[pull] master from getsentry:master

.claude/settings.json

@@ -0,0 +1,14 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(find:*)",
+      "Bash(ls:*)",
+      "Bash(git:*)",
+      "Bash(yarn:*)",
+      "WebFetch(domain:github.com)",
+      "Bash(grep:*)",
+      "Bash(mv:*)"
+    ],
+    "deny": []
+  }
+}

.craft.yml

@@ -1,70 +1,230 @@
-minVersion: '0.14.0'
-github:
-  owner: getsentry
-  repo: sentry-javascript
+minVersion: '0.23.1'
 changelogPolicy: simple
-statusProvider:
-  name: github
-artifactProvider:
-  name: github
 preReleaseCommand: bash scripts/craft-pre-release.sh
 targets:
+  # NPM Targets
+  ## 1. Base Packages, node or browser SDKs depend on
+  ## 1.1 Types
   - name: npm
-  - name: github
-    includeNames: /^sentry-.*$/
+    id: '@sentry/types'
+    includeNames: /^sentry-types-\d.*\.tgz$/
+  ## 1.2 Core SDKs
+  - name: npm
+    id: '@sentry/core'
+    includeNames: /^sentry-core-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/node-core'
+    includeNames: /^sentry-node-core-\d.*\.tgz$/
+  ## 1.3 Browser Utils package
+  - name: npm
+    id: '@sentry-internal/browser-utils'
+    includeNames: /^sentry-internal-browser-utils-\d.*\.tgz$/
+  ## 1.4 Replay Internal package (browser only)
+  - name: npm
+    id: '@sentry-internal/replay'
+    includeNames: /^sentry-internal-replay-\d.*\.tgz$/
+  ## 1.5 OpenTelemetry package
+  - name: npm
+    id: '@sentry/opentelemetry'
+    includeNames: /^sentry-opentelemetry-\d.*\.tgz$/
+  ## 1.6 Feedback package (browser only)
+  - name: npm
+    id: '@sentry-internal/feedback'
+    includeNames: /^sentry-internal-feedback-\d.*\.tgz$/
+  ## 1.7 ReplayCanvas package (browser only)
+  - name: npm
+    id: '@sentry-internal/replay-canvas'
+    includeNames: /^sentry-internal-replay-canvas-\d.*\.tgz$/
+
+  ## 2. Browser & Node SDKs
+  - name: npm
+    id: '@sentry/browser'
+    includeNames: /^sentry-browser-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/node'
+    includeNames: /^sentry-node-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/profiling-node'
+    includeNames: /^sentry-profiling-node-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/node-native'
+    includeNames: /^sentry-node-native-\d.*\.tgz$/
+
+  ## 3 Browser-based Packages
+  - name: npm
+    id: '@sentry/angular'
+    includeNames: /^sentry-angular-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/ember'
+    includeNames: /^sentry-ember-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/react'
+    includeNames: /^sentry-react-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/solid'
+    includeNames: /^sentry-solid-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/svelte'
+    includeNames: /^sentry-svelte-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/vue'
+    includeNames: /^sentry-vue-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/wasm'
+    includeNames: /^sentry-wasm-\d.*\.tgz$/
+
+  ## 4. WinterCG Packages
+  - name: npm
+    id: '@sentry/vercel-edge'
+    includeNames: /^sentry-vercel-edge-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/cloudflare'
+    includeNames: /^sentry-cloudflare-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/deno'
+    includeNames: /^sentry-deno-\d.*\.tgz$/
+
+  ## 5. Node-based Packages
+  - name: npm
+    id: '@sentry/aws-serverless'
+    includeNames: /^sentry-aws-serverless-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/google-cloud-serverless'
+    includeNames: /^sentry-google-cloud-serverless-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/bun'
+    includeNames: /^sentry-bun-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/nestjs'
+    includeNames: /^sentry-nestjs-\d.*\.tgz$/
+
+  ## 6. Fullstack/Meta Frameworks (depending on Node and Browser or Framework SDKs)
+  - name: npm
+    id: '@sentry/nextjs'
+    includeNames: /^sentry-nextjs-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/nuxt'
+    includeNames: /^sentry-nuxt-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/remix'
+    includeNames: /^sentry-remix-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/solidstart'
+    includeNames: /^sentry-solidstart-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/sveltekit'
+    includeNames: /^sentry-sveltekit-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/tanstackstart'
+    includeNames: /^sentry-tanstackstart-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/tanstackstart-react'
+    includeNames: /^sentry-tanstackstart-react-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/gatsby'
+    includeNames: /^sentry-gatsby-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/astro'
+    includeNames: /^sentry-astro-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry/react-router'
