1.0.0-beta.17 (2026-01-13)

⚠ BREAKING CHANGES

• add support for limits to web streams (#5589)
• arcjet: remove validateEmail block parameter (#5618)
• arcjet: improve types around custom entities (#5584)

🚀 New Features

• add support for limits to web streams (#5589) (effef3b)
• body: make limit optional (#5601) (b870932)

🪲 Bug Fixes

• arcjet: make getBody result required, use errors for problems (#5608) (7ed47a9)
• body: handle NaN in options (#5599) (37e0497)
• body: improve error messages (#5607) (a41c37f)
• bun: fail explicitly when body already read (#5579) (67b6400)

🏎️ Performance Improvements

• body: exit early if expected size exceeds limit (#5600) (3900caf)

📝 Documentation

• link to intro pages (#5597) (15b0510)
• link to list of sdks (#5598) (a5041d1)
• update links and lists in monorepo readme (#5596) (43de924)

🧹 Miscellaneous Chores

• add publish workflow (#5578) (8261c10)
• arcjet: remove validateEmail block parameter (#5618) (29788d0)

⌨️ Code Refactoring

• arcjet: improve types around custom entities (#5584) (f6951b7)

🔨 Build System

• examples: add @arcjet/body as a bun workspace entry (#5621) (2ba0305)
• only test built JavaScript files (#5581) (9770281)
• remove --dry-run in publish.yml (#5620) (9576a0b)

✅ Continuous Integration

• Add stub workflow to validate deployment environment (#5593) (32b8568)

1.0.0-beta.16 (2026-01-06)

⚠ BREAKING CHANGES

• env: remove unused apiKey utility function (#5454)

🚀 New Features

• astro: export ArcjetOptions type (#5583) (5bdc766)
• sync lists of env variables (#5456) (dfa9fd2)

🪲 Bug Fixes

• bun, deno: do not read from process.env (#5458) (e90d277)

🧹 Miscellaneous Chores

• env: remove unused apiKey utility function (#5454) (059c226)
• regenerate WebAssembly (#5526) (c97076b)
• Update WebAssembly for dependency upgrades (c7b4d7e)

📚 Tests

• add some tests for reading the request body (#5519) (b370ceb)

🔨 Build System

• type check all TypeScript files (#5582) (17769ee)
• update allowed-endpoints for step security (#5588) (960bdc4)

✅ Continuous Integration

• Allow release-please to run for 2 minutes (#5498) (d1cbac6)
• fix trunk hanging (#5467) (9338402)

1.0.0-beta.15 (2025-11-07)

⚠ BREAKING CHANGES

• handle phone numbers with paren groups while restricting groups (#5362)

🚀 New Features

• add x-arcjet-ip header in development (#5397) (b40da4f)
• ip: support cidr strings in proxies (#5394) (adf20ea)
• support firebase platform (#5392) (ca46d50)

🪲 Bug Fixes

• handle phone numbers with paren groups while restricting groups (#5362) (49658da)

1.0.0-beta.14 (2025-11-04)

⚠ BREAKING CHANGES

• drop Node.js 18 (#5364)

🧹 Miscellaneous Chores

• drop Node.js 18 (#5364) (9e4db59)

📚 Tests

• redact-wasm: add some end to end tests (#5309) (ee1b386), closes #5352

🔨 Build System

• deps-dev: bump vite from 6.3.6 to 6.4.1 in /examples/remix-express (#5353) (c2ce6a5)
• deps-dev: bump vite from 7.1.5 to 7.1.11 in /examples/react-router-middleware (#5313) (5ad6983)
• deps: bump better-auth and @better-auth/cli in /examples/nextjs-better-auth (#5287) (87b370c)
• deps: bump next-auth from 4.24.11 to 4.24.12 in /examples/nextjs-14-nextauth-4 (#5344) (d8415f4)
• deps: bump next-auth from 5.0.0-beta.29 to 5.0.0-beta.30 in /examples/nextjs-authjs-nosecone (#5343) (2c4c90b)
• deps: bump tar from 7.5.1 to 7.5.2 in /examples/nuxt (#5349) (66a7b80)
• deps: bump vite from 7.1.7 to 7.1.12 in /examples/nuxt (#5361) (d10b635)
• remove tsconfig from .release-please-manifest (#5274) (6fb42e6)
• remove unused env variable (#5304) (bfde88a)

1.0.0-beta.13 (2025-10-07)

🚀 New Features

• add @arcjet/nuxt (#5243) (c40b5f0)
• protocol: add NUXT to ArcjetStack (#5242) (a386cf0)

🪲 Bug Fixes

• fastify: better protocol detection, minimal request interface (#5270) (51d3bdb)
• support ESM types in dependencies (#5269) (ef67a15)

🧹 Miscellaneous Chores

• deps-dev: bump tar-fs from 2.1.3 to 2.1.4 in /examples/remix-express (#5245) (421ef10)
• deps: bump axios from 1.8.2 to 1.12.2 in /examples/nextjs-permit (#5247) (ad5fe70)
• deps: bump axios from 1.8.3 to 1.12.2 in /examples/gatsby-rate-limit (#5255) (139509f)
• deps: bump tar-fs from 3.1.0 to 3.1.1 in /examples/gatsby-rate-limit (#5215) (dda4825)
• deps: bump vite from 6.3.4 to 6.3.6 in /examples/astro-integration (#5256) (ca2b8eb)

📚 Tests

• react-router: fix tests on Node 24.9.0 (#5227) (420413b)

1.0.0-beta.12 (2025-09-22)

🚀 New Features

• add React Router integration (#5199) (498292e)
• analye-wasm, redact-wasm: ignore dashes in card numbers (#5210) (5c414d6)
• arcjet: add IP-related fields to filters (#5170) (d0aeb84)
• filters: add limit to 10 expressions, 1024 bytes (#5212) (502288a)
• stable-hash, transport: support workerd (#5077) (13c90d6)

🪲 Bug Fixes

• arcjet: show error about incorrect characteristics in logs (#5078) (9839c9c)
• astro: fix types, zod validation (#5052) (ea82f8f)
• examples: add styles to remix-express (#5115) (783db87)

📝 Documentation

• add JSDocs examples to filter rule (#5208) (c4e506a)

🧹 Miscellaneous Chores

• ci: Remove dependabot groups on examples and apply cooldown to direct deps (#5202) (9058a24)
• examples: remove experimental.nodeMiddleware from example (#5124) (408a26e)

📚 Tests

• astro: add tests (#5069) (e6d9980)

1.0.0-beta.11 (2025-09-03)

⚠ BREAKING CHANGES

• redact: improve types around custom entities (#4883)
• protocol: remove enum-like objects (#5053)
• env: remove support for explicit port on orb (#4988)

🚀 New Features

• add filter rule (#4802) (40953e1)
• env: Support trailing slashes on ARCJET_BASE_URL (#5035) (db1a4ac)
• ip: expose Cidr type (#4877) (96674f4)

🪲 Bug Fixes

• env: remove support for explicit port on orb (#4988) (3e601d7)
• protocol: Remove change that disjoined IP details and assertions (#4859) (#4913) (3304e9c)
• types: remove need for dom.iterable, dom, lib (#5047) (fba8564)

📝 Documentation

• add info on derivative works to license sections (#4654) (d427c39)
• add JSDocs to exposed API in 10 utilities (#4741) (f836ea2)
• analyze-wasm: add JSDocs (#4996) (e7a4ba6)
• arcjet: add JSDocs (#4997) (de57d5e)
• astro: add JSDocs (#5015) (131e781)
• bun: add JSDocs (#5018) (a9e946a)
• deno: add JSDocs (#5031) (18a2700)
• examples: remove unneeded port from steps (#4987) (a908b16)
• fastify: refactor JSDocs (#5032) (9c7405f)
• logger: add JSDocs (#4839) (107c145)
• nest: add JSDocs (#5034) (0ff6b3f)
• next: refactor JSDocs (#5038) (fc61a27)
• node: add JSDocs (#5039) (309738a)
• nosecone-next: add JSDocs (#4841) (689ea3c)
• nosecone-sveltekit: add JSDocs (#4842) (de708af)
• nosecone: add derivative works to readme (#4854) (73f2bcb)
• nosecone: add JSDocs (#4840) (ead53e5)
• protocol: add JSDocs (#4851) (c1021e9)
• readme: fix list of example apps (#4891) (36ea1ca)
• readme: fix list of quick start guides (#4890) (e90d6e4)
• redact-wasm: add JSDocs (#4844) (e187ff8)
• redact: add JSDocs (#4843) (b6b14bb)
• remix: add JSDocs (#5049) (4a9efcf)
• rollup-config: add JSDocs (#4845) (3b5b477)
• runtime: add JSDocs (#4846) (a740694)
• sprintf: add JSDocs (#4847) (a5b5084)
• sprintf: add JSDocs (#4848) (d9b0adb)
• stable-hash: add derivative work to readme (#4858) (b693f2b)
• sveltekit: add JSDocs (#5050) (8077f9c)
• transport: add JSDocs (#4849) (a59390b)

🧹 Miscellaneous Chores

• decorate: add type errors for invalid values (#4865) (0f73483)
• example: Update Gatsby overrides (#5036) (fd0b115)
• headers: expose named export, deprecate default (#4860) (8d716b9)
• ip: expose named export, deprecate default (#4876) (fcb83a3)
• logger: rename LoggerOptions to Options (#4874) (78962de)
• normalize package-lock.json (#4794) (e17962b)
• nosecone-next: expose named export, deprecate default (#4879) (605e647)
• nosecone-sveltekit: expose named export, deprecate default (#4880) (d0e9aaf)
• nosecone: expose Options, deprecate NoseconeOptions (#4855) (c504315)
• nosecone: expose named export, deprecate default (#4878) (e7607de)
• protocol: add hasAsn, deprecate hasASN (#4889) (4990e80)
• protocol: remove enum-like objects (#5053) (cc76e1c)
• sprintf: expose named export, deprecate default ([#4875](https:...

1.0.0-beta.10 (2025-08-04)

⚠ BREAKING CHANGES

• remove arbitrary base url from env in dev (#4755)

🪲 Bug Fixes

• ip: support readonly arrays, null, and exact optional props (#4695) (9c0b93a)
• remove arbitrary base url from env in dev (#4755) (49de60e)
• sveltekit: read from $env, not process.env (#4754) (5a87f0d)

📝 Documentation

• add uniform install section to readmes (#4633) (709ff1e)
• add uniform license section to readmes (#4634) (af1c322)
• add uniform use section to readmes (#4655) (ac27256)
• fastify: mention quick start example in readme (#4724) (5df48d8)

🧹 Miscellaneous Chores

• bindings: regenerate WebAssembly bindings (#4600) (4377b20)
• fix unused import in tests (#4588) (1a9bdb1)

⌨️ Code Refactoring

• sort packages in release please config (#4589) (80ef9eb)
• tsconfig: clean base config (#4590) (160ff98)

📚 Tests

• add tests for public interface (#4587) (f7aabec)
• add tests for unsupported headers per platform (#4694) (8de2603)
• clean ip tests (#4632) (aea416a)

🔨 Build System

• examples: add bun, deno examples (#4693) (4e73f95)
• examples: add missing examples (#4721) (4cffef9)
• examples: add strict type checking (#4666) (7b3f4d0)
• examples: simplify reusable examples (#4692) (ef12202)

✅ Continuous Integration

• add githubusercontent to examples (#4598) (1109272)

1.0.0-beta.9 (2025-07-09)

🚀 New Features

• add Fastify integration (#4538) (d5922e4)
• protocol: add Fastify stack (#4570) (538818d)

🪲 Bug Fixes

• bun: rely on connect-web to communicate from Bun runtime (#4523) (c9b26b0)

📝 Documentation

• add compatibility section (#4517) (506da27)
• add relevant links to each package readme (#4429) (2653ab0)

🧹 Miscellaneous Chores

• add keywords to package.jsons (#4408) (4f09478)
• arcjet: reduce timeouts and other transport issues to info log (#4411) (c148bab)
• astro: add temporary warning message for fully static sites (#4278) (6d093be)
• astro: increase minimum peerDependency (#4432) (a0453e2), closes #3094
• ensure all sample code checking .isDenied() returns error response. (#4552) (8fc2d2d)
• example: fix typo in svelte example (#4518) (6b72298)
• fix jco name in dependabot (#4371) (809fe76)
• fix missing file extension in test (#4407) (b694dad)
• fix Rollup on Node 24 (#4406) (1853b1a)
• improve Astro SDK description (#4491) (00482c5)
• remove expect, references to jest (#4415) (2c44c39)

⌨️ Code Refactoring

• clean files fields in package.jsons (#4441) (fd7913b)
• remove unneeded nbsp with regular space (#4503) (274114d)
• rename use of deprecated method name (#4504) (2b30a4d)

📚 Tests

• add actual tests for reasons (#4516) (768f85e)
• add tests for analyze (#4564) (7ef59bb)
• clean cache tests (#4472) (92b7335)
• clean protocol tests (#4479) (c67d517)
• rename confusing test cases (#4515) (fe20b6d)

🔨 Build System

• add separate core, coverage tests (#4480) (61c2c50)

✅ Continuous Integration

• add Node.js 22, 24 (#4414) (0fa6743)

1.0.0-beta.8 (2025-05-28)

⚠ BREAKING CHANGES

• arcjet: Require every rule to have a validate & protect function (#4204)

🚀 New Features

• arcjet: Require every rule to have a validate & protect function (#4204) (c5ee233)
• arcjet: Segment cache entries by rule (#4191) (2f3c8a8), closes #213
• protocol: Add fingerprints to rule results (#4190) (143bf2a)

🪲 Bug Fixes

• arcjet: Default to client characteristics if not specified on rule (#4209) (e4794da), closes #4203

🧹 Miscellaneous Chores

• Output full logs when turbo runs (#4226) (2ba76ec)
• Remove reviewers config (#4103) (778afa9)
• stable-hash: Change describe usage to test usage (#4066) (7335e8b)