chore(deps): update Cocoa SDK to v9.27.0

[github-actions]

Bumps scripts/update-cocoa.sh from 9.24.0 to 9.27.0.

Auto-generated by a dependency updater.

Changelog

9.27.0

Note

enableLogs and enableMetrics are now deprecated and will be removed in the next major version. Manual log and metric capture is no longer gated by these flags.

Improvements

• Install idle Session Replay recovery infrastructure at zero sample rates. (#8865)
• Manual log and metrics APIs are no longer gated by behind enableLogs / enableMetrics (#8918)

Features

• Add manual Session Replay controls through SentrySDK.replay. (#8868)
  • Explicit start() and startBuffering() calls bypass the configured replay sample rates; sampling still controls automatic startup.
  • start() starts a full-session replay and does nothing if one is already recording.
  • startBuffering() keeps a rolling buffer that is sent on flush() or an error, then continues in session mode.
  • stop() ends the current replay; the next start() creates a new replay session.
  • pause() suspends recording until resume() and remains paused across background and foreground transitions and automatic replay restarts in the same process.
  • resume() continues the same manually paused replay.
  • flush() sends the current replay data to Sentry, or starts a full-session replay when recording is stopped.

Improvements

• Install idle Session Replay recovery infrastructure at zero sample rates. (#8865)

Features

• Copy app.vitals.start.type and app.vitals.start.screen onto standalone app.start children, including app.start.extended and user descendants (#8888)
• Add maxFeatureFlags option to configure how many feature flag evaluations the scope retains, matching sentry-java. Defaults to 100 (#8858)
• Add SentrySDK.internal.envelope.captureNonTerminating for hybrid SDKs, which keeps the current session running and reports it with the unhandled status when an unhandled exception doesn't terminate the process (#8654)
• Add SentrySDK.internal.envelope.updateSessionForDroppedEventNonTerminating so hybrid SDKs can update the native session when an error is dropped by sampling, without sending an envelope (#8907)

Fixes

• Silence spurious ERROR log in SentryCrashCxaThrowSwapper for empty sections (#8915)
• Stop recording touch events while Session Replay is paused. (#8887)

Internal

• Add visionOS support to internal screen APIs (#8913)

9.26.1

Fixes

• Prevent duplicate automatic HTTP spans and breadcrumbs for URLSession task wrappers (#8846)
• Prevent breadcrumb persistence for watchdog termination events from blocking the calling thread (#8653)
• Fix data races when reading and updating network tracker feature flags (#8832)
• Avoid lossy JPEG compression for user feedback screenshot fallbacks from non-previewable formats (#8876)

9.26.0

Warning

The 3rd-party integration packages (SentryCocoaLumberjack, SentryPulse, SentrySwiftLog, SentrySwiftyBeaver) now require Swift 6.1+ to support SPM package traits. Users on older Swift toolchains should pin to an earlier release of these packages.

Features

• Promote enableStandaloneAppStartTracing from options.experimental to a top-level option on Options (#8715)
• Add SentryFromBinary (default) and SentryFromSource SPM package traits to 3rd-party integrations, allowing users to choose between precompiled xcframeworks and building from source. Requires Swift 6.1+ (#8795)
• Add experimental option enableUIViewControllerInitSwizzling that defers UIViewController swizzling to first instantiation instead of eagerly discovering and swizzling all subclasses at SDK start. This avoids realizing available-gated UIViewController subclasses on OS versions below their gate, which crashes apps on start (#8687).
• Add screenshot picker to feedback (#8655)
  • Enable it with form.enableScreenshot = true in the configureForm callback.
• Expose transaction as a public event type (#8745)

Improvements

• Session Replay keeps captured frames in memory for live video encode while still writing PNGs to disk for crash durability. Encode prefers the in-memory image and only falls back to disk for frames recovered after a crash, avoiding a PNG readback on the streaming hot path. (#8636)
• Remove the per-frame render loop from the Session Replay masking preview. (#8730)

Fixes

• Fix misleading duplicate SDK detection message: "same binary" → "same address space" (#8710)
• Fix a race caused by mutating URLSessionTask.currentRequest during trace header propagation (#8650)
• Prevent Session Replay network-detail breadcrumbs from blocking URLSession cancellation on the task monitor (#8497)
• Fix Session Replay adaptive capture backoff pinning at the maximum interval due to mask compositing being included in the measured capture duration, which could produce single-frame segments that appear stuck on one screen (#8740)

Internal

• Add internal hybrid SDK APIs to serialize native events and retrieve scope contexts for .NET event processing (#8708)

9.25.0

Warning

This release raises the minimum deployment targets to macOS 12 and watchOS 9. Apps that support older OS versions must use an earlier Sentry Cocoa release.

