Skip to content

Release/3.4.3 #2747

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hectorhdzg merged 2 commits into from
Jul 2, 2026
Merged

Release/3.4.3 #2747

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b97a2b4
Fix npm audit issues via dependency overrides
hectorhdzg Jul 1, 2026
64ff75d
[Release] Increase version to 3.4.3
hectorhdzg Jul 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions AISKU/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ See [Breaking Changes](https://microsoft.github.io/ApplicationInsights-JS/upgrad
| Version | Full Size | Raw Minified | GZip Size
|---------|-----------|--------------|-------------
| [<nightly3>](https://github.com/microsoft/ApplicationInsights-JS/tree/main/AISKU) | [![full size size](https://js.monitor.azure.com/nightly/ai.3-nightly3.js.svg)](https://js.monitor.azure.com/nightly/ai.3-nightly3.js.svg)| ![minified size size](https://js.monitor.azure.com/nightly/ai.3-nightly3.min.js.svg) | ![gzip size](https://js.monitor.azure.com/nightly/ai.3-nightly3.min.js.gzip.svg)
| 3.4.3: | [![full size size](https://js.monitor.azure.com/scripts/b/ai.3.4.3.js.svg)](https://js.monitor.azure.com/scripts/b/ai.3.4.3.js.svg)| ![minified size size](https://js.monitor.azure.com/scripts/b/ai.3.4.3.min.js.svg) | ![gzip size](https://js.monitor.azure.com/scripts/b/ai.3.4.3.min.js.gzip.svg)
| 3.4.2: | [![full size size](https://js.monitor.azure.com/scripts/b/ai.3.4.2.js.svg)](https://js.monitor.azure.com/scripts/b/ai.3.4.2.js.svg)| ![minified size size](https://js.monitor.azure.com/scripts/b/ai.3.4.2.min.js.svg) | ![gzip size](https://js.monitor.azure.com/scripts/b/ai.3.4.2.min.js.gzip.svg)
| 3.4.1: | [![full size size](https://js.monitor.azure.com/scripts/b/ai.3.4.1.js.svg)](https://js.monitor.azure.com/scripts/b/ai.3.4.1.js.svg)| ![minified size size](https://js.monitor.azure.com/scripts/b/ai.3.4.1.min.js.svg) | ![gzip size](https://js.monitor.azure.com/scripts/b/ai.3.4.1.min.js.gzip.svg)
| 3.4.0-beta: | [![full size size](https://js.monitor.azure.com/scripts/b/ai.3.4.0-beta.js.svg)](https://js.monitor.azure.com/scripts/b/ai.3.4.0-beta.js.svg)| ![minified size size](https://js.monitor.azure.com/scripts/b/ai.3.4.0-beta.min.js.svg) | ![gzip size](https://js.monitor.azure.com/scripts/b/ai.3.3.11.min.js.gzip.svg)
Expand Down
2 changes: 1 addition & 1 deletion AISKU/Tests/Perf/src/AISKUPerf.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ export class AppInsightsInitPerfTestClass {
* should update version after new release
* version with doperf(): after 2.5.6
* */
var defaultVer = "3.4.2";
var defaultVer = "3.4.3";
this.version = ver? ver:this._getQueryParameterVersion(defaultVer);
this.perfEventsBuffer = [];
this.perfEventWaitBuffer = [];
Expand Down
2 changes: 1 addition & 1 deletion AISKU/Tests/Unit/src/AISKUSize.Tests.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ export class AISKUSizeCheck extends AITestClass {
private readonly MAX_BUNDLE_DEFLATE_SIZE = 71;
private readonly rawFilePath = "../dist/es5/applicationinsights-web.min.js";
// Automatically updated by version scripts
private readonly currentVer = "3.4.2";
private readonly currentVer = "3.4.3";
private readonly prodFilePath = `../browser/es5/ai.${this.currentVer[0]}.min.js`;

public testInitialize() {
Expand Down
2 changes: 1 addition & 1 deletion AISKU/Tests/Unit/src/CdnPackaging.tests.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ const enum CdnFormat {

export class CdnPackagingChecks extends AITestClass {
// Automatically updated by version scripts
private readonly currentVer = "3.4.2";
private readonly currentVer = "3.4.3";

public testInitialize() {
}
Expand Down
6 changes: 3 additions & 3 deletions AISKU/Tests/es6-module-type-check/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"name": "@microsoft/applicationinsights-test-module-type-check",
"author": "Microsoft Application Insights Team and Contributors",
"version": "3.4.2",
"version": "3.4.3",
"description": "Microsoft Application Insights ES6 Module and Type check Example",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"keywords": [
Expand Down Expand Up @@ -32,7 +32,7 @@
"tslib": ">= 1.0.0"
},
"dependencies": {
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-web": "3.4.2"
"@microsoft/applicationinsights-core-js": "3.4.3",
"@microsoft/applicationinsights-web": "3.4.3"
}
}
16 changes: 8 additions & 8 deletions AISKU/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/applicationinsights-web",
"version": "3.4.2",
"version": "3.4.3",
"description": "Microsoft Application Insights JavaScript SDK - Web",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"author": "Microsoft Application Insights Team",
Expand Down Expand Up @@ -32,7 +32,7 @@
},
"devDependencies": {
"@microsoft/ai-test-framework": "0.0.1",
"@microsoft/applicationinsights-offlinechannel-js": "0.4.2",
"@microsoft/applicationinsights-offlinechannel-js": "0.4.3",
"@microsoft/applicationinsights-rollup-plugin-uglify3-js": "1.0.0",
"@microsoft/applicationinsights-rollup-es5": "1.0.2",
"sinon": "^7.3.1",
Expand Down Expand Up @@ -71,12 +71,12 @@
"dependencies": {
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/applicationinsights-analytics-js": "3.4.2",
"@microsoft/applicationinsights-channel-js": "3.4.2",
"@microsoft/applicationinsights-cfgsync-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-dependencies-js": "3.4.2",
"@microsoft/applicationinsights-properties-js": "3.4.2",
"@microsoft/applicationinsights-analytics-js": "3.4.3",
"@microsoft/applicationinsights-channel-js": "3.4.3",
"@microsoft/applicationinsights-cfgsync-js": "3.4.3",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@microsoft/applicationinsights-dependencies-js": "3.4.3",
"@microsoft/applicationinsights-properties-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
2 changes: 1 addition & 1 deletion AISKULight/Tests/Unit/src/AISKULightSize.Tests.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ export class AISKULightSizeCheck extends AITestClass {
private readonly MAX_RAW_DEFLATE_SIZE = 44;
private readonly MAX_BUNDLE_DEFLATE_SIZE = 44;
private readonly rawFilePath = "../dist/es5/applicationinsights-web-basic.min.js";
private readonly currentVer = "3.4.2";
private readonly currentVer = "3.4.3";
private readonly prodFilePath = `../browser/es5/aib.${this.currentVer[0]}.min.js`;

public testInitialize() {
Expand Down
6 changes: 3 additions & 3 deletions AISKULight/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/applicationinsights-web-basic",
"version": "3.4.2",
"version": "3.4.3",
"description": "Microsoft Application Insights JavaScript SDK - Web Basic",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"author": "Microsoft Application Insights Team",
Expand Down Expand Up @@ -65,8 +65,8 @@
"dependencies": {
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/applicationinsights-channel-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-channel-js": "3.4.3",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
21 changes: 21 additions & 0 deletions RELEASES.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,27 @@

<!-- ## Unreleased Changes -->

## 3.4.3 (July 2nd, 2026)

This is a maintenance release for the 3.4.x version line adding a new SDK statistics feature, a PostChannel reliability fix, and dependency security hardening. The `@microsoft/1ds-post-js` channel is numbered 4.4.3 and requires v3.4.3.

### Significant Changes (since 3.4.2)

- **Customer SDK Stats**: Added a new `SdkStats` feature that periodically collects internal SDK usage/health statistics. It is enabled by default and can be disabled (or explicitly configured) via the `featureOptIn` configuration (e.g. `featureOptIn: { SdkStats: { mode: FeatureOptInMode.disable } }`); the collection interval defaults to 15 minutes (`sdkStats.int`).

- **PostChannel Auto-Flush Stall Fix**: Fixed a permanent stall in `@microsoft/1ds-post-js` where, under sustained intermittent send failures (e.g. a load balancer returning occasional 503s), auto flush could wedge behind the `flush()` wait-for-idle timer and permanently stop draining the in-memory queue — causing telemetry to be silently dropped as `QueueFull` until the process was restarted. Auto flush is now fire-and-forget and no longer parks the scheduler waiting for the manager to become completely idle.

- **Dependency Security Hardening**: Pinned `tar` to `>=7.5.16` to remediate CVE-2026-53655 and resolved the remaining `npm audit` findings in build tooling via dependency overrides (`js-yaml`, `yaml`, `markdown-it`, `linkify-it`). These are build/tooling changes and do not affect the published runtime packages.

### Changelog

- #2746 Fix PostChannel auto-flush permanent stall under sustained intermittent send failures
- #2745 fix(security): pin tar >=7.5.16 to remediate CVE-2026-53655
- #2707 Enable Customer SDK Stats
- Resolve remaining npm audit findings via dependency overrides (js-yaml, yaml, markdown-it, linkify-it)

**Full Changelog**: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.2...3.4.3

## 3.4.2 (June 18th, 2026)

This is a maintenance release for the 3.4.x version line containing security hardening, bug fixes, build tooling improvements, and CI updates. The `@microsoft/1ds-post-js` channel is numbered 4.4.2 and requires v3.4.2.
Expand Down
4 changes: 2 additions & 2 deletions channels/1ds-post-js/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/1ds-post-js",
"version": "4.4.2",
"version": "4.4.3",
"description": "Microsoft Application Insights JavaScript SDK - 1ds-post-channel-js",
"author": "Microsoft Application Insights Team",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
Expand All @@ -27,7 +27,7 @@
"dependencies": {
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
4 changes: 2 additions & 2 deletions channels/applicationinsights-channel-js/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/applicationinsights-channel-js",
"version": "3.4.2",
"version": "3.4.3",
"description": "Microsoft Application Insights JavaScript SDK Channel",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"author": "Microsoft Application Insights Team",
Expand Down Expand Up @@ -64,7 +64,7 @@
"dependencies": {
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
4 changes: 2 additions & 2 deletions channels/offline-channel-js/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/applicationinsights-offlinechannel-js",
"version": "0.4.2",
"version": "0.4.3",
"description": "Microsoft Application Insights JavaScript SDK Offline Channel",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"author": "Microsoft Application Insights Team",
Expand Down Expand Up @@ -31,7 +31,7 @@
"dependencies": {
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
4 changes: 2 additions & 2 deletions channels/tee-channel-js/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@microsoft/applicationinsights-teechannel-js",
"version": "3.4.2",
"version": "3.4.3",
"description": "Microsoft Application Insights JavaScript SDK Tee Channel",
"homepage": "https://github.com/microsoft/ApplicationInsights-JS#readme",
"author": "Microsoft Application Insights Team",
Expand Down Expand Up @@ -65,7 +65,7 @@
"dependencies": {
"@microsoft/dynamicproto-js": "^2.0.3",
"@microsoft/applicationinsights-shims": "3.0.1",
"@microsoft/applicationinsights-core-js": "3.4.2",
"@microsoft/applicationinsights-core-js": "3.4.3",
"@nevware21/ts-utils": ">= 0.14.0 < 2.x",
"@nevware21/ts-async": ">= 0.5.5 < 0.6.0"
},
Expand Down
Loading
Loading