[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sentry/nitro (source)	11.7.0 → 11.8.0

---

Release Notes

getsentry/sentry-javascript (@​sentry/nitro)

v11.8.0

Compare Source

Important Changes

• feat(bundler-plugins): Release @sentry/webpack-plugin, @sentry/vite-plugin, @sentry/rollup-plugin and @sentry/esbuild-plugin from the SDK repository (#​25095)

  The four standalone bundler plugins now release together with the SDK, so their version jumps from 5.4.1 to the SDK version. Each package re-exports the matching @sentry/bundler-plugins entry point, which we recommend for new projects. The plugin options do not change, but the update brings these breaking changes:

  • Node.js 20.19.0 or higher is required.
  • @sentry/webpack-plugin requires webpack 5.1 or higher. The @sentry/webpack-plugin/webpack5 entry point still works and exports the same plugin as @sentry/webpack-plugin.
  • The plugins use the sentry CLI SDK instead of @sentry/cli. Sentry self-hosted 26.4.2 or higher is supported. Lower versions may continue to work.
  • Deploys that the plugins create on Vercel use the value of VERCEL_TARGET_ENV (production, preview or a custom name) as their environment, instead of vercel-production or vercel-preview. To keep the old value, set release.deploy.env.

• feat(server-utils): Instrument the OpenAI decisions API as gen_ai.decide spans (#​25285)

  OpenAI decisions.create calls now create gen_ai.decide spans.

Other Changes

• feat(core): Support SuppressedError in LinkedErrors integration (#​25246)
• fix(astro): Delete generated source maps for static output (#​25310)
• fix(astro): Upload source maps of Astro 7's prerender build (#​25309)
• fix(browser): Apply urlQueryParams to the Referer header (#​25324)
• fix(cloudflare): auto-instrument when wrangler main is a package (#​25343)
• fix(hono): Expose runtime-specific SDK options (#​25290)
• fix(node): Instrument Prisma 8 CollectionBase from rc.15 (#​25301)
• fix(nuxt): Skip 3xx/4xx Nuxt errors in the vue:error hook (#​25341)
• fix(server-utils): Read pi-durable 1.2.0 tool results from output (#​25312)
• fix(server-utils): Transform modules once when two Sentry Vite plugins add orchestrion (#​25043)
• fix(sveltekit): add op and origin to Kit's sveltekit.endpoint span (#​25376)
• fix(tanstackstart-react): Keep parametrized route names in Nitro 3 builds (#​25307)
• fix(tanstackstart-react): Rewrite source paths of split route modules (#​25361)

Internal Changes

• chore: Add external contributor to CHANGELOG.md (#​25375)
• ci: Install the pnpm version that Volta pins (#​25287)
• license: Add cli FSL notice to package licenses (#​25314)
• ref(core): use shared MCP attribute conventions (#​25059)
• ref(tanstackstart-react): Reuse shared component annotation options (#​25313)
• test(browser): Keep whitespace text out of the handlers-lcp page (#​25280)
• test(bun): Restore @​sentry/core spies after the Bun.serve tests (#​25276)
• test(bundler-plugins): Disable CLI telemetry in the CLI contract tests (#​25308)
• test(e2e): Add node-openai-decisions-send-to-sentry test app (#​25331)
• test(e2e): Add node-openai-send-to-sentry test app (#​24824)
• test(e2e): Add nuxt-5-sourcemaps test (#​25268)
• test(e2e): Inherit root Volta config in all e2e test apps (#​25369)
• test(e2e): Use an external host address for the Lambda DSN on loopback hostnames (#​25282)
• test(nextjs): Run nextjs-16-tunnel on Cloudflare (#​25161)
• test(nextjs): Switch DEBUG_BUILD with a getter instead of re-importing the SDK (#​25279)
• test(node): Await the child exit in the "should exit" integration tests (#​25277)
• test(node): Cover ioredis v6 in the diagnostics_channel suite (#​25300)
• test(node): Cover LangChain model calls made from a tool without config (#​25326)
• test(node): Log slow and failed Docker Compose starts in integration tests (#​25278)
• test(node): Unflake captureMessage with_level test (#​25358)
• test(sveltekit): Pin rollup to 4.64.5 (#​25328)

Work in this release was contributed by @​kunal649 and @​mketiku. Thank you for your contributions!

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
bolt	Ignored		Oct 21, 2026 5:59am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 379e741e-c61a-49f5-acde-51aee90b4529

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}