build(deps): bump @sentry/react from 10.74.0 to 11.2.0

[dependabot]

Bumps @sentry/react from 10.74.0 to 11.2.0.

Release notes

Sourced from @​sentry/react's releases.

11.2.0

Important Changes

• feat(hono): add orchestrion-based auto-instrumentation (#24497)

  Hono is now instrumented automatically. Request spans are named after the matched Hono route, each middleware gets its own span, and errors thrown in handlers are captured.

• feat(node/bun): Enable dedupeIntegration by default (#24794)

  @sentry/node and @sentry/bun now include dedupeIntegration in their default integrations, like the browser, Deno, Vercel Edge and Cloudflare SDKs. When the same error is captured two times in a row, only the first event is sent. To keep the previous behavior, remove the integration: integrations: defaults => defaults.filter(integration => integration.name !== 'Dedupe').

• feat(remix): Instrument Remix 3 server requests via fetch-router (#24801)

  On Remix 3, the SDK now adds the matched route as http.route, the response status and a low-cardinality name to the http.server span of each fetch-router request. Start the app with --import @sentry/remix/v3/node in place of --import remix/node-tsx.

Other Changes

• chore(bundler-plugins): Allow magic-string 1.x (#24768)
• feat(deps): Bump oxc-parser to 0.152.0 and sentry to 0.45.0 (#24823)
• feat(elysia): Export bunRuntimeMetricsIntegration (#24892)
• feat(react-router): Support request-scoped CSP nonces in createSentryHandleRequest (#24826)
• fix(aws-serverless): Keep Lambda extension polling past 300s (#24811)
• fix(browser-utils): Stop leaking DOM instrumentation listeners on mismatched removals (#24727)
• fix(core): Resolve escape sequences in fmt / parameterize messages (#24770)
• fix(deno): Flush buffered metrics and logs before process exit (#24807)
• fix(node): End Express layer spans when next is called (#24854)
• fix(node): Flush buffered metrics on process exit (#24806)
• fix(nuxt): Fix CommonJS interop for force-inlined instrumented packages (#24799)
• fix(server-utils): Preserve raw Anthropic response bodies (#24902)
• fix(server-utils): Preserve raw Groq and Together response bodies (#24906)
• fix(server-utils): Preserve raw OpenAI embeddings and conversation responses (#24908)
• fix(server-utils): Preserve response bodies for OpenAI parse helpers (#24783)
• fix(solidstart): Support rolldownOptions in instrumentation file plugin (#24863)
• fix(sveltekit): Skip trace meta tags when prerendering (#24777)
• fix(vue): Share one root render span debounce timer across components (#24868)
• perf(server-utils): Avoid quadratic SQL sanitizer output handling (#24834)

• chore: Add external contributor to CHANGELOG.md (#24822)
• chore: Add external contributor to CHANGELOG.md (#24827)
• chore: Add external contributor to CHANGELOG.md (#24835)
• chore: Add external contributor to CHANGELOG.md (#24850)
• chore: Add external contributor to CHANGELOG.md (#24851)
• chore: Add external contributor to CHANGELOG.md (#24914)
• chore(deps): Update to Vitest 4 and Vite 8 (#24746)
• chore(github): Add external label on PRs of external contributors (#24825)
• chore(solidstart): Remove unused Vitest setup from e2e apps (#24789)
• ci: shard Bun integration tests (#24771)

... (truncated)

Changelog

Sourced from @​sentry/react's changelog.

11.2.0

Important Changes

• feat(hono): add orchestrion-based auto-instrumentation (#24497)

  Hono is now instrumented automatically. Request spans are named after the matched Hono route, each middleware gets its own span, and errors thrown in handlers are captured.

• feat(node/bun): Enable dedupeIntegration by default (#24794)

  @sentry/node and @sentry/bun now include dedupeIntegration in their default integrations, like the browser, Deno, Vercel Edge and Cloudflare SDKs. When the same error is captured two times in a row, only the first event is sent. To keep the previous behavior, remove the integration: integrations: defaults => defaults.filter(integration => integration.name !== 'Dedupe').

• feat(remix): Instrument Remix 3 server requests via fetch-router (#24801)

  On Remix 3, the SDK now adds the matched route as http.route, the response status and a low-cardinality name to the http.server span of each fetch-router request. Start the app with --import @sentry/remix/v3/node in place of --import remix/node-tsx.

Other Changes

• chore(bundler-plugins): Allow magic-string 1.x (#24768)
• feat(deps): Bump oxc-parser to 0.152.0 and sentry to 0.45.0 (#24823)
• feat(elysia): Export bunRuntimeMetricsIntegration (#24892)
• feat(react-router): Support request-scoped CSP nonces in createSentryHandleRequest (#24826)
• fix(aws-serverless): Keep Lambda extension polling past 300s (#24811)
• fix(browser-utils): Stop leaking DOM instrumentation listeners on mismatched removals (#24727)
• fix(core): Resolve escape sequences in fmt / parameterize messages (#24770)
• fix(deno): Flush buffered metrics and logs before process exit (#24807)
• fix(node): End Express layer spans when next is called (#24854)
• fix(node): Flush buffered metrics on process exit (#24806)
• fix(nuxt): Fix CommonJS interop for force-inlined instrumented packages (#24799)
• fix(server-utils): Preserve raw Anthropic response bodies (#24902)
• fix(server-utils): Preserve raw Groq and Together response bodies (#24906)
• fix(server-utils): Preserve raw OpenAI embeddings and conversation responses (#24908)
• fix(server-utils): Preserve response bodies for OpenAI parse helpers (#24783)
• fix(solidstart): Support rolldownOptions in instrumentation file plugin (#24863)
• fix(sveltekit): Skip trace meta tags when prerendering (#24777)
• fix(vue): Share one root render span debounce timer across components (#24868)
• perf(server-utils): Avoid quadratic SQL sanitizer output handling (#24834)

• chore: Add external contributor to CHANGELOG.md (#24822)
• chore: Add external contributor to CHANGELOG.md (#24827)
• chore: Add external contributor to CHANGELOG.md (#24835)
• chore: Add external contributor to CHANGELOG.md (#24850)
• chore: Add external contributor to CHANGELOG.md (#24851)
• chore: Add external contributor to CHANGELOG.md (#24914)
• chore(deps): Update to Vitest 4 and Vite 8 (#24746)
• chore(github): Add external label on PRs of external contributors (#24825)
• chore(solidstart): Remove unused Vitest setup from e2e apps (#24789)

... (truncated)

Commits

• e1a4316 release: 11.2.0
• 95153b1 Merge pull request #24927 from getsentry/prepare-release/11.2.0
• b8a90a4 meta(changelog): Update changelog for 11.2.0
• a0faac6 fix(deps): runtime dependency security fixes (#24911)
• b45e5b8 feat(deps): bump moment from 2.30.1 to 2.31.0 (#24890)
• 5c82d5b feat(deps): bump hono from 4.13.5 to 4.13.7 (#24916)
• 2651a8f test(sveltekit): Add missing prerender e2e test (#24921)
• 8de2036 feat(deps): bump fastify from 5.12.1 to 5.12.5 (#24917)
• 29fc37c feat(deps): bump axios from 1.18.0 to 1.20.0 (#24918)
• 012e9bb fix(server-utils): Preserve raw OpenAI embeddings and conversation responses ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Upgrades @sentry/react from 10.74.0 to 11.2.0. This major release removes support for React 16 and adds react-router as an optional peer dependency for route instrumentation.

Migration

• Update to React 17 or later if the app still targets React 16.
• Install and configure react-router (6.x, 7.x, or 8.x) to enable route-level tracing.

^{Written for commit 9371532. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
illinispots	Ignored		Oct 5, 2026 7:17am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: QUIET
• Plan: Advanced
• Run ID: 3a9087c4-0a29-4413-af15-a774459da2de

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}