Changes

• Upgrade Go version from 1.24 to 1.26 (#4737)

Contributors

@karwaankit32

Changes

• New Adapter: Synapse HX (#4795)
• Displayio: Add audio and native support (#4728)
• Indicue: Set GVL vendor ID to 0 (#4709)
• New Adapter: Anzu SSP (#4778)
• New Adapter: Native Agents (#4745)
• New Adapter: Selectmedia (#4769)
• New Adapter: Adklip - Aso alias (#4581)
• Adagio: Fix usersync URL (#4716)
• Parameterize Dockerfile base image (#4817)
• New Adapter: pgamrtb - Limelight Alias (#4714)
• New Adapter: targetVideo (#4593)

Contributors

@GeneGenie, @adserver-online, @anishb-ms, @anzuprebid, @linux019, @pedjoni8, @prebid-compas, @quietPusher, @selectmediaPrebid, @teqblaze and @xdevel

Important notice

This release includes a security update that adds validation to bidder adapters with dynamic hostnames to avoid the possibility of hostname forgery. This has a small chance of impacting exotic Prebid Server host configurations, as certain characters in the hostname are now prohibited. Please consult the list of bidder adapters that were affected by this change in #4802.

Changes

• Validate host & subdomain bidder params (#4802)
• New Adapter: Scalibur (#4640)

Contributors

@bTimor @patmmccann @bsardo

Changes

• Relevant Digital: Add useSourceBidderCode option (#4694)
• MobileFuse: Update to support OpenRTB MType (#4719)
• Modules: Concurrency module context fix (#4603)
• audienceNetwork: Add rewarded video support and allow rewarded interstitials (#4763)
• Coop Cookie Sync: Add option to skip appending remaining available bidders (#4764)
• Adapter Code Coverage workflow: Support Go version upgrades (#4760)
• Pin trivy-action to v0.35.0 SHA for supply chain security (#4776)
• Adapter Code Coverage Workflow: Split into two stages (#4775)

Contributors

@PBDMSFT, @anishb-ms, @bsardo, @hugolm84, @pm-nikhil-vaidya and @tomaszbmf

Changes

• New Adapter: RTBStack (#4685)
• New Adapter: Cortex (#4755)
• Nativo: Add optional placementId param & Prebid Renderer in response (#4679)
• New Adapter: Waardex - Adkernel alias (#4645)
• Showheroes: Enable gzip compression (#4730)
• Adipolo: Add GVL Vendor ID (#4734)
• New Adapter: T Advertising Blis (#4706)
• Sparteo: Add required query params to adapter endpoint (#4556)
• New Adapter: 9dotsmedialtd - Limelight Alias (#4281)
• New Adapter: ReklamUp (#4711)
• Upgrade jsonparser from v1.1.1 to v1.1.2 (#4736)
• Insticator: Move DSP seat from TypedBid to Meta to prevent bid rejection (#4726)

Contributors

@FilipStamenkovic, @ckbo3hrk, @cortex-tech, @dimashirokov, @karwaankit32, @prebid-reklamup, @quietPusher, @rafataveira, @shubhamc-ins, @t-sormonte, @tb-emq and @volokha

Changes

• New Adapter: AppMonstaMedia (#4727)
• New module: WURFL Device Enrichment Module (#4158)
• New Adapter: Adsmovil (#4712)
• Adnuntius: Send EIDs in URL instead of body (#4632)
• RTBHouse: Extract tagid from Imp fields (#4624)
• New Adapter: MyCodeMedia (#4630)
• New Adapter: Harrenmedia - Adverxo Alias (#4597)
• New Adapter: Harion (#4671)
• New Adapter: Apester (#4698)
• Conversant: Fix version package reference (#4739)
• Conversant: Pass prebid version number through (#4688)
• New adapter: Verben (#4693)
• New Adapter: Adnimation - Vidazoo Alias (#4695)
• New Adapter: Amcom - Attekmi alias (#4617)
• New adapter: DPAI (#4684)
• adds geoscope for deepintent (#4721)
• New Adapter: Nuba (#4565)

Contributors

@SmartHubSolutions, @anna-y-perion, @bsardo, @dev-adverxo, @driftpixelai, @johnwier, @lucor, @markappmedia, @mikael-lundin, @nuba-io, @parthshah51999, @pjaworski-rtbh, @teqblaze and @verben-gh

Major Release

This major release introduces substantial changes, some of which are breaking, to Prebid Server that warrants extra attention and thorough vetting from host companies prior to deployment.

Host Upgrade Path

TODO - if using video endpoint it needs to be re-enabled
TODO - if using HTTP fetcher legacy query param format, it needs to be re-enabled as RFC 3986 is now the default
TODO - if using embedded Ubuntu root certificates you will need to switch to system certificates
TODO - There are a few minor metric and error message adjustments

Changes

Bug fixes

• Fix: Require explicit GVL vendor ID declaration for aliases (#4683)
• Fix: Prevent duplicate account IDs in HTTP account fetcher query params (#4648)

Features

• GVL: Periodically fetch latest valid IDs indicating deletions (#4700)

Config

• Cookie Sync: Allow turning off sync for specific adapter (#4707)

Breaking Changes - Adapters

• Intertech: Remove Adapter (#4680)
• Gothamads: Rename to intenze (#4333)
• DXKulture: Remove Adapter (#4653)
• Adverxo: Remove Mobupps alias (#4323)
• Attekmi: Remove Vimayx alias (#4546)
• AdOcean: Remove adapter (#4296)
• New Adapter: ElementalTv (remove Adoppler) (#4639)
• New Adapter: TRUSTX (remove Grid alias) (#4614)
• Adot: Constrain publisher path to an enum list (#4573)

