feat: Vercel validator reports refusal match keys (0.21.0)

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.21.0] - 2026-10-22
+
+### Added
+
+- **See which bots the Vercel validator blocked, or would have.** When the validator refuses a request on Vercel, or would in monitor mode, it now reports a match key for it: a salted SHA-256 of the client IP and path, never the values themselves. WebDecoy labels the detection of that same request on the Detections page ("Would block" or "Blocked", with the reason), and the Enforcement page links each count to them. A refused request that was never recorded as a bot detection stays a count only.
+
 ## [0.20.0] - 2026-10-20
 
 ### Added

packages/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/client",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy browser widget - signal collection, proof-of-work, and captcha UI",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

packages/express/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/express",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy middleware for Express.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,7 +40,7 @@
     "url": "https://github.com/WebDecoy/node/issues"
   },
   "dependencies": {
-    "@webdecoy/node": "^0.20.0"
+    "@webdecoy/node": "^0.21.0"
   },
   "peerDependencies": {
     "express": "^4.18.0 || ^5.0.0"

packages/fastify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/fastify",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy plugin for Fastify",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -40,7 +40,7 @@
     "url": "https://github.com/WebDecoy/node/issues"
   },
   "dependencies": {
-    "@webdecoy/node": "^0.20.0",
+    "@webdecoy/node": "^0.21.0",
     "fastify-plugin": "^4.5.1"
   },
   "peerDependencies": {

packages/hono/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/hono",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy middleware for Hono \u2014 Cloudflare Workers, Bun, Deno, Node",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -44,7 +44,7 @@
     "url": "https://github.com/WebDecoy/node/issues"
   },
   "dependencies": {
-    "@webdecoy/node": "^0.20.0"
+    "@webdecoy/node": "^0.21.0"
   },
   "peerDependencies": {
     "hono": "^4.0.0"

packages/nextjs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/nextjs",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy middleware for Next.js",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -42,7 +42,7 @@
     "url": "https://github.com/WebDecoy/node/issues"
   },
   "dependencies": {
-    "@webdecoy/node": "^0.20.0"
+    "@webdecoy/node": "^0.21.0"
   },
   "peerDependencies": {
     "next": ">=13.0.0"

packages/webdecoy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webdecoy/node",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Web Decoy SDK for Node.js - Bot detection with TLS fingerprinting",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",