chore(guard): introduce arcjet guard js by qw-in · Pull Request #5957 · arcjet/arcjet-js

qw-in · 2026-03-27T18:12:01Z

No description provided.

socket-security · 2026-03-27T18:17:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@typescript/native-preview@7.0.0-dev.20260331.1
	@types/node@22.19.15
	oxfmt@0.43.0
	oxlint@1.58.0
	oxlint-tsgolint@0.18.1
	miniflare@4.20260329.0
	rolldown-plugin-dts@0.23.2

View full report

…runtime test coverage Add local sensitive info detection via @arcjet/analyze WASM, custom rules with user-defined evaluate functions, and comprehensive test coverage across all supported runtimes. Sensitive info detection: - Wire @arcjet/analyze detectSensitiveInfo for local entity detection - Support allow/deny entity lists via proto EntityList oneof - Convert between SDK SensitiveInfoRule and proto SENSITIVE_INFO body Custom local rules: - Add localCustom() rule with optional evaluate callback - Evaluate runs locally, result sent to server with timing metadata - Proto field: LOCAL_CUSTOM (29) with resultDurationMs Proto sync: - Regenerated bindings: sentAtUnixMs, localEvalDurationMs, resultDurationMs, oneof configEntityFilter, LOCAL_CUSTOM = 29 - CUSTOM (3) removed from GuardRuleType enum Test infrastructure: - Split mock-server.ts into runtime-agnostic mock-handlers.ts and Node-specific mock-server.ts - Extract 19 shared test cases into test/_shared/cases.ts - Wire shared suite into all runtimes: Node (21), Fetch (20), Bun (20), Deno (20), Cloudflare (2 + 19 in-Worker) - 194 unit tests with full coverage Docs & tooling: - Update README.md to match origin/main style - Update CONTRIBUTING.md with accurate commands and architecture notes - Add format/format:check scripts (oxfmt) - Remove --experimental-transform-types from test-unit script - Export localCustom from package entrypoint

Automatically generated with [Release Please](https://github.com/googleapis/release-please). --- <details><summary>@arcjet/analyze: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/analyze-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/analyze:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/analyze-wasm bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/analyze-wasm: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/analyze-wasm-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * regenerate wasm binaries after aws-lc-rs update ([#5969](#5969)) ([bda5448](bda5448)) ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/astro: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/astro-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/body: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/body-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/body:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/bun: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/bun-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/cache: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/cache-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/cache:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/decorate: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/decorate-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/decorate:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/sprintf bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/deno: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/deno-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/cache bumped from 1.3.1 to 1.4.0 * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/duration: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/duration-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/duration:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/env: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/env-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/env:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/eslint-config: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/eslint-config-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/eslint-config:** Synchronize arcjet-js versions </details> <details><summary>@arcjet/fastify: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/fastify-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/cache bumped from 1.3.1 to 1.4.0 * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/guard: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/guard-v1.4.0) (2026-04-14) ### 🚀 New Features * **guard:** promote @arcjet/guard from experimental to stable release ([#5996](#5996)) ([f511f44](f511f44)) ### 📝 Documentation * add MCP server mentions to @arcjet/guard ([#5974](#5974)) ([cd398c0](cd398c0)) ### 🧹 Miscellaneous Chores * **guard:** add legacy type resolution for typescript@<=5 ([#5978](#5978)) ([fd6ad6d](fd6ad6d)) * **guard:** introduce arcjet guard js ([#5957](#5957)) ([53ff2e2](53ff2e2)) * **guard:** update protobuf ([#5986](#5986)) ([25f0e9e](25f0e9e)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/analyze bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/headers: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/headers-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/headers:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/inspect: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/inspect-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/inspect:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/ip: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/ip-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/ip:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/logger: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/logger-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/logger:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/sprintf bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/nest: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/nest-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * @arcjet/body bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/next: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/next-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/node: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/node-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * @arcjet/body bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/cache bumped from 1.3.1 to 1.4.0 * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/nuxt: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/nuxt-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/protocol: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/protocol-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) * **proto:** sync generated proto ([#5994](#5994)) ([25b11fe](25b11fe)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/cache bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/react-router: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/react-router-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/cache bumped from 1.3.1 to 1.4.0 * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/redact: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/redact-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/redact:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/redact-wasm bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/redact-wasm: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/redact-wasm-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * regenerate wasm binaries after aws-lc-rs update ([#5969](#5969)) ([bda5448](bda5448)) ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/remix: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/remix-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/rollup-config: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/rollup-config-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/rollup-config:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/runtime: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/runtime-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/runtime:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/sprintf: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/sprintf-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/sprintf:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/stable-hash: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/stable-hash-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/stable-hash:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/sveltekit: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/sveltekit-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/body bumped from 1.3.1 to 1.4.0 * @arcjet/env bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/ip bumped from 1.3.1 to 1.4.0 * @arcjet/logger bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/transport bumped from 1.3.1 to 1.4.0 * arcjet bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@arcjet/transport: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@arcjet/transport-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@arcjet/transport:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@nosecone/next: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@nosecone/next-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **@nosecone/next:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * dependencies * nosecone bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>@nosecone/sveltekit: 1.4.0</summary> ## [1.4.0](https://github.com/arcjet/arcjet-js/compare/v1.3.1...@nosecone/sveltekit-v1.4.0) (2026-04-14) ### 🔨 Build System * **deps-dev:** bump vite from 7.3.1 to 7.3.2 ([#5980](#5980)) ([8a253f6](8a253f6)) ### Dependencies * The following workspace dependencies were updated * dependencies * nosecone bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>arcjet: 1.4.0</summary> ## [1.4.0](v1.3.1...arcjet-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) ### Dependencies * The following workspace dependencies were updated * dependencies * @arcjet/analyze bumped from 1.3.1 to 1.4.0 * @arcjet/cache bumped from 1.3.1 to 1.4.0 * @arcjet/duration bumped from 1.3.1 to 1.4.0 * @arcjet/headers bumped from 1.3.1 to 1.4.0 * @arcjet/protocol bumped from 1.3.1 to 1.4.0 * @arcjet/runtime bumped from 1.3.1 to 1.4.0 * @arcjet/stable-hash bumped from 1.3.1 to 1.4.0 * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> <details><summary>1.4.0</summary> ## [1.4.0](v1.3.1...v1.4.0) (2026-04-14) ### 🚀 New Features * **guard:** promote @arcjet/guard from experimental to stable release ([#5996](#5996)) ([f511f44](f511f44)) ### 📝 Documentation * add @arcjet/guard documentation to root README ([#5993](#5993)) ([4be39c8](4be39c8)) * add MCP server mentions to @arcjet/guard ([#5974](#5974)) ([cd398c0](cd398c0)) ### 🧹 Miscellaneous Chores * add `.claude/` to .gitignore ([#5988](#5988)) ([6f0f922](6f0f922)) * always trigger workflows on release-please branch ([#5998](#5998)) ([6554cd1](6554cd1)) * delete astro-5 example ([#5995](#5995)) ([38487cb](38487cb)) * Deprecate `score` and `threshold` fields in `detectPromptInjection` ([#5987](#5987)) ([de46cb7](de46cb7)) * **examples:** Add Astro 5 example, upgrade main Astro example to v6 ([#5975](#5975)) ([a77c077](a77c077)) * **guard:** add legacy type resolution for typescript@<=5 ([#5978](#5978)) ([fd6ad6d](fd6ad6d)) * **guard:** introduce arcjet guard js ([#5957](#5957)) ([53ff2e2](53ff2e2)) * **guard:** update protobuf ([#5986](#5986)) ([25f0e9e](25f0e9e)) * **proto:** sync generated proto ([#5994](#5994)) ([25b11fe](25b11fe)) * regenerate wasm binaries after aws-lc-rs update ([#5969](#5969)) ([bda5448](bda5448)) ### 🔨 Build System * **deps-dev:** bump vite from 7.3.1 to 7.3.2 ([#5980](#5980)) ([8a253f6](8a253f6)) * **deps-dev:** bump vite from 7.3.1 to 7.3.2 in /examples/react-router ([#5982](#5982)) ([ddf3416](ddf3416)) * **deps-dev:** bump vite from 7.3.1 to 7.3.2 in /examples/react-router-middleware ([#5985](#5985)) ([e36cf35](e36cf35)) * **deps:** bump @nestjs/core from 11.1.17 to 11.1.18 in /examples/nestjs ([#5983](#5983)) ([514ae8b](514ae8b)) * **deps:** bump unhead and @unhead/vue in /examples/nuxt ([#5989](#5989)) ([6add894](6add894)) * **deps:** bump vite from 7.3.1 to 7.3.2 in /examples/nuxt ([#5981](#5981)) ([97138bc](97138bc)) * **deps:** bump vite in /examples/remix-express ([#5977](#5977)) ([3b97d6f](3b97d6f)) </details> <details><summary>nosecone: 1.4.0</summary> ## [1.4.0](v1.3.1...nosecone-v1.4.0) (2026-04-14) ### 🧹 Miscellaneous Chores * **nosecone:** Synchronize arcjet-js versions ### Dependencies * The following workspace dependencies were updated * devDependencies * @arcjet/eslint-config bumped from 1.3.1 to 1.4.0 * @arcjet/rollup-config bumped from 1.3.1 to 1.4.0 </details> --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

qw-in self-assigned this Mar 27, 2026

This comment was marked as outdated.

Sign in to view

qw-in requested a review from Copilot March 27, 2026 18:32

Copilot started reviewing on behalf of qw-in March 27, 2026 18:33 View session

This comment was marked as outdated.

Sign in to view

davidmytton reviewed Mar 28, 2026

View reviewed changes

Comment thread arcjet-guard/README.md

davidmytton reviewed Mar 28, 2026

View reviewed changes

Comment thread .trunk/trunk.yaml

davidmytton approved these changes Mar 28, 2026

View reviewed changes

qw-in added 9 commits April 2, 2026 21:53

chore(guard): introduce arcjet guard js

e166d66

chore(guard): tweak proto name

7ce6409

ci(guard): add Guard CI workflow

4d8c4d3

chore(guard): fix linting in ci

827546e

chore(guard): remove bun types

457791c

chore(guard): resolve ci errors

989321b

chore(guard): isolate oxlint from root workspace

cb168d3

chore: drastically improve jsdoc and error handling

0741a96

qw-in force-pushed the quinn/arcjet-guard branch from adb1db6 to 0741a96 Compare April 2, 2026 21:54

qw-in marked this pull request as ready for review April 2, 2026 21:56

qw-in requested a review from a team as a code owner April 2, 2026 21:56

qw-in enabled auto-merge April 2, 2026 21:58

qw-in added this pull request to the merge queue Apr 2, 2026

Merged via the queue into arcjet:main with commit 53ff2e2 Apr 2, 2026
48 checks passed

qw-in deleted the quinn/arcjet-guard branch April 2, 2026 22:13

github-actions Bot mentioned this pull request Apr 2, 2026

chore: Release 1.4.0 #5972

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(guard): introduce arcjet guard js#5957

chore(guard): introduce arcjet guard js#5957
qw-in merged 9 commits intoarcjet:mainfrom
qw-in:quinn/arcjet-guard

qw-in commented Mar 27, 2026

Uh oh!

socket-security Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

This comment was marked as outdated.

This comment was marked as outdated.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

qw-in commented Mar 27, 2026

Uh oh!

socket-security Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

This comment was marked as outdated.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

socket-security Bot commented Mar 27, 2026 •

edited

Loading