build(deps): Bump sentry-cli to 3.6.2 - #1373
Open
runningcode wants to merge 1 commit into
Open
Conversation
sentry-cli 3.6.2 discards a non-embedded auth token when the URL is resolved from a different configuration source (getsentry/sentry-cli#3378). The sentry-cli integration test job supplies the URL via the SENTRY_URL environment variable while the tests wrote the auth token into sentry.properties, so the token would now be ignored and the uploads would fail with "Auth token is required". Provide the token via SENTRY_AUTH_TOKEN in the same CI job so the URL and token share a single runtime source, and drop the now-obsolete auth.token writes from the integration tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
runningcode
force-pushed
the
no/bump-sentry-cli-3.6.2
branch
from
July 23, 2026 12:28
dfdb0cd to
f663946
Compare
runningcode
marked this pull request as ready for review
July 23, 2026 12:32
runningcode
requested review from
0xadam-brown,
adinauer,
markushi and
romtsn
as code owners
July 23, 2026 12:32
runningcode
commented
Jul 23, 2026
| - Bump CLI from v3.6.0 to v3.6.1 ([#1367](https://github.com/getsentry/sentry-android-gradle-plugin/pull/1367)) | ||
| - [changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md#361) | ||
| - [diff](https://github.com/getsentry/sentry-cli/compare/3.6.0...3.6.1) | ||
| - Bump CLI from v3.6.0 to v3.6.2 ([#1367](https://github.com/getsentry/sentry-android-gradle-plugin/pull/1367), [#1373](https://github.com/getsentry/sentry-android-gradle-plugin/pull/1373)) |
Contributor
Author
There was a problem hiding this comment.
Should we call out this breaking change more explicitly here? The fact that this is a minor bump on the CLI but is a breaking change might be confusing.
Member
There was a problem hiding this comment.
yeah, let's have a breaking change section (or behavior change something like that) and reference Daniel's comment on the sentry-cli PR
romtsn
approved these changes
Jul 24, 2026
romtsn
left a comment
romtsn
left a comment
Member
There was a problem hiding this comment.
pre-approving, but let's update the changelog too
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the bundled
sentry-clifrom 3.6.1 to 3.6.2.Why the repo needs reconfiguring
sentry-cli 3.6.2 no longer combines a URL and a non-embedded auth token from different configuration sources: when the URL and token come from different sources, one is ignored with a warning.
The
integration-tests-sentry-cliCI job hit exactly this: it provides the URL via theSENTRY_URLenvironment variable (a runtime source) while the tests wroteauth.tokenintosentry.properties(a file source). Under 3.6.2 the file token gets discarded and the uploads fail withAuth token is required.Verified against the real 3.6.2 binary:
sentry.properties+SENTRY_URLenv →Ignoring an auth token because the selected URL comes from a different configuration source→Method: UnauthorizedMethod: Auth Token✓This only affects CI — locally the upload integration tests are skipped via
assumeFalse(SENTRY_URL is blank), so they never exercise the combination.Changes
plugin-build/sentry-cli.propertiesto 3.6.2 (triggers a re-download on the next build).SENTRY_AUTH_TOKENalongsideSENTRY_URLin theintegration-tests-sentry-cliworkflow so the URL and token share one runtime source.auth.tokenwrites from the integration tests (3.6.2 discards a file token wheneverSENTRY_URLis set in the env;org/projectstill come from the fixture'ssentry.properties).