• Update web sdk to 2.342.2

• Update web-sdk to 2.341.0

Fixed​

• Protect against empty postmessage guard lists
• Prevent post message safeguard from blocking designer launches
• Fixed an issue where session replays for extension-based applications would occasionally display a blank screen due to uncaptured style changes

Security​

• Removed development urls from public npm package's trusted domains

• Fixed a bug where dismissing a guide could leave the host page unresponsive to clicks until reload, in apps that reinitialize Pendo more than once without a full page reload.
• Fixed guide content URL rewrite behavior when combined with self-hosted assets.
• Fixed guide content validation requesting content files from the default host instead of the configured contentHost, blocking guides.
• Ensure that global css is tied to the specific public app id to prevent removing accidentally

Security​

• Reject cross-frame connect messages from windows outside the page's own frame tree

• Updated the web SDK and designer agent plugins to the latest versions

• Support initial widget postition for Predict plugin

Fixed​

• Fixed malformed server and designer URLs for the us1 environment in the npm package
• Fixed an issue where clicking or hovering over the Resource Center badge caused the host page to scroll back to the top
• Draw the HTML guide tooltip caret with the guide's own border so the two join, instead of the border cutting straight across the caret's base
• Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function
• Fix portal not identifying visitors in portal
• Allow walkthroughs to work properly in the presence of two native web sdk installs
• Restore the ability to relaunch the designer after a page reload when the window opener is lost

• Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function
• Fix portal not identifying visitors in portal

• Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function

• Updated the Pendo Web SDK to version 2.339.0 and the designer agent plugins to version 3.2.45

• Added support for live guide previews.
• Add support for real-time streaming of recording events for live sessions

Changed​

• Exiting a live preview now ends the preview session, and stopping the preview from the builder closes the preview tab.
• Include the visitor ID as a query parameter in recording events to improve validation efficiency

Fixed​

• AI agents (prompt tracking) now reliably start collecting prompts on the first page load, not just after a refresh.
• Fixed live preview going blank when the step being previewed was deleted; the preview now continues at a remaining step
• Fixed live preview sessions that could stay open after exiting the preview.
• Fixed an issue where the Session Replay plugin caused a reference error when using the npm package
• Badge guides now respect OEM Guide prioritization setting
• Fixed live preview joining a stale session, which prevented guide updates from reaching the preview.
• Fixed live preview getting stuck on Loading for guides that had not been saved yet.

Security​

• Cross-frame selector queries no longer route through pendo.dom, closing an HTML-parsing path reachable from other origins
• Removed development urls from public npm package's trusted domains
• Ensure all origins for VOC messages are from trusted origins

• Lock down message listener used during IdP configuration to only Pendo domains
• Add end anchor to domains used in regex

• Added a configuration option to control whether cross-origin iframes are recorded
• Added a console helper that reports whether your Pendo visitor ID and Intercom user ID match
• The Pendo debugger's web fonts now ship in the npm package. With an asset host configured, the debugger loads them from your own origin instead of cdn.pendo.io, and falls back to a system font if they aren't served.
• Enabled developer log capture for Agent Tool Kit to provide error context without requiring an active Session Replay recording

Fixed​

• Fixed an issue where shared "copy link" URLs for a portal idea didn't always open directly to that idea. Deep links now reliably navigate to the correct card.
• Fix browser detection that identified every Chromium browser as Safari
• Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom
• Fix a socket and memory leak from unread fetch response bodies in the event and metrics beacons
• Fixed an issue where the Code Sandbox editor rendered a blank screen when an image tag included a source URL
• Fix agent plugins shipping untranspiled ES6, which broke agent initialization in Edge IE Mode

Security​

• Removed development urls from public npm package's trusted domains
• Properly escape all allowed origins used in regex

• Removed development urls from public npm package's trusted domains

• Fixed an issue where shared "copy link" URLs for a portal idea didn't always open directly to that idea. Deep links now reliably navigate to the correct card.

• Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom

• Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom

• Lock down message listener used during IdP configuration to only Pendo domains

• Lock down message listener used during IdP configuration to only Pendo domains

• Updated web-sdk to 2.337.0

• Added a console helper that reports whether your Pendo visitor ID and Intercom user ID match
• The Pendo debugger's web fonts now ship in the npm package. With an asset host configured, the debugger loads them from your own origin instead of cdn.pendo.io, and falls back to a system font if they aren't served.

Fixed​

• Default dark theme styles for HTML guides were forced for light only themes
• Fixed hover badges on HTML guides staying visible after the badge's guide was dismissed