prebid.js 10.16.0 → 10.18.0

package/.devcontainer/postCreate.sh

@@ -1,5 +1,8 @@
 echo "Post Create Starting"
 
+export NVM_DIR="/usr/local/share/nvm"
+[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
+
 nvm install
 nvm use
 npm install gulp-cli -g

package/.github/actions/install-deb/action.yml

@@ -0,0 +1,35 @@
+name: Install deb
+description: Download and install a .deb package
+inputs:
+  url:
+    description: URL to the .deb file
+    required: true
+  name:
+    description: A local name for the package. Required if using this action multiple times in the same context.
+    default: package.deb
+    required: false
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Restore deb
+      id: deb-restore
+      uses: actions/cache/restore@v4
+      with:
+        path: "${{ runner.temp }}/${{ inputs.name }}"
+        key: ${{ inputs.url }}
+    - name: Download deb
+      if: ${{ steps.deb-restore.outputs.cache-hit != 'true'  }}
+      shell: bash
+      run: |
+        wget --no-verbose "${{ inputs.url }}" -O "${{ runner.temp }}/${{ inputs.name }}"
+    - name: Cache deb
+      if: ${{ steps.deb-restore.outputs.cache-hit != 'true' }}
+      uses: actions/cache/save@v4
+      with:
+        path: "${{ runner.temp }}/${{ inputs.name }}"
+        key: ${{ inputs.url }}
+    - name: Install deb
+      shell: bash
+      run: |
+        sudo apt-get install -y --allow-downgrades "${{ runner.temp }}/${{ inputs.name }}"

package/.github/actions/load/action.yml

@@ -0,0 +1,38 @@
+name: Load working directory
+description: Load working directory saved with "actions/save"
+inputs:
+  name:
+    description: The name used with actions/save
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Set up Node.js
+      uses: actions/setup-node@v6
+      with:
+        node-version: '20'
+    - uses: actions/github-script@v8
+      id: platform
+      with:
+        result-encoding: string
+        script: |
+          const os = require('os');
+          return os.platform();
+    - name: 'Clear working directory'
+      shell: bash
+      run: |
+        rm -r "$(pwd)"/*
+
+    - name: Download artifact
+      uses: actions/download-artifact@v5
+      with:
+        path: '${{ runner.temp }}'
+        name: '${{ inputs.name }}'
+
+    - name: 'Untar working directory'
+      shell: bash
+      run: |
+        wdir="$(pwd)"
+        parent="$(dirname "$wdir")"
+        target="$(basename "$wdir")"
+        tar ${{ steps.platform.outputs.result == 'win32' && '--force-local' || '' }} -C "$parent" -xf '${{ runner.temp }}/${{ inputs.name }}.tar' "$target"

package/.github/actions/npm-ci/action.yml

@@ -0,0 +1,23 @@
+name: NPM install
+description: Run npm install and cache dependencies
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Restore dependencies
+      id: restore-modules
+      uses: actions/cache/restore@v4
+      with:
+        path: "node_modules"
+        key: node_modules-${{ hashFiles('package-lock.json') }}
+    - name: Run npm ci
+      if: ${{ steps.restore-modules.outputs.cache-hit != 'true'  }}
+      shell: bash
+      run: |
+        npm ci
+    - name: Cache dependencies
+      if: ${{ steps.restore-modules.outputs.cache-hit != 'true' }}
+      uses: actions/cache/save@v4
+      with:
+        path: "node_modules"
+        key: node_modules-${{ hashFiles('package-lock.json') }}

package/.github/actions/save/action.yml

@@ -0,0 +1,41 @@
+name: Save working directory
+description: Save working directory, preserving permissions
+inputs:
+  prefix:
+    description: Prefix to use for autogenerated names
+    required: false
+  name:
+    description: a name to reference with actions/load
+    required: false
+outputs:
+  name:
+    description: a name to reference with actions/load
+    value: ${{ fromJSON(steps.platform.outputs.result).name }}
+
+runs:
+  using: 'composite'
+  steps:
+    - uses: actions/github-script@v8
+      id: platform
+      with:
+        script: |
+          const os = require('os');
+          const crypto = require("crypto");
+          const id = crypto.randomBytes(16).toString("hex");          
+          return {       
+             name: ${{ inputs.name && format('"{0}"', inputs.name) || format('"{0}" + id', inputs.prefix || '') }},
+             platform: os.platform(),
+          }
+    - name: Tar working directory
+      shell: bash
+      run: |
+        wdir="$(pwd)"
+        parent="$(dirname "$wdir")"
+        target="$(basename "$wdir")"
+        tar ${{ fromJSON(steps.platform.outputs.result).platform == 'win32' && '--force-local' || '' }} -C "$parent" -cf "${{ runner.temp }}/${{ fromJSON(steps.platform.outputs.result).name }}.tar" "$target"
+    - name: Upload artifact
+      uses: actions/upload-artifact@v4
+      with:
+        path: '${{ runner.temp }}/${{ fromJSON(steps.platform.outputs.result).name }}.tar'
+        name: ${{ fromJSON(steps.platform.outputs.result).name }}
+        overwrite: true

package/.github/actions/wait-for-browserstack/action.yml

@@ -1,18 +1,13 @@
 name: Wait for browserstack sessions
 description: Wait until enough browserstack sessions have become available
 inputs:
-  BROWSERSTACK_USER_NAME:
-    description: "Browserstack user name"
-  BROWSERSTACK_ACCESS_KEY:
-    description: "Browserstack access key"
-
+  sessions:
+    description: Number of sessions needed to continue
+    default: "6"
 runs:
   using: 'composite'
   steps:
-    - env:
-        BROWSERSTACK_USERNAME: ${{ inputs.BROWSERSTACK_USER_NAME }}
-        BROWSERSTACK_ACCESS_KEY: ${{ inputs.BROWSERSTACK_ACCESS_KEY }}
-      shell: bash
+    - shell: bash
       run: |
         while            
           status=$(curl -u "${BROWSERSTACK_USERNAME}:${BROWSERSTACK_ACCESS_KEY}" \
@@ -22,7 +17,7 @@ runs:
           queued=$(jq '.queued_sessions' <<< $status)
           max_queued=$(jq '.queued_sessions_max_allowed' <<< $status)
           spare=$(( ${max_running} + ${max_queued} - ${running} - ${queued} ))
-          required=6
+          required=${{ inputs.sessions }}
           echo "Browserstack status: ${running} sessions running, ${queued} queued, ${spare} free"
           (( ${required} > ${spare} ))
         do

package/.github/codeql/queries/autogen_fpDOMMethod.qll

@@ -7,9 +7,9 @@ class DOMMethod extends string {
   
   DOMMethod() {
       
-      ( this = "getChannelData"  and weight = 827.19  and type = "AudioBuffer" )
+      ( this = "toDataURL"  and weight = 25.89  and type = "HTMLCanvasElement" )
        or 
-      ( this = "toDataURL"  and weight = 27.15  and type = "HTMLCanvasElement" )
+      ( this = "getChannelData"  and weight = 806.52  and type = "AudioBuffer" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpEventProperty.qll

