# Changelog of PDF PII & Secret Redactor (`craigtechservicesllc/pdf-pii-secret-redactor`) Actor

- **URL**: https://apify.com/craigtechservicesllc/pdf-pii-secret-redactor/changelog.md
- **Full Actor documentation**: https://apify.com/craigtechservicesllc/pdf-pii-secret-redactor.md

## Changelog

### 1.0.9 — 2026-08-07

- Removed internal pricing-configuration notes and local development commands from the public Store README.
- Left the verified redaction engine, secure browser workflow, privacy controls, schemas, permissions, and pay-per-event implementation unchanged.

### 1.0.3 — 2026-08-07

- Loaded configured detectors, custom terms, case sensitivity, action, labels, metadata removal, and attachment removal into the initial Live View form.
- Ended secure-upload runs automatically after the final redacted download starts, while retaining a manual end-session fallback.
- Updated the Apify Python SDK from 4.0.0 to 4.0.1 for its Actor-shutdown fixes.
- Added regression coverage for initial settings and automatic clean completion.

### 1.0.2 — 2026-08-07

- Fixed the secure Live View buttons by preserving the JavaScript newline-regex escapes generated by the Python page template.
- Added a regression assertion against the rendered browser script so a template escape cannot silently disable every click handler again.
- Added release validation that parses the generated JavaScript and confirms both processing and finish handlers bind.

### 1.0.1 — 2026-08-07

- Replaced the confusing native file-upload and Key-value Store resource-picker workflow with a custom secure upload page in Actor Live View.
- Added direct private browser uploads without public source URLs, storage IDs, or broad account permissions.
- Added in-memory original-file processing, one-use CSRF-protected browser transfers with no PDF storage, and automatic idle/session shutdown.
- Added a responsive no-dependency interface for files, detectors, custom terms, passwords, metadata, attachments, scan mode, and redaction labels.
- Kept URL/API batch processing in a separate advanced mode so stale URL inputs cannot accidentally run with browser uploads.
- Removed Actor-token authentication from the public URL downloader.
- Added bounded fixed-length and chunked upload handling, restrictive browser security headers, and request-path log suppression.
- Expanded the suite to 34 tests, including a full HTTP upload/configure/process/download/finish regression.

### 1.0.0 — 2026-08-06

- Initial publication candidate.
- Added deterministic email, phone, SSN, Luhn payment-card, MOD-97 IBAN, IPv4, JWT, AWS access-key, and labeled API-secret detection.
- Added exact custom-term detection.
- Added true PDF redaction, metadata clearing, attachment stripping, and post-redaction verification.
- Added scan-only mode, bounded downloads, SSRF checks, privacy-safe reports, dataset/output schemas, and pay-per-event hooks.
- Added unit, integration, edge, load, schema, and local end-to-end tests.