@@ -23,6 +23,29 @@ endif::[]
23
23
[[release-notes-1.x]]
24
24
=== .NET Agent version 1.x
25
25
26
+ [[release-notes-1.29.0]]
27
+ ==== 1.29.0 - 2024/09/18
28
+
29
+ This release includes a breaking change in how we parse and send transaction cookies. In 1.26.0, we
30
+ introduced improved cookie redaction based on the `SanitizeFieldNames` configuration. To implement this,
31
+ we extracted each cookie from the `Cookie` header, storing them in a cookie dictionary on the transaction request data.
32
+ We have identified a problem with the storage of cookies that include period characters due to the mapping of such data
33
+ when stored in the APM data stream. This behaviour can lead to lost transactions on requests which include such cookies.
34
+ This is common in ASP.NET Core due to the default cookie names used for sessions, authentication, etc.
35
+
36
+ In this release, we no longer parse out individual cookies, and the cookie `Dictionary` has been removed from the
37
+ data model. This means that cookies will no longer be indexed individually. However, we have ensured that we
38
+ retain the primary reason for the earlier change, which was to redact the values of sensitive cookies. Any cookies with
39
+ a name matching the `SanitizeFieldNames` patterns will be redacted in the value of the `Cookie` header
40
+ we store.
41
+
42
+ For most consumers, we expect the impact to be minimal. However, if you were relying on the parsed cookie
43
+ fields, adjustments will be necessary to work with the `Cookie` header value instead.
44
+
45
+ ===== Breaking changes
46
+
47
+ {pull}2444[#2444] No longer parse request cookies, but ensure they are still redacted in the `Cookie` header string
48
+
26
49
[[release-notes-1.28.6]]
27
50
==== 1.28.6 - 2024/09/11
28
51
0 commit comments