meta(changelog): Update changelog for 10.67.0

.agents/skills/track-framework-updates/SKILL.md

@@ -107,12 +107,20 @@ For each release or RFC that plausibly needs SDK work, draft one concrete, actio
 
 ### Step 6: Write output artifacts
 
-Produce **three files** in the skill's `output/` directory:
+The `collect_updates.py` script in Step 1 prints its output path, e.g.:
 
-1. **`output/framework-updates-raw.json`** — already written by Step 1.
-2. **`output/framework-updates-digest.json`** — structured, machine-readable digest. Follow the schema in `assets/digest-schema.json`.
-3. **`output/framework-updates-digest.md`** — human-readable digest. Follow the structure in `assets/digest-template.md`:
-   - Group by Client-Side / Server-Side / Meta-Framework.
+```
+Wrote /abs/path/to/.agents/skills/track-framework-updates/output/framework-updates-raw.json: ...
+```
+
+Use that printed path to derive the output directory. All three files must be written to the **same directory** as `framework-updates-raw.json` — never relative paths like `output/` from the workspace root.
+
+Produce **three files**:
+
+1. The raw JSON was already written by Step 1 — no action needed.
+2. **`<output-dir>/framework-updates-digest.json`** — structured, machine-readable digest. Follow the schema in `assets/digest-schema.json`.
+3. **`<output-dir>/framework-updates-digest.md`** — human-readable digest. Follow the structure in `assets/digest-template.md`:
+   - Group by Client-Side / Server-Side / Meta-Framework / Platform / Libraries.
    - Omit frameworks with no activity.
    - Include a "Run notes" section only if a fetcher reported errors.
 

.agents/skills/track-framework-updates/assets/digest-schema.json

@@ -14,7 +14,7 @@
     {
       "name": "React",
       "sentryPackages": ["@sentry/react"],
-      "category": "client",
+      "category": "client|server|meta-framework|platform|library",
       "releases": [
         {
           "tag": "v19.0.0",

.agents/skills/track-framework-updates/assets/digest-template.md

@@ -39,6 +39,10 @@ _Window: last <SINCE_DAYS> days · generated <GENERATED_AT>_
 
 <!-- Same per-framework structure as Client-Side. Covers Node.js, Bun, Deno, Cloudflare Workers, AWS Lambda, Google Cloud. -->
 
+## Libraries
+
+<!-- Same per-framework structure as Client-Side. Covers state management (e.g. Pinia), loggers (e.g. Pino, Winston, Consola), validators (e.g. Zod), and other utility libraries the SDK instruments. -->
+
 ## Source coverage
 
 ⚠ The following SDK packages are **not tracked** in `sources.json`. Add an upstream framework entry or exclude them in `scripts/check_sources.py`:

.agents/skills/track-framework-updates/scripts/write_job_summary.py

@@ -11,6 +11,7 @@
 from __future__ import annotations
 
 import json
+import os
 import sys
 
 
@@ -85,8 +86,20 @@ def main() -> int:
                 digest = f.read().strip()
             if digest:
                 lines.append(digest)
-        except OSError:
-            lines.append("_Digest file not found._")
+        except OSError as e:
+            lines.append(f"_Digest file not found: `{digest_path}` ({e})_")
+            lines.append("")
+            # List what is actually in the output dir to help diagnose path mismatches
+            output_dir = os.path.dirname(os.path.abspath(digest_path))
+            try:
+                found = os.listdir(output_dir)
+                if found:
+                    lines.append(f"Files present in `{output_dir}`:")
+                    lines.extend(f"- `{name}`" for name in sorted(found))
+                else:
+                    lines.append(f"`{output_dir}` exists but is empty.")
+            except OSError:
+                lines.append(f"Output directory not found: `{output_dir}`")
 
     # Run metrics at the bottom
     cost_str = (

.agents/skills/track-framework-updates/sources.json

@@ -100,6 +100,17 @@
       },
       "rss": []
     },
+    {
+      "name": "Express",
+      "sentryPackages": ["@sentry/node"],
+      "category": "server",
+      "github": {
+        "repo": "expressjs/express",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": ["https://expressjs.com/feed.xml"]
+    },
     {
       "name": "Elysia",
       "sentryPackages": ["@sentry/elysia"],
@@ -275,6 +286,61 @@
         "rfcsRepo": null
       },
       "rss": []
+    },
+    {
+      "name": "Pinia",
+      "sentryPackages": ["@sentry/vue", "@sentry/nuxt"],
+      "category": "library",
+      "github": {
+        "repo": "vuejs/pinia",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": []
+    },
+    {
+      "name": "Pino",
+      "sentryPackages": ["@sentry/node"],
+      "category": "library",
+      "github": {
+        "repo": "pinojs/pino",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": []
+    },
+    {
+      "name": "Winston",
+      "sentryPackages": ["@sentry/node"],
+      "category": "library",
+      "github": {
+        "repo": "winstonjs/winston",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": []
+    },
+    {
+      "name": "Consola",
+      "sentryPackages": ["@sentry/core"],
+      "category": "library",
+      "github": {
+        "repo": "unjs/consola",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": []
+    },
+    {
+      "name": "Zod",
+      "sentryPackages": ["@sentry/core"],
+      "category": "library",
+      "github": {
+        "repo": "colinhacks/zod",
+        "discussions": false,
+        "rfcsRepo": null
+      },
+      "rss": []
     }
   ]
 }

.github/workflows/auto-fix-issue.yml

@@ -78,8 +78,10 @@ jobs:
       - name: Try to fix the issue with Claude
         id: triage
         uses: anthropics/claude-code-action@fad22eb3fa582b7357fc0ea48af6645851b884fd # v1
+        env:
+          ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          anthropic_api_key: ${{ secrets.OPENROUTER_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           allowed_non_write_users: '*'
           show_full_output: ${{ github.event.inputs.show_full_output || 'false' }}

.github/workflows/dependabot-auto-triage.yml

@@ -159,8 +159,10 @@ jobs:
 
       - name: Open batched runtime fix PR via skill
         uses: anthropics/claude-code-action@fad22eb3fa582b7357fc0ea48af6645851b884fd # v1
+        env:
+          ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          anthropic_api_key: ${{ secrets.OPENROUTER_API_KEY }}
           github_token: ${{ steps.app-token.outputs.token }}
           settings: |
             {
@@ -234,8 +236,10 @@ jobs:
 
       - name: Open batched dev fix PR via skill
         uses: anthropics/claude-code-action@fad22eb3fa582b7357fc0ea48af6645851b884fd # v1
+        env:
+          ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          anthropic_api_key: ${{ secrets.OPENROUTER_API_KEY }}
           github_token: ${{ steps.app-token.outputs.token }}
           settings: |
             {

.github/workflows/track-framework-updates.yml

@@ -44,8 +44,10 @@ jobs:
       - name: Run Claude digest
         id: digest
         uses: anthropics/claude-code-action@fad22eb3fa582b7357fc0ea48af6645851b884fd # v1
+        env:
+          ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          anthropic_api_key: ${{ secrets.OPENROUTER_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           allowed_non_write_users: '*'
           prompt: |

.github/workflows/triage-issue.yml

@@ -55,8 +55,10 @@ jobs:
       - name: Run Claude triage
         id: triage
         uses: anthropics/claude-code-action@fad22eb3fa582b7357fc0ea48af6645851b884fd # v1
+        env:
+          ANTHROPIC_BASE_URL: https://openrouter.ai/api
         with:
-          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          anthropic_api_key: ${{ secrets.OPENROUTER_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           allowed_non_write_users: '*'
           settings: |

.oxlintrc.base.json

@@ -147,6 +147,20 @@
         "no-param-reassign": "off"
       }
     },
+    {
+      "files": ["**/integrations/tracing-channel/aws-sdk/**/*.ts"],
+      "rules": {
+        "typescript/no-explicit-any": "off",
+        "typescript/no-unsafe-member-access": "off"
+      }
+    },
+    {
+      "files": ["**/integrations/tracing-channel/aws-sdk/services/**/*.ts"],
+      "rules": {
+        "max-lines": "off",
+        "complexity": "off"
+      }
+    },
     {
       "files": ["**/integrations/tracing/redis/vendored/**/*.ts"],
       "rules": {

