@datadog/native-appsec

Releases

1. 11.0.213 Aug 2026
   Release notes

   • Dropping support for Node.js 16
   • fix: drop no-op install script that triggers Yarn build warning
   • Update dependencies

   Open source →
2. 11.0.118 Feb 2026
   Release notes

   Features:

   • bump libddwaf to 1.30.1 and package bump to v11.0.1 (#159)
   • DEPENDENCY UPGRADE: minor: node-addon-api · patch: mocha (#160)

   Open source →
3. 11.0.03 Nov 2025
   Release notes

   Features:

   • Update libddwaf to 1.30.0 (#157)

   Open source →
4. 10.3.015 Oct 2025
   Release notes

   Features:

   • Update libddwaf to 1.29.0 (#152)
   • Blocking action now returns a random block_id property
   • Fix a null-byte string termination bug

   Open source →
5. 10.2.13 Sept 2025
   Release notes

   Features:

   • Update libddwaf to 1.28.1 (#151)

   Open source →
6. 10.2.02 Sept 2025
   Release notes

   Features:

   • Update libddwaf to 1.28.0 (#149)

   Open source →
7. 10.1.04 Aug 2025
   Release notes

   Features:

   • Update libddwaf to 1.27.0 (#148)

   Open source →
8. 10.0.111 Jul 2025
   Release notes

   Add support for all ddwaf_object types in from_ddwaf_object

   Open source →
9. 10.0.08 Jul 2025
   Release notes

   • Integrates libddwaf v1.26.0
   • Implements new ddwaf_run result
   • Changes some result properties names in JS result object:
     • derviatives for attributes
     • totalRuntime for duration
   • New result property keep

   Open source →
10. 9.0.028 May 2025
    Release notes

    Updates libddwaf to v1.24.1 with a new builder API that provides configuration update management.

    Open source →
11. 8.5.210 Apr 2025
    Release notes

    Fixes the crash on ARM as well as improve older Alpine support

    Open source →
12. 8.5.119 Mar 2025
    Release notes

    Fixes:

    • Handle toJSON errors gracefully with invalid object value as a fallback

    Open source →
13. 8.5.014 Feb 2025
    Release notes

    Features:

    • report max truncated elements and errors (#130)

    Open source →
14. 8.4.02 Jan 2025
    Release notes

    Features:

    • Update libddwaf to 1.22.0 (#128)

    Open source →
15. 8.3.015 Nov 2024
    Release notes

    Features:

    • Update libddwaf to version 1.21.0

    Open source →
16. 8.2.122 Oct 2024
    Release notes

    Features

    • Update libddwaf to version 1.20.1

    Open source →
17. 8.2.014 Oct 2024
    Release notes

    Features

    • Update libddwaf to version 1.20.0

    Open source →
18. 8.1.129 Aug 2024
    Release notes

    Fixes

    • Fix prebuildify action to download proper binaries.

    Open source →
19. 8.1.022 Aug 2024withdrawn: This version cannot load correct binaries and should not be used
    Release notes

    [!WARNING] This release does not contain the proper binaries. Please, use v8.1.1.

    Features

    • Update libddwaf to version 1.19.1
    • Add waf.knownActions map

    Open source →
20. 8.0.123 May 2024
    Release notes

    Fixes

    • Fix prebuildify action to download proper binaries.

    Open source →
21. 8.0.022 May 2024withdrawn: This version cannot load correct binaries and should not be used
    Release notes

    [!WARNING] This release does not contain the proper binaries. Please, use v8.0.1.

    Breaking changes

    • Drop support for Node 14

    Features

    • Update libddwaf to version 1.18.0 from 1.16.0.
    • New libddwaf action semantics.

    Fixes

    • Fix wrong typings

    Open source →
22. 7.1.12 Apr 2024
    Release notes

    Fixes

    • Do not limit the size of objects created by the WAF like derivatives.

    Open source →
23. 7.1.01 Mar 2024
    Release notes

    Features

    • Updated libddwaf to 1.16.0

    Fixes

    • Call to toJSON() method when it is present before sending data to libddwaf
    • Ignore circular dependencies in libddwaf objects

    Open source →
24. 7.0.017 Jan 2024
    Release notes

    Breaking Changes

    • Drop support for node versions below 14.0.0

    Fix

    • Support WAF usage in different threads, like worker_threads.

    Open source →
25. 6.0.018 Dec 2023
    Release notes

    Updated libddwaf to 1.15.1:

    • Changed requiredAddresses property name to knownAddresses.
    • Modify run function signature in order to include ephemeral addresses information.
    • Update diagnostics information.

    Open source →
26. 5.0.017 Nov 2023
    Release notes

    • Add support for getting postprocessor results:
      • Add result.derivatives property.
    • Improve object serialization:
      • Add suppoort for null conversion.
      • NaN and Infinity values are properly treated.
      • Unserializable objects are converted to ddwaf invalid types.
    • Remove legacy libddwaf builds.

    Open source →
27. 4.1.08 Nov 2023withdrawn: This version contains a bug and should not be used
    Release notes

    Deprecated, use v5.0.0 instead

    Open source →
28. 4.0.07 Sept 2023
    Release notes

    • Updated libddwaf to 1.14.0
    • Removed waf.rulesInfo
    • Removed result.data
    • Added waf.diagnostics
    • Added result.events

    Open source →
29. 3.2.023 May 2023

    Nothing published for this version

30. 3.1.01 Mar 2023

    Nothing published for this version

31. 3.0.022 Feb 2023
    Release notes

    • Update libddwaf to 1.8.2
    • Removed waf.updateRuleData()
    • Removed waf.toggleRules()
    • Added waf.update()

    Open source →
32. 2.2.09 Feb 2023

    Nothing published for this version

33. 2.1.02 Feb 2023
    Release notes

    • Update libddwaf to 1.6.2
    • Add toggle_rules

    Open source →
34. 2.0.024 Nov 2022
    Release notes

    • Update libddwaf to 1.5.1
    • Removed result.action
    • Added result.status
    • Added result.actions an array of strings from the on_match field in rules.
    • Added waf.updateRuleData(ruleData)
    • DDWAF.version() now returns a string instead of an object

    Open source →
35. 1.3.08 Nov 2022
    Release notes

    • Use new prebuild system:
      • Add support for MacOS on arm64 (Apple M1)
      • Ass support for Linux on arm64
    • Enhance internal test files

    Open source →
36. 1.2.14 Jul 2022

    Nothing published for this version

37. 1.2.019 May 2022
    Release notes

    • Add support for rules error metric
    • Add small optimization in loader
    • Use windows-2019 image for Windows builds for libddwaf compatibility

    Open source →
38. 1.1.126 Apr 2022
    Release notes

    • Fix a case where obfuscator config strings would get lost

    Open source →
39. 1.1.020 Apr 2022
    Release notes

    • Update libddwaf to 1.3.0
    • Add support for rules metrics
    • Add support for obfuscator config

    Open source →
40. 1.0.17 Apr 2022
    Release notes

    • Fix rules object and result object not being freed

    Open source →
41. 1.0.04 Apr 2022
    Release notes

    • Remove results.perfData
    • Remove results.perfTotalRuntime
    • Add results.totalRuntime
    • Update libddwaf to 1.2.1

    Open source →
42. 0.8.322 Mar 2022

    Nothing published for this version

43. 0.8.215 Mar 2022
    Release notes

    • Do not apply object limits to the rules object

    Open source →
44. 0.8.12 Feb 2022
    Release notes

    • Fix support for deeply nested objects
    • Fix support for undefined, null, BigInts, Symbols
    • Limit object property count

    Open source →
45. 0.8.026 Jan 2022
    Release notes

    • Update libddwaf to 1.0.17
    • Correct supported plateforms in README
    • Update vulnerable dependencies

    Open source →
46. 0.7.022 Dec 2021
    Release notes

    • Update libddwaf to 1.0.16
    • Add timeout property to WAF result

    Open source →
47. 0.6.12 Dec 2021
    Release notes

    • Fix support for boolean values in rules
    • Update CI Windows images

    Open source →
48. 0.6.027 Oct 2021

    Nothing published for this version

49. 0.5.019 Oct 2021
    Release notes

    • Update libddwaf to 1.0.13
    • Add libddwaf license

    Open source →
50. 0.4.011 Oct 2021
    Release notes

    • Update libddwaf to 1.0.12
    • Update build infrastructure to support unique linux libddwaf build

    Open source →
51. 0.3.123 Sept 2021

    Nothing published for this version