feat(bundler-plugins): Enable hidden source maps and remove them after upload in the Rollup plugin

When the Rollup or Rolldown output has no `sourcemap` setting and an
upload can run, the plugin switches the output to hidden source maps,
copies each chunk and its map into the upload staging folder from
`generateBundle`, and drops the map asset so it is never written.
`deleteSourcemapsAfterUpload: true` does the same for maps the user
enabled. SvelteKit and Nuxt pass `deleteSourcemapsAfterUpload: false`
because they need the map files on disk after the Vite build. The other
framework SDKs set the bundler's source map option themselves, which
the plugin never deletes, so their builds do not change.

Author: timfish

CHANGELOG.md

@@ -6,6 +6,23 @@
 
 Work in this release was contributed by @lazerg, @rjmcgee53192, and @adityankale190895. Thank you for your contributions!
 
+### Important Changes
+
+- **feat(bundler-plugins): Enable hidden source maps and remove them after upload ([#25637](https://github.com/getsentry/sentry-javascript/pull/25637), [#25645](https://github.com/getsentry/sentry-javascript/pull/25645), [#25646](https://github.com/getsentry/sentry-javascript/pull/25646), [#25647](https://github.com/getsentry/sentry-javascript/pull/25647), [#25648](https://github.com/getsentry/sentry-javascript/pull/25648))**
+
+  The Sentry Rollup, Vite, webpack and esbuild plugins now turn on hidden source maps when your bundler has no source maps enabled and the plugin can upload them. They upload the maps to Sentry and remove them from the build output. You no longer need to set `sourcemap: 'hidden'` or `filesToDeleteAfterUpload` globs:
+
+  ```js
+  sentryVitePlugin({ org, project, authToken });
+  ```
+
+  The new `sourcemaps.deleteSourcemapsAfterUpload` option controls the removal:
+  - Unset: the plugin removes only the source maps it turned on itself. Source maps you enabled yourself stay in the build output, as before.
+  - `true`: the plugin also removes source maps you enabled yourself, and switches visible source maps to hidden. Set this if you already use `sourcemap: 'hidden'` and want to drop your `filesToDeleteAfterUpload` globs.
+  - `false`: the plugin never removes source maps.
+
+  Builds in development mode or without an auth token, org and project do not change.
+
 ## 11.11.0
 
 ### Important Changes

dev-packages/bundler-plugin-integration-tests/fixtures/configs/multiple-outputs-mixed-sourcemaps.config.d.ts

@@ -0,0 +1,2 @@
+import type { SentryRollupPluginOptions } from "@sentry/bundler-plugins/rollup";
+export declare const sentryConfig: SentryRollupPluginOptions;

dev-packages/bundler-plugin-integration-tests/fixtures/configs/multiple-outputs-mixed-sourcemaps.config.js

@@ -0,0 +1,7 @@
+export const sentryConfig = {
+  telemetry: false,
+  authToken: "fake-auth",
+  org: "fake-org",
+  project: "fake-project",
+  release: { inject: false },
+};

dev-packages/bundler-plugin-integration-tests/fixtures/configs/sourcemaps-assets-auto.config.d.ts

@@ -0,0 +1,2 @@
+import type { SentryRollupPluginOptions } from "@sentry/bundler-plugins/rollup";
+export declare const sentryConfig: SentryRollupPluginOptions;

dev-packages/bundler-plugin-integration-tests/fixtures/configs/sourcemaps-assets-auto.config.js

@@ -0,0 +1,10 @@
+export const sentryConfig = {
+  telemetry: false,
+  authToken: "fake-auth",
+  org: "fake-org",
+  project: "fake-project",
+  release: { inject: false },
+  sourcemaps: {
+    assets: ["out/sourcemaps-assets-auto/entry1.js"],
+  },
+};

dev-packages/bundler-plugin-integration-tests/fixtures/configs/sourcemaps-ignore-auto.config.d.ts

@@ -0,0 +1,2 @@
+import type { SentryRollupPluginOptions } from "@sentry/bundler-plugins/rollup";
+export declare const sentryConfig: SentryRollupPluginOptions;

dev-packages/bundler-plugin-integration-tests/fixtures/configs/sourcemaps-ignore-auto.config.js

@@ -0,0 +1,10 @@
+export const sentryConfig = {
+  telemetry: false,
+  authToken: "fake-auth",
+  org: "fake-org",
+  project: "fake-project",
+  release: { inject: false },
+  sourcemaps: {
+    ignore: ["**/entry2.js"],
+  },
+};

dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/basic-cjs.test.ts

@@ -20,6 +20,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
       "sentry-cli-mock.json": "["release","create","CURRENT_SHA","--project","fake-project"],
     ["release","set-commits","CURRENT_SHA","--auto"],
     ["release","finalize","CURRENT_SHA"],
+    ["sourcemap","upload","-p","fake-project","--release","CURRENT_SHA","sentry-bundler-plugin-upload-path"],
     ",
     }
   `);

dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/basic.test.ts

@@ -20,6 +20,7 @@ test(import.meta.url, ({ runBundler, readOutputFiles, runFileInNode }) => {
       "sentry-cli-mock.json": "["release","create","CURRENT_SHA","--project","fake-project"],
     ["release","set-commits","CURRENT_SHA","--auto"],
     ["release","finalize","CURRENT_SHA"],
+    ["sourcemap","upload","-p","fake-project","--release","CURRENT_SHA","sentry-bundler-plugin-upload-path"],
     ",
     }
   `);

dev-packages/bundler-plugin-integration-tests/fixtures/rolldown/multiple-outputs-mixed-sourcemaps.config.ts

@@ -0,0 +1,23 @@
+import { sentryRollupPlugin } from "@sentry/bundler-plugins/rollup";
+import { defineConfig } from "rolldown";
+import { sentryConfig } from "../configs/multiple-outputs-mixed-sourcemaps.config.js";
+
+export default defineConfig({
+  input: ["src/entry1.js", "src/entry2.js"],
+  output: [
+    {
+      dir: "out/multiple-outputs-mixed-sourcemaps",
+      format: "es",
+      entryFileNames: "[name].mjs",
+      chunkFileNames: "[name].mjs",
+      sourcemap: true,
+    },
+    {
+      dir: "out/multiple-outputs-mixed-sourcemaps",
+      format: "cjs",
+      entryFileNames: "[name].cjs",
+      chunkFileNames: "[name].cjs",
+    },
+  ],
+  plugins: [sentryRollupPlugin(sentryConfig)],
+});