Changelog

Track what's new, changed, and fixed in DebugBundle. This page covers product-level changes. For detailed SDK changelogs, see the individual SDK package release notes.

Format

This changelog follows Keep a Changelog conventions:

• Added — New features and capabilities
• Changed — Changes to existing functionality
• Fixed — Bug fixes
• Removed — Removed features
• Security — Security improvements

[Unreleased]

Added

• Added the production-ready AnalyticsBundle product lane: opt-in browser capture, direct and relay ingestion, aggregate usage and journey metrics, saved funnels, retained structured journeys, deterministic opportunities, generated analytics bundles, web product surfaces, and matching API, CLI, and MCP interfaces.
• Added a bounded Free analytics preview and fixed tier capabilities for saved funnels, controlled custom dimensions, and hourly retention, while paid monthly analytics usage allowances scale with purchased capacity units.
• Added the complete AnalyticsBundle public documentation set: product model, browser capture, privacy and retention, self-host operations, CLI/API workflows, MCP tools, and agent-discovery links.
• Added alert severity-threshold lifecycle scope documentation for API, CLI, MCP, and dashboard flows, covering new-incident, regression-only, and both-event notification behavior.
• Added an MCP distribution page that lists official package, registry, marketplace, skill, auth-scope, and trust-channel guidance for managed agent installs.

Changed

• Extended maintained server SDK relays to accept strict credential-free analytics envelopes and attach project credentials only during authenticated upstream forwarding.
• Added bounded analytics worker scheduling, independent retention windows, deterministic failed-generation retry, and complete opportunity-to-bundle incident and deploy linkage.
• Simplified AnalyticsBundle documentation navigation into one flat section and reconciled self-host analytics queue and migration guidance with the shipped runtime.
• Expanded MCP and installation docs with the local stdio install matrix, hosted Remote MCP status, and member-token guidance for headless or marketplace-managed clients.

Fixed

• Hardened analytics aggregation, funnel accounting, privacy/config races, browser transport isolation, partial quota recovery, journey and bundle idempotency, inventory pagination, and filter parity across API, CLI, MCP, and web.

[1.7.2] - 2026-07-29

Fixed

• Enforced incident-derived exact-fingerprint capture rules during ingestion using the same canonical server fingerprint as worker grouping.

[1.7.1] - 2026-07-29

Added

• Added an authenticated compatibility path for installed Android and Swift event shapes, canonical mobile event normalization, and indexed ingestion acknowledgement handling across connected SDK transports.
• Added the universal safe beforeSend hook and object-wrapped arbitrary probe data across the maintained SDK family.

Changed

• Published @debugbundle/shared-types, @debugbundle/redaction, @debugbundle/sdk-node, and @debugbundle/sdk-browser at 1.6.0.
• Published Python, PHP, Java, Go, Ruby, and .NET at 1.3.0, WordPress at 1.4.0, and the coordinated Android, Swift, and React Native line at 1.2.0.
• Expanded release assurance with per-file coverage, clean-package and published-package smokes, connected-device coverage, app-server matrices, and React Native bare-app and Expo development-build lanes.

Fixed

• Prevented malformed legacy mobile events and partial ingestion acknowledgements from being silently dequeued.
• Preserved React Native identity, JavaScript error fidelity, capture policy, probes, native configuration, and canonical integer fields across the platform bridge.

[1.5.3] - 2026-06-19

Changed

• Published the shared contract and JavaScript SDK patch line at @debugbundle/shared-types@1.3.1, @debugbundle/redaction@1.3.1, @debugbundle/sdk-node@1.3.1, and @debugbundle/sdk-browser@1.3.1.
• Published the canonical server-SDK patch line at debugbundle-python@1.1.2, debugbundle/sdk-php@1.1.2, github.com/debugbundle/debugbundle-go@v1.1.1, debugbundle@1.1.2, com.debugbundle Java SDK 1.1.1, and the NuGet DebugBundle.* package family at 1.1.1.
• Promoted the root debugbundle repository release line to 1.5.3 and synchronized the hosted dogfooding manifests to the published JS SDK patch line.

Fixed

• Reduced malformed hosted ingestion rejects by normalizing installed SDK envelope drift server-side while the patched SDK releases move custom app context into envelope context, remove legacy request payload extras, and preserve redaction on the canonical event path.

[0.1.3] - 2026-05-22

Added

• Canonical root-repository GitHub Releases on v* tags so the debugbundle monorepo now has a product-level public release surface alongside the package-specific CLI, MCP, shared-package, and SDK releases.
• Official GitHub Releases for the standalone JavaScript SDK repo, Python SDK repo, and WordPress plugin repo, including installable WordPress ZIP assets.

Changed

• Defined the root debugbundle repository version as the canonical public DebugBundle product release number used by the public site and product changelog.
• Published the then-current WordPress plugin release through GitHub Releases as the initial manual ZIP distribution path.

Security

• Hardened OAuth state validation by switching GitHub install and web-session callback comparisons to constant-time checks.
• Hardened browser trace propagation matching by removing caller-provided regular expressions from the allowlist path and keeping string-only matching.

[0.1.2] - 2026-05-13

Added

• Local-first onboarding for full capture-to-investigation workflows without a cloud account.
• Connected-mode dual-source retrieval with --source narrowing and cloud artifact caching.
• CLI local processing, MCP local-store parity, incident lifecycle actions, probes, webhooks, alerts, billing, and self-hosting.

Changed

• Project setup now produces a .debugbundle/ scaffold instead of flat config files.
• SDK initialization detects local versus connected mode from project configuration.
• Bundle generation remains deterministic for the same normalized source inputs.

SDK Versions

Next Steps

• What's New — Blog posts about product updates
• Installation — Get started with the latest version
• FAQ — Frequently asked questions