Packages

@sentry/cli

3.8.2 · 22 Oct 2026FSL-1.1-MIT24.7M / weekRepositoryHomepagenpmAtom feed

Your version

3.4.3

21 May 2026Where it was published

3.8.2 is the newest release of 3.x.

In short

6 security1 faster1 fixed

  • security

    Behavior-breaking: Disable Xcode Info.plist preprocessing by default to avoid passing project-controlled compiler settings to cc during release auto-discovery. This affects sentry-cli releases propose-version, sentry-cli send-event and sentry-cli bash-hook --send-event release inference, and sentry-cli react-native xcode auto-release detection. Use --allow-xcode-infoplist-preprocessing only for trusted projects that require preprocessing.

  • security

    Ensure restrictive file permissions maintained when sentry-cli login updates existing config files.

  • security

    Disable TLS verification only when http.verify_ssl is set to false, case-insensitively.

  • security

    Shell-escape generated bash-hook arguments, including paths, tags, release names, and the CLI path.

  • security

    Stop sending environment variables in sentry-cli bash-hook events.

  • security

    Verify the downloaded binary checksum before replacing the current executable in sentry-cli update.

Release note

Security Fixes

  • security

    Behavior-breaking: Disable Xcode Info.plist preprocessing by default to avoid passing project-controlled compiler settings to cc during release auto-discovery. This affects sentry-cli releases propose-version, sentry-cli send-event and sentry-cli bash-hook --send-event release inference, and sentry-cli react-native xcode auto-release detection. Use --allow-xcode-infoplist-preprocessing only for trusted projects that require preprocessing.

  • security

    Ensure restrictive file permissions maintained when sentry-cli login updates existing config files.

  • security

    Disable TLS verification only when http.verify_ssl is set to false, case-insensitively.

  • security

    Shell-escape generated bash-hook arguments, including paths, tags, release names, and the CLI path.

  • security

    Stop sending environment variables in sentry-cli bash-hook events.

  • security

    Verify the downloaded binary checksum before replacing the current executable in sentry-cli update.

Performance

  • (snapshots) Skip uploading images that already exist in objectstore by batch-checking with HEAD requests first

Fixes

  • (snapshots) Reject snapshot uploads that have a PR number but no base SHA, since comparisons cannot work without a base reference