chore(deps): update Native SDK to v0.15.1

[github-actions]

Bumps packages/flutter/scripts/update-native.sh from 0.14.2 to 0.15.1.

Auto-generated by a dependency updater.

Changelog

0.15.1

Fixes:

• Report on partial disk writes when streaming envelopes to file, which previously left truncated envelopes on disk and reported success. (#1804)
• Android: breadcrumb data is now sent as a structured object instead of a raw JSON string. (#1808)

0.15.0

Breaking:

• sentry_value_incref now returns sentry_value_t and sentry_value_decref returns int (0 if freed). (#1763)

Features:

• Native: add opt-in async crash upload mode so crashed apps can exit early after crash data is captured, while the crash daemon finishes potentially large uploads in the background. (#1739)
• Native/Linux: symbolicate stack frames in the crash daemon. (#1747, #1764)
• Add a transfer_timeout option for SDK-managed HTTP transports. (#1741)
• Apple: use os_sync_wait_on_address for the level-triggered waitable flag in the batcher on modern macOS(14.4+) and iOS(17.4+). (#1765)
• Native/macOS: add thread names. (#1766)
• Add Upload-Metadata header to TUS requests. (#1795)

Fixes:

• Native/macOS: crash reports now include full stack traces for all threads. Previously, non-crashing threads showed only a single frame. (#1768)
• Native/Linux: resolve function names for the crashed thread's stacktrace from on-disk ELF symbol tables in the crash daemon, so the most important thread gets symbolicated without ptrace. (#1764)
• Finish active trace on crash. (#1667)
• Native/macOS: fix module image_size computation, which could have caused the symbolicator to misattribute every frame to the lowest-addressed image (typically dyld or libsystem). (#1740)
• Native: raise SENTRY_CRASH_MAX_MODULES from 512 to 2048 so processes that load many shared libraries no longer have their minidump module list truncated, which left frames in unrecorded modules without a debug_id and unsymbolicatable.
  (#1738)
• Reject overly deep JSON and msgpack payloads during deserialization. (#1727, #1748)
• Read lengths for variadic fingerprints. (#1730)
• Guard against JSON token allocation overflow on 32-bit platforms. (#1733)
• Windows: fix HTTP rate limit response header parsing. (#1732)
• POSIX: prevent condition-variable timeout overflow from busy-spinning flush and shutdown waits. (#1731)
• Native/macOS: fix thread stack descriptor. (#1726)
• Native/macOS: honor the system_crash_reporter_enabled option. (#1743)
• Cap rate-limit retry-after values at 24 hours to prevent a MITM-provided response from disabling event delivery for the process lifetime. (#1744)
• Fix a shutdown-time use-after-free window in sentry_close(). (#1750)
• curl: free duplicate HTTP response headers to avoid potential leaks. (#1791)
• Native: validate ELF header entry sizes. (#1746)
• Native: clamp module_count from the shared crash context. (#1770)
• Prevent database cleanup from following symlinks in run and cache directories. (#1751)
• Structured logs: respect printf argument widths when extracting log parameters to avoid stack-data disclosure and corrupted attributes on 32-bit platforms. (#1752)
• Fix TOCTOU races in transaction/span refcounting by switching to the atomic decref return value. (#1763)
• Fix signed-to-unsigned cast in rate-limit parsing to prevent permanent event suppression. (#1790)
• Fix a potential out-of-bounds read when parsing non-NUL-terminated sentry-trace headers. (#1749)
• Harden ELF note parsing against overflow and OOB reads. (#1773)
• Fix memory leak in session deserialization on malformed cached files. (#1789)
• Fix division by zero when breadcrumbs are disabled. (#1767)
• Native: escape JSON attachments. (#1771)
• Reject NaN sample rates. (#1788)
• Handle memory allocation failures during JSON serialization to prevent truncated output. (#1772)
• Guard against overflow in string cloning in internal string utilities. (#1787)
• Fix a file descriptor leak in old-run processing. (#1792)

[github-actions]

Semver Impact of This PR

🟡 Minor (new features)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

Features

• (dart) Mark span streaming API as non-experimental by buenaflor in #3756

Enhancements

• (flutter) Support int64 values from sentry-native by buenaflor in #3760

Dependencies

Deps

• chore(deps): update Native SDK to v0.15.1 by github-actions[bot] in #3757

• chore(deps): update Android SDK to v8.44.0 by github-actions in #3776

---

_{🤖 This preview updates automatically when you update the PR.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.89%. Comparing base (2450352) to head (b2d37a2).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3757      +/-   ##
==========================================
+ Coverage   86.96%   91.89%   +4.92%     
==========================================
  Files         336      105     -231     
  Lines       12064     3763    -8301     
==========================================
- Hits        10492     3458    -7034     
+ Misses       1572      305    -1267     

Flag	Coverage Δ
sentry	?
sentry_dio	?
sentry_drift	?
sentry_file	?
sentry_firebase_remote_config	100.00% <ø> (ø)
sentry_flutter	91.51% <ø> (+0.36%)	⬆️
sentry_hive	?
sentry_isar	?
sentry_link	?
sentry_logging	?
sentry_sqflite	?
sentry_supabase	97.27% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.