3.4.6

Fixes

• Choosing the activity that is already open now relaunches it (#1733). If the SCO had set cmi.exit to suspend, a Choice of the open activity resumed the same attempt, as SCORM 2004 DB.2 requires. The delivery service took that resume for a duplicate and fired no ActivityUnload or ActivityDelivery, so a host that reloads content on those events was left with a blank frame. The next Choice then started a new attempt and lost the bookmark. The same happened for a Choice of a cluster whose Choice Flow led back to the open activity, and for a host Choice after the SCO had terminated with suspend. Each DB.2 delivery now notifies the host, including a resumed delivery of the same attempt. Processing the same sequencing result twice still notifies only once.

Maintenance

• Updated development dependencies (#1725, #1727, #1730) and the CodeQL action (#1726). This does not affect users of the package, which has no runtime dependencies.
• CI now reports npm audit results on pull requests without failing them (#1731).
• Added tests for CrossFrameLMS origin rejection (#1732).