.size-limit.js

@@ -400,7 +400,7 @@ module.exports = [
     import: createImport('init', 'experimentalUseDiagnosticsChannelInjection'),
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: true,
-    limit: '142 KB',
+    limit: '150 KB',
     disablePlugins: ['@size-limit/esbuild'],
   },
   {
@@ -460,7 +460,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '183 KiB',
+    limit: '193 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {
@@ -480,7 +480,7 @@ module.exports = [
     ignore: [...builtinModules, ...nodePrefixedBuiltinModules],
     gzip: false,
     brotli: false,
-    limit: '445 KiB',
+    limit: '475 KiB',
     disablePlugins: ['@size-limit/webpack'],
     webpack: false,
     modifyEsbuildConfig: function (config) {

AGENTS.md

@@ -130,6 +130,7 @@ Uses **Git Flow** (see `docs/gitflow.md`).
 ## Coding Standards
 
 - Follow existing conventions — check neighboring files
+- Reach for existing utils before writing a new one. Most shared helpers live in `@sentry/core` (`packages/core/src/utils/`), with browser helpers in `packages/browser-utils/`. Search first (LSP `workspaceSymbol` or grep) for common needs (type guards in `is.ts`, object/array helpers, `normalize`, `dsn`, `merge`, string/url helpers). Reuse or extend the existing util rather than adding a near-duplicate; only introduce a new util when nothing fits.
 - Only use libraries already in the codebase
 - Never expose secrets or keys
 - When modifying files, cover all occurrences (including `src/` and `test/`)

CHANGELOG.md

@@ -4,6 +4,77 @@
 
 - "You miss 100 percent of the chances you don't take. — Wayne Gretzky" — Michael Scott
 