@@ -7,21 +7,21 @@ class EventProperty extends string {
   
   EventProperty() {
       
-      ( this = "accelerationIncludingGravity"  and weight = 149.23  and event = "devicemotion" )
+      ( this = "accelerationIncludingGravity"  and weight = 158.1  and event = "devicemotion" )
        or 
-      ( this = "beta"  and weight = 1075.3  and event = "deviceorientation" )
+      ( this = "beta"  and weight = 887.22  and event = "deviceorientation" )
        or 
-      ( this = "gamma"  and weight = 395.62  and event = "deviceorientation" )
+      ( this = "gamma"  and weight = 361.7  and event = "deviceorientation" )
        or 
-      ( this = "alpha"  and weight = 366.53  and event = "deviceorientation" )
+      ( this = "alpha"  and weight = 354.09  and event = "deviceorientation" )
        or 
-      ( this = "candidate"  and weight = 69.63  and event = "icecandidate" )
+      ( this = "candidate"  and weight = 69.81  and event = "icecandidate" )
        or 
-      ( this = "acceleration"  and weight = 58.05  and event = "devicemotion" )
+      ( this = "acceleration"  and weight = 64.92  and event = "devicemotion" )
        or 
-      ( this = "rotationRate"  and weight = 57.59  and event = "devicemotion" )
+      ( this = "rotationRate"  and weight = 64.37  and event = "devicemotion" )
        or 
-      ( this = "absolute"  and weight = 387.12  and event = "deviceorientation" )
+      ( this = "absolute"  and weight = 709.73  and event = "deviceorientation" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalConstructor.qll

@@ -6,15 +6,15 @@ class GlobalConstructor extends string {
   
   GlobalConstructor() {
       
-      ( this = "SharedWorker"  and weight = 78.14 )
+      ( this = "OfflineAudioContext"  and weight = 1111.66 )
        or 
-      ( this = "OfflineAudioContext"  and weight = 1135.77 )
+      ( this = "SharedWorker"  and weight = 93.35 )
        or 
-      ( this = "RTCPeerConnection"  and weight = 49.44 )
+      ( this = "RTCPeerConnection"  and weight = 49.52 )
        or 
-      ( this = "Gyroscope"  and weight = 142.79 )
+      ( this = "Gyroscope"  and weight = 98.72 )
        or 
-      ( this = "AudioWorkletNode"  and weight = 17.63 )
+      ( this = "AudioWorkletNode"  and weight = 72.93 )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalObjectProperty0.qll

@@ -7,57 +7,57 @@ class GlobalObjectProperty0 extends string {
   
   GlobalObjectProperty0() {
       
-      ( this = "availHeight"  and weight = 70.68  and global0 = "screen" )
+      ( this = "cookieEnabled"  and weight = 15.36  and global0 = "navigator" )
        or 
-      ( this = "availWidth"  and weight = 65.56  and global0 = "screen" )
+      ( this = "availHeight"  and weight = 69.48  and global0 = "screen" )
        or 
-      ( this = "colorDepth"  and weight = 34.27  and global0 = "screen" )
+      ( this = "availWidth"  and weight = 65.15  and global0 = "screen" )
        or 
-      ( this = "deviceMemory"  and weight = 75.06  and global0 = "navigator" )
+      ( this = "colorDepth"  and weight = 34.39  and global0 = "screen" )
        or 
-      ( this = "availTop"  and weight = 1240.09  and global0 = "screen" )
+      ( this = "deviceMemory"  and weight = 75.15  and global0 = "navigator" )
        or 
-      ( this = "cookieEnabled"  and weight = 15.3  and global0 = "navigator" )
+      ( this = "availTop"  and weight = 1256.76  and global0 = "screen" )
        or 
-      ( this = "pixelDepth"  and weight = 37.72  and global0 = "screen" )
+      ( this = "getBattery"  and weight = 124.12  and global0 = "navigator" )
        or 
-      ( this = "availLeft"  and weight = 547.54  and global0 = "screen" )
+      ( this = "webdriver"  and weight = 30.18  and global0 = "navigator" )
        or 
-      ( this = "orientation"  and weight = 35.82  and global0 = "screen" )
+      ( this = "permission"  and weight = 22.23  and global0 = "Notification" )
        or 
-      ( this = "vendorSub"  and weight = 1791.96  and global0 = "navigator" )
+      ( this = "storage"  and weight = 170.65  and global0 = "navigator" )
        or 
-      ( this = "productSub"  and weight = 482.29  and global0 = "navigator" )
+      ( this = "orientation"  and weight = 38.3  and global0 = "screen" )
        or 
-      ( this = "webkitTemporaryStorage"  and weight = 40.79  and global0 = "navigator" )
+      ( this = "onLine"  and weight = 20.05  and global0 = "navigator" )
        or 
-      ( this = "hardwareConcurrency"  and weight = 67.85  and global0 = "navigator" )
+      ( this = "pixelDepth"  and weight = 38.22  and global0 = "screen" )
        or 
-      ( this = "appCodeName"  and weight = 143.58  and global0 = "navigator" )
+      ( this = "availLeft"  and weight = 539.55  and global0 = "screen" )
        or 
-      ( this = "onLine"  and weight = 19.76  and global0 = "navigator" )
+      ( this = "vendorSub"  and weight = 1462.45  and global0 = "navigator" )
        or 
-      ( this = "webdriver"  and weight = 31.25  and global0 = "navigator" )
+      ( this = "productSub"  and weight = 525.88  and global0 = "navigator" )
        or 
-      ( this = "keyboard"  and weight = 957.44  and global0 = "navigator" )
+      ( this = "webkitTemporaryStorage"  and weight = 40.85  and global0 = "navigator" )
        or 
-      ( this = "mediaDevices"  and weight = 121.74  and global0 = "navigator" )
+      ( this = "hardwareConcurrency"  and weight = 70.43  and global0 = "navigator" )
        or 
-      ( this = "storage"  and weight = 151.33  and global0 = "navigator" )
+      ( this = "appCodeName"  and weight = 152.93  and global0 = "navigator" )
        or 
-      ( this = "mediaCapabilities"  and weight = 126.07  and global0 = "navigator" )
+      ( this = "keyboard"  and weight = 2426.5  and global0 = "navigator" )
        or 
-      ( this = "permissions"  and weight = 66.75  and global0 = "navigator" )
+      ( this = "mediaDevices"  and weight = 123.07  and global0 = "navigator" )
        or 
-      ( this = "permission"  and weight = 22.02  and global0 = "Notification" )
+      ( this = "mediaCapabilities"  and weight = 124.39  and global0 = "navigator" )
        or 
-      ( this = "getBattery"  and weight = 114.16  and global0 = "navigator" )
+      ( this = "permissions"  and weight = 70.22  and global0 = "navigator" )
        or 
-      ( this = "webkitPersistentStorage"  and weight = 150.79  and global0 = "navigator" )
+      ( this = "webkitPersistentStorage"  and weight = 113.71  and global0 = "navigator" )
        or 
-      ( this = "requestMediaKeySystemAccess"  and weight = 17.34  and global0 = "navigator" )
+      ( this = "requestMediaKeySystemAccess"  and weight = 16.88  and global0 = "navigator" )
        or 
-      ( this = "getGamepads"  and weight = 235.72  and global0 = "navigator" )
+      ( this = "getGamepads"  and weight = 202.54  and global0 = "navigator" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalObjectProperty1.qll

@@ -8,7 +8,7 @@ class GlobalObjectProperty1 extends string {
   
   GlobalObjectProperty1() {
       
-      ( this = "enumerateDevices"  and weight = 301.74  and global0 = "navigator"  and global1 = "mediaDevices" )
+      ( this = "enumerateDevices"  and weight = 329.65  and global0 = "navigator"  and global1 = "mediaDevices" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalTypeProperty0.qll

@@ -7,11 +7,11 @@ class GlobalTypeProperty0 extends string {
   
   GlobalTypeProperty0() {
       
-      ( this = "x"  and weight = 5043.14  and global0 = "Gyroscope" )
+      ( this = "x"  and weight = 7033.93  and global0 = "Gyroscope" )
        or 
-      ( this = "y"  and weight = 5043.14  and global0 = "Gyroscope" )
+      ( this = "y"  and weight = 7033.93  and global0 = "Gyroscope" )
        or 
-      ( this = "z"  and weight = 5043.14  and global0 = "Gyroscope" )
+      ( this = "z"  and weight = 7033.93  and global0 = "Gyroscope" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalTypeProperty1.qll

