[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.sentry:sentry-android-core	8.61.0 → 8.61.1
com.squareup.okhttp3:okhttp (source)	5.5.0 → 5.5.1

---

Release Notes

getsentry/sentry-java (io.sentry:sentry-android-core)

v8.61.1

Compare Source

Fixes

• Session Replay: Fix a native crash (SIGABRT on the RenderThread) when stopping a replay that uses the canvas screenshot strategy (#​6342)
• Session Replay: Keep the segment videos of a replay that stopped before the startup cleanup of previous replays ran (#​6343)
• Report the number of dropped spans in client reports when a batched span envelope item is discarded, instead of a quantity of 1 (e.g. for Flutter span streaming) (#​6265)
• Session Replay: Keep the flushed video and do not reuse its segment id when stop() is called right after flush() in buffer mode (#​6340)
• Keep sending events from Android 7.1.0 and older devices after Sentry changes its TLS certificate authority (#​6227)
  • In February 2027, Sentry moves its TLS certificates from DigiCert to Let's Encrypt and Google Trust Services (announcement).
  • Android 7.1.0 (API 25) and older don't trust the Let's Encrypt root certificate (ISRG Root X1), so without this fix, the SDK on those devices can no longer send events to Sentry after the switch.
  • The SDK now bundles ISRG Root X1 and trusts it in addition to the device's root certificates on API 25 and lower. This only applies to the SDK's own uploads to Sentry SaaS (DSNs on sentry.io), not to self-hosted Sentry, not to any other connection your app makes, and not if you set your own SentryOptions.setSslSocketFactory.
  • Apps need to update to an SDK version with this fix to keep sending events from these devices.
• Session Replay: Use a software canvas for video encoding on the Android Emulator to avoid a native crash in eglDestroySurface (#​6282)

Internal

• Measure the hostname cache TTL on the monotonic ticker the options provide, so that a device time change no longer shortens or extends it (#​6100)
• Measure Session Replay's 1h recording cap and its touch-move debounce on a monotonic clock, so a device time change no longer stops a healthy recording early, keeps a finished one alive, or suppresses gesture events (#​6090)
• Add ScreenshotUtils.takeMaskedScreenshot so Hybrid SDKs can capture screenshots masked according to SentryAndroidOptions.getScreenshot() (#​6281)

Dependencies

• Bump Native SDK from v0.17.3 to v0.17.4 (#​6278)
  • changelog
  • diff

lysine-dev/okhttp (com.squareup.okhttp3:okhttp)

v5.5.1

2026_10_22

• Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this
  update is not necessary for Android devices with Google Play Services as Google has issued an
  [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed
  to the compromised certificates.

---

Configuration

📅 Schedule: (in timezone Europe/Istanbul)

• Branch creation
  • Between 12:00 AM and 05:59 AM (* 0-5 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.