Changelog

Latest updates and improvements across the JXScout suite.

June 8, 2026

CLIv2.1.3

Fixed backup failures on large projects

  • Fixed a bug where the backup command failed on projects with a project.db over 4 GB.

May 31, 2026

CLIv2.1.2

Analyzer improvements, cleaner shutdown, and new proxy API endpoints

  • Fixed a bug in the GraphQL analyzer that wasn't decoding JavaScript string escapes and missing some GraphQL queries.
  • Added a new analyzer skip_script option that decides, per file, whether to skip analysis. It receives { file_type, url, file_path } as JSON on stdin and skips the file when the script outputs skip— this can be useful if you want to exclude sources like node_modules from analysis.
  • Added a --discover-google-lazy-loaded-chunks flag (disabled by default) to enable discovery of Google lazy-loaded chunks.
  • Extended some internal endpoints to support the upcoming version of the Caido plugin.

April 17, 2026

CLIv2.1.1

Improved chunk discovery and small secret regex improvements

  • Fixed a bug where webpack chunks were not discovered on bundles using webpack-retry-chunk-load-plugin.
  • Fixed a bug where some chunks referenced by static import '...' statements were missed during discovery.
  • Chunk discovery now checks the project database before fetching a candidate URL, skipping redundant HTTP requests for chunks that have already been ingested.
  • __SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED and SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED are now ignored by the secret regex analyzer.

April 10, 2026

CLIv2.1.0

Added support for file system ingestion

  • Added a new jxscout-pro-v2 -c fs-ingest command that allows you to ingest files from the local filesystem into a JXScout project. Learn more
VSCode Extensionv2.1.0

Added support for file system ingestion

  • Frontend changes to support displaying file system ingested files in the VSCode extension

April 7, 2026

CLIv2.0.1

Improved chunk discovery

  • Fixed a edge case where chunk discovery for import statements failed if the chunk path contained query parameters
  • Fixed a regression for webpack chunk discovery that affected single chunk bundles with a constant string
  • Improved retry logic for chunk discovery to avoid rate limiting errors
  • Fixed a bug where browsers would abort proxied WebSocket handshakes with error 1006 when using JXScout as a proxy
  • Hook payloads for js_file_saved and js_file_updated events now include a request_headers field