build(deps): bump @sentry/electron from 7.18.0 to 8.3.0

packages/app/package.json

@@ -28,7 +28,7 @@
     "@electron-internal/extract-zip": "^1.0.1",
     "@electron/asar": "^4.0.1",
     "@electron/fiddle-core": "workspace:*",
-    "@sentry/electron": "^7.18.0",
+    "@sentry/electron": "^8.3.0",
     "i18next": "^26.5.7",
     "monaco-editor": "^0.57.0",
     "prettier": "^3.9.10",

packages/app/src/main/crash/sentry.test.ts

@@ -86,7 +86,7 @@ describe('initCrashReporting', () => {
     expect(initCrashReporting()).toBe(true);
     expect(mocks.init).toHaveBeenCalledOnce();
     expect(mocks.init.mock.calls[0]![0]).toMatchObject({
-      sendDefaultPii: false,
+      dataCollection: { userInfo: false, httpBodies: [] },
       defaultIntegrations: false,
     });
   });

packages/app/src/main/crash/sentry.ts

@@ -50,7 +50,16 @@ export function initCrashReporting(): boolean {
     release: releaseName(app.getName(), app.getVersion()),
     // Renderers reach Sentry through the app's own preload: the one exception to EIPC-only IPC.
     ipcMode: Sentry.IPCMode.Classic,
-    sendDefaultPii: false,
+    // Replaces `sendDefaultPii: false`: no user info (so no IP inference), HTTP data, gen AI or DB query data.
+    dataCollection: {
+      userInfo: false,
+      cookies: false,
+      httpHeaders: false,
+      httpBodies: [],
+      urlQueryParams: false,
+      genAI: { inputs: false, outputs: false },
+      databaseQueryData: false,
+    },
     // An explicit allowlist: no console, network or local-variable integrations, so those never collect anything.
     defaultIntegrations: false,
     integrations: [

packages/app/src/renderer/features/about/index.tsx

@@ -18,7 +18,16 @@ async function initRendererCrashReporting(enabled?: boolean): Promise<void> {
   // Events go to main, whose `beforeSend` scrubs them. The integrations are an allowlist:
   // no breadcrumbs, so no console, DOM or network breadcrumbs.
   Sentry.init({
-    sendDefaultPii: false,
+    // Replaces `sendDefaultPii: false`: no user info (so no IP inference), HTTP data, gen AI or DB query data.
+    dataCollection: {
+      userInfo: false,
+      cookies: false,
+      httpHeaders: false,
+      httpBodies: [],
+      urlQueryParams: false,
+      genAI: { inputs: false, outputs: false },
+      databaseQueryData: false,
+    },
     defaultIntegrations: false,
     integrations: [
       Sentry.globalHandlersIntegration(),