Bump sentry-sdk from 1.28.1 to 2.8.0 #7069
Conversation
dependabot
bot
added
dependencies
|
This is a pretty huge version jump, so we'll need to manually review and consider this one. |
dependabot
bot
force-pushed
the
dependabot/pip/sentry-sdk-2.8.0
branch
from
c2b1431 to
5fd94db
Compare
|
The Dependabot alert for this says the 1.x series has the fix in it as well. So we don't need to jump major versions. I've pushed a 2nd commit to this repo, which changes the sentry-sdk to be version |
justinclift
left a comment
justinclift
left a comment
There was a problem hiding this comment.
If this passes our CI testing we should probably merge this to (hopefully) close the Dependabot alert.
|
@getredash/maintainers Anyone up for approving this PR? I've modified it to bump |
The Dependabot alert for sentry-sdk says that the security fix has been backported to the 1.x series as well, in version 1.45.1. So, lets use that as it should be more compatible that jumping to a new major series version.
justinclift
force-pushed
the
dependabot/pip/sentry-sdk-2.8.0
branch
from
96bb921 to
19c38f6
Compare
|
I'll force push this as no-one among the maintainers seems to be actively using sentry-sdk. If this later release of the Sentry SDK turns out to have a problem, then we can investigate things then. |
The Dependabot alert for sentry-sdk says that the security fix has been backported to the 1.x series as well, in version 1.45.1. So, lets use that as it should be more compatible that jumping to a new major series version.
Bumps sentry-sdk from 1.28.1 to 2.8.0.
Release notes
Sourced from sentry-sdk's releases.
... (truncated)
Changelog
Sourced from sentry-sdk's changelog.
... (truncated)
Commits
6f4685eUpdate CHANGELOG.md7e6998erelease: 2.8.032335ddfix(profiling): profiler_id uses underscore (#3249)763e40afix(integrations): don't send full env to subprocess (#3251)31efa62ref(transport): Stop usingHubinHttpTransport(#3247)defb448build: Remove ipdb from test requirements (#3237)407f651feat(opentelemetry): Add entry point for SentryPropagator (#3086)eab218cbuild(deps): bump checkouts/data-schemas from8c13457to88273a9(#3225)5782560fix(opentelemetry): avoid propagation of empty baggage (#2968)6701616Merge branch 'release/2.7.1'Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.