chore: Release 1.6.0

.github/.release-please-manifest.json

@@ -1,39 +1,39 @@
 {
-  ".": "1.5.0",
-  "analyze": "1.5.0",
-  "analyze-wasm": "1.5.0",
-  "arcjet": "1.5.0",
-  "arcjet-astro": "1.5.0",
-  "arcjet-bun": "1.5.0",
-  "arcjet-deno": "1.5.0",
-  "arcjet-fastify": "1.5.0",
-  "arcjet-guard": "1.5.0",
-  "arcjet-nest": "1.5.0",
-  "arcjet-next": "1.5.0",
-  "arcjet-node": "1.5.0",
-  "arcjet-nuxt": "1.5.0",
-  "arcjet-react-router": "1.5.0",
-  "arcjet-remix": "1.5.0",
-  "arcjet-sveltekit": "1.5.0",
-  "body": "1.5.0",
-  "cache": "1.5.0",
-  "decorate": "1.5.0",
-  "duration": "1.5.0",
-  "env": "1.5.0",
-  "eslint-config": "1.5.0",
-  "headers": "1.5.0",
-  "inspect": "1.5.0",
-  "ip": "1.5.0",
-  "logger": "1.5.0",
-  "nosecone": "1.5.0",
-  "nosecone-next": "1.5.0",
-  "nosecone-sveltekit": "1.5.0",
-  "protocol": "1.5.0",
-  "redact": "1.5.0",
-  "redact-wasm": "1.5.0",
-  "rollup-config": "1.5.0",
-  "runtime": "1.5.0",
-  "sprintf": "1.5.0",
-  "stable-hash": "1.5.0",
-  "transport": "1.5.0"
+  ".": "1.6.0",
+  "analyze": "1.6.0",
+  "analyze-wasm": "1.6.0",
+  "arcjet": "1.6.0",
+  "arcjet-astro": "1.6.0",
+  "arcjet-bun": "1.6.0",
+  "arcjet-deno": "1.6.0",
+  "arcjet-fastify": "1.6.0",
+  "arcjet-guard": "1.6.0",
+  "arcjet-nest": "1.6.0",
+  "arcjet-next": "1.6.0",
+  "arcjet-node": "1.6.0",
+  "arcjet-nuxt": "1.6.0",
+  "arcjet-react-router": "1.6.0",
+  "arcjet-remix": "1.6.0",
+  "arcjet-sveltekit": "1.6.0",
+  "body": "1.6.0",
+  "cache": "1.6.0",
+  "decorate": "1.6.0",
+  "duration": "1.6.0",
+  "env": "1.6.0",
+  "eslint-config": "1.6.0",
+  "headers": "1.6.0",
+  "inspect": "1.6.0",
+  "ip": "1.6.0",
+  "logger": "1.6.0",
+  "nosecone": "1.6.0",
+  "nosecone-next": "1.6.0",
+  "nosecone-sveltekit": "1.6.0",
+  "protocol": "1.6.0",
+  "redact": "1.6.0",
+  "redact-wasm": "1.6.0",
+  "rollup-config": "1.6.0",
+  "runtime": "1.6.0",
+  "sprintf": "1.6.0",
+  "stable-hash": "1.6.0",
+  "transport": "1.6.0"
 }

CHANGELOG.md

@@ -1,5 +1,51 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...v1.6.0) (2026-06-29)
+
+
+### 🚀 New Features
+
+* add outbound proxy support to @arcjet/transport and @arcjet/guard ([#6089](https://github.com/arcjet/arcjet-js/issues/6089)) ([0048dfa](https://github.com/arcjet/arcjet-js/commit/0048dfa08e95e77241eda93bc5c7392a38f58746))
+* **arcjet-guard:** add per-request metadata to experimental_moderateContent ([#6100](https://github.com/arcjet/arcjet-js/issues/6100)) ([fe28505](https://github.com/arcjet/arcjet-js/commit/fe285057f037f02b5cb01efa1f3fd02e75872f2b))
+* **arcjet-guard:** export experimental_moderateContent from node and fetch entrypoints ([#6097](https://github.com/arcjet/arcjet-js/issues/6097)) ([1b7fc90](https://github.com/arcjet/arcjet-js/commit/1b7fc90c5144ce4ac5304ee533877dee81dae8a2))
+* expose correlationId on protect() and guard() ([#6104](https://github.com/arcjet/arcjet-js/issues/6104)) ([14a3a1f](https://github.com/arcjet/arcjet-js/commit/14a3a1f201774dd9083eed26334121bfb893715a))
+* **guard:** add experimental_moderateContent rule ([#6059](https://github.com/arcjet/arcjet-js/issues/6059)) ([b001765](https://github.com/arcjet/arcjet-js/commit/b00176529308c802c40f28776e4c7c4ad3d40bed))
+* **guard:** error/warning decision model with hasFailedOpen() gate ([#6096](https://github.com/arcjet/arcjet-js/issues/6096)) ([8bbb885](https://github.com/arcjet/arcjet-js/commit/8bbb885fa564a23356bea0bfe98b6353add87de9))
+* **protocol:** regenerate clients with correlation_id field ([#6098](https://github.com/arcjet/arcjet-js/issues/6098)) ([71346b3](https://github.com/arcjet/arcjet-js/commit/71346b3ad22d0fb734dedd74f327fb6e40e9d52c))
+* require Node.js >=22.21.0 and drop EOL Node.js 20 ([#6090](https://github.com/arcjet/arcjet-js/issues/6090)) ([d002118](https://github.com/arcjet/arcjet-js/commit/d00211896cd13f13dce90df9a5308fa942f334f7))
+
+
+### 🏎️ Performance Improvements
+
+* **analyze-wasm:** regenerate js_req wasm (Aho-Corasick bot parser + Wizer) ([#6066](https://github.com/arcjet/arcjet-js/issues/6066)) ([5f62631](https://github.com/arcjet/arcjet-js/commit/5f62631f7535e0f2c3087befa8b81bededabe24f))
+
+
+### 🧹 Miscellaneous Chores
+
+* Add devcontainer lockfile ([#6092](https://github.com/arcjet/arcjet-js/issues/6092)) ([2aa7e57](https://github.com/arcjet/arcjet-js/commit/2aa7e576d00ae7b5ca675654d889dd5d09a965a0))
+
+
+### 🔨 Build System
+
+* **deps-dev:** bump js-yaml from 4.1.1 to 4.2.0 in /examples/nextjs-sensitive-info ([#6080](https://github.com/arcjet/arcjet-js/issues/6080)) ([9b9a307](https://github.com/arcjet/arcjet-js/commit/9b9a307e3e8ab001c22e5302a33e2e1e94d7eba6))
+* **deps-dev:** bump js-yaml from 4.1.1 to 4.2.0 in /examples/sveltekit ([#6072](https://github.com/arcjet/arcjet-js/issues/6072)) ([95f14c6](https://github.com/arcjet/arcjet-js/commit/95f14c63d7fbdd5e30314b6f3d353c06011dbbe7))
+* **deps-dev:** bump js-yaml from 4.1.1 to 4.3.0 in /examples/nextjs-decorate ([#6085](https://github.com/arcjet/arcjet-js/issues/6085)) ([c46f133](https://github.com/arcjet/arcjet-js/commit/c46f1332bdb371eb53f4475079bdd2f4bb917ded))
+* **deps-dev:** bump js-yaml from 4.1.1 to 4.3.0 in /examples/nextjs-ip-details ([#6106](https://github.com/arcjet/arcjet-js/issues/6106)) ([6d254d1](https://github.com/arcjet/arcjet-js/commit/6d254d1888dc02e776a1a9746a9fc8d5ba24b35b))
+* **deps-dev:** bump js-yaml from 4.1.1 to 4.3.0 in /examples/nextjs-pages-wrap ([#6084](https://github.com/arcjet/arcjet-js/issues/6084)) ([7a0ea5a](https://github.com/arcjet/arcjet-js/commit/7a0ea5aecac3d10f39d88606443c97b5609fc364))
+* **deps-dev:** bump vite from 8.0.10 to 8.0.16 ([#6074](https://github.com/arcjet/arcjet-js/issues/6074)) ([005bb8c](https://github.com/arcjet/arcjet-js/commit/005bb8c06fd5925c97083f834a6490ada42a732d))
+* **deps:** bump js-yaml from 4.1.1 to 4.2.0 ([#6073](https://github.com/arcjet/arcjet-js/issues/6073)) ([91c1cd7](https://github.com/arcjet/arcjet-js/commit/91c1cd7d0c896a1904c13d4aaef10308a83c0def))
+* **deps:** bump launch-editor from 2.13.2 to 2.14.1 in /examples/nuxt ([#6081](https://github.com/arcjet/arcjet-js/issues/6081)) ([9992872](https://github.com/arcjet/arcjet-js/commit/9992872d3ee506b05f8d0034c45284284aefae17))
+* **deps:** bump nuxt from 4.4.6 to 4.4.8 in /examples/nuxt ([#6078](https://github.com/arcjet/arcjet-js/issues/6078)) ([6e9cfd0](https://github.com/arcjet/arcjet-js/commit/6e9cfd0285c10ffc3e8b49864a6353d7ae404cf4))
+* **deps:** bump shell-quote from 1.8.3 to 1.8.4 in /examples/nuxt ([#6065](https://github.com/arcjet/arcjet-js/issues/6065)) ([3c17856](https://github.com/arcjet/arcjet-js/commit/3c17856cb76ed9192f790ed4bbcfffdfe805caf6))
+* **deps:** bump undici and miniflare in /arcjet-guard ([#6091](https://github.com/arcjet/arcjet-js/issues/6091)) ([b15e4b9](https://github.com/arcjet/arcjet-js/commit/b15e4b993830c977513c2a184dea752c89ae70cc))
+* **deps:** bump undici from 6.24.1 to 6.27.0 in /examples/remix-express ([#6095](https://github.com/arcjet/arcjet-js/issues/6095)) ([c2b0f3d](https://github.com/arcjet/arcjet-js/commit/c2b0f3daf5992178399176e1e8c711b08e050c99))
+* **deps:** upgrade Next.js examples to 16.2.6 ([#6094](https://github.com/arcjet/arcjet-js/issues/6094)) ([5f9c64c](https://github.com/arcjet/arcjet-js/commit/5f9c64c293ed07016efe14fc39089e7fcd0e86a8))
+
+
+### ✅ Continuous Integration
+
+* stop release-please self-triggering loop on its own branch ([#6105](https://github.com/arcjet/arcjet-js/issues/6105)) ([514ee98](https://github.com/arcjet/arcjet-js/commit/514ee989af516da8829307de52ea56b5bd3a2f5d))
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...v1.5.0) (2026-06-09)
 
