Minor Changes

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

Patch Changes

• 31d7ef1: Reject URLs longer than 4096 characters with HTTP 414 to prevent potential DoS via excessively long inputs
• 0f40077: Replace basic-auth-parser dependency with built-in implementation

Patch Changes

• Updated dependencies [1852c75]
• Updated dependencies [d8f2926]
• Updated dependencies [84e85ed]
• Updated dependencies [8487a78]
• Updated dependencies [3ebf4b2]
• Updated dependencies [ce0243e]
  • https-proxy-agent@9.1.0
  • http-proxy-agent@9.1.0
  • pac-proxy-agent@9.1.0
  • socks-proxy-agent@10.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

Minor Changes

• 8487a78: Document and test support for credentials in PAC proxy results (e.g. PROXY user:pass@host:port)

Patch Changes

• ce0243e: Add sanitizeProxyResultCredentials() utility to strip embedded credentials from PAC proxy results in debug/error log output, preventing accidental credential leakage.
• Updated dependencies [417f6e9]
• Updated dependencies [1852c75]
• Updated dependencies [d8f2926]
• Updated dependencies [84e85ed]
• Updated dependencies [3ebf4b2]
  • get-uri@8.0.1
  • https-proxy-agent@9.1.0
  • http-proxy-agent@9.1.0
  • socks-proxy-agent@10.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Minor Changes

• d8f2926: Adds proxyConnect event emission to http-proxy-agent for parity with https-proxy-agent. The event is emitted on both the request and the agent instance when the socket connects to the proxy server.

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Patch Changes

• 417f6e9: Bump basic-ftp from 5.2.0 to 5.3.0

Patch Changes

• Updated dependencies [16a7c8a]
  • pac-proxy-agent@9.0.1

Patch Changes

• 16a7c8a: Update QuickJS integration for quickjs-wasi v2.2.0. This removes deprecated unwrapResult() / dispose(false) usage and avoids duplicate sandbox host callback registration when recompiling PAC resolvers.
• Updated dependencies [16a7c8a]
  • degenerator@7.0.1