Bump sentry-sdk from 2.47.0 to 2.48.0

[dependabot]

Bumps sentry-sdk from 2.47.0 to 2.48.0.

Release notes

Sourced from sentry-sdk's releases.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

• feat(ai): add single message truncation by @​shellmayr in #5079

• feat(django): Add span around Task.enqueue by @​sentrivana in #5209

• feat(starlette): Set transaction name when middleware spans are disabled by @​alexander-alderman-webb in #5223

• feat: Add "K_REVISION" to environment variable release check (exposed by cloud run) by @​rpradal in #5222

Langgraph

• feat(langgraph): Response model attribute on invocation spans by @​alexander-alderman-webb in #5212
• feat(langgraph): Usage attributes on invocation spans by @​alexander-alderman-webb in #5211

OTLP

• feat(otlp): Optionally capture exceptions from otel's Span.record_exception api by @​sl0thentr0py in #5235
• feat(otlp): Implement new Propagator.inject for OTLPIntegration by @​sl0thentr0py in #5221

Bug Fixes 🐛

Integrations

• fix(django): Set active thread ID when middleware spans are disabled by @​alexander-alderman-webb in #5220

• fix(integrations): openai-agents fixing the input messages structure which was wrapped too much in some cases by @​constantinius in #5203

• fix(integrations): openai-agents fix multi-patching of get_model function by @​constantinius in #5195

• fix(integrations): add values for pydantic-ai and openai-agents to _INTEGRATION_DEACTIVATES to prohibit double span creation by @​constantinius in #5196

• fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute by @​sentrivana in #5241

• fix(logs, metrics): Gate metrics, logs user attributes behind send_default_pii by @​sentrivana in #5240

• fix(pydantic-ai): Stop capturing internal exceptions by @​alexander-alderman-webb in #5237

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

• feat(ai): add single message truncation by @​shellmayr in #5079

• feat(django): Add span around Task.enqueue by @​sentrivana in #5209

• feat(starlette): Set transaction name when middleware spans are disabled by @​alexander-alderman-webb in #5223

• feat: Add "K_REVISION" to environment variable release check (exposed by cloud run) by @​rpradal in #5222

Langgraph

• feat(langgraph): Response model attribute on invocation spans by @​alexander-alderman-webb in #5212
• feat(langgraph): Usage attributes on invocation spans by @​alexander-alderman-webb in #5211

OTLP

• feat(otlp): Optionally capture exceptions from otel's Span.record_exception api by @​sl0thentr0py in #5235
• feat(otlp): Implement new Propagator.inject for OTLPIntegration by @​sl0thentr0py in #5221

Bug Fixes 🐛

Integrations

• fix(django): Set active thread ID when middleware spans are disabled by @​alexander-alderman-webb in #5220

• fix(integrations): openai-agents fixing the input messages structure which was wrapped too much in some cases by @​constantinius in #5203

• fix(integrations): openai-agents fix multi-patching of get_model function by @​constantinius in #5195

• fix(integrations): add values for pydantic-ai and openai-agents to _INTEGRATION_DEACTIVATES to prohibit double span creation by @​constantinius in #5196

• fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute by @​sentrivana in #5241

• fix(logs, metrics): Gate metrics, logs user attributes behind send_default_pii by @​sentrivana in #5240

... (truncated)

Commits

• 32e9cac Phrasing and code formatting in changelog
• bf30403 Call out new default for middleware spans and fix formatting in changelog
• 19e0d1f Fix changelog
• 6516b8b release: 2.48.0
• e275c9e Convert all remaining type annotations to PEP-526 format (#5239)
• a29b421 fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute (...
• a9d89f2 fix(pydantic-ai): Stop capturing internal exceptions (#5237)
• 5606bb3 fix(logs, metrics): Gate metrics, logs user attributes behind `send_default_p...
• 6046f2d ci: Unpin Python version for LiteLLM tests (#5238)
• 42ed87a ci: 🤖 Update test matrix with new releases (12/15) (#5229)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 0f4a426.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
pip/sentry-sdk	2.48.0	🟢 5.4	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 8 Found 21/26 approved changesets -- score normalized to 8 Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 4 branch protection is not maximal on development and all release branches Security-Policy 🟢 10 security policy file detected Vulnerabilities ⚠️ 2 8 existing vulnerabilities detected SAST 🟢 9 SAST tool detected but not run on all commits

Scanned Files

• requirements.txt