 

analyze-wasm/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...@arcjet/analyze-wasm-v1.6.0) (2026-06-29)
+
+
+### 🚀 New Features
+
+* require Node.js >=22.21.0 and drop EOL Node.js 20 ([#6090](https://github.com/arcjet/arcjet-js/issues/6090)) ([d002118](https://github.com/arcjet/arcjet-js/commit/d00211896cd13f13dce90df9a5308fa942f334f7))
+
+
+### 🏎️ Performance Improvements
+
+* **analyze-wasm:** regenerate js_req wasm (Aho-Corasick bot parser + Wizer) ([#6066](https://github.com/arcjet/arcjet-js/issues/6066)) ([5f62631](https://github.com/arcjet/arcjet-js/commit/5f62631f7535e0f2c3087befa8b81bededabe24f))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * devDependencies
+    * @arcjet/eslint-config bumped from 1.5.0 to 1.6.0
+    * @arcjet/rollup-config bumped from 1.5.0 to 1.6.0
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...@arcjet/analyze-wasm-v1.5.0) (2026-06-09)
 
 

analyze-wasm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/analyze-wasm",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "WebAssembly bindings to Arcjet's local analysis engine",
   "keywords": [
     "analyze",
@@ -61,8 +61,8 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "@arcjet/eslint-config": "1.5.0",
-    "@arcjet/rollup-config": "1.5.0",
+    "@arcjet/eslint-config": "1.6.0",
+    "@arcjet/rollup-config": "1.6.0",
     "@bytecodealliance/jco": "1.5.0",
     "@rollup/wasm-node": "4.62.2",
     "@types/node": "22.19.21",

analyze/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...@arcjet/analyze-v1.6.0) (2026-06-29)
+
+
+### 🚀 New Features
+
+* require Node.js >=22.21.0 and drop EOL Node.js 20 ([#6090](https://github.com/arcjet/arcjet-js/issues/6090)) ([d002118](https://github.com/arcjet/arcjet-js/commit/d00211896cd13f13dce90df9a5308fa942f334f7))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @arcjet/analyze-wasm bumped from 1.5.0 to 1.6.0
+    * @arcjet/protocol bumped from 1.5.0 to 1.6.0
+  * devDependencies
+    * @arcjet/eslint-config bumped from 1.5.0 to 1.6.0
+    * @arcjet/rollup-config bumped from 1.5.0 to 1.6.0
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...@arcjet/analyze-v1.5.0) (2026-06-09)
 
 

analyze/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/analyze",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Arcjet local analysis engine",
   "keywords": [
     "analyze",
@@ -44,12 +44,12 @@
     "test": "npm run build && npm run lint && npm run test-coverage"
   },
   "dependencies": {
-    "@arcjet/analyze-wasm": "1.5.0",
-    "@arcjet/protocol": "1.5.0"
+    "@arcjet/analyze-wasm": "1.6.0",
+    "@arcjet/protocol": "1.6.0"
   },
   "devDependencies": {
-    "@arcjet/eslint-config": "1.5.0",
-    "@arcjet/rollup-config": "1.5.0",
+    "@arcjet/eslint-config": "1.6.0",
+    "@arcjet/rollup-config": "1.6.0",
     "@bytecodealliance/jco": "1.5.0",
     "@rollup/wasm-node": "4.62.2",
     "@types/node": "22.19.21",

arcjet-astro/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...@arcjet/astro-v1.6.0) (2026-06-29)
+
+
+### 🧹 Miscellaneous Chores
+
+* **@arcjet/astro:** Synchronize arcjet-js versions
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @arcjet/body bumped from 1.5.0 to 1.6.0
+    * @arcjet/env bumped from 1.5.0 to 1.6.0
+    * @arcjet/headers bumped from 1.5.0 to 1.6.0
+    * @arcjet/ip bumped from 1.5.0 to 1.6.0
+    * @arcjet/logger bumped from 1.5.0 to 1.6.0
+    * @arcjet/protocol bumped from 1.5.0 to 1.6.0
+    * @arcjet/transport bumped from 1.5.0 to 1.6.0
+    * arcjet bumped from 1.5.0 to 1.6.0
+  * devDependencies
+    * @arcjet/eslint-config bumped from 1.5.0 to 1.6.0
+    * @arcjet/rollup-config bumped from 1.5.0 to 1.6.0
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...@arcjet/astro-v1.5.0) (2026-06-09)
 
 

arcjet-astro/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/astro",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Arcjet runtime security SDK for Astro — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
   "keywords": [
     "ai",
@@ -58,21 +58,21 @@
     "test": "npm run build && npm run lint && npm run test-coverage"
   },
   "dependencies": {
-    "@arcjet/body": "1.5.0",
-    "@arcjet/env": "1.5.0",
-    "@arcjet/headers": "1.5.0",
-    "@arcjet/ip": "1.5.0",
-    "@arcjet/logger": "1.5.0",
-    "@arcjet/protocol": "1.5.0",
-    "@arcjet/transport": "1.5.0",
-    "arcjet": "1.5.0"
+    "@arcjet/body": "1.6.0",
+    "@arcjet/env": "1.6.0",
+    "@arcjet/headers": "1.6.0",
+    "@arcjet/ip": "1.6.0",
+    "@arcjet/logger": "1.6.0",
+    "@arcjet/protocol": "1.6.0",
+    "@arcjet/transport": "1.6.0",
+    "arcjet": "1.6.0"
   },
   "peerDependencies": {
     "astro": "^5.9.3 || ^6.0.0 || ^7.0.0"
   },
   "devDependencies": {
-    "@arcjet/eslint-config": "1.5.0",
-    "@arcjet/rollup-config": "1.5.0",
+    "@arcjet/eslint-config": "1.6.0",
+    "@arcjet/rollup-config": "1.6.0",
     "@rollup/wasm-node": "4.62.2",
     "astro": "7.0.3",
     "eslint": "9.39.4",

arcjet-bun/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...@arcjet/bun-v1.6.0) (2026-06-29)
+
+
+### 🚀 New Features
+
+* expose correlationId on protect() and guard() ([#6104](https://github.com/arcjet/arcjet-js/issues/6104)) ([14a3a1f](https://github.com/arcjet/arcjet-js/commit/14a3a1f201774dd9083eed26334121bfb893715a))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @arcjet/body bumped from 1.5.0 to 1.6.0
+    * @arcjet/env bumped from 1.5.0 to 1.6.0
+    * @arcjet/headers bumped from 1.5.0 to 1.6.0
+    * @arcjet/ip bumped from 1.5.0 to 1.6.0
+    * @arcjet/logger bumped from 1.5.0 to 1.6.0
+    * @arcjet/protocol bumped from 1.5.0 to 1.6.0
+    * @arcjet/transport bumped from 1.5.0 to 1.6.0
+    * arcjet bumped from 1.5.0 to 1.6.0
+  * devDependencies
+    * @arcjet/eslint-config bumped from 1.5.0 to 1.6.0
+    * @arcjet/rollup-config bumped from 1.5.0 to 1.6.0
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...@arcjet/bun-v1.5.0) (2026-06-09)
 
 

arcjet-bun/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/bun",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Arcjet runtime security SDK for Bun — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
   "keywords": [
     "ai",
@@ -51,18 +51,18 @@
     "test": "npm run build && npm run lint"
   },
   "dependencies": {
-    "@arcjet/body": "1.5.0",
-    "@arcjet/env": "1.5.0",
-    "@arcjet/headers": "1.5.0",
-    "@arcjet/ip": "1.5.0",
-    "@arcjet/logger": "1.5.0",
-    "@arcjet/protocol": "1.5.0",
-    "@arcjet/transport": "1.5.0",
-    "arcjet": "1.5.0"
+    "@arcjet/body": "1.6.0",
+    "@arcjet/env": "1.6.0",
+    "@arcjet/headers": "1.6.0",
+    "@arcjet/ip": "1.6.0",
+    "@arcjet/logger": "1.6.0",
+    "@arcjet/protocol": "1.6.0",
+    "@arcjet/transport": "1.6.0",
+    "arcjet": "1.6.0"
   },
   "devDependencies": {
-    "@arcjet/eslint-config": "1.5.0",
-    "@arcjet/rollup-config": "1.5.0",
+    "@arcjet/eslint-config": "1.6.0",
+    "@arcjet/rollup-config": "1.6.0",
     "@rollup/wasm-node": "4.62.2",
     "bun-types": "1.3.14",
     "eslint": "9.39.4",

arcjet-deno/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [1.6.0](https://github.com/arcjet/arcjet-js/compare/v1.5.0...@arcjet/deno-v1.6.0) (2026-06-29)
+
+
+### 🚀 New Features
+
+* expose correlationId on protect() and guard() ([#6104](https://github.com/arcjet/arcjet-js/issues/6104)) ([14a3a1f](https://github.com/arcjet/arcjet-js/commit/14a3a1f201774dd9083eed26334121bfb893715a))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @arcjet/body bumped from 1.5.0 to 1.6.0
+    * @arcjet/env bumped from 1.5.0 to 1.6.0
+    * @arcjet/headers bumped from 1.5.0 to 1.6.0
+    * @arcjet/ip bumped from 1.5.0 to 1.6.0
+    * @arcjet/logger bumped from 1.5.0 to 1.6.0
+    * @arcjet/protocol bumped from 1.5.0 to 1.6.0
+    * @arcjet/transport bumped from 1.5.0 to 1.6.0
+    * arcjet bumped from 1.5.0 to 1.6.0
+  * devDependencies
+    * @arcjet/cache bumped from 1.5.0 to 1.6.0
+    * @arcjet/eslint-config bumped from 1.5.0 to 1.6.0
+    * @arcjet/rollup-config bumped from 1.5.0 to 1.6.0
+
 ## [1.5.0](https://github.com/arcjet/arcjet-js/compare/v1.4.0...@arcjet/deno-v1.5.0) (2026-06-09)