v1.0.0-beta.8

1.0.0-beta.8 (2025-05-28)

⚠ BREAKING CHANGES

• arcjet: Require every rule to have a validate & protect function (#4204)

🚀 New Features

• arcjet: Require every rule to have a validate & protect function (#4204) (c5ee233)
• arcjet: Segment cache entries by rule (#4191) (2f3c8a8), closes #213
• protocol: Add fingerprints to rule results (#4190) (143bf2a)

🪲 Bug Fixes

• arcjet: Default to client characteristics if not specified on rule (#4209) (e4794da), closes #4203

🧹 Miscellaneous Chores

• Output full logs when turbo runs (#4226) (2ba76ec)
• Remove reviewers config (#4103) (778afa9)
• stable-hash: Change describe usage to test usage (#4066) (7335e8b)

v1.0.0-beta.7

1.0.0-beta.7 (2025-05-06)

🚀 New Features

• protocol: Support identifier and version on rules (#4027) (37cd996)

🪲 Bug Fixes

• arcjet-node: Ensure process.env.RENDER is surfaced (#3969) (18f7383), closes #3899
• protocol: Ensure sensitiveInfo rule sends mode (#4026) (3ce22ed)

🧹 Miscellaneous Chores

• Add note about signed commits (#3958) (c76ae28)
• ci: Add permissions to each job (#3976) (ce55cd7)
• Document devcontainer setup (cf0ccd6)
• protocol: Increase code coverage on ArcjetStackToProtocol (#4025) (6d89564)

v1.0.0-beta.6

1.0.0-beta.6 (2025-04-17)

🚀 New Features

• add plaintext param to custom redact (#3873) (dcff4a6)
• Support Render deployments (#3904) (b586318), closes #3899

🪲 Bug Fixes

• Ensure local rules return DRY_RUN state in dry run mode (#3820) (ab9e3e5), closes #3818
• Only call decide endpoint when a local rule is in dry run mode (#3822) (0530c73), closes #3821
• runtime: Avoid warning during Edge Runtime compilation (#3905) (b156f14), closes #3876

v1.0.0-beta.5

1.0.0-beta.5 (2025-03-27)

🚀 New Features

• Add more detected bots (#3689) (0bf3260)
• Support CIDR strings as proxies (#3577) (2964ca7), closes #2402

🧹 Miscellaneous Chores

• ci: Request reviewers as the JS SDK team (#3712) (86aae5d)

v1.0.0-beta.4

1.0.0-beta.4 (2025-03-14)

⚠ BREAKING CHANGES

• Upgrade packages to eslint 9 (#3531)

deps

• Upgrade packages to eslint 9 (#3531) (84826b5), closes #539

🚀 New Features

• regenerate webassembly with new bots (#3570) (9db5e03)

🪲 Bug Fixes

• arcjet-node: Wrap process.env access with a getter object (#3559) (134588b)
• transport: Add direct dependency on buf peerDependency (#3558) (1bcc07d)

🧹 Miscellaneous Chores

• analyze-wasm: Exclude TypeScript files (#3533) (82e78b9)
• examples: Enable nodejs middleware and log with pino logger (#3528) (ee6d039), closes #3374
• Only log development mode IP address warning once (#3527) (36e0596), closes #1781

v1.0.0-beta.3

1.0.0-beta.3 (2025-03-05)

🚀 New Features

• Add @arcjet/inspect package with utilities to inspect decisions (#3455) (9b8db53)
• analyze: Add Hydrozen monitoring bot (#3132) (211dbd0)

🪲 Bug Fixes

• Include turbo plugin correctly (#3451) (21da4d3)
• transport: Add connect as a direct dependency to satisfy peerDep (#3416) (96c7a48)

📝 Documentation

• arcjet/arcjet-docs#356 (0514251)

🧹 Miscellaneous Chores

• Change doc comments key examples (#3465) (6389563)
• ci: Enable Bun Dependabot ecosystem (#3190) (f01f4c2)
• Disable dependabot for bun examples (#3447) (1ce1a2c)
• examples: Next.js + Better Auth (#2750) (0514251)
• Improved doc comments (#3377) (dfb8445)
• regen wasm with bot improvements (#3378) (b882835)
• Regenerate analyze & redact WebAssembly files (#3404) (97df114)
• Regenerate jco bindings (#3098) (8268d83)
• Restrict jco in dependabot config (#3446) (e7c8a65)
• Update trunk, linters, and allowed workflow endpoints (#3097) (92dc38b)

✅ Continuous Integration

• Run semgrep action on ubuntu-latest (#3448) (ea3678d)

v1.0.0-beta.2

1.0.0-beta.2 (2025-02-04)

🚀 New Features

• env: Support MODE environment variable for isDevelopment detection (#3012) (f3a45a7)
• Implement Astro integration (#2992) (a48eea8), closes #1075
• nestjs: Allow NestJS v11 as peerDependency (#3042) (4a75963), closes #2921
• redact: Pre-compile WebAssembly on module load (#3037) (c12bec5)

🪲 Bug Fixes

• analyze: Always lowercase headers and iterate in insertion order (#2865) (a9af1e4)
• arcjet: Ensure Characteristics are readonly type on protect signup options (#3013) (1f16a99)
• protocol: Double timeout when email rule configured (#2934) (23f9a9e), closes #1697

🧹 Miscellaneous Chores

• ci: Add dependabot for Astro example (#3068) (d4d8f82)
• ci: Avoid upgrading Tailwind where it breaks things (#3081) (5c25abe)
• ci: Restrict tailwind-merge where tailwind restricted (#3089) (a3437a5)
• docs: Add a link to the Redact reference page (#3038) (6095b6a)
• Refresh root & Next.js READMEs (#3066) (57a38d7)
• rollup-config: Consolidate wasmToModule plugin (#3039) (c3b8e36)

v1.0.0-beta.1

1.0.0-beta.1 (2025-01-15)

See the migration guide at https://docs.arcjet.com/upgrading/sdk-migration

⚠ BREAKING CHANGES

• redact: Correctly handle urlencoded data when tokenizing characters (#2864)
• Correctly handle urlencoded data when tokenizing characters (#2863)
• protocol: Improve deprecation message on enum-like field usage (#2855)
• refactor wasm loading for analyze (#1832)

🚀 New Features

• Export more option types (#2752) (89a9f77), closes #2751
• support allow or deny config in validateEmail & deprecate block config (#2661) (890afcd), closes #1834

🪲 Bug Fixes

• Correctly handle urlencoded data when tokenizing characters (#2863) (fa93290)
• protocol: Improve deprecation message on enum-like field usage (#2855) (6512258)
• protocol: Include cookies and query fields on reports (#2777) (cff2e3a)
• redact: Correctly handle urlencoded data when tokenizing characters (#2864) (fbed883)

🏎️ Performance Improvements

• analyze: Compile WebAssembly upon module load (#2727) (489f1c6)

🧹 Miscellaneous Chores

• Deprecate Arcjet enum-like objects (#2684) (7d9ac4f), closes #2621
• examples: Add Auth.js chained middleware example using Nosecone (#2640) (d9774cc)
• examples: Restrict React to v18 in Next 14 example (#2778) (50cde21)
• protocol: Opt out of Buf & ConnectRPC v2 changes (#2473) (06b5b21)
• refactor wasm loading for analyze (#1832) (02e4435), closes #1448
• runtime: Replace Jest with Node test harness (#2565) (ec60fe2), closes #9
• Switch most test harnesses to node:test (#2479) (8a71bbc)

v1.0.0-alpha.34

1.0.0-alpha.34 (2024-12-03)

⚠ BREAKING CHANGES

• nosecone: Remove upgradeInsecureRequests default value (#2401)

🚀 New Features

• ip: Allow trusted proxies to exclude when looking for global IP (#2393) (58286b7)
• nosecone-next: Keep 'self' script-src in defaults (#2378) (13348c8)
• Support trusted proxy configuration on each adapter (#2394) (f9587d8), closes #2346

🪲 Bug Fixes

• nosecone: Remove upgradeInsecureRequests default value (#2401) (093dc53)

📝 Documentation

• Add nosecone section to root README (#2404) (4674fa4)

🧹 Miscellaneous Chores

• nosecone: Add JSDoc comments to NoseconeOptions (#2380) (53ec4eb)

v1.0.0-alpha.33

1.0.0-alpha.33 (2024-11-29)

⚠ BREAKING CHANGES

• nosecone-next: Remove strict-dynamic value in script-src directive (#2363)
• nosecone: Change return value to Headers (#2362)

🚀 New Features

• nosecone: Add withVercelToolbar utility function (#2364) (177d16d)
• show isSpoofed() in bot examples (#2375) (d9cab55)

🪲 Bug Fixes

• nosecone-next: Remove strict-dynamic value in script-src directive (#2363) (2bd8bff)
• nosecone: Change return value to Headers (#2362) (ff19af9)