Skip to content

chore(deps): update Android SDK to v8.63.0 - #6990

Merged
antonis merged 1 commit into
mainfrom
deps/scripts/update-android.sh
Nov 5, 2026
Merged

antonis merged 1 commit into
mainfrom
deps/scripts/update-android.sh

Conversation

@github-actions

@github-actions github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

Bumps scripts/update-android.sh from 8.62.0 to 8.63.0.

Auto-generated by a dependency updater.

Changelog

8.63.0

Features

  • Added Environment to the Scope, allowing you to overwrite the Environment set on the options (#5772)
    • The scope Environment is also applied to the trace envelope header (DSC), logs, metrics and profiles, so all telemetry of a trace reports the same environment
  • Add an attachTracingHeaders flag to SentryApolloInterceptor to stop attaching sentry-trace and baggage headers to Apollo v2 requests (#6414)
    • Apollo v2 has no request URL in the interceptor, so these headers are attached without checking tracePropagationTargets. Pass attachTracingHeaders = false to opt out.

Improvements

  • Speed up Session Replay and screenshot masking for large maskViewClasses/unmaskViewClasses lists by using constant-time class lookups (#6410)
  • Skip ANR profiling while a debugger is connected (#6389)

Behavioral Changes

  • Idle spans, including those produced by SentryTraced, now let any idle parent transaction finish after the idle timeout (3s by default) with status ok, rather than waiting for the deadline (30s by default) and reporting deadline_exceeded (#6396)
    • If you use SentryTraced, expect shorter durations and lower failure rates for affected ui.load and navigation transactions, plus changes to metrics measured over the transaction's lifetime, such as slow and frozen frames.
    • Cold and warm app start, TTID, and TTFD remain unchanged.

Fixes

  • Fix missing Navigation 3 transactions for preloaded ViewPager2 pages and destinations reached while another Activity or Fragment owns navigation tracking (#6400)
  • Keep UI profiling running when startProfiler is called before a requested stop takes effect at the end of the current chunk (#6291)
    • Before, the start call was ignored and the profiler still stopped at the end of the chunk, even in TRACE mode while sampled spans were active. On API 34 and lower, every later profile also stopped after one chunk.
  • Refuse to send data to servers whose certificate was issued by one of the leaked eMudhra intermediates (CVE-2026-111943) (#6336)
  • Stop sending the whole release as dist on ANR and app-exit events when the release has no +versionCode (#6450)
    • Relay rejected these values (e.g. invalid character ''). dist is now left empty unless options.dist is set or the release contains a version code.

Dependencies

  • Bump epitaph (Android tombstone parsing) from 0.1.1 to 0.2.0 (#6402)
    • Reject malformed protobuf tags, oversized lengths, invalid varints, and invalid reader bounds instead of silently accepting partial/corrupt tombstone data.
  • Bump Native SDK from v0.17.4 to v0.17.6 (#6409, #6460)

@github-actions github-actions Bot added the dependencies Pull requests that update a dependency file label Nov 5, 2026
@github-actions
github-actions Bot requested review from a team and lucas-zimerman as code owners November 5, 2026 13:14
@github-actions
github-actions Bot requested review from alwx and antonis and removed request for a team November 5, 2026 13:14
@bruno-garcia
bruno-garcia force-pushed the deps/scripts/update-android.sh branch from 60d868b to 6c5302c Compare November 5, 2026 13:14
@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor Author

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).


  • chore(deps): update Android SDK to v8.63.0 by github-actions in #6990

🤖 This preview updates automatically when you update the PR.

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown
Contributor Author
Warnings
⚠️

🤖 Replay Stubs Check

✅ No changes detected in replay-stubs.jar

All file contents are identical (verified by SHA-256 hash comparison).

⚠️

⚠️ Android SDK Version Mismatch

Component Version
sentry-android in build.gradle 8.63.0
sentry-android bundled by gradle plugin 6.25.0 8.62.0

If a user enables AGP autoInstallation (default: true), this mismatch causes:

IllegalStateException: Sentry SDK has detected a mix of versions

Our docs instruct React Native users to set autoInstallation.enabled = false, so users following the guide are unaffected. Consider either updating packages/core/android/build.gradle to 8.62.0 or waiting for a gradle plugin release that bundles 8.63.0.

Generated by 🚫 dangerJS against 6c5302c

@antonis antonis added the ready-to-merge Triggers the full CI test suite label Nov 5, 2026

@antonis antonis left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM once the CI is 🟢
Also created a follow up #6991

@sentry

sentry Bot commented Nov 5, 2026

Copy link
Copy Markdown

📲 Install Builds

Android

🔗 App Name App ID Version Configuration
Sentry RN io.sentry.reactnative.sample 8.34.0 (114) Release

⚙️ sentry-react-native Build Distribution Settings

@antonis
antonis merged commit 79438b3 into main Nov 5, 2026
116 of 122 checks passed
@antonis
antonis deleted the deps/scripts/update-android.sh branch November 5, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ready-to-merge Triggers the full CI test suite

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants