env: Support MODE environment variable for isDevelopment detection (#3012) (f3a45a7)
Implement Astro integration (#2992) (a48eea8), closes #1075
nestjs: Allow NestJS v11 as peerDependency (#3042) (4a75963), closes #2921
redact: Pre-compile WebAssembly on module load (#3037) (c12bec5)

🪲 Bug Fixes

analyze: Always lowercase headers and iterate in insertion order (#2865) (a9af1e4)
arcjet: Ensure Characteristics are readonly type on protect signup options (#3013) (1f16a99)
protocol: Double timeout when email rule configured (#2934) (23f9a9e), closes #1697

🧹 Miscellaneous Chores

ci: Add dependabot for Astro example (#3068) (d4d8f82)
ci: Avoid upgrading Tailwind where it breaks things (#3081) (5c25abe)
ci: Restrict tailwind-merge where tailwind restricted (#3089) (a3437a5)
docs: Add a link to the Redact reference page (#3038) (6095b6a)
Refresh root & Next.js READMEs (#3066) (57a38d7)
rollup-config: Consolidate wasmToModule plugin (#3039) (c3b8e36)

1.0.0-beta.1

Diff

blaine-arcjet

published 1.0.0-beta.1 • last month

Changelog

Source

1.0.0-beta.1 (2025-01-15)

⚠ BREAKING CHANGES

redact: Correctly handle urlencoded data when tokenizing characters (#2864)
Correctly handle urlencoded data when tokenizing characters (#2863)
protocol: Improve deprecation message on enum-like field usage (#2855)
refactor wasm loading for analyze (#1832)

🚀 New Features

Export more option types (#2752) (89a9f77), closes #2751
support allow or deny config in validateEmail & deprecate block config (#2661) (890afcd), closes #1834

🪲 Bug Fixes

Correctly handle urlencoded data when tokenizing characters (#2863) (fa93290)
protocol: Improve deprecation message on enum-like field usage (#2855) (6512258)
protocol: Include cookies and query fields on reports (#2777) (cff2e3a)
redact: Correctly handle urlencoded data when tokenizing characters (#2864) (fbed883)

🏎️ Performance Improvements

analyze: Compile WebAssembly upon module load (#2727) (489f1c6)

🧹 Miscellaneous Chores

Deprecate Arcjet enum-like objects (#2684) (7d9ac4f), closes #2621
examples: Add Auth.js chained middleware example using Nosecone (#2640) (d9774cc)
examples: Restrict React to v18 in Next 14 example (#2778) (50cde21)
protocol: Opt out of Buf & ConnectRPC v2 changes (#2473) (06b5b21)
refactor wasm loading for analyze (#1832) (02e4435), closes #1448
runtime: Replace Jest with Node test harness (#2565) (ec60fe2), closes #9
Switch most test harnesses to node:test (#2479) (8a71bbc)

1.0.0-alpha.34

Diff

blaine-arcjet

published 1.0.0-alpha.34 • 3 months ago

Changelog

Source

1.0.0-alpha.34 (2024-12-03)

⚠ BREAKING CHANGES

nosecone: Remove upgradeInsecureRequests default value (#2401)

🚀 New Features

ip: Allow trusted proxies to exclude when looking for global IP (#2393) (58286b7)
nosecone-next: Keep 'self' script-src in defaults (#2378) (13348c8)
Support trusted proxy configuration on each adapter (#2394) (f9587d8), closes #2346

🪲 Bug Fixes

nosecone: Remove upgradeInsecureRequests default value (#2401) (093dc53)

📝 Documentation

Add nosecone section to root README (#2404) (4674fa4)

🧹 Miscellaneous Chores

nosecone: Add JSDoc comments to NoseconeOptions (#2380) (53ec4eb)

1.0.0-alpha.33

Diff

blaine-arcjet

published 1.0.0-alpha.33 • 3 months ago

Changelog

Source

1.0.0-alpha.33 (2024-11-29)

⚠ BREAKING CHANGES

nosecone-next: Remove strict-dynamic value in script-src directive (#2363)
nosecone: Change return value to Headers (#2362)

🚀 New Features

nosecone: Add withVercelToolbar utility function (#2364) (177d16d)
show isSpoofed() in bot examples (#2375) (d9cab55)

🪲 Bug Fixes

nosecone-next: Remove strict-dynamic value in script-src directive (#2363) (2bd8bff)
nosecone: Change return value to Headers (#2362) (ff19af9)

1.0.0-alpha.32

Diff

blaine-arcjet

published 1.0.0-alpha.32 • 3 months ago

Changelog

Source

1.0.0-alpha.32 (2024-11-26)

⚠ BREAKING CHANGES

Stop publishing TypeScript source files (#2326)

🚀 New Features

check verification status (#2229) (3329fd7)

🪲 Bug Fixes

nosecone-next: Apply the correct defaults based on env (#2311) (2bfaa79)
Stop publishing TypeScript source files (#2326) (f8f6a2d), closes #1836

🧹 Miscellaneous Chores

Update AI chat example to latest AI SDK v4 (#2313) (a3fd423), closes #2283
Update example for Clerk v6 (#2312) (439c1d5)

1.0.0-alpha.31

Diff

blaine-arcjet

published 1.0.0-alpha.31 • 3 months ago

Changelog

Source

1.0.0-alpha.31 (2024-11-22)

🪲 Bug Fixes

nosecone: Export overridden defaults from adapters (#2301) (e3f4686)

1.0.0-alpha.30

Diff

blaine-arcjet

published 1.0.0-alpha.30 • 3 months ago

Changelog

Source

1.0.0-alpha.30 (2024-11-20)

🪲 Bug Fixes

nosecone-next: Avoid overriding original headers (#2284) (3fcd8b1)
nosecone: Re-export default configuration from adapters (#2285) (8b19f65)

1.0.0-alpha.29

Diff

blaine-arcjet

published 1.0.0-alpha.29 • 3 months ago

Changelog

Source

1.0.0-alpha.29 (2024-11-19)

🚀 New Features

Create nosecone package for creating secure headers (#2237) (1e8e73b)

🪲 Bug Fixes

arcjet: Log error message when fingerprint cannot be built (#2139) (56e5319)
Guard against incorrectly written local rules (#2191) (0885ccf)
sveltekit: Load env from node:process (#2156) (346a350), closes #2154

🧹 Miscellaneous Chores

Add initial contributing help (#2158) (d21b81e), closes #1122
arcjet: Increase test coverage to 100% (#2157) (17f8a9a), closes #1802
example: Allow swc compilers (#2280) (cb64f4a)
ip: Update documentation for previous breaking changes (#2278) (cff3cc9), closes #2277
logger: Remove unused getTimeLabel function (#2140) (73d94d5)
Regenerate Wasm with updated dependencies (#2168) (90b8350)
Regenerate Wasm with updated dependencies (#2258) (b82284b)
Update root readme with all packages and new urls (#2169) (32f0572)

1.0.0-alpha.28

Diff

blaine-arcjet

published 1.0.0-alpha.28 • 4 months ago

Changelog

Source

1.0.0-alpha.28 (2024-10-23)

⚠ BREAKING CHANGES

ip: Accept Request or IncomingMessage directly (#2018)
ip: Exit early if platform-specific headers are missing IP (#2021)
Ensure performance metrics are scoped to same call (#2019)
Return ERROR decision when fingerprint cannot be generated (#1990)
protocol: Remove received_at and decision fields from Report (#1988)
analyze: improve sensitive info string token accuracy (#1962)
Update Wasm with phone-number fix and tokenizer update (#1854)
Remove match option from rate limit rules (#1815)

🚀 New Features

Add Remix adapter (#1866) (32d6d41), closes #1313
analyze: improve sensitive info string token accuracy (#1962) (abad1bd)
ip: Accept Request or IncomingMessage directly (#2018) (1704da8), closes #1904
ip: Add Vercel platform-specific IP header detection (#2022) (d886c76)
nextjs: Support Next.js Server Actions (#1991) (07e68dc), closes #1200
Use waitUntil for Report call if available (#1838) (2851021), closes #884

🪲 Bug Fixes

arcjet: Ensure performance measurements are 1-to-1 and always captured (#1858) (4d29f9a)
Ensure performance metrics are scoped to same call (#2019) (e9f869c), closes #1865
ip: Exit early if platform-specific headers are missing IP (#2021) (1a13d9c)
nestjs: Lookup request from GraphQL context in ArcjetGuard (#1857) (c0b2903), closes #1856
Return ERROR decision when fingerprint cannot be generated (#1990) (618a1ee), closes #1801
Update Wasm with phone-number fix and tokenizer update (#1854) (f94f078)

🧹 Miscellaneous Chores

Add README links for new adapters (#1831) (81885d9), closes #1813
analyze: Regenerate Wasm with updated dependencies (#2067) (f96994c)
examples: Reorganize examples for clarity and decoupling from Next.js version (#2017) (8568bf2)
examples: Various cleanup (#2066) (c626228)
protocol: Remove received_at and decision fields from Report (#1988) (3da543e)
Remove match option from rate limit rules (#1815) (853119d), closes #1810