@unbrained/pm-cli 2026.10.12 → 2026.10.13

package/node_modules/@sentry/core/build/cjs/fetch.js

@@ -11,6 +11,7 @@ const sentryNonRecordingSpan = require('./tracing/sentryNonRecordingSpan.js');
 const baggage = require('./utils/baggage.js');
 const hasSpanStreamingEnabled = require('./tracing/spans/hasSpanStreamingEnabled.js');
 const trace = require('./tracing/trace.js');
+const filterCollectedUrl = require('./utils/data-collection/filterCollectedUrl.js');
 const traceData = require('./utils/traceData.js');
 const url = require('./utils/url.js');
 
@@ -37,7 +38,7 @@ function instrumentFetchRequest(handlerData, shouldCreateSpan, shouldAttachHeade
   const client = currentScopes.getClient();
   const hasParent = !!spanUtils.getActiveSpan();
   const shouldEmitSpan = hasParent || !!client && hasSpanStreamingEnabled.hasSpanStreamingEnabled(client);
-  const span = shouldCreateSpanResult && shouldEmitSpan ? trace.startInactiveSpan(getSpanStartOptions(url, method, spanOrigin)) : new sentryNonRecordingSpan.SentryNonRecordingSpan();
+  const span = shouldCreateSpanResult && shouldEmitSpan ? trace.startInactiveSpan(getSpanStartOptions(url, method, spanOrigin, client)) : new sentryNonRecordingSpan.SentryNonRecordingSpan();
   const spanForTraceHeaders = trace.spanIsIgnored(span) && hasParent ? void 0 : span;
   if (shouldCreateSpanResult && !shouldEmitSpan) {
     client?.recordDroppedEvent("no_parent_span", "span");
@@ -177,24 +178,24 @@ function isHeadersInitTupleArray(headers) {
     (item) => Array.isArray(item) && item.length === 2 && typeof item[0] === "string"
   );
 }
-function getSpanStartOptions(url$1, method, spanOrigin) {
+function getSpanStartOptions(url$1, method, spanOrigin, client) {
   if (url$1.startsWith("data:")) {
     const sanitizedUrl2 = url.stripDataUrlContent(url$1);
     return {
       name: `${method} ${sanitizedUrl2}`,
-      attributes: getFetchSpanAttributes(url$1, void 0, method, spanOrigin)
+      attributes: getFetchSpanAttributes(url$1, void 0, method, spanOrigin, client)
     };
   }
   const parsedUrl = url.parseStringToURLObject(url$1);
   const sanitizedUrl = parsedUrl ? url.getSanitizedUrlStringFromUrlObject(parsedUrl) : url$1;
   return {
     name: `${method} ${sanitizedUrl}`,
-    attributes: getFetchSpanAttributes(url$1, parsedUrl, method, spanOrigin)
+    attributes: getFetchSpanAttributes(url$1, parsedUrl, method, spanOrigin, client)
   };
 }
-function getFetchSpanAttributes(url$1, parsedUrl, method, spanOrigin) {
+function getFetchSpanAttributes(url$1, parsedUrl, method, spanOrigin, client) {
   const attributes$1 = {
-    url: url.stripDataUrlContent(url$1),
+    url: filterCollectedUrl.filterCollectedUrl(url.stripDataUrlContent(url$1), client),
     type: "fetch",
     "http.method": method,
     [semanticAttributes.SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: spanOrigin,
@@ -202,12 +203,12 @@ function getFetchSpanAttributes(url$1, parsedUrl, method, spanOrigin) {
   };
   if (parsedUrl) {
     if (!url.isURLObjectRelative(parsedUrl)) {
-      attributes$1[attributes.HTTP_URL] = url.stripDataUrlContent(parsedUrl.href);
-      attributes$1[attributes.URL_FULL] = url.stripDataUrlContent(parsedUrl.href);
+      attributes$1[attributes.HTTP_URL] = filterCollectedUrl.filterCollectedUrl(url.stripDataUrlContent(parsedUrl.href), client);
+      attributes$1[attributes.URL_FULL] = filterCollectedUrl.filterCollectedUrl(url.stripDataUrlContent(parsedUrl.href), client);
       attributes$1["server.address"] = parsedUrl.host;
     }
     if (parsedUrl.search) {
-      attributes$1["http.query"] = parsedUrl.search;
+      attributes$1["http.query"] = filterCollectedUrl.filterCollectedUrlQuery(parsedUrl.search, client);
     }
     if (parsedUrl.hash) {
       attributes$1["http.fragment"] = parsedUrl.hash;

