CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.12.1 (2024-04-12)

Reverts

• Revert "fix(node): update to 18.20.1 (#1369)" (#1383) (25bcebc), closes #1369 #1383

6.12.0 (2024-04-11)

Bug Fixes

• node: update to 18.20.1 (#1369) (484a6b4)

Features

• tracing: include B3 propagator (#1352) (6b6cd4b)

6.11.0 (2024-03-26)

Bug Fixes

• serve-module: dev cdn would fail to start when serving modules without a legacy bundle (#1344) (4cd972f)

Features

• add dotenv support (#1333) (3172251)
• conditionalIntl: added env var for Itnl (7b65266)
• logger: use a pretty logger in locale development with OTel enabled (#1292) (a810139)
• tracing: add OpenTelemetry tracing (#1214) (aad2538)

Reverts

• Revert "refactor: upgrade to node 20" (#1332) (eb811e3), closes #1332

6.10.0 (2024-02-16)

Bug Fixes

• devCdn: removing extra / which created malformed url (#1295) (dba1ac8)

Features

• proxyagent: update proxy agent (#1297) (4e6d8e8)

6.9.2 (2024-01-23)

Bug Fixes

• cdnCache: make clear cache message generic (#1248) (cac2e81)
• deps: revert proxy agent (#1249) (badbd98)
• errorHandler: application errors would result in a 200 response (#1243) (26a7740)
• ssrServer: fastify scope resulted in hooks being called more than once (#1242) (2d84d6a)

6.9.1 (2024-01-22)

Bug Fixes

• proxy: fix proxy configuration (dd89ecd)

6.9.0 (2024-01-17)

Bug Fixes

• devCdn: handle different module files (48aa35f)

Features

• otel: log notice to STDOUT when using OTel (#1215) (b4bcf21)

6.8.3 (2023-12-06)

Bug Fixes

• runTime: use relative urls for defaulted report variables (059df73)

6.8.2 (2023-11-16)

Bug Fixes

• holocron: update 1.9.2 (#1189) (b781ee6)

6.8.1 (2023-11-13)

Bug Fixes

• reactHtml: use browser integrity for external fallbacks (#1166) (6ae1e65)

6.8.0 (2023-11-01)

Bug Fixes

• scripts: start watch failed to fetch modules (#1159) (aa98621)

Features

• update strict transport security header to 2 years (#1165) (6fbca9e)

6.7.1 (2023-09-28)

Bug Fixes

• cache-cdn: stringify object (#1138) (8715017)

6.7.0 (2023-09-27)

Bug Fixes

• image: exclude devDeps from non-dev image (#1085) (4d68dba)
• node: bump Node.js to 18.17.1 for security patches (#1087) (b491dbf)

Features

• cache-module: implemented cached modules (#1094) (84838a8)
• Dockerfile: use .nvmrc to build the image (#1090) (42c562c)
• external-fallbacks: enable modules to have external fallbacks (#984) (7d51efe)
• logging: enable sending logs to OpenTelemetry (#1097) (a0b8cb6)
• logging: switch to fastify logger (#1084) (33fa971)
• metrics: add module rejection and fallback gauges (#1131) (b60895a)
• styleLoader: aggregate stylesheets and dedupe if already loaded (#1099) (a74a5ba)

6.6.0 (2023-08-09)

Bug Fixes

• csp: removed csp default from fastify helmet (e77372a)

Features

• config: new config redirectAllowList (#1050) (d3a94e2)
• node: upgrade to node 18 (#1067) (f1fd340)

6.5.1 (2023-07-05)

Bug Fixes

• node: bump node to 16.20.1 for security patches (#1041) (7484c61)

6.5.0 (2023-06-29)

Bug Fixes

• configureRequestLog: use default when configured with undefined (#1029) (02eda87)
• csp-report: add application/csp-report content type support (#1038) (077fbc3)

Features

• circuitBreaker: configurable event loop delay percentile (#1032) (e5daa0c)
• metrics: response time summary (#1026) (ad92ba2)
• metrics: switch to fastify-metrics (#1034) (b531606)
• server: add SSR React rendering summary metric (#991) (3e24352)

6.4.2 (2023-05-24)

Bug Fixes

• memLeak: update one-app-ducks to fix memory leak (#1008) (f428a77)

6.4.1 (2023-05-17)

Bug Fixes

• memoryLeak: disable cache for transitjs (#993) (bb83c07)

6.4.0 (2023-04-17)

Bug Fixes

• server: remove extra nodeFramework key from log entries (#974) (973537c)

Features

• pollModuleMap: holocron provide rejected externals (#962) (dfc8745)

6.3.0 (2023-03-22)

Features

• holocron: allow mapStateToProps to be passed to holocron (#951) (ba8bad9)

6.2.1 (2023-03-09)

Bug Fixes

• devCdn: requests were not using node-fetch API (#949) (8a3ff0a)

6.2.0 (2023-03-08)

Bug Fixes

• load-modules: unnecessary calls to updateModuleRegistry (#939) (99ef4f1)

Features

• middleware: trigger a redirect from loadModuleData (#927) (f948db1)
• server: ExpressJS to Fastify migration (#938) (9b0c4b3)

6.1.2 (2023-02-20)

Bug Fixes

• deps: bump holocron from 1.3.0 to 1.4.0 (4ef11a8)

6.1.1 (2022-11-09)

Bug Fixes

• fetchEnhancers: take patch to fetch-enhancers (a5e5d18)

6.1.0 (2022-10-17)

Code Refactoring

• migrating metrics server to Fastify (#803) (a0fc9ed), closes #780 #780

Features

• intl: allow custom URLs for language packs (#833) (b67e826)
• routes confidence checks (2a3d996)
• server: running app through fastify (#785) (e3da397)

6.0.0 (2022-07-20)

Bug Fixes

• helmet: disable breaking headers (#780) (df21a1d)

Features

• deps: upgrade to react 17 (d927a7f)
• server: drop node 12 support (a755bef)

BREAKING CHANGES

• server: minimum supported node version is 16
• deps: Upgrade from React 16 to 17

5.15.3 (2022-07-13)

Bug Fixes

• node: bump node to 16.16.0 for security patch (#782) (3782116)

5.15.2 (2022-07-06)

Bug Fixes

• deps: bump core-js from 3.21.1 to 3.23.1 (#764) (53917e0)

5.15.1 (2022-06-08)

Bug Fixes

• renderPartial: respect disabledStyles for partial render (#755) (8209bbe)

5.15.0 (2022-06-01)

Bug Fixes

• fetch-enhancers: use treeshakable es build (#748) (26b26ab)

Features

• update: updated node and npm versions on docker file (7449e71)

5.14.1 (2022-05-05)

Bug Fixes

• env: don't require ONE_ENABLE_POST_TO_MODULE_ROUTES to be set (#738) (e7becf0)

5.14.0 (2022-05-04)

Features

• dns: add option to enable app-level DNS caching (#727) (69dff8d)
• ssrServer: make max POST request payload size configurable (#721) (a1abb49)

5.13.3 (2022-04-28)

Bug Fixes

• one-app-ducks: delete lang pack request errors (#722) (b08ea4e)

5.13.2 (2022-04-13)

Bug Fixes

• addFrameOptions: strict csp domain now matches (#704) (ee252db)

5.13.1 (2022-03-16)

Bug Fixes

• csp: remove script nonce if inline scripts are disabled (#700) (d90954e)

5.13.0 (2022-02-16)

Bug Fixes

• deps: bump normalize-url from 4.5.0 to 4.5.1 (#649) (ad05552)
• holocron: bad modules could cause crashes and prevent restart (#631) (3e53147)
• prodsample: configureRequestLog had faulty example code (#647) (9d62c6d)

Features

• csp: add env var to disable csp requirement in dev (#640) (7fc5e19)
• csp: allow nonce to be disabled in development (#636) (0916756)
• Dockerfile: update to node 16 (#677) (2f302d6)
• routes: childRoutes are not required for root module (#657) (0926fb2)
• runtime: support node 16 (#624) (f8752d6)

5.12.0 (2021-10-27)

Features

• externals: added flag to not throw if externals versions have a mismatch (#591) (232d83e)

5.11.7 (2021-08-25)

Bug Fixes

• helmet: fixes race condition with react-helmet (#534) (36f65d9)

5.11.6 (2021-06-23)

Bug Fixes

• requestLog: only log on close (#526) (d57b26b)

5.11.5 (2021-05-26)

Bug Fixes

• clientErrorLogger: add metaData to server side reported error (2ca064f)

5.11.4 (2021-04-21)

Bug Fixes

• deps: security audit (#477) (73022b5)

5.11.3 (2021-04-07)

Bug Fixes

• one-app-dev-cdn: handle uncaught promise (#476) (324bfa3)

5.11.2 (2021-02-24)

Bug Fixes

• deps: bump one-app-ducks to 4.3.1 (5aaf56a)
• dev-holocron-cdn: allow no local module map (#433) (58e1f7d)
• middleware: use util.format in createRequestHtmlFragment (0bfd1b7)

5.11.1 (2021-02-03)

Bug Fixes

• holocron-module-route: udpates returns promises (#413) (6aa086a)

5.11.0 (2021-01-13)

Features

• createCircuitBreaker: increase healthcheck interval to 5s (#397) (6f7f222)
• metrics: track intl cache size (#406) (de65e10)

5.10.2 (2020-12-02)

Bug Fixes

• clientErrorLogger: format console error message (#382) (03da190)
• typo: circuit breaker “function” input (#372) (e1e74b9)

5.10.1 (2020-10-28)

Bug Fixes

• security: specify min TLS version (bc460aa)

5.10.0 (2020-10-21)

Features

• react: update react to 16.14.0 (be92d96)

5.9.0 (2020-10-14)

Features

• ssrServer: enable urlencoded post data (#313) (3481dc0)

5.8.0 (2020-10-07)

Bug Fixes

• holocron: does not check for global state on component mount (e36b343)
• stateConfig: use ip when useHost flag is passed (#327) (4ca50c4)
• tests/integration: offline cache timing (20c85e6)

Features

• csp: loosen development to use localhost or ip '*' (#331) (1bad920)

5.7.0 (2020-09-30)

Bug Fixes

• circuit: disable circuit breaker in development (#307) (1d87967)

Features

• module-text: remove tags and render text only (0a1aa68)
• prod-sample: deploy module util (#308) (#323) (becfca5)

5.6.1 (2020-09-23)

Bug Fixes

• dockerfile: set user after chown (#305) (105ddbf)
• integration-tests: simplify franks burgers (4a90b98)
• watchLocalModules: fix watcher crashing due to build errors (#306) (9290d92)

5.6.0 (2020-09-16)

Features

• sendHtml: allow custom error page (#281) (73eb8a7)
• server: use native V8 heapdump (794ff35)

5.5.1 (2020-09-02)

Bug Fixes

• fetch: upgrade bundler to add fetch polyfills (#289) (f81e8c5)

5.5.0 (2020-08-26)

Bug Fixes

• pollModuleMap: ensure single pollModuleMap (#284) (5503a03)
• pwa: reset config when not supplied (#283) (6784c7c)
• watchLocalModules: wait for change to finish (#285) (a27d4ba)

Features

• app-config: pwa validation (fb10509)
• serverError: add additional logging for server errors (#282) (60825f8)

5.4.1 (2020-08-19)

Bug Fixes

• metrics: health check (#274) (352bbd3)

5.4.0 (2020-08-12)

Features

• pwa/cache: add resource caching and invalidation (a85045c)

5.3.1 (2020-08-05)

Bug Fixes

• scripts/watch: ensure missing sw scripts (69f5f1b)

5.3.0 (2020-07-29)

Features

• createCircuitBreaker: log circuit breaker activity (acb96c3)
• pwa/cache: clear when disabled (e84eddd)
• ssrServer: added readiness check route (#248) (a342e71)

5.2.2 (2020-07-15)

Dependency Updates

• deps-dev/webdriverio 6.1.20 to 6.1.24
• deps/@americanexpress/one-app-ducks 4.0.1 to 4.1.1
• deps/@americanexpress/one-app-bundler 6.6.0 to 6.7.0
• deps-dev/jest 26.0.1 to 26.1.0
• deps/@americanexpress/fetch-enhancers 1.0.0 to 1.0.1

5.2.1 (2020-07-01)

Bug Fixes

• clientModuleMapCache: set base url for module bundle type (#215) (95ca35f)
• release/change-log: remove -e added (#211) (250113b)

5.2.0 (2020-06-24)

Bug Fixes

• module-map: missing baseUrl to module map on server (#206) (c6a251e)
• stateConfig: incorrect env var for dev-proxy port (#209) (3620a1a)

Features

• createTimeoutFetch: replaced @americanexpress/fetch-enhancers (c12db6f)
• pwa/offline: html shell (e8a1dd2)

5.1.1 (2020-06-17)

Bug Fixes

• send-html: ignore async chunks (49a3826)

5.1.0 (2020-06-10)

Bug Fixes

• pwa/icons: correct base url (c6fbd58)

Features

• make-promises-safe: treat unhandledRejection as uncaught exception (#174) (5fe0245)

5.0.0 (2020-05-28)

Chores

• deps: upgrade react-helmet (ac65593)

Features

• build/server: only transpile for node (#161) (48c25cd)
• sendHtml/legacy: only check user agent for ie (#147) (cc0aa95)
• metrics/update prom-client: update prom-client for more dimensions (#123) (79f0e68)

BREAKING CHANGES

• deps: requires react-helmet v6

5.0.0-rc.5 (2020-05-20)

Features

• one-app-router: update to 1.1.0 (#137) (0139c6c)
• pwa/web-manifest: add middleware & config support (9077f17)

5.0.0-rc.4 (2020-05-13)

Features

• one-app-dev-cdn: pass use-host flag (#138) (b7202ca)
• one-service-worker: integration with one-app (3a76625)

5.0.0-rc.3 (2020-05-06)

Features

• createRequestHtmlFragment: implemented circuit breaker (#111) (e10f707)
• initClient: removed StrictMode, resolves #74 (#126) (890a7e8)

5.0.0-rc.2 (2020-04-29)

Features

• dep: add create-shared-react-context (#112) (24217c6)
• one-app: removed tenancy or tenant instances (#69) (1b6a5e5)

5.0.0-rc.1 (2020-04-22)

Features

• fetch: switch to cross-fetch instead of isomorphic-fetch (#101) (82155d5)
• SecurityHeaders: add Referrer-Policy override (#97) (6e16cc9)

Bug Fixes

• healthyFrank: change onHover for onMouseOver (#104) (ff3c87d)
• react: update React to 16.13.1 (#109) (917e55a)
• workflows: removed greeting action (#103) (663fc0c)

5.0.0-rc.0 (2020-04-08)

Features

• all: initial oss release (0c64dcd)
• csp: add local development domains to csp (#42) (4952d28)
• danger: validate lockfiles (#7) (1e560f7)
• holocron: holocron 1.1.0 (5e84384)
• loadModule: optional cache bust key (#37) (b34b1bd)
• react: update to latest version of react (690e02b)
• release: one-app release process (#90) (72ea38b)
• routes: added default 404 route (d8f1bad)
• runtime: add csp reporting url env var (#81) (f6faa53)
• stateConfig: make state config more flexible (#38) (72539a0), closes #20
• statics: generate one-app-statics package (#82) (8b65858)

Bug Fixes

• conditionallyAllowCors: nested array of cors origins (#14) (75ba553)
• devCdn: proxy modules through dev cdn (#48) (20a910a)
• provided-externals: logs warning for child modules (#32) (24a9be4)
• scripts: drop-module (#75) (8e9de45)
• server: changes to allow for dev proxy usage (#54) (6c6631c)
• stateConfig: use localhost rather than ip for dev (#63) (de051d9)
• utils: replace watchLocalModules cdn-url string to be ip/port (#17) (0650b16)
• vulnerabilities: dependency updates (#5) (9b35457)