Skip to content

Latest commit

 

History

History
373 lines (233 loc) · 17.7 KB

File metadata and controls

373 lines (233 loc) · 17.7 KB

8.0.0 (2026-05-18)

Breaking Changes
  • engines update minimum Node.js version requirement to >= 24.15.0 (was >= 20.0.0)
Security
  • Reduce npm audit findings from 15 to 0 (1 critical, 6 high, 6 moderate, 1 low → 0)
  • Remove abandoned coveralls package and its unfixable transitive chain (request, form-data, qs, tough-cookie)
  • Upgrade axios ^1.13.2 → ^1.16.1 — fixes 16 CVEs (SSRF, prototype pollution, header injection)
  • Upgrade mocha ^10 → ^11.7.5; add overrides for serialize-javascript@^7.0.5 and diff@^9 to patch vulnerabilities bundled inside mocha 11
  • Upgrade nock 14.0.10 → 14.0.15 (memory leak fix)
Maintenance
  • Migrate ESLint 8 → 10 with flat config (eslint.config.js); replace .eslintrc and .eslintignore
    • eslint-config-lob ^5.2.0 → ^7.0.0
    • eslint-plugin-lob ^3.0.0 → ^3.0.2
    • Add @eslint/js, @stylistic/eslint-plugin, eslint-plugin-jsdoc, globals
    • Removed rules replaced: valid-jsdocjsdoc/*, no-negated-in-lhsno-unsafe-negation, formatting rules → @stylistic/*
  • Upgrade chai 2.3.0 → 6.2.2 (Node 24 synchronous ESM interop)
  • Upgrade p-map 2.1.0 → 7.0.4 (Node 24 synchronous ESM interop)
  • Upgrade csv-parse 4 → 6; fix named-export import and data-first argument in examples
  • Upgrade json-2-csv 3 → 5; migrate callback API to Promise in examples
  • Upgrade nyc 15.1.0 → 18.0.0
  • Upgrade cross-env 5.2.1 → 10.1.0
  • Remove unused uuid devDependency
  • Pin .node-version to 24.15.0
  • GitHub Actions: upgrade actions/checkout v2 → v4, actions/setup-node v2 → v4
  • GitHub Actions: add Node 24 to CI matrix; pin npm@11; pin coverallsapp/github-action@master@v2
  • Add macOS entries to .gitignore

7.1.0 (2026-01-15)

Security
  • Replace deprecated request package with axios and form-data to address critical vulnerability (CVE-2023-28155)
  • Add path traversal protection with URI encoding in resource methods
Bug Fixes
  • Fix bulk verification endpoints (US and International) to send JSON body format instead of form-encoded data
  • Fix object iteration to use Object.keys() instead of for...in to avoid prototype chain issues
Testing
  • Add comprehensive unit test suite with HTTP mocking using nock (94 tests)
  • Add integration test suite for live API validation (24 tests)
  • Unit tests no longer require API keys - mocked responses enable offline development
  • Integration tests run separately with npm run test:integration
Maintenance
  • Update README with current testing instructions
  • Clean up unreachable error handling code in HTTP client

7.0.1 (2025-11-12)

7.0.0 (2025-11-11)

Breaking Changes
  • engines update minimum Node.js version requirement to >= 20.0.0
  • engines update minimum npm version requirement to >= 11.5.1

6.6.4 (2023-11-27)

Maintenance
  • Updates address used in example address

6.6.3 (2022-08-24)

Features
  • campaigns add support for campaigns endpoint (PR_275)
Maintenance
  • bump mocha from 9.1.3 to 10.0.0
  • bump eslint-config-lob from 1.0.1 to 5.2.0

6.6.2 (2022-04-11)

Maintenance
  • bump minimist from 1.2.0 to 1.2.6
  • bump moment from 2.29.1 to 2.29.2

6.6.1 (2022-04-05)

Maintenance
  • autocomplete add query param for address casing
  • Update dependency version
  • Updates to CI process
  • Updates to Repo branch naming

6.5.5 (2022-01-14)

Maintenance
  • Removed Bluebird dependency and replaced with p-map
  • Updated 4 out of date dev dependencies
  • Updated min required version of NodeJS to 10
  • Removed package-lock.json from gitignore - it is now included in the repo.

6.5.3 (2022-01-04)

Features
  • templates add support for HTML templates endpoint (PR_258)

6.5.2 (2021-10-18)

Bug Fix
  • cards: adds card update route to expose cards update endpoint in SDK. (PR_256) (6870842)

6.5.1 (2021-10-14)

Bug Fix
  • card orders: updates the card orders "quantity_ordered" field to "quantity" in the integration test & example to reflect the recent change in Lob API endpoint for creating card orders. (PR_254) (9d3a261)

6.5.0 (2021-10-13)

Features
  • cards: add support for cards endpoint (PR_252) (e744da5)
  • card_orders: add support for card orders endpoint (PR_252) (35bc050)
  • examples: add examples for creating a card and card order (PR_252) (1c41494)

6.4.0 (2021-09-21)

New Features
  • us_verifications: Reverse Geocoding endpoint (#250) (ea1e49df)
  • examples: added a bunch of examples which WERE in the old docs (#249) (bba10957)

6.3.0 (2021-08-27)

6.2.1 (2021-07-28)

Chores

6.2.0 (2021-05-03)

New Features
  • self-mailers: Add support for Self Mailers (#236)
Chores
Bug Fixes
  • README: correct Bank Accounts documentation link (#234) (f7f7609d)

6.1.1 (2020-11-06)

Bug Fixes
  • merge-variables: convert merge variables to JSON (#232) (5352dea7)

6.1.0 (2020-04-15)

Chores
  • deps:
    • csv-parse@4.4.6, travis node v12, docs (#222) (7ca4eb05)
    • bump eslint-utils from 1.4.0 to 1.4.2 (#217) (212789c8)
New Features
  • resource: add ability to specify custom HTTP agent (#224) (bf925b1c)
Bug Fixes
  • intl-verifications: fixed failing test (#219) (f2b712ad)
Tests
  • plc: add tests for new versions (template syntax and cursor pagination) (#226) (d5806217)

6.0.6 (2019-07-19)

Chores

6.0.5 (2019-02-14)

Chores
  • lib: fixed npm scripts on windows, moved from istanbul to nyc (#213) (be91922d)

6.0.4 (2019-01-30)

New Features
  • postcards: add ability to modify concurrency (4a3bbf37)
Bug Fixes
  • resource-base: handle undefined multipart form value (#212) (711261dc)

6.0.3 (2019-1-7)

Chores
Tests
  • api-key:
    • remove lob api key from tests and examples (93fee77a)
    • remove lob api key from tests and examples (062022b3)

6.0.2 (2018-12-3)

Bug Fixes
  • resource-base: default body to empty object (70f9c804)
  • deps:
    • upgrade rest of vulnerable deps (3b84d7e0)
    • upgrade mocha (and growl) version (95bdf700)
  • addresses: fix broken test (#202) (e560d6bc)

6.0.1 (2018-8-7)

Bug Fixes
  • headers: don't save request specific headers in configs (#201) (cfa0fb19)

6.0.0 (2018-07-02)

New Features
  • area-mail: remove areas and routes resources (a17d234d)

5.3.0 (2018-05-21)

New Features
  • us-autocompletions: add USAutocompletions (b64b02db)
Bug Fixes
  • readme: replace dependency status badge and upgrade vulnerable deps (#198) (b758c76d)

5.2.0 (2018-3-13)

New Features
  • us-verifications: allow passing queries in verification creation (#197) (84b9a44a)

5.1.0 (2018-02-22)

Refactors

5.0.0 (2017-12-11)

Chores
  • lib:
  • deprecate: Deprecate support for 0.10 and 0.12 (#187) (bd0130d3)
Bug Fixes
  • test: fix US verification test (a0f10925)
  • auto-verify: update tests to manage auto-verify (107eeae3)
Other Changes
  • postcards: Remove message field from postcard (c298fe4c)
Refactors
  • object: Use Object.prototype.call, instead of assuming objects inherit from Object.prototype (#191) (8648cb0c)
Tests
  • intl: Update international verifications tests (5f38b3d3)

4.1.1 (2017-08-09)

Chores
  • examples:
    • update to use merge_variables (cc6c2d3c)
    • Fix examples to use new us_verifications endpoint (b6096944)
New Features
  • idempotency-key: Add optional headers argument to create() methods to support idempotency-key (99ef7e92)
  • us-zip-lookups: Add US Zip Code Lookup (d51e8c8b)
  • delete: Add delete method to postcards, letters, and checks chore(ignore): ignore Sublime files (aa340b57)
Bug Fixes
  • readme: update documentation (73afa906)

4.1.1 (2017-08-09)

Chores
  • examples:
    • update to use merge_variables (cc6c2d3c)
    • Fix examples to use new us_verifications endpoint (b6096944)
New Features
  • idempotency-key: Add optional headers argument to create() methods to support idempotency-key (99ef7e92)
  • us-zip-lookups: Add US Zip Code Lookup (d51e8c8b)
  • delete: Add delete method to postcards, letters, and checks chore(ignore): ignore Sublime files (aa340b57)
Bug Fixes
  • readme: update documentation (73afa906)

4.0.0 (2017-5-17)

Chores
  • mock: use mock.lob.com (1fed1c75)
  • jobs: removes jobs, objects, settings endpoints (bbfd446e)
Documentation Changes
  • contributing: changed out-of-date link to valid (96e21cff)
New Features
  • verifications: add us and intl verification endpoints ENG-2769 (13f5ed8c)
  • version: support Node versions 0.12, 4, 5, and 6. (7754b22f)
Bug Fixes

3.9.0 (2016-4-15)

New Features
  • response: allow access to response headers (3c4d6514)
  • api-version: support 2016-03-21 (a304c9cf)

3.8.0 (2016-2-2)

Chores
  • release: add release scripts (7cc243eb)
New Features
  • version: support api version 2016-01-19 (6cb6cec0)
  • bank-accounts: standardize verify function (1d0b37c2)
  • deps: remove gulp (a2c164a7)
Bug Fixes
  • errors: always throw Error object (41c88f97)
  • readme: update testing instructions (f193cb0a)
Tests
  • resources: standardize and remove unnecessary tests (ad0e45ed)
  • setup: use global expect, api key, Lob (6e44ce0b)
  • [#88] (#88) changed asset URLs to use lob-assets bucket