Bump io.sentry:sentry-jul from 8.2.0 to 8.3.0

[dependabot]

Bumps io.sentry:sentry-jul from 8.2.0 to 8.3.0.

Release notes

Sourced from io.sentry:sentry-jul's releases.

8.3.0

Features

• Add HTTP server request headers from OpenTelemetry span attributes to sentry request in payload (#4102)
  • You have to explicitly enable each header by adding it to the OpenTelemetry config
  • Please only enable headers you actually want to send to Sentry. Some may contain sensitive data like PII, cookies, tokens etc.
  • We are no longer adding request/response headers to contexts/otel/attributes of the event.
• The ignoredErrors option is now configurable via the manifest property io.sentry.traces.ignored-errors (#4178)
• A list of active Spring profiles is attached to payloads sent to Sentry (errors, traces, etc.) and displayed in the UI when using our Spring or Spring Boot integrations (#4147)
  • This consists of an empty list when only the default profile is active
• Added enableTraceIdGeneration to the AndroidOptions. This allows Hybrid SDKs to "freeze" and control the trace and connect errors on different layers of the application (4188)
• Move to a single NetworkCallback listener to reduce number of IPC calls on Android (#4164)
• Add GraphQL Apollo Kotlin 4 integration (#4166)
• Add support for async dispatch requests to Spring Boot 2 and 3 (#3983)
  • To enable it, please set sentry.keep-transactions-open-for-async-responses=true in application.properties or sentry.keepTransactionsOpenForAsyncResponses: true in application.yml
• Add constructor to JUL SentryHandler for disabling external config (#4208)

Fixes

• Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#4213)
  • This was the case e.g. for ignoredErrors, ignoredTransactions and ignoredCheckIns
  • We now simply don't use such strings for Regex matching and only use them for String comparison
• SentryOptions.setTracePropagationTargets is no longer marked internal (#4170)
• Session Replay: Fix crash when a navigation breadcrumb does not have "to" destination (#4185)
• Session Replay: Cap video segment duration to maximum 5 minutes to prevent endless video encoding in background (#4185)
• Check tracePropagationTargets in OpenTelemetry propagator (#4191)
  • If a URL can be retrieved from OpenTelemetry span attributes, we check it against tracePropagationTargets before attaching sentry-trace and baggage headers to outgoing requests
  • If no URL can be retrieved we always attach the headers
• Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset by external options like sentry.properties or ENV vars (#4207)
  • Whenever parsing of external options was enabled (enableExternalConfiguration), which is the default for many integrations, the values set on SentryOptions passed to Sentry.init would be lost
  • Even if the value was not set in any external configuration it would still be set to an empty list

Behavioural Changes

• The class io.sentry.spring.jakarta.webflux.ReactorUtils is now deprecated, please use io.sentry.reactor.SentryReactorUtils in the new sentry-reactor module instead (#4155)
  • The new module will be exposed as an api dependency when using sentry-spring-boot-jakarta (Spring Boot 3) or sentry-spring-jakarta (Spring 6). Therefore, if you're using one of those modules, changing your imports will suffice.

Changelog

Sourced from io.sentry:sentry-jul's changelog.

8.3.0

Features

• Add HTTP server request headers from OpenTelemetry span attributes to sentry request in payload (#4102)
  • You have to explicitly enable each header by adding it to the OpenTelemetry config
  • Please only enable headers you actually want to send to Sentry. Some may contain sensitive data like PII, cookies, tokens etc.
  • We are no longer adding request/response headers to contexts/otel/attributes of the event.
• The ignoredErrors option is now configurable via the manifest property io.sentry.traces.ignored-errors (#4178)
• A list of active Spring profiles is attached to payloads sent to Sentry (errors, traces, etc.) and displayed in the UI when using our Spring or Spring Boot integrations (#4147)
  • This consists of an empty list when only the default profile is active
• Added enableTraceIdGeneration to the AndroidOptions. This allows Hybrid SDKs to "freeze" and control the trace and connect errors on different layers of the application (4188)
• Move to a single NetworkCallback listener to reduce number of IPC calls on Android (#4164)
• Add GraphQL Apollo Kotlin 4 integration (#4166)
• Add support for async dispatch requests to Spring Boot 2 and 3 (#3983)
  • To enable it, please set sentry.keep-transactions-open-for-async-responses=true in application.properties or sentry.keepTransactionsOpenForAsyncResponses: true in application.yml
• Add constructor to JUL SentryHandler for disabling external config (#4208)

Fixes

• Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#4213)
  • This was the case e.g. for ignoredErrors, ignoredTransactions and ignoredCheckIns
  • We now simply don't use such strings for Regex matching and only use them for String comparison
• SentryOptions.setTracePropagationTargets is no longer marked internal (#4170)
• Session Replay: Fix crash when a navigation breadcrumb does not have "to" destination (#4185)
• Session Replay: Cap video segment duration to maximum 5 minutes to prevent endless video encoding in background (#4185)
• Check tracePropagationTargets in OpenTelemetry propagator (#4191)
  • If a URL can be retrieved from OpenTelemetry span attributes, we check it against tracePropagationTargets before attaching sentry-trace and baggage headers to outgoing requests
  • If no URL can be retrieved we always attach the headers
• Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset by external options like sentry.properties or ENV vars (#4207)
  • Whenever parsing of external options was enabled (enableExternalConfiguration), which is the default for many integrations, the values set on SentryOptions passed to Sentry.init would be lost
  • Even if the value was not set in any external configuration it would still be set to an empty list

Behavioural Changes

• The class io.sentry.spring.jakarta.webflux.ReactorUtils is now deprecated, please use io.sentry.reactor.SentryReactorUtils in the new sentry-reactor module instead (#4155)
  • The new module will be exposed as an api dependency when using sentry-spring-boot-jakarta (Spring Boot 3) or sentry-spring-jakarta (Spring 6). Therefore, if you're using one of those modules, changing your imports will suffice.

Commits

• d5289e7 release: 8.3.0
• c1a567b Filter strings that cannot be parsed as Regex no longer cause an SDK crash (#...
• f64d1f2 Add support for async dispatch requests (#3983)
• 3b6cfdf Add HTTP server request headers from OpenTelemetry span attributes to sentry ...
• cde02ad Add constructor to JUL SentryHandler for disabling external config (#4208)
• 7d08e30 fix(session-replay): Do not crash if navigation breadcrumb has no destinatio...
• c8461d4 Check tracePropagationTargets in OpenTelemetry propagator (#4191)
• afe9d2c Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset ...
• e5e95de feat: Added enableTraceIdGeneration option (#4188)
• c87d429 Add GraphQL Apollo Kotlin 4 integration (#4166)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dalbani]

I suggest merging that one and making a new release, as it includes 2 fixes relevant to the Quarkus extension:

• Fix ignoredErrors, ignoredTransactions and ignoredCheckIns being unset by external options getsentry/sentry-java#4207
• Add constructor to JUL SentryHandler for disabling external config getsentry/sentry-java#4208
  • Thanks to this one, a new constructor https://github.com/getsentry/sentry-java/blob/main/sentry-jul/src/main/java/io/sentry/jul/SentryHandler.java#L73 is available which makes it possible to disable external configuration.

For the record, these 2 fixes are originating from issues discovered in the context of #286.

[melloware]

@dalbani so I need to switch this line to turn external configuration false right?

SentryHandler handler = new SentryHandler(options, false);

[dalbani]

Yes, this is my understanding.
That means of course that no use of the "low-level" SENTRY_ environment variables will be possible anymore.

[melloware]

OK PR submitted: #305