Skip to content

chore(deps): bump the faro group across 1 directory with 3 updates - #32

Merged
Starefossen merged 1 commit into
mainfrom
dependabot/npm_and_yarn/faro-651672dd1d
Sep 5, 2026
Merged

Starefossen merged 1 commit into
mainfrom
dependabot/npm_and_yarn/faro-651672dd1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the faro group with 3 updates in the / directory: @grafana/faro-web-sdk, @grafana/faro-web-tracing and @grafana/faro-react.

Updates @grafana/faro-web-sdk from 2.8.2 to 2.11.0

Release notes

Sourced from @​grafana/faro-web-sdk's releases.

v2.11.0

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

v2.10.0

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

... (truncated)

Changelog

Sourced from @​grafana/faro-web-sdk's changelog.

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)
Commits
  • e96e684 chore: release 2.11.0 (#2253)
  • 8f15301 fix(web-sdk): retry transient Faro delivery failures (#2247)
  • 6c45417 chore: release 2.10.0 (#2203)
  • a747805 build: generate all package build output with tsdown (#2229)
  • 42f154f fix(deps): update dependency web-vitals to v6 (#2164)
  • acf53d1 test(web-sdk): cover the view changed sequence across setView calls (#2201)
  • 9bc88e6 fix(deps): update npm-dependencies (#2154)
  • c68f22d fix(web-sdk): measure the keepalive budget in bytes (#2199)
  • 557e94d feat(web-sdk): forward LCP resource details and LoAF-based INP attribution in...
  • 12f3a39 fix(web-sdk): stop stack parsing from stalling on large error payloads (#2197)
  • Additional commits viewable in compare view

Updates @grafana/faro-web-tracing from 2.8.2 to 2.11.0

Release notes

Sourced from @​grafana/faro-web-tracing's releases.

v2.11.0

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

v2.10.0

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

... (truncated)

Changelog

Sourced from @​grafana/faro-web-tracing's changelog.

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)
Commits

Updates @grafana/faro-react from 2.8.2 to 2.11.0

Release notes

Sourced from @​grafana/faro-react's releases.

v2.11.0

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

v2.10.0

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

v2.9.0

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

... (truncated)

Changelog

Sourced from @​grafana/faro-react's changelog.

2.11.0 (2026-08-26)

Features

  • web-tracing: omit trace context for unsampled sessions (#2251) (f839439)

Bug Fixes

  • web-sdk: retry transient Faro delivery failures (#2247) (8f15301)

2.10.0 (2026-08-17)

Features

  • web-sdk: forward LCP resource details and LoAF-based INP attribution in web vitals measurements (#2187) (557e94d)

Bug Fixes

  • core: keep config.paused in sync with pause and unpause (#2196) (dd2f505)
  • core: make removeBeforeSendHooks remove the hooks (#2208) (4378883)
  • deps: bump vulnerable transitive deps (#2193) (41065ec)
  • deps: update dependency web-vitals to v6 (#2164) (42f154f)
  • deps: update npm-dependencies (#2154) (9bc88e6)
  • replay: strip query string and fragment from rrweb Meta event href (#2127) (fd0fa45)
  • replay: use fixed-length mask for input values (#2126) (80dac72)
  • security/high/packages/react: update dependency react-router to v7.18.2 [security] (#2214) (635bee6)
  • security/high/: update dependency brace-expansion to v5.0.9 [security] (#2204) (ffc90b0)
  • security/medium/: update dependency postcss to v8.5.23 [security] (#2205) (23894be)
  • web-sdk: measure the keepalive budget in bytes (#2199) (c68f22d)
  • web-sdk: stop stack parsing from stalling on large error payloads (#2197) (12f3a39)
  • web-tracing: stop injecting traceparent while Faro is paused (#2198) (bb09041)
  • web-tracing: type the full set of fetch and xhr instrumentation options (#2200) (4b90404)

2.9.0 (2026-07-29)

Features

  • user-actions: add configurable initial activity timeout (#2183) (dd10a3d)

Bug Fixes

  • security/critical/: update dependency tar to v7.5.21 [security] (#2180) (d4aac6d)
  • security/high/: update dependency js-yaml to v4.3.0 [security] (#2181) (741dc5d)
  • web-sdk: derive performance timestamps from wall clock to survive system suspend (#2182) (623efe2)
Commits
  • e96e684 chore: release 2.11.0 (#2253)
  • 6c45417 chore: release 2.10.0 (#2203)
  • a747805 build: generate all package build output with tsdown (#2229)
  • 635bee6 fix(security/high/packages/react): update dependency react-router to v7.18.2 ...
  • a4b84ea chore(react): guard the peerDependencies ranges against automated rewrites (#...
  • 2550a9f chore(deps): update dependency @​testing-library/jest-dom to v7 (#2165)
  • 9bc88e6 fix(deps): update npm-dependencies (#2154)
  • a3f7b8e chore(deps): update patch updates (#2194)
  • 41065ec fix(deps): bump vulnerable transitive deps (#2193)
  • 6529bc4 chore: release 2.9.0 (#2184)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
Copilot AI lite review requested due to automatic review settings August 10, 2026 06:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates Grafana Faro dependencies to the 2.9.0 release line.

Changes:

  • Bump @grafana/faro-web-sdk from ^2.8.2 to ^2.9.0
  • Bump @grafana/faro-web-tracing from 2.8.2 to 2.9.0
  • Bump @grafana/faro-react from 2.8.2 to 2.9.0
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread package.json Outdated
Comment on lines +48 to +49
"@grafana/faro-web-sdk": "^2.9.0",
"@grafana/faro-web-tracing": "2.9.0",
@Starefossen
Starefossen added this pull request to the merge queue Sep 5, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Sep 5, 2026
Bumps the faro group with 3 updates in the / directory: [@grafana/faro-web-sdk](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-sdk), [@grafana/faro-web-tracing](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-tracing) and [@grafana/faro-react](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/react).


Updates `@grafana/faro-web-sdk` from 2.8.2 to 2.11.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.11.0/packages/web-sdk)

Updates `@grafana/faro-web-tracing` from 2.8.2 to 2.11.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.11.0/packages/web-tracing)

Updates `@grafana/faro-react` from 2.8.2 to 2.11.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.11.0/packages/react)

---
updated-dependencies:
- dependency-name: "@grafana/faro-react"
  dependency-version: 2.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: faro
- dependency-name: "@grafana/faro-web-sdk"
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: faro
- dependency-name: "@grafana/faro-web-tracing"
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: faro
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the faro group with 3 updates chore(deps): bump the faro group across 1 directory with 3 updates Sep 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/faro-651672dd1d branch from fa40beb to 594230f Compare September 5, 2026 09:46
@Starefossen
Starefossen added this pull request to the merge queue Sep 5, 2026
Merged via the queue into main with commit f181362 Sep 5, 2026
4 checks passed
@Starefossen
Starefossen deleted the dependabot/npm_and_yarn/faro-651672dd1d branch September 5, 2026 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants