chore(deps): bump sentry from 8.14.2 to 9.20.0

[dependabot]

Bumps sentry from 8.14.2 to 9.20.0.

Release notes

Sourced from sentry's releases.

9.20.0

Features

• (span-first) Add transaction and app start type span attributes by @​buenaflor in #3678
• Prevent cross-organization trace continuation by @​antonis in #3567
  • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
  • New option strictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected.
  • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN.
  • Options are also applied to the native Android SDK. On iOS, only the Dart layer enforces strict trace continuation.

Fixes

Flutter

• Avoid JNI callbacks for Android scope sync by @​denrase in #3676
• Send frame delay in seconds by @​buenaflor in #3677

Dependencies

Deps

• chore(deps): update Android SDK to v8.41.0 by @​github-actions in #3687
• chore(deps): update Cocoa SDK to v8.58.2 by @​github-actions in #3664
• chore(deps): update Native SDK to v0.13.8 by @​github-actions in #3667

Internal Changes

• Remove collection runtime dependency by @​buenaflor in #3680
• Notify linked issues on release by @​buenaflor in #3685
• Enforce conventional commit format for PR titles by @​buenaflor in #3666

9.19.0

Features

• Span-first trace lifecycle (experimental) by @​buenaflor in #3659
  • Streams spans to Sentry as each one finishes instead of buffering them into a transaction envelope at the root.
  • Opt in via options.traceLifecycle. The classic transaction-based SentryTraceLifecycle.static remains the default.
  • In stream mode, create spans with the new Sentry.startSpan / Sentry.startSpanSync APIs — the transaction APIs (Sentry.startTransaction, ISentrySpan.startChild) do nothing in this mode.
  • Auto-instrumentations (frames, app start, TTID/TTFD, navigation, user interaction, HTTP, databases, GraphQL link) automatically switch to the streaming API when enabled.

// Opt in during SDK init.
await SentryFlutter.init((options) {
  options.dsn = 'https://example@sentry.io/add-your-dsn-here';
  options.tracesSampleRate = 1.0;
  options.traceLifecycle = SentryTraceLifecycle.stream;
});
// Async work — the span ends and is sent when the future completes.
final order = await Sentry.startSpan('checkout', (span) async {
</tr></table>

... (truncated)

Changelog

Sourced from sentry's changelog.

9.20.0

Features

• (span-first) Add transaction and app start type span attributes by @​buenaflor in #3678
• Prevent cross-organization trace continuation by @​antonis in #3567
  • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
  • New option strictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected.
  • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN.
  • Options are also applied to the native Android SDK. On iOS, only the Dart layer enforces strict trace continuation.

Fixes

Flutter

• Avoid JNI callbacks for Android scope sync by @​denrase in #3676
• Send frame delay in seconds by @​buenaflor in #3677

Dependencies

Deps

• chore(deps): update Android SDK to v8.41.0 by @​github-actions in #3687
• chore(deps): update Cocoa SDK to v8.58.2 by @​github-actions in #3664
• chore(deps): update Native SDK to v0.13.8 by @​github-actions in #3667

Internal Changes

• Remove collection runtime dependency by @​buenaflor in #3680
• Notify linked issues on release by @​buenaflor in #3685
• Enforce conventional commit format for PR titles by @​buenaflor in #3666

9.19.0

Features

• Span-first trace lifecycle (experimental) by @​buenaflor in #3659
  • Streams spans to Sentry as each one finishes instead of buffering them into a transaction envelope at the root.
  • Opt in via options.traceLifecycle. The classic transaction-based SentryTraceLifecycle.static remains the default.
  • In stream mode, create spans with the new Sentry.startSpan / Sentry.startSpanSync APIs — the transaction APIs (Sentry.startTransaction, ISentrySpan.startChild) do nothing in this mode.
  • Auto-instrumentations (frames, app start, TTID/TTFD, navigation, user interaction, HTTP, databases, GraphQL link) automatically switch to the streaming API when enabled.

// Opt in during SDK init.
await SentryFlutter.init((options) {
  options.dsn = 'https://example@sentry.io/add-your-dsn-here';
  options.tracesSampleRate = 1.0;
  options.traceLifecycle = SentryTraceLifecycle.stream;
});
</tr></table>

... (truncated)

Commits

• 4860eca release: 9.20.0
• 1e46846 chore: update packages/flutter/scripts/update-android.sh to 8.41.0 (#3687)
• 08e96ae build(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#3670)
• 9d516f3 chore: update metrics/flutter.properties to 3.41.9 (#3675)
• ff48785 ref(sdk): Ignore devtools (#3684)
• 425566c build: Remove collection runtime dependency (#3680)
• b7f5256 ci: Notify linked issues on release (#3685)
• 75cbd63 feat(span-first): Add transaction and app start type span attributes (#3678)
• 737ef5d chore(deps): update Cocoa SDK to v8.58.2 (#3664)
• 2d42aac fix(flutter): Avoid JNI callbacks for Android scope sync and beforeSend (#3676)
• Additional commits viewable in compare view