Skip to content

feat(v10/core): Limit the body size of tunnel requests - #25560

Merged
s1gr1d merged 1 commit into
sig/v10-nextjs-tunnel-route-handlerfrom
sig/v10-tunnel-body-size-limit
Oct 20, 2026
Merged

s1gr1d merged 1 commit into
sig/v10-nextjs-tunnel-route-handlerfrom
sig/v10-tunnel-body-size-limit

Conversation

@s1gr1d

@s1gr1d s1gr1d commented Oct 20, 2026

Copy link
Copy Markdown
Member

Backport of: #25515

@github-actions

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size % Change Change
@sentry/browser 28.21 kB added added
@sentry/browser - with treeshaking flags 26.66 kB added added
@sentry/browser (incl. Tracing) 47.23 kB added added
@sentry/browser (incl. Tracing + Span Streaming) 49.03 kB added added
@sentry/browser (incl. Tracing, Profiling) 52.02 kB added added
@sentry/browser (incl. Tracing, Replay) 86.64 kB added added
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 76.27 kB added added
@sentry/browser (incl. Tracing, Replay with Canvas) 91.35 kB added added
@sentry/browser (incl. Tracing, Replay, Feedback) 103.97 kB added added
@sentry/browser (incl. Feedback) 45.38 kB added added
@sentry/browser (incl. sendFeedback) 33.01 kB added added
@sentry/browser (incl. FeedbackAsync) 38.14 kB added added
@sentry/browser (incl. Metrics) 29.31 kB added added
@sentry/browser (incl. Logs) 29.55 kB added added
@sentry/browser (incl. Metrics & Logs) 30.22 kB added added
@sentry/react 30.02 kB added added
@sentry/react (incl. Tracing) 49.53 kB added added
@sentry/vue 34.1 kB added added
@sentry/vue (incl. Tracing) 49.61 kB added added
@sentry/svelte 28.24 kB added added
CDN Bundle 30.62 kB added added
CDN Bundle (incl. Tracing) 49.18 kB added added
CDN Bundle (incl. Logs, Metrics) 32.19 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) 50.49 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) 71.62 kB added added
CDN Bundle (incl. Tracing, Replay) 86.87 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 88.16 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) 92.68 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 93.97 kB added added
CDN Bundle - uncompressed 91 kB added added
CDN Bundle (incl. Tracing) - uncompressed 148.26 kB added added
CDN Bundle (incl. Logs, Metrics) - uncompressed 95.71 kB added added
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 152.24 kB added added
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 221.06 kB added added
CDN Bundle (incl. Tracing, Replay) - uncompressed 268.08 kB added added
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 272.05 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 281.78 kB added added
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 285.74 kB added added
@sentry/nextjs (client) 52.14 kB added added
@sentry/sveltekit (client) 47.66 kB added added
@sentry/core/server 81.66 kB added added
@sentry/core/browser 67.73 kB added added
@sentry/node-core 64.05 kB added added
@sentry/node 127.22 kB added added
@sentry/node (incl. diagnostics channel injection) 171.41 kB added added
@sentry/node/import (ESM hook with diagnostics-channel injection) 166 B added added
@sentry/node/light 52.09 kB added added
@sentry/node - without tracing 75.82 kB added added
@sentry/aws-serverless 84.99 kB added added
@sentry/cloudflare (withSentry) - minified 204.93 kB added added
@sentry/cloudflare (withSentry) 505.2 kB added added

@s1gr1d
s1gr1d marked this pull request as ready for review October 20, 2026 14:02
@s1gr1d
s1gr1d requested a review from a team as a code owner October 20, 2026 14:03
@s1gr1d
s1gr1d requested review from chargome, logaretm and nicohrubec and removed request for a team October 20, 2026 14:03
@s1gr1d
s1gr1d merged commit 094c3f1 into v10 Oct 20, 2026
321 checks passed
@s1gr1d
s1gr1d deleted the sig/v10-tunnel-body-size-limit branch October 20, 2026 14:12
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request Oct 27, 2026
#20075)

## DESCRIBE YOUR PR

Documents the tunnel changes in SDK 11.9.0. 

⚠️ Merge this PR only after 10.77.1 and 11.9.0 are released.

- Next.js `tunnelRoute`: add handler mode
(`app/sentry-tunnel/route.ts`). In this mode, a route handler in the app
forwards only the request body to Sentry. Rewrite mode now sends with
`credentials: "omit"`. Apps behind Vercel Deployment Protection or
another login should use handler mode.
- Troubleshooting: list what a custom tunnel must do, add
`handleTunnelRequest`, and add a new "Credentials on Tunnel Requests"
entry.
- Short notes in `options.mdx`, the getting-started includes, the
Next.js setup pages, and TanStack Start.

Related SDK PRs, all going to be released in **11.9.0**:

- getsentry/sentry-javascript#25456
- getsentry/sentry-javascript#25515 
- getsentry/sentry-javascript#25509

Backport PRs for **10.77.1**:
- getsentry/sentry-javascript#25559
- getsentry/sentry-javascript#25560
- getsentry/sentry-javascript#25561

## IS YOUR CHANGE URGENT?

Help us prioritize incoming PRs by letting us know when the change needs
to go live.
Select exactly one option. For deadlines, replace `YYYY-MM-DD` with the
due date. You can update this information later by editing the PR
description.

- [ ] Urgent deadline (GA date, etc.): YYYY-MM-DD
- [x] Other deadline: with the 11.9.0 release
- [ ] No deadline: Not urgent, can wait up to 1 week+

## SLA

- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
supplied a deadline.

Thanks in advance for your help!

## PRE-MERGE CHECKLIST

_Make sure you've checked the following before merging your changes:_

- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants