chore(deps): update Sentry SDK to v8.47.0

[github-actions]

Bumps scripts/update-sentry-sdk.sh from 8.34.1 to 8.47.0.

Auto-generated by a dependency updater.

Changelog

8.47.0

Behavioral Changes

• SentryOkHttpInterceptor::intercept now throws IOException. This is a source-only and Java-only breaking change (#5654)

Fixes

• Fix fragment tracing not working with detach/attach navigation (#5660)
• Don't start a redundant UI interaction transaction when a transaction is already bound to the Scope (#5491)
  • Previously, SentryGestureListener always started a UI transaction and only afterwards skipped binding it to the Scope when a manually-bound transaction already existed, leaving the new transaction to be dropped as an idle transaction without children.
• Fix potential NPE within Scope.endSession() (#5657)
• Fix memory leak in ReplayIntegration due to persisting executor not being shut down (#5627)
• Fix AbstractMethodError when compose-ui 1.11+ is used in combination with Modifier.sentryTag() or the Sentry Kotlin compiler plugin (#5672)

Performance

• Speed up touch gesture target detection on deeply nested view hierarchies by hit-testing in local coordinates instead of calling getLocationOnScreen per view (#5595)
• Probe class availability without initializing the class during SDK init (#5635)
• Avoid constructing an exception per view when resolving view ids during view-hierarchy and gesture capture (#5631)
• Start the frame metrics thread lazily on first collection instead of during SDK init (#5641)
• Reduce SentryId and SpanId allocation overhead by replacing their per-instance LazyEvaluator (and its lock) with a lightweight lazily-generated String. (#5645)
• Lazily allocate the ReentrantLock backing AutoClosableReentrantLock to avoid eager lock allocations for SDK objects that never contend during SentryAndroid.init (#5643)

8.46.0

Fixes

• Session Replay: Fix network detail response body size being unknown for gzip-compressed responses (#5592)

Behavioral Changes

• Collections returned by scope (e.g. getBreadcrumbs, getTags, getAttachments) are shared state and should not be mutated. (#5541)
  • Previously, when going through CombinedScopeView, we were returning a copy where mutations didn't show up in the underlying scopes.
  • This has now changed in order to reduce SDK overhead.
• Date objects returned by SDK data model getters are shared state and should not be mutated. (#5603)
  • Previously, these getters returned defensive copies for some date fields.
  • This has now changed in order to reduce SDK overhead.

Performance

• Reduce writer buffer size from 8192 to 512 (#5544)
• Remove redundant event map copies (#5536)
• Optimize combined scope by adding an early return if only one scope has data (#5541)
• Reduce model access overhead by avoiding defensive Date copies in SDK data model getters. (#5603)
• Reduce timestamp parsing and formatting overhead with Sentry-specific ISO-8601 handling. (#5602)
• Reduce JSON serialization overhead by creating the reflection serializer only when unknown-object fallback serialization is needed. (#5601)
• Reduce JSON serialization overhead by allocating reflection cycle-tracking state only when reflection serialization is used. (#5600)
• Reduce context serialization overhead by sorting key snapshots with arrays instead of temporary lists. (#5599)
• Reduce breadcrumb allocation overhead by creating the Breadcrumb data map only when data is added. (#5598)
• Reduce JSON serialization overhead by lowering the initial JsonWriter nesting stack size while preserving on-demand growth. (#5591)
• Reduce timestamp helper overhead by replacing unnecessary Calendar usage in DateUtils with direct Date creation. (#5589)
• Reduce Android startup overhead by using the default timezone directly on older devices or when no timezone info is available in the locale. (#5587)

8.45.0

Features

• On Android 15+ (API 35), the standalone app.start transaction now reports why the OS started the process via app.vitals.start.reason trace data (e.g. launcher, broadcast, service, content_provider), derived from ApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#5552)

Fixes

• Use System.nanoTime() for cron check-in duration measurement to avoid incorrect durations from wall-clock adjustments (#5611)
• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#5597)
• Release MediaMuxer when a replay segment has no encodable frames to avoid a resource leak (#5583)

Dependencies

• Bump Native SDK from v0.15.1 to v0.15.2 (#5610)
  • changelog
  • diff

8.44.1

Fixes

• Fix FirstDrawDoneListener leaking an OnGlobalLayoutListener per registration (#5567)

Features

• Add experimental SentrySQLiteDriver to sentry-android-sqlite for instrumenting androidx.sqlite.SQLiteDriver (#5563)
  • To use it, pass SQLiteDriver to SentrySQLiteDriver.create(...)
  • Requires androidx.sqlite:sqlite (2.5.0+) on runtime classpath (typically provided by Room or SQLDelight)

Dependencies

• Bump Native SDK from v0.15.0 to v0.15.1 (#5570)
  • changelog
  • diff

8.44.0

Features

• Add enableStandaloneAppStartTracing option to send app start as a standalone transaction instead of attaching it as a child span of the first activity transaction (#5342)
  • Disabled by default; opt in via options.isEnableStandaloneAppStartTracing = true or manifest meta-data io.sentry.standalone-app-start-tracing.enable
  • Emits a transaction named App Start with op app.start, carrying the existing app start measurements and phase spans (process.load, contentprovider.load, application.load, activity lifecycle spans) as direct children of the root
  • The standalone transaction shares the same traceId as the first ui.load activity transaction so they remain linked in the trace view
  • Also covers non-activity starts (broadcast receivers, services, content providers)

Improvements

• Reduce boxing to improve performance (#5523, #5527, #5551)
• Replace Date with a unix timestamp in SentryNanotimeDate to improve performance (#5550)
  • SentryNanotimeDate is now marked ApiStatus.Internal. A new (long unixDateMillis, long nanos) constructor was added, where unixDateMillis is milliseconds since the epoch. The existing (Date, long) constructor is retained but deprecated.

Dependencies

• Upgrade to asyncProfiler 4.4 (#5418)
• Bump Native SDK from v0.14.2 to v0.15.0 (#5528)
  • changelog
  • diff

Fixes

• Fix attachments being duplicated on native events that carry scope attachments (#5548)
• Fix performance collector scheduling many tasks in a row (#5524)

8.43.3

Fixes

• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#5597)

8.43.2

Improvements

• Improve SDK init performance by replacing java.net.URI with custom string parsing for DSN (#5448)
• Remove unnecessary boxing to improve performance (#5520)

Fixes

• Session Replay: Fix VerifyError in Compose masking under DexGuard/R8 obfuscation (#5507)
• Session Replay: Fix Compose view masking not working on obfuscated/minified builds (#5503)

8.43.1

Fixes

• Session Replay: Fix replay recording freezing on screens with continuous animations (#5489)
• Session Replay: Populate trace_ids in replay events to enable searching replays by trace ID (#5473)

8.43.0

Features

• Session Replay: Add ReplayFrameObserver for observing captured replay frames (#5386)

  SentryAndroid.init(context) { options ->
    options.sessionReplay.frameObserver =
      SentryReplayOptions.ReplayFrameObserver { hint, frameTimestamp, screenName ->
        val bitmap = hint.getAs(TypeCheckHint.REPLAY_FRAME_BITMAP, Bitmap::class.java)
        if (bitmap != null) {
          try {
            // Process the masked replay frame
            myAnalyzer.processFrame(bitmap, frameTimestamp, screenName)
          } finally {
            bitmap.recycle()
          }
        }
      }
  }

• Parse ART memory and garbage collector info from ANR tombstones into ART context (#5428)

8.42.0

Features

• Add option to attach raw tombstone protobuf on native crash events (#5446)
  • Enable via options.isAttachRawTombstone = true or manifest: <meta-data android:name="io.sentry.tombstone.attach-raw" android:value="true" />
• Add API to clear feature flags from scopes (#5426)
• Add support to configure reporting historical ANRs via AndroidManifest.xml using the io.sentry.anr.report-historical attribute (#5387)

Dependencies

• Bump Gradle from v9.5.0 to v9.5.1 (#5419)
  • changelog
  • diff
• Bump Native SDK from v0.14.0 to v0.14.2 (#5433, #5441)
  • changelog
  • diff
• Bump SAGP (Sentry Android Gradle Plugin) from v6.0.0-alpha.6 to v6.6.0 (#5427)
  • changelog
  • diff

8.41.0

Features

• Session Replay: experimental support for capturing SurfaceView content (e.g. Unity, video players, maps) (#5333)
  • To enable, set options.sessionReplay.isCaptureSurfaceViews = true
  • Or via manifest: <meta-data android:name="io.sentry.session-replay.capture-surface-views" android:value="true" />
  • Warning: masking granularity is at the SurfaceView level only — the SDK cannot mask individual elements rendered inside the SurfaceView (e.g. native Unity UI, map labels, video frames). Only enable for SurfaceViews whose content is safe to record.
• Add Sentry.feedback() API for show() and capture() (#5349)
  • Sentry.showUserFeedbackDialog() is deprecated in favor of Sentry.feedback().show()
  • Sentry.captureFeedback() is deprecated in favor of Sentry.feedback().capture()
  • Sentry.captureUserFeedback() and UserFeedback are deprecated in favor of Sentry.feedback().capture() with the new Feedback type
  • SentryUserFeedbackDialog is deprecated in favor of SentryUserFeedbackForm
  • All deprecated APIs will be removed in the next major version
• Deprecate SentryUserFeedbackButton (View-based and Compose-based) (#5350)
  • It will be removed in the next major version
• Add per-form shake-to-show support for SentryUserFeedbackForm (#5353)
  • Useful for enabling shake-to-report on specific screens instead of globally

  SentryUserFeedbackForm.Builder(activity)
    .configurator { it.isUseShakeGesture = true }
    .create()

• Add support for Kafka (#5249)
  • You will need to add the sentry-kafka dependency and opt-in via the new option.
    • Set options.setEnableQueueTracing(true) on Sentry.init
    • Or set sentry.enable-queue-tracing=true in application.properties
  • For Spring Boot Kafka is auto instrumented and no further configuration is needed.
    • also see https://docs.sentry.io/platforms/java/guides/spring-boot/integrations/kafka/
  • When using kafka-clients directly
    • you need to wrap your KafkaProducer via SentryKafkaProducer.wrap(kafkaProducer) to get queue.publish spans
    • and you may use our SentryKafkaConsumerTracing.withTracing helper to instrument the consumer side manually.
    • also see https://docs.sentry.io/platforms/java/integrations/kafka/

Fixes

• Fix soft input keyboard not being shown on the Feedback form (#5359)
• Fix shake-to-report not triggering on some devices due to high acceleration threshold (#5366)
• Fix feedback form retaining previous message when shown again via shake (#5366)
• Avoid stack overflow when deserializing large flat JSON objects (#5361)

Dependencies

• Bump Native SDK from v0.13.7 to v0.14.0 (#5334, #5365)
  • changelog
  • diff
• Bump Gradle from v9.4.1 to v9.5.0 (#5344)
  • changelog
  • diff

8.40.0

Fixes

• Fix NoSuchMethodError for LayoutCoordinates.localBoundingBoxOf$default on Compose touch dispatch with AGP 8.13 and minSdk < 24 (#5302)
• Fix reporting OkHttp's synthetic 504 "Unsatisfiable Request" responses as errors for CacheControl.FORCE_CACHE cache misses (#5299)
• Make SentryGestureDetector thread-safe and recycle VelocityTracker per gesture (#5301)
• Fix duplicate ui.click breadcrumbs when another Window.Callback wraps SentryWindowCallback (#5300)

Dependencies

• Bump Native SDK from v0.13.6 to v0.13.7 (#5296)
  • changelog
  • diff

8.39.1

Fixes

• Fix JsonObjectReader and MapObjectReader hanging indefinitely when deserialization errors leave the reader in an inconsistent state (#5293)
  • Failed collection values are now skipped so parsing can continue
  • Skipped collection values emit WARNING logs
  • Unknown-key failures and unrecoverable recovery failures emit ERROR logs

8.39.0

Fixes

• Fix ANR caused by GestureDetectorCompat Handler/MessageQueue lock contention in SentryWindowCallback (#5138)

Internal

• Bump AGP version from v8.6.0 to v8.13.1 (#5063)

Dependencies

• Bump Native SDK from v0.13.3 to v0.13.6 (#5277)
  • changelog
  • diff
• Bump Gradle from v8.14.3 to v9.4.1 (#5063)
  • changelog
  • diff

8.38.0

Features

• Prevent cross-organization trace continuation (#5136)
  • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
  • New option enableStrictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected. Configurable via code (setStrictTraceContinuation(true)), sentry.properties (enable-strict-trace-continuation=true), Android manifest (io.sentry.strict-trace-continuation.enabled), or Spring Boot (sentry.strict-trace-continuation=true).
  • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN. Configurable via code (setOrgId("123")), sentry.properties (org-id=123), Android manifest (io.sentry.org-id), or Spring Boot (sentry.org-id=123).
• Android: Attachments on the scope will now be synced to native (#5211)
• Add THIRD_PARTY_NOTICES.md for vendored third-party code, bundled as SENTRY_THIRD_PARTY_NOTICES.md in the sentry JAR under META-INF (#5186)

Improvements

• Do not retrieve ActivityManager if API < 35 on SDK init (#5275)

8.37.1

Fixes

• Fix deadlock in SentryContextStorage.root() with virtual threads and OpenTelemetry agent (#5234)

8.37.0

Fixes

• Session Replay: Fix Compose text masking mismatch with weighted text (#5218)

Features

• Add cache tracing instrumentation for Spring Boot 2, 3, and 4 (#5165)
  • Wraps Spring CacheManager and Cache beans to produce cache spans
  • Set sentry.enable-cache-tracing to true to enable this feature
• Add JCache (JSR-107) cache tracing via new sentry-jcache module (#5165)
  • Wraps JCache Cache with SentryJCacheWrapper to produce cache spans
  • Set the enableCacheTracing option to true to enable this feature
• Add configurable IScopesStorageFactory to SentryOptions for providing a custom IScopesStorage, e.g. when the default ThreadLocal-backed storage is incompatible with non-pinning thread models (#5199)
• Android: Add beforeErrorSampling callback to Session Replay (#5214)
  • Allows filtering which errors trigger replay capture before the onErrorSampleRate is checked
  • Returning false skips replay capture entirely for that error; returning true proceeds with the normal sample rate check
  • Example usage:

    SentryAndroid.init(context) { options ->
        options.sessionReplay.beforeErrorSampling =
            SentryReplayOptions.BeforeErrorSamplingCallback { event, hint ->
                // Only capture replay for crashes (excluding e.g. handled exceptions)
                event.isCrashed
            }
    }

Dependencies

• Bump Native SDK from v0.13.2 to v0.13.3 (#5215)
  • changelog
  • diff
• Bump OpenTelemetry (#5225)
  • opentelemetry to 1.60.1 (was 1.57.0)
  • opentelemetry-instrumentation to 2.26.0 (was 2.23.0)
  • opentelemetry-instrumentation-alpha to 2.26.0-alpha (was 2.23.0-alpha)
  • opentelemetry-semconv to 1.40.0 (was 1.37.0)
  • opentelemetry-semconv-alpha to 1.40.0-alpha (was 1.37.0-alpha)

8.36.0

Features

• Show feedback form on device shake (#5150)
  • Enable via options.getFeedbackOptions().setUseShakeGesture(true) or manifest meta-data io.sentry.feedback.use-shake-gesture
  • Uses the device's accelerometer — no special permissions required

Fixes

• Support masking/unmasking and click/scroll detection for Jetpack Compose 1.10+ (#5189)

Dependencies

• Bump Native SDK from v0.13.1 to v0.13.2 (#5181)
  • changelog
  • diff
• Bump com.abovevacant:epitaph to 0.1.1 to avoid old D8/R8 dexing crashes in downstream Android builds on old AGP versions such as 7.4.x. (#5200)
  • changelog
  • diff

8.35.0

Fixes

• Android: Remove the dependency on protobuf-lite for tombstones (#5157)

Features

• Add new experimental option to capture profiles for ANRs (#4899)
  • This feature will capture a stack profile of the main thread when it gets unresponsive
  • The profile gets attached to the ANR event on the next app start, providing a flamegraph of the ANR issue on the sentry issue details page
  • Enable via options.setAnrProfilingSampleRate(<sample-rate>) or AndroidManifest.xml: <meta-data android:name="io.sentry.anr.profiling.sample-rate" android:value="[0.0-1.0]" />
  • The sample rate controls the probability of collecting a profile for each detected foreground ANR (0.0 to 1.0, null to disable)

Behavioral Changes

• Add enableAnrFingerprinting option which assigns static fingerprints to ANR events with system-only stacktraces
  • When enabled, ANRs whose stacktraces contain only system frames (e.g. java.lang or android.os) are grouped into a single issue instead of creating many separate issues
  • This will help to reduce overall ANR issue noise in the Sentry dashboard
  • IMPORTANT: This option is enabled by default.
  • Disable via options.setEnableAnrFingerprinting(false) or AndroidManifest.xml: <meta-data android:name="io.sentry.anr.enable-fingerprinting" android:value="false" />