v3.10.240.1

What's Changed

• Harden Windows command-line builds: VS2026/v145 support, CI failure propagation (#981), and docs by bmehta001 in #1458
• Add noexcept to non-throwing methods (+ noexcept move ops and LogSessionData parse hardening) by Matthew Koscumb (@mkoscumb) in #1179
• Decorator: move CsProtocol::Value temporaries into ext maps instead of copying by bmehta001 in #1498
• Fix iOS SQLite recreate by cleaning up companion journal/WAL files by bmehta001 in #1484
• Fix null EventProperties.getType() on Android (initialize eventType) by bmehta001 in #1483
• Build native desktop SDK in MSVC conformance mode (/permissive-) by bmehta001 in #1480
• Devirtualize storage hot path: mark MemoryStorage/OfflineStorageHandler final + TU-local statics by bmehta001 in #1488
• Skip MultipleLogManagersTests on iOS (fixes 60-min simulator CI hang) by bmehta001 in #1500
• Low-severity hardening: CSPRNG UUIDs (POSIX) and null-safe zlib error logs by bmehta001 in #1493
• Harden runtime task execution and offline-storage edge cases by bmehta001 in #1495
• Make public headers safe for consumers building with -Werror by bmehta001 in #1501
• Reduce binary footprint and support embedding the SDK as a CMake subproject by bmehta001 in #1499
• Fix crash: replace malformed UTF-8 instead of throwing in PayloadDecoder by Lakshmi Manaswi Karra (@lkarra2) in #1512
• Roll forward lib/modules to get past state with broken normalization by Derek Morris (@Penguinwizzard) in #1509
• Default Android vcpkg builds to Java HTTP by bmehta001 in #1510
• Create the offline event cache with owner-only (0600) permissions by bmehta001 in #1506
• Cap curl HTTP response body size to prevent memory-amplification DoS by bmehta001 in #1507
• Fix version.js JScript runtime error under Windows Script Host (cscript) by bmehta001 in #1505
• Cap HTTP response body size across WinInet, WinRt, and Apple transports by bmehta001 in #1508
• Add a public-header CI gate matching stricter warning flags by bmehta001 in #1503
• Stabilize timing-sensitive tests by bmehta001 in #1513
• Pin GitHub Actions to full-length commit SHAs by Microsoft Open Source Security Bot (@OssSecurityBot) in #1517
• Preserve sub-millisecond event timestamp precision by bmehta001 in #1516
• Fix macOS/iOS test GoogleTest includes by bmehta001 in #1518
• Modernize CMake embedding and self-contained dependencies by bmehta001 in #1511
• Fix JNI string lifetime/null-safety, Windows cancel-drain race, and UWP version parse by bmehta001 in #1494
• Guard POSIX pipe cleanup when popen fails by bmehta001 in #1523
• [Android] Restore MAE SDK configuration cache by bmehta001 in #1526
• Swift Package Manager distribution via prebuilt xcframework (iOS, macOS, Mac Catalyst, visionOS) by bmehta001 in #1486
• Fix unsafe resource lifetimes found by repository audit by bmehta001 in #1524
• [Android] Harden JNI resource ownership by bmehta001 in #1525
• Prepare for new release - 3.10.240.1 by bmehta001 in #1527

New Contributors

• Microsoft Open Source Security Bot (@OssSecurityBot) made their first contribution in #1517

Full Changelog: v3.10.173.1...v3.10.240.1