Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump io.sentry:sentry from 7.1.0 to 7.3.0 #274

Merged
merged 1 commit into from
Feb 7, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2024

Bumps io.sentry:sentry from 7.1.0 to 7.3.0.

Release notes

Sourced from io.sentry:sentry's releases.

7.3.0

Features

  • Added App Start profiling
    • This depends on the new option io.sentry.profiling.enable-app-start, other than the already existing io.sentry.traces.profiling.sample-rate.
    • Sampler functions can check the new isForNextAppStart flag, to adjust startup profiling sampling programmatically. Relevant PRs:
    • Decouple Profiler from Transaction (#3101)
    • Add options and sampling logic (#3121)
    • Add ContentProvider and start profile (#3128)
  • Extend internal performance collector APIs (#3102)
  • Collect slow and frozen frames for spans using OnFrameMetricsAvailableListener (#3111)
  • Interpolate total frame count to match span duration (#3158)

Fixes

  • Avoid multiple breadcrumbs from OkHttpEventListener (#3175)
  • Apply OkHttp listener auto finish timestamp to all running spans (#3167)
  • Fix not eligible for auto proxying warnings (#3154)
  • Set default fingerprint for ANRv2 events to correctly group background and foreground ANRs (#3164)
    • This will improve grouping of ANRs that have similar stacktraces but differ in background vs foreground state. Only affects newly-ingested ANR events with mechanism:AppExitInfo
  • Fix UserFeedback disk cache name conflicts with linked events (#3116)

Breaking changes

  • Remove HostnameVerifier option as it's flagged by security tools of some app stores (#3150)
    • If you were using this option, you have 3 possible paths going forward:
      • Provide a custom ITransportFactory through SentryOptions.setTransportFactory(), where you can copy over most of the parts like HttpConnection and AsyncHttpTransport from the SDK with necessary modifications
      • Get a certificate for your server through e.g. Let's Encrypt
      • Fork the SDK and add the hostname verifier back

Dependencies

7.2.0

Features

  • Handle monitor/check_in in client reports and rate limiter (#3096)
  • Add support for graphql-java version 21 (#3090)

Fixes

  • Avoid concurrency in AndroidProfiler performance data collection (#3130)
  • Improve thresholds for network changes breadcrumbs (#3083)
  • SchedulerFactoryBeanCustomizer now runs first so user customization is not overridden (#3095)
    • If you are setting global job listeners please also add SentryJobListener
  • Ensure serialVersionUID of Exception classes are unique (#3115)

... (truncated)

Changelog

Sourced from io.sentry:sentry's changelog.

7.3.0

Features

  • Added App Start profiling
    • This depends on the new option io.sentry.profiling.enable-app-start, other than the already existing io.sentry.traces.profiling.sample-rate.
    • Sampler functions can check the new isForNextAppStart flag, to adjust startup profiling sampling programmatically. Relevant PRs:
    • Decouple Profiler from Transaction (#3101)
    • Add options and sampling logic (#3121)
    • Add ContentProvider and start profile (#3128)
  • Extend internal performance collector APIs (#3102)
  • Collect slow and frozen frames for spans using OnFrameMetricsAvailableListener (#3111)
  • Interpolate total frame count to match span duration (#3158)

Fixes

  • Avoid multiple breadcrumbs from OkHttpEventListener (#3175)
  • Apply OkHttp listener auto finish timestamp to all running spans (#3167)
  • Fix not eligible for auto proxying warnings (#3154)
  • Set default fingerprint for ANRv2 events to correctly group background and foreground ANRs (#3164)
    • This will improve grouping of ANRs that have similar stacktraces but differ in background vs foreground state. Only affects newly-ingested ANR events with mechanism:AppExitInfo
  • Fix UserFeedback disk cache name conflicts with linked events (#3116)

Breaking changes

  • Remove HostnameVerifier option as it's flagged by security tools of some app stores (#3150)
    • If you were using this option, you have 3 possible paths going forward:
      • Provide a custom ITransportFactory through SentryOptions.setTransportFactory(), where you can copy over most of the parts like HttpConnection and AsyncHttpTransport from the SDK with necessary modifications
      • Get a certificate for your server through e.g. Let's Encrypt
      • Fork the SDK and add the hostname verifier back

Dependencies

7.2.0

Features

  • Handle monitor/check_in in client reports and rate limiter (#3096)
  • Add support for graphql-java version 21 (#3090)

Fixes

  • Avoid concurrency in AndroidProfiler performance data collection (#3130)
  • Improve thresholds for network changes breadcrumbs (#3083)
  • SchedulerFactoryBeanCustomizer now runs first so user customization is not overridden (#3095)

... (truncated)

Commits
  • f5871f9 release: 7.3.0
  • 6ce1197 Avoid multiple breadcrumbs from OkHttpEventListener (#3175)
  • 37dd784 Bump actions/setup-python from 4 to 5 (#3169)
  • 1ae2ec6 Check if SAUCE_USERNAME is available for verifying test results (#3173)
  • 9f743be Bump reactivecircus/android-emulator-runner from 2.29.0 to 2.30.1 (#3170)
  • 49eb944 Bump codecov/codecov-action from 3.1.4 to 3.1.5 (#3172)
  • 7ab32b6 Fix UserFeedback disk cache name conflicts with linked events (#3116)
  • 0816a48 Apply OkHttp listener auto finish timestamp to all running spans (#3167)
  • 99d7de8 Extend performance collector APIs (#3102)
  • 4010c59 Set default fingerprint for ANR v2 events to correctly group background and f...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.sentry:sentry](https://github.com/getsentry/sentry-java) from 7.1.0 to 7.3.0.
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@7.1.0...7.3.0)

---
updated-dependencies:
- dependency-name: io.sentry:sentry
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 30, 2024
Copy link

Qodana Community for JVM

214 new problems were found

Inspection name Severity Problems
@NotNull/@Nullable problems 🔶 Warning 42
Unused import 🔶 Warning 40
Nullability and data flow problems 🔶 Warning 36
Constant values 🔶 Warning 28
Incorrect string capitalization 🔶 Warning 27
Unstable API Usage 🔶 Warning 15
Class is exposed outside of its visibility scope 🔶 Warning 5
Unchecked warning 🔶 Warning 4
'equals()' between objects of inconvertible types 🔶 Warning 2
Field may be 'final' 🔶 Warning 2
'size() == 0' can be replaced with 'isEmpty()' 🔶 Warning 2
Unnecessarily escaped character 🔶 Warning 2
Redundant 'Collection.addAll()' call 🔶 Warning 1
Unnecessary 'null' check before method call 🔶 Warning 1
Redundant 'isInstance()' or 'cast()' call 🔶 Warning 1
'String.equals()' can be replaced with 'String.isEmpty()' 🔶 Warning 1
Unnecessary modifier 🔶 Warning 1
Constant values ◽️ Notice 3
Regular expression can be simplified ◽️ Notice 1

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

  1. Register at Qodana Cloud and configure the action
  2. Use GitHub Code Scanning with Qodana
  3. Host Qodana report at GitHub Pages
  4. Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/[email protected]
        with:
          upload-result: true
Contact Qodana team

Contact us at [email protected]

@cvette cvette merged commit a230af8 into main Feb 7, 2024
6 checks passed
@cvette cvette deleted the dependabot/gradle/io.sentry-sentry-7.3.0 branch February 7, 2024 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant