chore(deps): bump io.sentry:sentry-android from 7.16.0 to 8.4.0

[dependabot]

Bumps io.sentry:sentry-android from 7.16.0 to 8.4.0.

Release notes

Sourced from io.sentry:sentry-android's releases.

8.4.0

Fixes

• The SDK now handles null on many APIs instead of expecting a non null value (#4245)
  • Certain APIs like setTag, setData, setExtra, setContext previously caused a NullPointerException when invoked with either null key or value.
  • The SDK now tries to have a sane fallback when null is passed and no longer throws NullPointerException
  • If null is passed, the SDK will
    • do nothing if a null key is passed, returning null for non void methods
    • remove any previous value if the new value is set to null
• Add support for setting in-app-includes/in-app-excludes via AndroidManifest.xml (#4240)
• Modifications to OkHttp requests are now properly propagated to the affected span / breadcrumbs (#4238)
  • Please ensure the SentryOkHttpInterceptor is added last to your OkHttpClient, as otherwise changes to the Request by subsequent interceptors won't be considered
• Fix "class ch.qos.logback.classic.spi.ThrowableProxyVO cannot be cast to class ch.qos.logback.classic.spi.ThrowableProxy" (#4206)
  • In this case we cannot report the Throwable to Sentry as it's not available
  • If you are using OpenTelemetry v1 OpenTelemetryAppender, please consider upgrading to v2
• Pass OpenTelemetry span attributes into TracesSampler callback (#4253)
  • SamplingContext now has a getAttribute method that grants access to OpenTelemetry span attributes via their String key (e.g. http.request.method)
• Fix AbstractMethodError when using SentryTraced for Jetpack Compose (#4255)
• Assume http.client for span op if not a root span (#4257)
• Avoid unnecessary copies when using CopyOnWriteArrayList (#4247)
  • This affects in particular SentryTracer.getLatestActiveSpan which would have previously copied all child span references. This may have caused OutOfMemoryError on certain devices due to high frequency of calling the method.

Features

• The SDK now automatically propagates the trace-context to the native layer. This allows to connect errors on different layers of the application. (#4137)
• Capture OpenTelemetry span events (#3564)
  • OpenTelemetry spans may have exceptions attached to them (openTelemetrySpan.recordException). We can now send those to Sentry as errors.
  • Set capture-open-telemetry-events=true in sentry.properties to enable it
  • Set sentry.capture-open-telemetry-events=true in Springs application.properties to enable it
  • Set sentry.captureOpenTelemetryEvents: true in Springs application.yml to enable it

Behavioural Changes

• Use java.net.URI for parsing URLs in UrlUtils (#4210)
  • This could affect grouping for issues with messages containing URLs that fall in known corner cases that were handled incorrectly previously (e.g. email in URL path)

Internal

• Also use port when checking if a request is made to Sentry DSN (#4231)
  • For our OpenTelemetry integration we check if a span is for a request to Sentry
  • We now also consider the port when performing this check

Dependencies

• Bump Native SDK from v0.7.20 to v0.8.1 (#4137)
  • changelog
  • diff

8.3.0

Features

... (truncated)

Changelog

Sourced from io.sentry:sentry-android's changelog.

8.4.0

Fixes

• The SDK now handles null on many APIs instead of expecting a non null value (#4245)
  • Certain APIs like setTag, setData, setExtra, setContext previously caused a NullPointerException when invoked with either null key or value.
  • The SDK now tries to have a sane fallback when null is passed and no longer throws NullPointerException
  • If null is passed, the SDK will
    • do nothing if a null key is passed, returning null for non void methods
    • remove any previous value if the new value is set to null
• Add support for setting in-app-includes/in-app-excludes via AndroidManifest.xml (#4240)
• Modifications to OkHttp requests are now properly propagated to the affected span / breadcrumbs (#4238)
  • Please ensure the SentryOkHttpInterceptor is added last to your OkHttpClient, as otherwise changes to the Request by subsequent interceptors won't be considered
• Fix "class ch.qos.logback.classic.spi.ThrowableProxyVO cannot be cast to class ch.qos.logback.classic.spi.ThrowableProxy" (#4206)
  • In this case we cannot report the Throwable to Sentry as it's not available
  • If you are using OpenTelemetry v1 OpenTelemetryAppender, please consider upgrading to v2
• Pass OpenTelemetry span attributes into TracesSampler callback (#4253)
  • SamplingContext now has a getAttribute method that grants access to OpenTelemetry span attributes via their String key (e.g. http.request.method)
• Fix AbstractMethodError when using SentryTraced for Jetpack Compose (#4255)
• Assume http.client for span op if not a root span (#4257)
• Avoid unnecessary copies when using CopyOnWriteArrayList (#4247)
  • This affects in particular SentryTracer.getLatestActiveSpan which would have previously copied all child span references. This may have caused OutOfMemoryError on certain devices due to high frequency of calling the method.

Features

• The SDK now automatically propagates the trace-context to the native layer. This allows to connect errors on different layers of the application. (#4137)
• Capture OpenTelemetry span events (#3564)
  • OpenTelemetry spans may have exceptions attached to them (openTelemetrySpan.recordException). We can now send those to Sentry as errors.
  • Set capture-open-telemetry-events=true in sentry.properties to enable it
  • Set sentry.capture-open-telemetry-events=true in Springs application.properties to enable it
  • Set sentry.captureOpenTelemetryEvents: true in Springs application.yml to enable it

Behavioural Changes

• Use java.net.URI for parsing URLs in UrlUtils (#4210)
  • This could affect grouping for issues with messages containing URLs that fall in known corner cases that were handled incorrectly previously (e.g. email in URL path)

Internal

• Also use port when checking if a request is made to Sentry DSN (#4231)
  • For our OpenTelemetry integration we check if a span is for a request to Sentry
  • We now also consider the port when performing this check

Dependencies

• Bump Native SDK from v0.7.20 to v0.8.1 (#4137)
  • changelog
  • diff

8.3.0

... (truncated)

Commits

• be2d574 release: 8.4.0
• e5e6905 Assume http.client for span op if not a root span (#4257)
• 9fba6e3 Fix misuses of CopyOnWriteArrayList (#4247)
• 0b8cee0 Update CHANGELOG.md (#4248)
• 2882875 Fix AbstractMethodError when using SentryTraced for Jetpack Compose (#4255)
• 9683566 Pass OpenTelemetry span attributes into TracesSampler callback (#4253)
• 878fd7b Fix "class ch.qos.logback.classic.spi.ThrowableProxyVO cannot be cast to clas...
• 21a214b Avoid NPEs from SDK in API like setTag, setData, setContext (#4245)
• 5eb3279 Replace RestTemplate with OkHttp for system tests (#4239)
• ac9ebcd Add distributed tracing tests to more modules (#4237)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #897.