v1.1.3

Bug Fixes

• Resolve index maps and match frames by filename and custom schemes
• Keep the exception when a stack frame is malformed
• Keep at least one user with the Users permission
• Rebase runtime image on CA bundle without emSign ECC Root CA - G3

Upgrade notes

• Docker users: recreate your containers from the new image. The runtime image now uses Debian ca-certificates 20250419+deb13u1, which removes emSign ECC Root CA - G3 after the eMudhra/emSign CA incident. Go 1.27.3 in v1.1.2 already distrusts the affected intermediate CAs; this also removes the root.
• Binary installs use the host's trust store: update the OS ca-certificates package.
• Migration 0035 runs automatically on start. It rewrites stored source map URLs to the ~/path form, so maps uploaded as app:///main.js or main.js keep matching. Frames from Cloudflare Workers, Node and React Native (app:///) now find maps uploaded under their file name too.
• Source maps with sections (index maps, for example from Turbopack) now resolve. Before, they were stored but never matched; uploads of invalid index maps are now refused with a 400.
• Issue grouping: events whose SDKs send a malformed stack frame (for example a string in_app) now group by their exception instead of as if they had none, so they may open new issues instead of joining an unrelated one.
• User management: removing the Users permission from the last user who has it, or deleting that user, is now refused with a 409.