Skip to content

build(deps): Bump protobufjs, @grafana/faro-core and @grafana/faro-web-tracing in /frontend#165

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-8d6f978851
Open

build(deps): Bump protobufjs, @grafana/faro-core and @grafana/faro-web-tracing in /frontend#165
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-8d6f978851

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Removes protobufjs. It's no longer used after updating ancestor dependencies protobufjs, @grafana/faro-core and @grafana/faro-web-tracing. These dependencies need to be updated together.

Removes protobufjs

Updates @grafana/faro-core from 2.6.3 to 2.7.0

Release notes

Sourced from @​grafana/faro-core's releases.

v2.7.0

2.7.0 (2026-05-20)

Features

  • core: include git commit hash in app meta (#2039) (9c82ce4)

Bug Fixes

  • core: fall back to window when resolving Metro bundle id (#2079) (3cfd620)
  • demo: bind Tempo OTLP receiver to 0.0.0.0 so Alloy can reach it (#2038) (7a0af53)
  • demo: use grafana server subcommand for Grafana 13 image (#2035) (5d92107)
  • deps: update npm-dependencies (#2077) (8574f55)
  • pin package manager and disable yarn/npm scripts (#2075) (ef2d248)
Changelog

Sourced from @​grafana/faro-core's changelog.

2.7.0 (2026-05-20)

Features

  • core: include git commit hash in app meta (#2039) (9c82ce4)

Bug Fixes

  • core: fall back to window when resolving Metro bundle id (#2079) (3cfd620)
  • demo: bind Tempo OTLP receiver to 0.0.0.0 so Alloy can reach it (#2038) (7a0af53)
  • demo: use grafana server subcommand for Grafana 13 image (#2035) (5d92107)
  • deps: update npm-dependencies (#2077) (8574f55)
  • pin package manager and disable yarn/npm scripts (#2075) (ef2d248)
Commits

Updates @grafana/faro-web-tracing from 2.6.3 to 2.7.0

Release notes

Sourced from @​grafana/faro-web-tracing's releases.

v2.7.0

2.7.0 (2026-05-20)

Features

  • core: include git commit hash in app meta (#2039) (9c82ce4)

Bug Fixes

  • core: fall back to window when resolving Metro bundle id (#2079) (3cfd620)
  • demo: bind Tempo OTLP receiver to 0.0.0.0 so Alloy can reach it (#2038) (7a0af53)
  • demo: use grafana server subcommand for Grafana 13 image (#2035) (5d92107)
  • deps: update npm-dependencies (#2077) (8574f55)
  • pin package manager and disable yarn/npm scripts (#2075) (ef2d248)
Changelog

Sourced from @​grafana/faro-web-tracing's changelog.

2.7.0 (2026-05-20)

Features

  • core: include git commit hash in app meta (#2039) (9c82ce4)

Bug Fixes

  • core: fall back to window when resolving Metro bundle id (#2079) (3cfd620)
  • demo: bind Tempo OTLP receiver to 0.0.0.0 so Alloy can reach it (#2038) (7a0af53)
  • demo: use grafana server subcommand for Grafana 13 image (#2035) (5d92107)
  • deps: update npm-dependencies (#2077) (8574f55)
  • pin package manager and disable yarn/npm scripts (#2075) (ef2d248)
Commits

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels May 20, 2026
…b-tracing

Removes [protobufjs](https://github.com/protobufjs/protobuf.js). It's no longer used after updating ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@grafana/faro-core](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/core) and [@grafana/faro-web-tracing](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-tracing). These dependencies need to be updated together.


Removes `protobufjs`

Updates `@grafana/faro-core` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.7.0/packages/core)

Updates `@grafana/faro-web-tracing` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/grafana/faro-web-sdk/releases)
- [Changelog](https://github.com/grafana/faro-web-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/faro-web-sdk/commits/v2.7.0/packages/web-tracing)

---
updated-dependencies:
- dependency-name: "@grafana/faro-core"
  dependency-version: 2.7.0
  dependency-type: indirect
- dependency-name: "@grafana/faro-web-tracing"
  dependency-version: 2.7.0
  dependency-type: direct:production
- dependency-name: protobufjs
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump protobufjs, @grafana/faro-core and @grafana/faro-web-tracing (via audit fix) in /frontend build(deps): Bump protobufjs, @grafana/faro-core and @grafana/faro-web-tracing in /frontend May 24, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-8d6f978851 branch from 8c3152e to e4fc8d8 Compare May 24, 2026 17:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants