Comparing changes

…y#8019) ### Description Expose `Attributes` from `sentry_sdk.types` so callers can annotate span attributes without importing the private `sentry_sdk._types` module The export follows the existing public type pattern: - Re-export the original definition during type checking - Provide an `Any` fallback for runtime annotation imports - Include `Attributes` in `__all__` This is a three-line change in `sentry_sdk/types.py`. No test files are changed The internal type definition remains unchanged. No dependencies or configuration changes are needed #### Validation Local checks run on Windows with Python 3.12: - Focused tox run of `tests/test_types.py`: 2 existing tests passed - Public `Attributes` import checked at runtime - SDK mypy check: no issues in 202 source files - Consumer mypy checks: supported attribute values accepted, unsupported object values rejected, and wildcard import accepted - Ruff lint and formatting checks passed for the export module and existing type tests - Wheel build passed - `git diff --check` passed The full integration matrix has not been run locally. GitHub's CI and Test workflows currently report `action_required`; no jobs have run AI assistance was used for implementation and local validation #### Issues * resolves: getsentry#6970 * resolves: PY-2639 #### Reminders - Please add tests to validate your changes, and lint your code using `uv run ruff`. - Add GH Issue ID _&_ Linear ID (if applicable) - PR title should use [conventional commit](https://develop.sentry.dev/engineering-practices/commit-messages/#type) style (`feat:`, `fix:`, `ref:`, `meta:`) - For external contributors: [CONTRIBUTING.md](https://github.com/getsentry/sentry-python/blob/master/CONTRIBUTING.md), [Sentry SDK development docs](https://develop.sentry.dev/sdk/), [Discord community](https://discord.gg/Ww9hbqr)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token) | action | minor | `v3.2.0` → `v3.3.0` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | | patch | `v8.0.1` → `v8.0.2` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | patch | `v8.0.1` → `v8.0.2` | | [actions/setup-java](https://redirect.github.com/actions/setup-java) ([changelog](https://redirect.github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c..de7274f081f381c8f8158605e0321c36c376e2e6)) | | digest | `dd06d9c` → `de7274f` | | [actions/setup-java](https://redirect.github.com/actions/setup-java) ([changelog](https://redirect.github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c..de7274f081f381c8f8158605e0321c36c376e2e6)) | action | digest | `dd06d9c` → `de7274f` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | | patch | `v7.0.1` → `v7.0.2` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | patch | `v7.0.1` → `v7.0.2` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) ([changelog](https://redirect.github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a..cf430e030ddbb5b0abf93d22962f4752f3646cd9)) | action | digest | `043fb46` → `cf430e0` | | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | | minor | `v10.0.1` → `v10.3.0` | | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.3.0` | | [getsentry/coverage-action](https://redirect.github.com/getsentry/coverage-action) | | patch | `v0.4.0` → `0.4.3` | | [getsentry/coverage-action](https://redirect.github.com/getsentry/coverage-action) | action | patch | `v0.4.0` → `0.4.3` | | [getsentry/craft](https://redirect.github.com/getsentry/craft) | action | minor | `2.30.1` → `2.34.1` | | [getsentry/craft](https://redirect.github.com/getsentry/craft) ([changelog](https://redirect.github.com/getsentry/craft/compare/cd1e8294061fd970b40d98b77aaa109cb1e00e78..3f2abdc5703191d12ef2cc013f792f1bd220f44d)) | workflow | digest | `cd1e829` → `3f2abdc` | | [java-jdk](https://adoptium.net) | uses-with | major | `21` → `25` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](..getsentry/issues/6715) for more information. --- ### Release Notes <details> <summary>actions/create-github-app-token</summary> ### [`v3.3.0`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v3.3.0) [Compare Source](https://redirect.github.com/actions/create-github-app-token/compare/v3.2.0...v3.3.0) ##### Features - update permission inputs ([#399](https://redirect.github.com/actions/create-github-app-token/issues/399)) ([a47236f](https://redirect.github.com/actions/create-github-app-token/commit/a47236f79f79fcbc3532af49fe3a5ded89529b6e)) ##### Bug Fixes - **deps:** bump nested undici from 6.24.0 to 6.29.0 ([#403](https://redirect.github.com/actions/create-github-app-token/issues/403)) ([12461a3](https://redirect.github.com/actions/create-github-app-token/commit/12461a3a794e67c032f1eff5bb95ece9427eb4fb)) - **deps:** bump the production-dependencies group across 1 directory with 3 updates ([#395](https://redirect.github.com/actions/create-github-app-token/issues/395)) ([a69c19d](https://redirect.github.com/actions/create-github-app-token/commit/a69c19ddfdf8e1ab093900e0064524ce9309c807)) </details> <details> <summary>actions/download-artifact</summary> ### [`v8.0.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v8.0.2) [Compare Source](https://redirect.github.com/actions/download-artifact/compare/v8.0.1...v8.0.2) ##### What's Changed - Update the readme by [@danwkennedy](https://redirect.github.com/danwkennedy) in [#473](https://redirect.github.com/actions/download-artifact/pull/473) - Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers. - Update [@actions/artifact](https://redirect.github.com/actions/artifact) to 6.3.1 by [@tunc-d](https://redirect.github.com/tunc-d) in [#492](https://redirect.github.com/actions/download-artifact/pull/492) - Prepare download-artifact v8.0.2 by [@tunc-d](https://redirect.github.com/tunc-d) in [#493](https://redirect.github.com/actions/download-artifact/pull/493) ##### New Contributors - [@tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#492](https://redirect.github.com/actions/download-artifact/pull/492) **Full Changelog**: <actions/download-artifact@v8.0.1...v8.0.2> </details> <details> <summary>actions/upload-artifact</summary> ### [`v7.0.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2) #### What's Changed - Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers. - Updates [@actions/artifact](https://redirect.github.com/actions/artifact) to v6.3.1. #### New Contributors - [@tunc-d](https://redirect.github.com/tunc-d) made their first contribution in [#821](https://redirect.github.com/actions/upload-artifact/pull/821) **Full Changelog**: <actions/upload-artifact@v7.0.1...v7.0.2> </details> <details> <summary>astral-sh/setup-uv</summary> ### [`v10.3.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.0): 🌈 Add Python architecture selection [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.2.0...v10.3.0) #### Changes This release adds the `python-arch` input to select a Python architecture independently of the Python version. With `uv` 0.13.0 or later, set `python-arch: x86_64` to use x64 Python on Windows ARM64 runners. It also includes embedded checksums for `uv` releases through 0.13.0. - Use macOS 15 runners for tests [@charliermarsh](https://redirect.github.com/charliermarsh) ([#1081](https://redirect.github.com/astral-sh/setup-uv/issues/1081)) #### 🚀 Enhancements - Add `python-arch` support [@zanieb](https://redirect.github.com/zanieb) ([#1079](https://redirect.github.com/astral-sh/setup-uv/issues/1079)) #### 🧰 Maintenance - chore: update known checksums for 0.13.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1089](https://redirect.github.com/astral-sh/setup-uv/issues/1089)) - chore: update known checksums for 0.12.24 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1084](https://redirect.github.com/astral-sh/setup-uv/issues/1084)) - chore: update known checksums for 0.12.23 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1082](https://redirect.github.com/astral-sh/setup-uv/issues/1082)) - chore: update known checksums for 0.12.22 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1080](https://redirect.github.com/astral-sh/setup-uv/issues/1080)) - chore: update known checksums for 0.12.21 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1078](https://redirect.github.com/astral-sh/setup-uv/issues/1078)) - chore: update known checksums for 0.12.20 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1076](https://redirect.github.com/astral-sh/setup-uv/issues/1076)) - chore: update known checksums for 0.12.19 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1068](https://redirect.github.com/astral-sh/setup-uv/issues/1068)) - chore: update known checksums for 0.12.18 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1065](https://redirect.github.com/astral-sh/setup-uv/issues/1065)) #### ⬆️ Dependency updates - chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ([#1077](https://redirect.github.com/astral-sh/setup-uv/issues/1077)) ### [`v10.2.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.2.0): 🌈 Disable automatic cache saves for merge queues [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.1.0...v10.2.0) #### Changes This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used. #### 🚀 Enhancements - Disable automatic cache saves for merge queues [@eifinger](https://redirect.github.com/eifinger) ([#1056](https://redirect.github.com/astral-sh/setup-uv/issues/1056)) #### 🧰 Maintenance - chore: update known checksums for 0.12.17 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1058](https://redirect.github.com/astral-sh/setup-uv/issues/1058)) - chore: update known checksums for 0.12.16 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1057](https://redirect.github.com/astral-sh/setup-uv/issues/1057)) - chore: update known checksums for 0.12.15 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1054](https://redirect.github.com/astral-sh/setup-uv/issues/1054)) - chore: update known checksums for 0.12.14 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1053](https://redirect.github.com/astral-sh/setup-uv/issues/1053)) - chore: update known checksums for 0.12.13 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1045](https://redirect.github.com/astral-sh/setup-uv/issues/1045)) #### 📚 Documentation - docs: update version references to v10.1.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1044](https://redirect.github.com/astral-sh/setup-uv/issues/1044)) #### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1059](https://redirect.github.com/astral-sh/setup-uv/issues/1059)) ### [`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0) #### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686) for details on why this can be useful. #### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://redirect.github.com/mj0nez) ([#1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://redirect.github.com/woodruffw) ([#1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025)) #### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://redirect.github.com/woodruffw) ([#1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://redirect.github.com/zaniebot) ([#1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033)) #### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://redirect.github.com/woodruffw) ([#1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024)) - Pin one-shot tools [@woodruffw](https://redirect.github.com/woodruffw) ([#1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022)) - ci: remove obsolete direct push attempts [@eifinger](https://redirect.github.com/eifinger) ([#1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019)) #### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018)) #### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043)) - Harden npm install defaults [@zaniebot](https://redirect.github.com/zaniebot) ([#1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026)) - Add dependency cooldowns [@woodruffw](https://redirect.github.com/woodruffw) ([#1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021)) </details> <details> <summary>getsentry/coverage-action</summary> ### [`v0.4.3`](https://redirect.github.com/getsentry/coverage-action/blob/HEAD/CHANGELOG.md#043) [Compare Source](https://redirect.github.com/getsentry/coverage-action/compare/0.4.2...0.4.3) ##### New Features ✨ - (comment) Add title input by [@GabeDuarteM](https://redirect.github.com/GabeDuarteM) in [#117](https://redirect.github.com/getsentry/coverage-action/pull/117) ### [`v0.4.2`](https://redirect.github.com/getsentry/coverage-action/blob/HEAD/CHANGELOG.md#042) [Compare Source](https://redirect.github.com/getsentry/coverage-action/compare/0.4.1...0.4.2) ##### New Features ✨ ##### Website - Harden gitignore exclusions by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#116](https://redirect.github.com/getsentry/coverage-action/pull/116) - Respect gitignore exclusions by [@aldy505](https://redirect.github.com/aldy505) in [#114](https://redirect.github.com/getsentry/coverage-action/pull/114) - Coverage file browser by [@aldy505](https://redirect.github.com/aldy505) in [#112](https://redirect.github.com/getsentry/coverage-action/pull/112) ##### Bug Fixes 🐛 - (dashboard) Correct merged file coverage by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#113](https://redirect.github.com/getsentry/coverage-action/pull/113) ##### Internal Changes 🔧 - Cleanup unwanted tar.gz file by [@aldy505](https://redirect.github.com/aldy505) in [#115](https://redirect.github.com/getsentry/coverage-action/pull/115) ### [`v0.4.1`](https://redirect.github.com/getsentry/coverage-action/blob/HEAD/CHANGELOG.md#041) [Compare Source](https://redirect.github.com/getsentry/coverage-action/compare/0.4.0...0.4.1) ##### Bug Fixes 🐛 ##### Deps - Upgrade adm-zip to 0.6.1 by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#111](https://redirect.github.com/getsentry/coverage-action/pull/111) - Update js-yaml and align Vitest packages by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#107](https://redirect.github.com/getsentry/coverage-action/pull/107) - Resolve Dependabot alerts by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#101](https://redirect.github.com/getsentry/coverage-action/pull/101) ##### Website - Restore dashboard data loading and deep links by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#106](https://redirect.github.com/getsentry/coverage-action/pull/106) - Validate GitHub repository URLs by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#102](https://redirect.github.com/getsentry/coverage-action/pull/102) ##### Other - (comment) Clarify patch coverage results by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#110](https://redirect.github.com/getsentry/coverage-action/pull/110) - (status) Report on PR head commit and diff against merge commit by [@jared-outpost](https://redirect.github.com/jared-outpost) in [#108](https://redirect.github.com/getsentry/coverage-action/pull/108) - Use Coverage branding in reports and dashboard by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#109](https://redirect.github.com/getsentry/coverage-action/pull/109) </details> <details> <summary>getsentry/craft</summary> ### [`v2.34.1`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2341) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.34.0...2.34.1) ##### Bug Fixes 🐛 - Archive Craft documentation in GCS by [@BYK](https://redirect.github.com/BYK) in [#899](https://redirect.github.com/getsentry/craft/pull/899) ### [`v2.34.0`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2340) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.33.3...2.34.0) ##### New Features ✨ - (action) Publish commit-pinned Craft nightlies to GHCR by [@BYK](https://redirect.github.com/BYK) in [#897](https://redirect.github.com/getsentry/craft/pull/897) ##### Bug