ref(server-utils): Add shared AI instrumentation base

.github/actions/install-dependencies/action.yml

@@ -15,7 +15,7 @@ runs:
       shell: bash
 
     - name: Check dependency cache
-      uses: actions/cache@v5
+      uses: actions/cache@v6.1.0
       id: cache_dependencies
       with:
         path: ${{ env.CACHED_DEPENDENCY_PATHS }}

.github/actions/install-playwright/action.yml

@@ -18,7 +18,7 @@ runs:
       working-directory: ${{ inputs.cwd }}
 
     - name: Restore cached playwright binaries
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6.1.0
       id: playwright-cache
       with:
         path: |
@@ -43,7 +43,7 @@ runs:
 
     # Only store cache on develop branch
     - name: Store cached playwright binaries
-      uses: actions/cache/save@v5
+      uses: actions/cache/save@v6.1.0
       if: github.event_name == 'push' && github.ref == 'refs/heads/develop'
       with:
         path: |

.github/actions/restore-cache/action.yml

@@ -11,7 +11,7 @@ runs:
   steps:
     - name: Check dependency cache
       id: dep-cache
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: ${{ env.CACHED_DEPENDENCY_PATHS }}
         key: ${{ inputs.dependency_cache_key }}

.github/workflows/auto-release.yml

@@ -51,7 +51,7 @@ jobs:
           node-version-file: 'package.json'
 
       - name: Prepare release
-        uses: getsentry/craft@cdb657d4bbc70cd497876ad158984b4d345a48ae # v2.26.14
+        uses: getsentry/craft@aeb16753a1764f3ef0768c03c499e3d2e4b7227c # v2.28.0
         if:
           github.event.pull_request.merged == true && steps.version-regex.outputs.match != '' &&
           steps.get_version.outputs.version != ''

.github/workflows/build.yml

@@ -121,7 +121,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Store NX cache
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6.1.0
         # Only cache this per-PR to speed up CI.
         if: github.event_name == 'pull_request'
         with:
@@ -206,7 +206,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Restore NX cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6.1.0
         with:
           path: |
             .nx/cache
@@ -245,7 +245,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Restore NX cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6.1.0
         with:
           path: |
             .nx/cache
@@ -968,7 +968,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Restore NX cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6.1.0
         with:
           path: |
             .nx/cache

.github/workflows/canary.yml

@@ -39,7 +39,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Check canary cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6.1.0
         with:
           path: ${{ env.CACHED_BUILD_PATHS }}
           key: canary-${{ env.HEAD_COMMIT }}
@@ -132,7 +132,7 @@ jobs:
           node-version-file: 'dev-packages/e2e-tests/test-applications/${{ matrix.test-application }}/package.json'
 
       - name: Restore canary cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6.1.0
         with:
           path: ${{ env.CACHED_BUILD_PATHS }}
           key: canary-${{ env.HEAD_COMMIT }}

.github/workflows/ci-metadata.yml

@@ -64,7 +64,7 @@ jobs:
 
       # Most changed packages are determined in job_build via Nx
       - name: Determine changed packages
-        uses: dorny/paths-filter@v4.0.1
+        uses: dorny/paths-filter@v4.0.2
         id: changed
         with:
           filters: |

.github/workflows/flaky-test-detector.yml

@@ -44,7 +44,7 @@ jobs:
           browsers: 'chromium'
 
       - name: Determine changed tests
-        uses: dorny/paths-filter@v4.0.1
+        uses: dorny/paths-filter@v4.0.2
         id: changed
         with:
           list-files: json

.github/workflows/pr-stale-notifier.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Warn and close stale PRs
-        uses: actions/stale@v10
+        uses: actions/stale@v11
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-issue-stale: -1

.github/workflows/release.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           node-version-file: 'package.json'
       - name: Prepare release
-        uses: getsentry/craft@cdb657d4bbc70cd497876ad158984b4d345a48ae # v2.26.14
+        uses: getsentry/craft@aeb16753a1764f3ef0768c03c499e3d2e4b7227c # v2.28.0
         env:
           GITHUB_TOKEN: ${{ steps.token.outputs.token }}
         with:

.size-limit.js

@@ -432,7 +432,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '200 KiB',
+    limit: '230 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {
@@ -452,7 +452,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '482 KiB',
+    limit: '540 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {

MIGRATION.md

@@ -526,6 +526,38 @@ Remove these options from your `next.config.js` / `next.config.ts`.
 
 The deprecated `sourceMapsUploadOptions` and other deprecated Vite/build plugin options were removed from `@sentry/astro`, `@sentry/nuxt`, `@sentry/sveltekit`, and `@sentry/react-router`. Use the top-level equivalents (e.g. `sourcemaps`, `release`, `authToken`, `org`, `project`, `telemetry`) instead.
 
+### `@sentry/nuxt`
+
+The deprecated `sourceMapsUploadOptions` module option was removed. Move its fields to the root level of the `sentry` module options. Note that `url` was renamed to `sentryUrl`, and `enabled` was replaced by `sourcemaps.disable` (inverted: `enabled: false` becomes `sourcemaps: { disable: true }`).
+
+```ts
+// nuxt.config.ts
+export default defineNuxtConfig({
+  modules: ['@sentry/nuxt/module'],
+  sentry: {
+    // before
+    sourceMapsUploadOptions: {
+      org: 'my-org',
+      project: 'my-project',
+      authToken: process.env.SENTRY_AUTH_TOKEN,
+      url: 'https://my-sentry.example.com',
+      sourcemaps: {
+        assets: ['./dist/**/*'],
+      },
+    },
+
+    // after
+    org: 'my-org',
+    project: 'my-project',
+    authToken: process.env.SENTRY_AUTH_TOKEN,
+    sentryUrl: 'https://my-sentry.example.com',
+    sourcemaps: {
+      assets: ['./dist/**/*'],
+    },
+  },
+});
+```
+
 ## 4. Package Removals
 
 ### `@sentry/types` is no longer published

dev-packages/cloudflare-integration-tests/suites/basic/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/d1/wrangler.jsonc

@@ -2,7 +2,7 @@
   "name": "d1-test-worker",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
   "d1_databases": [
     {
       "binding": "DB",

dev-packages/cloudflare-integration-tests/suites/double-instrumentation/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/integrations/http-server-disabled/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/integrations/http-server-filtered/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/integrations/http-server-ignore/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/integrations/http-server-small/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/integrations/http-server/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/prisma/index.ts

@@ -1,6 +1,6 @@
 import type { D1Database } from '@cloudflare/workers-types';
 import { PrismaD1 } from '@prisma/adapter-d1';
-import * as Sentry from '@sentry/cloudflare/nodejs_compat';
+import * as Sentry from '@sentry/cloudflare';
 import { PrismaClient } from './generated';
 
 interface Env {

dev-packages/cloudflare-integration-tests/suites/prisma/test.ts

@@ -18,7 +18,7 @@ function envelopeItem(envelope: Envelope): Record<string, unknown> {
   return envelope[1][0]![1] as Record<string, unknown>;
 }
 
-it('captures a transaction with Prisma spans for a D1 query via the @sentry/cloudflare/nodejs_compat prismaIntegration', async ({
+it('captures a transaction with Prisma spans for a D1 query via the @sentry/cloudflare prismaIntegration', async ({
   signal,
 }) => {
   const runner = createRunner(__dirname)

dev-packages/cloudflare-integration-tests/suites/public-api/metrics/server-address/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/public-api/startSpan-streamed/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "start-span-streamed",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/queue/wrangler.jsonc

@@ -2,7 +2,7 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
   "queues": {
     "producers": [
       {

dev-packages/cloudflare-integration-tests/suites/r2/wrangler.jsonc

@@ -2,7 +2,7 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
   "r2_buckets": [
     {
       "binding": "MY_BUCKET",

dev-packages/cloudflare-integration-tests/suites/ratelimit/wrangler.jsonc

@@ -2,7 +2,7 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
   "ratelimits": [
     {
       "name": "MY_RATE_LIMITER",

dev-packages/cloudflare-integration-tests/suites/request-handler/subpath/index.ts

@@ -0,0 +1,25 @@
+import { wrapRequestHandler } from '@sentry/cloudflare/request';
+
+interface Env {
+  SENTRY_DSN: string;
+}
+
+// Mirrors how Hydrogen (Remix) uses the SDK: only `wrapRequestHandler` from the
+// `/request` subpath, without `nodejs_compat` compatibility flags.
+// The subpath must stay free of Node.js-only modules.
+export default {
+  async fetch(request, env, ctx) {
+    return wrapRequestHandler(
+      {
+        options: {
+          dsn: env.SENTRY_DSN,
+          traceLifecycle: 'static',
+          tracesSampleRate: 1,
+        },
+        request,
+        context: ctx,
+      },
+      () => new Response('ok'),
+    );
+  },
+} satisfies ExportedHandler<Env>;

dev-packages/cloudflare-integration-tests/suites/request-handler/subpath/test.ts

@@ -0,0 +1,18 @@
+import { expect, it } from 'vitest';
+import { createRunner } from '../../../runner';
+
+it('captures a transaction via wrapRequestHandler from the /request subpath without node compatibility flags', async ({
+  signal,
+}) => {
+  const runner = createRunner(__dirname)
+    .expect(envelope => {
+      const transactionEvent = envelope[1]?.[0]?.[1] as any;
+      expect(transactionEvent.transaction).toBe('GET /');
+      expect(transactionEvent.contexts?.trace?.op).toBe('http.server');
+      expect(transactionEvent.contexts?.trace?.origin).toBe('auto.http.cloudflare');
+    })
+    .start(signal);
+
+  await runner.makeRequest('get', '/');
+  await runner.completed();
+});

dev-packages/cloudflare-integration-tests/suites/request-handler/subpath/wrangler.jsonc

@@ -0,0 +1,5 @@
+{
+  "name": "worker-name",
+  "compatibility_date": "2025-06-17",
+  "main": "index.ts",
+}

dev-packages/cloudflare-integration-tests/suites/tracing/anthropic-ai/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "anthropic-ai-worker",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/tracing/d1/wrangler.jsonc

@@ -2,7 +2,7 @@
   "name": "d1-worker",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
   "d1_databases": [
     {
       "binding": "DB",

dev-packages/cloudflare-integration-tests/suites/tracing/dsc-url-source/wrangler.jsonc

@@ -2,5 +2,5 @@
   "name": "worker-name",
   "compatibility_date": "2025-06-17",
   "main": "index.ts",
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/tracing/durableobject-alarm-links-sync/wrangler.jsonc

@@ -16,5 +16,5 @@
       },
     ],
   },
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }

dev-packages/cloudflare-integration-tests/suites/tracing/durableobject-alarm-links/wrangler.jsonc

@@ -16,5 +16,5 @@
       },
     ],
   },
-  "compatibility_flags": ["nodejs_als"],
+  "compatibility_flags": ["nodejs_compat"],
 }