Generated banner for Upgrade Browser SDK V6
Generated logo for Upgrade Browser SDK V6

Upgrade Browser SDK V6

DatadogOfficialCreated by datadog-labs

  • Skill
  • Tool integration
  • Software development
  • MIT
  • No issues found

From the author

Upgrade Datadog Browser SDK from v5 to v6. Use when encountering removed options like useCrossSiteSessionCookie, sendLogsAfterSessionExpiration, or when dropping IE11 support, or when a project references datadoghq-browser-agent.com CDN with /v5/ paths.
— the description by datadog-labs

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a structured, six-step migration path for upgrading the Datadog Browser SDK from v5 to v6. It covers essential updates for CDN and npm installations, removal of deprecated configuration options, adjustments for new default behaviors, and infrastructure requirements such as CORS and CSP updates. The guide includes specific search patterns to help developers identify affected code across their projects.

What it does

  • Provides search patterns to locate v5-specific code and configuration.
  • Details necessary updates for CDN script URLs and npm package dependencies.
  • Identifies deprecated options that must be removed or replaced.
  • Explains changes to default tracking behaviors and how to preserve v5 settings.
  • Outlines infrastructure requirements for CORS headers and CSP rules.
  • Lists verification steps to ensure a successful upgrade.

When to use it

  • When upgrading a project from Datadog Browser SDK v5 to v6.
  • When encountering errors related to removed v5 configuration options.
  • When dropping support for IE11 in a web application.
  • When updating project dependencies that reference v5 CDN paths.

Advantages

  • Reduces migration friction with clear, step-by-step instructions.
  • Includes grep commands to quickly audit codebases for breaking changes.
  • Highlights critical infrastructure changes like CORS and CSP requirements.
  • Provides clear guidance on handling new default behaviors.

Usage examples

“How do I update my Datadog Browser SDK from v5 to v6?”
The agent provides the six-step migration guide, including how to update CDN URLs, npm dependencies, and configuration options.
“What should I check after upgrading to Datadog Browser SDK v6?”
The agent presents the verification checklist, covering SDK loading, CORS headers, Session Replay, and TypeScript type checks.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/datadog-labs/upgrade-browser-sdk-v6/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip upgrade-browser-sdk-v6.zip -d .agents/skills

Documentation by datadog-labs

Upgrade Datadog Browser SDK to v6

Systematic migration guide from v5 to v6. Follow steps 1-6 in order. Each step includes a search pattern to find affected code.

Step 1: Update SDK version

CDN setup — update script src URLs:

v5 patternv6 replacement
datadoghq-browser-agent.com/us1/v5/datadog-rum.jsdatadoghq-browser-agent.com/us1/v6/datadog-rum.js
datadoghq-browser-agent.com/us1/v5/datadog-logs.jsdatadoghq-browser-agent.com/us1/v6/datadog-logs.js
datadoghq-browser-agent.com/us1/v5/datadog-rum-slim.jsdatadoghq-browser-agent.com/us1/v6/datadog-rum-slim.js

Replace us1 with your site: eu1, us3, us5, ap1, ap2. For US1-FED, the pattern is flat with no site prefix: datadog-rum-v6.js, datadog-logs-v6.js, datadog-rum-slim-v6.js.

Search: grep -r "datadoghq-browser-agent.com.*v5" --include="*.html" --include="*.js" --include="*.ts" --include="*.tsx" --include="*.jsx"

npm setup — update package.json dependencies:

"@datadog/browser-rum": "^6.0.0"
"@datadog/browser-logs": "^6.0.0"
"@datadog/browser-rum-slim": "^6.0.0"

Then run your package manager (npm install, yarn install, etc.) and rebuild.

Also upgrade framework integrations to v6 if used: @datadog/browser-rum-react.

Search: grep -r "@datadog/browser-" --include="package.json" .

Step 2: Remove deprecated options

Removed from Core (affects both RUM and Logs)
OptionAction
useCrossSiteSessionCookieReplace with usePartitionedCrossSiteSessionCookie.
Removed from Logs
OptionAction
sendLogsAfterSessionExpirationDelete. In v6, logs are always sent after session expiration (without a session ID). The option is no longer needed.

Search: grep -rn 'useCrossSiteSessionCookie\|sendLogsAfterSessionExpiration' --include="*.js" --include="*.ts" --include="*.tsx" --include="*.jsx" --include="*.html" --include="*.vue" --include="*.svelte"

Step 3: Update changed defaults

v6 changes several default behaviors. Review each and adjust if needed:

3a. trackUserInteractions, trackResources, and trackLongTasks default to true

In v5, these were false by default. In v6, they are enabled out of the box. This does not impact billing.

To preserve v5 behavior, explicitly disable only the options that were not already enabled in v5. If an option was already true in v5, leave it unchanged:

DD_RUM.init({
  trackUserInteractions: false, // only if not already true in v5
  trackResources: false, // only if not already true in v5
  trackLongTasks: false, // only if not already true in v5
})
3b. traceContextInjection defaults to "sampled"

In v5, trace context was injected for all requests. In v6, it's only injected for sampled traces. If your traceSampleRate is 100% (the default), this has no impact.

To preserve v5 behavior:

DD_RUM.init({
  traceContextInjection: 'all',
})
3c. tracestate header added with tracecontext propagator

The tracecontext propagator now sends an additional tracestate header. Your server must accept it. Add it to your existing Access-Control-Allow-Headers — do not replace the full list:

# Add tracestate alongside your existing headers
Access-Control-Allow-Headers: <existing-headers>, traceparent, tracestate
3d. site parameter is strongly typed

The site option has a stricter TypeScript type. If you pass a non-standard value, you get a type error. Use proxy for non-standard intake URLs instead.

Search: grep -rn 'trackUserInteractions\|trackResources\|trackLongTasks\|traceContextInjection\|tracestate\|allowedTracingUrls\|propagatorTypes' --include="*.js" --include="*.ts" --include="*.tsx" --include="*.jsx" --include="*.html" --include="*.vue" --include="*.svelte"

Also search for all RUM init calls to catch projects that omit these options and relied on the v5 false defaults: grep -rn 'DD_RUM\.init\|datadogRum\.init' --include="*.js" --include="*.ts" --include="*.tsx" --include="*.jsx" --include="*.html" --include="*.vue" --include="*.svelte". For each init call, check whether trackUserInteractions, trackResources, and trackLongTasks are explicitly set — if omitted, they now default to true in v6.

Step 4: Handle Session Replay lazy loading

Session Replay is now lazy-loaded using dynamic imports. The module loads only for sessions sampled for replay, reducing bundle size for others.

npm setup

Ensure your bundler supports dynamic imports (code splitting). Most modern bundlers do:

CDN setup

No code changes needed. The SDK dynamically loads an additional chunk when recording (e.g., datadogRecorder-<hash>-datadog-rum.js). Update CSP script-src rules if needed to allow the chunk.

Step 5: Review behavioral changes (no code required, but may need attention)

ChangeImpactAction if needed
IE11 support droppedSDK built with ES2018 target. Polyfills removed.Keep using v5 if IE11 support is required.
Long Animation Frames replace Long TasksOn supported browsers, Long Animation Frames are collected instead of Long Tasks. Event type is still long_task.Review if you inspect long task event details.
Session cookie expiration extended to 1 yearSupports anonymous user tracking.Set trackAnonymousUser: false to opt out.
RegExp and Event objects sanitizedThese are no longer serialized as-is in context/attributes.Use string representations if you were passing RegExp or Event objects.
Webpack ChunkLoadError no longer collectedReduces noise from SDK chunk loading failures.No action needed.

Step 6: Update infrastructure

  • Browser support: ES2018 baseline. IE11 is no longer supported.

  • CORS: Add tracestate to your existing Access-Control-Allow-Headers if using the tracecontext propagator (do not replace the full list): Access-Control-Allow-Headers: <existing-headers>, traceparent, tracestate

  • CSP: Allow the dynamically loaded Session Replay chunk (e.g., datadogRecorder-*-datadog-rum.js) in script-src rules.

  • Bundler config: Ensure your bundler supports dynamic imports for Session Replay lazy loading.

Common Mistakes

MistakeWhat goes wrongFix
Defensively disabling trackUserInteractions, trackResources, trackLongTasksDisables features the project needs — these now default to true, which is usually the desired behaviorOnly set these to false if the project explicitly did not want them; leave them unset to accept the new defaults
Missing tracestate in Access-Control-Allow-HeadersThe tracecontext propagator now sends a tracestate header — cross-origin requests are blocked by CORSAdd tracestate alongside traceparent in your server's Access-Control-Allow-Headers
Not updating CSP script-src for the lazy-loaded Session Replay chunkRecording silently fails on CSP-restricted pages — the dynamic chunk is blockedAllow datadogRecorder-*-datadog-rum.js in script-src

Verification checklist

After upgrading, confirm:

  • [ ] SDK loads without console errors

  • [ ] No references to removed options (useCrossSiteSessionCookie, sendLogsAfterSessionExpiration)

  • [ ] Session Replay recordings working (if used)

  • [ ] Distributed tracing working (no CORS errors from tracestate header)

  • [ ] Bundle size decreased (IE11 polyfills removed)

  • [ ] Long tasks still collected (now as Long Animation Frames on supported browsers)

  • [ ] No TypeScript errors from site parameter typing

Files

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Node.js

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Created by
datadog-labs
Publisher
Datadog (Official)
Source
datadog-labs/agent-skills · dd-browser-sdk/upgrade-v6 · commit 8e1306a
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by datadog-labs or Datadog.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download upgrade-browser-sdk-v6.zip