v5.1.0

Bug Fixes

• core: fixed empty strings being kept as valid values in config (#3952)
• appsec: fixed reuse of requestOptions object (#3959)
• appsec: Fix WAF crash inside worker_threads

Improvements

• appsec: Appsec reporter now collects the x-amzn-trace-id header (#3984)
• iast: Added support for weak randomness vulnerability (#3960)
• iast: Ignore header vulnerabilities in cors headers (#3962)
• profiler: Added timelines env var, disabled timelines and CPU profiler on Windows (#3969)
• profiler: Disabled OOM monitoring by default on Windows (#3974)

v4.25.0

Bug Fixes

• core: fixed empty strings being kept as valid values in config (#3952)
• appsec: fixed reuse of requestOptions object (#3959)
• appsec: Fix WAF crash inside worker_threads

Improvements

• appsec: Appsec reporter now collects the x-amzn-trace-id header (#3984)
• iast: Added support for weak randomness vulnerability (#3960)
• iast: Ignore header vulnerabilities in cors headers (#3962)
• profiler: Added timelines env var, disabled timelines and CPU profiler on Windows (#3969)
• profiler: Disabled OOM monitoring by default on Windows (#3974)

v3.46.0

Bug Fixes

• core: fixed empty strings being kept as valid values in config (#3952)
• appsec: fixed reuse of requestOptions object (#3959)
• appsec: Fix WAF crash inside worker_threads

Improvements

• appsec: Appsec reporter now collects the x-amzn-trace-id header (#3984)
• iast: Added support for weak randomness vulnerability (#3960)
• iast: Ignore header vulnerabilities in cors headers (#3962)
• profiler: Added timelines env var, disabled timelines and CPU profiler on Windows (#3969)
• profiler: Disabled OOM monitoring by default on Windows (#3974)

v4.24.0

Features

• profiling: Add experimental CPU profiler (#3895)

Improvements

• profiling: GA Code hotspots and endpoint collection (#3940)

Bug Fixes

• core: Handle google-cloud-pubsub subscription closing (#2716)

v3.45.0

Features

• profiling: Add experimental CPU profiler (#3895)

Improvements

• profiling: GA Code hotspots and endpoint collection (#3940)

Bug Fixes

• core: Handle google-cloud-pubsub subscription closing (#2716)

v5.0.0

Breaking Changes

More information about the breaking changes from this release can be found in
the migration guide.

• core: drop support for Node 16 (#3905)
• core: fix TypeScript errors (#3912)

Features

• profiling: Add experimental CPU profiler (#3895)

Improvements

• profiling: GA Code hotspots and endpoint collection (#3940)

Bug Fixes

• core: Handle google-cloud-pubsub subscription closing (#2716)

v4.23.0

Features

• core: Add remote config support for custom tags (#3875)
• profiling: Add a process_id that contains process pid to profiles (#3911)
• core: Implement extended sampling (#3904)

Improvements

• core: Add instrumentation support for node:* specifiers (#3893)
• core: Fix instrumentation support for Fastify versions >= 4.23.0 (#3893)

Bug Fixes

• profiling: Fix compatibility with node < 14.18 (#3908)

v3.44.0

Features

• core: Add remote config support for custom tags (#3875)
• profiling: Add a process_id that contains process pid to profiles (#3911)
• core: Implement extended sampling (#3904)

Improvements

• core: Add instrumentation support for node:* specifiers (#3893)
• core: Fix instrumentation support for Fastify versions >= 4.23.0 (#3893)

Bug Fixes

• profiling: Fix compatibility with node < 14.18 (#3908)

v4.22.0

Bug Fixes

• pino: ignore pino error tests when node version is 21 (#3878)
• rhea: fix rhea memory leak concerning inFlightDeliveries (#3833)
• profiling: Fix recording times (#3891)
• core: fix memory leak of req and res objects due to setTimeout wrapping repeatedly (#3896)

Improvements

• appsec: Upgrade iast rewriter version to 2.2.2 (#3883)
• civisibility: Update repository url validation (#3876)
• core: flush custom metrics before process exit (#3842)
• nextjs: Default Error Tagging for Pages in Next.js (#3892)
• profiling: Add thread id labels to heap and wall profiles (#3888)

Features

• appsec: GraphQL Blocking (3819)
• appsec: API security sample rate via RC (#3868)
• appsec: Pass resolver address as ephemeral type (#3897)
• core: add support for configuring tracing client using remote configuration (#3395)

v3.43.0

Bug Fixes

• pino: ignore pino error tests when node version is 21 (#3878)
• rhea: fix rhea memory leak concerning inFlightDeliveries (#3833)
• profiling: Fix recording times (#3891)
• core: fix memory leak of req and res objects due to setTimeout wrapping repeatedly (#3896)

Improvements

• appsec: Upgrade iast rewriter version to 2.2.2 (#3883)
• civisibility: Update repository url validation (#3876)
• core: flush custom metrics before process exit (#3842)
• nextjs: Default Error Tagging for Pages in Next.js (#3892)
• profiling: Add thread id labels to heap and wall profiles (#3888)

Features

• appsec: GraphQL Blocking (3819)
• appsec: API security sample rate via RC (#3868)
• appsec: Pass resolver address as ephemeral type (#3897)
• core: add support for configuring tracing client using remote configuration (#3395)