Skip to content

master into dependabot Target (#14620)#14622

Closed
patmmccann wants to merge 2 commits intomasterfrom
dependabotTarget
Closed

master into dependabot Target (#14620)#14622
patmmccann wants to merge 2 commits intomasterfrom
dependabotTarget

Conversation

@patmmccann
Copy link
Collaborator

@patmmccann patmmccann commented Mar 20, 2026

Bumps lodash from 4.17.21 to 4.17.23.

updated-dependencies:

  • dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:development ...

This adapter enables publishers to monetize AI-referred traffic through Prebid.js.

  • Bidder code: panxo
  • GVL ID: 1527
  • Media types: Banner
  • Features: GDPR/TCF 2.0, CCPA, GPP, COPPA, schain, First Party Data, Price Floors
  • Requires Panxo Signal script to be loaded before Prebid

Documentation: modules/panxoBidAdapter.md
Tests: test/spec/modules/panxoBidAdapter_spec.js

  • Core: granular settings for main thread yielding (Core: granular settings for main thread yielding #13789)

  • turn off yielding with scheudler === false

  • sync renderAd

  • what would we do without our Linter

  • Turn off yielding completely

  • linting (again)

  • granular yielding, off by default

  • Too many callbacks

  • Avoid yielding the main thread during renderAd

  • Expose requestBids hooks

  • lint

  • Revert "Expose requestBids hooks"

This reverts commit ae0062a.

This reverts commit 2870230.

This reverts commit 48419a6.

  • lint

  • simplify yield config, default to true, add auctionOptions.legacyRender

  • lint

  • update e2e tests

This throws in production since upgrade to 10+
No other module is using global.navigator all references goes to window.navigator

Bumps fast-xml-parser from 5.2.5 to 5.3.4.

updated-dependencies:

  • dependency-name: fast-xml-parser dependency-version: 5.3.4 dependency-type: indirect ...

Bumps actions/upload-artifact from 4 to 6.

updated-dependencies:

  • dependency-name: actions/upload-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ...

List of concerned names managed

adUnitCode Résultat
div-gpt-ad-article_top_123456 article_top
div-gpt-ad-sidebar-1678459238475 sidebar
div-gpt-ad-topbanner-1 topbanner-1 ✅
div-gpt-ad-topbanner-2 topbanner-2 ✅
sidebar-123456 sidebar-123456
article_bottom article_bottom

Bumps @isaacs/brace-expansion from 5.0.0 to 5.0.1.

updated-dependencies:

  • dependency-name: "@isaacs/brace-expansion" dependency-version: 5.0.1 dependency-type: indirect ...

  • ID5 ID module: add option to use custom external targeting (ID5 ID module: add option to use custom external targeting  #14324)

  • Add custom tag reporting mechanism for Id5IdSystem module

  • Add documentation

  • empty line rm, lint failure

  • empty line rm, lint failure

  • cannot use withResolvers in tests

  • type change in doc

  • fix example

  • Core: loading external scripts linting rule (Core: loading external scripts linting rule #14354)

  • Core: loading external scripts linting rule

  • using default rule instead of custom

  • fixing overwritten event/adLoader rule

  • change to no-restricted-syntax

  • no-restricted-imports

  • Removed hardcoded token injection into ortb2Fragments and delegate to the HUMAN implementation, enabling management of which bidders receive tokens and enhancing monitoring and control of latency and performance
  • Introduce a cached implementation reference via getImpl()
  • Add module version query parameter when loading the implementation script
  • Wire onAuctionInitEvent so the implementation can collect QoS, telemetry and statistics per auction

  • Apply suggestion from @Copilot

  • Apply suggestions from code review

  • Apply suggestions from code review

    • validate module version parameter in script URL
  • add HumanSecurityImpl interface

  • WURFL RTD: update module documentation (WURFL RTD: update module documentation #14364)

  • WURFL RTD: update module documentation

  • WURFL RTD: update module documentation

  • Change humansecurityRtdProvider.js to .ts extension

  • Kobler bid adapter: pass adunitcode in bid request. (Kobler bid adapter: pass adunitcode in bid request. #14392)

  • Page view ID.

  • Page view ID.

  • Removed console.log.

  • Removed unused import.

  • Improved example.

  • Fixed some tests.

  • Kobler bid adapter: pass adunitcode in bid request.

  • percentInView: fix bug where viewability calculation is inaccurate inside friendly iframes (percentInView: fix bug where viewability calculation is inaccurate inside friendly iframes #14414)

  • percentInView: fix bug where viewability calculation is inaccurate inside friendly iframes

  • use boundingClientRect

  • New module: Shaping rules (New module: Shaping rules #14079)

  • initial commit

  • storeSplits method

  • unit tests

  • remove test

  • removing storing & extract merging ortb2

  • lint

  • adding default handling

  • lint

  • merge fpd cache

  • review fixes

  • refactoring, bug fixing, tests

  • lint

  • extending bidPrice schema function

  • removing invalid example

  • session random

  • rename

  • module name

  • random per auction

  • modifies some schema function to return value instead of condition result

  • extra schema evaluators

  • json fix

  • evaluating rules per auction

  • evaluating rules per auction

  • static config

  • auctionId

  • safe guards

  • registering activities only once

  • expose configuration type; update integ example rules json URL

  • evaluating rules fix

  • fixing model group selection

  • Added email address to the main description
  • Added 'cur' parameter to the parameters list
  • Minor changes in the Adunit config examples

  • Prebid 10.24.0 release

  • Increment version to 10.25.0-pre

  • Yahoo Ads Bid Adapter: Add Transaction ID (TID) Support (Yahoo Ads Bid Adapter: Add Transaction ID (TID) Support #14403)

  • tesing

  • adding tests

  • md file

  • Update yahooAdsBidAdapter_spec.js

  • Fix formatting in yahooAdsBidAdapter_spec.js

  • Fix casing for enableTIDs in documentation

IMA player has no support for GPP, but does support uspapi.

When on window, there is only __gpp, we can still pass a US Privacy string by deriving the string from the __gpp data,

  • Added tests for the retrieveUspInfoFromGpp method

  • Re-write the test to use the public API instead of internal methods

  • Deal with the option that the parsedSections contains sections which are arrays

  • Deal with possible null/missing values in the GPP parsedSection

  • Optidigital Bid Adapter: Adding ortb2 device, keywords, addtlConsent, gpid (Optidigital Bid Adapter: Adding ortb2 device, keywords, addtlConsent, gpid #14383)

  • add gpp suport

  • update of the optidigital adapter

  • fix the lint issue

  • refactor ortb2 keywords trim logic

  • LocID User ID Submodule: add locIdSystem (LocID User ID Submodule: add locIdSystem #14367)

  • chore(prebid): scaffold locid user id module

  • update LocID module to support first-party endpoint fetching and privacy signal handling

  • update LocID system tests for gdpr handling and consent string validation

  • Enhance LocID module documentation and tests for privacy signal handling. Updated comments for clarity, added test cases for maximum ID length and empty endpoint handling, and refined privacy configuration notes in the documentation.

  • Refactor LocID module to standardize naming conventions and enhance privacy signal handling. Updated module name to 'locId', improved consent data processing functions, and revised documentation and tests accordingly.

  • Added Apache 2.0 license header.

  • Add LocID User ID sub-module documentation and refactor ajax usage in locIdSystem module

  • Introduced locid.md documentation detailing the LocID User ID sub-module, including installation, configuration, parameters, and privacy handling.
  • Refactored locIdSystem.js to utilize ajaxBuilder for improved request handling.
  • Updated tests in locIdSystem_spec.js to accommodate changes in ajax usage and ensure proper timeout configurations.

  • Remove docs folder - to be submitted to prebid.github.io separately

  • Update LocID atype to 1 for compliance with OpenRTB 2.6 specifications

  • Changed the default EID atype in locIdSystem.js and related documentation from 3384 to 1, reflecting the correct device identifier as per OpenRTB 2.6 Extended Identifiers spec.
  • Updated references in locIdSystem.md and userId/eids.md to ensure consistency across documentation.
  • Adjusted unit tests in locIdSystem_spec.js to validate the new atype value.
  • Enhance LocID module with connection IP handling and response parsing improvements
  • Introduced connection IP validation and storage alongside LocID to support IP-aware caching.
  • Updated response parsing to only extract tx_cloc and connection_ip, ignoring stable_cloc.
  • Enhanced documentation to reflect changes in stored value format and endpoint response requirements.
  • Modified unit tests to cover new functionality, including connection IP checks and expiration handling.

  • fix getValue string handling, GDPR enforcement gating, extendId docs

  • LocID: enforce IP cache TTL in extendId and update tests/docs

  • LocID: honor null tx_cloc, reject whitespace-only IDs, add stable_cloc exclusion test

  • LocID: remove legacy 3384 references and enforce atype 1

  • LocID: add vendorless TCF marker and scope 3384 guard

  • enhance locIdSystem to handle whitespace-only tx_cloc and update documentation. Ensure null IDs are cached correctly when tx_cloc is empty or whitespace, and adjust caching logic to honor null responses from the main endpoint.

  • Github Actions: bump download artifact (Github Actions: bump download artifact #14440)

  • CI: harden artifact restore for browserstack workflows

  • Update run-tests.yml

  • Fix comment formatting in test.yml

  • Retry on artifact download failure

Bumps axios from 1.13.2 to 1.13.5.

updated-dependencies:

  • dependency-name: axios dependency-version: 1.13.5 dependency-type: indirect ...

Removed comment about webpack filesystem cache in clean function.

Added additional context for accessing repo history.

Add Panxo RTD submodule that enriches OpenRTB bid requests with real-time AI traffic classification signals through device.ext.panxo and site.ext.data.panxo.

  • fix: fail open when bridge is unavailable and guard null messages
  • Flush pending auction callbacks when the implementation bridge cannot be reached, so auctions are never blocked indefinitely.
  • Guard against null bridge messages to prevent runtime errors.
  • Add tests for both scenarios.

This reverts commit dcf61ba.

Bumps qs from 6.14.1 to 6.14.2.

updated-dependencies:

  • dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect ...

Bumps fast-xml-parser from 5.3.4 to 5.3.6.

updated-dependencies:

  • dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect ...

Updated the Proxistore COOKIE_BASE_URL and COOKIE_LESS_URL to the new abs domain in both the adapter and its corresponding test file. This ensures consistency with the updated API endpoints.

  • Integrate OpenRTB converter for Proxistore bid adapter, and add OpenRTB request as a separate field.

  • Refactor Proxistore bid adapter to improve OpenRTB handling, add GDPR-specific URL selection, and enhance test coverage.

  • Add support for website and language parameters in Proxistore bid adapter requests, with corresponding test coverage.

  • Handle empty response body in Proxistore bid adapter to avoid runtime errors.

  • Floxis Bid Adapter: initial release (Floxis Bid Adapter: initial release #13934)

  • Floxis Bid Adapter : initial release

  • Added ORTB parameters for blocking

  • Adjusted documentation with maintainer info

  • Added more validations, extracted converter to a const

  • Floxis Bid Adapter: redesign to seat-based architecture with ortbConverter

Major rewrite replacing teqblazeUtils with ortbConverter for ORTB 2.x compliance.

Changes:

  • New params: seat (required), region (required), partner (required)
  • Endpoint URL: https://{subdomain}.floxis.tech/pbjs?seat={seat}
    • subdomain = region for 'floxis' partner
    • subdomain = {partner}-{region} for white-label partners
  • ORTB-native implementation with Floors Module support
  • 40 comprehensive tests with full code coverage
  • Updated documentation with examples

Addresses all PR #13934 review comments from @osazos

  • Rename FloxisBidAdapter.md to floxisBidAdapter.md

  • Code review adjustments

  • InsurAds Bid Adapter: Initial Implementation (InsurAds Bid Adapter: Initial Implementation #14470)

  • InsurAds Bid Adapter Implementation

  • Remove test alias

  • Storage Settings Example

  • Adapter rename 1/2

  • Adapter rename 2/2

  • Update modules/insuradsBidAdapter.ts

  • Update modules/insuradsBidAdapter.ts

  • Update test/spec/modules/insuradsBidAdapter_spec.js

  • The params need to be registered under nexx360

  • LeagueM BId Adapter: initial release (LeagueM BId Adapter: initial release #14479)

  • LeagueM BId Adapter: initial release

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update modules/leagueMBidAdapter.md

Bumps ajv from 6.12.6 to 6.14.0.

updated-dependencies:

  • dependency-name: ajv dependency-version: 6.14.0 dependency-type: indirect ...

  • ReVantage Bid Adapter: initial release (ReVantage Bid Adapter: initial release #14180)

  • Create revantageBidAdapter.js

  • Create revantageBidAdapter.md

  • Update revantageBidAdapter.js

  • Update revantageBidAdapter.js

  • Update revantageBidAdapter.js

  • Update revantageBidAdapter.js

Fixed trailing slash Error on Line 123

  • Create revantageBidAdapter_spec.js

  • Update revantageBidAdapter_spec.js

Fixed Trailing slashes (again)

  • Update revantageBidAdapter_spec.js

  • Update revantageBidAdapter_spec.js

same thing again

  • Refactor Revantage Bid Adapter for media types and bids

Refactor Revantage Bid Adapter to use media type constants and improve bid response handling.

  • Refactor RevantageBidAdapter tests for GPP consent

  • Update modules/revantageBidAdapter.md

  • Update modules/revantageBidAdapter.md

  • Validate feedId consistency in batch bid requests

Added validation to ensure all bid requests in a batch have the same feedId, logging a warning if they do not.

  • Add test for rejecting batch with different feedIds

  • Update syncOptions for image sync URL parameters

  • Update sync URL to use 'tag=img' instead of 'type=img'

  • Update print statement from 'Hello' to 'Goodbye'

  • fixed

  • Enhance video bid handling and add utility functions

Added functions to handle video size extraction and VAST detection.

  • AdMatic Bid Adapter : add adrubi alias (AdMatic Bid Adapter : add adrubi alias #14504)

  • Admatic Bidder Adaptor

  • Update admaticBidAdapter.md

  • Update admaticBidAdapter.md

  • remove floor parameter

  • Update admaticBidAdapter.js

  • Admatic Bid Adapter: alias and bid floor features activated

  • Admatic adapter: host param control changed

  • Alias name changed.

  • Revert "Admatic adapter: host param control changed"

This reverts commit de7ac85.

  • added alias feature and host param

  • Revert "added alias feature and host param"

This reverts commit 6ec8f45.

  • Revert "Alias name changed."

This reverts commit 661c54f.

  • Revert "Admatic Bid Adapter: alias and bid floor features activated"

This reverts commit 7a2e0e2.

  • Revert "Update admaticBidAdapter.js"

This reverts commit 7a845b7.

  • Revert "remove floor parameter"

This reverts commit 7a23b05.

  • Admatic adapter: host param control && Add new Bidder

  • Revert "Admatic adapter: host param control && Add new Bidder"

This reverts commit 3c797b1.

  • commit new features

  • Update admaticBidAdapter.js

  • updated for coverage

  • sync updated

  • Update adloader.js

  • AdMatic Bidder: development of user sync url

  • Update admaticBidAdapter.js

  • Set currency for AdserverCurrency: bug fix

  • Update admaticBidAdapter.js

  • update

  • admatic adapter video params update

  • Update admaticBidAdapter.js

  • update

  • Update admaticBidAdapter.js

  • update

  • update

  • Update admaticBidAdapter_spec.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Revert "Update admaticBidAdapter.js"

This reverts commit 1216892.

  • Revert "Update admaticBidAdapter.js"

This reverts commit b1929ec.

  • Revert "Update admaticBidAdapter_spec.js"

This reverts commit 1ca6597.

  • Revert "update"

This reverts commit 689ce9d.

  • Revert "update"

This reverts commit f381a45.

  • Revert "Update admaticBidAdapter.js"

This reverts commit 38fd7ab.

  • Revert "update"

This reverts commit a5316e7.

  • Revert "Update admaticBidAdapter.js"

This reverts commit 60a28ca.

  • Revert "admatic adapter video params update"

This reverts commit 31e69e8.

  • update

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter_spec.js

  • mime_type add

  • add native adapter

  • AdMatic Adapter: Consent Management

  • added gvlid

  • Update admaticBidAdapter.js

  • admatic cur update

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • Update admaticBidAdapter.js

  • admatic sync update

  • Update admaticBidAdapter.js

  • Revert "Update admaticBidAdapter.js"

This reverts commit 11e053f.

  • Revert "Update admaticBidAdapter.js"

This reverts commit 11e053f.

This reverts commit 299f207.

  • Prebid 10.26.0 release

  • Increment version to 10.27.0-pre

  • DPAI bid adapter: initial release (DPAI bid adapter: initial release #14434)

  • New adapter DPAI

  • New adapter DPAI

  • New adapter DPAI: Added end line

  • New adapter DPAI: Added end line

Bumps and minimatch. These dependencies needed to be updated together.

Updates minimatch from 3.1.2 to 3.1.4

Updates minimatch from 9.0.5 to 9.0.7

Updates minimatch from 5.1.6 to 5.1.8

Updates minimatch from 9.0.4 to 9.0.7

Updates minimatch from 10.0.3 to 10.2.3

updated-dependencies:

  • dependency-name: minimatch dependency-version: 3.1.4 dependency-type: indirect
  • dependency-name: minimatch dependency-version: 9.0.7 dependency-type: indirect
  • dependency-name: minimatch dependency-version: 5.1.8 dependency-type: indirect
  • dependency-name: minimatch dependency-version: 9.0.7 dependency-type: indirect
  • dependency-name: minimatch dependency-version: 10.2.3 dependency-type: indirect ...

Bumps basic-ftp from 5.0.5 to 5.2.0.

updated-dependencies:

  • dependency-name: basic-ftp dependency-version: 5.2.0 dependency-type: indirect ...

Added MAX_TEXT_LENGTH constant (1000 chars) and text truncation logic in getPageText() to prevent QuotaExceededError when Chrome AI APIs process pages with large amounts of text content.

Without this fix, pages with extensive text content can cause the Chrome AI APIs (LanguageDetector, Summarizer) to throw QuotaExceededError exceptions.

  • Chrome AI RTD Provider: add unit tests for MAX_TEXT_LENGTH and text truncation

Adds tests covering:

  • MAX_TEXT_LENGTH constant exists and equals 1000
  • getPageText returns null for text below MIN_TEXT_LENGTH
  • getPageText returns null for empty text
  • getPageText returns full text when between MIN and MAX length
  • getPageText does not truncate text at exactly MAX_TEXT_LENGTH
  • getPageText truncates text exceeding MAX_TEXT_LENGTH
  • getPageText logs a message when truncating
  • Convert single quotes to double quotes for consistency
  • Format code with Prettier

  • docs: add guide for accessing Neuwo RTD data outside Prebid.js

  • feat: add concurrent bid request handling to Neuwo RTD Module

  • chore: standardize log message format in Neuwo RTD Module

  • feat: add product identifier to Neuwo API requests

  • docs: fix typo in test file name in Neuwo RTD Module documentation

  • style: format Neuwo RTD Module with Prettier

  • Add // prettier-ignore comment to preserve quoted keys in IAB_CONTENT_TAXONOMY_MAP
  • Apply Prettier formatting to modules/neuwoRtdProvider.js

  • test: add coverage for concurrent requests and product identifier in Neuwo RTD Module

  • feat: add per-tier IAB taxonomy filtering to Neuwo RTD Module

Add optional filtering configuration for IAB Content and Audience taxonomies, allowing publishers to control the quantity and quality of categories injected into bid requests.

  • Add iabTaxonomyFilters parameter to module configuration for per-tier filtering
  • Implement filterIabTaxonomyTier() function to filter taxonomies by relevance threshold and limit count
  • Implement filterIabTaxonomies() function to apply filters across all tiers using tier key mapping
  • Add integration example checkbox to enable/disable filtering with hardcoded filter values

  • docs: add IAB taxonomy filtering documentation to Neuwo RTD Module

  • test: add error handling and edge case tests for Neuwo RTD Module

  • Add test for API URL construction when neuwoApiUrl contains existing query parameters
  • Add tests for error response handling: 404 errors, pending request cleanup, and retry behaviour
  • Add tests for concurrent requests with errors ensuring all callbacks are invoked
  • Add tests for JSON parsing errors in success callback
  • Add test for retry after JSON parsing error
  • Add test for missing marketing_categories field in API response
  • Add test for sorting items with undefined/null relevance values
  • Reorganise test structure: nest caching, URL stripping, and filtering describes under main getBidRequestData block
  • Add documentation for generating test coverage reports with viewing instructions

  • style: apply formatting to Neuwo RTD Module markdown documentation

  • refactor: remove name field from IAB segments in ORTB2 output

  • Update buildIabData() to only include id in segment objects
  • Remove label requirement; segments now only need valid ID
  • Update documentation examples to reflect simplified segment structure
  • Update unit tests to match new segment format
  • feat: migrate Neuwo RTD Module to new API architecture (v2.0.0) and maintain backward compatibility
  • Add version 2.0.0 with multi-version IAB Content Taxonomy support
  • Implement automatic API capability detection from endpoint URL format
  • Maintain backward compatibility with legacy GET endpoints
  • Consolidate default IAB Content Taxonomy version to "2.2" constant
  • Transform legacy API responses to unified segtax-based format
  • Add buildIabFilterConfig() for filter configuration conversion
  • Add transformV1ResponseToV2() and transformSegmentsV1ToV2() helpers
  • Refactor buildIabData() to dynamically process all tiers
  • Update injectIabCategories() to work with unified response format
  • Enhance JSDoc documentation with format examples and API details
  • Add conditional logging for POST request bodies
  • Optimise filtering: apply once before caching for legacy endpoints
  • test: update Neuwo RTD Module tests for new API architecture
  • Update all test mocks to use new segtax-based response format
  • Add tests for buildIabFilterConfig() function
  • Add tests for injectIabCategories() function
  • Add tests for transformV1ResponseToV2() function
  • Add tests for transformSegmentsV1ToV2() function
  • Update buildIabData() tests to use new tierData parameter structure
  • Add V1 API backward compatibility test suite with client-side filtering tests
  • Verify POST method and iabVersions query parameters for new API
  • Verify GET method and no iabVersions parameter for legacy V1 API
  • Update edge case tests for empty responses and error handling
  • Update integration tests for URL parameter handling with query strings
  • Remove hardcoded tier array constants (CONTENT_TIERS, AUDIENCE_TIERS)
  • docs: update Neuwo RTD Module documentation for new API version
  • Change default IAB Content Taxonomy version from "3.0" to "2.2"
  • Add IAB Content Taxonomy version "1.0" to supported values list
  • Add server-side filtering explanation to IAB Taxonomy Filtering section
  • Update Available Tiers table to focus on taxonomy types instead of API internals
  • Add recommended configuration comments for auctionDelay and waitForIt
  • Update all configuration examples to use "2.2" as default taxonomy version
  • Remove "How it works" section
  • feat: add OpenRTB 2.5 category fields support to Neuwo RTD Module

Add support for populating OpenRTB 2.5 category fields (site.cat, site.sectioncat, site.pagecat, site.content.cat) with IAB Content Taxonomy 1.0 segments.

Changes:

  • Add enableOrtb25Fields configuration parameter (default: true)
  • Add extractCategoryIds() helper function to extract segment IDs from tier data
  • Refactor buildIabData() to use extractCategoryIds() for code reuse
  • Extend buildIabFilterConfig() to apply filters to IAB 1.0 when feature enabled
  • Modify getBidRequestData() to request IAB 1.0 data (segtax 1) when feature enabled
  • Add warning when feature enabled with legacy API endpoint
  • Extend injectIabCategories() to populate four OpenRTB 2.5 category fields
  • Update version to 2.1.0
  • ci: add OpenRTB 2.5 category fields support to integration example

Changes:

  • Add checkbox UI control for enableOrtb25Fields option (default: checked)
  • Add display section for OpenRTB 2.5 category fields data
  • Extract and display site.cat, site.sectioncat, site.pagecat, and site.content.cat fields
  • Update bidRequested event handler to capture category fields
  • Add localStorage persistence for enableOrtb25Fields setting
  • Pass enableOrtb25Fields parameter to module configuration
  • test: add unit tests for OpenRTB 2.5 category fields

Changes:

  • Add 11 new buildIabFilterConfig() tests for OpenRTB 2.5 feature (enabled/disabled scenarios)
  • Add 11 new extractCategoryIds() tests covering all edge cases
  • Add 11 new injectIabCategories() tests for category field injection
  • Update 5 existing buildIabFilterConfig() tests
  • Add 6 new getBidRequestData() integration tests for V2 API with feature enabled/disabled
  • Move legacy API compatibility tests from V2 section to V1 section
  • docs: add OpenRTB 2.5 category fields support documentation to Neuwo RTD Module

Changes:

  • Add OpenRTB 2.5 feature description to module overview
  • Add enableOrtb25Fields parameter to parameters table
  • Add dedicated "OpenRTB 2.5 Category Fields" section with examples
  • Update ORTB2 data structure examples to show category fields
  • Add filtering section explaining IAB 1.0 filter application
  • Update "Accessing Neuwo Data" section with category field extraction example
  • Add "Building for Production" section with build command
  • Update segtax value in example (7 → 6)
  • Update version to 2.1.0

  • perf: change Content-Type to text/plain to avoid CORS preflight

  • refactor: change /v1/iab endpoint from POST to GET with flattened query params

Replace POST request with GET and send IAB taxonomy filters as flattened URL query parameters instead of JSON body to avoid CORS preflight requests.

Changes:

  • Replace buildIabFilterConfig() with buildFilterQueryParams() function
  • Change output from nested object to array of query parameter strings (e.g., ["filter_6_1_limit=3"])
  • Remove POST method and request body from ajax call
  • Add filter parameters directly to URL for /v1/iab endpoint
  • Maintain OpenRTB 2.5 filter application (ContentTier1/2 → segtax 1)
  • Update all unit tests to test buildFilterQueryParams() instead of buildIabFilterConfig()
  • Update tests expecting POST requests to expect GET requests
  • Update tests checking request body to check URL parameters
  • Update version to 2.2.0
  • feat: key cache by full API URL to support config changes between auctions
  • Replace global cachedResponses and pendingRequests singletons with objects keyed by neuwoApiUrlFull
  • Concurrent or sequential calls with different parameters (URL, taxonomy version, filters) maintain separate cache entries
  • Add LRU-style eviction capped at 10 entries to prevent unbounded cache growth
  • Log module version during init()
  • Add unit tests for cache isolation
  • fix: guard empty URLs, inject content/audience independently, allow limit: 0 to suppress tiers
  • Separate JSON parsing from response processing into distinct try/catch blocks
  • Add Array.isArray guard to extractCategoryIds
  • Only cache valid object responses so failed requests can be retried
  • Rename isV2Api to isIabEndpoint for clarity
  • Fix typo in log message and JSDoc (POST -> GET)
  • Bump to 2.2.1

  • fix: isolate legacy endpoint cache keys by taxonomy version and filters

  • fix: prevent duplicate filter query params when IAB Content Taxonomy is 1.0

  • fix: only sort and filter taxonomy tiers when filter is configured

  • fix: detect /v1/iab endpoint from URL pathname instead of full string

  • fix: prevent duplicate iabVersions=1 query param when content taxonomy is 1.0

  • aceexBidAdapter: initial release (aceexBidAdapter: initial release #14352)

  • aceexBidAdapter/setup

  • aceexBidAdapter/setup and fixes

  • aceexBidAdapter/setup merge

  • prices logic fix

  • prices logic fix

  • prices logic fix

  • prices logic fix

  • prices logic fix

  • prices logic fix

  • review smallfixes

  • Mediasquare bid adapter: manage burl object (Mediasquare bid adapter: manage burl object #14357)

  • manage burl object

  • fix lint

  • burl to burls

  • stringify only when method post

  • Insticator Bid Adapter: Add support for 2.6rtb request/response (Insticator Bid Adapter: Add support for 2.6rtb request/response #14373)

  • enhance ORTB 2.6 support and enhance bid response handling

  • remove onBidWon

  • add tests for handling 204 No Content responses in InsticatorBidAdapter

  • update InsticatorBidAdapter and improve TTL handling

  • udpate media type detection in InsticatorBidAdapter to support ORTB 2.6 standards

  • remove adpod fields references

  • Conceptx bid adapter: Update request destination (Conceptx bid adapter: Update request destination #14420)

  • New adapter: concepx

  • Syntax change

  • Revert syntax change

  • Defensive check for response from bidder server

  • Add better validation for the request

  • Merge branch 'master' of https://github.com/prebid/Prebid.js

  • Don't append url on every buildrequest

  • Add gvlId to conceptX

  • Change conceptx adapter, to directly request our PBS

  • Add empty getUserSync, as the syncing will be delegated (runPbsCookieSync)

Normalize cattax values before comparison to ensure accurate matching.

This reverts commit 192f96a.

  • Performax adapter: Add user sync and reporting URLs (Performax adapter: Add user sync and reporting URLs #14429)

  • Add user sync and reporting urls

  • add tests, minor refactor

  • add window.addEventListener only once

  • fix JSON.parse can return null

  • Fix unconditional setting user.ext.uids

  • Add test

  • swap uids from storage and original user.ext.uids

  • Add keepalive and log only when debug is turned on

This reverts commit d8fb435.

Bumps browserstack-local from 1.5.5 to 1.5.11.

updated-dependencies:

  • dependency-name: browserstack-local dependency-version: 1.5.11 dependency-type: indirect ...

Bumps fast-xml-parser from 5.3.6 to 5.4.1.

updated-dependencies:

  • dependency-name: fast-xml-parser dependency-version: 5.4.1 dependency-type: indirect ...

  • pubstackBidAdapter: initial release (pubstackBidAdapter: initial release #14490)

  • feat: add pubstackBidAdapter (Update README.md #1)

  • feat: add SparkBidAdapter

  • fix: reviews

  • fix: use iframe for user_sync

  • fix: change adapter name

  • fix: add test file

  • feat: add viewport value in imp[].ext.prebid.bidder.pubstack.vpl

  • fix: remove unused context

  • Pubstack Adapter: update utils and align adapter tests

  • Pubstack Bid Adapter: apply lint-driven TypeScript cleanups

  • Update modules/pubstackBidAdapter.ts

  • Update modules/pubstackBidAdapter.md

  • Update libraries/pubstackUtils/index.ts

  • Update modules/pubstackBidAdapter.ts

  • Pubstack Adapter: use placementPositionInfo telemetry

Bumps actions/upload-artifact from 6 to 7.

updated-dependencies:

  • dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ...

Bumps actions/download-artifact from 7 to 8.

updated-dependencies:

  • dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ...

Made-with: Cursor

  • MediaGo: remove redundant debug-info, use Network tab for verification; remove Chinese comments

Made-with: Cursor

  • Screencore Bid Adapter: fix region routing and endpoint path (Screencore Bid Adapter: fix region routing and endpoint path #14544)

  • Screencore prebid adapter

  • rearrange code

  • use lowercase screncore bidder code

  • fix tests

  • update tests

  • trigger CI

  • Screencore Bid Adapter: add endpointId parameter

  • Updated adapter to use teqblazeUtils library

  • Added endpointId parameter support in test parameters

  • Updated test specs to include endpointId validation

  • Screencore Bid Adapter: update sync URL to base domain

Update SYNC_URL constant to use base domain.
The getUserSyncs function from teqblazeUtils will append the appropriate path.

  • Screencore Bid Adapter: migrate to teqblazeUtils library
  • Update imports to use buildRequestsBase, interpretResponse, getUserSyncs, isBidRequestValid, and buildPlacementProcessingFunction from teqblazeUtils
  • Remove storage manager dependency (no longer needed)
  • Update isBidRequestValid to use placementId/endpointId params validation
  • Refactor buildRequests to use buildRequestsBase pattern
  • Rewrite test suite to match teqblazeUtils API:
    • Simplify test data structures
    • Update server response format (body as array)
    • Add tests for placementId/endpointId validation
    • Update getUserSyncs URL format expectations
  • fix(screencore): correct region routing and endpoint path
  • add US/ and Canada/ timezone prefixes to getRegionSubdomainSuffix()
  • fix endpoint path from /prebid to /pbjs
  • move AD_URL inside buildRequests to compute per request

  • GumGum Prebid Adapter: Send App / Site Content Data to GG Ad Exchange (GumGum Prebid Adapter: Send App / Site Content Data to GG Ad Exchange #14535)

  • Gumgum - ADTS-175 Support multiple GG params

  • ADJS-1165-prebid-adaptor-changes-to-support-jp-products

  • made tweaks to the skin product for the gumgumBidAdapter

  • added test for new product id

  • updated skins parameter for consistency

  • updated test for updated skins parameter

  • ADJS-1271-send-envelope-param-for-lexicon

  • ADJS-1646-update-userId-handling

  • added test: should filter pubProvidedId entries by allowed sources

  • support ortb2.user.ext.eids fallback and add identity parity tests

  • ADTS-616-send-app-site-content-object-from-prebid-to-ad-server

  • Prioritize prebid.js 10 structure

  • GumGum Adapter: fix TDID extraction across all EID uids and add edge-case tests

  • added itype parameter

  • updated access to channel and network objects

Distinguish control-group beacons where LCE would have been used (no cache) from those where WURFL cache was present.

  • Add NONE_LCE enrichment type: control + no cache → 'none_lce'
  • Remove abExcludeLCE parameter
  • Simplify ABTestManager by removing LCE exclusion logic
  • fix(wurfl-rtd): read cache metadata in control group beacon

Control group early return skipped reading wurfl_id, sampling_rate, tier and over_quota from cache, sending empty/default values in the beacon.

Bumps qs from 6.14.1 to 6.14.2.

updated-dependencies:

  • dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect ...

Bumps fast-xml-parser from 5.3.4 to 5.3.6.

updated-dependencies:

  • dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect ...

Updated the Proxistore COOKIE_BASE_URL and COOKIE_LESS_URL to the new abs domain in both the adapter and its corresponding test file. This ensures consistency with the updated API endpoints.

  • Integrate OpenRTB converter for Proxistore bid adapter, and add OpenRTB request as a separate field.

  • Refactor Proxistore bid adapter to improve OpenRTB handling, add GDPR-specific URL selection, and enhance test coverage.

  • Add support for website and language parameters in Proxistore bid adapter requests, with corresponding test coverage.

  • Handle empty response body in Proxistore bid adapter to avoid runtime errors.

  • Floxis Bid Adapter: initial release (Floxis Bid Adapter: initial release #13934)

  • Floxis Bid Adapter : initial release

  • Added ORTB parameters for blocking

  • Adjusted documentation with maintainer info

  • Added more validations, extracted converter to a const

  • Floxis Bid Adapter: redesign to seat-based architecture with ortbConverter

Major rewrite replacing teqblazeUtils with ortbConverter for ORTB 2.x compliance.

Changes:

  • New params: seat (required), region (required), partner (required)
  • Endpoint URL: https://{subdomain}.floxis.tech/pbjs?seat={seat}
    • subdomain = region for 'floxis' partner
    • subdomain = {partner}-{region} for white-label partners
  • ORTB-native implementation with Floors Module support
  • 40 comprehensive tests with full code coverage
  • Updated documentation with examples

Addresses all PR #13934 review comments from @osazos

  • Rename FloxisBidAdapter.md to floxisBidAdapter.md

  • Code review adjustments

  • InsurAds Bid Adapter: Initial Implementation (InsurAds Bid Adapter: Initial Implementation #14470)

  • InsurAds Bid Adapter Implementation

  • Remove test alias

  • Storage Settings Example

  • Adapter rename 1/2

  • Adapter rename 2/2

  • Update modules/insuradsBidAdapter.ts

  • Update modules/insuradsBidAdapter.ts

  • Update test/spec/modules/insuradsBidAdapter_spec.js

  • The params need to be registered under nexx360

  • LeagueM BId Adapter: initial release (LeagueM BId Adapter: initial release #14479)

  • LeagueM BId Adapter: initial release

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update test/spec/modules/leagueMBidAdapter_spec.js

  • Update modules/leagueMBidAdapter.md

Type of change

  • Bugfix

  • Feature

  • New bidder adapter

  • Updated bidder adapter

  • Code style update (formatting, local variables)

  • Refactoring (no functional changes, no api changes)

  • Build related changes

  • CI related changes

  • Does this change affect user-facing APIs or examples documented on http://prebid.org?

  • Other

Description of change

Other information

patmmccann and others added 2 commits March 20, 2026 08:44
@patmmccann @ourcraig
@dependabot @alukonin1 @css12s @donnychang @laneser @tb-emq @ptomasroos @DimaIntentIQ @dmytro-po @mkomorski @mmuras-gemius @daniel-barac @DragosBaci @alxmihalcea @Dan-Lucian @dgirardi @talavital7 @prebidjs-release @ym-aaron @gravelg @ckbo3hrk @sebrobert @pgomulka-id5 @mpimentel-nexxen @Gunnar97 @florianerl @lucor @acsbendi @yndxcdn @robertrmartinez @MaksymTeqBlaze @DeepthiNeeladri @robin-crazygames @optidigital-prebid @dawidww @tpc-brian @weissbc07 @ysfbsf @dmitrybor @petrican @alexandr-kim-vl @shashankatd @monis0395 @RuzannaAvetisyan @siminkovladyslav @danijel-ristic @dnrstc @verben-gh @johnclc @anthonyrichir @floxis-tech @JoseClimaco @mo4rock @markappmedia @VedantMadane @pm-priyanka-deshmane @adclusterdev @v0idxyz @fatihkaya84 @abermanov-zeta @driftpixelai @briguy-mobian @drpaulfarrow @cursoragent @gregneuwo @grzgm @rishko00 @vrishko @matthieularere-msq @shubhamc-ins @cpcpn-emil @rogerDyl @anna-y-perion @ahzgg @ibhattacharya-dev @michalkvacek @gpolaert @sdeluce @SylviaF @screencore-dev @pavlosamonin-a11y @john-ivan @lbenmore @john-bauzon-gumgum @jsnellbaker @quietPusher @giathinhly @oleksii-intent @petrychenkodev @dalmenarDevST @ybootin @RomuloVitoi @karimMourra @bjoberg-amzn @parthshah51999 @mach-martin @doelwit @ronishefi9 @dpapworth-qc @matthewfitz @philipwatson @antosarho @holidio @danielbaud @Mickael-van-der-Beek @justadreamer @PiekharievaK
master into dependabot Target (#14620)
e7499dc 
* Rubicon Bid Adapter: add support for primaryCatId and secondaryCatIds (#14361)

* Bump lodash from 4.17.21 to 4.17.23 (#14368)

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Yield one bid adapter: support Interstitial (instl param) in building server request (#14370)

* Support Interstitial (instl param) in building server request

* adjust unit tests for Instl param

* New Adapter: Panxo - AI traffic monetization SSP (#14365)

This adapter enables publishers to monetize AI-referred traffic through Prebid.js.

- Bidder code: panxo
- GVL ID: 1527
- Media types: Banner
- Features: GDPR/TCF 2.0, CCPA, GPP, COPPA, schain, First Party Data, Price Floors
- Requires Panxo Signal script to be loaded before Prebid

Documentation: modules/panxoBidAdapter.md
Tests: test/spec/modules/panxoBidAdapter_spec.js

* Bridgewell Bid Adapter: expand request data (#14320)

* enhance adapter with additional bid parameters

* Add additional bid parameters to tests of bridgewellBidAdapter

* pass mediaType and size to getFloor

---------

Co-authored-by: Laneser <laneser.kuo@gmail.com>

* Remove "emetriq" as "appnexus" alias (#14369)

* Added size ids for 1080x1920 (#14376)

* IntentIq ID Module & Analytical Adapter: increase default server call time, support region, bugfixes (#14374)

* AGT-734: Support region for prebid modules (merge 0_3_4 with master)

* AGT-730: move spd to partnerData (merge 0_3_4 to master)

* AGT-765: Send ad size and pos in impression reporting module (#58)

* AGT-765: pos and size

* AGT-765: Tests for position resolving

* AGT-765: Test fix

* AGT-756: Missed vrref in payload fix (#56)

* AGT-756: vrref in payload fix

* remove comment

* AGT-756: Fix vrref bug

* AGT-756: Remove comments

* AGT-756: Test for vrref

* update requestRtt to show more clear time (#59)

* AGT-739: Change time to call server (#57)

* fix typo, remove parameter duplication (#60)

* fix typo, remove parameter duplication

* update doc examples

* AGT-721: Documentation for region, size, pos (#61)

* fix region parameter in table (#62)

* update tests

* remove unused test

---------

Co-authored-by: dmytro-po <dmytro.po@intentiq.com>

* Core: adding ima params to local cache request (#14312)

* Core: adding ima params to local cache request

* retrieving ima params

* usp data handler

* AdOceanBidAdapter: add gvlid (#14382)

* Connatix Bid Adapter: Add coppa & gpp signals (#14379)

* added modules and command for fandom build

* revert: cnx master changes

* feat: stop storing ids in cookie

* test: update tests

* fix: remove trailing space

* Add coppa & gpp signals

* update unit tests

---------

Co-authored-by: dragos.baci <dragos.baci@connatix.com>
Co-authored-by: DragosBaci <118546616+DragosBaci@users.noreply.github.com>
Co-authored-by: Alex <alexander.mihalcea88@gmail.com>
Co-authored-by: Gaina Dan-Lucian <dan.gaina@connatix.com>
Co-authored-by: Gaina Dan-Lucian <83463253+Dan-Lucian@users.noreply.github.com>

* Core: granular settings for main thread yielding (#13789)

* turn off yielding with scheudler === false

* sync renderAd

* what would we do without our Linter

* Turn  off yielding completely

* linting (again)

* granular yielding, off by default

* Too many callbacks

* Avoid yielding the main thread during renderAd

* Expose requestBids hooks

* lint

* Revert "Expose requestBids hooks"

This reverts commit ae0062a3ecc961e61d49fa05acdcfb7a372d65bb.

* Revert "Core: wait for creative document DOMContentLoaded (#13991)"

This reverts commit 2870230d47be17201df3812782083a54b462774a.

* Revert "Core: remove use of document.write in rendering (#13851)"

This reverts commit 48419a62d330a48433b4ab7163ca538966f9ed09.

* lint

* simplify yield config, default to true, add auctionOptions.legacyRender

* lint

* update e2e tests

---------

Co-authored-by: Patrick McCann <pmccann@cafemedia.com>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Taboola support extra signals (#14299)

* add deferredBilling support using onBidBillable

* update burl setting

* support nurl firing logic

* add extra signals to taboola request

* add extra ad signals

* fix missing semicolon

* use Prebid's built-in counters

* updated detectBot logic

* Prebid 10.23.0 release

* Increment version to 10.24.0-pre

* udpate variable (#14380)

* Replace global.navigator with window.navigator (#14389)

This throws in production since upgrade to 10+
No other module is using global.navigator all references goes to window.navigator

* s3rtd: update default params and docs (#14378)

* Adkernel Bid Adapter: add Intellectscoop alias (#14395)

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Bump fast-xml-parser from 5.2.5 to 5.3.4 (#14401)

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.2.5 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.2.5...v5.3.4)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/upload-artifact from 4 to 6 (#14402)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Updated size id from rubicon production, api endpoint (#14377)

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* BeOp Bid Adapter: Fix slot name detection to use best practices (#14399)

* Fix slot name detection to use best practices

* Post review commit

* Linter fix

* Last post review commit

List of concerned names managed
| adUnitCode                         | Résultat         |
| ---------------------------------- | ---------------- |
| `div-gpt-ad-article_top_123456`    | `article_top`    |
| `div-gpt-ad-sidebar-1678459238475` | `sidebar`        |
| `div-gpt-ad-topbanner-1`           | `topbanner-1` ✅  |
| `div-gpt-ad-topbanner-2`           | `topbanner-2` ✅  |
| `sidebar-123456`                   | `sidebar-123456` |
| `article_bottom`                   | `article_bottom` |

* Only normalize GPT codes, leave others unchanged

* Add tests on FIX and missing code coverage

* realTimeData: fix bug where setting circular references in FPD causes activity checks to get stuck in an infinite loop (#14366)

* realTimeData: fix bug where setting circular references in FPD causes activity checks to get stuck in an infinite loop

* handle circular references in unguarded properties

* prefer allowing more data over avoiding leaks

* more edge cases

* Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 (#14410)

Bumps @isaacs/brace-expansion from 5.0.0 to 5.0.1.

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ID5 ID module: add option to use custom external targeting  (#14324)

* Add custom tag reporting mechanism for Id5IdSystem module

* Add documentation

* empty line rm, lint failure

* empty line rm, lint failure

* cannot use withResolvers in tests

* type change in doc

* fix example

* Core: loading external scripts linting rule (#14354)

* Core: loading external scripts linting rule

* using default rule instead of custom

* fixing overwritten event/adLoader rule

* change to no-restricted-syntax

* no-restricted-imports

---------

Co-authored-by: Demetrio Girardi <dgirardi@prebid.org>

* Remove PAAPI-related functionality from Unruly adapter (#14358)

* SBE-2291 Remove protected audience related test code

* SBE-2291 Remove protected audience related code

* New library: placement position &bbidmaticBidAdapter: update viewability tracking logic (#14372)

* bidmaticBidAdapter: update viewability tracking logic

* bidmaticBidAdapter: update viewability tracking logic

* bidmaticBidAdapter: update viewability tracking logic

* bidmaticBidAdapter: update viewability tracking logic

* Humansecurity RTD Provider: migrate to TypeScript and optimize token handling (#14362)

* - Migrated to TypeScript
- Removed hardcoded token injection into ortb2Fragments and delegate to the HUMAN implementation, enabling management of which bidders receive tokens and enhancing monitoring and control of latency and performance
- Introduce a cached implementation reference via getImpl()
- Add module version query parameter when loading the implementation script
- Wire onAuctionInitEvent so the implementation can collect QoS, telemetry and statistics per auction

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* - validate module version parameter in script URL
- add HumanSecurityImpl interface

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* WURFL RTD: update module documentation (#14364)

* WURFL RTD: update module documentation

* WURFL RTD: update module documentation

* Change humansecurityRtdProvider.js to .ts extension

* Kobler bid adapter: pass adunitcode in bid request. (#14392)

* Page view ID.

* Page view ID.

* Removed console.log.

* Removed unused import.

* Improved example.

* Fixed some tests.

* Kobler bid adapter: pass adunitcode in bid request.

* percentInView: fix bug where viewability calculation is inaccurate inside friendly iframes (#14414)

* percentInView: fix bug where viewability calculation is inaccurate inside friendly iframes

* use boundingClientRect

* New module: Shaping rules (#14079)

* initial commit

* storeSplits method

* unit tests

* remove test

* removing storing & extract merging ortb2

* lint

* adding default handling

* lint

* merge fpd cache

* review fixes

* refactoring, bug fixing, tests

* lint

* extending bidPrice schema function

* removing invalid example

* session random

* rename

* module name

* random per auction

* modifies some schema function to return value instead of condition result

* extra schema evaluators

* json fix

* evaluating rules per auction

* evaluating rules per auction

* static config

* auctionId

* safe guards

* registering activities only once

* expose configuration type; update integ example rules json URL

* evaluating rules fix

* fixing model group selection

---------

Co-authored-by: Demetrio Girardi <dgirardi@prebid.org>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Update yandexBidAdapter.md (#14416)

- Added email address to the main description
- Added 'cur' parameter to the parameters list
- Minor changes in the Adunit config examples

* new rubicon apex url (#14417)

* TeqBlaze Sales Agent Bid Adapter: initial release (#14413)

* TeqBlazeSalesAgent Bid Adapter: initial release

* update doc

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Prebid 10.24.0 release

* Increment version to 10.25.0-pre

* Yahoo Ads Bid Adapter: Add Transaction ID (TID) Support (#14403)

* tesing

* adding tests

* md file

* Update yahooAdsBidAdapter_spec.js

* Fix formatting in yahooAdsBidAdapter_spec.js

* Fix casing for enableTIDs in documentation

---------

Co-authored-by: dsravana <deepthi.neeladri.sravana@yahooinc.com>
Co-authored-by: Patrick McCann <pmccann@cafemedia.com>

* gam video module: Include us_privacy based on gpp when downloading VAST for the IMA player (#14424)

* Include us_privacy based on gpp when downloading VAST for the IMA player

IMA player has no support for GPP, but does support uspapi.

When on `window`, there is only `__gpp`, we can still pass a US Privacy string by deriving the string from the `__gpp` data,

* Added tests for the retrieveUspInfoFromGpp method

* Re-write the test to use the public API instead of internal methods

* Deal with the option that the parsedSections contains sections which are arrays

* Deal with possible null/missing values in the GPP parsedSection

* Optidigital Bid Adapter: Adding ortb2 device, keywords, addtlConsent, gpid (#14383)

* add gpp suport

* update of the optidigital adapter

* fix the lint issue

* refactor ortb2 keywords trim logic

---------

Co-authored-by: Dawid W <dawid@optidigital.fr>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* LocID User ID Submodule: add locIdSystem (#14367)

* chore(prebid): scaffold locid user id module

* update LocID module to support first-party endpoint fetching and privacy signal handling

* update LocID system tests for gdpr handling and consent string validation

* Enhance LocID module documentation and tests for privacy signal handling. Updated comments for clarity, added test cases for maximum ID length and empty endpoint handling, and refined privacy configuration notes in the documentation.

* Refactor LocID module to standardize naming conventions and enhance privacy signal handling. Updated module name to 'locId', improved consent data processing functions, and revised documentation and tests accordingly.

* Added Apache 2.0 license header.

* Add LocID User ID sub-module documentation and refactor ajax usage in locIdSystem module

- Introduced locid.md documentation detailing the LocID User ID sub-module, including installation, configuration, parameters, and privacy handling.
- Refactored locIdSystem.js to utilize ajaxBuilder for improved request handling.
- Updated tests in locIdSystem_spec.js to accommodate changes in ajax usage and ensure proper timeout configurations.

* Remove docs folder - to be submitted to prebid.github.io separately

* Update LocID atype to 1 for compliance with OpenRTB 2.6 specifications

- Changed the default EID atype in locIdSystem.js and related documentation from 3384 to 1, reflecting the correct device identifier as per OpenRTB 2.6 Extended Identifiers spec.
- Updated references in locIdSystem.md and userId/eids.md to ensure consistency across documentation.
- Adjusted unit tests in locIdSystem_spec.js to validate the new atype value.

* Enhance LocID module with connection IP handling and response parsing improvements

- Introduced connection IP validation and storage alongside LocID to support IP-aware caching.
- Updated response parsing to only extract `tx_cloc` and `connection_ip`, ignoring `stable_cloc`.
- Enhanced documentation to reflect changes in stored value format and endpoint response requirements.
- Modified unit tests to cover new functionality, including connection IP checks and expiration handling.

* fix getValue string handling, GDPR enforcement gating, extendId docs

* LocID: enforce IP cache TTL in extendId and update tests/docs

* LocID: honor null tx_cloc, reject whitespace-only IDs, add stable_cloc exclusion test

* LocID: remove legacy 3384 references and enforce atype 1

* LocID: add vendorless TCF marker and scope 3384 guard

* enhance locIdSystem to handle whitespace-only tx_cloc and update documentation. Ensure null IDs are cached correctly when tx_cloc is empty or whitespace, and adjust caching logic to honor null responses from the main endpoint.

---------

Co-authored-by: Brian <bcweiss@gmail.com>

* Github Actions: bump download artifact (#14440)

* CI: harden artifact restore for browserstack workflows

* Update run-tests.yml

* Fix comment formatting in test.yml

* Retry on artifact download failure

---------

Co-authored-by: Demetrio Girardi <dgirardi@prebid.org>

* 33acrossId System: stabilize ID wipe unit tests (#14441)

* Bump axios from 1.13.2 to 1.13.5 (#14443)

Bumps [axios](https://github.com/axios/axios) from 1.13.2 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.13.2...v1.13.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Core: update storage disclosure for prebid.storage (#14442)

* Build process: Add .cache to gulp clean (#14438)

* build: include webpack cache in clean task

* Remove comment from clean function

Removed comment about webpack filesystem cache in clean function.

* Add GPP consent support to user sync URL in Missena adapter (#14436)

* Agent guidelines: Add context for repo history access (#14430)

Added additional context for accessing repo history.

* Set alwaysHasCapacity for Sovrn bid adapter (#14454)

* Sevio bid adapter fallback natives (#14390)

* [SevioBidAdapter] - fix mapping by id for the native ads

* [SevioBidAdapter] - fix mapping by id for the native ads

* Add native parsing tests

* Yaleo Bid Adapter: initial release (#14452)

Co-authored-by: Alexandr Kim <alexandr.kim@audienzz.ch>

* feat: Mile Bid Adapter - Initial release (#14388)

Co-authored-by: Shashank <=>

* bidMatic bid adapter: update placement info logic (#14418)

* Panxo RTD Provider: initial release (#14419)

* New module: Panxo RTD Provider

Add Panxo RTD submodule that enriches OpenRTB bid requests with
real-time AI traffic classification signals through device.ext.panxo
and site.ext.data.panxo.

* fix: fail open when bridge is unavailable and guard null messages

- Flush pending auction callbacks when the implementation bridge
  cannot be reached, so auctions are never blocked indefinitely.
- Guard against null bridge messages to prevent runtime errors.
- Add tests for both scenarios.

---------

Co-authored-by: Monis Qadri <monis0395@users.noreply.github.com>

* Core: remove type declaration for `getStatusCode` (#14431)

* Core: reintroduce bidResponse.getStatusCode

* Revert "Core: reintroduce bidResponse.getStatusCode"

This reverts commit dcf61ba5614144355f0f0b3a9c3764e618802265.

* Core: remove getStatusCode typing

* Prebid 10.25.0 release

* Increment version to 10.26.0-pre

* limelight: Send open rtb bid requests from our prebid js adapter (#14397)

* changed requests format to OpenRTB.

* Added more tests

* fix refererInfo.page fallback for site.page

* fix built imp for size-only

* fix built imp for size-only

* OMS Bid Adapter: add prebid js version to request payload (#14421)

* Bump qs from 6.14.1 to 6.14.2 (#14478)

Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump fast-xml-parser from 5.3.4 to 5.3.6 (#14482)

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.4 to 5.3.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Floor module: add enforcement allowlist config option (#14455)

* Core: add bidder-scoped floor enforcement

* Core: enforce floors allowlist against adapterCode

* Various modules: remove legacy GPT targeting fallbacks (#14450)

* Core: remove legacy GPT targeting fallbacks

* Reconciliation RTD Provider: handle missing RSDK_ADID targeting

* Core: fix targetingLock GPT test mock for getConfig

* TargetVideo bid adapter: send price floor param (#14406)

* TargetVideo bid adapter: send price floor param

* Add support for the price floors module

* Add imports

* Fix getBidFloor function floor params

---------

Co-authored-by: dnrstc <danrstc@gmail.com>

* New adapter: Verben (#14494)

Co-authored-by: Verben <support_trading@verben.com>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Teal bid adapter: include native and video media types (#14493)

* Proxistore Bid Adapter: migration to OpenRTB (#14411)

* Update Proxistore endpoint URLs in adapter and tests

Updated the Proxistore `COOKIE_BASE_URL` and `COOKIE_LESS_URL` to the new `abs` domain in both the adapter and its corresponding test file. This ensures consistency with the updated API endpoints.

* Integrate OpenRTB converter for Proxistore bid adapter, and add OpenRTB request as a separate field.

* Refactor Proxistore bid adapter to improve OpenRTB handling, add GDPR-specific URL selection, and enhance test coverage.

* Add support for website and language parameters in Proxistore bid adapter requests, with corresponding test coverage.

* Handle empty response body in Proxistore bid adapter to avoid runtime errors.

---------

Co-authored-by: Anthony Richir <anthony.richir@proxistore.com>

* Floxis Bid Adapter: initial release (#13934)

* Floxis Bid Adapter : initial release

* Added ORTB parameters for blocking

* Adjusted documentation with maintainer info

* Added more validations, extracted converter to a const

* Floxis Bid Adapter: redesign to seat-based architecture with ortbConverter

Major rewrite replacing teqblazeUtils with ortbConverter for ORTB 2.x compliance.

