Skip to content

Bump protobufjs, @grafana/faro-react, @grafana/faro-web-sdk and @grafana/faro-web-tracing - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-47c66ed90b
Open

Bump protobufjs, @grafana/faro-react, @grafana/faro-web-sdk and @grafana/faro-web-tracing#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-47c66ed90b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown

Removes protobufjs. It's no longer used after updating ancestor dependencies protobufjs, @grafana/faro-react, @grafana/faro-web-sdk and @grafana/faro-web-tracing. These dependencies need to be updated together.

Removes protobufjs

Updates @grafana/faro-react from 1.19.0 to 2.9.0

Release notes

Sourced from @​grafana/faro-react's releases.

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

v2.8.2

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

v2.8.1

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

v2.8.0

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)
  • security/medium/: update security tar to v7.5.16 [security] (#2130) (cec1026)
  • web-sdk: report service worker time as 0 when no service worker is used (#2149) (13ab0a4)

... (truncated)

Changelog

Sourced from @​grafana/faro-react's changelog.

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​grafana/faro-react since your current version.


Updates @grafana/faro-web-sdk from 1.19.0 to 2.9.0

Release notes

Sourced from @​grafana/faro-web-sdk's releases.

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

v2.8.2

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

v2.8.1

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

v2.8.0

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)
  • security/medium/: update security tar to v7.5.16 [security] (#2130) (cec1026)
  • web-sdk: report service worker time as 0 when no service worker is used (#2149) (13ab0a4)

... (truncated)

Changelog

Sourced from @​grafana/faro-web-sdk's changelog.

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)

... (truncated)

Commits
  • 6529bc4 chore: release 2.9.0 (#2184)
  • dd10a3d feat(user-actions): add configurable initial activity timeout (#2183)
  • 623efe2 fix(web-sdk): derive performance timestamps from wall clock to survive system...
  • 3e251cd chore(deps): update patch updates (#2153)
  • 1d0a664 chore: release 2.8.2 (#2170)
  • 923d3b8 fix(session): attribute the rotation-triggering signal to the new session (#2...
  • eba5c2f fix(session): stop a background tab from emitting an expired session id (#2167)
  • 8efae53 chore: release 2.8.1 (#2157)
  • 29c6327 fix(web-sdk): harden fetch keepalive handling (#2151)
  • 1da0e9c chore: release 2.8.0 (#2124)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​grafana/faro-web-sdk since your current version.


Updates @grafana/faro-web-tracing from 1.19.0 to 2.9.0

Release notes

Sourced from @​grafana/faro-web-tracing's releases.

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

v2.8.2

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

v2.8.1

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

v2.8.0

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)
  • security/medium/: update security tar to v7.5.16 [security] (#2130) (cec1026)
  • web-sdk: report service worker time as 0 when no service worker is used (#2149) (13ab0a4)

... (truncated)

Changelog

Sourced from @​grafana/faro-web-tracing's changelog.

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)

2.8.2 (2026-07-01)

Bug Fixes

  • session: attribute the rotation-triggering signal to the new session (#2168) (923d3b8)
  • session: stop a background tab from emitting an expired session id (#2167) (eba5c2f)

2.8.1 (2026-06-26)

Bug Fixes

  • web-sdk: harden fetch keepalive handling (#2151) (29c6327)

2.8.0 (2026-06-25)

Features

  • web-sdk: add gzip request compression to FetchTransport (#2028) (acf7e29)

Bug Fixes

  • ci: align Renovate npm cooldown with yarn 7-day age gate (#2133) (62be84c)
  • ci: sign release-please lockfile-refresh commit via GitHub API (#2150) (d662d78)
  • core: allow BatchExecutor to run in worker scopes (#2122) (07d5282)
  • deps: update npm-dependencies past 7-day cooldown (#2138) (f8ef28e)
  • security/high/e2e/smoke: update security e2e/smoke vite to v8.0.16 [security] (#2129) (f52baee)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​grafana/faro-web-tracing since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
…ana/faro-web-tracing

Removes [protobufjs](https://github.com/protobufjs/protobuf.js). It's no longer used after updating ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@grafana/faro-react](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/react), [@grafana/faro-web-sdk](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-sdk) and [@grafana/faro-web-tracing](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-tracing). These dependencies need to be updated together.


Removes `protobufjs`

Updates `@grafana/faro-react` from 1.19.0 to 2.9.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.9.0/packages/react)

Updates `@grafana/faro-web-sdk` from 1.19.0 to 2.9.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.9.0/packages/web-sdk)

Updates `@grafana/faro-web-tracing` from 1.19.0 to 2.9.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.9.0/packages/web-tracing)

---
updated-dependencies:
- dependency-name: "@grafana/faro-react"
  dependency-version: 2.8.2
  dependency-type: direct:production
- dependency-name: "@grafana/faro-web-sdk"
  dependency-version: 2.8.2
  dependency-type: direct:production
- dependency-name: "@grafana/faro-web-tracing"
  dependency-version: 2.8.2
  dependency-type: direct:production
- dependency-name: protobufjs
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-47c66ed90b branch from 8ea2fdd to 2d9545b Compare July 31, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants