Release v1.6.8: configurable ignore_paths for HTTP noise.

Skip profiler/WDT/build/assets/health and Chrome DevTools probes on the exception listener and auto HTTP transactions; set ignore_paths: [] to disable.

Author: HecFranco

.symfony/recipe/nowo-tech/beacon-bundle/1.0/config/packages/nowo_beacon.yaml

@@ -25,6 +25,8 @@ nowo_beacon:
     #     doctrine: false                 # requires doctrine/dbal
     #     http_client: false
     ignore_exceptions: []
+    # ignore_paths defaults: /_profiler, /_wdt, /build, /assets, /health, Chrome DevTools probe; set [] to disable:
+    # ignore_paths: []
     # Per-category outbound context (user is opt-in; may include PII):
     send:
         environment: true

README.md

@@ -19,7 +19,7 @@ This bundle is **FrankenPHP worker mode friendly**.
 - Versioned `User-Agent` (`beacon-bundle/{composer-version}`)
 - Manual APIs through `BeaconClientInterface`
 - Optional `kernel.exception` listener for uncaught HTTP exceptions
-- `ignore_exceptions` support for listener-side filtering
+- `ignore_exceptions` / `ignore_paths` support for listener-side filtering (defaults align with Beacon host infra exclusions + Chrome DevTools probe)
 - Configurable outbound context (`send.*`: stacktrace, request, user, PHP/Symfony versions, OS, …)
 - Message events can include current stacktrace; frames may include source context when files are readable
 - HTTP events attach request URL/method (and safe headers) when available

composer.json

@@ -83,7 +83,7 @@
     },
     "config": {
         "sort-packages": true,
-        "root-version": "1.6.7",
+        "root-version": "1.6.8",
         "allow-plugins": {
             "phpstan/extension-installer": true
         },

composer.lock

@@ -1141,9 +1141,10 @@
  *     },
  *     register_error_listener?: bool|Param, // When true, register a kernel.exception listener that reports uncaught exceptions. // Default: true
  *     ignore_exceptions?: list<scalar|Param|null>,
+ *     ignore_paths?: list<scalar|Param|null>,
  *     register_console_listener?: bool|Param, // When true, report uncaught console command errors (ConsoleEvents::ERROR). // Default: true
  *     register_messenger_listener?: bool|Param, // When true and symfony/messenger is installed, report WorkerMessageFailedEvent failures that will not retry. // Default: true
- *     auto_http_transaction?: bool|Param, // When true, send a performance transaction for each main HTTP request (skips profiler/health/build). // Default: false
+ *     auto_http_transaction?: bool|Param, // When true, send a performance transaction for each main HTTP request (skips ignore_paths). // Default: false
  *     before_send?: scalar|Param|null, // Optional service id of an invokable that receives the event/transaction payload array and returns the mutated array, or null to drop the send. // Default: null
  *     instrumentation?: array{ // Opt-in automatic spans / breadcrumbs for Doctrine SQL and HttpClient requests.
  *         doctrine?: bool|Param, // When true and doctrine/dbal is installed, record SQL query spans and breadcrumbs. // Default: false

demo/symfony8/composer.lock

@@ -7,6 +7,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ## Table of contents
 
 - [[Unreleased]](#unreleased)
+- [[1.6.8] - 2026-07-30](#168-2026-07-30)
+  - [Added](#added)
+  - [Changed](#changed)
 - [[1.6.7] - 2026-07-29](#167-2026-07-29)
   - [Changed](#changed)
 - [[1.6.6] - 2026-07-28](#166-2026-07-28)
@@ -80,6 +83,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.6.8] - 2026-07-30
+
+### Added
+
+- **`ignore_paths`** config for the HTTP exception listener and auto HTTP transactions (`IgnoredRequestPath`). Defaults reuse Beacon host infra exclusions (`/_profiler`, `/_wdt`, `/build`, `/assets`, `/health`) plus Chrome DevTools Appspecific probe `/.well-known/appspecific/com.chrome.devtools.json` (set `ignore_paths: []` to disable).
+
+### Changed
+
+- `auto_http_transaction` skip list is driven by `ignore_paths` (same defaults as before for profiler / WDT / health / build, plus `/assets` and the Chrome DevTools probe).
+- README / recipe note `ignore_paths` alongside `ignore_exceptions`.
+
 ## [1.6.7] - 2026-07-29
 
 ### Changed
@@ -365,7 +379,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Expanded documentation set for installation, configuration, usage, release, security, performance, Engram, and Spec Kit workflows.
 - Demo routes covering message capture, manual exception capture, listener-triggered exceptions, ignored exceptions, fingerprints, and runtime status.
 
-[Unreleased]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.7...HEAD
+[Unreleased]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.8...HEAD
+[1.6.8]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.7...v1.6.8
 [1.6.7]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.6...v1.6.7
 [1.6.6]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.5...v1.6.6
 [1.6.5]: https://github.com/nowo-tech/BeaconBundle/compare/v1.6.4...v1.6.5

