25.1.0

Security fix

• CVE-2025-22146: Improper authentication on SAML SSO process allows user impersonation

Various fixes & improvements

• ci: Use generic Docker volume cache action (#3524) by @BYK
• ci: Less volatile cache keys (#3522) by @BYK
• docs: include regular env file on wrap-up (#3523) by @aldy505
• ci: Faster and smarter backup/restore tests (#3516) by @BYK
• fix: Fix the new e2e action to be portable (#3520) by @BYK
• ci: Move e2e test action into the repo (#3519) by @BYK
• ci: Only test on compose 2.26 w/ customizations (#3506) by @BYK
• ci: Skip DB ops during install completely on cache hit (#3496) by @BYK
• chore: Remove everything zookeeper (#3499) by @hubertdeng123
• ci: Cache postgres volume after first migration (#3488) by @BYK
• fix: Remove the extra space in the log file names (#3212) by @melnele
• ref(snuba): Combine bootstrap & migrate for faster bootstrap (#3491) by @BYK
• ref(geoip): Remove geoipupdate from compose (#3490) by @BYK
• build(deps): bump actions/create-github-app-token from 1.11.0 to 1.11.1 (#3492) by @dependabot

24.12.1

This release fixes the login issues introduced in 24.12.0

Various fixes & improvements

• chore: clearer message for errors-only mode (#3487) by @aldy505
• chore(relay): provide opt-in max_memory_percent config as workaround for failing healthcheck (#3486) by @aldy505
• fix(nginx): _assets should rewrite to _static/sentry/dist (#3483) by @BYK

24.12.0

• No documented changes.

24.11.2

Various fixes & improvements

• fix(redis): Actually use custom config (#3459) by @BYK
• feat(release): Replace release bot with GH app (#3458) by @Jeffreyhung
• chore(issue-template): ask for machine specification and provide link to security policy (#3447) by @aldy505
• add sentry/backup.json to gitignore (#3450) by @niklassc7
• ref: remove suggested fix (#3446) by @aldy505

24.11.1

Various fixes & improvements

• fix(redis): Use a safer eviction rule (#3432) by @BYK
• feat: add Redis configuration for improved memory management (#3427) by @Hassanzadeh-sd
• build(deps): bump codecov/codecov-action from 4 to 5 (#3429) by @dependabot

Security fixes

• GHSA-v5h2-q2w4-gpcx: Improper error handling leaks Application Integration Client Secret

24.11.0

Various fixes & improvements

• feat(healthcheck): Improve redis healthcheck (#3422) by @hubertdeng123
• fix: missing mime types and turning off autoindex for js-sdk endpoint (#3395) by @aldy505
• fix: Use js.sentry-cdn.com for JS SDK downloads (#3417) by @BYK
• fix(loader): provide js sdk assets from 4.x (#3415) by @aldy505
• Revert "Revert "ref(feedback): remove issue platform flags after releasing issue types"" (#3403) by @BYK
• Revert "ref(feedback): remove issue platform flags after releasing issue types" (#3402) by @BYK
• ref(feedback): remove issue platform flags after releasing issue types (#3397) by @aliu39
• fix(sentry-admin): Do not wait for command finish to display output (#3390) by @Makhonya

24.10.0

Various fixes & improvements

• chore: Disable codecov for master/release branches (#3384) by @hubertdeng123
• chore: replace old URLs of the repo with the new docs (#3375) by @victorelec14
• ref: span normalization allowed host config (#3245) by @aldy505
• docs: explicitly specify mail.use-{tls,ssl} is mutually exclusive (#3368) by @aldy505
• ref: allow hosted js sdk bundles (#3365) by @aldy505
• fix(clickhouse): Allow nullable key (#3354) by @nikhars

24.9.0

Announcements

• 24.8.0 is now a hard stop. In order to proceed to further upgrades you will need to go through 24.8.0 first https://develop.sentry.dev/self-hosted/releases/

Security fixes

• CVE-2024-45605: Improper authorization on deletion of user issue alert notifications
• CVE-2024-45606: Improper authorization on muting of alert rules

Various fixes & improvements

• docs: link to develop docs (#3307) by @joshuarli
• fix: more leeway for minimum RAM (#3290) by @joshuarli
• Mandate minimum requirements for ram/cpu (#3275) by @hubertdeng123
• ref(feedback): cleanup topic rollout option (#3276) by @aliu39
• Update release template (#3270) by @hubertdeng123

24.8.0

Various fixes & improvements

• Migrate to zookeeper-less kafka (#3263) by @hubertdeng123
• Revert "ref(feedback): cleanup topic rollout option" (#3262) by @aliu39
• ref(feedback): cleanup topic rollout option (#3256) by @aliu39
• Remove cdc and wal2json and use the default postgres entrypoint (#3260) by @beezz
• add -euo pipefail to enhance-image.example.sh (#3246) by @asottile-sentry
• remove python-dev (#3242) by @asottile-sentry
• feat: enable user feedback feature (#3193) by @aldy505
• Use CDN by default for JS SDK Loader (#3213) by @stayallive

24.7.1

Important Changes

• This release includes a security vulnerability fix for GHSA-fm88-hc3v-3www
• Errors only self-hosted is now available

Various fixes & improvements

• Fix: errors only config flag (#3220) by @hubertdeng123
• Add errors only self-hosted infrastructure (#3190) by @hubertdeng123
• feat(generic-metrics): Add gauges to docker compose, re-try (#3177) by @ayirr7