chore: Back-merge release/8.9.1 into main#6055
Merged
Conversation
…ook (#6049) * fix(core): Restore tarball script permissions and missing EAS build hook The npm pack -> yarn pack switch in #6037 introduced two regressions: 1. yarn pack stores files with mode 0644. scripts/sentry-xcode.sh, invoked directly by Xcode's build phase, fails with "Permission denied" (#6047). Re-pack the tarball after yarn pack to restore 0755 on shell scripts and bin entrypoints. 2. yarn pack does not auto-include files referenced from the bin field. scripts/eas-build-hook.js was never in the .npmignore allowlist, so the three sentry-eas-build-* bin commands silently stopped working in the tarball (#6048 follow-up). Add it to the allowlist. Add a job_validate_tarball CI job that installs the produced tarball into a fresh project and asserts script modes, bin links, post-install executability, and that workspace:* specs were resolved. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * docs: Update changelog Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
…6052) The validate job ran `npm install <core tarball>` only. The published core package.json declares `@sentry/expo-upload-sourcemaps` at the same version as core (workspace:* is resolved at pack time). On a release branch the bumped version is not on the npm registry yet, so npm tried to fetch from registry and failed with ETARGET (e.g. when releasing 8.9.2: "No matching version found for @sentry/expo-upload-sourcemaps@8.9.2"). Install both tarballs together so the sister dep is satisfied from local. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
…erge-8.9.2 # Conflicts: # CHANGELOG.md # dev-packages/e2e-tests/package.json # samples/expo/package.json # samples/react-native-macos/package.json # samples/react-native/package.json # yarn.lock
alwx
approved these changes
Apr 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
📢 Type of change
📜 Description
Back-merges
release/8.9.1(which now contains the 8.9.2 release) intomain. Brings the following onto main:fix(core): Restore tarball script permissions and missing EAS build hook (fix(core): Restore tarball script permissions and missing EAS build hook #6049)fix(ci): Install both tarballs in validate job to satisfy cross-dep (fix(ci): Install both tarballs in validate job to satisfy cross-dep #6052)release: 8.9.2version bumps (lerna, package.json files, native version files, sample app pins)## 8.9.2CHANGELOG block💡 Motivation and Context
8.9.2 was released from
release/8.9.1(since this was a hotfix on top of the 8.9.1 tag). Main needs the fix code, the new validate-tarball CI job, and the version bump so downstream releases continue from 8.9.2.💚 How did you test it?
git merge --no-ff origin/release/8.9.1and resolved 6 file conflicts:CHANGELOG.md: kept main's## Unreleasedblock (8.10-bound entries) and inserted## 8.9.2between it and## 8.9.1.dev-packages/e2e-tests/package.json,samples/expo/package.json,samples/react-native-macos/package.json,samples/react-native/package.json: took@sentry/react-native: 8.9.2from release branch, kept@sentry/core/@sentry/reactat10.50.0from main (those are 8.10-bound bumps that should not regress to 10.49.0).yarn.lock: regenerated withyarn install --mode=update-lockfileafter package.json conflicts were resolved.packages/core/package.jsonis at8.9.2, the validate-tarball CI job is present,.npmignoreincludes!scripts/eas-build-hook.js,build-tarball.shhas thechmodstep.📝 Checklist
sendDefaultPIIis enabled🔮 Next steps
After merge,
release/8.9.1can be deleted (or kept around if further 8.9.x patches are anticipated). The next regular release will continue from main at8.9.2.🤖 Generated with Claude Code