@applitools/core 4.65.2 → 4.66.1

package/CHANGELOG.md

@@ -1,5 +1,90 @@
 # Changelog
 
+## [4.66.1](https://github.com/Applitools-Dev/sdk/compare/js/core@4.66.0...js/core@4.66.1) (2026-07-08)
+
+
+### Bug Fixes
+
+* stop UFG old-infra retry after a retry fails | AD-14675 ([#3970](https://github.com/Applitools-Dev/sdk/issues/3970)) ([1531893](https://github.com/Applitools-Dev/sdk/commit/1531893cc9c098f3ade329ceae7164600c184fa5))
+
+
+### Dependencies
+
+* @applitools/nml-client bumped to 1.11.35
+
+* @applitools/core-base bumped to 1.36.1
+  #### Bug Fixes
+
+  * forward Exact match-level tuning to the server across JS + Java | FLD-4685 ([#3974](https://github.com/Applitools-Dev/sdk/issues/3974)) ([fea351c](https://github.com/Applitools-Dev/sdk/commit/fea351c76c80f63bf658d9573b3d34e0537e0cce))
+* @applitools/ec-client bumped to 1.12.37
+
+
+## [4.66.0](https://github.com/Applitools-Dev/sdk/compare/js/core@4.65.2...js/core@4.66.0) (2026-06-28)
+
+
+### Features
+
+* stream SDK logs to Azure Blob per server flag | AD-13401 ([#3849](https://github.com/Applitools-Dev/sdk/issues/3849)) ([7f9dfec](https://github.com/Applitools-Dev/sdk/commit/7f9dfecd874aefc33104db015451a22eee500324))
+
+
+### Bug Fixes
+
+* updated extract git fallback logic | FLD-4492 ([#3831](https://github.com/Applitools-Dev/sdk/issues/3831)) ([0d98f3c](https://github.com/Applitools-Dev/sdk/commit/0d98f3cdf828eff756ffbfc5d4cdff7b19a20557))
+
+
+### Dependencies
+
+* @applitools/utils bumped to 1.15.1
+  #### Bug Fixes
+
+  * updated extract git fallback logic | FLD-4492 ([#3831](https://github.com/Applitools-Dev/sdk/issues/3831)) ([0d98f3c](https://github.com/Applitools-Dev/sdk/commit/0d98f3cdf828eff756ffbfc5d4cdff7b19a20557))
+* @applitools/logger bumped to 2.3.0
+  #### Features
+
+  * stream SDK logs to Azure Blob per server flag | AD-13401 ([#3849](https://github.com/Applitools-Dev/sdk/issues/3849)) ([7f9dfec](https://github.com/Applitools-Dev/sdk/commit/7f9dfecd874aefc33104db015451a22eee500324))
+
+
+
+* @applitools/dom-snapshot bumped to 4.17.5
+
+* @applitools/socket bumped to 1.3.15
+
+* @applitools/req bumped to 1.11.2
+
+* @applitools/image bumped to 1.2.13
+
+* @applitools/dom-capture bumped to 11.8.3
+
+* @applitools/driver bumped to 1.26.5
+
+* @applitools/spec-driver-webdriver bumped to 1.6.5
+
+* @applitools/spec-driver-selenium bumped to 1.8.5
+
+* @applitools/spec-driver-playwright bumped to 1.9.5
+
+* @applitools/spec-driver-puppeteer bumped to 1.8.5
+
+* @applitools/screenshoter bumped to 3.12.24
+
+* @applitools/nml-client bumped to 1.11.34
+
+* @applitools/tunnel-client bumped to 1.12.2
+
+* @applitools/ufg-client bumped to 1.22.5
+
+* @applitools/core-base bumped to 1.36.0
+  #### Features
+
+  * stream SDK logs to Azure Blob per server flag | AD-13401 ([#3849](https://github.com/Applitools-Dev/sdk/issues/3849)) ([7f9dfec](https://github.com/Applitools-Dev/sdk/commit/7f9dfecd874aefc33104db015451a22eee500324))
+
+
+
+* @applitools/ec-client bumped to 1.12.36
+
+* @applitools/test-server bumped to 1.4.6
+
+
 ## [4.65.2](https://github.com/Applitools-Dev/sdk/compare/js/core@4.65.1...js/core@4.65.2) (2026-06-18)
 
 

package/dist/troubleshoot/ufg.js

@@ -52,6 +52,10 @@ const getAccessToken = (() => {
     let accessToken;
     return async () => {
         if (!accessToken) {
+            // SECURITY: interpolated args (RENDER_INFO_URL, getProxyCurlArg()) come from
+            // trusted config (serverUrl/apiKey/proxy), not user input. Don't add
+            // externally-influenced data here without moving to execFile (no shell) to
+            // prevent injection — tracked in the follow-up tech-debt ticket.
             const { stdout } = await utils.process.execute(`curl -s ${eyes_1.RENDER_INFO_URL} ${(0, utils_1.getProxyCurlArg)()}`, {
                 maxBuffer: 10000000,
             });

package/dist/ufg/check.js

@@ -39,6 +39,10 @@ const create_render_target_from_snapshot_1 = require("./create-render-target-fro
 const to_base_check_settings_1 = require("../automation/utils/to-base-check-settings");
 const to_old_infra_environment_1 = require("./to-old-infra-environment");
 function makeCheck({ eyes, target: defaultTarget, environments: defaultEnvironments = [], spec, signal, logger: mainLogger, }) {
+    // Sessions whose old-infra retry chain has ended: once a retry doesn't confirm an old-infra match,
+    // the backend stops expecting retries, so we must stop sending them. baseEyes is cached per
+    // environment, so it is a stable per-session key. See AD-14675.
+    const oldInfraRetryDisabled = new WeakSet();
     return async function check({ target = defaultTarget, settings = {}, logger = mainLogger, } = {}) {
         var _a;
         logger = logger.extend(mainLogger);
@@ -193,7 +197,9 @@ function makeCheck({ eyes, target: defaultTarget, environments: defaultEnvironme
                         settings: baseSettings,
                         logger: environmentLogger,
                     });
-                    if (!checkResult.asExpected && baseEyes.test.shouldRetryWithOldInfra) {
+                    if (!checkResult.asExpected &&
+                        baseEyes.test.shouldRetryWithOldInfra &&
+                        !oldInfraRetryDisabled.has(baseEyes)) {
                         const oldInfraEnvironment = (0, to_old_infra_environment_1.toOldInfraEnvironment)(environment);
                         if (oldInfraEnvironment) {
                             // Best-effort: the retry adds an extra render + check, and a transient
@@ -203,13 +209,18 @@ function makeCheck({ eyes, target: defaultTarget, environments: defaultEnvironme
                             try {
                                 const { target, settings } = await renderForCheck(oldInfraEnvironment);
                                 settings.oldInfraRetry = true;
-                                await baseEyes.check({
+                                const retryResult = await baseEyes.check({
                                     target: { ...target, isTransformed: true },
                                     settings,
                                     logger: environmentLogger,
                                 });
+                                // A retry that doesn't confirm an old-infra match means the backend now treats the
+                                // session as non-infra and stops expecting retries — so stop sending them.
+                                if (!retryResult.asExpected)
+                                    oldInfraRetryDisabled.add(baseEyes);
                             }
                             catch (error) {
+                                oldInfraRetryDisabled.add(baseEyes);
                                 environmentLogger.warn('Old-infra retry failed; keeping the primary check result', error);
                             }
                         }