Breaking Changes - Other

• HTTP Fetcher: Enable RFC 3986 by Default (#4681)
• Metrics: Standardize adapter connection metrics name (#4549)
• Drop supportCors user sync YAML config option (#4682)
• Adjust white label only error messages (#4690)
• Mark video endpoint as deprecated (#4691)
• Deprecate Embedded Certs (#4625)

Hardcoded Adapter Aliases

• New Limelight Adapters (#4651)
• New Adapter: Adastra - Attekmi alias (#4607)
• New Adapter: Alchemyx - Adverxo Alias (#4663)
• New Adapter: ProgrammaticX - Vidazoo Alias (#4456)
• New Adapter: RadiantFusion - Attekmi alias (#4616)

New Adapters

• New adapter: BeOp (#4660)
• New Adapter: Alliance Gravity (#4522)
• New Adapter: Bidfuse (#4532)

Adapter Updates

• Nexx360: Add gvlVendorID and update imp.ext field management (#4604)
• Mediasquare: Add user sync & site capabilities (#4589)
• Mobkoi: Always set TagID with placementID (#4644)
• Insticator: Support OpenRTB 2.6 and add app endpoint (#4668)
• Stroeercore: Use bid.ext as-is from the response (#4633)
• Missena: Update parameters and add versioning support (#4557)
• Kargo: update endpoint (#4667)
• Screencore: Convert to Teqblaze alias (#4611)
• Ogury: Allow inventory mapping for in-app traffic. (#4636)
• Seedtag: Adds GPP macros on user sync url (#4465)
• Optidigital: Add GPP support to user sync (#4646)
• Mobilefuse: Add site media types (#4613)
• Flipp: Update endpoint to not use cdn (#4621)
• Seedtag: Set bid request currency to USD (#4615)
• ResetDigital: Switch to OpenRTB (#4475)
• AdsInteractive: Change to aliases (#4359)
• ProgX: Change alias of (#4352)
• Aso: Add user sync endpoint to adapter and aliases (#4580)

Module Updates

• ORTB Blocking Module: battr media type strictness (#4551)
• Scope3: Add rtd targeting in seatbid (#4606)

Other

• Increment package version to v4 (#4710)
• Log nested structures from the configuration (#4519)
• Add removed bidder warnings (#4692)

Contributors

@AdsInteractive, @ProgrammaticX, @SmartHubSolutions, @SyntaxNode, @Valentino3, @adserver-online, @andresmonc, @anna-y-perion, @bidfuse, @bsardo, @crepi, @danielbaud, @dev-adverxo, @dtbarne, @dxtech-git, @gabrielmougard, @gchicoye, @gravelg, @guscarreon, @hasan-kanjee, @jeans11, @karwaankit32, @khouajaSadok, @linux019, @mediasquare-alexandre, @optidigital-prebid, @patryk-grzegorczyk, @pavel-ptashyts, @philipwatson, @postindustria-code, @quietPusher, @sangarbe, @screencore-dev, @shubhamc-ins, @support-gotham-ads, @trustXops and @ysfbsf

Changes

• Logging: Add interface with default glog implementation (#4085)
• Warn in auction response for bidders blocked by privacy settings (#4537)
• Adagio: Remove hardcoded seat name (#4596)
• Adagio: Enable site capability (#4590)
• Syncer: Allow Duplicate Syncer Key For Identical Config (#4622)
• New Adapter: Microsoft (msft) (#4592)
• New Adapter: Clydo (#4535)
• CWire: Add userSync (#4516)
• BidTheatre: Update endpoint and add redirect user sync (#4562)
• PubMatic: Pass alias bidder name through (#4588)
• Scope3: Various fixes to RTD module (#4544)
• New Adapter: Boldwin Rapid (#4478)
• Adnuntius: Pass targeting to ad server (#4545)
• RTBHouse: PMP removal, publisherId parameter extraction (#4564)

Contributors

@BoldwinDev, @Pubmatic-Supriya-Patil, @SyntaxNode, @andreasgreen, @cto-clydo, @gravelg, @justadreamer, @linux019, @mikael-lundin, @osazos, @piotrj-rtbh and @roarc0

Changes

• Connatix: Support GZIP (#4575)
• New Adapter: Performist - Limelight Alias (#4283)
• New Adapter: Showheroes (#4533)
• New Adapter: Goldbach (#4476)
• New adapter: Gravite (#4547)
• In order to protect users of prebid-server that don't use CGO, add build flag (#4058)
• Rules Engine Module: Dynamic ruleset from YAML geoscopes (#4509)
• New Adapter: appStockSSP (#4502)
• Remove flaky agma test (#4578)
• Mobkoi: Update endpoint (#4523)
• Improve Digital: Switch to HTTPS (#4559)
• Adagio: Fix typo (#4570)
• Omnidex: Add GVL ID (#4568)
• Actions: Add publish to docker hub workflow (#4558)
• GDPR: Move enforcement processing upstream (#4567)
• Mobkoi: Remove url endpoint override (#4555)

Contributors

@AppstockLTD, @FilipStamenkovic, @anna-y-perion, @bsardo, @guscarreon, @jbartek25, @karimMourra, @mbonnafon, @osazos, @quietPusher, @scr-oath, @simonaebli and @teqblaze

Changes

• Accounts: Add coop cookiesync priority groups (#4561)
• Nextmillennium: New fields and adapter version update (#4486)
• Yandex: Set referer and target-ref to site.page (#4488)
• OpenX: Return buyer exts in response (#4507)
• Connatix: Add GPP macros (#4525)
• New Adapter: Xapads - AdKernel alias (#4534)
• MetaX: Add redirect user sync (#4550)

Contributors

@DiMurer, @Fuska1, @allar15, @ckbo3hrk, @hhhjort, @karimMourra and @metax-kehan