Skip to content

Bump Sentry from 6.6.0 to 6.8.0 - #365

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Tools/Cli/Sentry-6.8.0
Open

Bump Sentry from 6.6.0 to 6.8.0#365
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Tools/Cli/Sentry-6.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Updated Sentry from 6.6.0 to 6.8.0.

Release notes

Sourced from Sentry's releases.

6.8.0

Features ✨

Logs

  • feat(logs): add log4net integration by @​Flash0ver in #​5172
  • feat(logs): add NLog integration by @​Flash0ver in #​5176

Other

  • feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @​jamescrosswell in #​5181
  • Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #​5182 by @​jamescrosswell in #​5182
  • Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #​5333 by @​jamescrosswell in #​5333
  • The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @​bitsandfoxes in #​5365

Fixes 🐛

  • fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @​Ermabo in #​5393
  • The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @​jamescrosswell in #​5412
  • fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @​jamescrosswell in #​5330
  • fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @​jamescrosswell in #​5381

Dependencies ⬆️

Deps

  • chore(deps): update CLI to v3.6.1 by @​github-actions in #​5417
  • chore(deps): update Native SDK to v0.15.4 by @​github-actions in #​5416
  • chore(deps): update Cocoa SDK to v9.22.0 by @​github-actions in #​5395
  • chore(deps): update Java SDK to v8.49.0 by @​github-actions in #​5398

Other

  • ci: drop install-zstd workaround by @​jpnurmi in #​5391
  • docs: add Sentry.OpenTelemetry.Exporter to README.md by @​Flash0ver in #​5194
  • meta: Update CODEOWNERS by @​Flash0ver in #​5386

6.7.0

Features ✨

  • feat(android): expose tombstone options via SentryOptions.Native by @​jamescrosswell in #​5226
  • Add IgnoreTransactions option to filter out transactions by name, matching substrings or regular expressions against the transaction name (#​5377) by @​Adham-Kiwan in #​5377
  • feat: Add BeforeSendFeedback callback to inspect, modify, or drop user feedback before it's sent by @​vladbrincoveanu in #​5361
  • Add public API for checking unhandled exceptions (SentryEventExtensions.IsFromUnhandledException) and terminal exceptions (SentryEventExtensions.IsFromTerminalException) by @​jamescrosswell in #​5177
  • feat: Add PreferTransactionNameProvider option by @​jamescrosswell in #​5159
  • feat: Add exponential backoff and log deduplication to Spotlight by @​mattico in #​5025

Fixes 🐛

  • fix(otel): only set Scope.Transaction in SentrySpanProcessor when null by @​tsushanth in #​5337
  • fix: LNK4291 on Native AOT WinExe with Control Flow Guard by @​jamescrosswell in #​5298
  • fix: OpenTelemetry transactions for failed requests keep their route name and otel context by @​jamescrosswell in #​5310
  • fix: populate Default attributes on structured logs from current scope by @​jamescrosswell in #​5216
  • fix: [.NET 10] PageNavigationExtensions updated for public Page properties by @​nor0x in #​5278

Dependencies ⬆️

Deps

  • chore(deps): update Java SDK to v8.48.0 by @​github-actions in #​5360
  • chore(deps): update Cocoa SDK to v9.21.0 by @​github-actions in #​5359
  • chore(deps): update Native SDK to v0.15.3 by @​github-actions in #​5353
  • chore(deps): update Cocoa SDK to v9.20.0 by @​github-actions in #​5354
  • chore(deps): update Java SDK to v8.47.0 by @​github-actions in #​5338
  • chore(deps): update Cocoa SDK to v9.19.1 by @​github-actions in #​5336
  • chore(deps): update CLI to v3.6.0 by @​github-actions in #​5329
  • chore(deps): update Cocoa SDK to v9.19.0 by @​github-actions in #​5316
  • chore(deps): update Java SDK to v8.46.0 by @​github-actions in #​5321
  • chore(deps): update Java SDK to v8.45.0 by @​github-actions in #​5315
  • chore(deps): update Native SDK to v0.15.2 by @​github-actions in #​5309
  • chore(deps): update Cocoa SDK to v9.18.0 by @​github-actions in #​5264
  • chore(deps): update Java SDK to v8.44.1 by @​github-actions in #​5263
  • chore(deps): update CLI to v3.5.1 by @​github-actions in #​5279
  • chore(deps): update Native SDK to v0.15.1 by @​github-actions in #​5282

Other

  • Added Sentry.Samples.OpenTelemetry.MongoDB by @​jamescrosswell in #​5335
  • docs: add XML comments for boolean return of Sentry.Extensions.Logging Filters by @​Flash0ver in #​5297
  • LatestWindowsTfm added to Directory.Build.props by @​nor0x in #​5277

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Bump Sentry dependency from 6.6.0 to 6.8.0 in DINOForge.Tools.Cli

Updates the Sentry PackageReference in DINOForge.Tools.Cli.csproj and refreshes packages.lock.json with updated hashes for Sentry and its transitive dependencies.

Macroscope summarized df6a431.

---
updated-dependencies:
- dependency-name: Sentry
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added automated Automated changes dependencies Pull requests updating dependencies labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from KooshaPari as a code owner July 27, 2026 07:07
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests updating dependencies automated Automated changes labels Jul 27, 2026
@mergify

mergify Bot commented Jul 27, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@github-actions

Copy link
Copy Markdown

test

200 tests   200 ✅  0s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit df6a431.

@socket-security

Copy link
Copy Markdown

@@ -368,16 +368,16 @@
},
"Serilog.Sinks.File": {
"type": "Transitive",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

WARNING: Major version bump for transitive dependency Serilog.Sinks.File (6.0.0 → 7.0.0). DINOForge.Bridge.Client already declares Serilog.Sinks.File 7.*, so the lock file was stale before this update. Verify compatibility with Serilog.Sinks.File 7.x APIs before merging.

"Serilog": "[4.*, )",
"Serilog.Sinks.Console": "[6.*, )",
"Serilog.Sinks.File": "[6.*, )"
"Serilog.Sinks.File": "[7.*, )"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SUGGESTION: Transitive dependency constraint for Serilog.Sinks.File in dinoforge.bridge.protocol changed from [6.*, ) to [7.*, ). This aligns with Bridge.Client's existing Serilog.Sinks.File 7.* reference, but the prior lock file was inconsistent with project declarations — suggests the lock file may need a proactive refresh.

@kilo-code-bot

kilo-code-bot Bot commented Jul 27, 2026

Copy link
Copy Markdown

Code Review Summary

Status: 2 Issues Found | Recommendation: Merge with notes

Overview

Severity Count
CRITICAL 0
WARNING 1
SUGGESTION 1
Issue Details (click to expand)

WARNING

File Line Issue
src/Tools/Cli/packages.lock.json 370 Major version bump for transitive dependency Serilog.Sinks.File (6.0.0 → 7.0.0). DINOForge.Bridge.Client already declares Serilog.Sinks.File 7.*, so the lock file was stale. Verify compatibility with Serilog.Sinks.File 7.x APIs.

SUGGESTION

File Line Issue
src/Tools/Cli/packages.lock.json 422 Transitive dependency constraint for Serilog.Sinks.File in dinoforge.bridge.protocol changed from [6.*, ) to [7.*, ). Aligns with Bridge.Client's existing Serilog.Sinks.File 7.* reference, but prior lock file was inconsistent — suggests the lock file may need a proactive refresh.
Files Reviewed (2 files)
  • src/Tools/Cli/DINOForge.Tools.Cli.csproj - 0 issues
  • src/Tools/Cli/packages.lock.json - 2 issues

Fix these issues in Kilo Cloud


Reviewed by ling-3.0-flash:free · Input: 174.3K · Output: 29.3K · Cached: 486K

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: df6a431262

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

"requested": "[8.*, )",
"resolved": "8.0.27",
"contentHash": "qlS+YrntAGokJdNNU9iEbf1cjhUw82xspqWq1J4haGrUk800HqHid5q9/dfkLGxNGYubT/MysPoIbo364et20Q==",
"resolved": "8.0.29",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep unrelated packages out of the Sentry refresh

Checked the CLI restore in .github/workflows/build-gate.yml lines 108-111: it uses RestoreLockedMode=true, so this lockfile determines the versions validated by CI. Besides Sentry, this change advances Microsoft.Data.Sqlite here and also System.Drawing.Common, Spectre.Console, System.CommandLine, Serilog, and Serilog.Sinks.File later in the file; those independent upgrades are therefore bundled into a nominally Sentry-only change without separate validation or attribution. Preserve their previous resolutions or split them into separately tested dependency updates.

AGENTS.md reference: AGENTS.md:L114-L120

Useful? React with 👍 / 👎.


<!-- Error tracking -->
<PackageReference Include="Sentry" Version="6.6.0" />
<PackageReference Include="Sentry" Version="6.8.0" />

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Record the Sentry upgrade in the Unreleased changelog

This production CLI dependency change has no corresponding entry under CHANGELOG.md's [Unreleased] section, so the project's release notes will omit the Sentry upgrade. Add a concise Changed or Security entry as required by the repository handoff protocol.

AGENTS.md reference: AGENTS.md:L107-L110

Useful? React with 👍 / 👎.

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated changes dependencies Pull requests updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants