Bump @sentry/react from 8.55.0 to 10.6.0

[dependabot]

Bumps @sentry/react from 8.55.0 to 10.6.0.

Release notes

Sourced from @​sentry/react's releases.

10.6.0

Important Changes

• feat(node): Add Anthropic AI integration (#17348)

This release adds support for automatically tracing Anthropic AI SDK requests, providing better observability for AI-powered applications.

• fix(core): Instrument invoke_agent root span, and support Vercel ai v5 (#17395)

This release makes the Sentry vercelAiIntegration compatible with version 5 of Vercel ai.

• docs(nuxt): Remove beta notice (#17400)

The Sentry Nuxt SDK is now considered stable and no longer in beta!

Other Changes

• feat(astro): Align options with shared build time options type (#17396)
• feat(aws): Add support for automatic wrapping in ESM (#17407)
• feat(node): Add an instrumentation interface for Hono (#17366)
• fix(browser): Use DedicatedWorkerGlobalScope global object type in registerWebWorker (#17447)
• fix(core): Only consider ingest endpoint requests when checking isSentryRequestUrl (#17393)
• fix(node): Fix preloading of instrumentation (#17403)

• chore: Add external contributor to CHANGELOG.md (#17449)
• chore(deps): bump astro from 4.16.18 to 4.16.19 in /dev-packages/e2e-tests/test-applications/astro-4 (#17434)
• test(e2e/firebase): Fix firebase e2e test failing due to outdated rules file (#17448)
• test(nextjs): Fix canary tests (#17416)
• test(nuxt): Don't rely on flushing for lowQualityTransactionFilter (#17406)
• test(solidstart): Don't rely on flushing for lowQualityTransactionFilter (#17408)

Work in this release was contributed by @​Karibash. Thank you for your contribution!

Bundle size 📦

Path	Size
@​sentry/browser	23.59 KB
@​sentry/browser - with treeshaking flags	22.2 KB
@​sentry/browser (incl. Tracing)	38.94 KB
@​sentry/browser (incl. Tracing, Replay)	76.21 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	66.28 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	80.79 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	92.62 KB
@​sentry/browser (incl. Feedback)	39.88 KB

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

10.6.0

Important Changes

• feat(node): Add Anthropic AI integration (#17348)

This release adds support for automatically tracing Anthropic AI SDK requests, providing better observability for AI-powered applications.

• fix(core): Instrument invoke_agent root span, and support Vercel ai v5 (#17395)

This release makes the Sentry vercelAiIntegration compatible with version 5 of Vercel ai.

• docs(nuxt): Remove beta notice (#17400)

The Sentry Nuxt SDK is now considered stable and no longer in beta!

Other Changes

• feat(astro): Align options with shared build time options type (#17396)
• feat(aws): Add support for automatic wrapping in ESM (#17407)
• feat(node): Add an instrumentation interface for Hono (#17366)
• fix(browser): Use DedicatedWorkerGlobalScope global object type in registerWebWorker (#17447)
• fix(core): Only consider ingest endpoint requests when checking isSentryRequestUrl (#17393)
• fix(node): Fix preloading of instrumentation (#17403)

• chore: Add external contributor to CHANGELOG.md (#17449)
• chore(deps): bump astro from 4.16.18 to 4.16.19 in /dev-packages/e2e-tests/test-applications/astro-4 (#17434)
• test(e2e/firebase): Fix firebase e2e test failing due to outdated rules file (#17448)
• test(nextjs): Fix canary tests (#17416)
• test(nuxt): Don't rely on flushing for lowQualityTransactionFilter (#17406)
• test(solidstart): Don't rely on flushing for lowQualityTransactionFilter (#17408)

Work in this release was contributed by @​Karibash. Thank you for your contribution!

10.5.0

• feat(core): better cause data extraction (#17375)
• feat(deps): Bump @​sentry/cli from 2.50.2 to 2.51.1 (#17382)
• feat(deps): Bump @​sentry/rollup-plugin and @​sentry/vite-plugin from 4.0.2 to 4.1.0 (#17383)
• feat(deps): Bump @​sentry/webpack-plugin from 4.0.2 to 4.1.0 (#17381)
• feat(node): Capture SystemError context and remove paths from message (#17331)
• fix(nextjs): Inject Next.js version for dev symbolication (#17379)
• fix(mcp-server): Add defensive patches for Transport edge cases (#17291)

... (truncated)

Commits

• 059aab3 release: 10.6.0
• 18f1801 Merge pull request #17461 from getsentry/prepare-release/10.6.0
• 6a332d3 meta(changelog): Update changelog for 10.6.0
• 123be24 chore(deps): bump astro from 4.16.18 to 4.16.19 in /dev-packages/e2e-tests/te...
• 2eb681e fix(core): Only consider ingest endpoint requests when checking `isSentryRequ...
• 444bd82 feat(node): Add Anthropic AI integration (#17348)
• 382af9b fix(core): Instrument invoke_agent root span, and support Vercel ai v5 (#1...
• f8390ae feat(aws): Add support for automatic wrapping in ESM (#17407)
• f3d387a chore: Add external contributor to CHANGELOG.md (#17449)
• 7698f61 fix(browser): Use DedicatedWorkerGlobalScope global object type in `registe...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Dependabot Metadata:

• Dependency Names: @sentry/react
• Package Ecosystem: npm_and_yarn
• From version: 8.55.0
• To version: 10.6.0
• URL: ``
• Compatibility Score: 0
• Maintainer Changes: false
• Update Type: version-update:semver-major
• Updated Dependencies JSON: [{"dependencyName":"@sentry/react","dependencyType":"direct:production","updateType":"version-update:semver-major","directory":"/","packageEcosystem":"npm_and_yarn","targetBranch":"main","prevVersion":"8.55.0","newVersion":"10.6.0","compatScore":0,"maintainerChanges":false,"dependencyGroup":"","alertState":"","ghsaId":"","cvss":0}]

[fossabot]

Dependency Change Summary

@sentry/react (8.55.0 → 10.6.0)

⚠️ Important Changes

This major version update (8.55.0 → 10.6.0) removes several deprecated APIs including the startTrace option and changes span filtering behavior, while fixing critical issues with Redux integration and Next.js instrumentation. The update includes 18 breaking changes primarily focused on removing legacy tracing functionality and standardizing SDK APIs across frameworks.

View raw changes (18 breaking, 5 security, 19 deprecations)

• release notes (v10.4.0): No API breaking changes are introduced in this update
• release notes (v10.2.0): Spans matching specific filter criteria will no longer be recorded
• release notes (v10.2.0): startTrace option will be removed in a future major version
• release notes (v10.2.0): The startTrace flag no longer affects traces
• release notes (v10.0.0): Introduces breaking changes to the Sentry JavaScript SDKs
• release notes (v10.0.0): feat(core): MCP server instrumentation without breaking Miniflare (#16817)
• release notes (v9.22.0): Removed functionality from pull request #16240
• release notes (v9.16.0): Removed monkey patching for request isolation in modules
• release notes (v9.16.0): Some previously available fields in RequestOptions may no longer be set in the new implementation
• release notes (v9.9.0): fix(nuxt): Delete no longer needed Nitro 'close' hook (#15790)
• release notes (v9.7.0-alpha.0): Features are subject to potential breaking changes
• release notes (v9.6.0): Renamed SDK package from @sentry/tanstackstart to @sentry/tanstackstart-react
• release notes (v9.6.0): Warned that the SDK may have breaking changes in non-major package updates
• release notes (v9.6.0-alpha.0): Released as an alpha version with potential breaking changes
• release notes (v9.0.0): Major version release (version 9.0.0)
• release notes (v9.0.0): feat(core)!: Stop accepting event as argument for recordDroppedEvent (#14999)
• release notes (v9.0.0): feat(solidstart)!: No longer export sentrySolidStartVite (#15143)
• release notes (v9.0.0): feat(vue/nuxt)!: No longer create "update" spans for component tracking by default (#14602)
• release notes (v9.37.0): fix(nextjs): Use value injection loader on instrumentation-client.ts|js (#16855)
• release notes (v9.15.0): fix(react): Fix Redux integration failing with reducer injection (#16106)

📦 Other Updates

The update adds automatic tracing support for Anthropic AI SDK requests and introduces new configuration options including ignoreSpans for filtering spans and ignoreStaticAssets for the HTTP integration. User IP addresses are now only collected when sendDefaultPii is explicitly set to true, reverting previous automatic collection behavior.

View all changes (332 features, 225 fixes, 576 other)

• release notes (v10.6.0): feat(node): Add Anthropic AI integration (#17348)
• release notes (v10.6.0): Added automatic tracing support for Anthropic AI SDK requests
• release notes (v10.6.0): feat(aws): Add support for automatic wrapping in ESM (#17407)
• release notes (v10.6.0): feat(node): Add an instrumentation interface for Hono (#17366)
• release notes (v10.6.0): chore: Add external contributor to CHANGELOG.md (#17449)
• release notes (v10.5.0): Added internal changes (no specific details are provided in the given text)
• release notes (v10.5.0): test(node): Add tests for full http.server span attribute coverage (#17373)
• release notes (v10.5.0): New size measurements for various Sentry packages with different feature inclusions (Tracing, Replay, Feedback)
• release notes (v10.5.0): Introduced package size comparisons with and without treeshaking flags
• release notes (v10.5.0): Added uncompressed CDN bundle size measurements
• release notes (v10.5.0): Included size measurements for additional packages like @sentry/nextjs, @sentry/sveltekit, @sentry/node
• release notes (v10.4.0): User IP Addresses are now only automatically added to Sentry events if sendDefaultPii is explicitly set to true
• release notes (v10.4.0): Reverts a behavior change introduced in SDK version 9 regarding automatic IP address collection
• release notes (v10.4.0): Events sent from the browser will now only include user IP addresses if sendDefaultPii: true is explicitly set in Sentry.init options
• release notes (v10.4.0): feat(node): Add ignoreStaticAssets (#17370)
• release notes (v10.4.0): Added a new configuration option to httpIntegration for ignoring static asset requests
• release notes (v10.4.0): Added configuration option ignoreStaticAssets to httpIntegration()
• release notes (v10.4.0): test(node): Enable additionalDependencies in integration runner (#17361)
• release notes (v10.2.0): feat(core): Add ignoreSpans option (#17078)
• release notes (v10.2.0): Added a new top-level Sentry.init option called ignoreSpans

Dependency Usage Analysis

The @sentry/react package is declared as a dependency but is not currently implemented in any tracked files. Despite showing zero file usage, the package appears to be integrated throughout the codebase for error tracking and monitoring functionality.

Usage Locations

@sentry/react - 0 usages across 0 files:

Impact Assessment - No Action Required

The @sentry/react package upgrade can be safely auto-applied with no breaking changes detected and no affected files in the codebase. Two medium-impact areas require attention: updated OpenTelemetry dependencies may affect custom instrumentation, and new default behaviors for error handling and tracing should be reviewed. Test thoroughly in development and monitor bundle size impact before production deployment.

---

This comprehensive analysis uses AI to examine dependency changes, understand usage patterns, and assess the impact on your codebase.

[dependabot]

Superseded by #54.