Skip to content

Conversation

@geekswagg
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @microsoft/applicationinsights-web from 3.1.2 to 3.3.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 189 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: @microsoft/applicationinsights-web
  • 3.3.10 - 2025-09-23

    Changelog

    This release includes:

    • Support for custom providers for Offline Channel which has added customProvider and customUnloadProvider to the IOfflineChannelConfiguration.
    • IAnalyticsConfig is exported for Analytics extension.
    • redactUrls and redactQueryParams are added to IConfiguration to support URL redaction.

    #2649 [Main][Task] 27922617: Provide Custom Provider Under Web Worker for Offline Channel
    #2638 [Main][Task] 34470593: Update Async Tests Under Dependencies Extension To Use the Modern AsyncQueue Pattern
    #2637 [Main][Task] 34470593: Update AISKU Async Tests To Use the Modern AsyncQueue Pattern
    #2636 Fix TypeError in Click Analytics Data Collector
    #2633 Fix flush method root cause - handle async callbacks in _doSend with proper error handling
    #2632 [Feature] Implement cookie caching when disabled and automatic flushing when enabled with backward compatibility option
    #2625 Add Azure API Management proxy documentation to FAQ sections
    #2607 Update Async Tests Under AISKULight to Use the Modern AsyncQueue Pattern
    #2597 Fix TypeScript compatibility issue with ITelemetryPlugin interface
    #2595 Fix trackPageView not resetting maxAjaxCallsPerView counter
    #2583 Create IAnalyticsConfig interface to properly define AnalyticsPlugin configuration subset
    #2625 Add Azure API Management proxy documentation to FAQ sections
    #2627 Add weekly GitHub action to delete closed and merged branches
    #2635 Fix issue #2634 moving the conditional check for filtering
    #2549 Redacting urls before sending to telemetry data
    #2622 Suppressed credentials inline to avoid credscan false positive

    What's Changed

    • Add TypeDoc links to README configuration tables by @ Copilot in #2576
    • Fix TypeScript compatibility issue with ITelemetryPlugin interface by @ Copilot in #2597
    • Remove unused jquery-1.11.1.js from the repository by @ Copilot in #2600
    • Create IAnalyticsConfig interface to properly define AnalyticsPlugin configuration subset by @ Copilot in #2583
    • Fix documentation links pointing to incorrect /docs/ path by @ Copilot in #2604
    • Adding copilot instructions by @ hectorhdzg in #2605
    • Redacting urls before sending to telemetry data. by @ rads-1996 in #2549
    • [Main] Update the copilot instructions by @ MSNev in #2617
    • [Task] Add tree-shaking annotations by @ Copilot in #2616
    • Suppressed credentials inline to avoid credscan false positive by @ rads-1996 in #2622
    • Add Azure API Management proxy documentation to FAQ sections by @ Copilot in #2625
    • Add weekly GitHub action to delete closed and merged branches by @ Copilot in #2627
    • Fix trackPageView not resetting maxAjaxCallsPerView counter by @ Copilot in #2595
    • Fix jq syntax error in Delete Merged Branches workflow by @ Copilot in #2630
    • Update Async Tests Under AISKULight to Use the Modern AsyncQueue Pattern by @ Copilot in #2607
    • Fix flush method root cause - handle async callbacks in _doSend with proper error handling by @ Copilot in #2633
    • Fix issue #2634 moving the conditional check for filtering by @ aimbrenda in #2635
    • Fix TypeError in Click Analytics Data Collector by @ pnoodles in #2636
    • [Feature] Implement cookie caching when disabled and automatic flushing when enabled with backward compatibility option by @ Copilot in #2632
    • [Main][Task] 34470593: Update AISKU Async Tests To Use the Modern AsyncQueue Pattern by @ Karlie-777 in #2637
    • [Main][Task] 34470593: Update Async Tests Under Dependencies Extension To Use the Modern AsyncQueue Pattern by @ Karlie-777 in #2638
    • [Main][Task] 27922617: Provide Custom Provider Under Web Worker for Offline Channel by @ Karlie-777 in #2649
    • [Release] Increase version to 3.3.10 by @ Karlie-777 in #2650

    New Contributors

    Full Changelog: 3.3.9...3.3.10

  • 3.3.10-nightly3.2508-05 - 2025-08-20
  • 3.3.10-nightly3.2508-03 - 2025-08-07
  • 3.3.10-nightly3.2508-02 - 2025-08-05
  • 3.3.10-nightly3.2508-01 - 2025-08-05
  • 3.3.10-nightly3.2507-29 - 2025-07-31
  • 3.3.10-nightly3.2507-28 - 2025-07-31
  • 3.3.10-nightly3.2507-27 - 2025-07-29
  • 3.3.10-nightly3.2507-26 - 2025-07-29
  • 3.3.10-nightly3.2507-25 - 2025-07-26
  • 3.3.10-nightly3.2507-24 - 2025-07-26
  • 3.3.10-nightly3.2507-18 - 2025-07-16
  • 3.3.10-nightly3.2507-17 - 2025-07-16
  • 3.3.10-nightly3.2507-08 - 2025-07-09
  • 3.3.10-nightly3.2507-07 - 2025-07-09
  • 3.3.10-nightly3.2507-06 - 2025-07-08
  • 3.3.10-nightly3.2507-05 - 2025-07-08
  • 3.3.10-nightly3.2507-04 - 2025-07-04
  • 3.3.10-nightly3.2507-03 - 2025-07-04
  • 3.3.10-nightly3.2507-02 - 2025-07-03
  • 3.3.10-nightly3.2507-01 - 2025-07-03
  • 3.3.10-nightly3.2506-09 - 2025-06-26
  • 3.3.9 - 2025-06-26

    Changelog

    This release contains an important fix for a change introduced in v3.3.7 that caused the autoCaptureHandler to incorrectly evaluate elements within trackElementsType, resulting in some click events not being auto-captured. See more details here.

    #2556 Update SDK Loader to rename the snippet postfix file to avoid CodeQL scanning issues
    #2586 [AI][Task] 33246973: Update Readme on Error Handler
    #2581 Export ICorrelationConfig interface from dependencies extension
    #2587 Click Analytics - Fix capturning of HTML events

    What's Changed

    • Creates a github action to assign co-pilot to a task or PR if the label is assigned by a code owner by @ MSNev in #2550
    • CodeQL Action major versions v1 and v2 have been deprecated. by @ MSNev in #2553
    • Assign Co-Pilot updates by @ MSNev in #2554
    • Potential fix for code scanning alert no. 2259: Unused variable, import, function or class by @ MSNev in #2551
    • Auto Assign Copilot Updates by @ MSNev in #2555
    • Auto assign copilot update -- add additional user name by @ MSNev in #2557
    • Update SDK Loader to rename the snippet postfix file to avoid CodeQL scanning issues by @ MSNev in #2556
    • Update to correctly reference the repository variable within the action by @ MSNev in #2558
    • CodeQL - Don't attempt to upload from the CI by @ MSNev in #2560
    • CodeQL - Add more exclusions as they are causing false positive alerts by @ MSNev in #2561
    • CodeQL Update configuration to run on all branches by @ MSNev in #2564
    • [Task] Add additional stale operations for wontfix Issues and PRs as well as inactive PR's by @ MSNev in #2563
    • Add merge-queue setting for the ci tests by @ MSNev in #2565
    • Auto Assign - Update the lookup for a valid user id. by @ MSNev in #2559
    • Remove Auto-Assign workflow by @ MSNev in #2569
    • Update analytics-js unit tests to use asyncQueue pattern by @ copilot-swe-agent in #2544
    • Add documentation for disablePageUnloadEvents to address jQuery 3.7.1 deprecation warnings by @ copilot-swe-agent in #2533
    • [Main][Task]32864048: Improve Offline Channel Test by @ Karlie-777 in #2534
    • Restore CodeQL schedule back to previous value by @ MSNev in #2574
    • [Fix] Export IConfiguration interface from AISKU package by @ copilot-swe-agent in #2579
    • Export ICorrelationConfig interface from dependencies extension by @ copilot-swe-agent in #2581
    • [Main][Task]32909441: Increase Web Snippet to 1.2.2 by @ Karlie-777 in #2577
    • [AI][Task] 33246973: Update Readme on Error Handler by @ Karlie-777 in #2586
    • Click Analytics - Fix capturning of HTML events by @ Barry-RG in #2587
    • [Main][Task] 33497606: Add Tests for ClickAnalytics AutoCaptureHandler by @ Karlie-777 in #2592
    • [Release] Increase version to 3.3.9 by @ Karlie-777 in #2593

    New Contributors

    Full Changelog: 3.3.8...3.3.9

  • 3.3.9-nightly3.2506-08 - 2025-06-24
  • 3.3.9-nightly3.2506-07 - 2025-06-24
  • 3.3.9-nightly3.2506-06 - 2025-06-21
  • 3.3.9-nightly3.2506-05 - 2025-06-21
  • 3.3.9-nightly3.2506-04 - 2025-06-19
  • 3.3.9-nightly3.2506-02 - 2025-06-03
  • 3.3.9-nightly3.2506-01 - 2025-06-03
  • 3.3.9-nightly3.2505-38 - 2025-05-30
  • 3.3.9-nightly3.2505-37 - 2025-05-30
  • 3.3.9-nightly3.2505-34 - 2025-05-29
  • 3.3.9-nightly3.2505-33 - 2025-05-29
  • 3.3.9-nightly3.2505-31 - 2025-05-28
  • 3.3.9-nightly3.2505-30 - 2025-05-24
  • 3.3.9-nightly3.2505-29 - 2025-05-24
  • 3.3.9-nightly3.2505-28 - 2025-05-23
  • 3.3.9-nightly3.2505-27 - 2025-05-23
  • 3.3.9-nightly3.2505-26 - 2025-05-22
  • 3.3.8 - 2025-05-22

    Changelog

    This release contains an important fix for a change introduced in v3.3.7 that caused a ReferenceError exception to be thrown when running in strict mode. See more details here.

    #2524 Update Components to address governance issues
    #2536 Fix ReferenceError in Click Analytics v3.3.7 by reordering variable declaration
    #2530 Add negative isArray check to _isConfigDefaults

    What's Changed

    New Contributors

    Full Changelog: 3.3.7...3.3.8

  • 3.3.8-nightly3.2505-24 - 2025-05-21
  • 3.3.8-nightly3.2505-23 - 2025-05-21
  • 3.3.8-nightly3.2505-22 - 2025-05-20
  • 3.3.8-nightly3.2505-21 - 2025-05-20
  • 3.3.8-nightly3.2505-18 - 2025-05-14
  • 3.3.8-nightly3.2505-17 - 2025-05-14
  • 3.3.8-nightly3.2505-16 - 2025-05-13
  • 3.3.8-nightly3.2505-11 - 2025-05-08
  • 3.3.8-nightly3.2505-10 - 2025-05-08
  • 3.3.7 - 2025-05-08

    Changelog

    Potential breaking change

    This release contains a potential breaking change due to the new compress api feaure added. If you are using a Proxy to redirect your telemetry to your own endpoint or are relying on the events to be uncompressed (this feature is initially disabled and it is intended to be enabled by the service in the near future), it is recommended to either update collection endpoint to support GZip or to explicitly disable the feature. See more details here.

    commits

    • #2518 Remove Generated docs from the repo
    • #2514 Address issues with isFeatureEnabled changes
    • #2517 Update Components to address governance issues
    • #2501 [Main][Task]31233527:Change Default RequestSizeLimitBytes
    • #2507 [main] Handle race condition during unload
    • #2513 [Main][Task]32698211: Add a Config to Allow Users to Change Max Number of Events Per Batch
      • Note: New Config maxEvtPerBatch is added to the post channel IChannelConfiguration.
    • #2511 [Main][Task]31233527: Add a Config to Allow Users to Change RequestSizeLimitBytes
      • Note: New Config requestLimit is added to the post channel IChannelConfiguration.

Snyk has created this PR to upgrade @microsoft/applicationinsights-web from 3.1.2 to 3.3.10.

See this package in npm:
@microsoft/applicationinsights-web

See this project in Snyk:
https://app.snyk.io/org/geekswagg/project/eabc34d4-04e6-4a19-a920-12fb90ce55b0?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings November 1, 2025 20:35
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades the @microsoft/applicationinsights-web dependency from version 3.1.2 to 3.3.10 in the playground project, bringing bug fixes and new features including URL redaction, custom offline channel providers, and various improvements to the Application Insights SDK.

  • Updated @microsoft/applicationinsights-web from ^3.1.2 to ^3.3.10
  • Regenerated package-lock.json with updated dependency versions
  • Updated all related ApplicationInsights sub-packages to version 3.3.10

Reviewed Changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
src/playground/package.json Updated applicationinsights-web version to 3.3.10
src/playground/package-lock.json Regenerated lockfile with updated dependency versions and integrity hashes
Files not reviewed (1)
  • src/playground/package-lock.json: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@@ -1,13 +1,13 @@
{
"name": "playground",
"name": "relock-npm-lock-v2-2mESLu",
Copy link

Copilot AI Nov 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package-lock.json name has been changed from 'playground' to 'relock-npm-lock-v2-2mESLu', which appears to be a temporary artifact from the lock file regeneration process. This should be reverted to 'playground' to match the package name.

Suggested change
"name": "relock-npm-lock-v2-2mESLu",
"name": "playground",

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants