chore(deps): bump @sentry/astro from 9.45.0 to 10.4.0

[dependabot]

Bumps @sentry/astro from 9.45.0 to 10.4.0.

Release notes

Sourced from @​sentry/astro's releases.

10.4.0

Important Changes

• fix(browser): Ensure IP address is only inferred by Relay if sendDefaultPii is true

This release includes a fix for a behaviour change that was originally introduced with v9 of the SDK: User IP Addresses should only be added to Sentry events automatically, if sendDefaultPii was set to true.

However, the change in v9 required further internal adjustment, which should have been included in v10 of the SDK. Unfortunately, the change did not make it into the initial v10 version but is now applied with 10.4.0. There is no API breakage involved and hence it is safe to update. However, after updating the SDK, events (errors, traces, replays, etc.) sent from the browser, will only include user IP addresses, if you set sendDefaultPii: true in your Sentry.init options.

We apologize for any inconvenience caused!

• feat(node): Add ignoreStaticAssets (#17370)

This release adds a new option to httpIntegration to ignore requests for static assets (e.g. favicon.xml or robots.txt). The option defaults to true, meaning that going forward, such requests will not be traced by default. You can still enable tracing for these requests by setting the option to false:

Sentry.init({
  integrations: [
    Sentry.httpIntegration({
      // defaults to true, set to false to enable traces for static assets
      ignoreStaticAssets: false,
    }),
  ],
});

Other Changes

• fix(nuxt): Do not drop parametrized routes (#17357)

• ref(node): Split up incoming & outgoing http handling (#17358)
• test(node): Enable additionalDependencies in integration runner (#17361)

Bundle size 📦

Path	Size
@​sentry/browser	23.59 KB
@​sentry/browser - with treeshaking flags	22.2 KB

... (truncated)

Changelog

Sourced from @​sentry/astro's changelog.

10.4.0

Important Changes

• fix(browser): Ensure IP address is only inferred by Relay if sendDefaultPii is true

This release includes a fix for a behaviour change that was originally introduced with v9 of the SDK: User IP Addresses should only be added to Sentry events automatically, if sendDefaultPii was set to true.

However, the change in v9 required further internal adjustment, which should have been included in v10 of the SDK. Unfortunately, the change did not make it into the initial v10 version but is now applied with 10.4.0. There is no API breakage involved and hence it is safe to update. However, after updating the SDK, events (errors, traces, replays, etc.) sent from the browser, will only include user IP addresses, if you set sendDefaultPii: true in your Sentry.init options.

We apologize for any inconvenience caused!

• feat(node): Add ignoreStaticAssets (#17370)

This release adds a new option to httpIntegration to ignore requests for static assets (e.g. favicon.xml or robots.txt). The option defaults to true, meaning that going forward, such requests will not be traced by default. You can still enable tracing for these requests by setting the option to false:

Sentry.init({
  integrations: [
    Sentry.httpIntegration({
      // defaults to true, set to false to enable traces for static assets
      ignoreStaticAssets: false,
    }),
  ],
});

Other Changes

• fix(nuxt): Do not drop parametrized routes (#17357)

• ref(node): Split up incoming & outgoing http handling (#17358)
• test(node): Enable additionalDependencies in integration runner (#17361)

10.3.0

• feat(core): MCP Server - Capture prompt results from prompt function calls (#17284)
• feat(bun): Export skipOpenTelemetrySetup option (#17349)
• feat(sveltekit): Streamline build logs (#17306)

... (truncated)

Commits

• c7732cd release: 10.4.0
• 4c88cc3 Merge pull request #17372 from getsentry/prepare-release/10.4.0
• d698748 meta(changelog): Update changelog for 10.4.0
• 508afcc fix(browser): Ensure IP address is only inferred by Relay if sendDefaultPii...
• 64d1f6a feat(node): Add ignoreStaticAssets (#17370)
• f307a22 test(node): Enable additionalDependencies in integration runner (#17361)
• 06105b6 ref(node): Split up incoming & outgoing http handling (#17358)
• 373746f Merge pull request #17360 from getsentry/master
• e685f29 Merge branch 'release/10.3.0'
• bd8cce1 release: 10.3.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

• Visit our Status Page to check the current availability of CodeRabbit.
• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.