+    includeNames: /^sentry-react-router-\d.*\.tgz$/
+
+  ## 7. Other Packages
+  ## 7.1
+  - name: npm
+    id: '@sentry-internal/typescript'
+    includeNames: /^sentry-internal-typescript-\d.*\.tgz$/
+  - name: npm
+    id: '@sentry-internal/eslint-plugin-sdk'
+    includeNames: /^sentry-internal-eslint-plugin-sdk-\d.*\.tgz$/
+  ## 7.2
+  - name: npm
+    id: '@sentry-internal/eslint-config-sdk'
+    includeNames: /^sentry-internal-eslint-config-sdk-\d.*\.tgz$/
+
+  # AWS Lambda Layer target
+  - name: aws-lambda-layer
+    includeNames: /^sentry-node-serverless-\d+.\d+.\d+(-(beta|alpha|rc)\.\d+)?\.zip$/
+    layerName: SentryNodeServerlessSDKv10
+    compatibleRuntimes:
+      - name: node
+        versions:
+          - nodejs18.x
+          - nodejs20.x
+          - nodejs22.x
+    license: MIT
+
+  # CDN Bundle Target
   - name: gcs
+    id: 'browser-cdn-bundles'
     includeNames: /.*\.js.*$/
     bucket: sentry-js-sdk
     paths:
       - path: /{{version}}/
         metadata:
           cacheControl: 'public, max-age=31536000'
+
+  # Github Release Target
+  - name: github
+    includeNames: /^sentry-.*$/
+
+  # Sentry Release Registry Target
   - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-browser-.*\.tgz$/
-    includeNames: /\.js$/
-    checksums:
-      - algorithm: sha384
-        format: base64
-    config:
-      canonical: 'npm:@sentry/browser'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-node-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/node'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-react-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/react'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-vue-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/vue'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-gatsby-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/gatsby'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-angular-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/angular'
-  - name: registry
-    type: sdk
-    onlyIfPresent: /^sentry-wasm-.*\.tgz$/
-    config:
-      canonical: 'npm:@sentry/wasm'
-  - name: aws-lambda-layer
-    includeNames: /^sentry-node-serverless-\d+(\.\d+)*\.zip$/
-    layerName: SentryNodeServerlessSDK
-    compatibleRuntimes:
-      - name: node
-        versions:
-          - nodejs10.x
-          - nodejs12.x
-          - nodejs14.x
-    license: MIT
+    sdks:
+      'npm:@sentry/angular':
+        onlyIfPresent: /^sentry-angular-\d.*\.tgz$/
+      'npm:@sentry/astro':
+        onlyIfPresent: /^sentry-astro-\d.*\.tgz$/
+      'npm:@sentry/aws-serverless':
+        onlyIfPresent: /^sentry-aws-serverless-\d.*\.tgz$/
+      'npm:@sentry/browser':
+        onlyIfPresent: /^sentry-browser-\d.*\.tgz$/
+        includeNames: /\.js$/
+        checksums:
+          - algorithm: sha384
+            format: base64
+      'npm:@sentry/bun':
+        onlyIfPresent: /^sentry-bun-\d.*\.tgz$/
+      'npm:@sentry/cloudflare':
+        onlyIfPresent: /^sentry-cloudflare-\d.*\.tgz$/
+      'npm:@sentry/deno':
+        onlyIfPresent: /^sentry-deno-\d.*\.tgz$/
+      'npm:@sentry/ember':
+        onlyIfPresent: /^sentry-ember-\d.*\.tgz$/
+      'npm:@sentry/gatsby':
+        onlyIfPresent: /^sentry-gatsby-\d.*\.tgz$/
+      'npm:@sentry/google-cloud-serverless':
+        onlyIfPresent: /^sentry-google-cloud-serverless-\d.*\.tgz$/
+      'npm:@sentry/nestjs':
+        onlyIfPresent: /^sentry-nestjs-\d.*\.tgz$/
+      'npm:@sentry/nextjs':
+        onlyIfPresent: /^sentry-nextjs-\d.*\.tgz$/
+      'npm:@sentry/nuxt':
+        onlyIfPresent: /^sentry-nuxt-\d.*\.tgz$/
+      'npm:@sentry/node':
+        onlyIfPresent: /^sentry-node-\d.*\.tgz$/
+      'npm:@sentry/node-core':
+        onlyIfPresent: /^sentry-node-core-\d.*\.tgz$/
+      'npm:@sentry/react':
+        onlyIfPresent: /^sentry-react-\d.*\.tgz$/
+      'npm:@sentry/react-router':
+        onlyIfPresent: /^sentry-react-router-\d.*\.tgz$/
+      'npm:@sentry/remix':
+        onlyIfPresent: /^sentry-remix-\d.*\.tgz$/
+      'npm:@sentry/solid':
+        onlyIfPresent: /^sentry-solid-\d.*\.tgz$/
+      'npm:@sentry/solidstart':
+        onlyIfPresent: /^sentry-solidstart-\d.*\.tgz$/
+      'npm:@sentry/svelte':
+        onlyIfPresent: /^sentry-svelte-\d.*\.tgz$/
+      'npm:@sentry/sveltekit':
+        onlyIfPresent: /^sentry-sveltekit-\d.*\.tgz$/
+      'npm:@sentry/tanstackstart-react':
+        onlyIfPresent: /^sentry-tanstackstart-react-\d.*\.tgz$/
+      'npm:@sentry/vercel-edge':
+        onlyIfPresent: /^sentry-vercel-edge-\d.*\.tgz$/
+      'npm:@sentry/vue':
+        onlyIfPresent: /^sentry-vue-\d.*\.tgz$/
+      'npm:@sentry/wasm':
+        onlyIfPresent: /^sentry-wasm-\d.*\.tgz$/

