@applitools/core 4.69.0 → 4.69.1

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## [4.69.1](https://github.com/Applitools-Dev/sdk/compare/js/core@4.69.0...js/core@4.69.1) (2026-08-23)
+
+
+### Bug Fixes
+
+* keep the figma access token out of logs when masking is enabled | AD-15515 ([#4062](https://github.com/Applitools-Dev/sdk/issues/4062)) ([17bc177](https://github.com/Applitools-Dev/sdk/commit/17bc17789d88e2d92f32c66c3a43acb14eec4a70))
+
+
+### Performance Improvements
+
+* CDT node dedup pass | AD-15243 ([baeab05](https://github.com/Applitools-Dev/sdk/commit/baeab05507e12d4d499050cd770191ef3cd9d0df))
+
+
+### Dependencies
+
+* @applitools/dom-snapshot bumped to 4.18.1
+  #### Performance Improvements
+
+  * CDT node dedup pass | AD-15243 ([baeab05](https://github.com/Applitools-Dev/sdk/commit/baeab05507e12d4d499050cd770191ef3cd9d0df))
+* @applitools/socket bumped to 1.3.17
+  #### Bug Fixes
+
+  * keep the figma access token out of logs when masking is enabled | AD-15515 ([#4062](https://github.com/Applitools-Dev/sdk/issues/4062)) ([17bc177](https://github.com/Applitools-Dev/sdk/commit/17bc17789d88e2d92f32c66c3a43acb14eec4a70))
+* @applitools/image bumped to 1.3.2
+  #### Bug Fixes
+
+  * bump sharp to ^0.35.3 to clear libvips advisories | FLD-4829 ([#4113](https://github.com/Applitools-Dev/sdk/issues/4113)) ([90c2d08](https://github.com/Applitools-Dev/sdk/commit/90c2d0824cf3dfe56a074800907da6eb940ba350))
+* @applitools/screenshoter bumped to 3.12.30
+
+* @applitools/nml-client bumped to 1.12.1
+
+* @applitools/tunnel-client bumped to 1.12.4
+
+* @applitools/ufg-client bumped to 1.23.2
+
+* @applitools/core-base bumped to 1.38.2
+
+* @applitools/ec-client bumped to 1.12.44
+
+
 ## [4.69.0](https://github.com/Applitools-Dev/sdk/compare/js/core@4.68.1...js/core@4.69.0) (2026-08-19)
 
 

package/dist/figma/seam.js

@@ -59,8 +59,10 @@ async function applyFigmaBaselines(settings, logger, resolve = figma_1.setFigmaB
         // A long TTL lets a pre-warmed cache (committed fixtures) serve through the normal cache-hit path
         // instead of the all-or-nothing skipApi bypass. Number.isFinite also rejects a non-numeric env value.
         const nodesCacheTtlSeconds = (_d = figmaOptions.nodesCacheTtlSeconds) !== null && _d !== void 0 ? _d : envTtl;
-        // Registered with the logger the way apiKey/secretToken are elsewhere, so a token supplied through
-        // figmaOptions is redacted wherever settings are logged downstream.
+        // Registered with the logger the way apiKey/secretToken are elsewhere. Masking is process-wide but
+        // takes effect only from this point on, and only when it is enabled (`maskLog` /
+        // APPLITOOLS_MASK_LOG). Log lines written before open reaches this seam — the universal socket's
+        // payload logs, for one — register the token themselves.
         const accessToken = (_e = figmaOptions.accessToken) !== null && _e !== void 0 ? _e : process.env.FIGMA_ACCESS_TOKEN;
         if (accessToken)
             logger.mask(accessToken);

package/dist/offline/run-offline-snapshots.js

@@ -26,7 +26,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runOfflineSnapshots = void 0;
+exports.runOfflineSnapshots = exports.toEyesServerSettings = void 0;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const core_1 = require("../core");
@@ -43,6 +43,22 @@ const os_1 = __importDefault(require("os"));
 const extract_git_info_1 = require("../utils/extract-git-info");
 const open_eyes_1 = require("../open-eyes");
 const throttledReadFile = (0, throat_1.default)(Number(process.env.APPLITOOLS_FILE_READING_CONCURRENCY) || 1000, fs_1.default.promises.readFile);
+/**
+ * @internal
+ * The settings a replay run hands to `getAccountInfo`, which logs them, and the sanitized config the
+ * run works with afterwards. `figmaBaselines`/`figmaOptions` are off-the-wire open config and
+ * `figmaOptions.accessToken` is a Figma credential; the open-eyes seam that strips them is bypassed by
+ * replay, and no mask is registered on this path, so both the flattened open config and the nested
+ * `config` are stripped here — spreading `options` re-introduces `config.open` in full otherwise.
+ */
+function toEyesServerSettings(options) {
+    const open = { ...options.config.open };
+    delete open.figmaBaselines;
+    delete open.figmaOptions;
+    const config = { ...options.config, open };
+    return { ...open, ...options, config };
+}
+exports.toEyesServerSettings = toEyesServerSettings;
 function getConsoleLogLimit() {
     var _a;
     return (_a = utils.general.getEnvValue('OFFLINE_LOG_LIMIT', 'number')) !== null && _a !== void 0 ? _a : 20;
@@ -64,13 +80,8 @@ async function runOfflineSnapshots(options) {
     const offlineLocationPath = path_1.default.resolve(options.offlineLocationPath);
     const startTime = Date.now();
     const logger = (_a = options.logger) !== null && _a !== void 0 ? _a : (0, logger_1.makeLogger)({ format: { label: 'offline-exec' } });
-    // figmaBaselines/figmaOptions are off-the-wire open config that the open seam resolves and then strips.
-    // This replay path bypasses the seam, so strip them once here — figmaOptions carries a Figma access
-    // token, and getAccountInfo logs the settings it is called with.
-    const openConfig = { ...options.config.open };
-    delete openConfig.figmaBaselines;
-    delete openConfig.figmaOptions;
-    const eyesServerSettings = { ...openConfig, ...options };
+    const eyesServerSettings = toEyesServerSettings(options);
+    const config = eyesServerSettings.config;
     const core = (0, core_1.makeCore)({ agentId: `js/core-offline/${version()}`, logger });
     const account = await core.getAccountInfo({ settings: eyesServerSettings });
     const ufgClient = await (0, get_ufg_client_1.makeGetUFGClient)({ logger })({
@@ -97,7 +108,7 @@ async function runOfflineSnapshots(options) {
         testResults: allTestResults,
         totalTime: Date.now() - startTime,
         jsonFilePath: options.jsonFilePath,
-        saveNewTests: options.config.close.updateBaselineIfNew,
+        saveNewTests: config.close.updateBaselineIfNew,
     });
     if (!isSuccess.onErrors && options.failOnError) {
         throw new Error(outputStr);
@@ -118,7 +129,7 @@ async function runOfflineSnapshots(options) {
             const fileOpenSettings = await fs_1.default.promises
                 .readFile(path_1.default.join(testPath, 'settings.json'), 'utf-8')
                 .then(JSON.parse);
-            const openSettings = (0, merge_configs_1.mergeConfigs)(fileOpenSettings, openConfig);
+            const openSettings = (0, merge_configs_1.mergeConfigs)(fileOpenSettings, config.open);
             messages.push(`Running test: ${openSettings.testName} (${formatEnvironment(openSettings.environment)})`);
             return { testPath, openSettings, testLogger };
         });
@@ -138,7 +149,7 @@ async function runOfflineSnapshots(options) {
         const batchIds = [...new Set(results.map(t => t.batchId))];
         const allTestResults = results.map(t => t.results);
         logger.log('done running all tests', allTestResults);
-        const keepBatchOpen = utils.general.getEnvValue('DONT_CLOSE_BATCHES', 'boolean') || options.config.open.keepBatchOpen;
+        const keepBatchOpen = utils.general.getEnvValue('DONT_CLOSE_BATCHES', 'boolean') || config.open.keepBatchOpen;
         if (!keepBatchOpen) {
             await core.closeBatch({ settings: batchIds.map(batchId => ({ batchId, ...account.eyesServer })) });
             logger.log('done closing batches');
@@ -218,7 +229,7 @@ async function runOfflineSnapshots(options) {
         const closeSettingsPath = path_1.default.resolve(testPath, 'close.json');
         if (fs_1.default.existsSync(closeSettingsPath)) {
             const fileCloseSettings = await throttledReadFile(closeSettingsPath, 'utf-8').then(JSON.parse);
-            const closeSettings = (0, merge_configs_1.mergeConfigs)(fileCloseSettings, options.config.close);
+            const closeSettings = (0, merge_configs_1.mergeConfigs)(fileCloseSettings, config.close);
             return closeSettings;
         }
         return undefined;
@@ -381,7 +392,7 @@ async function runOfflineSnapshots(options) {
         if (accessibilityReportOptions === null || accessibilityReportOptions === void 0 ? void 0 : accessibilityReportOptions.uploadUrl)
             (_b = baseTarget.accessibilityReportLocation) !== null && _b !== void 0 ? _b : (baseTarget.accessibilityReportLocation = accessibilityReportOptions.uploadUrl);
         // baseTarget.name = snapshot.title // TODO figure out
-        const mergedCheckSettings = (0, merge_configs_1.mergeConfigs)(baseSettings, options.config.check);
+        const mergedCheckSettings = (0, merge_configs_1.mergeConfigs)(baseSettings, config.check);
         return { mergedCheckSettings, baseTarget };
     }
     async function logStartupInfo() {
@@ -398,7 +409,7 @@ async function runOfflineSnapshots(options) {
                     testCount: testFolders.length,
                     ufgServerUrl: account.ufgServer.ufgServerUrl,
                     CI: process.env.CI,
-                    config: options.config,
+                    config,
                     driver: {
                         platform: os_1.default.platform(),
                         version: os_1.default.release(),

package/dist/ufg/utils/take-dom-snapshot.js

@@ -50,6 +50,7 @@ async function takeDomSnapshot({ context, settings, logger, }) {
             skipRootHtmlResource: settings === null || settings === void 0 ? void 0 : settings.skipRootHtmlResource,
             fetchConcurrency: settings === null || settings === void 0 ? void 0 : settings.fetchConcurrency,
             removeReverseProxyURLPrefixes: Boolean(process.env.APPLITOOLS_SCRIPT_REMOVE_REVERSE_PROXY_URL_PREFIXES),
+            skipCDTDedup: utils.general.getEnvValue('SKIP_CDT_DEDUP', 'boolean'),
             chunkByteLength: (_a = settings === null || settings === void 0 ? void 0 : settings.chunkByteLength) !== null && _a !== void 0 ? _a : (Number(process.env.APPLITOOLS_SCRIPT_RESULT_MAX_BYTE_LENGTH) ||
                 (environment.isIOS ? 100000 : 250 * 1024 * 1024)),
             serializeResources: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@applitools/core",
-  "version": "4.69.0",
+  "version": "4.69.1",
   "homepage": "https://applitools.com",
   "bugs": {
     "url": "https://github.com/applitools/eyes.sdk.javascript1/issues"
@@ -61,19 +61,19 @@
     "setup:standalone": "sh -c 'yarn chromedriver --port=4444 --verbose &'"
   },
   "dependencies": {
-    "@applitools/core-base": "1.38.1",
+    "@applitools/core-base": "1.38.2",
     "@applitools/dom-capture": "11.8.5",
-    "@applitools/dom-snapshot": "4.18.0",
+    "@applitools/dom-snapshot": "4.18.1",
     "@applitools/driver": "1.26.9",
-    "@applitools/ec-client": "1.12.43",
-    "@applitools/image": "1.3.1",
+    "@applitools/ec-client": "1.12.44",
+    "@applitools/image": "1.3.2",
     "@applitools/logger": "2.3.1",
-    "@applitools/nml-client": "1.12.0",
+    "@applitools/nml-client": "1.12.1",
     "@applitools/req": "1.11.3",
-    "@applitools/screenshoter": "3.12.29",
+    "@applitools/screenshoter": "3.12.30",
     "@applitools/snippets": "2.9.7",
-    "@applitools/socket": "1.3.16",
-    "@applitools/ufg-client": "1.23.1",
+    "@applitools/socket": "1.3.17",
+    "@applitools/ufg-client": "1.23.2",
     "@applitools/utils": "1.15.2",
     "abort-controller": "3.0.0",
     "chalk": "4.1.2",
@@ -90,7 +90,7 @@
     "@applitools/spec-driver-webdriver": "^1.6.9",
     "@applitools/test-server": "^1.4.7",
     "@applitools/test-utils": "^1.5.17",
-    "@applitools/tunnel-client": "^1.12.3",
+    "@applitools/tunnel-client": "^1.12.4",
     "@swc-node/register": "^1.6.8",
     "@types/mocha": "^10.0.7",
     "@types/node": "^12.20.55",

package/types/offline/run-offline-snapshots.d.ts

@@ -10,4 +10,15 @@ export type OfflineSnapshotsSettings = EyesServerSettings & {
     logger?: Logger;
     jsonFilePath?: string;
 };
+/**
+ * @internal
+ * The settings a replay run hands to `getAccountInfo`, which logs them, and the sanitized config the
+ * run works with afterwards. `figmaBaselines`/`figmaOptions` are off-the-wire open config and
+ * `figmaOptions.accessToken` is a Figma credential; the open-eyes seam that strips them is bypassed by
+ * replay, and no mask is registered on this path, so both the flattened open config and the nested
+ * `config` are stripped here — spreading `options` re-introduces `config.open` in full otherwise.
+ */
+export declare function toEyesServerSettings(options: OfflineSnapshotsSettings): EyesServerSettings & {
+    config: Config<SpecType, 'ufg'>;
+};
 export declare function runOfflineSnapshots(options: OfflineSnapshotsSettings): Promise<TestResult[]>;