Skip to content

ref(server-utils): Add shared AI instrumentation base - #22941

Closed
nicohrubec wants to merge 16 commits into
jp/vercel-ai-defaultfrom
ref/move-ai-integrations-to-server-utils
Closed

ref(server-utils): Add shared AI instrumentation base#22941
nicohrubec wants to merge 16 commits into
jp/vercel-ai-defaultfrom
ref/move-ai-integrations-to-server-utils

Conversation

@nicohrubec

@nicohrubec nicohrubec commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

First PR in a stack that moves the AI/gen-ai integrations out of @sentry/core into @sentry/server-utils, one provider at a time.

This PR is additive only: it copies the shared gen-ai base (gen-ai-attributes, mediaStripping, messageTruncation, and the recording/token/streaming utils) into @sentry/server-utils/src/ai/core. Nothing imports it yet — the provider PRs stacked on top consume it as they move over. @sentry/core keeps its own copy until the final cleanup PR.

Part of the v11 major. Stacked on the cloudflare nodejs_compat-removal work (#22896 → #22900 → #22901).

🤖 Generated with Claude Code

@nicohrubec @claude
feat(nuxt)!: Remove deprecated sourceMapsUploadOptions module option (
9e969da 
#22875)

Removes the deprecated `sourceMapsUploadOptions` module option from
`@sentry/nuxt` in favor of the existing root-level options.

Fixes #22249

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
cursor[bot]
cursor Bot reviewed Aug 3, 2026
View reviewed changes
Comment thread packages/cloudflare/src/client.ts Outdated
@nicohrubec
nicohrubec force-pushed the ref/move-ai-integrations-to-server-utils branch from a1ad0bd to 2dbc8a7 Compare August 3, 2026 09:34
andreiborza and others added 2 commits August 3, 2026 11:35
@andreiborza @isaacs
feat: Streamline isolation scope handling & reset in isolation scopes (…
ae3de33 
…#22890)

This PR does two things:

1. Removes any usage of propagation context on isolation scope. We never
really need/read this, as the current scope one will always overwrite
this. Generally we should only ever set/read propagation context on
current scope.
2. Adjust server-side withIsolationScope to reset the propagation
context unless it is continuing a trace. Today, this kind of works in
otel-based places because we wrap root spans in `startNewTrace`. But
this does not align with core/browser handling, so going forward this
will be removed. instead, we want this logic to be applied in an
isolation scope, so the following code will result in separate traces:

```js
Sentry.withIsolationScope(() => {
  Sentry.startSpan({ name: 'process 1' }, () => ...);
});

Sentry.withIsolationScope(() => {
  Sentry.startSpan({ name: 'process 2' }, () => ...);
});
```

without this change, both of these spans would be part of the same
trace, which is not what we want in server.

note: In browser, we do not actually fork the isolation scope, there is
just a single one, so this does not apply.

---------

Co-authored-by: isaacs <i@izs.me>
Co-authored-by: Andrei Borza <andrei.borza@sentry.io>
@dependabot
ci(deps): Bump getsentry/craft from 2.26.14 to 2.28.0 (#22932)
66acbf2 
Bumps [getsentry/craft](https://github.com/getsentry/craft) from 2.26.14
to 2.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/releases">getsentry/craft's
releases</a>.</em></p>
<blockquote>
<h2>2.28.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(aws-lambda-layer) Add CompatibleArchitectures and per-region
failure improvements by <a
href="https://github.com/pabloDeputter"><code>@​pabloDeputter</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/861">#861</a></li>
</ul>
<h2>2.27.2</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(commit-on-git) Use proper username and pass for by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/862">#862</a></li>
</ul>
<h2>2.27.1</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(crates) Recognize more already-published error messages by <a
href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/859">#859</a></li>
</ul>
<h2>2.27.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(targets) Add cloudflare deploy target by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/843">#843</a></li>
<li>Prefix-aware read paths for monorepo multi-product releases by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/847">#847</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(cloudflare) Default to worker, optional account id, infer prod
branch by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/846">#846</a></li>
<li>(crates) Ignore dev dependencies when ordering packages by <a
href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/858">#858</a></li>
<li>Bump postcss to ^8.5.18 (high-severity Dependabot alert) by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/855">#855</a></li>
<li>Resolve 9 Dependabot security alerts by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/854">#854</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>Adopt the Sentry Starlight theme by <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/849">#849</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Deps Dev</h4>
<ul>
<li>Bump tar from 7.5.16 to 7.5.19 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/852">#852</a></li>
<li>Bump js-yaml from 4.2.0 to 4.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/853">#853</a></li>
<li>Bump shell-quote from 1.8.4 to 1.9.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/851">#851</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(deps) Bump sharp from 0.33.5 to 0.35.0 in /docs by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/850">#850</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/craft/blob/master/CHANGELOG.md">getsentry/craft's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>2.28.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(aws-lambda-layer) Add CompatibleArchitectures and per-region
failure improvements by <a
href="https://github.com/pabloDeputter"><code>@​pabloDeputter</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/861">#861</a></li>
</ul>
<h2>2.27.2</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(commit-on-git) Use proper username and pass for by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/862">#862</a></li>
</ul>
<h2>2.27.1</h2>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(crates) Recognize more already-published error messages by <a
href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/859">#859</a></li>
</ul>
<h2>2.27.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(targets) Add cloudflare deploy target by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/843">#843</a></li>
<li>Prefix-aware read paths for monorepo multi-product releases by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/847">#847</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>(cloudflare) Default to worker, optional account id, infer prod
branch by <a href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/846">#846</a></li>
<li>(crates) Ignore dev dependencies when ordering packages by <a
href="https://github.com/szokeasaurusrex"><code>@​szokeasaurusrex</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/858">#858</a></li>
<li>Bump postcss to ^8.5.18 (high-severity Dependabot alert) by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/855">#855</a></li>
<li>Resolve 9 Dependabot security alerts by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/854">#854</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>Adopt the Sentry Starlight theme by <a
href="https://github.com/sentry-junior"><code>@​sentry-junior</code></a>
in <a
href="https://redirect.github.com/getsentry/craft/pull/849">#849</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Deps Dev</h4>
<ul>
<li>Bump tar from 7.5.16 to 7.5.19 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/852">#852</a></li>
<li>Bump js-yaml from 4.2.0 to 4.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/853">#853</a></li>
<li>Bump shell-quote from 1.8.4 to 1.9.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/851">#851</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(deps) Bump sharp from 0.33.5 to 0.35.0 in /docs by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/getsentry/craft/pull/850">#850</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/craft/commit/aeb16753a1764f3ef0768c03c499e3d2e4b7227c"><code>aeb1675</code></a>
release: 2.28.0</li>
<li><a
href="https://github.com/getsentry/craft/commit/e69ff2245416962974ed5e58401158f44e46c187"><code>e69ff22</code></a>
feat(aws-lambda-layer): Add CompatibleArchitectures and per-region
failure im...</li>
<li><a
href="https://github.com/getsentry/craft/commit/719c6bef70a08667ca8e43539a94d45810670ddf"><code>719c6be</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/665469d87f91d74d8f259f7c8e96b643aba07542"><code>665469d</code></a>
Merge branch 'release/2.27.2'</li>
<li><a
href="https://github.com/getsentry/craft/commit/8fd703e550582184dafbf70d704ce33786e459e6"><code>8fd703e</code></a>
release: 2.27.2</li>
<li><a
href="https://github.com/getsentry/craft/commit/cfa8a9789e4970383f7acc47ff1f9dff5c9a21d0"><code>cfa8a97</code></a>
fix(commit-on-git): Use proper username and pass for (<a
href="https://redirect.github.com/getsentry/craft/issues/862">#862</a>)</li>
<li><a
href="https://github.com/getsentry/craft/commit/0652969eb311cebeee9478ac923829b1df0fde74"><code>0652969</code></a>
meta: Bump new development version</li>
<li><a
href="https://github.com/getsentry/craft/commit/4f1b8e4456a49055cc6464b7d3e1e118c83377c8"><code>4f1b8e4</code></a>
Merge branch 'release/2.27.1'</li>
<li><a
href="https://github.com/getsentry/craft/commit/e0c36c1d8c07f42082e1033b56a43c9b1f8dbe01"><code>e0c36c1</code></a>
release: 2.27.1</li>
<li><a
href="https://github.com/getsentry/craft/commit/d61cb8f8b049708ce5b1e0a94a4328818f78be24"><code>d61cb8f</code></a>
fix(crates): Recognize more already-published error messages (<a
href="https://redirect.github.com/getsentry/craft/issues/859">#859</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/craft/compare/cdb657d4bbc70cd497876ad158984b4d345a48ae...aeb16753a1764f3ef0768c03c499e3d2e4b7227c">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nicohrubec
nicohrubec force-pushed the ref/move-ai-integrations-to-server-utils branch from 2dbc8a7 to fcbc20e Compare August 3, 2026 09:40
cursor[bot]
cursor Bot reviewed Aug 3, 2026
View reviewed changes

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit fcbc20e. Configure here.

Comment thread packages/vercel-edge/src/index.ts Outdated
@github-actions

github-actions Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size % Change Change
@sentry/browser 29.91 kB added added
@sentry/browser - with treeshaking flags 28.11 kB added added
@sentry/browser (incl. Tracing) 47.35 kB added added
@sentry/browser (incl. Tracing + Span Streaming) 47.36 kB added added
@sentry/browser (incl. Tracing, Profiling) 52.13 kB added added
@sentry/browser (incl. Tracing, Replay) 86.69 kB added added
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 76.13 kB added added
@sentry/browser (incl. Tracing, Replay with Canvas) 91.41 kB added added
@sentry/browser (incl. Tracing, Replay, Feedback) 104.05 kB added added
@sentry/browser (incl. Feedback) 47.22 kB added added
@sentry/browser (incl. sendFeedback) 34.76 kB added added
@sentry/browser (incl. FeedbackAsync) 39.86 kB added added
@sentry/browser (incl. Metrics) 30.99 kB added added
@sentry/browser (incl. Logs) 31.22 kB added added
@sentry/browser (incl. Metrics & Logs) 31.89 kB added added
@sentry/react 31.73 kB added added
@sentry/react (incl. Tracing) 49.61 kB added added
@sentry/vue 34.98 kB added added
@sentry/vue (incl. Tracing) 49.34 kB added added
@sentry/svelte 29.94 kB added added
CDN Bundle 31.98 kB added added
CDN Bundle (incl. Tracing) 47.72 kB added added
CDN Bundle (incl. Logs, Metrics) 33.55 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) 49.07 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) 72.9 kB added added
CDN Bundle (incl. Tracing, Replay) 85.34 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 86.64 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) 91.13 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 92.44 kB added added
CDN Bundle - uncompressed 95.49 kB added added
CDN Bundle (incl. Tracing) - uncompressed 143.08 kB added added
CDN Bundle (incl. Logs, Metrics) - uncompressed 100.2 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 147.06 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 224.96 kB added added
CDN Bundle (incl. Tracing, Replay) - uncompressed 262.34 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 266.3 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 276.04 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 280 kB added added
@sentry/nextjs (client) 52.2 kB added added
@sentry/sveltekit (client) 47.8 kB added added
@sentry/core/server 80 kB added added
@sentry/core/browser 51.96 kB added added
@sentry/node 121.89 kB added added
@sentry/node/import (ESM hook with diagnostics-channel injection) 0 B added added
@sentry/node - without tracing 85.36 kB added added
@sentry/aws-serverless 94.01 kB added added
@sentry/cloudflare (withSentry) - minified 219.34 kB added added
@sentry/cloudflare (withSentry) 540.41 kB added added

dependabot Bot and others added 6 commits August 3, 2026 11:56
@dependabot
ci(deps): Bump dorny/paths-filter from 4.0.1 to 4.0.2 (#22931)
521986c 
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from
4.0.1 to 4.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/releases">dorny/paths-filter's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix warning message by <a
href="https://github.com/cgundy"><code>@​cgundy</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li>chore: fix GitHub spelling in logs by <a
href="https://github.com/squat"><code>@​squat</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
<li>fix: use rev-parse instead of branch --show-current for older git
compat by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/303">dorny/paths-filter#303</a></li>
<li>fix: work around git dubious ownership errors in container jobs by
<a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/317">dorny/paths-filter#317</a></li>
<li>docs: update changelog for v4.0.2 by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/318">dorny/paths-filter#318</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cgundy"><code>@​cgundy</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li><a href="https://github.com/squat"><code>@​squat</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2">https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md">dorny/paths-filter's
changelog</a>.</em></p>
<blockquote>
<h2>v4.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/317">Work
around git dubious ownership errors in container jobs</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/303">Use
rev-parse instead of branch --show-current for older git compat</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/282">Fix
warning message</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dorny/paths-filter/commit/7b450fff21473bca461d4b92ce414b9d0420d706"><code>7b450ff</code></a>
docs: update changelog for v4.0.2 (<a
href="https://redirect.github.com/dorny/paths-filter/issues/318">#318</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/928037783a71f24983ea250c6e55290c1b2de54f"><code>9280377</code></a>
fix: work around git dubious ownership errors in container jobs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/317">#317</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/f3ceefdc7ef57bc2d8560787d4b6c33e44044cec"><code>f3ceefd</code></a>
fix: use rev-parse instead of branch --show-current for older git compat
(<a
href="https://redirect.github.com/dorny/paths-filter/issues/303">#303</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/61f87a10cd2c304679af17bb73ef192addf33c1c"><code>61f87a1</code></a>
chore: fix GitHub spelling in logs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/278">#278</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/b82ff81ffbe6fb4b636bb5b47e37fd8d12b32632"><code>b82ff81</code></a>
fix warning message (<a
href="https://redirect.github.com/dorny/paths-filter/issues/282">#282</a>)</li>
<li>See full diff in <a
href="https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
feat(deps): Bump shell-quote from 1.8.4 to 1.10.0 (#22409)
b29fefa 
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to
1.10.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0">v1.10.0</a>
- 2026-07-10</h2>
<h3>Merged</h3>
<ul>
<li>[New] <code>parse</code>: add opt-in <code>splitUnquoted</code>
option for shell field-splitting of unquoted expansions <a
href="https://redirect.github.com/ljharb/shell-quote/pull/1"><code>[#1](https://github.com/ljharb/shell-quote/issues/1)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is consumed as one substitution <a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a></li>
<li>[Tests] <code>parse</code>: pin single-quote literalness and
unmatched-quote handling <a
href="https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62"><code>a0d03e3</code></a></li>
<li>[readme] remove the space in js code fences so evalmd evaluates them
<a
href="https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b"><code>2116fa3</code></a></li>
<li>[Tests] <code>quote</code>: pin conservative escaping of
<code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>,
<code>:</code>, <code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a></li>
<li>[readme] document that <code>quote</code> outputs POSIX quoting, not
<code>cmd.exe</code>/PowerShell <a
href="https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c"><code>100e96e</code></a></li>
<li>[readme] document <code>parse</code>'s supported parameter-expansion
subset <a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a></li>
<li>[Fix] <code>parse</code>: a backslash inside single quotes must not
escape the closing quote <a
href="https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491"><code>5d460a3</code></a></li>
<li>[readme] fix stale example outputs <a
href="https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6"><code>2de86f5</code></a></li>
<li>[Tests] <code>quote</code>: pin that a backslash with whitespace is
not doubled in single quotes (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/14">#14</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a></li>
<li>[readme] <code>quote</code>: use output verbatim; do not re-quote it
(<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a></li>
<li>[Refactor] <code>parse</code>: fix swapped
<code>SINGLE_QUOTE</code>/<code>DOUBLE_QUOTE</code> variable names <a
href="https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f"><code>801af5c</code></a></li>
<li>[types] fix an error TS v6 ignores but v7 fails on <a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code> <a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/ci</code>,
<code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6"><code>d390f9a</code></a></li>
<li>[Tests] <code>quote</code>: the tilde test escapes every
<code>~</code>, not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a></li>
</ul>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0">v1.9.0</a>
- 2026-06-24</h2>
<h3>Commits</h3>
<ul>
<li>[New] add types <a
href="https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a"><code>dca6e21</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad"><code>9aa9e8f</code></a></li>
<li>[Fix] <code>parse</code>: finalize tokens in linear time
(GHSA-395f-4hp3-45gv) <a
href="https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec"><code>7ff5488</code></a></li>
<li>[actions] update workflows <a
href="https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478"><code>75e8497</code></a></li>
<li>[actions] Windows + node 4/6/7: pin eslint to 9 before install,
since npm 2/3 cannot stage eslint 10<code>@types/esrecurse</code> <a
href="https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72"><code>3fb739d</code></a></li>
<li>[actions] retry <code>npm install</code> on Windows to survive npm
2/3 staging-rename flake <a
href="https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced"><code>abe0163</code></a></li>
<li>[actions] Windows + node 5/7: install deps with a modern node <a
href="https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326"><code>b4bafa2</code></a></li>
<li>[Fix] <code>quote</code>: escape leading <code>~</code> to prevent
shell tilde-expansion <a
href="https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91"><code>7a76c1a</code></a></li>
<li>[Dev Deps] update <code>auto-changelog</code>, <code>tape</code> <a
href="https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8"><code>7184b44</code></a></li>
<li>[Dev Deps] apparently <code>jackspeak</code> is no longer in the
graph <a
href="https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c"><code>9ba368a</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4"><code>64988d9</code></a>
v1.10.0</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a>
[Tests] <code>quote</code>: the tilde test escapes every <code>~</code>,
not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a>
[types] fix an error TS v6 ignores but v7 fails on</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a>
[Tests] <code>quote</code>: pin that a backslash with whitespace is not
doubled in singl...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a>
[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code></li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474"><code>b9545b3</code></a>
[New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option
for shell field-splitting of...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a>
[readme] <code>quote</code>: use output verbatim; do not re-quote it (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a>
[Tests] <code>quote</code>: pin conservative escaping of <code>=</code>,
<code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>,
<code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a>
[readme] document <code>parse</code>'s supported parameter-expansion
subset</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a>
[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is ...</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @Lms24
ci(deps): Bump actions/stale from 10 to 11 (#22933)
34748d4 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [actions/stale](https://github.com/actions/stale) from 10 to 11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/releases">actions/stale's
releases</a>.</em></p>
<blockquote>
<h2>v11.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Migrate to ESM and update dependencies by <a
href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1350">actions/stale#1350</a></li>
</ul>
<h3>Dependency Update</h3>
<ul>
<li>Override brace-expansion to 5.0.8 to address 24 high-severity
dependency vulnerabilities by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1351">actions/stale#1351</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v11.0.0">https://github.com/actions/stale/compare/v10...v11.0.0</a></p>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fixed <code>only-issue-types</code> validation by <a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump undici to 6.27.0 via override, clean up stale license files,
and version to 10.4.0. by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1342">actions/stale#1342</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10.3.0...v10.4.0">https://github.com/actions/stale/compare/v10.3.0...v10.4.0</a></p>
<h2>v10.3.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Enhancement: ignore stale labeling events by <a
href="https://github.com/shamoon"><code>@​shamoon</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade dependencies (<code>@​actions/core</code>,
<code>@​octokit/plugin-retry</code>, <a
href="https://github.com/typescript-eslint"><code>@​typescript-eslint</code></a>)
by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1335">actions/stale#1335</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/shamoon"><code>@​shamoon</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.3.0">https://github.com/actions/stale/compare/v10...v10.3.0</a></p>
<h2>v10.2.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fix checking state cache (fix <a
href="https://redirect.github.com/actions/stale/issues/1136">#1136</a>)
and switch to Octokit helper methods by <a
href="https://github.com/itchyny"><code>@​itchyny</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade js-yaml from 4.1.0 to 4.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1304">actions/stale#1304</a></li>
<li>Upgrade lodash from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1313">actions/stale#1313</a></li>
<li>Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from
5.1.1 to 7.0.0 by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1312">actions/stale#1312</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/itchyny"><code>@​itchyny</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.2.0">https://github.com/actions/stale/compare/v10...v10.2.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/blob/main/CHANGELOG.md">actions/stale's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h1>[10.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Add only-issue-types option to filter issues by type by <a
href="https://github.com/Bibo-Joshi"><code>@​Bibo-Joshi</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1255">actions/stale#1255</a></li>
</ul>
<h1>[10.0.0]</h1>
<h2>What's Changed</h2>
<h2>Breaking Changes</h2>
<ul>
<li>Upgrade to node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1279">actions/stale#1279</a>
Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></li>
</ul>
<h2>Enhancement</h2>
<ul>
<li>Introducing sort-by option by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1254">actions/stale#1254</a></li>
</ul>
<h2>Dependency Upgrades</h2>
<ul>
<li>Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1186">actions/stale#1186</a></li>
<li>Upgrade undici from 5.28.4 to 5.28.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1201">actions/stale#1201</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.2 by <a
href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1226">actions/stale#1226</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.2 to 4.0.3 by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1233">actions/stale#1233</a></li>
<li>Upgrade undici from 5.28.5 to 5.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1251">actions/stale#1251</a></li>
<li>Upgrade form-data to bring in fix for critical vulnerability by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/stale/pull/1277">actions/stale#1277</a></li>
</ul>
<h2>Documentation changes</h2>
<ul>
<li>Changelog update for recent releases by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1224">actions/stale#1224</a></li>
<li>Permissions update in Readme by <a
href="https://github.com/ghadimir"><code>@​ghadimir</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1248">actions/stale#1248</a></li>
</ul>
<h1>[9.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Documentation update by <a
href="https://github.com/Marukome0743"><code>@​Marukome0743</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1116">actions/stale#1116</a></li>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1179">actions/stale#1179</a></li>
<li>Update undici from 5.28.2 to 5.28.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1150">actions/stale#1150</a></li>
<li>Update actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1091">actions/stale#1091</a></li>
<li>Update actions/publish-action from 0.2.2 to 0.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1147">actions/stale#1147</a></li>
<li>Update ts-jest from 29.1.1 to 29.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1175">actions/stale#1175</a></li>
<li>Update <code>@​actions/core</code> from 1.10.1 to 1.11.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1191">actions/stale#1191</a></li>
<li>Update <code>@​types/jest</code> from 29.5.11 to 29.5.14 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1193">actions/stale#1193</a></li>
<li>Update <code>@​actions/cache</code> from 3.2.2 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1194">actions/stale#1194</a></li>
</ul>
<h1>[9.0.0]</h1>
<h2>Breaking Changes</h2>
<ol>
<li>Action is now stateful: If the action ends because of <a
href="https://github.com/actions/stale#operations-per-run">operations-per-run</a>
then the next run will start from the first unprocessed issue skipping
the issues processed during the previous run(s). The state is reset when
all the issues are processed. This should be considered for scheduling
workflow runs.</li>
<li>Version 9 of this action updated the runtime to Node.js 20. All
scripts are now run with Node.js 20 instead of Node.js 16 and are
affected by any breaking changes between Node.js 16 and 20.</li>
</ol>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/stale/commit/4391f3da665fdf50b6810c1a66712fb9ba21aa93"><code>4391f3d</code></a>
Fix 24 high severity vulnerabilities by overriding brace-expansion to
5.0.8 (...</li>
<li><a
href="https://github.com/actions/stale/commit/eaf9131fae5eafd0c31a64ebe3a2e183266fec48"><code>eaf9131</code></a>
refactor: update imports to use ES module syntax and improve test
structure (...</li>
<li>See full diff in <a
href="https://github.com/actions/stale/compare/v10...v11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/stale&package-manager=github_actions&previous-version=10&new-version=11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
@dependabot @Lms24 @claude
ci(deps): Bump actions/cache from 5 to 6 (#22935)
5249b2f 
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update packages, migrate to ESM by <a
href="https://github.com/Samirat"><code>@​Samirat</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1760">actions/cache#1760</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v6.0.0">https://github.com/actions/cache/compare/v5...v6.0.0</a></p>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> to v5.1.0 - handle read-only cache
access by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1775">actions/cache#1775</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.1.0">https://github.com/actions/cache/compare/v5...v5.1.0</a></p>
<h2>v5.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Update ts-http-runtime dependency by <a
href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1747">actions/cache#1747</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.5">https://github.com/actions/cache/compare/v5...v5.0.5</a></p>
<h2>v5.0.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Add release instructions and update maintainer docs by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1696">actions/cache#1696</a></li>
<li>Potential fix for code scanning alert no. 52: Workflow does not
contain permissions by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1697">actions/cache#1697</a></li>
<li>Fix workflow permissions and cleanup workflow names / formatting by
<a href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1699">actions/cache#1699</a></li>
<li>docs: Update examples to use the latest version by <a
href="https://github.com/XZTDean"><code>@​XZTDean</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li>
<li>Fix proxy integration tests by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1701">actions/cache#1701</a></li>
<li>Fix cache key in examples.md for bun.lock by <a
href="https://github.com/RyPeck"><code>@​RyPeck</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li>
<li>Update dependencies &amp; patch security vulnerabilities by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/cache/pull/1738">actions/cache#1738</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/XZTDean"><code>@​XZTDean</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li>
<li><a href="https://github.com/RyPeck"><code>@​RyPeck</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.4">https://github.com/actions/cache/compare/v5...v5.0.4</a></p>
<h2>v5.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.0.3">https://github.com/actions/cache/compare/v5...v5.0.3</a></p>
<h2>v.5.0.2</h2>
<h1>v5.0.2</h1>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>How to prepare a release</h2>
<blockquote>
<p>[!NOTE]
Relevant for maintainers with write access only.</p>
</blockquote>
<ol>
<li>Switch to a new branch from <code>main</code>.</li>
<li>Run <code>npm test</code> to ensure all tests are passing.</li>
<li>Update the version in <a
href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
<li>Run <code>npm run build</code> to update the compiled files.</li>
<li>Update this <a
href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
with the new version and changes in the <code>## Changelog</code>
section.</li>
<li>Run <code>licensed cache</code> to update the license report.</li>
<li>Run <code>licensed status</code> and resolve any warnings by
updating the <a
href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
file with the exceptions.</li>
<li>Commit your changes and push your branch upstream.</li>
<li>Open a pull request against <code>main</code> and get it reviewed
and merged.</li>
<li>Draft a new release <a
href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a>
use the same version number used in <code>package.json</code>
<ol>
<li>Create a new tag with the version number.</li>
<li>Auto generate release notes and update them to match the changes you
made in <code>RELEASES.md</code>.</li>
<li>Toggle the set as the latest release option.</li>
<li>Publish the release.</li>
</ol>
</li>
<li>Navigate to <a
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
<ol>
<li>There should be a workflow run queued with the same version
number.</li>
<li>Approve the run to publish the new version and update the major tags
for this action.</li>
</ol>
</li>
</ol>
<h2>Changelog</h2>
<h3>6.1.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a
href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435
Handle cache write error due to read-only token</a></li>
<li>Switch redundant &quot;Cache save failed&quot; warning to debug log
in save-only</li>
</ul>
<h3>6.0.0</h3>
<ul>
<li>Updated <code>@actions/cache</code> to ^6.0.1,
<code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to
^3.0.0, <code>@actions/io</code> to ^3.0.2</li>
<li>Migrated to ESM module system</li>
<li>Upgraded Jest to v30 and test infrastructure to be ESM
compatible</li>
</ul>
<h3>5.0.4</h3>
<ul>
<li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar
patterns)</li>
<li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb
protection, header validation fixes)</li>
<li>Bump <code>fast-xml-parser</code> to v5.5.6</li>
</ul>
<h3>5.0.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<h3>5.0.2</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9"><code>55cc834</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1768">#1768</a>
from jasongin/readonly-cache</li>
<li><a
href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337"><code>d8cd72f</code></a>
Bump <code>@​actions/cache</code> to v6.1.0 - handle cache write error
due to RO token</li>
<li><a
href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8"><code>2c8a9bd</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1760">#1760</a>
from actions/samirat/esm_migration_and_package_update</li>
<li><a
href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023"><code>e9b91fd</code></a>
Prettier fixes</li>
<li><a
href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb"><code>e4884b8</code></a>
Rebuild dist</li>
<li><a
href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f"><code>10baf01</code></a>
Fixed licenses</li>
<li><a
href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37"><code>e39b386</code></a>
Fix test mock return order</li>
<li><a
href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06"><code>b692820</code></a>
PR feedback</li>
<li><a
href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1"><code>6074912</code></a>
Rebuild dist bundles as ESM to match type:module</li>
<li><a
href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e"><code>5a912e8</code></a>
Fix lint and jest issues</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot @Lms24
feat(deps): Bump engine.io from 6.6.2 to 6.6.9 (#22410)
8795caa 
Bumps [engine.io](https://github.com/socketio/socket.io) from 6.6.2 to
6.6.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/socketio/socket.io/releases">engine.io's
releases</a>.</em></p>
<blockquote>
<h2>engine.io@6.6.9</h2>
<p>The <code>ws</code> dependency was bumped to <code>~8.21.0</code>
following <a
href="https://github.com/advisories/GHSA-96hv-2xvq-fx4p">CVE-2026-48779</a>.</p>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/websockets/ws/releases/tag/8.21.0"><code>ws@~8.21.0</code></a>
(<a
href="https://github.com/websockets/ws/compare/8.20.1...8.21.0">diff</a>)</li>
</ul>
<h2>engine.io-client@6.6.5</h2>
<p>The <code>ws</code> dependency was bumped to <code>~8.20.1</code>
following <a
href="https://github.com/advisories/GHSA-58qx-3vcg-4xpx">CVE-2026-45736</a>.</p>
<p>Note from the <code>ws</code> maintainers:</p>
<blockquote>
<p>Although the calculated CVSS severity is medium, the actual severity
is believed to be low, as the flaw is only exploitable through misuse
that is unlikely in practice.</p>
</blockquote>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/websockets/ws/releases/tag/8.20.1"><code>ws@~8.20.1</code></a>
(<a
href="https://github.com/websockets/ws/compare/8.18.3...8.20.1">diff</a>)</li>
</ul>
<h2>engine.io@6.6.8</h2>
<p>The <code>ws</code> dependency was bumped to <code>~8.20.1</code>
following <a
href="https://github.com/advisories/GHSA-58qx-3vcg-4xpx">CVE-2026-45736</a>.</p>
<p>Note from the <code>ws</code> maintainers:</p>
<blockquote>
<p>Although the calculated CVSS severity is medium, the actual severity
is believed to be low, as the flaw is only exploitable through misuse
that is unlikely in practice.</p>
</blockquote>
<h3>Bug Fixes</h3>
<ul>
<li>clean up resources upon WebTransport handshake failure (<a
href="https://github.com/socketio/socket.io/commit/f86b95fdba6dd260b3d2f57e69537aeb8de904bb">f86b95f</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/websockets/ws/releases/tag/8.20.1"><code>ws@~8.20.1</code></a>
(<a
href="https://github.com/websockets/ws/compare/8.18.3...8.20.1">diff</a>)</li>
</ul>
<h2>engine.io@6.6.7</h2>
<h3>Bug Fixes</h3>
<ul>
<li>close HTTP requests with invalid content type (<a
href="https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671">fc11285</a>)</li>
<li>handle invalid packets when upgrading to WebTransport (<a
href="https://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c">1fa1f46</a>)</li>
<li>prevent WebTransport connections when a middleware is registered (<a
href="https://github.com/socketio/socket.io/commit/d1f5aa93722a7f1ed729b96f771daf92a3dfdaf7">d1f5aa9</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a>
(no change)</li>
</ul>
<h2>engine.io@6.6.6</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/socketio/socket.io/commit/9dbec8128fa76c3143e93cf41991e903adfdc6da"><code>9dbec81</code></a>
chore(release): engine.io@6.6.9</li>
<li><a
href="https://github.com/socketio/socket.io/commit/3ad4e1f2dcf0e8b7d1bb05892be5ede2ab100abf"><code>3ad4e1f</code></a>
docs: improve example with PM2</li>
<li><a
href="https://github.com/socketio/socket.io/commit/0e5afeeba45b1b3dc926584253ac93e9d0c9eae1"><code>0e5afee</code></a>
docs: add example with PM2</li>
<li><a
href="https://github.com/socketio/socket.io/commit/eab9623c8476308e735472ce1bf70e90eb3de604"><code>eab9623</code></a>
docs(eio): correct maxHttpBufferSize default in JSDoc (<a
href="https://redirect.github.com/socketio/socket.io/issues/5508">#5508</a>)</li>
<li><a
href="https://github.com/socketio/socket.io/commit/c17890c5e5bd3a2f2e40ca240059906c51156d49"><code>c17890c</code></a>
docs: add documentation about WebTransport</li>
<li><a
href="https://github.com/socketio/socket.io/commit/20df6ae561e379dabdceecbdf0532ac052994cc9"><code>20df6ae</code></a>
docs(examples): add client-side load balancing example</li>
<li><a
href="https://github.com/socketio/socket.io/commit/16d19236132293c415f511aa5631de558be9ab70"><code>16d1923</code></a>
ci(publish): enable staged publishing</li>
<li><a
href="https://github.com/socketio/socket.io/commit/ad48a9bac723303d8bde81c4394828822abe57e0"><code>ad48a9b</code></a>
docs(examples): add example with HTTP/2</li>
<li><a
href="https://github.com/socketio/socket.io/commit/190572d2459681a757e23e6010939ac5e53fdfcf"><code>190572d</code></a>
refactor(eio-client): remove XMLHttpRequest from the definition
file</li>
<li><a
href="https://github.com/socketio/socket.io/commit/fad463c54d04799e1592361b0fd8344a5fab960d"><code>fad463c</code></a>
docs(examples): fix duplicate self messages (<a
href="https://redirect.github.com/socketio/socket.io/issues/5341">#5341</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/socketio/socket.io/compare/engine.io@6.6.2...engine.io@6.6.9">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for engine.io since your current version.</p>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
@dependabot @Lms24
feat(deps): Bump websocket-driver from 0.7.4 to 0.7.5 (#22307)
cb4fa0e 
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node)
from 0.7.4 to 0.7.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's
changelog</a>.</em></p>
<blockquote>
<h3>0.7.5 / 2026-06-04</h3>
<ul>
<li>Close a draft-75/76 connection if a length header grows to exceed
the
configured max length</li>
<li>Fail the connection if a message is larger than the configured max
length
after extension processing</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a>
Bump version to 0.7.5</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a>
Fail the connection if a message is larger than the configured max
length aft...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a>
Close a draft-75/76 connection if a length header grows to exceed the
configu...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a>
Test on Node v22, v24, and v26</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a>
Test on recent versions of Node</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a>
Switch from Travis CI to GitHub Actions</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a>
Travis update: cache npm modules, remove sudo, run on Node 15</li>
<li>See full diff in <a
href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=websocket-driver&package-manager=npm_and_yarn&previous-version=0.7.4&new-version=0.7.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getsentry/sentry-javascript/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Stracke <lukas.stracke@sentry.io>
@nicohrubec
nicohrubec force-pushed the ref/move-ai-integrations-to-server-utils branch from fcbc20e to d62c196 Compare August 3, 2026 10:50
@nicohrubec nicohrubec changed the title ref!: Move AI integrations from @sentry/core to @sentry/server-utils ref(server-utils): Add shared AI instrumentation base Aug 3, 2026
@nicohrubec
nicohrubec force-pushed the ref/move-ai-integrations-to-server-utils branch from d62c196 to 2771704 Compare August 3, 2026 11:17
chargome and others added 6 commits August 3, 2026 13:24
@chargome
test(e2e): Fix scripts for nuxt dev server (#22942)
993aebf 
`nuxt-start-dev-server.bash` starts a throwaway `pnpm dev` to generate
`sentry.server.config.mjs`, then cleans it up with `pkill -P $DEV_PID`.
That only kills the direct children of `pnpm dev`, so the actual `nuxt
dev` server survives and keeps holding the port. On the canary channel,
Nuxt added a directory-scoped dev lock, so the leftover process makes
the real `nuxt dev` refuse to start (`Another Nuxt dev is already
running`), exiting 1.

Cleanup now force-kills whatever still holds the port after the wait
loop, releasing the lock so the real server can start.

Applied to nuxt-5 as well, which carries the identical script.

closes #22938
@JPeer264
feat(cloudflare): Prepare for nodejs_compat entrypoint (#22891)
ad88bd8 
This changes `nodejs_als` to `nodejs_compat` in the tests, as the next
PRs do require that in order to import from it. In theory `nodejs_als`
would still work when building and then running the final result because
of tree-shaking, but `workerd` within wrangler in dev mode does not
tree-shake, that is why the `cloudflare-integration-tests` change it,
but the e2e tests keep the `nodejs_als`, just to probe how far we can go
with `als` support.
@JPeer264
ref(cloudflare): Ensure wrapRequestHandler stays free of node specifcs (
afa06b9 
#22894)

This prepares for the next PRs, where we extend the default integrations
with integrations that include node specific imports, such as the
diagnostics channels e.g. `vercelAIIntegration`.

The main refactors were

- There is now a `wrapRequestHandlerWithInit`, that holds only default
integrations and imports, which are "pure" and don't have any node
libraries, in order to support the [Oxygen
runtime](https://shopify.dev/docs/storefronts/headless/hydrogen/deployments/oxygen-runtime)
(a new test has a `wrangler.jsonc` without any compatibility flags, that
mirrors what Oxygen does in their environment). So this new function
only adds a third parameter with the `init`.
- There is also now a `./baseSdk`, which is just a refactor from the
previous `./sdk`, but without the extra imports
- The `./sdk` can now be extended with diagnostics channels, such as
`vercelAIIntegration` or other `server-utils` imports.
- To ensure the `/request` entrypoint stays "pure", there are 2 tests to
ensure that
  1. Just a unit test that checks for `node:` imports
2. A integration test that runs with `wrangler dev`, which doesn't have
tree-shaking baked in. Perfect for testing if there is a `node:` import
@JPeer264
chore(cloudflare): Remove restricted imports (#22896)
8078141 
Theoretically we would still need them for `/request`, but this would
get so complex in the patterns, that relying on the tests from the stack
above is easier and more future proof
@JPeer264
feat(cloudflare)!: Make the nodejs_compat entrypoint the default (#22900
90bd981 
)

This PR moves the capabilities of the `/nodejs_compat` entrypoint to the
default entrypoint and removes the entrypoint entirely.

On top I removed all `als` specific tests, as they're not relevant
anymore.

(ref: #18803)
@JPeer264
feat(cloudflare): Make vercelAIIntegration the default (#22901)
33725cd 
Just making things the default
An error occurred while trying to automatically change base from jp/vercel-ai-default to jp/node-compat-cloudflare August 3, 2026 11:40
@nicohrubec @claude
ref(server-utils): Add shared AI instrumentation base
aa07076 
Copy the shared gen-ai instrumentation base (gen-ai-attributes, mediaStripping,
messageTruncation, and the recording/token/streaming utils) into
`@sentry/server-utils/src/ai/core`. This is additive — nothing imports it yet.
It is the foundation for moving the AI provider integrations out of
`@sentry/core` one by one in the following PRs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@nicohrubec
nicohrubec force-pushed the ref/move-ai-integrations-to-server-utils branch from 2771704 to aa07076 Compare August 3, 2026 12:09
@nicohrubec nicohrubec closed this Aug 3, 2026
@nicohrubec nicohrubec reopened this Aug 3, 2026
@nicohrubec
nicohrubec deleted the branch jp/vercel-ai-default August 3, 2026 12:21
@nicohrubec nicohrubec closed this Aug 3, 2026
@nicohrubec nicohrubec mentioned this pull request Aug 3, 2026
Closed
@nicohrubec

nicohrubec commented Aug 3, 2026

Copy link
Copy Markdown
Member Author

Replaced by #22952 as part of restacking onto develop. New stack: #22952 → #22953 → #22954.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@nicohrubec @andreiborza @chargome @JPeer264