);
   expect(scriptSpans?.map(({ parent_span_id }) => parent_span_id)).toEqual(expectedScripts.map(() => spanId));
 
+  // The init bundle script is served from the test origin: its description is origin-relative,
+  // but `url.full` retains the full absolute URL (needed for span description inference).
+  const sameOriginScriptSpan = scriptSpans?.find(({ description }) => description === '/init.bundle.js');
+  expect(sameOriginScriptSpan?.data?.['url.same_origin']).toBe(true);
+  expect(sameOriginScriptSpan?.data?.['url.full']).toMatch(/^https?:\/\/.+\/init\.bundle\.js$/);
+
   const customScriptSpan = scriptSpans?.find(
     ({ description }) => description === 'https://sentry-test-site.example/path/to/script.js',
   );
@@ -94,6 +100,7 @@ sentryTest('adds resource spans to pageload transaction', async ({ getLocalTestU
       'server.address': 'sentry-test-site.example',
       'url.same_origin': false,
       'url.scheme': 'https',
+      'url.full': 'https://sentry-test-site.example/path/to/image.svg',
       ...(!isWebkitRun && {
         'http.response.status_code': expect.any(Number),
         'resource.render_blocking_status': 'non-blocking',
@@ -141,6 +148,7 @@ sentryTest('adds resource spans to pageload transaction', async ({ getLocalTestU
       'server.address': 'sentry-test-site.example',
       'url.same_origin': false,
       'url.scheme': 'https',
+      'url.full': 'https://sentry-test-site.example/path/to/style.css',
       ...(!isWebkitRun && {
         'http.response.status_code': expect.any(Number),
         'resource.render_blocking_status': 'non-blocking',
@@ -182,6 +190,7 @@ sentryTest('adds resource spans to pageload transaction', async ({ getLocalTestU
       'server.address': 'sentry-test-site.example',
       'url.same_origin': false,
       'url.scheme': 'https',
+      'url.full': 'https://sentry-test-site.example/path/to/script.js',
       ...(!isWebkitRun && {
         'http.response.status_code': expect.any(Number),
         'resource.render_blocking_status': 'non-blocking',

dev-packages/cloudflare-integration-tests/suites/basic/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_compat"],
+  "compatibility_flags": ["nodejs_als"],
 }