Releases: fastly/js-compute-runtime
v3.42.1
v3.42.0
3.42.0 (2026-05-11)
This is another release tackling a number of bugs exposed by either GC settings or automated security scanners. We've also hardened reusable sandboxes so they don't continue if we're not confident in their current state.
Features
Bug Fixes
- Allocation failure checks (#1457) (c882105)
- Avoid dereferencing one-past-the-end iterator in
host_api(#1461) (acf2b25) - Be more defensive in
ip_octets_to_js_string(#1468) (60bbec1) - Cache body range check (#1463) (f38ce55)
- Cache override getters for
beforeSendandafterSend(#1466) (5261936) - Correct GC guard type in KVStore::put to prevent wasm unreachable crashes and fix some CI issues (#1475) (15f850d)
- Ensure nul-termination of string for inet_pton (#1462) (0e3afbe)
- Find invalid characters after nul bytes in KV store keys (#1464) (5f0f0f2)
- Incorrect catch handler failure check (#1458) (fb3c01a)
- Memory leak in
get_found_response(#1456) (17559d3) - Memory leak on failed inspect hostcall (#1455) (9b77977)
- Protect against GC from
validate_bytes(#1447) (be0867b) - Shrinking realloc in KVStorePendingLookup (#1467) (5a72d13)
- Throw error on negative
ttlandswr(#1465) (7d29650)
v3.41.2
3.41.2 (2026-05-04)
This release includes several memory management-related fixes found through automated tooling analysis and by configuring our test suite to run locally under high GC zeal. Most of these issues have not been reported as affecting anything in the wild and are largely preventative as part of an ongoing effort to improve the SDK's quality and reliability. In the near future, we will also enable high GC zeal testing as part of our standard testing process, since it's able to expose memory issues that are otherwise very hard to reproduce.
Bug Fixes
HttpBody::read_allfor large bodies (#1444) (99f45b5)- Check pending exceptions between requests in reusable sandbox mode (#1425) (64a6b21)
- Memory issues exposed by high GC zeal (#1442) (f406308)
- Memory leak in normalize_http_method (#1449) (669b58a)
- mislabeled
Response::Slots::URLslot (#1445) (6d4d268) - Numeric overflow issue in Core Cache API (#1448) (360c9bf)
- Potential buffer size issues in shielding (#1443) (4bf9d72)
- Reset StarlingMonkey engine between requests (#1426) (238cf70)
- SSL string cipher intersection (#1446) (13ef2d5)
- Use length rather than NUL-terminator when copying
HostStrings (#1429) (8aa3f4c)