fix(core): Align SENTRY_ENVIRONMENT/RELEASE/DIST in JS bundled options with native SDKs#6330
Merged
@sentry/warden / warden
completed
Jun 23, 2026
1 issue
Low
Array-valued `sentry.options.json` bypasses the non-object guard, silently dropping env overrides - `packages/core/src/js/tools/sentryOptionsSerializer.ts:130-133`
The guard typeof options !== 'object' || options === null does not catch JSON arrays — typeof [] === 'object' — so env overrides are written as named properties on the array, then silently lost when JSON.stringify serializes it (arrays ignore non-index properties).
Also found at:
packages/core/test/tools/sentryOptionsSerializer.test.ts:155-165
4 skills analyzed
| Skill | Findings | Duration | Cost |
|---|---|---|---|
| security-review | 0 | 19.1s | $0.06 |
| code-review | 0 | 1m 9s | $0.27 |
| find-bugs | 1 | 4m 25s | $0.79 |
| gha-security-review | 0 | 1m 9s | $0.03 |
⏱ 7m 3s · 416.5k in / 37.7k out · $1.15
Loading