demo/symfony8/config/reference.php

@@ -60,6 +60,13 @@ nowo_beacon:
         doctrine: false
         http_client: false
     ignore_exceptions: []
+    ignore_paths:
+        - '/_profiler'
+        - '/_wdt'
+        - '/build'
+        - '/assets'
+        - '/health'
+        - '/.well-known/appspecific/com.chrome.devtools.json'
     monolog_handler:
         enabled: false
         level: error
@@ -88,11 +95,12 @@ nowo_beacon:
 | `register_error_listener` | `true` | Registers the automatic `kernel.exception` listener. |
 | `register_console_listener` | `true` | Reports uncaught console command errors. |
 | `register_messenger_listener` | `true` | Reports Messenger `WorkerMessageFailedEvent` when the message will not retry (requires `symfony/messenger`). |
-| `auto_http_transaction` | `false` | Send a performance transaction for each main HTTP request (skips `/_profiler`, `/health`, `/build`). |
+| `auto_http_transaction` | `false` | Send a performance transaction for each main HTTP request (skips `ignore_paths`). |
 | `before_send` | `null` | Optional **service id** of an invokable `(array $event): ?array`. Return a mutated payload, or `null` to drop the send. If the hook throws, the event is dropped (fail soft). |
 | `instrumentation.doctrine` | `false` | When true and `doctrine/dbal` is installed, register a DBAL middleware that records `db.sql.query` spans and breadcrumbs (SQL literals scrubbed / truncated). |
 | `instrumentation.http_client` | `false` | When true, decorate `http_client` to record `http.client` spans and breadcrumbs. Beacon Envelope ingest URLs are skipped. |
 | `ignore_exceptions` | `[]` | List of exception FQCNs skipped by HTTP/console/Messenger automatic listeners. |
+| `ignore_paths` | `IgnoredRequestPath::DEFAULTS` | HTTP path prefixes skipped by the exception listener and auto HTTP transactions (trailing slashes ignored). Defaults: `/_profiler`, `/_wdt`, `/build`, `/assets`, `/health`, Chrome DevTools Appspecific probe — aligned with Symfony Beacon security/PWA/site-backup/setup exclusions. Replacing the list removes defaults; use `[]` to report every path. |
 | `monolog_handler.enabled` | `false` | Register `BeaconMonologHandler` and prepend it into `monolog.handlers` as `type: service` (requires `monolog/monolog` + MonologBundle). |
 | `monolog_handler.level` | `error` | Minimum Monolog level forwarded to Beacon. |
 
@@ -137,6 +145,7 @@ nowo_beacon:
 
 - Empty `dsn` means the bundle wires `NullBeaconClient`.
 - `ignore_exceptions` only affects the automatic listener. Manual `captureException()` calls still send unless your own code avoids them.
+- `ignore_paths` only affects the HTTP exception listener and `auto_http_transaction`. Console / Messenger listeners are unaffected.
 - `timeout` applies to the synchronous HTTP request path.
 - `verify_peer: false` also disables host verification in the underlying HTTP client and should stay limited to local dev.
 - Enabling `send.user` transmits account identifiers to your Beacon host; align with GDPR / privacy policy and legal pages on the Beacon UI.

docs/CHANGELOG.md

@@ -43,6 +43,7 @@
 - [Upgrading from 1.6.4 to 1.6.5](#upgrading-from-164-to-165)
 - [Upgrading from 1.6.5 to 1.6.6](#upgrading-from-165-to-166)
 - [Upgrading from 1.6.6 to 1.6.7](#upgrading-from-166-to-167)
+- [Upgrading from 1.6.7 to 1.6.8](#upgrading-from-167-to-168)
 
 ## First install -> 1.0.x
 
@@ -175,7 +176,7 @@ nowo_beacon:
 ### Behaviour
 
 - With default `register_messenger_listener: true`, final Messenger failures (no retry) are reported when `symfony/messenger` is installed. Disable if you do not want worker failures in Beacon.
-- `auto_http_transaction` stays **off** by default. Enable only if you want one transaction per main request (routes under `/_profiler`, `/_wdt`, `/health/`, `/build` are skipped).
+- `auto_http_transaction` stays **off** by default. Enable only if you want one transaction per main request (`ignore_paths` are skipped; defaults cover profiler / WDT / build / assets / health / Chrome DevTools).
 - `ignore_exceptions` also applies to the Messenger failure listener.
 
 ### Compatibility
@@ -319,3 +320,13 @@ Maintainer / demo tooling only. **No consumer API or config changes.**
 - Demo recipes invoke compose via the shell so a local `demo/symfony8/docker/` directory does not cause `make: docker: Permission denied`.
 - Monorepo `update-deps` Makefile includes are optional (`-include`) so a standalone clone / GitHub Actions checkout does not break `make`.
 
+## Upgrading from 1.6.7 to 1.6.8
+
+Backward compatible for typical apps; default noise filtering is slightly broader.
+
+- New optional config: `ignore_paths` (defaults listed in `CONFIGURATION.md` / `IgnoredRequestPath::DEFAULTS`).
+- The **HTTP exception listener** now skips those paths (previously only `auto_http_transaction` had a hard-coded skip list).
+- `auto_http_transaction` uses the same `ignore_paths` list (adds `/assets` and the Chrome DevTools Appspecific probe vs the old hard-coded set).
+- To report every path again: `ignore_paths: []`.
+- Replacing the list removes the defaults (same pattern as other array nodes).
+

docs/CONFIGURATION.md

@@ -175,7 +175,7 @@ nowo_beacon:
     auto_http_transaction: true
 ```
 
-Profiler, WDT, `/health/*`, and `/build*` paths are skipped. Prefer this for coarse request timing; use `captureTransaction()` for finer spans.
+Paths in `ignore_paths` are skipped (defaults: `/_profiler`, `/_wdt`, `/build`, `/assets`, `/health`, Chrome DevTools probe). Prefer this for coarse request timing; use `captureTransaction()` for finer spans.
 
 ## Monolog