package/node_modules/@sentry/core/build/cjs/index.js

@@ -37,6 +37,7 @@ const providerSkip = require('./utils/ai/providerSkip.js');
 const filterKeyValueData = require('./utils/data-collection/filterKeyValueData.js');
 const filterCookies = require('./utils/data-collection/filterCookies.js');
 const filterQueryParams = require('./utils/data-collection/filterQueryParams.js');
+const filterCollectedUrl = require('./utils/data-collection/filterCollectedUrl.js');
 const envToBool = require('./utils/envToBool.js');
 const scopeData = require('./utils/scopeData.js');
 const prepareEvent = require('./utils/prepareEvent.js');
@@ -321,6 +322,8 @@ exports._INTERNAL_skipAiProviderWrapping = providerSkip._INTERNAL_skipAiProvider
 exports._INTERNAL_filterKeyValueData = filterKeyValueData.filterKeyValueData;
 exports._INTERNAL_filterCookies = filterCookies.filterCookies;
 exports._INTERNAL_filterQueryParams = filterQueryParams.filterQueryParams;
+exports.filterCollectedUrl = filterCollectedUrl.filterCollectedUrl;
+exports.filterCollectedUrlQuery = filterCollectedUrl.filterCollectedUrlQuery;
 exports.envToBool = envToBool.envToBool;
 exports.applyScopeDataToEvent = scopeData.applyScopeDataToEvent;
 exports.getCombinedScopeData = scopeData.getCombinedScopeData;

package/node_modules/@sentry/core/build/cjs/integrations/http/add-outgoing-request-breadcrumb.js

@@ -2,6 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const breadcrumbs = require('../../breadcrumbs.js');
 const breadcrumbLogLevel = require('../../utils/breadcrumb-log-level.js');
+const filterCollectedUrl = require('../../utils/data-collection/filterCollectedUrl.js');
 const url = require('../../utils/url.js');
 const getRequestUrl = require('./get-request-url.js');
 
@@ -17,7 +18,7 @@ function addOutgoingRequestBreadcrumb(request, response) {
         status_code: statusCode,
         url: url.getSanitizedUrlString(parsedUrl),
         "http.method": request.method || "GET",
-        ...parsedUrl.search ? { "http.query": parsedUrl.search } : {},
+        ...parsedUrl.search ? { "http.query": filterCollectedUrl.filterCollectedUrlQuery(parsedUrl.search) } : {},
         ...parsedUrl.hash ? { "http.fragment": parsedUrl.hash } : {}
       },
       type: "http",

package/node_modules/@sentry/core/build/cjs/integrations/http/get-outgoing-span-data.js

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const semanticAttributes = require('../../semanticAttributes.js');
+const filterCollectedUrl = require('../../utils/data-collection/filterCollectedUrl.js');
 const url = require('../../utils/url.js');
 const getRequestUrl = require('./get-request-url.js');
 
@@ -20,9 +21,9 @@ function getOutgoingRequestSpanData(request) {
       // https://getsentry.github.io/sentry-conventions/attributes/
       [semanticAttributes.SEMANTIC_ATTRIBUTE_SENTRY_OP]: "http.client",
       "otel.kind": "CLIENT",
-      "http.url": url$1,
+      "http.url": filterCollectedUrl.filterCollectedUrl(url$1),
       "http.method": request.method,
-      "http.target": request.path || "/",
+      "http.target": filterCollectedUrl.filterCollectedUrl(request.path || "/"),
       "net.peer.name": request.host,
       "http.host": request.getHeader("host"),
       ...userAgent ? { "user_agent.original": userAgent } : {},

package/node_modules/@sentry/core/build/cjs/integrations/http/server-subscription.js

@@ -16,6 +16,7 @@ const semanticAttributes = require('../../semanticAttributes.js');
 const spanstatus = require('../../tracing/spanstatus.js');
 const attributes = require('@sentry/conventions/attributes');
 const spanKind = require('../../spanKind.js');
+const filterCollectedUrl = require('../../utils/data-collection/filterCollectedUrl.js');
 
