From bdff7a2acbacf00bf6b3da69570a1367c9411905 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 14:17:41 -0400 Subject: [PATCH 01/17] Bump @babel/core from 7.28.4 to 7.29.6 (#15103) Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.4 to 7.29.6. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 189 +++++++++++++++++++++++----------------------- 1 file changed, 94 insertions(+), 95 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6f41ccffd..6985fe90f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -121,11 +121,11 @@ } }, "node_modules/@babel/code-frame": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz", - "integrity": "sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz", + "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==", "dependencies": { - "@babel/helper-validator-identifier": "^7.28.5", + "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" }, @@ -143,20 +143,19 @@ } }, "node_modules/@babel/core": { - "version": "7.28.4", - "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.4.tgz", - "integrity": "sha512-2BCOP7TN8M+gVDj7/ht3hsaO/B/n5oDbiAyyvnRlNOs+u1o+JWNYTQrmpuNp1/Wq2gcFrI01JAW+paEKDMx/CA==", - "license": "MIT", + "version": "7.29.6", + "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.6.tgz", + "integrity": "sha512-QdxmAo/ikZqqRGA8s43ww8lcql6naWRvEz0FFrl6MIlc7Gi6TroXnSdWa5U/kq6fzcpqpHesicQxFZIieZbyIA==", "dependencies": { - "@babel/code-frame": "^7.27.1", - "@babel/generator": "^7.28.3", - "@babel/helper-compilation-targets": "^7.27.2", - "@babel/helper-module-transforms": "^7.28.3", - "@babel/helpers": "^7.28.4", - "@babel/parser": "^7.28.4", - "@babel/template": "^7.27.2", - "@babel/traverse": "^7.28.4", - "@babel/types": "^7.28.4", + "@babel/code-frame": "^7.29.0", + "@babel/generator": "^7.29.6", + "@babel/helper-compilation-targets": "^7.28.6", + "@babel/helper-module-transforms": "^7.28.6", + "@babel/helpers": "^7.29.2", + "@babel/parser": "^7.29.3", + "@babel/template": "^7.28.6", + "@babel/traverse": "^7.29.0", + "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", @@ -192,12 +191,12 @@ } }, "node_modules/@babel/generator": { - "version": "7.29.1", - "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.1.tgz", - "integrity": "sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.7.tgz", + "integrity": "sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==", "dependencies": { - "@babel/parser": "^7.29.0", - "@babel/types": "^7.29.0", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" @@ -426,17 +425,17 @@ } }, "node_modules/@babel/helper-string-parser": { - "version": "7.27.1", - "license": "MIT", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", + "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==", "engines": { "node": ">=6.9.0" } }, "node_modules/@babel/helper-validator-identifier": { - "version": "7.28.5", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz", - "integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==", - "license": "MIT", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", + "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==", "engines": { "node": ">=6.9.0" } @@ -463,24 +462,23 @@ } }, "node_modules/@babel/helpers": { - "version": "7.28.4", - "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.28.4.tgz", - "integrity": "sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w==", - "license": "MIT", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.7.tgz", + "integrity": "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==", "dependencies": { - "@babel/template": "^7.27.2", - "@babel/types": "^7.28.4" + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.7" }, "engines": { "node": ">=6.9.0" } }, "node_modules/@babel/parser": { - "version": "7.29.3", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.3.tgz", - "integrity": "sha512-b3ctpQwp+PROvU/cttc4OYl4MzfJUWy6FZg+PMXfzmt/+39iHVF0sDfqay8TQM3JA2EUOyKcFZt75jWriQijsA==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.7.tgz", + "integrity": "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==", "dependencies": { - "@babel/types": "^7.29.0" + "@babel/types": "^7.29.7" }, "bin": { "parser": "bin/babel-parser.js" @@ -1694,14 +1692,13 @@ } }, "node_modules/@babel/template": { - "version": "7.28.6", - "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.28.6.tgz", - "integrity": "sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==", - "license": "MIT", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz", + "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==", "dependencies": { - "@babel/code-frame": "^7.28.6", - "@babel/parser": "^7.28.6", - "@babel/types": "^7.28.6" + "@babel/code-frame": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7" }, "engines": { "node": ">=6.9.0" @@ -1725,12 +1722,12 @@ } }, "node_modules/@babel/types": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.0.tgz", - "integrity": "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.7.tgz", + "integrity": "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==", "dependencies": { - "@babel/helper-string-parser": "^7.27.1", - "@babel/helper-validator-identifier": "^7.28.5" + "@babel/helper-string-parser": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7" }, "engines": { "node": ">=6.9.0" @@ -22485,11 +22482,11 @@ }, "dependencies": { "@babel/code-frame": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz", - "integrity": "sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz", + "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==", "requires": { - "@babel/helper-validator-identifier": "^7.28.5", + "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } @@ -22500,19 +22497,19 @@ "integrity": "sha512-2lfu57JtzctfIrcGMz992hyLlByuzgIk58+hhGCxjKZ3rWI82NnVLjXcaTqkI2NvlcvOskZaiZ5kjUALo3Lpxg==" }, "@babel/core": { - "version": "7.28.4", - "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.4.tgz", - "integrity": "sha512-2BCOP7TN8M+gVDj7/ht3hsaO/B/n5oDbiAyyvnRlNOs+u1o+JWNYTQrmpuNp1/Wq2gcFrI01JAW+paEKDMx/CA==", + "version": "7.29.6", + "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.6.tgz", + "integrity": "sha512-QdxmAo/ikZqqRGA8s43ww8lcql6naWRvEz0FFrl6MIlc7Gi6TroXnSdWa5U/kq6fzcpqpHesicQxFZIieZbyIA==", "requires": { - "@babel/code-frame": "^7.27.1", - "@babel/generator": "^7.28.3", - "@babel/helper-compilation-targets": "^7.27.2", - "@babel/helper-module-transforms": "^7.28.3", - "@babel/helpers": "^7.28.4", - "@babel/parser": "^7.28.4", - "@babel/template": "^7.27.2", - "@babel/traverse": "^7.28.4", - "@babel/types": "^7.28.4", + "@babel/code-frame": "^7.29.0", + "@babel/generator": "^7.29.6", + "@babel/helper-compilation-targets": "^7.28.6", + "@babel/helper-module-transforms": "^7.28.6", + "@babel/helpers": "^7.29.2", + "@babel/parser": "^7.29.3", + "@babel/template": "^7.28.6", + "@babel/traverse": "^7.29.0", + "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", @@ -22533,12 +22530,12 @@ } }, "@babel/generator": { - "version": "7.29.1", - "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.1.tgz", - "integrity": "sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.7.tgz", + "integrity": "sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==", "requires": { - "@babel/parser": "^7.29.0", - "@babel/types": "^7.29.0", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" @@ -22685,12 +22682,14 @@ } }, "@babel/helper-string-parser": { - "version": "7.27.1" + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz", + "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==" }, "@babel/helper-validator-identifier": { - "version": "7.28.5", - "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz", - "integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==" + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz", + "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==" }, "@babel/helper-validator-option": { "version": "7.27.1" @@ -22706,20 +22705,20 @@ } }, "@babel/helpers": { - "version": "7.28.4", - "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.28.4.tgz", - "integrity": "sha512-HFN59MmQXGHVyYadKLVumYsA9dBFun/ldYxipEjzA4196jpLZd8UjEEBLkbEkvfYreDqJhZxYAWFPtrfhNpj4w==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.7.tgz", + "integrity": "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==", "requires": { - "@babel/template": "^7.27.2", - "@babel/types": "^7.28.4" + "@babel/template": "^7.29.7", + "@babel/types": "^7.29.7" } }, "@babel/parser": { - "version": "7.29.3", - "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.3.tgz", - "integrity": "sha512-b3ctpQwp+PROvU/cttc4OYl4MzfJUWy6FZg+PMXfzmt/+39iHVF0sDfqay8TQM3JA2EUOyKcFZt75jWriQijsA==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.7.tgz", + "integrity": "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==", "requires": { - "@babel/types": "^7.29.0" + "@babel/types": "^7.29.7" } }, "@babel/plugin-bugfix-firefox-class-in-computed-class-key": { @@ -23418,13 +23417,13 @@ "integrity": "sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==" }, "@babel/template": { - "version": "7.28.6", - "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.28.6.tgz", - "integrity": "sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz", + "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==", "requires": { - "@babel/code-frame": "^7.28.6", - "@babel/parser": "^7.28.6", - "@babel/types": "^7.28.6" + "@babel/code-frame": "^7.29.7", + "@babel/parser": "^7.29.7", + "@babel/types": "^7.29.7" } }, "@babel/traverse": { @@ -23442,12 +23441,12 @@ } }, "@babel/types": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.0.tgz", - "integrity": "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==", + "version": "7.29.7", + "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.7.tgz", + "integrity": "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==", "requires": { - "@babel/helper-string-parser": "^7.27.1", - "@babel/helper-validator-identifier": "^7.28.5" + "@babel/helper-string-parser": "^7.29.7", + "@babel/helper-validator-identifier": "^7.29.7" } }, "@browserstack/ai-sdk-node": { From 266aae3f71fb7a12cd4718119480d43242e18043 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 14:19:36 -0400 Subject: [PATCH 02/17] Bump form-data from 4.0.5 to 4.0.6 (#15104) Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 29 ++++++++++++++++------------- 1 file changed, 16 insertions(+), 13 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6985fe90f..048bda3cf 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12167,16 +12167,16 @@ "license": "BSD" }, "node_modules/form-data": { - "version": "4.0.5", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz", - "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==", + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", + "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==", "dev": true, "dependencies": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", - "hasown": "^2.0.2", - "mime-types": "^2.1.12" + "hasown": "^2.0.4", + "mime-types": "^2.1.35" }, "engines": { "node": ">= 6" @@ -13418,8 +13418,9 @@ } }, "node_modules/hasown": { - "version": "2.0.2", - "license": "MIT", + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", "dependencies": { "function-bind": "^1.1.2" }, @@ -30211,16 +30212,16 @@ "dev": true }, "form-data": { - "version": "4.0.5", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz", - "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==", + "version": "4.0.6", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", + "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==", "dev": true, "requires": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", - "hasown": "^2.0.2", - "mime-types": "^2.1.12" + "hasown": "^2.0.4", + "mime-types": "^2.1.35" } }, "formdata-node": { @@ -31062,7 +31063,9 @@ } }, "hasown": { - "version": "2.0.2", + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz", + "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==", "requires": { "function-bind": "^1.1.2" } From db2f9f36d030b87be7e2d6b321dceab67b9a369a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 14:19:54 -0400 Subject: [PATCH 03/17] Bump protobufjs from 7.6.1 to 7.6.4 (#15106) Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.6.1 to 7.6.4. - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.4/CHANGELOG.md) - [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.6.1...protobufjs-v7.6.4) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 7.6.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 26 ++++++-------------------- 1 file changed, 6 insertions(+), 20 deletions(-) diff --git a/package-lock.json b/package-lock.json index 048bda3cf..5396c6c1d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3452,12 +3452,6 @@ "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==", "dev": true }, - "node_modules/@protobufjs/inquire": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.2.tgz", - "integrity": "sha512-pa0vFRuws4wkvaXKK1uXZMAwAX4/t8ANaJo45iw/oQHNQ9q5xUzwgFmVJGXiga2BeN+zpX7Vf9vmsiIa2J+MUw==", - "dev": true - }, "node_modules/@protobufjs/path": { "version": "1.1.2", "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz", @@ -17906,9 +17900,9 @@ "license": "MIT" }, "node_modules/protobufjs": { - "version": "7.6.1", - "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.1.tgz", - "integrity": "sha512-4K0myLaWL5EteuSAro91EGFgcfVgxb64Jx+7oDAY6GOkXD4M69yuSEljNcInGVCA5sOPxmZ/EqDLj2x0Q0+Ygg==", + "version": "7.6.4", + "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz", + "integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==", "dev": true, "hasInstallScript": true, "dependencies": { @@ -17918,7 +17912,6 @@ "@protobufjs/eventemitter": "^1.1.1", "@protobufjs/fetch": "^1.1.1", "@protobufjs/float": "^1.0.2", - "@protobufjs/inquire": "^1.1.2", "@protobufjs/path": "^1.1.2", "@protobufjs/pool": "^1.1.0", "@protobufjs/utf8": "^1.1.1", @@ -24462,12 +24455,6 @@ "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==", "dev": true }, - "@protobufjs/inquire": { - "version": "1.1.2", - "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.2.tgz", - "integrity": "sha512-pa0vFRuws4wkvaXKK1uXZMAwAX4/t8ANaJo45iw/oQHNQ9q5xUzwgFmVJGXiga2BeN+zpX7Vf9vmsiIa2J+MUw==", - "dev": true - }, "@protobufjs/path": { "version": "1.1.2", "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz", @@ -33909,9 +33896,9 @@ } }, "protobufjs": { - "version": "7.6.1", - "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.1.tgz", - "integrity": "sha512-4K0myLaWL5EteuSAro91EGFgcfVgxb64Jx+7oDAY6GOkXD4M69yuSEljNcInGVCA5sOPxmZ/EqDLj2x0Q0+Ygg==", + "version": "7.6.4", + "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.4.tgz", + "integrity": "sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==", "dev": true, "requires": { "@protobufjs/aspromise": "^1.1.2", @@ -33920,7 +33907,6 @@ "@protobufjs/eventemitter": "^1.1.1", "@protobufjs/fetch": "^1.1.1", "@protobufjs/float": "^1.0.2", - "@protobufjs/inquire": "^1.1.2", "@protobufjs/path": "^1.1.2", "@protobufjs/pool": "^1.1.0", "@protobufjs/utf8": "^1.1.1", From 5de355fcb78c4541d3fe05036b0eea790b27c131 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 14:20:13 -0400 Subject: [PATCH 04/17] Bump tar from 7.5.15 to 7.5.16 (#15105) Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.15 to 7.5.16. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.15...v7.5.16) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5396c6c1d..9afdf70d5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -19951,9 +19951,9 @@ } }, "node_modules/tar": { - "version": "7.5.15", - "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.15.tgz", - "integrity": "sha512-dzGK0boVlC4W5QFuQN1EFSl3bIDYsk7Tj40U6eIBnK2k/8ml7TZ5agbI5j5+qnoVcAA+rNtBml8SEiLxZpNqRQ==", + "version": "7.5.16", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz", + "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==", "dev": true, "dependencies": { "@isaacs/fs-minipass": "^4.0.0", @@ -35276,9 +35276,9 @@ "dev": true }, "tar": { - "version": "7.5.15", - "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.15.tgz", - "integrity": "sha512-dzGK0boVlC4W5QFuQN1EFSl3bIDYsk7Tj40U6eIBnK2k/8ml7TZ5agbI5j5+qnoVcAA+rNtBml8SEiLxZpNqRQ==", + "version": "7.5.16", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz", + "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==", "dev": true, "requires": { "@isaacs/fs-minipass": "^4.0.0", From 9329d14e205239d88a1308be08ee77148eb993de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 07:26:47 -0400 Subject: [PATCH 05/17] Bump ws, engine.io, socket.io-adapter and webpack-bundle-analyzer (#15114) Bumps [ws](https://github.com/websockets/ws) to 8.21.0 and updates ancestor dependencies [ws](https://github.com/websockets/ws), [engine.io](https://github.com/socketio/socket.io), [socket.io-adapter](https://github.com/socketio/socket.io) and [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer). These dependencies need to be updated together. Updates `ws` from 8.20.1 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/8.20.1...8.21.0) Updates `engine.io` from 6.6.8 to 6.6.9 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/engine.io@6.6.8...engine.io@6.6.9) Updates `socket.io-adapter` from 2.5.7 to 2.5.8 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-adapter@2.5.7...socket.io-adapter@2.5.8) Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0 - [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases) - [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-bundle-analyzer/compare/v4.10.2...v5.3.0) --- updated-dependencies: - dependency-name: ws dependency-version: 8.21.0 dependency-type: indirect - dependency-name: engine.io dependency-version: 6.6.9 dependency-type: indirect - dependency-name: socket.io-adapter dependency-version: 2.5.8 dependency-type: indirect - dependency-name: webpack-bundle-analyzer dependency-version: 5.3.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- package-lock.json | 257 +++++++++++++++++----------------------------- package.json | 2 +- 2 files changed, 98 insertions(+), 161 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9afdf70d5..900ce3650 100644 --- a/package-lock.json +++ b/package-lock.json @@ -105,7 +105,7 @@ "webdriver": "^9.19.2", "webdriverio": "^9.18.4", "webpack": "^5.103.0", - "webpack-bundle-analyzer": "^4.5.0", + "webpack-bundle-analyzer": "^5.3.0", "webpack-manifest-plugin": "^5.0.1", "webpack-stream": "^7.0.0", "yargs": "^1.3.1" @@ -1776,11 +1776,12 @@ } }, "node_modules/@discoveryjs/json-ext": { - "version": "0.5.7", + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/@discoveryjs/json-ext/-/json-ext-0.6.3.tgz", + "integrity": "sha512-4B4OijXeVNOPZlYA2oEwWOTkzyltLao+xbotHQeqN++Rv27Y6s818+n2Qkp8q+Fxhn0t/5lA5X1Mxktud8eayQ==", "dev": true, - "license": "MIT", "engines": { - "node": ">=10.0.0" + "node": ">=14.17.0" } }, "node_modules/@emnapi/core": { @@ -3389,9 +3390,10 @@ } }, "node_modules/@polka/url": { - "version": "1.0.0-next.25", - "dev": true, - "license": "MIT" + "version": "1.0.0-next.29", + "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", + "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", + "dev": true }, "node_modules/@promptbook/utils": { "version": "0.50.0-10", @@ -9477,11 +9479,6 @@ "node": ">=4.0" } }, - "node_modules/debounce": { - "version": "1.2.1", - "dev": true, - "license": "MIT" - }, "node_modules/debug": { "version": "4.3.6", "license": "MIT", @@ -9844,11 +9841,6 @@ "node": ">= 0.4" } }, - "node_modules/duplexer": { - "version": "0.1.2", - "dev": true, - "license": "MIT" - }, "node_modules/duplexify": { "version": "4.1.3", "dev": true, @@ -10083,9 +10075,9 @@ } }, "node_modules/engine.io": { - "version": "6.6.8", - "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.8.tgz", - "integrity": "sha512-2agL3ueZhqxoVrfmntO8yuVj+uNSlIOnhykYHk3Cq0ShYPdUjjUiSJrQvXjq01I9jAuI0Zl2YO8Evv5Mqytm5g==", + "version": "6.6.9", + "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.9.tgz", + "integrity": "sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==", "dev": true, "dependencies": { "@types/cors": "^2.8.12", @@ -10097,7 +10089,7 @@ "cors": "~2.8.5", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", - "ws": "~8.20.1" + "ws": "~8.21.0" }, "engines": { "node": ">=10.2.0" @@ -13311,20 +13303,6 @@ "node": ">= 10.13.0" } }, - "node_modules/gzip-size": { - "version": "6.0.0", - "dev": true, - "license": "MIT", - "dependencies": { - "duplexer": "^0.1.2" - }, - "engines": { - "node": ">=10" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, "node_modules/handlebars": { "version": "4.7.9", "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz", @@ -16728,9 +16706,10 @@ } }, "node_modules/mrmime": { - "version": "2.0.0", + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", + "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", "dev": true, - "license": "MIT", "engines": { "node": ">=10" } @@ -18067,27 +18046,6 @@ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", "dev": true }, - "node_modules/puppeteer-core/node_modules/ws": { - "version": "8.21.0", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz", - "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==", - "dev": true, - "engines": { - "node": ">=10.0.0" - }, - "peerDependencies": { - "bufferutil": "^4.0.1", - "utf-8-validate": ">=5.0.2" - }, - "peerDependenciesMeta": { - "bufferutil": { - "optional": true - }, - "utf-8-validate": { - "optional": true - } - } - }, "node_modules/q": { "version": "1.5.1", "dev": true, @@ -19229,16 +19187,17 @@ } }, "node_modules/sirv": { - "version": "2.0.4", + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", + "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", "dev": true, - "license": "MIT", "dependencies": { "@polka/url": "^1.0.0-next.24", "mrmime": "^2.0.0", "totalist": "^3.0.0" }, "engines": { - "node": ">= 10" + "node": ">=18" } }, "node_modules/slash": { @@ -19285,13 +19244,13 @@ } }, "node_modules/socket.io-adapter": { - "version": "2.5.7", - "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.7.tgz", - "integrity": "sha512-e0LyK91f3cUxTmv95/KzoLg47+zF+s/sbxRGDNsyG4dmIP8ZSX8ax6byOxfJXeNNtS/8AZlfD+uP7gBeR7DLlg==", + "version": "2.5.8", + "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.8.tgz", + "integrity": "sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==", "dev": true, "dependencies": { "debug": "~4.4.1", - "ws": "~8.20.1" + "ws": "~8.21.0" } }, "node_modules/socket.io-adapter/node_modules/debug": { @@ -20301,8 +20260,9 @@ }, "node_modules/totalist": { "version": "3.0.1", + "resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz", + "integrity": "sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==", "dev": true, - "license": "MIT", "engines": { "node": ">=6" } @@ -21692,69 +21652,55 @@ } }, "node_modules/webpack-bundle-analyzer": { - "version": "4.10.2", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/webpack-bundle-analyzer/-/webpack-bundle-analyzer-5.3.0.tgz", + "integrity": "sha512-PEhAoqiJ+47d0uLMx/+zo5XOvaU+Vk6N2ZLht7H3n09QLy/fhyvqGNwjdRUHJDgMN8crBR2ZwVHkIswT3Xuawg==", "dev": true, - "license": "MIT", "dependencies": { - "@discoveryjs/json-ext": "0.5.7", + "@discoveryjs/json-ext": "^0.6.3", "acorn": "^8.0.4", "acorn-walk": "^8.0.0", - "commander": "^7.2.0", - "debounce": "^1.2.1", - "escape-string-regexp": "^4.0.0", - "gzip-size": "^6.0.0", - "html-escaper": "^2.0.2", + "commander": "^14.0.2", + "escape-string-regexp": "^5.0.0", + "html-escaper": "^3.0.3", "opener": "^1.5.2", "picocolors": "^1.0.0", - "sirv": "^2.0.3", - "ws": "^7.3.1" + "sirv": "^3.0.2", + "ws": "^8.19.0" }, "bin": { "webpack-bundle-analyzer": "lib/bin/analyzer.js" }, "engines": { - "node": ">= 10.13.0" + "node": ">= 20.9.0" } }, "node_modules/webpack-bundle-analyzer/node_modules/commander": { - "version": "7.2.0", + "version": "14.0.3", + "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz", + "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==", "dev": true, - "license": "MIT", "engines": { - "node": ">= 10" + "node": ">=20" } }, "node_modules/webpack-bundle-analyzer/node_modules/escape-string-regexp": { - "version": "4.0.0", + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz", + "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==", "dev": true, - "license": "MIT", "engines": { - "node": ">=10" + "node": ">=12" }, "funding": { "url": "https://github.com/sponsors/sindresorhus" } }, - "node_modules/webpack-bundle-analyzer/node_modules/ws": { - "version": "7.5.11", - "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.11.tgz", - "integrity": "sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA==", - "dev": true, - "engines": { - "node": ">=8.3.0" - }, - "peerDependencies": { - "bufferutil": "^4.0.1", - "utf-8-validate": "^5.0.2" - }, - "peerDependenciesMeta": { - "bufferutil": { - "optional": true - }, - "utf-8-validate": { - "optional": true - } - } + "node_modules/webpack-bundle-analyzer/node_modules/html-escaper": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-3.0.3.tgz", + "integrity": "sha512-RuMffC89BOWQoY0WKGpIhn5gX3iI54O6nRA0yC124NYVtzjmFWBIiFd8M0x+ZdX0P9R4lADg1mgP8C7PxGOWuQ==", + "dev": true }, "node_modules/webpack-manifest-plugin": { "version": "5.0.1", @@ -22245,9 +22191,9 @@ "license": "ISC" }, "node_modules/ws": { - "version": "8.20.1", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.20.1.tgz", - "integrity": "sha512-It4dO0K5v//JtTXuPkfEOaI3uUN87iYPnqo/ZzqCoG3g8uhA66QUMs/SrM0YK7/NAu+r4LMh/9dq2A7k+rHs+w==", + "version": "8.21.0", + "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz", + "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==", "dev": true, "engines": { "node": ">=10.0.0" @@ -23478,7 +23424,9 @@ "dev": true }, "@discoveryjs/json-ext": { - "version": "0.5.7", + "version": "0.6.3", + "resolved": "https://registry.npmjs.org/@discoveryjs/json-ext/-/json-ext-0.6.3.tgz", + "integrity": "sha512-4B4OijXeVNOPZlYA2oEwWOTkzyltLao+xbotHQeqN++Rv27Y6s818+n2Qkp8q+Fxhn0t/5lA5X1Mxktud8eayQ==", "dev": true }, "@emnapi/core": { @@ -24404,7 +24352,9 @@ "dev": true }, "@polka/url": { - "version": "1.0.0-next.25", + "version": "1.0.0-next.29", + "resolved": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.29.tgz", + "integrity": "sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==", "dev": true }, "@promptbook/utils": { @@ -28460,10 +28410,6 @@ "version": "4.0.14", "dev": true }, - "debounce": { - "version": "1.2.1", - "dev": true - }, "debug": { "version": "4.3.6", "requires": { @@ -28683,10 +28629,6 @@ "gopd": "^1.2.0" } }, - "duplexer": { - "version": "0.1.2", - "dev": true - }, "duplexify": { "version": "4.1.3", "dev": true, @@ -28847,9 +28789,9 @@ } }, "engine.io": { - "version": "6.6.8", - "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.8.tgz", - "integrity": "sha512-2agL3ueZhqxoVrfmntO8yuVj+uNSlIOnhykYHk3Cq0ShYPdUjjUiSJrQvXjq01I9jAuI0Zl2YO8Evv5Mqytm5g==", + "version": "6.6.9", + "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.9.tgz", + "integrity": "sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==", "dev": true, "requires": { "@types/cors": "^2.8.12", @@ -28861,7 +28803,7 @@ "cors": "~2.8.5", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", - "ws": "~8.20.1" + "ws": "~8.21.0" }, "dependencies": { "cookie": { @@ -30997,13 +30939,6 @@ "glogg": "^2.2.0" } }, - "gzip-size": { - "version": "6.0.0", - "dev": true, - "requires": { - "duplexer": "^0.1.2" - } - }, "handlebars": { "version": "4.7.9", "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz", @@ -33175,7 +33110,9 @@ } }, "mrmime": { - "version": "2.0.0", + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz", + "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==", "dev": true }, "ms": { @@ -34015,13 +33952,6 @@ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", "dev": true - }, - "ws": { - "version": "8.21.0", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz", - "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==", - "dev": true, - "requires": {} } } }, @@ -34788,7 +34718,9 @@ } }, "sirv": { - "version": "2.0.4", + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/sirv/-/sirv-3.0.2.tgz", + "integrity": "sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==", "dev": true, "requires": { "@polka/url": "^1.0.0-next.24", @@ -34824,13 +34756,13 @@ } }, "socket.io-adapter": { - "version": "2.5.7", - "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.7.tgz", - "integrity": "sha512-e0LyK91f3cUxTmv95/KzoLg47+zF+s/sbxRGDNsyG4dmIP8ZSX8ax6byOxfJXeNNtS/8AZlfD+uP7gBeR7DLlg==", + "version": "2.5.8", + "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.8.tgz", + "integrity": "sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==", "dev": true, "requires": { "debug": "~4.4.1", - "ws": "~8.20.1" + "ws": "~8.21.0" }, "dependencies": { "debug": { @@ -35517,6 +35449,8 @@ }, "totalist": { "version": "3.0.1", + "resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz", + "integrity": "sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==", "dev": true }, "tree-kill": { @@ -36472,37 +36406,40 @@ } }, "webpack-bundle-analyzer": { - "version": "4.10.2", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/webpack-bundle-analyzer/-/webpack-bundle-analyzer-5.3.0.tgz", + "integrity": "sha512-PEhAoqiJ+47d0uLMx/+zo5XOvaU+Vk6N2ZLht7H3n09QLy/fhyvqGNwjdRUHJDgMN8crBR2ZwVHkIswT3Xuawg==", "dev": true, "requires": { - "@discoveryjs/json-ext": "0.5.7", + "@discoveryjs/json-ext": "^0.6.3", "acorn": "^8.0.4", "acorn-walk": "^8.0.0", - "commander": "^7.2.0", - "debounce": "^1.2.1", - "escape-string-regexp": "^4.0.0", - "gzip-size": "^6.0.0", - "html-escaper": "^2.0.2", + "commander": "^14.0.2", + "escape-string-regexp": "^5.0.0", + "html-escaper": "^3.0.3", "opener": "^1.5.2", "picocolors": "^1.0.0", - "sirv": "^2.0.3", - "ws": "^7.3.1" + "sirv": "^3.0.2", + "ws": "^8.19.0" }, "dependencies": { "commander": { - "version": "7.2.0", + "version": "14.0.3", + "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz", + "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==", "dev": true }, "escape-string-regexp": { - "version": "4.0.0", + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz", + "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==", "dev": true }, - "ws": { - "version": "7.5.11", - "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.11.tgz", - "integrity": "sha512-zS54Oen9bITtp7kp2XM3AydrCIq1D+HwJOuH+c+e4LfpL/lotP5osijd+UoMnxwAam1GN8R4KtLAyIrIcBNpiA==", - "dev": true, - "requires": {} + "html-escaper": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-3.0.3.tgz", + "integrity": "sha512-RuMffC89BOWQoY0WKGpIhn5gX3iI54O6nRA0yC124NYVtzjmFWBIiFd8M0x+ZdX0P9R4lADg1mgP8C7PxGOWuQ==", + "dev": true } } }, @@ -36823,9 +36760,9 @@ "dev": true }, "ws": { - "version": "8.20.1", - "resolved": "https://registry.npmjs.org/ws/-/ws-8.20.1.tgz", - "integrity": "sha512-It4dO0K5v//JtTXuPkfEOaI3uUN87iYPnqo/ZzqCoG3g8uhA66QUMs/SrM0YK7/NAu+r4LMh/9dq2A7k+rHs+w==", + "version": "8.21.0", + "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz", + "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==", "dev": true, "requires": {} }, diff --git a/package.json b/package.json index 7e775ab0d..3af652ee0 100644 --- a/package.json +++ b/package.json @@ -139,7 +139,7 @@ "webdriver": "^9.19.2", "webdriverio": "^9.18.4", "webpack": "^5.103.0", - "webpack-bundle-analyzer": "^4.5.0", + "webpack-bundle-analyzer": "^5.3.0", "webpack-manifest-plugin": "^5.0.1", "webpack-stream": "^7.0.0", "yargs": "^1.3.1" From 3f8f3d07ec9760657296e1162ae4eb4dc225fbc6 Mon Sep 17 00:00:00 2001 From: derdeka Date: Tue, 16 Jun 2026 23:28:25 +0200 Subject: [PATCH 06/17] CI: do not run code-patch-changes workflow on forks (#15121) --- .github/workflows/code-path-changes.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/code-path-changes.yml b/.github/workflows/code-path-changes.yml index 254e54920..fa6154b56 100644 --- a/.github/workflows/code-path-changes.yml +++ b/.github/workflows/code-path-changes.yml @@ -15,6 +15,7 @@ permissions: jobs: notify: + if: github.repository_owner == 'prebid' runs-on: ubuntu-latest steps: - name: Checkout Code From e5d6890857108734777f6379d9fc94e49d8f8f95 Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Tue, 16 Jun 2026 17:31:41 -0400 Subject: [PATCH 07/17] Docs: spelling fixes (#15122) * Apply suggested fix to PR_REVIEW.md from Copilot Autofix Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> * Apply suggested fix to PR_REVIEW.md from Copilot Autofix Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> --- PR_REVIEW.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/PR_REVIEW.md b/PR_REVIEW.md index 72543aab1..a6deeddda 100644 --- a/PR_REVIEW.md +++ b/PR_REVIEW.md @@ -8,7 +8,7 @@ For modules and core platform updates, the initial reviewer should request an ad ### Running Tests and Verifying Integrations -General gulp commands include separate commands for serving the codebase on a built in webserver, creating code coverage reports and allowing serving integration examples. The `review-start` gulp command combinese those into one command. +General gulp commands include separate commands for serving the codebase on a built in webserver, creating code coverage reports and allowing serving integration examples. The `review-start` gulp command combines those into one command. - Run `gulp review-start`, adding the host parameter `gulp review-start --host=0.0.0.0` will bind to all IPs on the machine - A page will open which provides a hub for common reviewer tools. @@ -143,7 +143,7 @@ The debugging module cannot import from core in the same way that other modules Each week, Prebid Org assigns one person to keep an eye on incoming issues and PRs. Every Monday morning a reminder is sent to the prebid-js slack channel with a link to the spreadsheet. If you're on rotation, please check that list each Monday to see if you're on-duty. When on-duty: -- Review issues and PRs at least once per weekday for new items. Encourage a 48 "SLA" on PRs/issues assigned. Aim for touchpoint once every 48/hours. +- Review issues and PRs at least once per weekday for new items. Encourage a 48 "SLA" on PRs/issues assigned. Aim for touchpoint once every 48 hours. - For PRs: assign PRs to individuals on the **PR review list**. Try to be equitable -- not all PRs are created equally. Use the "Assigned" field and add the "Needs Review" label. - For Issues: try to address questions and troubleshooting requests on your own, assigning them to others as needed. Please add labels as appropriate (I.E. bug, question, backlog etc). - Issues that are questions or troubleshooting requests may be closed if the originator doesn't respond within a week to requests for confirmation or details. From 7435600796f4f47be6b59c6ccb6283a33f574d4d Mon Sep 17 00:00:00 2001 From: oleksandrhn-code Date: Wed, 17 Jun 2026 14:43:40 +0300 Subject: [PATCH 08/17] IntentIQ ID: fix storeData, storeCounters arguments (#15127) * Changed version modules * AGT-938 Prebid modules saving data (#81) * AGT-938 Prebid modules saving data * Fix arguments for storeCounters --------- Co-authored-by: Alex * AGT-940 Remove BLACK_LIST constant (#82) Co-authored-by: Alex --------- Co-authored-by: Alex --- libraries/intentIqConstants/intentIqConstants.js | 3 +-- modules/intentIqIdSystem.js | 4 ++-- test/spec/modules/intentIqIdSystem_spec.js | 4 ++-- 3 files changed, 5 insertions(+), 6 deletions(-) diff --git a/libraries/intentIqConstants/intentIqConstants.js b/libraries/intentIqConstants/intentIqConstants.js index ad62733f4..bfa8ae48d 100644 --- a/libraries/intentIqConstants/intentIqConstants.js +++ b/libraries/intentIqConstants/intentIqConstants.js @@ -5,11 +5,10 @@ export const SUPPORTED_TYPES = ["html5", "cookie"]; export const WITH_IIQ = "A"; export const WITHOUT_IIQ = "B"; export const DEFAULT_PERCENTAGE = 95; -export const BLACK_LIST = "L"; export const CLIENT_HINTS_KEY = "_iiq_ch"; export const EMPTY = "EMPTY"; export const GVLID = "1323"; -export const VERSION = 0.36; +export const VERSION = 0.37; export const PREBID = "pbjs"; export const HOURS_24 = 86400000; export const HOURS_72 = HOURS_24 * 3; diff --git a/modules/intentIqIdSystem.js b/modules/intentIqIdSystem.js index f51620ab3..a9e8cb33c 100644 --- a/modules/intentIqIdSystem.js +++ b/modules/intentIqIdSystem.js @@ -280,11 +280,11 @@ function clearCountersAndStore(allowedStorage, partnerData) { storeCounters(allowedStorage, partnerData); } -function storeCounters(storage, partnerData) { +function storeCounters(allowedStorage, partnerData) { partnerData.callCount = callCount; partnerData.failCount = failCount; partnerData.noDataCounter = noDataCount; - storeData(PARTNER_DATA_KEY, JSON.stringify(partnerData), storage, firstPartyData); + storeData(PARTNER_DATA_KEY, JSON.stringify(partnerData), allowedStorage, firstPartyData); } /** @type {Submodule} */ diff --git a/test/spec/modules/intentIqIdSystem_spec.js b/test/spec/modules/intentIqIdSystem_spec.js index 51e70a20b..2996f1cbc 100644 --- a/test/spec/modules/intentIqIdSystem_spec.js +++ b/test/spec/modules/intentIqIdSystem_spec.js @@ -808,7 +808,7 @@ describe('IntentIQ tests', function () { uspString: null }; - storeData(FIRST_PARTY_KEY, JSON.stringify(FPD), allowedStorage, storage); + storeData(FIRST_PARTY_KEY, JSON.stringify(FPD), allowedStorage, FPD); const callBackSpy = sinon.spy(); const submoduleCallback = intentIqIdSubmodule.getId({ ...allConfigParams, params: { ...allConfigParams.params, partner: newPartnerId } }).callback; submoduleCallback(callBackSpy); @@ -830,7 +830,7 @@ describe('IntentIQ tests', function () { uspString: null }; - storeData(FIRST_PARTY_KEY, JSON.stringify(FPD), allowedStorage, storage); + storeData(FIRST_PARTY_KEY, JSON.stringify(FPD), allowedStorage, FPD); const returnedObject = intentIqIdSubmodule.getId({ ...allConfigParams, params: { ...allConfigParams.params, partner: newPartnerId } }); await waitForClientHints(); expect(returnedObject.callback).to.be.undefined; From 6b93006aa15ce6f53a1816882405aa9a798789e8 Mon Sep 17 00:00:00 2001 From: Demetrio Girardi Date: Wed, 17 Jun 2026 10:33:18 -0700 Subject: [PATCH 09/17] CI: scan for contributed domain blacklists (#15129) * CI: scan for contributed domain blacklists * Add permission --- .github/workflows/prebid-code-scanner.yml | 37 +++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/prebid-code-scanner.yml diff --git a/.github/workflows/prebid-code-scanner.yml b/.github/workflows/prebid-code-scanner.yml new file mode 100644 index 000000000..4442127f3 --- /dev/null +++ b/.github/workflows/prebid-code-scanner.yml @@ -0,0 +1,37 @@ +name: Prebid code scanner + +on: + pull_request_target: + types: [opened, synchronize, reopened] + push: + branches: + - master + - '*-legacy' + +permissions: + contents: read + actions: read + pull-requests: read + security-events: write + +jobs: + scan: + name: "Prebid code scanner" + runs-on: ubuntu-latest + steps: + - name: Checkout (PR) + if: ${{ github.event_name == 'pull_request_target' }} + uses: actions/checkout@v6 + with: + ref: refs/pull/${{ github.event.pull_request.number }}/head + fetch-depth: 0 + - name: Checkout (Push) + if: ${{ github.event_name == 'push' }} + uses: actions/checkout@v6 + - name: Scan + uses: prebid/code-scanner@main + with: + token: ${{ github.token }} + pem: ${{ secrets.CODE_SCANNER_PEM }} + appId: ${{ vars.CODE_SCANNER_APPID }} + installationId: ${{ vars.CODE_SCANNER_INSTALLATION }} From 4664e360252658380becead84fdbc9f7e08e91b0 Mon Sep 17 00:00:00 2001 From: mkomorski Date: Thu, 18 Jun 2026 01:22:45 +0200 Subject: [PATCH 10/17] Core: PBS ortb converter safe renderer support (#15013)i * prebid server adapter safe renderer support * refactor * adds pbs converter_spec --- libraries/pbsExtensions/processors/pbs.js | 9 + .../pbsExtensions/processors/safeRenderer.js | 18 ++ .../pbsExtensions/converter_spec.js | 168 ++++++++++++++++++ 3 files changed, 195 insertions(+) create mode 100644 libraries/pbsExtensions/processors/safeRenderer.js create mode 100644 test/spec/ortbConverter/pbsExtensions/converter_spec.js diff --git a/libraries/pbsExtensions/processors/pbs.js b/libraries/pbsExtensions/processors/pbs.js index 9208f129a..e80a25124 100644 --- a/libraries/pbsExtensions/processors/pbs.js +++ b/libraries/pbsExtensions/processors/pbs.js @@ -8,6 +8,7 @@ import { setRequestExtPrebid, setRequestExtPrebidChannel } from './requestExtPre import { setBidResponseVideoCache } from './video.js'; import { addEventTrackers } from './eventTrackers.js'; import { setRequestExtPrebidPageViewIds } from './pageViewIds.js'; +import { setBidResponseSafeRenderer, setRequestExtPrebidSafeRenderer } from './safeRenderer.js'; export const PBS_PROCESSORS = { [REQUEST]: { @@ -27,6 +28,10 @@ export const PBS_PROCESSORS = { // sets ext.openads.page_view_ids fn: setRequestExtPrebidPageViewIds }, + extPrebidSafeRenderer: { + // sets ext.prebid.safeRenderer support flag + fn: setRequestExtPrebidSafeRenderer + } }, [IMP]: { params: { @@ -79,6 +84,10 @@ export const PBS_PROCESSORS = { // converts "legacy" burl and ext.openads.events.win into eventtrackers fn: addEventTrackers }, + safeRenderer: { + // sets bidResponse.safeRenderer from ext.prebid.meta.rendererUrl + fn: setBidResponseSafeRenderer + } }, [RESPONSE]: { serverSideStats: { diff --git a/libraries/pbsExtensions/processors/safeRenderer.js b/libraries/pbsExtensions/processors/safeRenderer.js new file mode 100644 index 000000000..7e1ac8e45 --- /dev/null +++ b/libraries/pbsExtensions/processors/safeRenderer.js @@ -0,0 +1,18 @@ +import { deepSetValue } from '../../../src/utils.js'; + +export function setRequestExtPrebidSafeRenderer(ortbRequest, bidderRequest) { + deepSetValue( + ortbRequest, + `ext.prebid.safeRenderer`, + true + ); +} + +export function setBidResponseSafeRenderer(bidResponse, bid) { + const { rendererUrl } = bid.ext?.prebid?.meta || {}; + if (rendererUrl) { + bidResponse.safeRenderer = { + url: rendererUrl, + } + } +} diff --git a/test/spec/ortbConverter/pbsExtensions/converter_spec.js b/test/spec/ortbConverter/pbsExtensions/converter_spec.js new file mode 100644 index 000000000..8bfadc6b8 --- /dev/null +++ b/test/spec/ortbConverter/pbsExtensions/converter_spec.js @@ -0,0 +1,168 @@ +import { expect } from 'chai'; +import { buildPBSRequest, interpretPBSResponse } from '../../../../modules/prebidServerBidAdapter/ortbConverter.js'; +import { config } from 'src/config.js'; +import * as redactor from 'src/activities/redactor.js'; +import { deepClone } from 'src/utils.js'; +import { + EVENT_TYPE_IMPRESSION, + EVENT_TYPE_WIN, + TRACKER_METHOD_IMG, +} from '../../../../src/eventTrackers.js'; +import 'modules/appnexusBidAdapter.js'; + +describe('PBS ortbConverter', () => { + const IMP_ID = 'ad-slot-1'; + const BID_ID = 'bid-123'; + + let sandbox; + + function buildFixtures(bidderCode = 'appnexus') { + const adUnit = { + code: IMP_ID, + transactionId: 'txn-1', + adUnitId: 'au-1', + mediaTypes: { banner: { sizes: [[300, 250]] } }, + bids: [{ + bid_id: BID_ID, + bidder: bidderCode, + params: { placementId: '12345' }, + }], + }; + const bidderRequest = { + bidderCode, + auctionId: 'auction-1', + bidderRequestId: 'br-1', + timeout: 5000, + ortb2: { site: { page: 'http://test.com' } }, + bids: [{ + bidId: BID_ID, + bid_id: BID_ID, + bidder: bidderCode, + adUnitCode: IMP_ID, + params: { placementId: '12345' }, + mediaTypes: { banner: { sizes: [[300, 250]] } }, + transactionId: 'txn-1', + }], + }; + const s2sBidRequest = { + s2sConfig: { + accountId: 'acct-1', + enabled: true, + bidders: [bidderCode], + timeout: 1000, + }, + requestBidsTimeout: 3000, + ortb2Fragments: { global: {}, bidder: {} }, + }; + return { adUnit, bidderRequest, s2sBidRequest }; + } + + function buildRequest(bidderCode = 'appnexus') { + const { adUnit, bidderRequest, s2sBidRequest } = buildFixtures(bidderCode); + return buildPBSRequest( + s2sBidRequest, + [deepClone(bidderRequest)], + [deepClone(adUnit)], + [bidderCode], + ); + } + + function interpretSeatBid(request, seatBid) { + return interpretPBSResponse({ + id: 'resp-1', + cur: 'USD', + seatbid: [seatBid], + }, request); + } + + beforeEach(() => { + sandbox = sinon.createSandbox(); + config.resetConfig(); + config.setConfig({ floors: { enabled: false } }); + sandbox.stub(redactor, 'redactor').callsFake(() => ({ + ortb2: sinon.stub().callsFake((o) => o), + bidRequest: sinon.stub().callsFake((o) => o), + })); + }); + + afterEach(() => { + sandbox.restore(); + config.resetConfig(); + }); + + describe('fromORTB', () => { + it('maps seatbid bid ext.prebid.meta.rendererUrl to bidResponse.safeRenderer', () => { + const rendererUrl = 'https://cdn.example/safe-renderer.js'; + const request = buildRequest(); + const { bids } = interpretSeatBid(request, { + seat: 'appnexus', + bid: [{ + id: 'seatbid-1', + impid: IMP_ID, + price: 1.5, + ext: { + prebid: { + meta: { rendererUrl }, + }, + }, + }], + }); + + expect(bids).to.have.length(1); + expect(bids[0].bid.safeRenderer).to.eql({ url: rendererUrl }); + }); + + it('maps seatbid bid burl to impression eventtrackers via pbsWinTrackers processor', () => { + const request = buildRequest(); + const burl = 'https://pbs.example/impression'; + const { bids } = interpretSeatBid(request, { + seat: 'appnexus', + bid: [{ + id: 'seatbid-1', + impid: IMP_ID, + price: 1.5, + burl, + }], + }); + + expect(bids[0].bid.eventtrackers).to.deep.include({ + method: TRACKER_METHOD_IMG, + event: EVENT_TYPE_IMPRESSION, + url: burl, + }); + }); + + it('maps seatbid bid ext.prebid.events.win to win eventtrackers via pbsWinTrackers processor', () => { + const request = buildRequest(); + const winUrl = 'https://pbs.example/win'; + const { bids } = interpretSeatBid(request, { + seat: 'appnexus', + bid: [{ + id: 'seatbid-1', + impid: IMP_ID, + price: 1.5, + ext: { + prebid: { + events: { win: winUrl }, + }, + }, + }], + }); + + expect(bids[0].bid.eventtrackers).to.deep.include({ + method: TRACKER_METHOD_IMG, + event: EVENT_TYPE_WIN, + url: winUrl, + }); + }); + }); + + describe('toORTB', () => { + it('maps alias bidder codes to ext.prebid.aliases via extPrebidAliases processor', () => { + const request = buildRequest('beintoo'); + expect(request.ext.prebid.aliases).to.deep.include({ + beintoo: 'appnexus', + }); + }); + }); +}); From 76bc9378484b692b9d406897c4a7d1408806e06d Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Wed, 17 Jun 2026 21:31:28 -0400 Subject: [PATCH 11/17] Fix syntax error in safeRenderer.js --- libraries/pbsExtensions/processors/safeRenderer.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/pbsExtensions/processors/safeRenderer.js b/libraries/pbsExtensions/processors/safeRenderer.js index 7e1ac8e45..635c0dd65 100644 --- a/libraries/pbsExtensions/processors/safeRenderer.js +++ b/libraries/pbsExtensions/processors/safeRenderer.js @@ -13,6 +13,6 @@ export function setBidResponseSafeRenderer(bidResponse, bid) { if (rendererUrl) { bidResponse.safeRenderer = { url: rendererUrl, - } + }; } } From e2073d6381128dfa9914f7666d98af3534ac3f53 Mon Sep 17 00:00:00 2001 From: "null[bot]" <2886085+null[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 05:07:18 +0000 Subject: [PATCH 12/17] Prebid 11.19.0 release - reautomated --- package-lock.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 900ce3650..a6cc741a2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "openads.js", - "version": "11.18.0", + "version": "11.19.0", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "openads.js", - "version": "11.18.0", + "version": "11.19.0", "license": "Apache-2.0", "dependencies": { "@babel/core": "^7.28.4", diff --git a/package.json b/package.json index 3af652ee0..0dfda4898 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "openads.js", - "version": "11.18.0", + "version": "11.19.0", "oaVersion": "1.13.0", "description": "Header Bidding Management Library", "main": "dist/src/prebid.public.ts", From dfaeed0c1aa3df10d6e1a814f0e18d3c87713cb5 Mon Sep 17 00:00:00 2001 From: Khang Vu Date: Thu, 13 Aug 2026 10:37:49 -0700 Subject: [PATCH 13/17] Revert "CI: do not run code-patch-changes workflow on forks (#15121)" This reverts commit 93796e4a12335b4d495f778dd79bf5c0e1cc59a8. --- .github/workflows/code-path-changes.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/code-path-changes.yml b/.github/workflows/code-path-changes.yml index fa6154b56..254e54920 100644 --- a/.github/workflows/code-path-changes.yml +++ b/.github/workflows/code-path-changes.yml @@ -15,7 +15,6 @@ permissions: jobs: notify: - if: github.repository_owner == 'prebid' runs-on: ubuntu-latest steps: - name: Checkout Code From 236636acb41c180684dd1445100814abbb0aafa4 Mon Sep 17 00:00:00 2001 From: Patrick McCann Date: Tue, 16 Jun 2026 14:45:49 -0400 Subject: [PATCH 14/17] Revise PR review guidelines to clarify module file naming (#15117) * Revise PR review guidelines for clarity and completeness Updated guidelines for PR reviews, including checks for module filenames, bidder code uniqueness, and documentation requirements. * Clarify PR modification guidelines for metadata files --- AGENTS.md | 1 + PR_REVIEW.md | 4 +++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/AGENTS.md b/AGENTS.md index 1962f82da..6b34eab97 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -71,3 +71,4 @@ This file contains instructions for the Codex agent and its friends when working - Low priority calls should be import ajax method and use fetch keepalive; they shouldnt use trigger pixel when it can be avoided or fail to specify keepalive. - Analytics modules must provide a disableAnalytics method. - Metadata files that say do not edit in the comments should not be edited; the build process is responsible for updating the metadata files. +- PRs should not need to modify https://github.com/prebid/Prebid.js/blob/master/metadata/overrides.mjs as module codes and module names should generally match. diff --git a/PR_REVIEW.md b/PR_REVIEW.md index a6deeddda..4857bc6b0 100644 --- a/PR_REVIEW.md +++ b/PR_REVIEW.md @@ -29,6 +29,7 @@ General gulp commands include separate commands for serving the codebase on a bu - Make sure the code is not setting cookies or localstorage directly -- it must use the `StorageManager`. - Review for obvious errors or bad coding practice / use best judgement here. - Don't allow needless code duplication with other js files; require both files import common code. Do not allow commits designed to fool the code duplication checker. +- Module filenames should match module codes. Exceptions in https://github.com/prebid/Prebid.js/blob/master/metadata/overrides.mjs should almost never be needed. - If the change is a new feature / change to core openads.js - review the change with a Tech Lead on the project and make sure they agree with the nature of change. - If the change results in needing updates to docs (such as public API change, module interface etc), add a label for "needs docs" and inform the submitter they must submit a docs PR to update the appropriate area of Prebid.org **before the PR can merge**. Help them with finding where the docs are located on prebid.org if needed. - If all above is good, add a `LGTM` comment and, if the change is in PBS-core or is an important module like the prebidServerBidAdapter, request 1 additional core member to review. @@ -48,6 +49,7 @@ Follow steps above for general review process. In addition, please verify the fo - The bidder code should be unique for the first 6 characters - Reserved words that cannot be used as bidder names: all, context, data, general, prebid, and skadn - Verify that bidder has submitted valid bid params and that bids are being received. +- Verify filenames are correct, eg bidderCode must match {{biddermodule}}BidAdapter - Verify that bidder is not manipulating the openads.js auction in any way or doing things that go against the principles of the project. If unsure check with the Tech Lead. - Verify that code re-use is being done properly and that changes introduced by a bidder don't impact other bidders. - If the adapter being submitted is an alias type, check with the bidder contact that is being aliased to make sure it's allowed. @@ -75,7 +77,7 @@ Follow steps above for general review process. In addition, please verify the fo - If their bidder doesn't work well with safeframed creatives, add `safeframes_ok: false`. This will alert publishers to not use safeframed creatives when creating the ad server entries for their bidder. - If they're setting a deal ID in some scenarios, add `bidder_supports_deals: true` - If they have an IAB Global Vendor List ID, add `gvl_id: ID`. There's no default. -- After a new adapter is approved, let the submitter know they may open a PR in the [headerbid-expert repository](https://github.com/prebid/headerbid-expert) to have their adapter recognized by the [Headerbid Expert extension](https://chrome.google.com/webstore/detail/headerbid-expert/cgfkddgbnfplidghapbbnngaogeldmop). The PR should be to the [bidder patterns file](https://github.com/prebid/headerbid-expert/blob/master/bidderPatterns.js), adding an entry with their adapter's name and the url the adapter uses to send and receive bid responses. + ### Reviewing a New or Updated Analytics Adapter From d40065ba7d00edf7d2c23039b83779a029b35000 Mon Sep 17 00:00:00 2001 From: Khang Vu Date: Thu, 13 Aug 2026 10:54:57 -0700 Subject: [PATCH 15/17] Fix stale prebidServerBidAdapter import path in newly-added PBS converter spec (post-sync follow-up to #15013) --- .../ortbConverter/pbsExtensions/converter_spec.js | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/test/spec/ortbConverter/pbsExtensions/converter_spec.js b/test/spec/ortbConverter/pbsExtensions/converter_spec.js index 8bfadc6b8..283dfbd4e 100644 --- a/test/spec/ortbConverter/pbsExtensions/converter_spec.js +++ b/test/spec/ortbConverter/pbsExtensions/converter_spec.js @@ -1,5 +1,5 @@ import { expect } from 'chai'; -import { buildPBSRequest, interpretPBSResponse } from '../../../../modules/prebidServerBidAdapter/ortbConverter.js'; +import { buildPBSRequest, interpretPBSResponse } from '../../../../modules/openadsServerBidAdapter/ortbConverter.js'; import { config } from 'src/config.js'; import * as redactor from 'src/activities/redactor.js'; import { deepClone } from 'src/utils.js'; @@ -91,7 +91,7 @@ describe('PBS ortbConverter', () => { }); describe('fromORTB', () => { - it('maps seatbid bid ext.prebid.meta.rendererUrl to bidResponse.safeRenderer', () => { + it('maps seatbid bid ext.openads.meta.rendererUrl to bidResponse.safeRenderer', () => { const rendererUrl = 'https://cdn.example/safe-renderer.js'; const request = buildRequest(); const { bids } = interpretSeatBid(request, { @@ -101,7 +101,7 @@ describe('PBS ortbConverter', () => { impid: IMP_ID, price: 1.5, ext: { - prebid: { + openads: { meta: { rendererUrl }, }, }, @@ -132,7 +132,7 @@ describe('PBS ortbConverter', () => { }); }); - it('maps seatbid bid ext.prebid.events.win to win eventtrackers via pbsWinTrackers processor', () => { + it('maps seatbid bid ext.openads.events.win to win eventtrackers via pbsWinTrackers processor', () => { const request = buildRequest(); const winUrl = 'https://pbs.example/win'; const { bids } = interpretSeatBid(request, { @@ -142,7 +142,7 @@ describe('PBS ortbConverter', () => { impid: IMP_ID, price: 1.5, ext: { - prebid: { + openads: { events: { win: winUrl }, }, }, @@ -158,9 +158,9 @@ describe('PBS ortbConverter', () => { }); describe('toORTB', () => { - it('maps alias bidder codes to ext.prebid.aliases via extPrebidAliases processor', () => { + it('maps alias bidder codes to ext.openads.aliases via extPrebidAliases processor', () => { const request = buildRequest('beintoo'); - expect(request.ext.prebid.aliases).to.deep.include({ + expect(request.ext.openads.aliases).to.deep.include({ beintoo: 'appnexus', }); }); From 4e3b202e04765ccd2e004826dbc51bdc8679db30 Mon Sep 17 00:00:00 2001 From: Khang Vu Date: Thu, 13 Aug 2026 10:54:58 -0700 Subject: [PATCH 16/17] safeRenderer.js: rename ext.prebid.* wire fields to ext.openads.* to match this fork's established convention (post-sync follow-up to #15013) --- libraries/pbsExtensions/processors/pbs.js | 4 ++-- libraries/pbsExtensions/processors/safeRenderer.js | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/libraries/pbsExtensions/processors/pbs.js b/libraries/pbsExtensions/processors/pbs.js index e80a25124..1270ebd52 100644 --- a/libraries/pbsExtensions/processors/pbs.js +++ b/libraries/pbsExtensions/processors/pbs.js @@ -29,7 +29,7 @@ export const PBS_PROCESSORS = { fn: setRequestExtPrebidPageViewIds }, extPrebidSafeRenderer: { - // sets ext.prebid.safeRenderer support flag + // sets ext.openads.safeRenderer support flag fn: setRequestExtPrebidSafeRenderer } }, @@ -85,7 +85,7 @@ export const PBS_PROCESSORS = { fn: addEventTrackers }, safeRenderer: { - // sets bidResponse.safeRenderer from ext.prebid.meta.rendererUrl + // sets bidResponse.safeRenderer from ext.openads.meta.rendererUrl fn: setBidResponseSafeRenderer } }, diff --git a/libraries/pbsExtensions/processors/safeRenderer.js b/libraries/pbsExtensions/processors/safeRenderer.js index 635c0dd65..50ca6db53 100644 --- a/libraries/pbsExtensions/processors/safeRenderer.js +++ b/libraries/pbsExtensions/processors/safeRenderer.js @@ -3,13 +3,13 @@ import { deepSetValue } from '../../../src/utils.js'; export function setRequestExtPrebidSafeRenderer(ortbRequest, bidderRequest) { deepSetValue( ortbRequest, - `ext.prebid.safeRenderer`, + `ext.openads.safeRenderer`, true ); } export function setBidResponseSafeRenderer(bidResponse, bid) { - const { rendererUrl } = bid.ext?.prebid?.meta || {}; + const { rendererUrl } = bid.ext?.openads?.meta || {}; if (rendererUrl) { bidResponse.safeRenderer = { url: rendererUrl, From 7c8cf99c75aa87dba8c11d4b01423cb45060de4d Mon Sep 17 00:00:00 2001 From: Khang Vu Date: Thu, 13 Aug 2026 11:27:42 -0700 Subject: [PATCH 17/17] adapterManager_spec.js: register S2S test mock under 'openadsServer' instead of 'mockS2S' (post-sync fix) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit openadsServerBidAdapter's setConfigDefaults() mutates the s2sConfig object in place, forcing adapter='openadsServer' regardless of what's configured, because config change listeners share the same object reference. This test was only passing when run in isolation (a build that doesn't bundle openadsServerBidAdapter); once bundled alongside it — which now happens for this chunk after the new PBS converter spec shifted chunk boundaries — the mock adapter was silently never invoked. Pre-existing bug, unrelated to any commit in this sync; fixed by registering the mock under the name production code will actually force it to. --- test/spec/unit/core/adapterManager_spec.js | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/test/spec/unit/core/adapterManager_spec.js b/test/spec/unit/core/adapterManager_spec.js index 250b5e584..c06679eb6 100644 --- a/test/spec/unit/core/adapterManager_spec.js +++ b/test/spec/unit/core/adapterManager_spec.js @@ -2378,17 +2378,20 @@ describe('adapterManager tests', function () { config.setConfig({ s2sConfig: { enabled: true, - adapter: 'mockS2S', + // openadsServerBidAdapter's setConfigDefaults() forces s2sConfig.adapter to 'openadsServer' + // (mutating the shared config object in place) whenever that module is present in the test + // bundle, so the mock adapter must be registered under that name rather than a made-up one. + adapter: 'openadsServer', bidders: ['appnexus'] } }); - adapterManager.bidderRegistry.mockS2S = { + adapterManager.bidderRegistry.openadsServer = { callBids: sinon.stub() }; }); afterEach(() => { config.resetConfig(); - delete adapterManager.bidderRegistry.mockS2S; + delete adapterManager.bidderRegistry.openadsServer; }); it('should pass FPD', () => { @@ -2403,7 +2406,7 @@ describe('adapterManager tests', function () { }] }; adapterManager.callBids(adUnits, [req], sinon.stub(), sinon.stub(), { request: sinon.stub(), done: sinon.stub() }, 1000, sinon.stub(), ortb2Fragments); - sinon.assert.calledWith(adapterManager.bidderRegistry.mockS2S.callBids, sinon.match({ + sinon.assert.calledWith(adapterManager.bidderRegistry.openadsServer.callBids, sinon.match({ ortb2Fragments: sinon.match.same(ortb2Fragments) })); });