Changes:
- New params: seat (required), region (required), partner (required)
- Endpoint URL: https://{subdomain}.floxis.tech/pbjs?seat={seat}
  - subdomain = region for 'floxis' partner
  - subdomain = {partner}-{region} for white-label partners
- ORTB-native implementation with Floors Module support
- 40 comprehensive tests with full code coverage
- Updated documentation with examples

Addresses all PR #13934 review comments from @osazos

* Rename FloxisBidAdapter.md to floxisBidAdapter.md

* Code review adjustments

---------

Co-authored-by: Patrick McCann <pmccann@cafemedia.com>

* InsurAds Bid Adapter: Initial Implementation (#14470)

* InsurAds Bid Adapter Implementation

* Remove test alias

* Storage Settings Example

* Adapter rename 1/2

* Adapter rename 2/2

* Update modules/insuradsBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/insuradsBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/insuradsBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* The params need to be registered under nexx360

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* LeagueM BId Adapter: initial release (#14479)

* LeagueM BId Adapter: initial release

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/leagueMBidAdapter.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* New Adapter: Harion (#14398)

* new adapter harion

* refactor(adapter): guard added to interpretResponse

* Core: disabling fingerprinting apis (#14404)

* Core: disabling fingerprinting apis

* getFallbackWindow -> utils

* Fix several typos in comments and tests (#14498)

* Bump ajv from 6.12.6 to 6.14.0 (#14499)

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.12.6 to 6.14.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](https://github.com/ajv-validator/ajv/compare/v6.12.6...v6.14.0)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Setting alwaysHasCapacity flag to true (#14500)

* Adcluster Bid Adapter: Support Adcluster (#14050)

* adcluster - new adapter

* fixes

* video preview id change

* video preview id change

* Update adclusterBidAdapter_spec.js

* fallback

* multiformat fix

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>
Co-authored-by: Patrick McCann <pmccann@cafemedia.com>

* ReVantage Bid Adapter: initial release (#14180)

* Create revantageBidAdapter.js

* Create revantageBidAdapter.md

* Update revantageBidAdapter.js

* Update revantageBidAdapter.js

* Update revantageBidAdapter.js

* Update revantageBidAdapter.js

Fixed trailing slash Error on Line 123

* Create revantageBidAdapter_spec.js

* Update revantageBidAdapter_spec.js

Fixed Trailing slashes (again)

* Update revantageBidAdapter_spec.js

* Update revantageBidAdapter_spec.js

same thing again

* Refactor Revantage Bid Adapter for media types and bids

Refactor Revantage Bid Adapter to use media type constants and improve bid response handling.

* Refactor RevantageBidAdapter tests for GPP consent

* Update modules/revantageBidAdapter.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/revantageBidAdapter.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Validate feedId consistency in batch bid requests

Added validation to ensure all bid requests in a batch have the same feedId, logging a warning if they do not.

* Add test for rejecting batch with different feedIds

* Update syncOptions for image sync URL parameters

* Update sync URL to use 'tag=img' instead of 'type=img'

* Update print statement from 'Hello' to 'Goodbye'

* fixed

* Enhance video bid handling and add utility functions

Added functions to handle video size extraction and VAST detection.

---------

Co-authored-by: Patrick McCann <pmccann@cafemedia.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* AdMatic Bid Adapter : add adrubi alias (#14504)

* Admatic Bidder Adaptor

* Update admaticBidAdapter.md

* Update admaticBidAdapter.md

* remove floor parameter

* Update admaticBidAdapter.js

* Admatic Bid Adapter: alias and bid floor features activated

* Admatic adapter: host param control changed

* Alias name changed.

* Revert "Admatic adapter: host param control changed"

This reverts commit de7ac85981b1ba3ad8c5d1dc95c5dadbdf5b9895.

* added alias feature and host param

* Revert "added alias feature and host param"

This reverts commit 6ec8f4539ea6be403a0d7e08dad5c7a5228f28a1.

* Revert "Alias name changed."

This reverts commit 661c54f9b2397e8f25c257144d73161e13466281.

* Revert "Admatic Bid Adapter: alias and bid floor features activated"

This reverts commit 7a2e0e29c49e2f876b68aafe886b336fe2fe6fcb.

* Revert "Update admaticBidAdapter.js"

This reverts commit 7a845b7151bbb08addfb58ea9bd5b44167cc8a4e.

* Revert "remove floor parameter"

This reverts commit 7a23b055ccd4ea23d23e73248e82b21bc6f69d90.

* Admatic adapter: host param control && Add new Bidder

* Revert "Admatic adapter: host param control && Add new Bidder"

This reverts commit 3c797b120c8e0fe2b851381300ac5c4b1f92c6e2.

* commit new features

* Update admaticBidAdapter.js

* updated for coverage

* sync updated

* Update adloader.js

* AdMatic Bidder: development of user sync url

* Update admaticBidAdapter.js

* Set currency for AdserverCurrency: bug fix

* Update admaticBidAdapter.js

* update

* admatic adapter video params update

* Update admaticBidAdapter.js

* update

* Update admaticBidAdapter.js

* update

* update

* Update admaticBidAdapter_spec.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Revert "Update admaticBidAdapter.js"

This reverts commit 1216892fe55e5ab24dda8e045ea007ee6bb40ff8.

* Revert "Update admaticBidAdapter.js"

This reverts commit b1929ece33bb4040a3bcd6b9332b50335356829c.

* Revert "Update admaticBidAdapter_spec.js"

This reverts commit 1ca659798b0c9b912634b1673e15e54e547b81e7.

* Revert "update"

This reverts commit 689ce9d21e08c27be49adb35c5fd5205aef5c35c.

* Revert "update"

This reverts commit f381a453f9389bebd58dcfa719e9ec17f939f338.

* Revert "Update admaticBidAdapter.js"

This reverts commit 38fd7abec701d8a4750f9e95eaeb40fb67e9f0e6.

* Revert "update"

This reverts commit a5316e74b612a5b2cd16cf42586334321fc87770.

* Revert "Update admaticBidAdapter.js"

This reverts commit 60a28cae302b711366dab0bff9f49b11862fb8ee.

* Revert "admatic adapter video params update"

This reverts commit 31e69e88fd9355e143f736754ac2e47fe49b65b6.

* update

* Update admaticBidAdapter.js

* Update admaticBidAdapter_spec.js

* mime_type add

* add native adapter

* AdMatic Adapter: Consent Management

* added gvlid

* Update admaticBidAdapter.js

* admatic cur update

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* Update admaticBidAdapter.js

* admatic sync update

* Update admaticBidAdapter.js

* Revert "Update admaticBidAdapter.js"

This reverts commit 11e053f0743f2df0b88bb2010f8c26b08653516a.

* Revert "Update admaticBidAdapter.js"

This reverts commit 11e053f0743f2df0b88bb2010f8c26b08653516a.

* Update admaticBidAdapter.js

* OMS Bid Adapter: add instl flag to imp in request (#14501)

* Zeta SSP Analytics Adapter: pass floors. (#14350)

* Zeta SSP Analytics Adapter: pass floors.

* Zeta SSP Analytics Adapter: minor fix.

* Zeta SSP Analytics Adapter: fix tests.

* Revert "Various modules: remove legacy GPT targeting fallbacks (#14450)" (#14510)

This reverts commit 299f20742da2c832cf3f0eaeceb9ee60a043c5a1.

* Prebid 10.26.0 release

* Increment version to 10.27.0-pre

* DPAI bid adapter: initial release (#14434)

* New adapter DPAI

* New adapter DPAI

* New adapter DPAI: Added end line

* New adapter DPAI: Added end line

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Core: remove stale transformBidParams references (#14512)

* docs: adding documentation for mobianMpaaRating, mobianContentTaxonomy, mobianEsrbRating (#14513)

* Bump minimatch (#14520)

Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 3.1.2 to 3.1.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.4)

Updates `minimatch` from 9.0.5 to 9.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.4)

Updates `minimatch` from 5.1.6 to 5.1.8
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.4)

Updates `minimatch` from 9.0.4 to 9.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.4)

Updates `minimatch` from 10.0.3 to 10.2.3
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.4
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.7
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 5.1.8
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.7
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 10.2.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump basic-ftp from 5.0.5 to 5.2.0 (#14522)

Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.0.5 to 5.2.0.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.0)

---
updated-dependencies:
- dependency-name: basic-ftp
  dependency-version: 5.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Chrome AI RTD Provider: fix QuotaExceededError with large page content (#14295)

* Chrome AI RTD Provider: fix QuotaExceededError with large page content

Added MAX_TEXT_LENGTH constant (1000 chars) and text truncation logic
in getPageText() to prevent QuotaExceededError when Chrome AI APIs
process pages with large amounts of text content.

Without this fix, pages with extensive text content can cause the
Chrome AI APIs (LanguageDetector, Summarizer) to throw
QuotaExceededError exceptions.

* Chrome AI RTD Provider: add unit tests for MAX_TEXT_LENGTH and text truncation

Adds tests covering:
- MAX_TEXT_LENGTH constant exists and equals 1000
- getPageText returns null for text below MIN_TEXT_LENGTH
- getPageText returns null for empty text
- getPageText returns full text when between MIN and MAX length
- getPageText does not truncate text at exactly MAX_TEXT_LENGTH
- getPageText truncates text exceeding MAX_TEXT_LENGTH
- getPageText logs a message when truncating

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Paul Farrow <paul.farrow@xandr.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

* Neuwo Rtd Module: Version v2.0.0 and Quality of Life Improvements (#14323)

* feat: add live display and access examples of Neuwo API data to example page

* feat: add Prebid.js event timing tests to Neuwo RTD example page

* style: standardize code style in Neuwo RTD example

- Convert single quotes to double quotes for consistency
- Format code with Prettier

* docs: add guide for accessing Neuwo RTD data outside Prebid.js

* feat: add concurrent bid request handling to Neuwo RTD Module

* chore: standardize log message format in Neuwo RTD Module

* feat: add product identifier to Neuwo API requests

* docs: fix typo in test file name in Neuwo RTD Module documentation

* style: format Neuwo RTD Module with Prettier

- Add `// prettier-ignore` comment to preserve quoted keys in `IAB_CONTENT_TAXONOMY_MAP`
- Apply Prettier formatting to *modules/neuwoRtdProvider.js*

* test: add coverage for concurrent requests and product identifier in Neuwo RTD Module

* feat: add per-tier IAB taxonomy filtering to Neuwo RTD Module

Add optional filtering configuration for IAB Content and Audience taxonomies, allowing publishers to control the quantity and quality of categories injected into bid requests.

- Add `iabTaxonomyFilters` parameter to module configuration for per-tier filtering
- Implement `filterIabTaxonomyTier()` function to filter taxonomies by relevance threshold and limit count
- Implement `filterIabTaxonomies()` function to apply filters across all tiers using tier key mapping
- Add integration example checkbox to enable/disable filtering with hardcoded filter values

* docs: add IAB taxonomy filtering documentation to Neuwo RTD Module

* test: add error handling and edge case tests for Neuwo RTD Module

- Add test for API URL construction when `neuwoApiUrl` contains existing query parameters
- Add tests for error response handling: 404 errors, pending request cleanup, and retry behaviour
- Add tests for concurrent requests with errors ensuring all callbacks are invoked
- Add tests for JSON parsing errors in success callback
- Add test for retry after JSON parsing error
- Add test for missing `marketing_categories` field in API response
- Add test for sorting items with undefined/null relevance values
- Reorganise test structure: nest caching, URL stripping, and filtering describes under main `getBidRequestData` block
- Add documentation for generating test coverage reports with viewing instructions

* style: apply formatting to Neuwo RTD Module markdown documentation

* refactor: remove name field from IAB segments in ORTB2 output

- Update `buildIabData()` to only include `id` in segment objects
- Remove `label` requirement; segments now only need valid `ID`
- Update documentation examples to reflect simplified segment structure
- Update unit tests to match new segment format

* feat: migrate Neuwo RTD Module to new API architecture (v2.0.0) and maintain backward compatibility

- Add version 2.0.0 with multi-version IAB Content Taxonomy support
- Implement automatic API capability detection from endpoint URL format
- Maintain backward compatibility with legacy GET endpoints
- Consolidate default IAB Content Taxonomy version to "2.2" constant
- Transform legacy API responses to unified segtax-based format
- Add `buildIabFilterConfig()` for filter configuration conversion
- Add `transformV1ResponseToV2()` and `transformSegmentsV1ToV2()` helpers
- Refactor `buildIabData()` to dynamically process all tiers
- Update `injectIabCategories()` to work with unified response format
- Enhance JSDoc documentation with format examples and API details
- Add conditional logging for POST request bodies
- Optimise filtering: apply once before caching for legacy endpoints

* test: update Neuwo RTD Module tests for new API architecture

- Update all test mocks to use new segtax-based response format
- Add tests for `buildIabFilterConfig()` function
- Add tests for `injectIabCategories()` function
- Add tests for `transformV1ResponseToV2()` function
- Add tests for `transformSegmentsV1ToV2()` function
- Update `buildIabData()` tests to use new tierData parameter structure
- Add V1 API backward compatibility test suite with client-side filtering tests
- Verify POST method and iabVersions query parameters for new API
- Verify GET method and no iabVersions parameter for legacy V1 API
- Update edge case tests for empty responses and error handling
- Update integration tests for URL parameter handling with query strings
- Remove hardcoded tier array constants (CONTENT_TIERS, AUDIENCE_TIERS)

* docs: update Neuwo RTD Module documentation for new API version

- Change default IAB Content Taxonomy version from "3.0" to "2.2"
- Add IAB Content Taxonomy version "1.0" to supported values list
- Add server-side filtering explanation to IAB Taxonomy Filtering section
- Update Available Tiers table to focus on taxonomy types instead of API internals
- Add recommended configuration comments for `auctionDelay` and `waitForIt`
- Update all configuration examples to use "2.2" as default taxonomy version
- Remove "How it works" section

* feat: add OpenRTB 2.5 category fields support to Neuwo RTD Module

Add support for populating OpenRTB 2.5 category fields (`site.cat`, `site.sectioncat`, `site.pagecat`, `site.content.cat`) with IAB Content Taxonomy 1.0 segments.

Changes:
- Add `enableOrtb25Fields` configuration parameter (default: true)
- Add `extractCategoryIds()` helper function to extract segment IDs from tier data
- Refactor `buildIabData()` to use `extractCategoryIds()` for code reuse
- Extend `buildIabFilterConfig()` to apply filters to IAB 1.0 when feature enabled
- Modify `getBidRequestData()` to request IAB 1.0 data (segtax 1) when feature enabled
- Add warning when feature enabled with legacy API endpoint
- Extend `injectIabCategories()` to populate four OpenRTB 2.5 category fields
- Update version to 2.1.0

* ci: add OpenRTB 2.5 category fields support to integration example

Changes:
- Add checkbox UI control for `enableOrtb25Fields` option (default: checked)
- Add display section for OpenRTB 2.5 category fields data
- Extract and display `site.cat`, `site.sectioncat`, `site.pagecat`, and `site.content.cat` fields
- Update `bidRequested` event handler to capture category fields
- Add localStorage persistence for `enableOrtb25Fields` setting
- Pass `enableOrtb25Fields` parameter to module configuration

* test: add unit tests for OpenRTB 2.5 category fields

Changes:
- Add 11 new `buildIabFilterConfig()` tests for OpenRTB 2.5 feature (enabled/disabled scenarios)
- Add 11 new `extractCategoryIds()` tests covering all edge cases
- Add 11 new `injectIabCategories()` tests for category field injection
- Update 5 existing `buildIabFilterConfig()` tests
- Add 6 new `getBidRequestData()` integration tests for V2 API with feature enabled/disabled
- Move legacy API compatibility tests from V2 section to V1 section

* docs: add OpenRTB 2.5 category fields support documentation to Neuwo RTD Module

Changes:
- Add OpenRTB 2.5 feature description to module overview
- Add `enableOrtb25Fields` parameter to parameters table
- Add dedicated "OpenRTB 2.5 Category Fields" section with examples
- Update ORTB2 data structure examples to show category fields
- Add filtering section explaining IAB 1.0 filter application
- Update "Accessing Neuwo Data" section with category field extraction example
- Add "Building for Production" section with build command
- Update segtax value in example (7 → 6)
- Update version to 2.1.0

* perf: change Content-Type to text/plain to avoid CORS preflight

* refactor: change /v1/iab endpoint from POST to GET with flattened query params

Replace POST request with GET and send IAB taxonomy filters as flattened URL query parameters instead of JSON body to avoid CORS preflight requests.

Changes:
- Replace `buildIabFilterConfig()` with `buildFilterQueryParams()` function
- Change output from nested object to array of query parameter strings (e.g., `["filter_6_1_limit=3"]`)
- Remove POST method and request body from ajax call
- Add filter parameters directly to URL for /v1/iab endpoint
- Maintain OpenRTB 2.5 filter application (ContentTier1/2 → segtax 1)
- Update all unit tests to test `buildFilterQueryParams()` instead of `buildIabFilterConfig()`
- Update tests expecting POST requests to expect GET requests
- Update tests checking request body to check URL parameters
- Update version to 2.2.0

* feat: key cache by full API URL to support config changes between auctions

- Replace global `cachedResponses` and `pendingRequests` singletons with objects keyed by `neuwoApiUrlFull`
- Concurrent or sequential calls with different parameters (URL, taxonomy version, filters) maintain separate cache entries
- Add LRU-style eviction capped at 10 entries to prevent unbounded cache growth
- Log module version during `init()`
- Add unit tests for cache isolation

* fix: guard empty URLs, inject content/audience independently, allow `limit: 0` to suppress tiers

- Separate JSON parsing from response processing into distinct try/catch blocks
- Add `Array.isArray` guard to `extractCategoryIds`
- Only cache valid object responses so failed requests can be retried
- Rename `isV2Api` to `isIabEndpoint` for clarity
- Fix typo in log message and JSDoc (POST -> GET)
- Bump to 2.2.1

* fix: isolate legacy endpoint cache keys by taxonomy version and filters

* fix: prevent duplicate filter query params when IAB Content Taxonomy is 1.0

* fix: only sort and filter taxonomy tiers when filter is configured

* fix: detect /v1/iab endpoint from URL pathname instead of full string

* fix: prevent duplicate `iabVersions=1` query param when content taxonomy is 1.0

---------

Co-authored-by: grzgm <125459798+grzgm@users.noreply.github.com>
Co-authored-by: gregneuwo <226034698+gregneuwo@users.noreply.github.com>

* aceexBidAdapter: initial release (#14352)

* aceexBidAdapter/setup

* aceexBidAdapter/setup and fixes

* aceexBidAdapter/setup merge

* prices logic fix

* prices logic fix

* prices logic fix

* prices logic fix

* prices logic fix

* prices logic fix

* review smallfixes

---------

Co-authored-by: vrishko <vasyl.rishko@smartyads.com>

* Mediasquare bid adapter: manage burl object (#14357)

* manage burl object

* fix lint

* burl to burls

* stringify only when method post

* Insticator Bid Adapter: Add support for 2.6rtb request/response (#14373)

* enhance ORTB 2.6 support and enhance bid response handling

* remove onBidWon

* add tests for handling 204 No Content responses in InsticatorBidAdapter

* update InsticatorBidAdapter and improve TTL handling

* udpate media type detection in InsticatorBidAdapter to support ORTB 2.6 standards

* remove adpod fields references

* Conceptx bid adapter: Update request destination (#14420)

* New adapter: concepx

* Syntax change

* Revert syntax change

* Defensive check for response from bidder server

* Add better validation for the request

* Merge branch 'master' of https://github.com/prebid/Prebid.js

* Don't append url on every buildrequest

* Add gvlId to conceptX

* Change conceptx adapter, to directly request our PBS

* Add empty getUserSync, as the syncing will be delegated (runPbsCookieSync)

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Refactor TTL usage in ttdBidAdapter (#14517)

* Shaping rules: Make some TypeScript fields optional (#14514)

* Make TypeScript fields optional

* Fix condition name

* OMS Adapter: extract shared OMS/Onomagic helper utilities (#14508)

* OMS Adapter: extract shared OMS/Onomagic helper utilities

* OMS Adapter: extract shared banner size/viewability processing

* OMS Adapter: isolate viewability helpers to avoid eager side effects

* bidResponseFilter: cattax handling (#14428)

* bidResponseFilter: cattax handling

* default meta value

* Normalize cattax values for accurate comparison

Normalize cattax values before comparison to ensure accurate matching.

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* new adapter - Apester; remove alias from limelightDigital (#14516)

Co-authored-by: Anna Yablonsky <annay+perion@perion.com>

* New adapter - Adnimation (#14502)

* adding new adapter for Admination

* remove alias for adnimation form limelightDigital following new partnership

---------

Co-authored-by: Anna Yablonsky <annay+perion@perion.com>

* TeqBlaze Bidder Utils: fix uspConsent string handling in getUserSyncs (#14515)

* TeqBlazeSalesAgent Bid Adapter: initial release

* update doc

* fix for uspConsent string in getUserSyncs

* fix test

---------

Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* GumGum Adapter: migrate identity extraction to EIDs (#14511)

* ADJS-1646-update-userId-handling

* added test: should filter pubProvidedId entries by allowed sources

* support ortb2.user.ext.eids fallback and add identity parity tests

* Prioritize prebid.js 10 structure

* GumGum Adapter: fix TDID extraction across all EID uids and add edge-case tests

* mediafuseBidAdapter - Updates and Refactor (#14469)

* mediafuseBidAdapter Updates and Refactor

* Addressed Flagged Issues and removed ADPOD import.

* More Fixes

* bug fixes, code quality improvements, and expanded test coverage

* Updates and Fixes

* Flagged Issues Fixes

* Revert "mediafuseBidAdapter - Updates and Refactor (#14469)" (#14529)

This reverts commit 192f96a8c3f42a24a23930b69d36b3791a76ab1e.

* Performax adapter: Add user sync and reporting URLs (#14429)

* Add user sync and reporting urls

* add tests, minor refactor

* add window.addEventListener only once

* fix JSON.parse can return null

* Fix unconditional setting user.ext.uids

* Add test

* swap uids from storage and original user.ext.uids

* Add keepalive and log only when debug is turned on

---------

Co-authored-by: Michal Kváček <michal.kvacek@performax.cz>

* Revert "Performax adapter: Add user sync and reporting URLs (#14429)" (#14532)

This reverts commit d8fb4350befed2c368da2f0f10260245d7b94a73.

* Bump browserstack-local from 1.5.5 to 1.5.11 (#14533)

Bumps [browserstack-local](https://github.com/browserstack/browserstack-local-nodejs) from 1.5.5 to 1.5.11.
- [Release notes](https://github.com/browserstack/browserstack-local-nodejs/releases)
- [Commits](https://github.com/browserstack/browserstack-local-nodejs/compare/v1.5.5...v1.5.11)

---
updated-dependencies:
- dependency-name: browserstack-local
  dependency-version: 1.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump fast-xml-parser from 5.3.6 to 5.4.1 (#14534)

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.6 to 5.4.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.4.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* pubstackBidAdapter: initial release (#14490)

* feat: add pubstackBidAdapter (#1)

* feat: add SparkBidAdapter

* fix: reviews

* fix: use iframe for user_sync

* fix: change adapter name

* fix: add test file

* feat: add viewport value in imp[].ext.prebid.bidder.pubstack.vpl

* fix: remove unused context

* Pubstack Adapter: update utils and align adapter tests

* Pubstack Bid Adapter: apply lint-driven TypeScript cleanups

---------

Co-authored-by: gpolaert <gpolaert@pubstack.io>

* Update modules/pubstackBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/pubstackBidAdapter.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update libraries/pubstackUtils/index.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/pubstackBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Pubstack Adapter: use placementPositionInfo telemetry

---------

Co-authored-by: Stéphane Deluce <boluge@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Bump actions/upload-artifact from 6 to 7 (#14539)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/download-artifact from 7 to 8 (#14540)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Prebid 10.27.0 release

* Increment version to 10.28.0-pre

* MediaGo Bid Adapter: sends transactionId and Prebid.js version in the request payload, and optimizes deprecated navigator.platform (#14538)

* notify server if the page is secure

* remove undefined initial

* MediaGo Bid Adapter: update adapter, test page and spec

Made-with: Cursor

* MediaGo: remove redundant debug-info, use Network tab for verification; remove Chinese comments

Made-with: Cursor

---------

Co-authored-by: fangsimin@baidu.com <fangsimin@baidu.com>
Co-authored-by: 方思敏 <fangsimin@fangsimindeMacBook-Pro.local>

* Screencore Bid Adapter: fix region routing and endpoint path (#14544)

* Screencore prebid adapter

* rearrange code

* use lowercase screncore bidder code

* fix tests

* update tests

* trigger CI

* Screencore Bid Adapter: add endpointId parameter

* Updated adapter to use teqblazeUtils library
* Added endpointId parameter support in test parameters
* Updated test specs to include endpointId validation

* Screencore Bid Adapter: update sync URL to base domain

Update SYNC_URL constant to use base domain.
The getUserSyncs function from teqblazeUtils will append the appropriate path.

* Screencore Bid Adapter: migrate to teqblazeUtils library

- Update imports to use buildRequestsBase, interpretResponse, getUserSyncs,
  isBidRequestValid, and buildPlacementProcessingFunction from teqblazeUtils
- Remove storage manager dependency (no longer needed)
- Update isBidRequestValid to use placementId/endpointId params validation
- Refactor buildRequests to use buildRequestsBase pattern
- Rewrite test suite to match teqblazeUtils API:
  - Simplify test data structures
  - Update server response format (body as array)
  - Add tests for placementId/endpointId validation
  - Update getUserSyncs URL format expectations

* fix(screencore): correct region routing and endpoint path

- add US/ and Canada/ timezone prefixes to getRegionSubdomainSuffix()
- fix endpoint path from /prebid to /pbjs
- move AD_URL inside buildRequests to compute per request

---------

Co-authored-by: Kostiantyn Karchevsky <kostiantyn.karchevsky@teqblaze.com>
Co-authored-by: Demetrio Girardi <dgirardi@prebid.org>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>
Co-authored-by: Pavlo Samonin <pavlo.samonin@teqblaze.com>

* GumGum Prebid Adapter: Send App / Site Content Data to GG Ad Exchange (#14535)

* Gumgum - ADTS-175 Support multiple GG params

* ADJS-1165-prebid-adaptor-changes-to-support-jp-products

* made tweaks to the skin product for the gumgumBidAdapter

* added test for new product id

* updated skins parameter for consistency

* updated test for updated skins parameter

* ADJS-1271-send-envelope-param-for-lexicon

* ADJS-1646-update-userId-handling

* added test: should filter pubProvidedId entries by allowed sources

* support ortb2.user.ext.eids fallback and add identity parity tests

* ADTS-616-send-app-site-content-object-from-prebid-to-ad-server

* Prioritize prebid.js 10 structure

* GumGum Adapter: fix TDID extraction across all EID uids and add edge-case tests

* added itype parameter

* updated access to channel and network objects

---------

Co-authored-by: Lisa Benmore <lbenmore@gmail.com>
Co-authored-by: John Bauzon <john.bauzon@gumgum.com>
Co-authored-by: ahzgg <abel.herrera@gumgum.com>
Co-authored-by: ahzgg <163184035+ahzgg@users.noreply.github.com>

* MSFT Bid Adapter - update note in readme (#14552)

* new alias embimedia (#14560)

Co-authored-by: mderevyanko <mderevyanko24@gmail.com>

* Also derive and include a us_privacy string from the gpp info when asking Prebid for a GAM url (#14557)

* Linting: remove spacing exceptions (#14531)

* spacings

* fix mediafuse

* Format import statement for consistency

* Update pubstackBidAdapter.ts

* GumGum Bid Adapter: Send additional device params to GG ad server (#14566)

* Gumgum - ADTS-175 Support multiple GG params

* ADJS-1165-prebid-adaptor-changes-to-support-jp-products

* made tweaks to the skin product for the gumgumBidAdapter

* added test for new product id

* updated skins parameter for consistency

* updated test for updated skins parameter

* ADJS-1271-send-envelope-param-for-lexicon

* ADJS-1646-update-userId-handling

* added test: should filter pubProvidedId entries by allowed sources

* support ortb2.user.ext.eids fallback and add identity parity tests

* ADTS-616-send-app-site-content-object-from-prebid-to-ad-server

* Prioritize prebid.js 10 structure

* GumGum Adapter: fix TDID extraction across all EID uids and add edge-case tests

* added itype parameter

* updated access to channel and network objects

* AT-10850-send-device-parameters-from-prebid-to-hbid-endpoint

* addressed copilot comments

---------

Co-authored-by: Lisa Benmore <lbenmore@gmail.com>
Co-authored-by: John Ivan Bauzon <johnbauzon@gmail.com>
Co-authored-by: ahzgg <abel.herrera@gumgum.com>
Co-authored-by: ahzgg <163184035+ahzgg@users.noreply.github.com>

* wurfl rtd: add none_lce enrichment type for A/B test control group (#14527)

* feat(wurfl-rtd): add none_lce enrichment type for A/B test control group

Distinguish control-group beacons where LCE would have been used (no
cache) from those where WURFL cache was present.

- Add NONE_LCE enrichment type: control + no cache → 'none_lce'
- Remove abExcludeLCE parameter
- Simplify ABTestManager by removing LCE exclusion logic

* fix(wurfl-rtd): read cache metadata in control group beacon

Control group early return skipped reading wurfl_id, sampling_rate, tier
and over_quota from cache, sending empty/default values in the beacon.

* fix lint (#14570)

* MediaEyes Bid Adapter : Support Video Type (#14565)

* MediaEyes Bid Adapter : Update Support Video Type

* fix eslint

* modifications as suggested

* improve code as suggested

* Core: fix error handling when loading debugging-standalone (#14554)

* Core: fix error handling when loading debugging-standalone

* lint

* run error callback once

* lint

* IntentIQ ID Module & Analytics Adapter: Fix deprecated GAM module methods (#14553)

* AGT-734: Support region for prebid modules (merge 0_3_4 with master)

* AGT-730: move spd to partnerData (merge 0_3_4 to master)

* AGT-765: Send ad size and pos in impression reporting module (#58)

* AGT-765: pos and size

* AGT-765: Tests for position resolving

* AGT-765: Test fix

* AGT-756: Missed vrref in payload fix (#56)

* AGT-756: vrref in payload fix

* remove comment

* AGT-756: Fix vrref bug

* AGT-756: Remove comments

* AGT-756: Test for vrref

* update requestRtt to show more clear time (#59)

* AGT-739: Change time to call server (#57)

* fix typo, remove parameter duplication (#60)

* fix typo, remove parameter duplication

* update doc examples

* AGT-721: Documentation for region, size, pos (#61)

* fix region parameter in table (#62)

* update tests

* remove unused test

* 0.35 master (#65)

* Prebid 10.25.0 release

* Increment version to 10.26.0-pre

* limelight: Send open rtb bid requests from our prebid js adapter (#14397)

* changed requests format to OpenRTB.

* Added more tests

* fix refererInfo.page fallback for site.page

* fix built imp for size-only

* fix built imp for size-only

* OMS Bid Adapter: add prebid js version to request payload (#14421)

* Bump qs from 6.14.1 to 6.14.2 (#14478)

Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump fast-xml-parser from 5.3.4 to 5.3.6 (#14482)

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.4 to 5.3.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Floor module: add enforcement allowlist config option (#14455)

* Core: add bidder-scoped floor enforcement

* Core: enforce floors allowlist against adapterCode

* Various modules: remove legacy GPT targeting fallbacks (#14450)

* Core: remove legacy GPT targeting fallbacks

* Reconciliation RTD Provider: handle missing RSDK_ADID targeting

* Core: fix targetingLock GPT test mock for getConfig

* TargetVideo bid adapter: send price floor param (#14406)

* TargetVideo bid adapter: send price floor param

* Add support for the price floors module

* Add imports

* Fix getBidFloor function floor params

---------

Co-authored-by: dnrstc <danrstc@gmail.com>

* New adapter: Verben (#14494)

Co-authored-by: Verben <support_trading@verben.com>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* Teal bid adapter: include native and video media types (#14493)

* Proxistore Bid Adapter: migration to OpenRTB (#14411)

* Update Proxistore endpoint URLs in adapter and tests

Updated the Proxistore `COOKIE_BASE_URL` and `COOKIE_LESS_URL` to the new `abs` domain in both the adapter and its corresponding test file. This ensures consistency with the updated API endpoints.

* Integrate OpenRTB converter for Proxistore bid adapter, and add OpenRTB request as a separate field.

* Refactor Proxistore bid adapter to improve OpenRTB handling, add GDPR-specific URL selection, and enhance test coverage.

* Add support for website and language parameters in Proxistore bid adapter requests, with corresponding test coverage.

* Handle empty response body in Proxistore bid adapter to avoid runtime errors.

---------

Co-authored-by: Anthony Richir <anthony.richir@proxistore.com>

* Floxis Bid Adapter: initial release (#13934)

* Floxis Bid Adapter : initial release

* Added ORTB parameters for blocking

* Adjusted documentation with maintainer info

* Added more validations, extracted converter to a const

* Floxis Bid Adapter: redesign to seat-based architecture with ortbConverter

Major rewrite replacing teqblazeUtils with ortbConverter for ORTB 2.x compliance.

Changes:
- New params: seat (required), region (required), partner (required)
- Endpoint URL: https://{subdomain}.floxis.tech/pbjs?seat={seat}
  - subdomain = region for 'floxis' partner
  - subdomain = {partner}-{region} for white-label partners
- ORTB-native implementation with Floors Module support
- 40 comprehensive tests with full code coverage
- Updated documentation with examples

Addresses all PR #13934 review comments from @osazos

* Rename FloxisBidAdapter.md to floxisBidAdapter.md

* Code review adjustments

---------

Co-authored-by: Patrick McCann <pmccann@cafemedia.com>

* InsurAds Bid Adapter: Initial Implementation (#14470)

* InsurAds Bid Adapter Implementation

* Remove test alias

* Storage Settings Example

* Adapter rename 1/2

* Adapter rename 2/2

* Update modules/insuradsBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/insuradsBidAdapter.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/insuradsBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* The params need to be registered under nexx360

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* LeagueM BId Adapter: initial release (#14479)

* LeagueM BId Adapter: initial release

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update test/spec/modules/leagueMBidAdapter_spec.js

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update modules/leagueMBidAdapter.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Patrick McCann <patmmccann@gmail.com>

* New Adapter: Harion (#14398)

* new adapter harion

* refactor(adapter): guard added to interpretResponse

* Core: disabling fingerprinting apis (#14404)

* Core: disabling fingerprinting apis

* getFallbackWindow -> utils

* Fix several typos in comments and tests (#14498)

* Bump ajv from 6.12.6 to 6.…
@patmmccann
Merge branch 'master' into dependabotTarget
4a35395
@patmmccann patmmccann closed this Mar 20, 2026
@coveralls
Copy link
Collaborator

coveralls commented Mar 20, 2026

Pull Request Test Coverage Report for Build 23343391011

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 96.343%
Totals Coverage Status
Change from base Build 23343357041: 0.0%
Covered Lines: 215924
Relevant Lines: 224120
💛 - Coveralls

@patmmccann patmmccann deleted the dependabotTarget branch March 20, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mkomorski mkomorski Awaiting requested review from mkomorski

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@patmmccann @coveralls