Release JavaScript SDK v17.4.1

[stas-schaller]

Summary

Release branch for JavaScript SDK v17.4.1 — patch release adding IL5 (DoD Impact Level 5) region support, a rollup build toolchain fix, and a security bump for rollup itself.

Changes

New Features

• IL5 region mapping (KSM-901): adds `IL5` token prefix → `il5.keepersecurity.us` hostname, consistent with Python SDK (KSM-900) and Java SDK (KSM-902) implementations

Maintenance

• Rollup sourcemaps (KSM-758): replaces deprecated `rollup-plugin-sourcemaps@0.6.3` with `rollup-plugin-sourcemaps2@0.5.4` — resolves peer dependency warnings with Rollup 4.x

Security

• rollup devDependency bump: `^4.52.3` → `^4.60.1` — fixes HIGH severity arbitrary file write via path traversal affecting Rollup 4.0.0–4.58.0; build-only, not shipped in the published package

Breaking Changes

None.

Related Issues

• Merges KSM-901: add IL5 region mapping (il5.keepersecurity.us) #998 (KSM-901 — IL5 region mapping)
• Merges KSM-758: replace rollup-plugin-sourcemaps with rollup-plugin-sourcemaps2 #999 (KSM-758 — rollup-plugin-sourcemaps2)
• Jira: KSM-901 | KSM-758 | REL-5095

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​rollup-plugin-sourcemaps2@​0.5.4
	npm/​rollup@​4.52.3 ⏵ 4.60.1		+16		-1

View full report