npm / @rudderstack/rudder-sdk-node
@rudderstack/rudder-sdk-node
What changed in @rudderstack/rudder-sdk-node 2 to 3, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
4 breaking1 security7 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@rudderstack/rudder-sdk-node 311 changes
Breaking changes 3
flush() resolves even when a batch fails; the error goes to that batch's event callbacks and errorHandler, while the rest of the queue is still sent.
Each Analytics client sends one batch request at a time in queue order, preserving batch order and limiting parallel requests.
The queue format changes from v2 to v3 to eliminate an RCE vulnerability. Drain Redis queues before upgrading; in-flight v2 jobs are rejected with a clear error.
Security 1
Remediated a GitHub Actions script injection vulnerability.
Fixes and other changes 7
Queue bytes are tracked incrementally and batches are split by size.
Patched axios versions are now allowed.
Corrected page event types.
Restores package entry points for developers using the SDK.
Specifies MIT license metadata, helping developers identify the package’s license.
Adds the missing tslib dependency.
Fixes repeated gzip on retry with the persistence queue.
@rudderstack/rudder-sdk-node 21 changes
Breaking changes 1
Intercom API v2.10 validates custom attributes and returns an error for attributes not already defined in the Intercom dashboard.