firecrawl 4.29.0 → 4.29.2

package/audit-ci.jsonc

@@ -1,12 +1,4 @@
 {
     "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
-    "low": true,
-    "allowlist": [
-        // GHSA-h67p-54hq-rp68 (js-yaml):
-        // Jest coverage tooling still resolves a js-yaml 3.x line; the non-affected
-        // release is 4.x, so avoid a major-crossing override in this SDK package.
-        // Owner: team-engineering-reviewers. Tracking: create internal ticket.
-        // Expires: 2026-06-30.
-        "GHSA-h67p-54hq-rp68"
-    ]
+    "low": true
 }

package/dist/{chunk-Z2MP42KG.js → chunk-N3GO36OX.js}

@@ -12,7 +12,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@mendable/firecrawl-js",
-      version: "4.29.0",
+      version: "4.29.2",
       description: "JavaScript SDK for Firecrawl API",
       main: "dist/index.js",
       types: "dist/index.d.ts",
@@ -82,6 +82,7 @@ var require_package = __commonJS({
           "picomatch@<4.0.4": ">=4.0.4",
           handlebars: ">=4.7.9",
           "brace-expansion": ">=5.0.6",
+          "js-yaml@>=3.0.0 <3.15.0": "3.15.0",
           "axios@>=1.0.0 <1.16.0": "1.16.1",
           "follow-redirects@<1.16.0": ">=1.16.0 <2.0.0",
           "form-data@>=4.0.0 <4.0.6": "4.0.6",

package/dist/index.cjs

@@ -39,7 +39,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@mendable/firecrawl-js",
-      version: "4.29.0",
+      version: "4.29.2",
       description: "JavaScript SDK for Firecrawl API",
       main: "dist/index.js",
       types: "dist/index.d.ts",
@@ -109,6 +109,7 @@ var require_package = __commonJS({
           "picomatch@<4.0.4": ">=4.0.4",
           handlebars: ">=4.7.9",
           "brace-expansion": ">=5.0.6",
+          "js-yaml@>=3.0.0 <3.15.0": "3.15.0",
           "axios@>=1.0.0 <1.16.0": "1.16.1",
           "follow-redirects@<1.16.0": ">=1.16.0 <2.0.0",
           "form-data@>=4.0.0 <4.0.6": "4.0.6",
@@ -1490,6 +1491,7 @@ function appendParam(params, key, value) {
   }
 }
 function withQuery(path, params) {
+  params.append("origin", `js-sdk@${getVersion()}`);
   const qs = params.toString();
   return qs ? `${path}?${qs}` : path;
 }

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   require_package
-} from "./chunk-Z2MP42KG.js";
+} from "./chunk-N3GO36OX.js";
 
 // src/v2/utils/httpClient.ts
 import axios from "axios";
@@ -1358,6 +1358,7 @@ function appendParam(params, key, value) {
   }
 }
 function withQuery(path, params) {
+  params.append("origin", `js-sdk@${getVersion()}`);
   const qs = params.toString();
   return qs ? `${path}?${qs}` : path;
 }
@@ -2302,7 +2303,7 @@ var FirecrawlApp = class {
       if (typeof process !== "undefined" && process.env && process.env.npm_package_version) {
         return process.env.npm_package_version;
       }
-      const packageJson = await import("./package-EHFB74LL.js");
+      const packageJson = await import("./package-VAY7ZMTB.js");
       return packageJson.default.version;
     } catch (error) {
       const isTest = typeof process !== "undefined" && (process.env.JEST_WORKER_ID != null || false);

package/dist/{package-EHFB74LL.js → package-VAY7ZMTB.js}

@@ -1,4 +1,4 @@
 import {
   require_package
-} from "./chunk-Z2MP42KG.js";
+} from "./chunk-N3GO36OX.js";
 export default require_package();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "firecrawl",
-  "version": "4.29.0",
+  "version": "4.29.2",
   "description": "JavaScript SDK for Firecrawl API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/__tests__/unit/v2/research.test.ts

@@ -53,7 +53,8 @@ describe("research.searchPapers", () => {
     const { client, calls } = makeClient(() => ({ status: 200, data: { results: [] } }));
     await client.searchPapers("q");
     const qs = new URLSearchParams(calls[0].split("?")[1]);
-    expect([...qs.keys()]).toEqual(["query"]);
+    expect([...qs.keys()]).toEqual(["query", "origin"]);
+    expect(qs.get("origin")).toMatch(/^js-sdk@/);
   });
 
   test("rejects empty query", async () => {
@@ -74,10 +75,14 @@ describe("research.searchPapers", () => {
 });
 
 describe("research.getPaper", () => {
-  test("detail mode encodes the id and sends no query params", async () => {
+  test("detail mode encodes the id and sends only the origin param", async () => {
     const { client, calls } = makeClient(() => ({ status: 200, data: { paper: {} } }));
     await client.getPaper("arxiv:2105.05233");
-    expect(calls[0]).toBe("/v2/search/research/papers/arxiv%3A2105.05233");
+    const [path, query] = calls[0].split("?");
+    expect(path).toBe("/v2/search/research/papers/arxiv%3A2105.05233");
+    const qs = new URLSearchParams(query);
+    expect([...qs.keys()]).toEqual(["origin"]);
+    expect(qs.get("origin")).toMatch(/^js-sdk@/);
   });
 
   test("read mode adds query and k", async () => {

package/src/v2/methods/research.ts

@@ -12,6 +12,7 @@ import type {
 import { SdkError } from "../types";
 import { HttpClient } from "../utils/httpClient";
 import { throwForBadResponse } from "../utils/errorHandler";
+import { getVersion } from "../utils/getVersion";
 
 const BASE = "/v2/search/research";
 
@@ -32,6 +33,9 @@ function appendParam(
 }
 
 function withQuery(path: string, params: URLSearchParams): string {
+  // Research endpoints are GETs, so the POST-body origin injection in
+  // HttpClient never applies — attach it as a query param instead.
+  params.append("origin", `js-sdk@${getVersion()}`);
   const qs = params.toString();
   return qs ? `${path}?${qs}` : path;
 }