.cursor/BUGBOT.md

@@ -0,0 +1,43 @@
+# PR Review Guidelines for Cursor Bot
+
+You are reviewing a pull request for the Sentry JavaScript SDK.
+Flag any of the following indicators or missing requirements.
+If you find anything to flag, mention that you flagged this in the review because it was mentioned in this rules file.
+These issues are only relevant for production code.
+Do not flag the issues below if they appear in tests.
+
+## Critical Issues to Flag
+
+### Security Vulnerabilities
+
+- Exposed secrets, API keys, tokens or creentials in code or comments
+- Unsafe use of `eval()`, `Function()`, or `innerHTML`
+- Unsafe regular expressions that could cause ReDoS attacks
+
+### Breaking Changes
+
+- Public API changes without proper deprecation notices
+- Removal of publicly exported functions, classes, or types. Internal removals are fine!
+- Changes to function signatures in public APIs
+
+## SDK-relevant issues
+
+### Performance Issues
+
+- Multiple loops over the same array (for example, using `.filter`, .`foreach`, chained). Suggest a classic `for` loop as a replacement.
+- Memory leaks from event listeners, timers, or closures not being cleaned up or unsubscribing
+- Large bundle size increases in browser packages. Sometimes they're unavoidable but flag them anyway.
+
+### Auto instrumentation, SDK integrations, Sentry-specific conventions
+
+- When calling any `startSpan` API (`startInactiveSpan`, `startSpanManual`, etc), always ensure that the following span attributes are set:
+  - `SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN` (`'sentry.origin'`) with a proper span origin
+  - `SEMANTIC_ATTRIBUTE_SENTRY_OP` (`'sentry.op'`) with a proper span op
+- When calling `captureException`, always make sure that the `mechanism` is set:
+  - `handled`: must be set to `true` or `false`
+  - `type`: must be set to a proper origin (i.e. identify the integration and part in the integration that caught the exception).
+    - The type should align with the `SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN` if a span wraps the `captureException` call.
+    - If there's no direct span that's wrapping the captured exception, apply a proper `type` value, following the same naming
+      convention as the `SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN` value.
+- When calling `startSpan`, check if error cases are handled. If flag that it might make sense to try/catch and call `captureException`.
+- When calling `generateInstrumentationOnce`, the passed in name MUST match the name of the integration that uses it. If there are more than one instrumentations, they need to follow the pattern `${INSTRUMENTATION_NAME}.some-suffix`.

.cursor/commands/publish_release.md

@@ -0,0 +1,5 @@
+# Release Command
+
+Execute the standard Sentry JavaScript SDK release process.
+
+Find the "publishing_release" rule in `.cursor/rules/publishing_release` and follow those complete instructions step by step.

.cursor/environment.json

@@ -0,0 +1,12 @@
+{
+  "name": "Sentry JavaScript SDK Development",
+  "install": "curl https://get.volta.sh | bash && export VOLTA_HOME=\"$HOME/.volta\" && export PATH=\"$VOLTA_HOME/bin:$PATH\" && export VOLTA_FEATURE_PNPM=1 && yarn install",
+  "start": "export VOLTA_HOME=\"$HOME/.volta\" && export PATH=\"$VOLTA_HOME/bin:$PATH\" && export VOLTA_FEATURE_PNPM=1",
+  "terminals": [
+    {
+      "name": "Development",
+      "command": "export VOLTA_HOME=\"$HOME/.volta\" && export PATH=\"$VOLTA_HOME/bin:$PATH\" && export VOLTA_FEATURE_PNPM=1 && echo 'Volta setup complete. Node version:' && node --version && echo 'Yarn version:' && yarn --version",
+      "description": "Main development terminal with Volta environment configured"
+    }
+  ]
+}