Fixed
- Fixed a bug where dismissing a guide could leave the host page unresponsive to clicks until reload, in apps that reinitialize Pendo more than once without a full page reload.
- Fixed guide content URL rewrite behavior when combined with self-hosted assets.
- Fixed guide content validation requesting content files from the default host instead of the configured contentHost, blocking guides.
- Ensure that global css is tied to the specific public app id to prevent removing accidentally
Security
- Reject cross-frame connect messages from windows outside the page's own frame tree
Added
- Support initial widget postition for Predict plugin
Fixed
- Fixed malformed server and designer URLs for the us1 environment in the npm package
- Fixed an issue where clicking or hovering over the Resource Center badge caused the host page to scroll back to the top
- Draw the HTML guide tooltip caret with the guide's own border so the two join, instead of the border cutting straight across the caret's base
- Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function
- Fix portal not identifying visitors in portal
- Allow walkthroughs to work properly in the presence of two native web sdk installs
- Restore the ability to relaunch the designer after a page reload when the window opener is lost
Fixed
- Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function
- Fix portal not identifying visitors in portal
Fixed
- Fixed an issue where guides would repeatedly display after being dismissed due to a missing polyfill for the map delete function
Added
- Added support for live guide previews.
- Add support for real-time streaming of recording events for live sessions
Changed
- Exiting a live preview now ends the preview session, and stopping the preview from the builder closes the preview tab.
- Include the visitor ID as a query parameter in recording events to improve validation efficiency
Fixed
- AI agents (prompt tracking) now reliably start collecting prompts on the first page load, not just after a refresh.
- Fixed live preview going blank when the step being previewed was deleted; the preview now continues at a remaining step
- Fixed live preview sessions that could stay open after exiting the preview.
- Fixed an issue where the Session Replay plugin caused a reference error when using the npm package
- Badge guides now respect OEM Guide prioritization setting
- Fixed live preview joining a stale session, which prevented guide updates from reaching the preview.
- Fixed live preview getting stuck on Loading for guides that had not been saved yet.
Security
- Cross-frame selector queries no longer route through pendo.dom, closing an HTML-parsing path reachable from other origins
- Removed development urls from public npm package's trusted domains
- Ensure all origins for VOC messages are from trusted origins
Added
- Added a configuration option to control whether cross-origin iframes are recorded
- Added a console helper that reports whether your Pendo visitor ID and Intercom user ID match
- The Pendo debugger's web fonts now ship in the npm package. With an asset host configured, the debugger loads them from your own origin instead of cdn.pendo.io, and falls back to a system font if they aren't served.
- Enabled developer log capture for Agent Tool Kit to provide error context without requiring an active Session Replay recording
Fixed
- Fixed an issue where shared "copy link" URLs for a portal idea didn't always open directly to that idea. Deep links now reliably navigate to the correct card.
- Fix browser detection that identified every Chromium browser as Safari
- Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom
- Fix a socket and memory leak from unread fetch response bodies in the event and metrics beacons
- Fixed an issue where the Code Sandbox editor rendered a blank screen when an image tag included a source URL
- Fix agent plugins shipping untranspiled ES6, which broke agent initialization in Edge IE Mode
Security
- Removed development urls from public npm package's trusted domains
- Properly escape all allowed origins used in regex
Security
- Removed development urls from public npm package's trusted domains
Fixed
- Fixed an issue where shared "copy link" URLs for a portal idea didn't always open directly to that idea. Deep links now reliably navigate to the correct card.
Fixed
- Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom
Fixed
- Fixed an issue where guide backdrops prevented users from clicking on targeted elements inside a shadow dom