[DNM - experiment in progress] Bump @optimizely/optimizely-sdk from 5.4.1 to 6.4.0

[dependabot]

Bumps @optimizely/optimizely-sdk from 5.4.1 to 6.4.0.

Release notes

Sourced from @​optimizely/optimizely-sdk's releases.

Release 6.4.0

[6.4.0] - May 7, 2026

New Features

Feature Rollout: Added support for Feature Rollouts, a new experiment type combining Targeted Delivery simplicity with A/B test measurement capabilities. Feature Rollouts enable progressive rollouts with full impact analytics, metric tracking, and confidence intervals. See Feature Rollout docs for more information.

• Add Feature Rollout support (#1140)

Bug Fixes

• Export UserProfileServiceAsync type

Release 6.3.1

[6.3.1] - January 26, 2026

Changed

• Updated event retry default config: Adjusted default retry configuration for event processing (#1131)

Bug Fixes

• Fix UNSTABLE_conditionEvaluators option: pass custom condition evaluators to decision service (#1133)

Release 6.3.0

[6.3.0] - November 19, 2025

New Features

• Added Holdouts support: Holdouts Feature Experimentation feature is now officially supported.
• Added configurable prediction endpoint: Added ability to configure custom prediction endpoint for CMAB (#1102)
• Added HTTP support in NodeRequestHandler: Added support for HTTP protocol in addition to HTTPS (#1104)
• Added TTL support for events in event store: Events in event store now have configurable time-to-live (TTL) functionality (#1103)
• Exposed maxRetries option for createBatchEventProcessor: Added ability to configure maximum retry attempts for batch event processing (#1106)
• Added customHeaders option to polling config manager: Added support for custom HTTP headers in polling config manager (#1107)

Changed

• Excluded CMAB from user profile service: CMAB experiments are now properly excluded from user profile service operations (#1105)

Bug Fixes

• Fixed ODP logging: Log error instead of silently ignoring when ODP methods are called without providing an OdpManager (#1108)

Release 6.2.0

[6.2.0] - October 23, 2025

New Features

• Added support for Contextual Multi-Armed Bandit (CMAB): Added support for CMAB experiments(Contextual Bandits rules) with new configuration options and cache control. To get decision from CMAB rules, decideAsync and related methods must be used. The sync decide method does not support CMABs and will just skip CMAB rules while making decision for a flag.

... (truncated)

Changelog

Sourced from @​optimizely/optimizely-sdk's changelog.

[6.4.0] - May 7, 2026

New Features

Feature Rollout: Added support for Feature Rollouts, a new experiment type combining Targeted Delivery simplicity with A/B test measurement capabilities. Feature Rollouts enable progressive rollouts with full impact analytics, metric tracking, and confidence intervals. See Feature Rollout docs for more information.

• Add Feature Rollout support (#1140)

Bug Fixes

• Export UserProfileServiceAsync type

[6.3.1] - January 26, 2026

Changed

• Updated event retry default config: Adjusted default retry configuration for event processing (#1131)

Bug Fixes

• Fix UNSTABLE_conditionEvaluators option: pass custom condition evaluators to decision service (#1133)

[6.3.0] - November 19, 2025

New Features

• Added Holdouts support: Holdouts Feature Experimentation feature is now officially supported.
• Added configurable prediction endpoint: Added ability to configure custom prediction endpoint for CMAB (#1102)
• Added HTTP support in NodeRequestHandler: Added support for HTTP protocol in addition to HTTPS (#1104)
• Added TTL support for events in event store: Events in event store now have configurable time-to-live (TTL) functionality (#1103)
• Exposed maxRetries option for createBatchEventProcessor: Added ability to configure maximum retry attempts for batch event processing (#1106)
• Added customHeaders option to polling config manager: Added support for custom HTTP headers in polling config manager (#1107)

Changed

• Excluded CMAB from user profile service: CMAB experiments are now properly excluded from user profile service operations (#1105)

Bug Fixes

• Fixed ODP logging: Log error instead of silently ignoring when ODP methods are called without providing an OdpManager (#1108)

[6.2.0] - October 23, 2025

New Features

• Added support for Contextual Multi-Armed Bandit (CMAB): Added support for CMAB experiments(Contextual Bandits rules) with new configuration options and cache control. To get decision from CMAB rules, decideAsync and related methods must be used. The sync decide method does not support CMABs and will just skip CMAB rules while making decision for a flag.

  CMAB Configuration Options

  The following new options have been added to configure the cmab cache:

... (truncated)

Commits

• 80a0375 [AI-FSSDK] prepare for release javascript-sdk v6.4.0 (#1149)
• 41d2580 [AI-FSSDK] [FSSDK-12337] Add Feature Rollout support (#1140)
• cde46e9 Remove SourceClear scan workflow due to security vulnerability (#1139)
• 5af7f3b [FSSDK-12246] prepare release v6.3.1 (#1134)
• 4f6431f [FSSDK-12242] support UNSTABLE_conditionEvaluators option (#1133)
• c1af6da [FSSDK-12107] refactor build system (#1130)
• 53a4fbd [FSSDK-12147] update event retry default config (#1131)
• 083562f [FSSDK-12172] add setup for umd testing (#1128)
• 82b3a70 [FSSDK-12089] move /public directory to /vitest/ (#1127)
• 96f3aa5 [FSSDK-12168] Fix Dependabot alerts (#1126)
• Additional commits viewable in compare view

[LilyL0u]

@dependabot rebase

[LilyL0u]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.