Fixes 🐛 - Allow release build to validate nightly jobs by [@BYK](https://redirect.github.com/BYK) in [#898](https://redirect.github.com/getsentry/craft/pull/898) ### [`v2.33.3`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2333) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.33.2...2.33.3) ##### Bug Fixes 🐛 - (deps) Remediate open security alerts by [@BYK](https://redirect.github.com/BYK) in [#894](https://redirect.github.com/getsentry/craft/pull/894) - Allow Git identity environment for commits by [@BYK](https://redirect.github.com/BYK) in [#896](https://redirect.github.com/getsentry/craft/pull/896) - Pass Git actor name to release workflow by [@BYK](https://redirect.github.com/BYK) in [#895](https://redirect.github.com/getsentry/craft/pull/895) ### [`v2.33.2`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2332) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.33.1...2.33.2) ##### Bug Fixes 🐛 - (action) Resolve SHA refs to matching Craft releases by [@BYK](https://redirect.github.com/BYK) in [#891](https://redirect.github.com/getsentry/craft/pull/891) ### [`v2.33.1`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2331) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.33.0...2.33.1) ##### Bug Fixes 🐛 - (action) Resolve major tag to matching binary by [@BYK](https://redirect.github.com/BYK) in [#889](https://redirect.github.com/getsentry/craft/pull/889) - (deps) Update vulnerable transitive packages by [@BYK](https://redirect.github.com/BYK) in [#890](https://redirect.github.com/getsentry/craft/pull/890) ### [`v2.33.0`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2330) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.32.0...2.33.0) ##### Bug Fixes 🐛 - (changelog) Default workspace changelog to its directory by [@BYK](https://redirect.github.com/BYK) in [#888](https://redirect.github.com/getsentry/craft/pull/888) ### [`v2.32.0`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2320) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.31.2...2.32.0) ##### New Features ✨ - (changelog) Scope commits to selected workspace by [@BYK](https://redirect.github.com/BYK) in [#887](https://redirect.github.com/getsentry/craft/pull/887) ##### Bug Fixes 🐛 - (changelog) Include commits without a previous tag by [@BYK](https://redirect.github.com/BYK) in [#886](https://redirect.github.com/getsentry/craft/pull/886) - (prepare) Detect pending remote release branches by [@BYK](https://redirect.github.com/BYK) in [#883](https://redirect.github.com/getsentry/craft/pull/883) - (publish) Clean up release branches for revisions by [@BYK](https://redirect.github.com/BYK) in [#884](https://redirect.github.com/getsentry/craft/pull/884) ### [`v2.31.2`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2312) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.31.1...2.31.2) ##### Bug Fixes 🐛 - (deps) Remediate open security alerts by [@BYK](https://redirect.github.com/BYK) in [#881](https://redirect.github.com/getsentry/craft/pull/881) - (github) Filter artifacts by name when fetching revision artifact by [@itaybre](https://redirect.github.com/itaybre) in [#880](https://redirect.github.com/getsentry/craft/pull/880) ### [`v2.31.1`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2311) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.31.0...2.31.1) ##### Bug Fixes 🐛 - (npm) Show publish stderr at info level by [@sentry-junior](https://redirect.github.com/sentry-junior) in [#877](https://redirect.github.com/getsentry/craft/pull/877) ##### Internal Changes 🔧 ##### Deps - Bump sharp from 0.35.0 to 0.35.4 in /docs by [@dependabot](https://redirect.github.com/dependabot) in [#874](https://redirect.github.com/getsentry/craft/pull/874) - Bump astro from 7.1.4 to 7.2.8 in /docs by [@dependabot](https://redirect.github.com/dependabot) in [#873](https://redirect.github.com/getsentry/craft/pull/873) ##### Deps Dev - Bump vitest from 4.1.8 to 4.1.11 by [@dependabot](https://redirect.github.com/dependabot) in [#875](https://redirect.github.com/getsentry/craft/pull/875) - Bump js-yaml from 4.3.1 to 4.3.2 by [@dependabot](https://redirect.github.com/dependabot) in [#876](https://redirect.github.com/getsentry/craft/pull/876) ### [`v2.31.0`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2310) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.30.1...2.31.0) ##### New Features ✨ - (config) Top-level workspaces schema + --workspace selector by [@BYK](https://redirect.github.com/BYK) in [#848](https://redirect.github.com/getsentry/craft/pull/848) - Propagate release workspaces by [@BYK](https://redirect.github.com/BYK) in [#872](https://redirect.github.com/getsentry/craft/pull/872) ##### Bug Fixes 🐛 - (git) Prevent fatal error for missing 'origin' remote by [@sentry](https://redirect.github.com/sentry) in [#871](https://redirect.github.com/getsentry/craft/pull/871) - (registry) Retry registry push with backoff on concurrent updates by [@jared-outpost](https://redirect.github.com/jared-outpost) in [#870](https://redirect.github.com/getsentry/craft/pull/870) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/getsentry/sentry-python).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com> Co-authored-by: Ivana Kellyer <[email protected]>

…#8026) ### Description This fixes the `AI (3.10)` litellm flake. The test that fails changes from run to run. Recent example: `test_binary_content_encoding_mixed_content[False-False]`, which failed **7 times on master** between Sep 30 and Oct 13 ([job](https://github.com/getsentry/sentry-python/actions/runs/38237427670/job/114771446502)). Other failures were in `test_no_integration[False-False]` and `test_binary_content_encoding_image_url[True-False]`. All 10 litellm failures I looked at on master have the same cause: ``` /usr/lib/python3.10/threading.py:1011: in _bootstrap_inner _sys.settrace(_trace_hook) E RuntimeError: Cannot install a trace function while another trace function is being installed ``` **Root cause** - On CPython < 3.12, `_PyEval_SetTrace` uses a `static int reentrant` flag shared by the whole process. The flag stays set while audit hooks run ([python/cpython#98257](python/cpython#98257), fixed in 3.12). - `filelock` 3.30.0 through 4.0.2 registers a Python audit hook (`sys.addaudithook(_audit_fork_safety)`) when it is imported. The py3.10 litellm envs pin `filelock==3.32.4`, and `huggingface_hub` imports it during the first test. - pytest-cov calls `threading.settrace`, so every new thread calls `sys.settrace()` while it starts up. If the GIL switches while another thread is inside filelock's hook, the new thread's `settrace()` raises and the thread dies before it runs. - The tests create a new single-worker executor (`reset_litellm_executor`), and LiteLLM finishes the `gen_ai.chat` span in a success callback submitted to it. A dead worker means the callback never runs, so the test gets `len(chat_spans) == 0`. **Fix** `filelock` 4.0.3 fixed this upstream: it no longer registers the hook on CPython < 3.12 (`_SETTRACE_SURVIVES_AUDIT_HOOKS`). This PR adds a `py3.10,py3.11` rule, `filelock>=4.0.3`, to the litellm config, then regenerates `tox.ini` with `scripts/generate-test-files.sh --only litellm`. - Only the four `py3.10-litellm-*` blocks change; they now pin `filelock==4.1.0`. py3.12 and later are unaffected and unchanged. - Re-resolving those four blocks also moved other transitive pins, for example `anthropic` 1.0.0 → 1.13.0. - `releases.jsonl` is unchanged. `--only` would have pruned it, so I restored it. `package_dependencies.jsonl` only gains the 3 new resolution entries. No retries, sleeps, skipped tests or weaker assertions. **Reproduction:** getsentry/repro#60 It is a standalone script with no litellm and no pytest. On Python 3.10 with filelock 3.32.4, it lost 14 of 32,000 callbacks in one run, and 3 of 5 shorter runs (16,000 callbacks each) reproduced it. Under the same conditions it lost 0 of 32,000 with filelock 4.0.3, and 0 on Python 3.12. Original suite, run locally (`py3.10-litellm-v1.83.14`, with coverage): - With default settings: 0 of 20 runs failed. - With GIL switching set to happen more often (`sys.setswitchinterval(1e-6)` via a `-p` plugin; no test code changed): 4 of 20 runs hit the `RuntimeError`, and 3 of 20 failed. This is a **draft** until validation of the fix against both the repro and the original suite is posted here. Possible follow-up, not changed here: `py3.11-anthropic-v0.16.0` also pins `filelock==3.32.4`. #### Issues * resolves: getsentry#7014 * Linear: PY-2660  via Junior system actor `event`.    -- [View Junior Session](https://junior-prod.sentry.dev/conversations/agent-dispatch%3Adispatch_6df7374375b237816e130534b6439833) [[Sentry]](https://sentry.sentry.io/explore/conversations/agent-dispatch%3Adispatch_6df7374375b237816e130534b6439833/?project=4510944073809921)  Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>

…monitor (getsentry#8032) ### Description This fixes the flaky `tests/test_monitor.py::test_segment_uses_downsampled_rate` (`assert 0.25 == 0.5`, [job](https://github.com/getsentry/sentry-python/actions/runs/38393542918/job/115282966684)). Its siblings `test_transaction_uses_downsampled_rate` and `test_monitor_unhealthy` have the same race. **Root cause** These tests call `monitor.run()` by hand and assert exact `downsample_factor` values. They also set `monitor.interval = 0.1`. The first `monitor.is_healthy()` starts the monitor's background thread, which then calls `run()` every 0.1 s as well. On a slow runner (the failure was in Gevent 3.10, where the test took about 0.34 s), the thread runs an extra unhealthy check before the sampling decision. The factor goes from 1 to 2, so the sample rate is 0.25. **Fix** These tests now call `monitor.kill()` instead of shortening the interval. The thread `is_healthy()` starts then exits right away, so only the test's own `run()` calls change the factor. The assertions are unchanged, and there are no retries, sleeps or skips. SDK code is unchanged; this was a test bug. **Reproduction:** getsentry/repro#62 (sentry-sdk 2.72.0, Python 3.12). With random gaps of 0–0.2 s before sampling, the rate was wrong in 55 of 100 iterations. With gaps under 0.1 s it was 0 of 100, and with the background thread stopped it was 0 of 100. **Original tests, local runs** (`py3.14-common`). Each run covered the 3 affected tests. A test-only `-p` plugin added a random wait before `start_transaction` / `traces.start_span` to imitate a slow runner; no test or SDK code was changed by it. - `master`, no wait: 10 of 10 runs passed. The race doesn't show up locally on its own. - `master`, 0–200 ms wait: **11 of 15 runs failed**. `test_segment_uses_downsampled_rate` failed 6 times and `test_transaction_uses_downsampled_rate` 8 times. - This branch, 0–200 ms wait: **40 of 40 runs passed**. The baseline per-test failure rate was about 40%, so 9 clean runs would already give 99% confidence. - This branch, 0–500 ms wait: **20 of 20 runs passed**. - Regression checks: `tests/test_monitor.py`, `tests/tracing/test_sampling.py` and `tests/tracing/test_decorator.py` all passed (109 tests). `ruff` is clean. I haven't run the full common suite or the gevent setup locally; CI covers those. **Not changed here:** `test_trace_decorator_no_trx` also failed once, with leftover monitor logs (`downsampling with a factor of 10`). The likely cause is in `tests/conftest.py::sentry_init`: `inner()` assigns `client` without `nonlocal`, so the `client.close()` in teardown never runs. Monitor threads from earlier tests (with the 0.1 s interval) then keep running. I'll handle that separately, because closing every test client affects the whole suite. #### Issues * resolves: getsentry#8031  via **johdax**.    -- [View Junior Session](https://junior-prod.sentry.dev/conversations/agent-dispatch%3Adispatch_6df7374375b237816e130534b6439833) [[Sentry]](https://sentry.sentry.io/explore/conversations/agent-dispatch%3Adispatch_6df7374375b237816e130534b6439833/?project=4510944073809921)  Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com> Co-authored-by: Johannes Daxböck <[email protected]>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-java](https://redirect.github.com/actions/setup-java) ([changelog](https://redirect.github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6..b843ebf9b913146b38da2eaa7aeddf76074ae1ad)) | | digest | `de7274f` → `b843ebf` | | [actions/setup-java](https://redirect.github.com/actions/setup-java) ([changelog](https://redirect.github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6..b843ebf9b913146b38da2eaa7aeddf76074ae1ad)) | action | digest | `de7274f` → `b843ebf` | | [getsentry/coverage-action](https://redirect.github.com/getsentry/coverage-action) | | patch | `0.4.3` → `0.4.4` | | [getsentry/coverage-action](https://redirect.github.com/getsentry/coverage-action) | action | patch | `0.4.3` → `0.4.4` | | [java-jdk](https://adoptium.net) | uses-with | major | `21` → `25` | --- ### Release Notes <details> <summary>getsentry/coverage-action</summary> ### [`v0.4.4`](https://redirect.github.com/getsentry/coverage-action/blob/HEAD/CHANGELOG.md#044) [Compare Source](https://redirect.github.com/getsentry/coverage-action/compare/0.4.3...0.4.4) ##### New Features ✨ - (status) Add status-key input to namespace commit statuses by [@tyrantkhan](https://redirect.github.com/tyrantkhan) in [#118](https://redirect.github.com/getsentry/coverage-action/pull/118) ##### Internal Changes 🔧 - (dashboard) Freeze the artifact fixture clock by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#120](https://redirect.github.com/getsentry/coverage-action/pull/120) - (release) Default the merge target to main by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#121](https://redirect.github.com/getsentry/coverage-action/pull/121) - (status) Document and verify independent package statuses by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#119](https://redirect.github.com/getsentry/coverage-action/pull/119) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/getsentry/sentry-python).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [getsentry/craft](https://redirect.github.com/getsentry/craft) | action | minor | `2.34.1` → `2.35.0` | | [getsentry/craft](https://redirect.github.com/getsentry/craft) ([changelog](https://redirect.github.com/getsentry/craft/compare/3f2abdc5703191d12ef2cc013f792f1bd220f44d..7a7857552e2cdc08b502de96e6076849c01fba32)) | workflow | digest | `3f2abdc` → `7a78575` | | [java-jdk](https://adoptium.net) | uses-with | major | `21` → `25` | --- ### Release Notes <details> <summary>getsentry/craft</summary> ### [`v2.35.0`](https://redirect.github.com/getsentry/craft/blob/HEAD/CHANGELOG.md#2350) [Compare Source](https://redirect.github.com/getsentry/craft/compare/2.34.1...2.35.0) ##### New Features ✨ - (changelog) Add configurable AI summaries for CLI and Actions by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#902](https://redirect.github.com/getsentry/craft/pull/902) - (distribution) Release native Craft with install and setup tools by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#904](https://redirect.github.com/getsentry/craft/pull/904) ##### Bug Fixes 🐛 - (nuget) Pass --timeout to dotnet nuget push by [@sentry-junior](https://redirect.github.com/sentry-junior) in [#901](https://redirect.github.com/getsentry/craft/pull/901) ##### Internal Changes 🔧 - Add standalone Fossilize binaries and native smoke tests by [@MathurAditya724](https://redirect.github.com/MathurAditya724) in [#903](https://redirect.github.com/getsentry/craft/pull/903) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/getsentry/sentry-python).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>

Fixes getsentry#8066

Part of a series adding automatic Crons monitoring for the most-used job schedulers in each SDK. Check-ins for a monitor that doesn't exist yet are dropped, so today each monitor has to be created by hand with its schedule copied from the code. Sending the job's schedule as the monitor config lets Sentry create the monitor and keep it in sync. This adds `monitor_cron_jobs` to `ArqIntegration`, matching Celery's `monitor_beat_tasks`. When it's on, each `cron(...)` job sends check-ins with its schedule in the worker's timezone, so Sentry creates the monitor on the first run. The slug is the job name without arq's `cron:` prefix. It's off by default. ```python sentry_sdk.init( integrations=[ArqIntegration(monitor_cron_jobs=True, exclude_cron_jobs=["cleanup"])], ) ``` Jobs check in without a config when Crons can't express the schedule: a `second` other than 0, both `day` and `weekday` set, or a UTC offset that isn't a whole number of hours. Before arq 0.25, the config is only sent when the system timezone is UTC. Docs: getsentry/sentry-docs#20056

Update with more specific instructions on how to do things in order to increase the reviewability and maintainability of the produced changes. Also removed the Key Paths section as agents are quite adept at grepping and figuring out where what lives.

Part of a series adding automatic Crons monitoring for the most-used job schedulers in each SDK. Check-ins for a monitor that doesn't exist yet are dropped, so today each monitor has to be created by hand with its schedule copied from the code. Sending the job's schedule as the monitor config lets Sentry create the monitor and keep it in sync. This adds `monitor_cron_jobs` to `RqIntegration` for recurring jobs from rq-scheduler's `scheduler.cron(...)` and `scheduler.schedule(..., interval=...)`. Only the worker needs the option, and it sends the cron string or interval as the monitor config. The slug is the job `id`, and jobs without one share a monitor named after the function's import path. It's off by default. ```python sentry_sdk.init( integrations=[RqIntegration(monitor_cron_jobs=True, exclude_cron_jobs=["cleanup"])], ) ``` Jobs aren't monitored when Sentry may read the cron string differently (6 fields, `@daily`, `MON`, both day fields set), the interval isn't whole minutes, the job has `repeat`, or the worker's local timezone isn't UTC. RQ's built-in `rq cron` scheduler isn't covered. The rq test envs now install `rq-scheduler` for RQ 2.x. Docs: getsentry/sentry-docs#20058 --------- Co-authored-by: Claude <[email protected]>

) Part of a series adding automatic Crons monitoring for the most-used job schedulers in each SDK. Check-ins for a monitor that doesn't exist yet are dropped, so today each monitor has to be created by hand with its schedule copied from the code. Sending the job's schedule as the monitor config lets Sentry create the monitor and keep it in sync. This adds `monitor_periodic_tasks` to `HueyIntegration`, matching Celery's `monitor_beat_tasks`. When it's on, each `@huey.periodic_task` run sends check-ins with its `crontab(...)` schedule in UTC, so Sentry creates the monitor on the first run. The slug is the task name. It's off by default, and regular tasks are unaffected. ```python sentry_sdk.init( integrations=[HueyIntegration(monitor_periodic_tasks=True, exclude_periodic_tasks=["cleanup"])], ) ``` Tasks aren't monitored when they use a custom `validate_datetime`, restrict both `day` and `day_of_week`, or run on a Huey instance with `utc=False`. Docs: getsentry/sentry-docs#20057 --------- Co-authored-by: Claude <[email protected]>

Navigation Menu

Repository navigation

Comparing changes

Open a pull request

Uh oh!

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026

This comparison is taking too long to generate.

Uh oh!