[dependabot]

Bumps getsentry/craft from 2.35.0 to 2.35.1.

Release notes

Sourced from getsentry/craft's releases.

2.35.1

Bug Fixes 🐛

Deps

• Mitigate brace recursion and shared-cache disclosure by @​MathurAditya724 in #912
• Upgrade Sentry to fix telemetry exit loop by @​MathurAditya724 in #911

Internal Changes 🔧

• (release) Use native Craft binaries and separate AI credentials by @​MathurAditya724 in #910

Changelog

Sourced from getsentry/craft's changelog.

Changelog

3.0.0

Breaking Changes 🛠

• (config) Reject changelog path settings without workspaces by @​sentry-junior in #922
• (nuget) Add workspaces support for dependency-ordered publishing by @​BYK in #686
• (prepare) Fail when no target bumps the version, and bump nuget VersionPrefix by @​sentry-junior in #923

New Features ✨

Changelog

• Let workspaces own or exclude unowned paths by @​sentry-junior in #921

• Ground AI summaries in PR descriptions by @​sentry-junior in #918 Category summaries in the 3.0.0 release preview were vague ("Release communication…", "Internal maintenance…"), and the breaking-change summary didn't say why the change was breaking. The model only had PR titles to work with, and the prompt pushed category summaries toward abstract themes.

• Each changelog entry now goes to the model with a condensed copy of its PR description: HTML comments and code blocks are removed, whitespace is collapsed, and it's capped at 600 characters. The description is context only and never shows up in the rendered changelog. Entries that come from a Changelog Entry section or `` don't get one, since their curated text is already the entry.

• The prompt now asks scope and category summaries to name the specific features, targets and options that changed, bans vague umbrella phrases, and asks breaking-change summaries to say what users must change when the data says so. It also tells the model not to guess when the data doesn't say. The top-level release overview instructions are unchanged because that output was already good.

• serializeChangelog now passes each group's source PRs alongside its rendered items. The important-title and description lookups both come from that one list, so there's no more index-offset merging.

I left reasoning level / model settings alone. Whether those need tuning is easier to judge once a real release has run with the richer input.

Closes #917

via adm.

--

View Junior Session [Sentry]

Bug Fixes 🐛

Changelog

• Skip Other scope header when scope grouping is disabled by @​sentry-junior in #919
• Synthesize concise AI release overviews by @​MathurAditya724 in #913

Other

• (install) Retry temporary executable cleanup by @​MathurAditya724 in #915

... (truncated)

Commits

• 0ff7589 release: 2.35.1
• ddd9ad0 fix(deps): Mitigate brace recursion and shared-cache disclosure (#912)
• c4d85a4 fix(deps): Upgrade Sentry to fix telemetry exit loop (#911)
• 009b210 ci(release): Use native Craft binaries and separate AI credentials (#910)
• 9a205d1 meta: Bump new development version
• ddf3b19 Merge commit '7a7857552e2cdc08b502de96e6076849c01fba32'
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)