From cea4b83eac78e4dcc27a5d682fa5581168b8d254 Mon Sep 17 00:00:00 2001 From: Tristan Robert Date: Tue, 1 Oct 2024 09:59:55 +0200 Subject: [PATCH] chore(Snyk): Upgrade @sentry/browser from 8.27.0 to 8.28.0 (#775) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ![snyk-top-banner](/~https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @sentry/browser from 8.27.0 to 8.28.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **1 version** ahead of your current version. - The recommended version was released on **25 days ago**.
Release notes
Package name: @sentry/browser
  • 8.28.0 - 2024-09-03

    Important Changes

    • Beta release of official NestJS SDK

    This release contains the beta version of @ sentry/nestjs! For details on how to use it, check out the
    README. Any feedback/bug reports
    are greatly appreciated, please reach out on GitHub.

    • fix(browser): Remove faulty LCP, FCP and FP normalization logic (#13502)

    This release fixes a bug in the @ sentry/browser package and all SDKs depending on this package (e.g. @ sentry/react
    or @ sentry/nextjs) that caused the SDK to send incorrect web vital values for the LCP, FCP and FP vitals. The SDK
    previously incorrectly processed the original values as they were reported from the browser. When updating your SDK to
    this version, you might experience an increase in LCP, FCP and FP values, which potentially leads to a decrease in your
    performance score in the Web Vitals Insights module in Sentry. This is because the previously reported values were
    smaller than the actually measured values. We apologize for the inconvenience!

    Other Changes

    • feat(nestjs): Add SentryGlobalGraphQLFilter (#13545)
    • feat(nestjs): Automatic instrumentation of nestjs interceptors after route execution (#13264)
    • feat(nextjs): Add bundleSizeOptimizations to build options (#13323)
    • feat(nextjs): Stabilize captureRequestError (#13550)
    • feat(nuxt): Wrap config in nuxt context (#13457)
    • feat(profiling): Expose profiler as top level primitive (#13512)
    • feat(replay): Add layout shift to CLS replay data (#13386)
    • feat(replay): Upgrade rrweb packages to 2.26.0 (#13483)
    • fix(cdn): Do not mangle _metadata (#13426)
    • fix(cdn): Fix SDK source for CDN bundles (#13475)
    • fix(nestjs): Check arguments before instrumenting with @ Injectable (#13544)
    • fix(nestjs): Ensure exception and host are correctly passed on when using @ WithSentry (#13564)
    • fix(node): Suppress tracing for transport request execution rather than transport creation (#13491)
    • fix(replay): Consider more things as DOM mutations for dead clicks (#13518)
    • fix(vue): Correctly obtain component name (#13484)

    Work in this release was contributed by @ leopoldkristjansson, @ mhuggins and @ filips123. Thank you for your
    contributions!

  • 8.27.0 - 2024-08-27

    Important Changes

    • fix(nestjs): Exception filters in main app module are not being executed (#13278)

      With this release nestjs error monitoring is no longer automatically set up after adding the SentryModule to your
      application, which led to issues in certain scenarios. You will now have to either add the SentryGlobalFilter to
      your main module providers or decorate the catch() method in your existing global exception filters with the newly
      released @ WithSentry() decorator. See the docs for
      more details.

    Other Changes

    • feat: Add options for passing nonces to feedback integration (#13347)
    • feat: Add support for SENTRY_SPOTLIGHT env var in Node (#13325)
    • feat(deps): bump @ prisma/instrumentation from 5.17.0 to 5.18.0 (#13327)
    • feat(feedback): Improve error message for 403 errors (#13441)
    • fix(deno): Don't rely on Deno.permissions.querySync (#13378)
    • fix(replay): Ensure we publish replay CDN bundles (#13437)

    Work in this release was contributed by @ charpeni. Thank you for your contribution!

from @sentry/browser GitHub release notes
--- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs._ **For more information:** > - 🧐 [View latest project report](https://app.snyk.io/org/mtes-mct/project/8a1190df-0364-4a9a-93bd-a9f28b54daf6?utm_source=github&utm_medium=referral&page=upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/mtes-mct/project/8a1190df-0364-4a9a-93bd-a9f28b54daf6/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/mtes-mct/project/8a1190df-0364-4a9a-93bd-a9f28b54daf6/settings/integration?pkg=@sentry/browser&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@sentry/browser","from":"8.27.0","to":"8.28.0"}],"env":"prod","hasFixes":false,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[],"prId":"d85ca9e1-28df-4f2d-9ebb-62f32700479e","prPublicId":"d85ca9e1-28df-4f2d-9ebb-62f32700479e","packageManager":"npm","priorityScoreList":[],"projectPublicId":"8a1190df-0364-4a9a-93bd-a9f28b54daf6","projectUrl":"https://app.snyk.io/org/mtes-mct/project/8a1190df-0364-4a9a-93bd-a9f28b54daf6?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2024-09-03T10:33:13.421Z"},"vulns":[]}' Co-authored-by: snyk-bot --- package-lock.json | 200 ++++++++++++---------------------------------- package.json | 2 +- 2 files changed, 50 insertions(+), 152 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6bddba167..5efc8c64d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,7 +9,7 @@ "version": "2.3.0", "license": "MIT", "dependencies": { - "@sentry/browser": "^8.27.0", + "@sentry/browser": "^8.28.0", "@sentry/node": "^8.27.0", "@sentry/profiling-node": "^8.28.0", "@sentry/tracing": "^7.119.0", @@ -3902,58 +3902,58 @@ } }, "node_modules/@sentry-internal/browser-utils": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-8.27.0.tgz", - "integrity": "sha512-YTIwQ1GM1NTRXgN4DvpFSQ2x4pjlqQ0FQAyHW5x2ZYv4z7VmqG4Xkid1P/srQUipECk6nxkebfD4WR19nLsvnQ==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-8.28.0.tgz", + "integrity": "sha512-tE9++KEy8SlqibTmYymuxFVAnutsXBqrwQ936WJbjaMfkqXiro7C1El0ybkprskd0rKS7kln20Q6nQlNlMEoTA==", "license": "MIT", "dependencies": { - "@sentry/core": "8.27.0", - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry/core": "8.28.0", + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" } }, "node_modules/@sentry-internal/feedback": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-8.27.0.tgz", - "integrity": "sha512-b71PQc9aK1X9b/SO1DiJlrnAEx4n0MzPZQ/tKd9oRWDyGit6pJWZfQns9r2rvc96kJPMOTxFAa/upXRCkA723A==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-8.28.0.tgz", + "integrity": "sha512-5vYunPCDBLCJ8QNnhepacdYheiN+UtYxpGAIaC/zjBC1nDuBgWs+TfKPo1UlO/1sesfgs9ibpxtShOweucL61g==", "license": "MIT", "dependencies": { - "@sentry/core": "8.27.0", - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry/core": "8.28.0", + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" } }, "node_modules/@sentry-internal/replay": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-8.27.0.tgz", - "integrity": "sha512-Ofucncaon98dvlxte2L//hwuG9yILSxNrTz/PmO0k+HzB9q+oBic4667QF+azWR2qv4oKSWpc+vEovP3hVqveA==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-8.28.0.tgz", + "integrity": "sha512-70jvzzOL5O74gahgXKyRkZgiYN93yly5gq+bbj4/6NRQ+EtPd285+ccy0laExdfyK0ugvvwD4v+1MQit52OAsg==", "license": "MIT", "dependencies": { - "@sentry-internal/browser-utils": "8.27.0", - "@sentry/core": "8.27.0", - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry-internal/browser-utils": "8.28.0", + "@sentry/core": "8.28.0", + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" } }, "node_modules/@sentry-internal/replay-canvas": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-8.27.0.tgz", - "integrity": "sha512-uuEfiWbjwugB9M4KxXxovHYiKRqg/R6U4EF8xM/Ub4laUuEcWsfRp7lQ3MxL3qYojbca8ncIFic2bIoKMPeejA==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-8.28.0.tgz", + "integrity": "sha512-RfpYHDHMUKGeEdx41QtHITjEn6P3tGaDPHvatqdrD3yv4j+wbJ6laX1PrIxCpGFUtjdzkqi/KUcvUd2kzbH/FA==", "license": "MIT", "dependencies": { - "@sentry-internal/replay": "8.27.0", - "@sentry/core": "8.27.0", - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry-internal/replay": "8.28.0", + "@sentry/core": "8.28.0", + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" @@ -4008,31 +4008,31 @@ } }, "node_modules/@sentry/browser": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-8.27.0.tgz", - "integrity": "sha512-eL1eaHwoYUGkp4mpeYesH6WtCrm+0u9jYCW5Lm0MAeTmpx22BZKEmj0OljuUJXGnJwFbvPDlRjyz6QG11m8kZA==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-8.28.0.tgz", + "integrity": "sha512-i/gjMYzIGQiPFH1pCbdnTwH9xs9mTAqzN+goP3GWX5a58frc7h8vxyA/5z0yMd0aCW6U8mVxnoAT72vGbKbx0g==", "license": "MIT", "dependencies": { - "@sentry-internal/browser-utils": "8.27.0", - "@sentry-internal/feedback": "8.27.0", - "@sentry-internal/replay": "8.27.0", - "@sentry-internal/replay-canvas": "8.27.0", - "@sentry/core": "8.27.0", - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry-internal/browser-utils": "8.28.0", + "@sentry-internal/feedback": "8.28.0", + "@sentry-internal/replay": "8.28.0", + "@sentry-internal/replay-canvas": "8.28.0", + "@sentry/core": "8.28.0", + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" } }, "node_modules/@sentry/core": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.27.0.tgz", - "integrity": "sha512-4frlXluHT3Du+Omw91K04jpvbfMtydvg4Bxj2+gt/DT19Swhm/fbEpzdUjgbAd3Jinj/n0qk/jFRXjr9JZKFjg==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.28.0.tgz", + "integrity": "sha512-+If9uubvpZpvaQQw4HLiKPhrSS9/KcoA/AcdQkNm+5CVwAoOmDPtyYfkPBgfo2hLZnZQqR1bwkz/PrNoOm+gqA==", "license": "MIT", "dependencies": { - "@sentry/types": "8.27.0", - "@sentry/utils": "8.27.0" + "@sentry/types": "8.28.0", + "@sentry/utils": "8.28.0" }, "engines": { "node": ">=14.18" @@ -4081,40 +4081,6 @@ "opentelemetry-instrumentation-fetch-node": "1.2.3" } }, - "node_modules/@sentry/node/node_modules/@sentry/core": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.28.0.tgz", - "integrity": "sha512-+If9uubvpZpvaQQw4HLiKPhrSS9/KcoA/AcdQkNm+5CVwAoOmDPtyYfkPBgfo2hLZnZQqR1bwkz/PrNoOm+gqA==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0", - "@sentry/utils": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/node/node_modules/@sentry/types": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.28.0.tgz", - "integrity": "sha512-hOfqfd92/AzBrEdMgmmV1VfOXJbIfleFTnerRl0mg/+CcNgP/6+Fdonp354TD56ouWNF2WkOM6sEKSXMWp6SEQ==", - "license": "MIT", - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/node/node_modules/@sentry/utils": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.28.0.tgz", - "integrity": "sha512-smhk7PJpvDMQ2DB5p2qn9UeoUHdU41IgjMmS2xklZpa8tjzBTxDeWpGvrX2fuH67D9bAJuLC/XyZjJCHLoEW5g==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, "node_modules/@sentry/opentelemetry": { "version": "8.28.0", "resolved": "https://registry.npmjs.org/@sentry/opentelemetry/-/opentelemetry-8.28.0.tgz", @@ -4136,40 +4102,6 @@ "@opentelemetry/semantic-conventions": "^1.25.1" } }, - "node_modules/@sentry/opentelemetry/node_modules/@sentry/core": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.28.0.tgz", - "integrity": "sha512-+If9uubvpZpvaQQw4HLiKPhrSS9/KcoA/AcdQkNm+5CVwAoOmDPtyYfkPBgfo2hLZnZQqR1bwkz/PrNoOm+gqA==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0", - "@sentry/utils": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/opentelemetry/node_modules/@sentry/types": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.28.0.tgz", - "integrity": "sha512-hOfqfd92/AzBrEdMgmmV1VfOXJbIfleFTnerRl0mg/+CcNgP/6+Fdonp354TD56ouWNF2WkOM6sEKSXMWp6SEQ==", - "license": "MIT", - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/opentelemetry/node_modules/@sentry/utils": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.28.0.tgz", - "integrity": "sha512-smhk7PJpvDMQ2DB5p2qn9UeoUHdU41IgjMmS2xklZpa8tjzBTxDeWpGvrX2fuH67D9bAJuLC/XyZjJCHLoEW5g==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, "node_modules/@sentry/profiling-node": { "version": "8.28.0", "resolved": "https://registry.npmjs.org/@sentry/profiling-node/-/profiling-node-8.28.0.tgz", @@ -4191,40 +4123,6 @@ "node": ">=14.18" } }, - "node_modules/@sentry/profiling-node/node_modules/@sentry/core": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.28.0.tgz", - "integrity": "sha512-+If9uubvpZpvaQQw4HLiKPhrSS9/KcoA/AcdQkNm+5CVwAoOmDPtyYfkPBgfo2hLZnZQqR1bwkz/PrNoOm+gqA==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0", - "@sentry/utils": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/profiling-node/node_modules/@sentry/types": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.28.0.tgz", - "integrity": "sha512-hOfqfd92/AzBrEdMgmmV1VfOXJbIfleFTnerRl0mg/+CcNgP/6+Fdonp354TD56ouWNF2WkOM6sEKSXMWp6SEQ==", - "license": "MIT", - "engines": { - "node": ">=14.18" - } - }, - "node_modules/@sentry/profiling-node/node_modules/@sentry/utils": { - "version": "8.28.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.28.0.tgz", - "integrity": "sha512-smhk7PJpvDMQ2DB5p2qn9UeoUHdU41IgjMmS2xklZpa8tjzBTxDeWpGvrX2fuH67D9bAJuLC/XyZjJCHLoEW5g==", - "license": "MIT", - "dependencies": { - "@sentry/types": "8.28.0" - }, - "engines": { - "node": ">=14.18" - } - }, "node_modules/@sentry/profiling-node/node_modules/detect-libc": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.3.tgz", @@ -4247,21 +4145,21 @@ } }, "node_modules/@sentry/types": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.27.0.tgz", - "integrity": "sha512-B6lrP46+m2x0lfqWc9F4VcUbN893mVGnPEd7KIMRk95mPzkFJ3sNxggTQF5/ZfNO7lDQYQb22uysB5sj/BqFiw==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.28.0.tgz", + "integrity": "sha512-hOfqfd92/AzBrEdMgmmV1VfOXJbIfleFTnerRl0mg/+CcNgP/6+Fdonp354TD56ouWNF2WkOM6sEKSXMWp6SEQ==", "license": "MIT", "engines": { "node": ">=14.18" } }, "node_modules/@sentry/utils": { - "version": "8.27.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.27.0.tgz", - "integrity": "sha512-gyJM3SyLQe0A3mkQVVNdKYvk3ZoikkYgyA/D+5StFNLKdyUgEbJgXOGXrQSSYPF7BSX6Sc5b0KHCglPII0KuKw==", + "version": "8.28.0", + "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.28.0.tgz", + "integrity": "sha512-smhk7PJpvDMQ2DB5p2qn9UeoUHdU41IgjMmS2xklZpa8tjzBTxDeWpGvrX2fuH67D9bAJuLC/XyZjJCHLoEW5g==", "license": "MIT", "dependencies": { - "@sentry/types": "8.27.0" + "@sentry/types": "8.28.0" }, "engines": { "node": ">=14.18" diff --git a/package.json b/package.json index 15136cf59..9da81db31 100644 --- a/package.json +++ b/package.json @@ -51,7 +51,7 @@ "test": "npm run test:client && npm run test:backend && npm run test:server" }, "dependencies": { - "@sentry/browser": "^8.27.0", + "@sentry/browser": "^8.28.0", "@sentry/node": "^8.27.0", "@sentry/profiling-node": "^8.28.0", "@sentry/tracing": "^7.119.0",