@salesforce/retail-react-app 10.3.0-preview.1 → 10.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +1 -4
  2. package/package.json +6 -6
package/CHANGELOG.md CHANGED
@@ -1,7 +1,4 @@
1
- ## v10.3.0-preview.1 (Oct 08, 2026)
2
- - Version alignment release; no functional changes to `retail-react-app` since v10.3.0-preview.0.
3
-
4
- ## v10.3.0-preview.0 (Oct 05, 2026)
1
+ ## v10.3.0 (Oct 08, 2026)
5
2
  - [Enhancement] Rename `INLINE_AGENT_WIDGET_COMMERCE_SETTINGS` environment variable to `EMBEDDED_AGENT_COMMERCE_SETTINGS` and config key `inlineAgentWidget` to `embeddedAgent` to align with updated product terminology. [#4041](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4041)
6
3
  - [Feature] Add a configurable `cc_enableImageUpload` toggle for the Commerce Client (Embedded Messaging) shopper-agent widget, defaulting to `'false'` and forwarded to the bundle as `messagingConfig.enableImageUpload`. Set it to `'true'` via `COMMERCE_AGENT_SETTINGS` to let shoppers upload images in the chat; requires a Commerce Client bundle that supports image upload (`cc_cdnVersion` >= `1.44.0`) plus the backend file-upload prerequisites. Also adds `blob:` and `data:` to the `img-src` CSP directive in `app/ssr.js` so the widget can render the pre-send preview (a `blob:` URL) and the sent-image thumbnail (a `data:` URL); the widget renders images locally only, so no image host is added. [#4030](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4030)
7
4
  - [Feature] Add the `dw_attribution` first-touch marketing-attribution cookie (W-23493129). The app writes a sanitized, allowlist-only campaign cookie client-side on load so Salesforce CIP can attribute placed orders back to the campaign that drove a headless-storefront visit. Writing in the browser (not on SSR) means it also fires on a CDN document-cache hit — where the SSR handler never runs — and lets the app clear the cookie the instant a shopper opts out; campaign landing pages stay fully cacheable. The Secure + `SameSite=Lax` cookie has a 30-minute write-once TTL and stores percent-encoded `key=value` pairs (`utm_source`/`utm_medium`/`utm_campaign`/`utm_term`/`utm_content`, `gclid`, `fbclid`, `msclkid`, and a sanitized external `ref` — origin, path, and its own allowlisted params only); no free-text query params are captured. It is write-once (first touch wins) and honors Do Not Track (`dw_dnt=1`): while opted out it captures nothing and expires any existing cookie.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@salesforce/retail-react-app",
3
- "version": "10.3.0-preview.1",
3
+ "version": "10.3.0",
4
4
  "license": "See license in LICENSE",
5
5
  "author": "cc-pwa-kit@salesforce.com",
6
6
  "ccExtensibility": {
@@ -46,10 +46,10 @@
46
46
  "@loadable/component": "^5.15.3",
47
47
  "@peculiar/webcrypto": "^1.4.2",
48
48
  "@salesforce/cc-datacloud-typescript": "1.1.2",
49
- "@salesforce/commerce-sdk-react": "5.5.0-preview.0",
50
- "@salesforce/pwa-kit-dev": "3.21.0-preview.1",
51
- "@salesforce/pwa-kit-react-sdk": "3.21.0-preview.1",
52
- "@salesforce/pwa-kit-runtime": "3.21.0-preview.1",
49
+ "@salesforce/commerce-sdk-react": "5.5.0",
50
+ "@salesforce/pwa-kit-dev": "3.21.0",
51
+ "@salesforce/pwa-kit-react-sdk": "3.21.0",
52
+ "@salesforce/pwa-kit-runtime": "3.21.0",
53
53
  "@salesforce/storefront-next-runtime": "1.3.1",
54
54
  "@tanstack/react-query": "^4.28.0",
55
55
  "@tanstack/react-query-devtools": "^4.29.1",
@@ -115,5 +115,5 @@
115
115
  "maxSize": "403 kB"
116
116
  }
117
117
  ],
118
- "gitHead": "a860b13c16696b0e8253ee1016d8500a5ce8a2f0"
118
+ "gitHead": "7f26d1f98d1beec0b3c9e90a75a923598cc9ed96"
119
119
  }