@@ -8,7 +8,7 @@ class GlobalTypeProperty1 extends string {
   
   GlobalTypeProperty1() {
       
-      ( this = "resolvedOptions"  and weight = 17.99  and global0 = "Intl"  and global1 = "DateTimeFormat" )
+      ( this = "resolvedOptions"  and weight = 18.83  and global0 = "Intl"  and global1 = "DateTimeFormat" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpGlobalVar.qll

@@ -6,23 +6,23 @@ class GlobalVar extends string {
   
   GlobalVar() {
       
-      ( this = "devicePixelRatio"  and weight = 19.42 )
+      ( this = "devicePixelRatio"  and weight = 18.91 )
        or 
-      ( this = "screenX"  and weight = 319.5 )
+      ( this = "screenX"  and weight = 355.18 )
        or 
-      ( this = "screenY"  and weight = 303.5 )
+      ( this = "screenY"  and weight = 309.2 )
        or 
-      ( this = "outerWidth"  and weight = 102.66 )
+      ( this = "outerWidth"  and weight = 109.86 )
        or 
-      ( this = "outerHeight"  and weight = 183.94 )
+      ( this = "outerHeight"  and weight = 178.05 )
        or 
-      ( this = "screenLeft"  and weight = 315.55 )
+      ( this = "screenLeft"  and weight = 374.27 )
        or 
-      ( this = "screenTop"  and weight = 313.8 )
+      ( this = "screenTop"  and weight = 373.73 )
        or 
-      ( this = "indexedDB"  and weight = 17.79 )
+      ( this = "indexedDB"  and weight = 18.81 )
        or 
-      ( this = "openDatabase"  and weight = 143.97 )
+      ( this = "openDatabase"  and weight = 134.7 )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpRenderingContextProperty.qll

@@ -7,35 +7,35 @@ class RenderingContextProperty extends string {
   
   RenderingContextProperty() {
       
-      ( this = "getExtension"  and weight = 20.11  and contextType = "webgl" )
+      ( this = "getExtension"  and weight = 17.76  and contextType = "webgl" )
        or 
-      ( this = "getParameter"  and weight = 22.92  and contextType = "webgl" )
+      ( this = "getParameter"  and weight = 20.31  and contextType = "webgl" )
        or 
-      ( this = "getImageData"  and weight = 40.74  and contextType = "2d" )
+      ( this = "getParameter"  and weight = 65.17  and contextType = "webgl2" )
        or 
-      ( this = "getParameter"  and weight = 41.44  and contextType = "webgl2" )
+      ( this = "getShaderPrecisionFormat"  and weight = 107.03  and contextType = "webgl2" )
        or 
-      ( this = "getShaderPrecisionFormat"  and weight = 108.95  and contextType = "webgl2" )
+      ( this = "getExtension"  and weight = 70.03  and contextType = "webgl2" )
        or 
-      ( this = "getExtension"  and weight = 44.59  and contextType = "webgl2" )
+      ( this = "getContextAttributes"  and weight = 175.38  and contextType = "webgl2" )
        or 
-      ( this = "getContextAttributes"  and weight = 187.09  and contextType = "webgl2" )
+      ( this = "getSupportedExtensions"  and weight = 487.31  and contextType = "webgl2" )
        or 
-      ( this = "getSupportedExtensions"  and weight = 535.91  and contextType = "webgl2" )
+      ( this = "getImageData"  and weight = 44.3  and contextType = "2d" )
        or 
-      ( this = "measureText"  and weight = 45.5  and contextType = "2d" )
+      ( this = "measureText"  and weight = 47.23  and contextType = "2d" )
        or 
-      ( this = "getShaderPrecisionFormat"  and weight = 632.69  and contextType = "webgl" )
+      ( this = "getShaderPrecisionFormat"  and weight = 595.72  and contextType = "webgl" )
        or 
-      ( this = "getContextAttributes"  and weight = 1404.12  and contextType = "webgl" )
+      ( this = "getContextAttributes"  and weight = 1038.26  and contextType = "webgl" )
        or 
-      ( this = "getSupportedExtensions"  and weight = 968.57  and contextType = "webgl" )
+      ( this = "getSupportedExtensions"  and weight = 805.83  and contextType = "webgl" )
        or 
-      ( this = "readPixels"  and weight = 21.25  and contextType = "webgl" )
+      ( this = "readPixels"  and weight = 20.6  and contextType = "webgl" )
        or 
-      ( this = "isPointInPath"  and weight = 5043.14  and contextType = "2d" )
+      ( this = "isPointInPath"  and weight = 7033.93  and contextType = "2d" )
        or 
-      ( this = "readPixels"  and weight = 68.7  and contextType = "webgl2" )
+      ( this = "readPixels"  and weight = 73.62  and contextType = "webgl2" )
   }  
 
   float getWeight() {

package/.github/codeql/queries/autogen_fpSensorProperty.qll

@@ -6,7 +6,7 @@ class SensorProperty extends string {
   
   SensorProperty() {
       
-      ( this = "start"  and weight = 123.75 )
+      ( this = "start"  and weight = 104.06 )
   }  
 
   float getWeight() {

package/.github/dependabot.yml

@@ -28,7 +28,6 @@ updates:
     target-branch: "master"
     schedule:
       interval: "daily"
-    security-updates-only: true
     open-pull-requests-limit: 0
     groups:
       all-security:

package/.github/workflows/PR-assignment.yml

@@ -0,0 +1,60 @@
+name: Assign PR reviewers
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  assign_reviewers:
+    name: Assign reviewers
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Generate app token
+        id: token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.PR_BOT_ID }}
+          private-key: ${{ secrets.PR_BOT_PEM }}
+
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          ref: refs/pull/${{ github.event.pull_request.number }}/head
+
+      - name: Install dependencies
+        uses: ./.github/actions/npm-ci
+      - name: Build
+        run: |
+          npx gulp build
+      - name: Install s3 client
+        run: |
+          npm install @aws-sdk/client-s3
+      - name: Get PR properties
+        id: get-props
+        uses: actions/github-script@v8
+        env:
+          AWS_ACCESS_KEY_ID: ${{ vars.PR_BOT_AWS_AK }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.PR_BOT_AWS_SAK }}
+        with:
+          github-token: ${{ steps.token.outputs.token }}
+          script: |
+            const getProps = require('./.github/workflows/scripts/getPRProperties.js')
+            const props = await getProps({
+              github, 
+              context, 
+              prNo: ${{ github.event.pull_request.number }},
+              reviewerTeam: '${{ vars.REVIEWER_TEAM }}',
+              engTeam: '${{ vars.ENG_TEAM }}',
+              authReviewTeam: '${{ vars.AUTH_REVIEWER_TEAM }}'
+            });
+            console.log('PR properties:', JSON.stringify(props, null, 2));
+            return props;
+      - name: Assign reviewers
+        if: ${{ !fromJSON(steps.get-props.outputs.result).review.ok }}
+        uses: actions/github-script@v8
+        with:
+          github-token: ${{ steps.token.outputs.token }}
+          script: |
+            const assignReviewers = require('./.github/workflows/scripts/assignReviewers.js')
+            const reviewers = await assignReviewers({github, context, prData: ${{ steps.get-props.outputs.result }} });
+            console.log('Assigned reviewers:', JSON.stringify(reviewers, null, 2));