Bump github.com/getsentry/sentry-go from 0.43.0 to 0.45.1

[dependabot]

Bumps github.com/getsentry/sentry-go from 0.43.0 to 0.45.1.

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.45.1

Bug Fixes 🐛

• Add missing TracesSampler fields for SamplingContext by @​giortzisg in #1259

0.45.0

Breaking Changes 🛠

• Add support for Echo v5 by @​Scorfly in #1183

New Features ✨

• Add OTLP trace exporter via new otel/otlp sub-module by @​giortzisg in #1229
  • sentryotlp.NewTraceExporter sends OTel spans directly to Sentry's OTLP endpoint.
  • sentryotel.NewOtelIntegration links Sentry errors, logs, and metrics to the active OTel trace. Works with both direct-to-Sentry and collector-based setups.
  • NewSentrySpanProcessor, NewSentryPropagator, and SentrySpanMap are deprecated and will be removed in 0.47.0. To Migrate use sentryotlp.NewTraceExporter instead:

  // Before
  sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
  tp := sdktrace.NewTracerProvider(
  sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
  )
  otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
  otel.SetTracerProvider(tp)
  // After:
  sentry.Init(sentry.ClientOptions{
  Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
  Integrations: func(i []sentry.Integration) []sentry.Integration {
  return append(i, sentryotel.NewOtelIntegration())
  },
  })
  exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
  tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
  otel.SetTracerProvider(tp)

• Add IsSensitiveHeader helper to easily distinguish which headers to scrub for PII. by @​giortzisg in #1239

Bug Fixes 🐛

• (ci) Update validate-pr action to remove draft enforcement by @​stephanie-anderson in #1237
• (fiber) Use UserContext for transaction to enable OTel trace linking by @​giortzisg in #1252
• Race condition when getting envelope identifier by @​giortzisg in #1250

Internal Changes 🔧

Deps

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.45.1

Bug Fixes 🐛

• Add missing TracesSampler fields for SamplingContext by @​giortzisg in #1259

0.45.0

Breaking Changes 🛠

• Add support for Echo v5 by @​Scorfly in #1183

New Features ✨

• Add OTLP trace exporter via new otel/otlp sub-module by @​giortzisg in #1229
  • sentryotlp.NewTraceExporter sends OTel spans directly to Sentry's OTLP endpoint.
  • sentryotel.NewOtelIntegration links Sentry errors, logs, and metrics to the active OTel trace. Works with both direct-to-Sentry and collector-based setups.
  • NewSentrySpanProcessor, NewSentryPropagator, and SentrySpanMap are deprecated and will be removed in 0.47.0. To Migrate use sentryotlp.NewTraceExporter instead:

  // Before
  sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})
  tp := sdktrace.NewTracerProvider(
  sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
  )
  otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
  otel.SetTracerProvider(tp)
  // After:
  sentry.Init(sentry.ClientOptions{
  Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
  Integrations: func(i []sentry.Integration) []sentry.Integration {
  return append(i, sentryotel.NewOtelIntegration())
  },
  })
  exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
  tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
  otel.SetTracerProvider(tp)

• Add IsSensitiveHeader helper to easily distinguish which headers to scrub for PII. by @​giortzisg in #1239

Bug Fixes 🐛

• (ci) Update validate-pr action to remove draft enforcement by @​stephanie-anderson in #1237
• (fiber) Use UserContext for transaction to enable OTel trace linking by @​giortzisg in #1252
• Race condition when getting envelope identifier by @​giortzisg in #1250

Internal Changes 🔧

... (truncated)

Commits

• 17971f9 release: 0.45.1
• 284b2f6 fix: add missing TracesSampler fields for SamplingContext (#1259)
• e1ee192 Merge branch 'release/0.45.0'
• 0f536b1 release: 0.45.0
• c8ccbf3 feat: add OTLP integration support (#1229)
• e9ba5cb fix(fiber): Use UserContext for transaction to enable OTel trace linking (#1252)
• 18546ff test: add serialization panic reproduction (#1249)
• e507be6 fix: race when getting envelope identifier (#1250)
• 2cec51a feat!: add support for Echo v5 (#1183)
• 6ba0638 build(otel): Bump OpenTelemetry SDK to 1.40.0 (#1243)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA f8d998a.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
gomod/github.com/getsentry/sentry-go	0.45.1	🟢 7.2	Details Check Score Reason Code-Review 🟢 9 Found 22/24 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 4 branch protection is not maximal on development and all release branches SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• go.mod