Skip to content

ref: bump sentry-scm to 3.0.0 - #129290

Merged
vaind merged 1 commit into
masterfrom
junior/ref/bump-sentry-scm-3.0.0
Oct 30, 2026
Merged

vaind merged 1 commit into
masterfrom
junior/ref/bump-sentry-scm-3.0.0

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 30, 2026

Copy link
Copy Markdown
Contributor

Bumps sentry-scm from 2.0.0 to 3.0.0. The lockfile also picks up cryptography as a direct dependency of sentry-scm; the locked cryptography (50.0.0) and pyjwt (2.15.0) already meet 3.0.0's new floors (>=48.0.1, >=2.14.0).

No code changes are needed on master. The 3.0.0 breaking changes are all in scm.git (Ed25519 grants, GitServer(public_keys=...), get_token returning an scm.Secret, GitRelay(map_error=...), GitGrantKeyError, and the 502 → 500 status changes), and nothing on master uses scm.git yet. The only user is the git endpoint in #128444, which is already written against 3.0.0 and only needs this bump to pass CI. The one other change that touches master's code, getsentry/scm-platform#169, is backward compatible for RpcServer's callers.

Landing this first lets #128444 drop its "bump sentry-scm" checklist item after a rebase. If you'd rather keep the bump inside #128444, close this one.

This PR needs no deploy config or secrets. SCM_GIT_GRANT_PUBLIC_KEYS (Ed25519 public keys as PEM, matching Seer's signing key) comes in with #128444.

Upstream: getsentry/scm-platform#168, getsentry/scm-platform#170, getsentry/scm-platform#171

Refs CW-2222

via Ivan Dlugos.

--

View Session [Sentry]

@sentry-junior
sentry-junior Bot requested a review from a team as a code owner October 30, 2026 09:10
@linear-code

linear-code Bot commented Oct 30, 2026

Copy link
Copy Markdown

CW-2222

@github-actions github-actions Bot added the Scope: Backend Automatically applied to PRs that change backend components label Oct 30, 2026
@vaind
vaind merged commit 7ee1d99 into master Oct 30, 2026
97 checks passed
@vaind
vaind deleted the junior/ref/bump-sentry-scm-3.0.0 branch October 30, 2026 09:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Scope: Backend Automatically applied to PRs that change backend components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant