Onpremise Versions Save

Security fixes

• security-fix(CVE-2024-32474): Superuser cleartext password leaked in logs

Various fixes & improvements

• chore(deps): bump memcached and redis to latest patch versions (#2973) by @mdtro
• Use docker compose exec to create additional kafka topics (#2904) by @saz
• Add example to docker compose version in problem report (#2959) by @edgariscoding
• Port last integration tests to python (#2966) by @hubertdeng123

Sentry release notes: https://github.com/getsentry/sentry/releases/tag/24.4.1

Breaking Changes

• Gravatar will no longer work for avatar imaging if you run on HTTP. HTTPS is still supported as always.

Various fixes & improvements

• Use python for e2e tests (#2953) by @hubertdeng123
• feat: adds group attributes consumer (#2927) by @scefali
• fix(spans): Adds organizations:standalone-span-ingestion flag to default config (#2936) by @edwardgou-sentry
• Bump ubuntu version for tests (#2923) by @hubertdeng123
• Write Customization tests in python (#2918) by @hubertdeng123
• feat(clickhouse): Added max_suspicious_broken_parts to the config.xml (#2853) by @victorelec14
• Port backup tests to python (#2907) by @hubertdeng123
• Fix defunct java processes (#2914) by @hubertdeng123
• Integration tests in python (#2892) by @hubertdeng123
• feat: run outcomes-billing consumer (#2909) by @lynnagara
• Remove duplicate feature flags (#2899) by @JannKleen

Notes

• New performance features are now in self-hosted! This includes Queries, Web Vitals, Resources, etc..
• For those that are experiencing CSRF validation issues, you may need to set the CSRF_TRUSTED_ORIGINS variable in your sentry.conf.py file.

Various fixes & improvements

• feat(spans): Ingest spans (#2861) by @phacops
• Integration test improvements (#2858) by @hubertdeng123
• increase postgres max_connections above 100 connections (#2740) by @erfantkerfan
• deps: bump maxmind/geoipupdate to 6.1.0 (#2859) by @victorelec14
• Enable proxy buffering in nginx (#2844) by @RexTim
• Add snuba rust consumers (#2831) by @hubertdeng123
• simplify if for open-ai-suggestion (#2732) by @LvckyAPI
• Upgrade to FSL-1.1 (#2835) by @chadwhitacre
• chore: provide clearer csrf url example (#2833) by @aldy505
• chore: Use django ORM to perform sql commands (#2827) by @hubertdeng123
• revert changes in 3067683f6c0e1c6dd9ceb72cb5155c1dbf3bf501 (#2829) by @hubertdeng123
• use rust consumers in self-hosted (3067683f) by @hubertdeng123

Various fixes & improvements

• Bump nginx version (#2797) by @hubertdeng123
• build(deps): bump pre-commit/action from 3.0.0 to 3.0.1 (#2788) by @dependabot
• Tweak postgres indexing fix (#2792) by @hubertdeng123
• fix: DB migration script (#2779) by @hubertdeng123

Breaking Changes

This release changes the memcached backend from django.core.cache.backends.memcached.MemcachedCache to django.core.cache.backends.memcached.PyMemcacheCache. This will require changing the CACHES setting in your sentry.conf.py file in a manner similar to what is seen here. In particular, the OPTIONS API for PyMemcacheCache is different from that of MemcachedCache, and may require changes depending on how it has been configured.

Security Fix

• SSRF via Phabricator integration

Various fixes & improvements

• Check memcached backend in Django (#2778) by @chadwhitacre
• Fix groupedmessage indexing error (#2777) by @hubertdeng123
• build(deps): bump actions/setup-python from 4 to 5 (#2644) by @dependabot
• feat: provide csrf settings information for sentry config (#2762) by @aldy505
• Fix apt config generation when http_proxy is set (#2725) (#2734) by @lemrouch

Notes

• You will need to update your django cache backend to PyMemCache in your sentry.conf.py as seen here

Various fixes & improvements

• Revert "Move open ai key from env variables" (#2724) by @hubertdeng123
• Fix cache error self hosted (#2722) by @hubertdeng123

Various fixes & improvements

• Enable crons (#2712) by @hubertdeng123
• Parameterize backup restore script (#2412) by @hubertdeng123
• Run tests only on getsentry repository (#2681) by @aminvakil
• Tweak the template now that we can see it (#2670) by @chadwhitacre
• Nginx client request body is buffered to a temporary file (#2630) by @zKoz210

Security Fix

• SSRF in symbolicator via invalid protocol

Various fixes & improvements

• Make a release issue template (#2666) by @chadwhitacre

Various fixes & improvements

• test(backup): Use --no-prompt for backup tests (#2618) by @azaslavsky

Security Fix

• SSRF in symbolicator