Skip to content

Update Sentry CLI from 3.3.3 to 3.4.3#297

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
update-sentry-cli-from-3.3.3-to-3.4.3
Open

Update Sentry CLI from 3.3.3 to 3.4.3#297
github-actions[bot] wants to merge 1 commit into
mainfrom
update-sentry-cli-from-3.3.3-to-3.4.3

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

https://github.com/getsentry/sentry-cli/releases/tag/3.4.3

Security Fixes

  • Behavior-breaking: Disable Xcode Info.plist preprocessing by default to avoid passing project-controlled compiler settings to cc during release auto-discovery. This affects sentry-cli releases propose-version, sentry-cli send-event and sentry-cli bash-hook --send-event release inference, and sentry-cli react-native xcode auto-release detection. Use --allow-xcode-infoplist-preprocessing only for trusted projects that require preprocessing.
  • Ensure restrictive file permissions maintained when sentry-cli login updates existing config files.
  • Disable TLS verification only when http.verify_ssl is set to false, case-insensitively.
  • Shell-escape generated bash-hook arguments, including paths, tags, release names, and the CLI path.
  • Stop sending environment variables in sentry-cli bash-hook events.
  • Verify the downloaded binary checksum before replacing the current executable in sentry-cli update.

Performance

  • (snapshots) Skip uploading images that already exist in objectstore by batch-checking with HEAD requests first (#3305)

Fixes

  • (snapshots) Reject snapshot uploads that have a PR number but no base SHA, since comparisons cannot work without a base reference (#3300)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants