Changelog

• Fix URL evaluation to only include host and pathname

• Add exclusion_host_regex parameter to exclude traffic based on host header patterns

• Fix URL evaluation to only include host and pathname
• Update dependencies for enhanced security and stability

Add the possibility to change the DataDome API key at runtime

• Fix cookie persistence for cross-origin requests involving private domains with large number of labels

• Ensure datadome cookies are saved with attributes when a native context syncs with a webview to avoid duplicates
• Add support for challenge responses with any HTTP status code

• Allow challenges to load from a first-party domain
• Maintain cookie persistence for cross-origin requests involving private domains (e.g. amazonaws.com)

• Remove dd_referrer query parameter from URL in Referer header to avoid passing it upstream to origin server when var.datadome_restore_referrer is enabled

• Add support for Next.js 16

In order to improve detection capabilities on Bot Protect, we will roll out a new serving endpoint for response pages (Device Check, CAPTCHA, Block).