• Bump the minimum deployment targets to macOS 12 and watchOS 9 because Xcode 27 no longer supports earlier versions. This lets the SDK adopt Xcode 27 without blocking users from building and submitting their apps with the latest Xcode. (#8595, #8113, #8189)

Features

• Add SentrySDK.feedback.enableOnShake() and disableOnShake() to toggle the shake-to-report gesture at runtime (#8591)

Fixes

• Reduce memory usage when storing envelopes with large attachments (#8649)
• Fix incorrect duration sent for active sessions (#8612)
  • Session duration is now set only when the session ends. Active sessions (including on error increments) no longer emit a bogus duration.
• Fix a race that could prevent consecutive app hangs from being reported (#8627)
• Fix malformed itms-services URL in SentryDistribution updater (#8567)
• Fix off-main thread reads of -[UIApplication applicationState] (8672)

9.24.0

Breaking Changes

Full CHANGELOG.md diff

 -1,12 +1,114 
 # Changelog
 
-## 9.24.0
+## 9.27.0
+
+> [!NOTE]
+> `enableLogs` and `enableMetrics` are now deprecated and will be removed in the next major version. Manual log and metric capture is no longer gated by these flags.
+
+### Improvements
+
+- Install idle Session Replay recovery infrastructure at zero sample rates. ([#8865](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8865))
+- Manual log and metrics APIs are no longer gated by behind `enableLogs` / `enableMetrics` ([#8918](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8918))
+
+### Features
+
+- Add manual Session Replay controls through `SentrySDK.replay`. ([#8868](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8868))
+  - Explicit `start()` and `startBuffering()` calls bypass the configured replay sample rates; sampling still controls automatic startup.
+  - `start()` starts a full-session replay and does nothing if one is already recording.
+  - `startBuffering()` keeps a rolling buffer that is sent on `flush()` or an error, then continues in session mode.
+  - `stop()` ends the current replay; the next `start()` creates a new replay session.
+  - `pause()` suspends recording until `resume()` and remains paused across background and foreground transitions and automatic replay restarts in the same process.
+  - `resume()` continues the same manually paused replay.
+  - `flush()` sends the current replay data to Sentry, or starts a full-session replay when recording is stopped.
+
+### Improvements
+
+- Install idle Session Replay recovery infrastructure at zero sample rates. ([#8865](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8865))
+
+### Features
+
+- Copy `app.vitals.start.type` and `app.vitals.start.screen` onto standalone `app.start` children, including `app.start.extended` and user descendants ([#8888](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8888))
+- Add `maxFeatureFlags` option to configure how many feature flag evaluations the scope retains, matching sentry-java. Defaults to 100 ([#8858](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8858))
+- Add `SentrySDK.internal.envelope.captureNonTerminating` for hybrid SDKs, which keeps the current session running and reports it with the `unhandled` status when an unhandled exception doesn't terminate the process ([#8654](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8654))
+- Add `SentrySDK.internal.envelope.updateSessionForDroppedEventNonTerminating` so hybrid SDKs can update the native session when an error is dropped by sampling, without sending an envelope ([#8907](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8907))
+
+### Fixes
+
+- Silence spurious ERROR log in `SentryCrashCxaThrowSwapper` for empty sections ([#8915](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8915))
+- Stop recording touch events while Session Replay is paused. ([#8887](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8887))
+
+### Internal
+
+- Add visionOS support to internal screen APIs ([#8913](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8913))
+
+## 9.26.1
+
+### Fixes
+
+- Prevent duplicate automatic HTTP spans and breadcrumbs for URLSession task wrappers ([#8846](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8846))
+- Prevent breadcrumb persistence for watchdog termination events from blocking the calling thread ([#8653](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8653))
+- Fix data races when reading and updating network tracker feature flags ([#8832](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8832))
+- Avoid lossy JPEG compression for user feedback screenshot fallbacks from non-previewable formats ([#8876](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8876))
+
+## 9.26.0
+
+> [!WARNING]
+> The 3rd-party integration packages (SentryCocoaLumberjack, SentryPulse, SentrySwiftLog, SentrySwiftyBeaver) now require Swift 6.1+ to support SPM package traits. Users on older Swift toolchains should pin to an earlier release of these packages.
+
+### Features
+
+- Promote `enableStandaloneAppStartTracing` from `options.experimental` to a top-level option on `Options` ([#8715](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8715))
+- Add `SentryFromBinary` (default) and `SentryFromSource` SPM package traits to 3rd-party integrations, allowing users to choose between precompiled xcframeworks and building from source. Requires Swift 6.1+ ([#8795](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8795))
+- Add experimental option `enableUIViewControllerInitSwizzling` that defers `UIViewController` swizzling to first instantiation instead of eagerly discovering and swizzling all subclasses at SDK start. This avoids realizing `available`-gated `UIViewController` subclasses on OS versions below their gate, which crashes apps on start ([#8687](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8687)).
+- Add screenshot picker to feedback ([#8655](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8655))
+  - Enable it with `form.enableScreenshot = true` in the `configureForm` callback.
+- Expose transaction as a public event type ([#8745](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8745))
+
+### Improvements
+
+- Session Replay keeps captured frames in memory for live video encode while still writing PNGs to disk for crash durability. Encode prefers the in-memory image and only falls back to disk for frames recovered after a crash, avoiding a PNG readback on the streaming hot path. ([#8636](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8636))
+- Remove the per-frame render loop from the Session Replay masking preview. ([#8730](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8730))
+
+### Fixes
+
+- Fix misleading duplicate SDK detection message: "same binary" → "same address space" ([#8710](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8710))
+- Fix a race caused by mutating `URLSessionTask.currentRequest` during trace header propagation ([#8650](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8650))
+- Prevent Session Replay network-detail breadcrumbs from blocking URLSession cancellation on the task monitor ([#8497](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8497))
+- Fix Session Replay adaptive capture backoff pinning at the maximum interval due to mask compositing being included in the measured capture duration, which could produce single-frame segments that appear stuck on one screen ([#8740](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8740))
+
+### Internal
+
+- Add internal hybrid SDK APIs to serialize native events and retrieve scope contexts for .NET event processing ([#8708](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8708))
+
+## 9.25.0
+
+> [!WARNING]
+> This release raises the minimum deployment targets to macOS 12 and watchOS 9. Apps that support older OS versions must use an earlier Sentry Cocoa release.
 
