Repository navigation
upstream-sync: sync Prebid.js 11.18.0 → 11.19.0 - #102
Merged
Merged
Conversation
![null[bot]](https://github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.4 to 7.29.6. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.6.1 to 7.6.4. - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.4/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.6.1...protobufjs-v7.6.4) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 7.6.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.15 to 7.5.16. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.15...v7.5.16) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…5114) Bumps [ws](https://github.com/websockets/ws) to 8.21.0 and updates ancestor dependencies [ws](https://github.com/websockets/ws), [engine.io](https://github.com/socketio/socket.io), [socket.io-adapter](https://github.com/socketio/socket.io) and [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer). These dependencies need to be updated together. Updates `ws` from 8.20.1 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.20.1...8.21.0) Updates `engine.io` from 6.6.8 to 6.6.9 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.8...engine.io@6.6.9) Updates `socket.io-adapter` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-adapter@2.5.7...socket.io-adapter@2.5.8) Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0 - [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases) - [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v4.10.2...v5.3.0) --- updated-dependencies: - dependency-name: ws dependency-version: 8.21.0 dependency-type: indirect - dependency-name: engine.io dependency-version: 6.6.9 dependency-type: indirect - dependency-name: socket.io-adapter dependency-version: 2.5.8 dependency-type: indirect - dependency-name: webpack-bundle-analyzer dependency-version: 5.3.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Apply suggested fix to PR_REVIEW.md from Copilot Autofix Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> * Apply suggested fix to PR_REVIEW.md from Copilot Autofix Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
* Changed version modules * AGT-938 Prebid modules saving data (#81) * AGT-938 Prebid modules saving data * Fix arguments for storeCounters --------- Co-authored-by: Alex <alex@MacBook-Pro-Alex.local> * AGT-940 Remove BLACK_LIST constant (#82) Co-authored-by: Alex <alex@MacBook-Pro-Alex.local> --------- Co-authored-by: Alex <alex@MacBook-Pro-Alex.local>
* CI: scan for contributed domain blacklists * Add permission
* prebid server adapter safe renderer support * refactor * adds pbs converter_spec
Contributor
|
Whoa there partner! This project is migrating to typescript. Consider changing the new JS files to TS, with well-defined types for what interacts with the prebid public API (for example: bid params and configuration). Thanks!
|
This reverts commit 93796e4a12335b4d495f778dd79bf5c0e1cc59a8.
* Revise PR review guidelines for clarity and completeness Updated guidelines for PR reviews, including checks for module filenames, bidder code uniqueness, and documentation requirements. * Clarify PR modification guidelines for metadata files
Contributor
Resolved:
|
Contributor
|
Whoa there partner! This project is migrating to typescript. Consider changing the new JS files to TS, with well-defined types for what interacts with the prebid public API (for example: bid params and configuration). Thanks!
|
…rter spec (post-sync follow-up to #15013)
…match this fork's established convention (post-sync follow-up to #15013)
Contributor
|
Whoa there partner! This project is migrating to typescript. Consider changing the new JS files to TS, with well-defined types for what interacts with the prebid public API (for example: bid params and configuration). Thanks!
|
…instead of 'mockS2S' (post-sync fix) openadsServerBidAdapter's setConfigDefaults() mutates the s2sConfig object in place, forcing adapter='openadsServer' regardless of what's configured, because config change listeners share the same object reference. This test was only passing when run in isolation (a build that doesn't bundle openadsServerBidAdapter); once bundled alongside it — which now happens for this chunk after the new PBS converter spec shifted chunk boundaries — the mock adapter was silently never invoked. Pre-existing bug, unrelated to any commit in this sync; fixed by registering the mock under the name production code will actually force it to.
Contributor
|
Whoa there partner! This project is migrating to typescript. Consider changing the new JS files to TS, with well-defined types for what interacts with the prebid public API (for example: bid params and configuration). Thanks!
|
2 tasks
khang-vu-ttd
added a commit
that referenced
this pull request
Aug 13, 2026
This workflow (added via the 11.18.0->11.19.0 sync, PR #102) requires a Prebid.org-specific GitHub App (CODE_SCANNER_PEM/CODE_SCANNER_APPID/ CODE_SCANNER_INSTALLATION) that was never configured for this fork, causing every run to fail immediately with an OpenSSL decode error on the empty PEM secret. The action's own description scopes it to scanning code 'submitted by Prebid member companies' for suspect patterns from external community contributors -- a threat model that doesn't really apply to this fork, which only receives upstream sync commits and internal team PRs. Removing rather than trying to stand up a dedicated GitHub App for it.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Prebid.js Sync:
11.18.0→11.19.0📊 Run summary
This PR was auto-generated by the Sync with Upstream Prebid.js workflow.
Prebid 11.19.0 Release Page
✅ Applied Commits
⏭️ Skipped Commits
These commits were intentionally skipped because they made changes to files matching
BidAdapter:<!--, which broke this PR body's Markdown — corrected here)❌ Conflicting Commits (require manual resolution)
Post Sync Commits