v1.0.0-beta.1

1.0.0-beta.1 (2025-01-15)

See the migration guide at https://docs.arcjet.com/upgrading/sdk-migration

⚠ BREAKING CHANGES

• redact: Correctly handle urlencoded data when tokenizing characters (#2864)
• Correctly handle urlencoded data when tokenizing characters (#2863)
• protocol: Improve deprecation message on enum-like field usage (#2855)
• refactor wasm loading for analyze (#1832)

🚀 New Features

• Export more option types (#2752) (89a9f77), closes #2751
• support allow or deny config in validateEmail & deprecate block config (#2661) (890afcd), closes #1834

🪲 Bug Fixes

• Correctly handle urlencoded data when tokenizing characters (#2863) (fa93290)
• protocol: Improve deprecation message on enum-like field usage (#2855) (6512258)
• protocol: Include cookies and query fields on reports (#2777) (cff2e3a)
• redact: Correctly handle urlencoded data when tokenizing characters (#2864) (fbed883)

🏎️ Performance Improvements

• analyze: Compile WebAssembly upon module load (#2727) (489f1c6)

🧹 Miscellaneous Chores

• Deprecate Arcjet enum-like objects (#2684) (7d9ac4f), closes #2621
• examples: Add Auth.js chained middleware example using Nosecone (#2640) (d9774cc)
• examples: Restrict React to v18 in Next 14 example (#2778) (50cde21)
• protocol: Opt out of Buf & ConnectRPC v2 changes (#2473) (06b5b21)
• refactor wasm loading for analyze (#1832) (02e4435), closes #1448
• runtime: Replace Jest with Node test harness (#2565) (ec60fe2), closes #9
• Switch most test harnesses to node:test (#2479) (8a71bbc)

v1.0.0-alpha.34

1.0.0-alpha.34 (2024-12-03)

⚠ BREAKING CHANGES

• nosecone: Remove upgradeInsecureRequests default value (#2401)

🚀 New Features

• ip: Allow trusted proxies to exclude when looking for global IP (#2393) (58286b7)
• nosecone-next: Keep 'self' script-src in defaults (#2378) (13348c8)
• Support trusted proxy configuration on each adapter (#2394) (f9587d8), closes #2346

🪲 Bug Fixes

• nosecone: Remove upgradeInsecureRequests default value (#2401) (093dc53)

📝 Documentation

• Add nosecone section to root README (#2404) (4674fa4)

🧹 Miscellaneous Chores

• nosecone: Add JSDoc comments to NoseconeOptions (#2380) (53ec4eb)

v1.0.0-alpha.33

1.0.0-alpha.33 (2024-11-29)

⚠ BREAKING CHANGES

• nosecone-next: Remove strict-dynamic value in script-src directive (#2363)
• nosecone: Change return value to Headers (#2362)

🚀 New Features

• nosecone: Add withVercelToolbar utility function (#2364) (177d16d)
• show isSpoofed() in bot examples (#2375) (d9cab55)

🪲 Bug Fixes

• nosecone-next: Remove strict-dynamic value in script-src directive (#2363) (2bd8bff)
• nosecone: Change return value to Headers (#2362) (ff19af9)

v1.0.0-alpha.32

1.0.0-alpha.32 (2024-11-26)

⚠ BREAKING CHANGES

• Stop publishing TypeScript source files (#2326)

🚀 New Features

• check verification status (#2229) (3329fd7)

🪲 Bug Fixes

• nosecone-next: Apply the correct defaults based on env (#2311) (2bfaa79)
• Stop publishing TypeScript source files (#2326) (f8f6a2d), closes #1836

🧹 Miscellaneous Chores

• Update AI chat example to latest AI SDK v4 (#2313) (a3fd423), closes #2283
• Update example for Clerk v6 (#2312) (439c1d5)

v1.0.0-alpha.31

1.0.0-alpha.31 (2024-11-22)

🪲 Bug Fixes

• nosecone: Export overridden defaults from adapters (#2301) (e3f4686)

v1.0.0-alpha.30

1.0.0-alpha.30 (2024-11-20)

🪲 Bug Fixes

• nosecone-next: Avoid overriding original headers (#2284) (3fcd8b1)
• nosecone: Re-export default configuration from adapters (#2285) (8b19f65)

v1.0.0-alpha.29

1.0.0-alpha.29 (2024-11-19)

🚀 New Features

• Create nosecone package for creating secure headers (#2237) (1e8e73b)

🪲 Bug Fixes

• arcjet: Log error message when fingerprint cannot be built (#2139) (56e5319)
• Guard against incorrectly written local rules (#2191) (0885ccf)
• sveltekit: Load env from node:process (#2156) (346a350), closes #2154

🧹 Miscellaneous Chores

• Add initial contributing help (#2158) (d21b81e), closes #1122
• arcjet: Increase test coverage to 100% (#2157) (17f8a9a), closes #1802
• example: Allow swc compilers (#2280) (cb64f4a)
• ip: Update documentation for previous breaking changes (#2278) (cff3cc9), closes #2277
• logger: Remove unused getTimeLabel function (#2140) (73d94d5)
• Regenerate Wasm with updated dependencies (#2168) (90b8350)
• Regenerate Wasm with updated dependencies (#2258) (b82284b)
• Update root readme with all packages and new urls (#2169) (32f0572)

v1.0.0-alpha.28

1.0.0-alpha.28 (2024-10-23)

⚠ BREAKING CHANGES

• ip: Accept Request or IncomingMessage directly (#2018)
• ip: Exit early if platform-specific headers are missing IP (#2021)
• Ensure performance metrics are scoped to same call (#2019)
• Return ERROR decision when fingerprint cannot be generated (#1990)
• protocol: Remove received_at and decision fields from Report (#1988)
• analyze: improve sensitive info string token accuracy (#1962)
• Update Wasm with phone-number fix and tokenizer update (#1854)
• Remove match option from rate limit rules (#1815)

🚀 New Features

• Add Remix adapter (#1866) (32d6d41), closes #1313
• analyze: improve sensitive info string token accuracy (#1962) (abad1bd)
• ip: Accept Request or IncomingMessage directly (#2018) (1704da8), closes #1904
• ip: Add Vercel platform-specific IP header detection (#2022) (d886c76)
• nextjs: Support Next.js Server Actions (#1991) (07e68dc), closes #1200
• Use waitUntil for Report call if available (#1838) (2851021), closes #884

🪲 Bug Fixes

• arcjet: Ensure performance measurements are 1-to-1 and always captured (#1858) (4d29f9a)
• Ensure performance metrics are scoped to same call (#2019) (e9f869c), closes #1865
• ip: Exit early if platform-specific headers are missing IP (#2021) (1a13d9c)
• nestjs: Lookup request from GraphQL context in ArcjetGuard (#1857) (c0b2903), closes #1856
• Return ERROR decision when fingerprint cannot be generated (#1990) (618a1ee), closes #1801
• Update Wasm with phone-number fix and tokenizer update (#1854) (f94f078)

🧹 Miscellaneous Chores

• Add README links for new adapters (#1831) (81885d9), closes #1813
• analyze: Regenerate Wasm with updated dependencies (#2067) (f96994c)
• examples: Reorganize examples for clarity and decoupling from Next.js version (#2017) (8568bf2)
• examples: Various cleanup (#2066) (c626228)
• protocol: Remove received_at and decision fields from Report (#1988) (3da543e)
• Remove match option from rate limit rules (#1815) (853119d), closes #1810

v1.0.0-alpha.27

1.0.0-alpha.27 (2024-10-01)

⚠ BREAKING CHANGES

• Add options validation for all rules (#1785)
• Only produce 1 rule per constructor (#1783)

🚀 New Features

• Add Deno adapter (#1782) (fdfcaf3), closes #758
• Add NestJS adapter (#1776) (4e52453), closes #781

🪲 Bug Fixes

• protocol: Ensure relative imports have extensions (#1722) (73928c8), closes #1720

🧹 Miscellaneous Chores

• Add options validation for all rules (#1785) (c3a248e), closes #992
• analyze: Update well known bots (#1784) (52f1ee3)
• Only produce 1 rule per constructor (#1783) (8d79e63), closes #1397
• Update WebAssembly modules (#1721) (2dbb9eb)

v1.0.0-alpha.26

1.0.0-alpha.26 (2024-09-16)

🚀 New Features

• Implement bot detection categories (#1618) (540cfe8)

🧹 Miscellaneous Chores

• ci: Ignore eslint majors for our nestjs example (#1638) (16be215)
• ci: Increase our dependabot open PR limit (#1670) (5dee404)
• ci: Sort dependabot projects and add missing nestjs example (#1617) (4c0e77b)