Node.js agent release notesRSS

Notes

Security Improvements

• updated ESM loader to track instrumentation by url in a map instead of in url to avoid remote code execution. (#1741) (c8dc779)

Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

Notes

Miscellaneous Chores

• deps: Updated @newrelic/security-agent to v0.2.0 (#1737) (9bf2a01)
• restored engines to >=14 until we actually drop support for Node 14 (#1738) (8d66123)

Continuous Integration

• Add Node.js 20.x to CI and remove 14.x (#1603) (c4b008c)
• update support statement (#1733) (3013da9)

Support statement:

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date. (https://docs.newrelic.com/docs/new-relic-solutions/new-relic-one/install-configure/update-new-relic-agent/)

See the New Relic Node.js agent EOL policy for information about agent releases and support dates. (https://docs.newrelic.com/docs/apm/agents/nodejs-agent/getting-started/nodejs-agent-eol-policy/)

Notes

Features

• enabled code_level_metrics by default (#1723) (0b96de3)

Bug Fixes

• prevent ESM loader from loading instrumentation multiple times (#1729) (962d172)

Miscellaneous Chores

• deps-dev: bump word-wrap from 1.2.3 to 1.2.4 (#1730) (500a69e)

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Bug fixes

• Dropped query params from request.uri attribute when obfuscating (#1719) (76112a6)

Miscellaneous chores

• Created story issue template (#1694) (20442c6)

Tests

• Pinned prisma to < 5 when running on node 14 (#1717) (b000d7b)

Support statement

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Security Improvements

• deps: bump protobufjs from 7.2.3 to 7.2.4 (#1713) (5fb4606)

Miscellaneous Chores

• test: Converted adaptive-sampler.test.js to tap (#1709) (bb42249)
• test: converted environment.test.js to tap (#1705) (53b4376)
• test: Replaced t.equals with t.equal (#1711) (a0b255e)

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Miscellaneous Chores

• test: Converted 'errors/expected.test.js' to tap-style (#1695) (86025de)
• test: Converted server-config.test.js to tap-style (#1702) (2c6906d)

Continuous Integration

• skip running test suite when merging releases (#1704) (f78b981)

Build System

• updated @newrelic/aws-sdk to latest to get the instrumentation fixes for 3.363.0 (#1707) (a2cca08)

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Bug Fixes

• prisma: check for query args in string property (#1684) (8d9b176)

Security Improvements

• deps: Updated security agent to v0.1.3 (#1696) (0f957bd)

Miscellaneous Chores

• test: Added t.end() to trace unit test (#1698) (254c9c0)
• test: convert error-trace-aggregator.test.js to tap-style (#1690) (44b17ab)
• test: convert trace unit test to tap style (#1692) (727c17f)
• test: Fixed tap end/autoend calls in trace unit test (#1700) (b4a4948)

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Security

• deps: Updated semver to v7.5.2, also in native-metrics and test utils (#1685) (e207a6b)

Miscellaneous Chores

• Added test for getRedisParams (#1670) (e9f8556)
• temporarily limit prisma tests to non-breaking version (#1680) (76d3ade)
• testing: convert query-test-aggregator tests to tap style (#1676) (d2e45ad)
• testing: Converted error-event-aggregator.test.js to tap (#1683) (9f1d66f)

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.

Notes

Features

• Added Interactive Application Security Testing(IAST) mode of security agent when config.security.agent.enabled is true. (#1664) (3e926e5)

To learn about how to use IAST, check out our documentation.

• To enable the security agent set config.security.agent.enabled and config.security.enabled to true.

Support statement:

• New Relic recommends that you upgrade the agent regularly to ensure that you're getting the latest features and performance benefits. Additionally, older releases will no longer be supported when they reach end-of-life.