 ### Breaking Changes
 
+- Bump the minimum deployment targets to macOS 12 and watchOS 9 because Xcode 27 no longer supports earlier versions. This lets the SDK adopt Xcode 27 without blocking users from building and submitting their apps with the latest Xcode. ([#8595](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8595), [#8113](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8113), [#8189](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8189))
+
+### Features
+
+- Add `SentrySDK.feedback.enableOnShake()` and `disableOnShake()` to toggle the shake-to-report gesture at runtime ([#8591](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8591))
+
+### Fixes
+
+- Reduce memory usage when storing envelopes with large attachments ([#8649](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8649))
+- Fix incorrect `duration` sent for active sessions ([#8612](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8612))
+  - Session `duration` is now set only when the session ends. Active sessions (including on error increments) no longer emit a bogus `duration`.
+- Fix a race that could prevent consecutive app hangs from being reported ([#8627](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8627))
+- Fix malformed itms-services URL in SentryDistribution updater ([#8567](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8567))
+- Fix off-main thread reads of `-[UIApplication applicationState]` (8672)
+
+## 9.24.0
+
 > [!IMPORTANT]
 > Due to a potential risk of revealing PII or security-relevant data in crash events in specific circumstances, we're shipping this strictly speaking breaking change in a minor version.
 
+### Breaking Changes
+
 - Add `enableMemoryIntrospection` option to allow users to control memory introspection in crash reports, defaults to false (was previously true) ([#8571](https://github-redirect.dependabot.com/getsentry/sentry-cocoa/issues/8571))
   - You can re-enable this feature by setting the option `enableMemoryIntrospection` to true
   - When this option is disabled, string stack contents found near the crash site will not be included in the event sent to Sentry. These contents are displayed in the 'message' subtitle shown underneath the main issue title in Sentry.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8691940. Configure here.}

[sentry]

Bug: The code uses PrivateSentrySDKOnly, which is deprecated in Sentry Cocoa 9.26.1. This will become a breaking change in a future major version.
_{Severity: MEDIUM}

Suggested Fix

Migrate all calls from the deprecated PrivateSentrySDKOnly to the new SentrySDK.internal equivalents. For example, replace PrivateSentrySDKOnly.setSdkName() with SentrySDK.internal.sdk.setName() and PrivateSentrySDKOnly.installationID with SentrySDK.internal.sdk.installationID. This will resolve the deprecation warnings and prevent breaking changes in future major versions of the Sentry Cocoa SDK.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: Package.swift#L14

Potential issue: The pull request updates the Sentry Cocoa SDK to version 9.26.1 but
continues to use the `PrivateSentrySDKOnly` API, which has been deprecated in favor of
`SentrySDK.internal`. While the deprecated API remains functional in the 9.x series and
will only produce compile-time warnings, it is scheduled for removal in the next major
version (10.0.0). This introduces a maintenance debt that will lead to a breaking change
and compilation failures once the dependency is updated to version 10.0.0 or later. The
code should be migrated to the new APIs to ensure future compatibility.

Also affects:

• SentryCapacitor.podspec:15~15