+## 10.67.0
+
+### Important Changes
+
+- **feat(sveltekit): Add support for SvelteKit 3 ([#22264](https://github.com/getsentry/sentry-javascript/pull/22264))**
+
+  The SvelteKit SDK now supports the pre-release of SvelteKit 3, including client-side pageload and navigation tracing and server-side native tracing, alongside continued SvelteKit 2 support. No Sentry-specific setup changes are required. The SDK detects your SvelteKit version and picks the right implementation automatically.
+
+### Other Changes
+
+- feat(aws-serverless): Use orchestrion aws-sdk integration under diagnostics-channel opt-in ([#22143](https://github.com/getsentry/sentry-javascript/pull/22143))
+- feat(cloudflare): Auto-instrument Workers AI binding via env instrumentation ([#22126](https://github.com/getsentry/sentry-javascript/pull/22126))
+- feat(cloudflare): Instrument Cloudflare rate limiter bindings ([#22035](https://github.com/getsentry/sentry-javascript/pull/22035))
+- feat(core): Instrument workers-ai-provider ([#22119](https://github.com/getsentry/sentry-javascript/pull/22119))
+- feat(core): Rename `queryParams` to `urlQueryParams` ([#22217](https://github.com/getsentry/sentry-javascript/pull/22217))
+- feat(mongodb): implement orchestrion mongodb integration ([#22308](https://github.com/getsentry/sentry-javascript/pull/22308))
+- feat(mongoose): implement orchestrion mongoose integration ([#22202](https://github.com/getsentry/sentry-javascript/pull/22202))
+- feat(node): Rewrite tedious instrumentation to orchestrion tracing channels ([#22238](https://github.com/getsentry/sentry-javascript/pull/22238))
+- feat(nuxt): Add `_experimental.useDiagnosticsChannelInjection` ([#22323](https://github.com/getsentry/sentry-javascript/pull/22323))
+- feat(remix): Add orchestrion-based remix instrumentation ([#22244](https://github.com/getsentry/sentry-javascript/pull/22244))
+- feat(replay): Allow skipping the final flush on stop() via { flush: false } ([#22300](https://github.com/getsentry/sentry-javascript/pull/22300))
+- feat(server-utils): Add @opentelemetry/instrumentation-koa orchestrion integration ([#22146](https://github.com/getsentry/sentry-javascript/pull/22146))
+- feat(server-utils): Add orchestrion aws-sdk channel integration core ([#22142](https://github.com/getsentry/sentry-javascript/pull/22142))
+- feat(server-utils): Allow passing custom transforms to orchestrion ([#22319](https://github.com/getsentry/sentry-javascript/pull/22319))
+- feat(server-utils): Port Bedrock aws-sdk extension and add integration tests ([#22166](https://github.com/getsentry/sentry-javascript/pull/22166))
+- feat(server-utils): Port S3, Kinesis, DynamoDB, SecretsManager and StepFunctions aws-sdk extensions ([#22164](https://github.com/getsentry/sentry-javascript/pull/22164))
+- feat(server-utils): Port SQS, SNS and Lambda aws-sdk extensions with trace propagation ([#22165](https://github.com/getsentry/sentry-javascript/pull/22165))
+- feat(server-utils): Rewrite `SentryLangChainInstrumentation` to orchestrion ([#22266](https://github.com/getsentry/sentry-javascript/pull/22266))
+- feat(server-utils): Rewrite `SentryLangGraphInstrumentation` to orchestrion ([#22268](https://github.com/getsentry/sentry-javascript/pull/22268))
+- feat(vue): Set `navigation.route.id` from the route name ([#22372](https://github.com/getsentry/sentry-javascript/pull/22372))
+- fix(bundler): do not import type from optional peer dep ([#22304](https://github.com/getsentry/sentry-javascript/pull/22304))
+- fix(cloudflare): Bind Durable Object built-in handlers ([#22340](https://github.com/getsentry/sentry-javascript/pull/22340))
+- fix(cloudflare): Instrument custom WorkerEntrypoint RPC methods ([#22310](https://github.com/getsentry/sentry-javascript/pull/22310))
+- fix(cloudflare): Route DO teardown through original `waitUntil` ([#22339](https://github.com/getsentry/sentry-javascript/pull/22339))
+- fix(cloudflare): Skip spans for Cloudflare-internal Durable Object SQL queries ([#22376](https://github.com/getsentry/sentry-javascript/pull/22376))
+- fix(core): Prevent functionToStringIntegration from throwing on cross-origin realms ([#22273](https://github.com/getsentry/sentry-javascript/pull/22273))
+- fix(core): Prevent infinite recursion when console is instrumented twice ([#21959](https://github.com/getsentry/sentry-javascript/pull/21959))
+- fix(nextjs): Mark internal chunk frames as not `in_app` ([#22354](https://github.com/getsentry/sentry-javascript/pull/22354))
+- fix(node): Register tracer provider when OTel API global pre-exists with a different version ([#22374](https://github.com/getsentry/sentry-javascript/pull/22374))
+- fix(node-native): Don't drop breadcrumbs from event loop block events ([#22322](https://github.com/getsentry/sentry-javascript/pull/22322))
+- fix(serve-rutils): Orchestrion diagnostics for async and require ([#22327](https://github.com/getsentry/sentry-javascript/pull/22327))
+- fix(server-utils): Only skip loader thread ([#22336](https://github.com/getsentry/sentry-javascript/pull/22336))
+- fix(sveltekit): Detect SvelteKit server build via Vite Environment API ([#21629](https://github.com/getsentry/sentry-javascript/pull/21629))
+- fix(vercelai): Avoid double-capturing v4 tool errors in orchestrion mode ([#22293](https://github.com/getsentry/sentry-javascript/pull/22293))
+- fix(vue): Support pinia 4 in peer dependency range ([#22324](https://github.com/getsentry/sentry-javascript/pull/22324))
+
+<details>
+  <summary><strong>Internal Changes</strong></summary>
+
+- chore: Add external contributor to CHANGELOG.md ([#22357](https://github.com/getsentry/sentry-javascript/pull/22357))
+- chore: Add external contributor to CHANGELOG.md ([#22359](https://github.com/getsentry/sentry-javascript/pull/22359))
+- chore: Remove `@apm-js-collab/code-transformer` as a dependency ([#22317](https://github.com/getsentry/sentry-javascript/pull/22317))
+- chore(changelog): Add callout for SvelteKit 3 support ([#22371](https://github.com/getsentry/sentry-javascript/pull/22371))
+- chore(ci): Use openrouter keys for claude in ci ([#22381](https://github.com/getsentry/sentry-javascript/pull/22381))
+- chore(skills): Add libraries to framework update watcher ([#22326](https://github.com/getsentry/sentry-javascript/pull/22326))
+- docs(agents): Prefer reusing existing utils before adding new ones ([#22370](https://github.com/getsentry/sentry-javascript/pull/22370))
+- feat(deps): Bump @opentelemetry/semantic-conventions from 1.42.0 to 1.43.0 in the opentelemetry group ([#22333](https://github.com/getsentry/sentry-javascript/pull/22333))
+- fix(skills): Make sure digest file is written/read correctly ([#22330](https://github.com/getsentry/sentry-javascript/pull/22330))
+- ref: Omit redundant `captureError: false` from tracing-channel callsites ([#22368](https://github.com/getsentry/sentry-javascript/pull/22368))
+- ref: Use base keys from conventions for dynamic suffix attribute keys ([#22356](https://github.com/getsentry/sentry-javascript/pull/22356))
+- ref(core): Replace `sentry.span.source` attribute with `sentry.segment.name.source` ([#22358](https://github.com/getsentry/sentry-javascript/pull/22358))
+- ref(server-utils): Collapse express route/use into one orchestrion channel ([#22331](https://github.com/getsentry/sentry-javascript/pull/22331))
+- ref(server-utils): Share one orchestrion channel across OpenAI chat/responses/conversations ([#22332](https://github.com/getsentry/sentry-javascript/pull/22332))
+- refactor(nextjs): Change ESM interop. to remove lazy loading ([#22193](https://github.com/getsentry/sentry-javascript/pull/22193))
+- test(cloudflare): Add tests for `ignoreSpans` with continued traces ([#22316](https://github.com/getsentry/sentry-javascript/pull/22316))
+- test(cloudflare): Proof that AI providers work OOTB on Cloudflare ([#22313](https://github.com/getsentry/sentry-javascript/pull/22313))
+
+</details>
+
+Work in this release was contributed by @PeterWadie and @akshitsinha. Thank you for your contributions!
+
 ## 10.66.0
 
 - chore(node-core): Deprecate `@sentry/node-core` package ([#22285](https://github.com/getsentry/sentry-javascript/pull/22285))

dev-packages/browser-integration-tests/suites/public-api/startSpan/streamed/test.ts

@@ -259,7 +259,7 @@ sentryTest(
             type: 'string',
             value: 'custom',
           },
-          'sentry.span.source': {
+          'sentry.segment.name.source': {
             type: 'string',
             value: 'custom',
           },

dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/interactions-streamed/test.ts

@@ -105,7 +105,7 @@ sentryTest('captures streamed interaction span tree. @firefox', async ({ browser
         type: 'string',
         value: 'url',
       },
-      'sentry.span.source': {
+      'sentry.segment.name.source': {
         type: 'string',
         value: 'url',
       },

dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/navigation-streamed/test.ts

@@ -158,7 +158,7 @@ sentryTest('starts a streamed navigation span on page navigation', async ({ brow
         type: 'string',
         value: 'url',
       },
-      'sentry.span.source': {
+      'sentry.segment.name.source': {
         type: 'string',
         value: 'url',
       },

dev-packages/browser-integration-tests/suites/tracing/browserTracingIntegration/pageload-streamed/test.ts

@@ -165,7 +165,7 @@ sentryTest(
           type: 'string',
           value: 'url',
         },
-        'sentry.span.source': {
+        'sentry.segment.name.source': {
           type: 'string',
           value: 'url',
         },