launchdarkly-js-sdk-common 5.7.1 → 5.8.1

package/.github/workflows/dependency-scan.yml

@@ -0,0 +1,30 @@
+name: Dependency Scan
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  generate-nodejs-sbom:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+
+      - name: Generate SBOM
+        uses: launchdarkly/gh-actions/actions/dependency-scan/generate-sbom@main
+        with:
+          types: 'nodejs'
+
+  evaluate-policy:
+    runs-on: ubuntu-latest
+    needs:
+      - generate-nodejs-sbom
+    steps:
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+
+      - name: Evaluate SBOM Policy
+        uses: launchdarkly/gh-actions/actions/dependency-scan/evaluate-policy@main
+        with:
+          artifacts-pattern: bom-*

package/.github/workflows/lint-pr-title.yml

@@ -7,6 +7,9 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   lint-pr-title:
     uses: launchdarkly/gh-actions/.github/workflows/lint-pr-title.yml@main

package/.github/workflows/release-please.yml

@@ -4,14 +4,28 @@ on:
   push:
     branches:
       - main
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Is this a dry run. If so no package will be published.'
+        type: boolean
+        required: true
+      prerelease:
+          description: 'Is this a prerelease. If so, then the latest tag will not be updated in npm.'
+          type: boolean
+          required: true
 
 jobs:
   release-please:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    if: github.event_name == 'push'
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           token: ${{secrets.GITHUB_TOKEN}}
@@ -28,14 +42,13 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.x
+          node-version: 24.x
           registry-url: 'https://registry.npmjs.org'
 
-      - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0
-        name: 'Get NPM token'
-        with:
-          aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
-          ssm_parameter_pairs: '/production/common/releasing/npm/token = NODE_AUTH_TOKEN'
+      - name: Update NPM
+        shell: bash
+        # Must be greater than 11.5.1 for OIDC.
+        run: npm install -g npm@11.6.2
 
       - name: Install Dependencies
         run: npm install
@@ -55,3 +68,32 @@ jobs:
         uses: ./.github/actions/publish-docs
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
+
+  manual-publish-package:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'workflow_dispatch'
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24.x
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Update NPM
+        shell: bash
+        # Must be greater than 11.5.1 for OIDC.
+        run: npm install -g npm@11.6.2
+
+      - name: Install Dependencies
+        run: npm install
+
+      - id: publish-npm
+        name: Publish NPM Package
+        uses: ./.github/actions/publish-npm
+        with:
+          dry-run: ${{ inputs.dry-run }}
+          prerelease: ${{ inputs.prerelease }}

package/.github/workflows/stale.yml

@@ -0,0 +1,14 @@
+name: "Close stale issues and PRs"
+on:
+  workflow_dispatch:
+  schedule:
+    # Happen once per day at 1:30 AM
+    - cron: "30 1 * * *"
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  sdk-close-stale:
+    uses: launchdarkly/gh-actions/.github/workflows/sdk-stale.yml@main

package/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "5.7.1"
+  ".": "5.8.1"
 }

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to the `launchdarkly-js-sdk-common` package will be documented in this file. Changes that affect the dependent SDKs such as `launchdarkly-js-client-sdk` should also be logged in those projects, in the next release that uses the updated version of this package. This project adheres to [Semantic Versioning](http://semver.org).
 
+## [5.8.1](https://github.com/launchdarkly/js-sdk-common/compare/5.8.0...5.8.1) (2026-05-21)
+
+
+### Bug Fixes
+
+* remove uuid dependency, replace with inline implementation ([#146](https://github.com/launchdarkly/js-sdk-common/issues/146)) ([98c87d0](https://github.com/launchdarkly/js-sdk-common/commit/98c87d02a6c58b336bbb40b7a80f9bb3489bbed9))
+
+## [5.8.0](https://github.com/launchdarkly/js-sdk-common/compare/5.7.1...5.8.0) (2025-09-05)
+
+
+### Features
+
+* Add experimental debug override functionality. ([#132](https://github.com/launchdarkly/js-sdk-common/issues/132)) ([8b2f757](https://github.com/launchdarkly/js-sdk-common/commit/8b2f757e9e070226a10f32dcf943501a8f8f1e4a))
+
 ## [5.7.1](https://github.com/launchdarkly/js-sdk-common/compare/5.7.0...5.7.1) (2025-05-30)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "launchdarkly-js-sdk-common",
-  "version": "5.7.1",
+  "version": "5.8.1",
   "description": "LaunchDarkly SDK for JavaScript - common code",
   "author": "LaunchDarkly <team@launchdarkly.com>",
   "license": "Apache-2.0",
@@ -44,13 +44,12 @@
     "launchdarkly-js-test-helpers": "1.1.0",
     "prettier": "1.19.1",
     "readline-sync": "^1.4.9",
-    "typescript": "~5.4.5",
-    "typedoc": "^0.25.13"
+    "typedoc": "^0.25.13",
+    "typescript": "~5.4.5"
   },
   "dependencies": {
     "base64-js": "^1.3.0",
-    "fast-deep-equal": "^2.0.1",
-    "uuid": "^8.0.0"
+    "fast-deep-equal": "^2.0.1"
   },
   "repository": {
     "type": "git",

package/src/AnonymousContextProcessor.js

@@ -1,4 +1,4 @@
-const { v1: uuidv1 } = require('uuid');
+const { randomUuidV4 } = require('./uuid');
 const { getContextKinds } = require('./context');
 
 const errors = require('./errors');
@@ -57,7 +57,7 @@ function AnonymousContextProcessor(persistentStorage) {
           context.key = cachedId;
           return context;
         } else {
-          const id = uuidv1();
+          const id = randomUuidV4();
           context.key = id;
           return setCachedContextKey(id, kind).then(() => context);
         }

package/src/EventSender.js

@@ -1,6 +1,6 @@
 const errors = require('./errors');
 const utils = require('./utils');
-const { v1: uuidv1 } = require('uuid');
+const { randomUuidV4 } = require('./uuid');
 const { getLDHeaders, transformHeaders } = require('./headers');
 
 function EventSender(platform, environmentId, options) {
@@ -25,7 +25,7 @@ function EventSender(platform, environmentId, options) {
     }
 
     const jsonBody = JSON.stringify(events);
-    const payloadId = isDiagnostic ? null : uuidv1();
+    const payloadId = isDiagnostic ? null : randomUuidV4();
 
     function doPostRequest(canRetry) {
       const headers = isDiagnostic

package/src/FlagStore.js

@@ -0,0 +1,144 @@
+const utils = require('./utils');
+
+/**
+ * FlagStore - Centralized flag store and access point for all feature flags
+ *
+ * This module manages two types of feature flags:
+ * 1. Regular flags - Retrieved from LaunchDarkly servers or bootstrap data
+ * 2. Override flags - Local overrides for debugging/testing
+ *
+ * When a flag is requested:
+ * - If an override exists for that flag, the override value is returned
+ * - Otherwise, the regular flag value is returned
+ */
+function FlagStore() {
+  let flags = {};
+  // The flag overrides are set lazily to allow bypassing property checks when no overrides are present.
+  let flagOverrides;
+
+  /**
+   * Gets a single flag by key, with overrides taking precedence over regular flags
+   * @param {string} key The flag key to retrieve
+   * @returns {Object|null} The flag object or null if not found
+   */
+  function get(key) {
+    // Check overrides first, then real flags
+    if (flagOverrides && utils.objectHasOwnProperty(flagOverrides, key) && flagOverrides[key]) {
+      return flagOverrides[key];
+    }
+
+    if (flags && utils.objectHasOwnProperty(flags, key) && flags[key] && !flags[key].deleted) {
+      return flags[key];
+    }
+
+    return null;
+  }
+
+  /**
+   * Gets all flags with overrides applied
+   * @returns {Object} Object containing all flags with any overrides applied
+   */
+  function getFlagsWithOverrides() {
+    const result = {};
+
+    // Add all flags first
+    for (const key in flags) {
+      const flag = get(key);
+      if (flag) {
+        result[key] = flag;
+      }
+    }
+
+    // Override with any flagOverrides (they take precedence)
+    if (flagOverrides) {
+      for (const key in flagOverrides) {
+        const override = get(key);
+        if (override) {
+          result[key] = override;
+        }
+      }
+    }
+
+    return result;
+  }
+
+  /**
+   * Replaces all flags with new flag data
+   * @param {Object} newFlags - Object containing the new flag data
+   */
+  function setFlags(newFlags) {
+    flags = { ...newFlags };
+  }
+
+  /**
+   * Sets an override value for a specific flag
+   * @param {string} key The flag key to override
+   * @param {*} value The override value for the flag
+   */
+  function setOverride(key, value) {
+    if (!flagOverrides) {
+      flagOverrides = {};
+    }
+    flagOverrides[key] = { value };
+  }
+
+  /**
+   * Removes an override for a specific flag
+   * @param {string} key The flag key to remove the override for
+   */
+  function removeOverride(key) {
+    if (!flagOverrides || !flagOverrides[key]) {
+      return; // No override to remove
+    }
+
+    delete flagOverrides[key];
+
+    // If no more overrides, reset to undefined for performance
+    if (Object.keys(flagOverrides).length === 0) {
+      flagOverrides = undefined;
+    }
+  }
+
+  /**
+   * Clears all flag overrides and returns the cleared overrides
+   * @returns {Object} The overrides that were cleared, useful for tracking what was removed
+   */
+  function clearAllOverrides() {
+    if (!flagOverrides) {
+      return {}; // No overrides to clear, return empty object for consistency
+    }
+
+    const clearedOverrides = { ...flagOverrides };
+    flagOverrides = undefined; // Reset to undefined
+    return clearedOverrides;
+  }
+
+  /**
+   * Gets the internal flag state without overrides applied
+   * @returns {Object} The internal flag data structure
+   */
+  function getFlags() {
+    return flags;
+  }
+
+  /**
+   * Gets the flag overrides data
+   * @returns {Object} The flag overrides object, or empty object if no overrides exist
+   */
+  function getFlagOverrides() {
+    return flagOverrides || {};
+  }
+
+  return {
+    clearAllOverrides,
+    get,
+    getFlagOverrides,
+    getFlags,
+    getFlagsWithOverrides,
+    removeOverride,
+    setFlags,
+    setOverride,
+  };
+}
+
+module.exports = FlagStore;