Node browser runtime release notesRSS

Fixes

• Reduces Polling frequency for successful requests while in Kubernetes clusters.

New Features

• Step monitor support

Fixes

• Added missing argument to step monitor script
• Fixed step monitor secure credential evaluation

Security patches

• CVE-2023-26159
• CWE-1321

Improvements

• Increase browser extension proxy timeout to better accommodate resource-constrained environments
• Additional error logging

Fixes

• Unblock ensighten.com as a legitimate endpoint

Security patches

• Update Axios

Improvements

• Upgrade Chrome version from 112 to 117

Fixes

• Prevents Module Deny-list bypass via node qualified require statements
• Deny-list "module" module

Fixes

• Adds filter to scrub NR Access Keys and bearer tokens

Security patches

• Pins glob version to remediate CWE-772
• Removes access to VM module

Fixes

• When running in K8 mode, unhealthy Runtimes now exit if they cannot reach SJM's 'Job' endpoint.
• Pinning Yarn to version 2.4.3.
• Truncates script logs to expected size.
• Upgrade base Ubuntu image.
• Set minimum TLS version to accommodate upgraded Ubuntu base image OpenSSL.

Security patches

• CVE-2023-43646
• CVE-2023-46233
• CVE-2023-28155
• CVE-2023-45857

Fixes

• Update got library retry logic to avoid false failures

Security Patches

• CVE-2022-25883
• CVE-2023-26115
• CVE-2022-37614