 const INTEGRATION_NAME = "Http.Server";
 const SPANS_INTEGRATION_NAME = "Http.SentryServerSpans";
@@ -194,12 +195,15 @@ function buildServerSpanWrap(options) {
             "net.peer.port": remotePort,
             "sentry.http.prefetch": isKnownPrefetchRequest(request$1) || void 0,
             // Old Semantic Conventions attributes for compatibility
-            [attributes.URL_FULL]: urlObj && !url.isURLObjectRelative(urlObj) ? urlObj.href : void 0,
+            [attributes.URL_FULL]: urlObj && !url.isURLObjectRelative(urlObj) ? filterCollectedUrl.filterCollectedUrl(urlObj.href, client) : void 0,
             [attributes.URL_PATH]: urlObj?.pathname ?? httpTargetWithoutQueryFragment,
             // oxlint-disable-next-line typescript-eslint(no-deprecated)
-            [attributes.HTTP_URL]: fullUrl,
+            [attributes.HTTP_URL]: filterCollectedUrl.filterCollectedUrl(fullUrl, client),
             "http.method": method,
-            "http.target": urlObj ? `${urlObj.pathname}${urlObj.search}` : httpTargetWithoutQueryFragment,
+            "http.target": filterCollectedUrl.filterCollectedUrl(
+              urlObj ? `${urlObj.pathname}${urlObj.search}` : httpTargetWithoutQueryFragment,
+              client
+            ),
             "http.host": host,
             "net.host.name": hostname,
             "http.client_ip": typeof ips === "string" ? ips.split(",")[0] : void 0,

package/node_modules/@sentry/core/build/cjs/integrations/requestdata.js

@@ -4,6 +4,8 @@ const currentScopes = require('../currentScopes.js');
 const integration = require('../integration.js');
 const semanticAttributes = require('../semanticAttributes.js');
 const cookie = require('../utils/cookie.js');
+const filterQueryParams = require('../utils/data-collection/filterQueryParams.js');
+const filterUrlQuery = require('../utils/data-collection/filterUrlQuery.js');
 const request = require('../utils/request.js');
 const getIpAddress = require('../vendor/getIpAddress.js');
 const captureSpan = require('../tracing/spans/captureSpan.js');
@@ -18,7 +20,8 @@ const _requestDataIntegration = ((options = {}) => {
       ...options.include?.cookies === true && dc.cookies === false && { cookies: true },
       ...options.include?.headers === true && dc.httpHeaders.request === false && {
         httpHeaders: { ...dc.httpHeaders, request: true }
-      }
+      },
+      ...options.include?.query_string === true && dc.urlQueryParams === false && { urlQueryParams: true }
     };
     return {
       dataCollection,
@@ -40,9 +43,9 @@ const _requestDataIntegration = ((options = {}) => {
     processEvent(event, _hint, client) {
       const { sdkProcessingMetadata = {} } = event;
       const { normalizedRequest, ipAddress } = sdkProcessingMetadata;
-      const { include } = resolveIncludeAndDataCollection(client);
+      const { include, dataCollection } = resolveIncludeAndDataCollection(client);
       if (normalizedRequest) {
-        addNormalizedRequestDataToEvent(event, normalizedRequest, { ipAddress }, include);
+        addNormalizedRequestDataToEvent(event, normalizedRequest, { ipAddress }, include, dataCollection);
       }
       return event;
     },
@@ -58,10 +61,17 @@ const _requestDataIntegration = ((options = {}) => {
   };
 });
 const requestDataIntegration = integration.defineIntegration(_requestDataIntegration);
-function addNormalizedRequestDataToEvent(event, req, additionalData, include) {
+function addNormalizedRequestDataToEvent(event, req, additionalData, include, dataCollection) {
+  const requestData = extractNormalizedRequestData(req, include);
+  if (requestData.query_string) {
+    requestData.query_string = normalizeAndFilterQueryString(requestData.query_string, dataCollection.urlQueryParams);
+  }
+  if (requestData.url) {
+    requestData.url = filterUrlQuery.filterUrlQuery(requestData.url, dataCollection.urlQueryParams);
+  }
   event.request = {
     ...event.request,
-    ...extractNormalizedRequestData(req, include)
+    ...requestData
   };
   if (include.ip) {
     const ip = req.headers && getIpAddress.getClientIPAddress(req.headers) || additionalData.ipAddress;
@@ -77,13 +87,13 @@ function addNormalizedRequestDataToSpan(span, normalizedRequest, ipAddress, incl
   const requestData = extractNormalizedRequestData(normalizedRequest, include);
   const attributes$1 = {};
   if (requestData.url) {
-    attributes$1[attributes.URL_FULL] = requestData.url;
+    attributes$1[attributes.URL_FULL] = filterUrlQuery.filterUrlQuery(requestData.url, dataCollection.urlQueryParams);
   }
   if (requestData.method) {
     attributes$1["http.request.method"] = requestData.method;
   }
   if (requestData.query_string) {
-    attributes$1[attributes.URL_QUERY] = normalizeQueryString(requestData.query_string);
+    attributes$1[attributes.URL_QUERY] = normalizeAndFilterQueryString(requestData.query_string, dataCollection.urlQueryParams);
   }
   captureSpan.safeSetSpanJSONAttributes(span, attributes$1);
   if (requestData.cookies && Object.keys(requestData.cookies).length > 0) {
@@ -141,13 +151,17 @@ function extractNormalizedRequestData(normalizedRequest, include) {
   }
   return requestData;
 }
+function normalizeAndFilterQueryString(queryString, behavior) {
+  const normalized = normalizeQueryString(queryString);
+  return normalized ? filterQueryParams.filterQueryParams(normalized, behavior) : void 0;
+}
 function normalizeQueryString(queryString) {
   if (typeof queryString === "string") {
     return queryString || void 0;
   }
   const pairs = Array.isArray(queryString) ? queryString : Object.entries(queryString);
-  const result = pairs.map(([key, value]) => `${key}=${value}`).join("&");
-  return result || void 0;
+  const normalized = new URLSearchParams(pairs).toString();
+  return normalized || void 0;
 }
 
 exports.requestDataIntegration = requestDataIntegration;

package/node_modules/@sentry/core/build/cjs/server.js

@@ -37,6 +37,7 @@ const providerSkip = require('./utils/ai/providerSkip.js');
 const filterKeyValueData = require('./utils/data-collection/filterKeyValueData.js');
 const filterCookies = require('./utils/data-collection/filterCookies.js');
 const filterQueryParams = require('./utils/data-collection/filterQueryParams.js');
+const filterCollectedUrl = require('./utils/data-collection/filterCollectedUrl.js');
 const envToBool = require('./utils/envToBool.js');
 const scopeData = require('./utils/scopeData.js');
 const prepareEvent = require('./utils/prepareEvent.js');
@@ -320,6 +321,8 @@ exports._INTERNAL_skipAiProviderWrapping = providerSkip._INTERNAL_skipAiProvider
 exports._INTERNAL_filterKeyValueData = filterKeyValueData.filterKeyValueData;
 exports._INTERNAL_filterCookies = filterCookies.filterCookies;
 exports._INTERNAL_filterQueryParams = filterQueryParams.filterQueryParams;
+exports.filterCollectedUrl = filterCollectedUrl.filterCollectedUrl;
+exports.filterCollectedUrlQuery = filterCollectedUrl.filterCollectedUrlQuery;
 exports.envToBool = envToBool.envToBool;
 exports.applyScopeDataToEvent = scopeData.applyScopeDataToEvent;
 exports.getCombinedScopeData = scopeData.getCombinedScopeData;

package/node_modules/@sentry/core/build/cjs/utils/data-collection/filterCollectedUrl.js

@@ -0,0 +1,24 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const currentScopes = require('../../currentScopes.js');
+const filterQueryParams = require('./filterQueryParams.js');
+const filterUrlQuery = require('./filterUrlQuery.js');
+
+function urlQueryParamsBehavior(client) {
+  return (client ?? currentScopes.getClient())?.getDataCollectionOptions().urlQueryParams ?? true;
+}
+function filterCollectedUrl(url, client) {
+  return url === void 0 ? void 0 : filterUrlQuery.filterUrlQuery(url, urlQueryParamsBehavior(client));
+}
+function filterCollectedUrlQuery(query, client) {
+  if (!query) {
+    return query;
+  }
+  const hasPrefix = query.startsWith("?");
+  const filtered = filterQueryParams.filterQueryParams(hasPrefix ? query.slice(1) : query, urlQueryParamsBehavior(client));
+  return filtered && hasPrefix ? `?${filtered}` : filtered;
+}
+
+exports.filterCollectedUrl = filterCollectedUrl;
+exports.filterCollectedUrlQuery = filterCollectedUrlQuery;
+//# sourceMappingURL=filterCollectedUrl.js.map

package/node_modules/@sentry/core/build/cjs/utils/data-collection/filterKeyValueData.js

