Packages

@sentry/cli

3.8.2 · 22 Oct 2026FSL-1.1-MIT24.7M / weekRepositoryHomepagenpmAtom feed

Upgrading @sentry/cli from 2.39.1 to 3.8.2

65 releases in betweennotes for 63

Other targets from 2.39.1Newest 2.x2.58.6
30+
changes to make
0
advisories fixed
82+
new
61+
fixes

Counted from 63 of 65 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking3.5.1
  • breaking3.2.3
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0
  • breaking3.0.0

Security

  • Behavior-breaking: Disable Xcode Info.plist preprocessing by default to avoid passing project-controlled compiler settings to cc during release auto-discovery. This affects sentry-cli releases propose-version, sentry-cli send-event and sentry-cli bash-hook --send-event release inference, and sentry-cli react-native xcode auto-release detection. Use --allow-xcode-infoplist-preprocessing only for trusted projects that require preprocessing.

    3.4.3

  • Ensure restrictive file permissions maintained when sentry-cli login updates existing config files.

    3.4.3

  • Disable TLS verification only when http.verify_ssl is set to false, case-insensitively.

    3.4.3

  • Shell-escape generated bash-hook arguments, including paths, tags, release names, and the CLI path.

    3.4.3

  • Stop sending environment variables in sentry-cli bash-hook events.

    3.4.3

  • Verify the downloaded binary checksum before replacing the current executable in sentry-cli update.

    3.4.3

  • Updated minimatch dependency to fix a vulnerability

    3.2.2

Release by release

  1. 3.8.2nothing new or fixed in the note

  2. 3.8.1

    21 Oct 20261 fix
    • fixed

      (docker) Require ca-certificates 20261020-r0 or newer in the Docker image, which removes distrusted eMudhra/emSign root certificates

  3. 3.8.0

    16 Sep 20261 new
    • new

      (snapshots) Upload snapshot images to the objectstore usecase chosen by the server instead of a hardcoded one

  4. 3.7.0

    28 Aug 20261 new · 2 fixes
    • new

      (build) Add dSYM support to IPA uploads

    • fixed

      (snapshots) Create snapshot builds for selective uploads with no affected images when a complete filename manifest is provided

    • fixed

      (logs) Correct the severity query example

  5. 3.6.2

    22 Jul 20261 fix
    • fixed

      Do not combine a URL and non-embedded auth token from different configuration files. When configuration sources provide only one of these values, an existing value from another source may be ignored with a warning. Configure the URL and token in the same file or through CLI arguments and environment variables, which are treated as one runtime source. This change does not alter parent-config discovery or how other configuration keys are selected (#3378).

  6. 3.6.1

    20 Jul 20261 fix
    • fixed

      (sourcemaps) Prevent Debug ID collisions between distinct JS files that share identical sourcemaps by hashing both the JS and sourcemap bytes when injecting Debug IDs

  7. 3.6.0

    26 Jun 20261 new · 3 fixes
    • new

      (snapshots) Compress preprod snapshot manifest with zstd

    • fixed

      (snapshots) Update snapshots download to use the new archive endpoint, triggering the archive build and polling until it is ready before downloading

    • fixed

      (snapshots) Show a clear "project was renamed" error instead of a cryptic JSON parse failure when uploading to a renamed project slug

    • fixed

      Fix update nagger never showing when a newer version is available

  8. 3.5.1nothing new or fixed in the note

2 other lines we could not sort, mostly version bumps

  • Revert "feat(mobile-app): Reintroduce mobile-app feature gating (#2643)"

    2.53.0

  • Retry on cloudflare timeout

    2.53.0

108 internal lines (docs, tests, tooling) left out.