chore(deps): update Android SDK to v8.51.0

[github-actions]

Bumps scripts/update-android.sh from 8.50.1 to 8.51.0.

Auto-generated by a dependency updater.

Changelog

8.51.0

Features

• Use Android's ProfilingManager (Perfetto) for continuous profiling on API 35+ devices (#5251)
  • On API 35+ devices, continuous profiling now automatically uses Android's system ProfilingManager with Perfetto-based stack sampling, providing lower-overhead and more accurate profiles. No configuration change is required.
  • Devices below API 35 keep using the legacy Debug-based profiler.
  • Added an enableLegacyProfiling option (default true) to disable the legacy Debug-based profiler. Setting it to false disables continuous profiling on API < 35 devices as well as transaction-based profiling (profilesSampleRate/profilesSampler) on all devices, since transaction-based profiling is not supported by Perfetto.
  • It can also be configured via the io.sentry.profiling.enable-legacy-profiling manifest flag.
  • See the Android profiling docs for details.

Behavioral Changes

• The outbox and cache directories are no longer created by Sentry.init (#5792)
  • They are now created lazily by whichever component first writes into them, off the init thread. As a result, the directories at SentryOptions.getOutboxPath() and SentryOptions.getCacheDirPath() are not guaranteed to exist once Sentry.init returns.
  • If you write envelopes into the outbox path yourself instead of going through the SDK — as hybrid SDKs do for captureEnvelope — create the directory first, e.g. new File(outboxPath).mkdirs().

Improvements

• Skip building Android manifest metadata debug log messages when debug logging is disabled, reducing allocations during SDK init (#5790)

Fixes

• Use the original app build's ProGuard UUID for ANR profile chunks (#5852)
• Fix potential ANR/deadlock in Session Replay when checkCanRecord runs on the replay executor thread (#5837)
• Prevent concurrent PixelCopy access during Session Replay masking and bitmap cleanup (#5808)
• Release MediaMuxer when the replay video encoder fails to start to avoid a resource leak (#5607)
• Set the correct platform (android instead of java) on ANR profile chunks so they are billed as UI Profile Hours rather than Continuous Profile Hours (#5836)
• Skip encoding and capturing buffered session replay segments while rate-limited, so we don't waste resources on envelopes the transport will drop (#5813)
  • These skipped replays are now reported as ratelimit_backoff discarded events in client reports, so they no longer disappear from drop statistics. One event is recorded per buffer flush rather than per segment.
  • Buffer mode is also kept while rate-limited instead of switching to session mode, so the rolling buffer stays warm and the next error after the rate limit expires can send a complete replay.

Performance

• Create the outbox and cache directories lazily in their consumers instead of during SDK init, moving the mkdirs() calls off the init (main) thread (#5792)
• Reduce the number of SDK threads: LifecycleWatcher now schedules the session-end task on the shared timer executor instead of creating a dedicated java.util.Timer thread (#5819)
• Reduce the number of SDK threads: RateLimiter now schedules its rate-limit-lifted notifications on the shared timer executor instead of creating a dedicated java.util.Timer thread (#5814)
• Speed up deserialization of arbitrary JSON objects by typing numbers without throwing exceptions (#5783)

Dependencies

• Bump Native SDK from v0.15.4 to v0.16.0 (#5845)
  • changelog
  • diff

[sentry]

Bug: Removing items from the integrations list while iterating over it will cause a ConcurrentModificationException when enableNativeCrashHandling is false, crashing the app on startup.
_{Severity: CRITICAL}

Suggested Fix

Do not modify the list while iterating. Instead, collect the integrations to be removed in a separate list during the loop, and then call integrations.removeAll() after the loop is finished. Alternatively, use the removeIf() method with a predicate for a more concise solution.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: android/build.gradle#L93

Potential issue: When the `enableNativeCrashHandling` option is set to `false`, the code
iterates through a list of integrations and attempts to remove items from it directly
within the loop. The list, returned by `options.getIntegrations()`, is a
`CopyOnWriteArrayList`. Modifying this list while iterating over it with a for-each loop
will throw a `ConcurrentModificationException`. This will cause a crash during the
Sentry SDK initialization, preventing the application from starting correctly under this
specific, valid configuration.

Also affects:

• android/src/main/java/io/sentry/capacitor/SentryCapacitor.java:149~156

_{Did we get this right? 👍 / 👎 to inform future reviews.}

[sentry]

Bug: The captureEnvelope method does not create the outbox directory before writing, a new requirement in sentry-java 8.51.0, which can lead to silent event loss.
_{Severity: HIGH}

Suggested Fix

Before the call to InternalSentrySdk.captureEnvelope in SentryCapacitor.java, ensure the outbox directory exists. This can be done by getting the outbox path from the Sentry options and calling new File(outboxPath).mkdirs().

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: android/build.gradle#L94

Potential issue: The update to `sentry-java` version 8.51.0 requires that the outbox
directory is created before writing envelopes to it. The `captureEnvelope` method in
`SentryCapacitor.java` calls `InternalSentrySdk.captureEnvelope` without first creating
this directory. If the directory does not exist, the operation will fail. This failure
is caught and results in a rejected promise on the JavaScript side, causing events to be
silently dropped instead of being sent to Sentry. This is a functional regression that
leads to data loss.

Also affects:

• android/src/main/java/io/sentry/capacitor/SentryCapacitor.java:259~270

_{Did we get this right? 👍 / 👎 to inform future reviews.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit fbd60dd. Configure here.}

[cursor]

Missing outbox directory creation

High Severity

Bumping to Android SDK 8.51.0 drops the guarantee that the outbox directory exists after Sentry.init. This hybrid SDK’s captureEnvelope path still relies on that directory being present and never calls mkdirs() first, so envelopes written through InternalSentrySdk.captureEnvelope can fail and drop JS events until some other component creates the path.

 

^{Reviewed by Cursor Bugbot for commit fbd60dd. Configure here.}