Add analytics for the gradle plugin

[romtsn]

We could utilise sentry-java for that, so we can get:

• Automatic error monitoring
• Transactions for task execution
• Transactions for tracing instrumentation
• Check adoption via release health feature (?) (what will be a "user" in our case? a project? an org? a developer?)
• Send sentry log files and the failed artifacts as attachments

Some caveats:

• It should be an opt-in feature, because it potentially will slow down the builds.

[cortinico]

This was partially surfaced in the past here: #126

• It should be an opt-in feature, because it potentially will slow down the builds.

Agree. I'm actually more concerned of the potential security/privacy risks.

[romtsn]

Yea, I think we need to do our best here to make it anonymous/pseudononymous.

[marandaneto]

The SDK does not collect any PII by default tho, I'm not super concerned about that.

[philipphofmann]

Before doing this, we need to make sure that this is compliant with our Sentry policies; ask Jan and/or Armin.

[marandaneto]

@romtsn will talk to folks and figure out if this is something we'd like to do.

[romtsn]

javascript folks already do this for their bundler plugins https://github.com/getsentry/sentry-javascript-bundler-plugins, so most likely there's no problem to do this on our side as well. But we should double-check with Armin/legal as they had concerns in the past

[markushi]

Just talked with Steven about this topic, pretty much the same has been done for https://github.com/getsentry/sentry-javascript-bundler-plugins already, and it ran through legal as well.

make it opt out and PII stripped and good to go IMO

Luca/Lukas should have some more technical details about this topic.

[smeubank]

@adinauer fyi