@@ -5,39 +5,33 @@ const filteringSnippets = require('./filtering-snippets.js');
 function isSensitiveKey(lower, denySnippets) {
   return denySnippets.some((snippet) => lower.includes(snippet));
 }
-function filterKeyValueData(data, behavior, additionalDenyTerms) {
+function shouldFilterDataKey(key, behavior, additionalDenyTerms) {
   if (behavior === false) {
-    return {};
+    return true;
   }
+  const lowerKey = key.toLowerCase();
   const denySnippets = additionalDenyTerms != null ? [...filteringSnippets.SENSITIVE_KEY_SNIPPETS, ...additionalDenyTerms] : filteringSnippets.SENSITIVE_KEY_SNIPPETS;
-  const result = {};
+  if (isSensitiveKey(lowerKey, denySnippets)) {
+    return true;
+  }
   if (behavior === true) {
-    for (const key of Object.keys(data)) {
-      result[key] = isSensitiveKey(key.toLowerCase(), denySnippets) ? filteringSnippets.FILTERED_VALUE : data[key];
-    }
-    return result;
+    return false;
   }
-  if ("deny" in behavior) {
-    const lowerTerms2 = behavior.deny.map((t) => t.toLowerCase());
-    for (const key of Object.keys(data)) {
-      const lower = key.toLowerCase();
-      const isDenied = isSensitiveKey(lower, denySnippets) || lowerTerms2.some((term) => lower.includes(term));
-      result[key] = isDenied ? filteringSnippets.FILTERED_VALUE : data[key];
-    }
-    return result;
+  const terms = "deny" in behavior ? behavior.deny : behavior.allow;
+  const matchesConfiguredTerm = terms.some((term) => lowerKey.includes(term.toLowerCase()));
+  return "deny" in behavior ? matchesConfiguredTerm : !matchesConfiguredTerm;
+}
+function filterKeyValueData(data, behavior, additionalDenyTerms) {
+  if (behavior === false) {
+    return {};
   }
-  const lowerTerms = behavior.allow.map((t) => t.toLowerCase());
+  const result = {};
   for (const key of Object.keys(data)) {
-    const lower = key.toLowerCase();
-    if (isSensitiveKey(lower, denySnippets)) {
-      result[key] = filteringSnippets.FILTERED_VALUE;
-    } else {
-      const isAllowed = lowerTerms.some((term) => lower.includes(term));
-      result[key] = isAllowed ? data[key] : filteringSnippets.FILTERED_VALUE;
-    }
+    result[key] = shouldFilterDataKey(key, behavior, additionalDenyTerms) ? filteringSnippets.FILTERED_VALUE : data[key];
   }
   return result;
 }
 
 exports.filterKeyValueData = filterKeyValueData;
+exports.shouldFilterDataKey = shouldFilterDataKey;
 //# sourceMappingURL=filterKeyValueData.js.map

package/node_modules/@sentry/core/build/cjs/utils/data-collection/filterQueryParams.js

@@ -4,22 +4,15 @@ const filteringSnippets = require('./filtering-snippets.js');
 const filterKeyValueData = require('./filterKeyValueData.js');
 
 function filterQueryParams(queryString, behavior) {
-  if (behavior === false) {
-    return {};
-  }
-  try {
-    const params = new URLSearchParams(queryString);
-    const parsed = {};
-    params.forEach((value, key) => {
-      parsed[key] = value;
-    });
-    if (Object.keys(parsed).length === 0) {
-      return {};
-    }
-    return filterKeyValueData.filterKeyValueData(parsed, behavior);
-  } catch {
-    return filteringSnippets.FILTERED_VALUE;
+  if (!queryString || behavior === false) {
+    return void 0;
   }
+  return queryString.split("&").map((pair) => {
+    const separatorIndex = pair.indexOf("=");
+    const encodedKey = separatorIndex === -1 ? pair : pair.slice(0, separatorIndex);
+    const key = new URLSearchParams(`${encodedKey}=`).keys().next().value;
+    return key !== void 0 && filterKeyValueData.shouldFilterDataKey(key, behavior) ? `${encodedKey}=${filteringSnippets.FILTERED_VALUE}` : pair;
+  }).join("&");
 }
 
 exports.filterQueryParams = filterQueryParams;

package/node_modules/@sentry/core/build/cjs/utils/data-collection/filterUrlQuery.js

@@ -0,0 +1,20 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const filterQueryParams = require('./filterQueryParams.js');
+
+function filterUrlQuery(url, behavior) {
+  const fragmentStart = url.indexOf("#");
+  const queryEnd = fragmentStart === -1 ? url.length : fragmentStart;
+  const queryStart = url.indexOf("?");
+  if (queryStart === -1 || queryStart > queryEnd) {
+    return url;
+  }
+  const prefix = url.slice(0, queryStart);
+  const query = url.slice(queryStart + 1, queryEnd);
+  const suffix = url.slice(queryEnd);
+  const filtered = filterQueryParams.filterQueryParams(query, behavior);
+  return filtered ? `${prefix}?${filtered}${suffix}` : `${prefix}${suffix}`;
+}
+
+exports.filterUrlQuery = filterUrlQuery;
+//# sourceMappingURL=filterUrlQuery.js.map

package/node_modules/@sentry/core/build/cjs/utils/url.js

@@ -2,6 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const attributes = require('@sentry/conventions/attributes');
 const semanticAttributes = require('../semanticAttributes.js');
+const filterCollectedUrl = require('./data-collection/filterCollectedUrl.js');
 
 const DEFAULT_BASE_URL = "thismessage:/";
 function isURLObjectRelative(url) {
@@ -51,7 +52,7 @@ function getHttpSpanNameFromUrlObject(urlObject, kind, request, routeName) {
   const route = routeName ? routeName : urlObject ? kind === "client" ? getSanitizedUrlStringFromUrlObject(urlObject) : urlObject.pathname : "/";
   return `${method} ${route}`;
 }
-function getHttpSpanDetailsFromUrlObject(urlObject, kind, spanOrigin, request, routeName) {
+function getHttpSpanDetailsFromUrlObject(urlObject, kind, spanOrigin, request, routeName, client) {
   const attributes$1 = {
     [semanticAttributes.SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: spanOrigin,
     [semanticAttributes.SEMANTIC_ATTRIBUTE_SENTRY_SOURCE]: "url"
@@ -65,7 +66,7 @@ function getHttpSpanDetailsFromUrlObject(urlObject, kind, spanOrigin, request, r
   }
   if (urlObject) {
     if (urlObject.search) {
-      attributes$1["url.query"] = urlObject.search;
+      attributes$1["url.query"] = filterCollectedUrl.filterCollectedUrlQuery(urlObject.search, client);
     }
     if (urlObject.hash) {
       attributes$1["url.fragment"] = urlObject.hash;
@@ -77,7 +78,7 @@ function getHttpSpanDetailsFromUrlObject(urlObject, kind, spanOrigin, request, r
       }
     }
     if (!isURLObjectRelative(urlObject)) {
-      attributes$1[attributes.URL_FULL] = urlObject.href;
+      attributes$1[attributes.URL_FULL] = filterCollectedUrl.filterCollectedUrl(urlObject.href, client);
       if (urlObject.port) {
         attributes$1["url.port"] = urlObject.port;
       }

package/node_modules/@sentry/core/build/cjs/utils/version.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const SDK_VERSION = "10.75.1" ;
+const SDK_VERSION = "10.76.0" ;
 
 exports.SDK_VERSION = SDK_VERSION;
 //# sourceMappingURL=version.js.map

package/node_modules/@sentry/core/build/esm/browser.js

@@ -35,6 +35,7 @@ export { _INTERNAL_clearAiProviderSkips, _INTERNAL_shouldSkipAiProviderWrapping,
 export { filterKeyValueData as _INTERNAL_filterKeyValueData } from './utils/data-collection/filterKeyValueData.js';
 export { filterCookies as _INTERNAL_filterCookies } from './utils/data-collection/filterCookies.js';
 export { filterQueryParams as _INTERNAL_filterQueryParams } from './utils/data-collection/filterQueryParams.js';
+export { filterCollectedUrl, filterCollectedUrlQuery } from './utils/data-collection/filterCollectedUrl.js';
 export { envToBool } from './utils/envToBool.js';
 export { applyScopeDataToEvent, getCombinedScopeData, mergeScopeData } from './utils/scopeData.js';
 export { prepareEvent } from './utils/prepareEvent.js';

package/node_modules/@sentry/core/build/esm/fetch.js

@@ -9,6 +9,7 @@ import { SentryNonRecordingSpan } from './tracing/sentryNonRecordingSpan.js';
 import { SENTRY_BAGGAGE_KEY_PREFIX } from './utils/baggage.js';
 import { hasSpanStreamingEnabled } from './tracing/spans/hasSpanStreamingEnabled.js';
 import { startInactiveSpan, spanIsIgnored } from './tracing/trace.js';
+import { filterCollectedUrl, filterCollectedUrlQuery } from './utils/data-collection/filterCollectedUrl.js';
 import { getTraceData } from './utils/traceData.js';
 import { stripDataUrlContent, parseStringToURLObject, getSanitizedUrlStringFromUrlObject, isURLObjectRelative } from './utils/url.js';
 
@@ -35,7 +36,7 @@ function instrumentFetchRequest(handlerData, shouldCreateSpan, shouldAttachHeade
   const client = getClient();
   const hasParent = !!getActiveSpan();
   const shouldEmitSpan = hasParent || !!client && hasSpanStreamingEnabled(client);
-  const span = shouldCreateSpanResult && shouldEmitSpan ? startInactiveSpan(getSpanStartOptions(url, method, spanOrigin)) : new SentryNonRecordingSpan();
+  const span = shouldCreateSpanResult && shouldEmitSpan ? startInactiveSpan(getSpanStartOptions(url, method, spanOrigin, client)) : new SentryNonRecordingSpan();
   const spanForTraceHeaders = spanIsIgnored(span) && hasParent ? void 0 : span;
   if (shouldCreateSpanResult && !shouldEmitSpan) {
     client?.recordDroppedEvent("no_parent_span", "span");
@@ -175,24 +176,24 @@ function isHeadersInitTupleArray(headers) {
     (item) => Array.isArray(item) && item.length === 2 && typeof item[0] === "string"
   );
 }
-function getSpanStartOptions(url, method, spanOrigin) {
+function getSpanStartOptions(url, method, spanOrigin, client) {
   if (url.startsWith("data:")) {
     const sanitizedUrl2 = stripDataUrlContent(url);
     return {
       name: `${method} ${sanitizedUrl2}`,
-      attributes: getFetchSpanAttributes(url, void 0, method, spanOrigin)
+      attributes: getFetchSpanAttributes(url, void 0, method, spanOrigin, client)
     };
   }
   const parsedUrl = parseStringToURLObject(url);
   const sanitizedUrl = parsedUrl ? getSanitizedUrlStringFromUrlObject(parsedUrl) : url;
   return {
     name: `${method} ${sanitizedUrl}`,
-    attributes: getFetchSpanAttributes(url, parsedUrl, method, spanOrigin)
+    attributes: getFetchSpanAttributes(url, parsedUrl, method, spanOrigin, client)
   };
 }
-function getFetchSpanAttributes(url, parsedUrl, method, spanOrigin) {
+function getFetchSpanAttributes(url, parsedUrl, method, spanOrigin, client) {
   const attributes = {
-    url: stripDataUrlContent(url),
+    url: filterCollectedUrl(stripDataUrlContent(url), client),
     type: "fetch",
     "http.method": method,
     [SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: spanOrigin,
@@ -200,12 +201,12 @@ function getFetchSpanAttributes(url, parsedUrl, method, spanOrigin) {
   };
   if (parsedUrl) {
     if (!isURLObjectRelative(parsedUrl)) {
-      attributes[HTTP_URL] = stripDataUrlContent(parsedUrl.href);
-      attributes[URL_FULL] = stripDataUrlContent(parsedUrl.href);
+      attributes[HTTP_URL] = filterCollectedUrl(stripDataUrlContent(parsedUrl.href), client);
+      attributes[URL_FULL] = filterCollectedUrl(stripDataUrlContent(parsedUrl.href), client);
       attributes["server.address"] = parsedUrl.host;
     }
     if (parsedUrl.search) {
-      attributes["http.query"] = parsedUrl.search;
+      attributes["http.query"] = filterCollectedUrlQuery(parsedUrl.search, client);
     }
     if (parsedUrl.hash) {
       attributes["http.fragment"] = parsedUrl.hash;

package/node_modules/@sentry/core/build/esm/index.js

@@ -35,6 +35,7 @@ export { _INTERNAL_clearAiProviderSkips, _INTERNAL_shouldSkipAiProviderWrapping,
 export { filterKeyValueData as _INTERNAL_filterKeyValueData } from './utils/data-collection/filterKeyValueData.js';
 export { filterCookies as _INTERNAL_filterCookies } from './utils/data-collection/filterCookies.js';
 export { filterQueryParams as _INTERNAL_filterQueryParams } from './utils/data-collection/filterQueryParams.js';
+export { filterCollectedUrl, filterCollectedUrlQuery } from './utils/data-collection/filterCollectedUrl.js';
 export { envToBool } from './utils/envToBool.js';
 export { applyScopeDataToEvent, getCombinedScopeData, mergeScopeData } from './utils/scopeData.js';
 export { prepareEvent } from './utils/prepareEvent.js';

package/node_modules/@sentry/core/build/esm/integrations/http/add-outgoing-request-breadcrumb.js

@@ -1,5 +1,6 @@
 import { addBreadcrumb } from '../../breadcrumbs.js';
 import { getBreadcrumbLogLevelFromHttpStatusCode } from '../../utils/breadcrumb-log-level.js';
+import { filterCollectedUrlQuery } from '../../utils/data-collection/filterCollectedUrl.js';
 import { parseUrl, getSanitizedUrlString } from '../../utils/url.js';
 import { getRequestUrlFromClientRequest } from './get-request-url.js';
 
@@ -15,7 +16,7 @@ function addOutgoingRequestBreadcrumb(request, response) {
         status_code: statusCode,
         url: getSanitizedUrlString(parsedUrl),
         "http.method": request.method || "GET",
-        ...parsedUrl.search ? { "http.query": parsedUrl.search } : {},
+        ...parsedUrl.search ? { "http.query": filterCollectedUrlQuery(parsedUrl.search) } : {},
         ...parsedUrl.hash ? { "http.fragment": parsedUrl.hash } : {}
       },
       type: "http",

package/node_modules/@sentry/core/build/esm/integrations/http/get-outgoing-span-data.js

@@ -1,4 +1,5 @@
 import { SEMANTIC_ATTRIBUTE_SENTRY_OP } from '../../semanticAttributes.js';
+import { filterCollectedUrl } from '../../utils/data-collection/filterCollectedUrl.js';
 import { getHttpSpanDetailsFromUrlObject, parseStringToURLObject } from '../../utils/url.js';
 import { getRequestUrlFromClientRequest } from './get-request-url.js';
 
@@ -18,9 +19,9 @@ function getOutgoingRequestSpanData(request) {
       // https://getsentry.github.io/sentry-conventions/attributes/
       [SEMANTIC_ATTRIBUTE_SENTRY_OP]: "http.client",
       "otel.kind": "CLIENT",
-      "http.url": url,
+      "http.url": filterCollectedUrl(url),
       "http.method": request.method,
-      "http.target": request.path || "/",
+      "http.target": filterCollectedUrl(request.path || "/"),
       "net.peer.name": request.host,
       "http.host": request.getHeader("host"),
       ...userAgent ? { "user_agent.original": userAgent } : {},

package/node_modules/@sentry/core/build/esm/integrations/http/server-subscription.js

@@ -14,6 +14,7 @@ import { SEMANTIC_ATTRIBUTE_SENTRY_SOURCE, SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN, SEM
 import { getSpanStatusFromHttpCode, SPAN_STATUS_ERROR } from '../../tracing/spanstatus.js';
 import { HTTP_URL, URL_PATH, URL_FULL } from '@sentry/conventions/attributes';
 import { SPAN_KIND } from '../../spanKind.js';
+import { filterCollectedUrl } from '../../utils/data-collection/filterCollectedUrl.js';
 
 const INTEGRATION_NAME = "Http.Server";
 const SPANS_INTEGRATION_NAME = "Http.SentryServerSpans";
@@ -192,12 +193,15 @@ function buildServerSpanWrap(options) {
             "net.peer.port": remotePort,
             "sentry.http.prefetch": isKnownPrefetchRequest(request) || void 0,
             // Old Semantic Conventions attributes for compatibility
-            [URL_FULL]: urlObj && !isURLObjectRelative(urlObj) ? urlObj.href : void 0,
+            [URL_FULL]: urlObj && !isURLObjectRelative(urlObj) ? filterCollectedUrl(urlObj.href, client) : void 0,
             [URL_PATH]: urlObj?.pathname ?? httpTargetWithoutQueryFragment,
             // oxlint-disable-next-line typescript-eslint(no-deprecated)
-            [HTTP_URL]: fullUrl,
+            [HTTP_URL]: filterCollectedUrl(fullUrl, client),
             "http.method": method,
-            "http.target": urlObj ? `${urlObj.pathname}${urlObj.search}` : httpTargetWithoutQueryFragment,
+            "http.target": filterCollectedUrl(
+              urlObj ? `${urlObj.pathname}${urlObj.search}` : httpTargetWithoutQueryFragment,
+              client
+            ),
             "http.host": host,
             "net.host.name": hostname,
             "http.client_ip": typeof ips === "string" ? ips.split(",")[0] : void 0,