Skip to content

Release history

sentry-cli releases

A command line utility to work with Sentry.

All releases

43 shown

No immediate action
3.5.0 Mixed

Snapshots CLI enhancements + internal updates

Review required
3.4.3 Breaking risk
RCE / SSRF Dependencies Breaking upgrade

Security + snapshots

Config change
2.58.6 Breaking risk
Auth Breaking upgrade

Disable Info.plist preprocessing

3.4.2 Bug fix
Security fixes
  • js: Fixed argument injection in `serializeOptions` preventing array flattening via `Array.prototype.concat()`
Full changelog

Fixes

  • (snapshots) Stop sending Sentry auth token to Objectstore (#3286)
  • (js) Fix argument injection in JavaScript API's serializeOptions. String/number options now validate input types and prevent Array.prototype.concat() from flattening array values into separate CLI arguments. (#3287)
3.4.1 Bug fix
Notable features
  • Warn and skip duplicates when files strip to the same URL
  • Fixed URL prefix stripping for Symbolicator symbol resolution
Full changelog

Improvements

  • (bundle-jvm) Warn and skip subsequent duplicates when multiple files strip to the same URL (e.g. Android build variants contributing the same FQCN). The warning points users at --exclude to scope the bundle to a single variant (#3275).

Fixes

  • (bundle-jvm) Strip the [<module>/]src/<sourceset>/<lang>/ prefix from bundle URLs so Symbolicator can resolve them from package-based stack traces (e.g. sentry-android-core/src/main/java/io/sentry/android/core/ANRWatchDog.java~/io/sentry/android/core/ANRWatchDog.jvm) (#3275).
3.4.0 New feature
Notable features
  • bundle-jvm auto-discovers .java, .kt, .scala, .groovy source files from project root while respecting .gitignore
  • Add --exclude option for custom glob patterns and --selective flag for subset snapshot uploads
  • Parallelize image hashing and chunk uploads to prevent file descriptor exhaustion
Full changelog

Features

  • (snapshots) Add --selective flag to build snapshots to indicate the upload contains only a subset of images (#3268)
  • (bundle-jvm) Allow running directly on a project root (including multi-module repos) by automatically collecting only JVM source files (.java, .kt, .scala, .groovy), respecting .gitignore, and excluding common build output directories (#3260)
  • (bundle-jvm) Add --exclude option for custom glob patterns to exclude files/directories from source collection (#3260)

Performance

  • (snapshots) Parallelize image hashing with rayon (#3250)

Fixes

  • (snapshots) Chunk image uploads to avoid file descriptor exhaustion and 413 errors when uploading hundreds of images (#3249)
  • (snapshots) Preserve subdirectory structure in snapshot manifest keys instead of flattening to bare filenames (#3269)
  • Replace eprintln! with log::info! for progress bar completion messages when the progress bar is disabled (e.g. in CI). This avoids spurious stderr output that some CI systems treat as errors (#3223).
3.3.5 Maintenance
Notable features
  • Parallelized image hashing with rayon
  • Fixed non-base64 sourcemap injection
3.3.4 New feature
Notable features
  • Added sentry-cli build download command
  • Added sentry-cli code-mappings upload with automatic batching
3.3.3 Maintenance

### Internal Changes 🔧 - (npm) 🤖 Bump optional dependencies to 3.3.2 in

3.3.0 New feature
Notable features
  • Added sentry-cli proguard uuid command
  • Moved upload-proguard to proguard upload
3.2.3 Breaking risk
Notable features
  • Added experimental sentry-cli build snapshots command
3.2.0 New feature
Notable features
  • Added sourceMaps.inject() for injecting debug IDs
  • Added --install-group parameter to build upload
3.0.2 Bug fix

Fixed ARM-based macOS systems not respecting self-signed certificates from macOS keychain.

3.0.0 Breaking risk
Breaking changes
  • Removed legacy API key authentication; use Auth Tokens instead
  • Removed files and releases files subcommands
  • Removed upload-proguard arguments: --app-id, --version, --version-code, --android-manifest, --platform
2.58.4 Bug fix

Postinstall script uses node directly instead of npm run, ensuring compatibility with non-npm package managers.

2.58.3 Bug fix
Notable features
  • Auto-detect Git metadata only in CI environments
  • Added --force-git-metadata and --no-git-metadata options
2.58.2 Bug fix

Fixed 400 errors when passing empty strings to build upload command arguments.

2.58.1 Breaking risk
Notable features
  • debug-files bundle-jvm now runs offline without HTTP requests
2.58.0 Breaking risk
Notable features
  • Removed experimental status from build upload command
  • Added CLI version metadata to build archives
2.57.0 Breaking risk
Notable features
  • Added projects field to SentryCliUploadSourceMapsOptions
2.56.0 Mixed

Improves GitHub Actions PR detection with automatic base and head SHA fetching.

2.53.0 Breaking risk
Breaking changes
  • mobile-app subcommand renamed to build
Notable features
  • Release notes option for mobile-app
  • Default VCS base_ref parsing for build subcommand
2.50.2 Maintenance

This change removes the `mobile-app upload` experimental feature which was introduced in 2.50.1.

2.50.0 New feature

JavaScript execute type declarations now expose rejectOnError for type safety.

2.49.0 New feature
Notable features
  • Export live option type for releases.uploadSourceMaps
2.47.0 Maintenance

Improved login error output and added warnings when overwriting auth tokens.

Beta — feedback welcome: [email protected]