Fix (@grafana/faro-web-sdk): Use monotonic clock instead of wall clock for duration
measurements (#2016).
Fix (@grafana/faro-core): faro.api is now a no-op before initializeFaro() runs,
preventing TypeError: faro.api is undefined when accessed pre-initialization or with
duplicate singleton copies (#1889).
Feature (@grafana/faro-core): Extend TS types for new Faro spec fields — MetaOS, MetaDevice, meta.os, meta.device, meta.app.installationId, and fatal on ExceptionEventDefault. meta.device and meta.app.installationId are not populated
by the Web SDK. fatal can be set via pushError(err, { fatal: true }) and participates
in dedupe (#1997).
Feature (@grafana/faro-web-sdk): New default osMeta provider populates meta.os
(name, version) from the user agent. Registered automatically and re-exported for
custom meta setups (#1997).
Fix (@grafana/faro-core): Exception dedupe now considers the stacktrace. The dedupe
key previously referenced a non-existent stackTrace field (camelCase typo), so errors
with the same message/type but different stacks were deduped. Consumers relying on config.dedupe may see an increase in reported exceptions (#1997).
Chore (@grafana/faro-*): Pinned protobufjs to ^8.0.1 to remediate CVE-2026-41242,
and updated multiple other dependencies (#2008, #2010, #2011, #2012, #2017, #2019).
Configuration
📅Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about these updates again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@grafana/faro-web-sdk](https://github.com/grafana/faro-web-sdk) ([source](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-sdk)) | [`2.4.0` → `2.5.0`](https://renovatebot.com/diffs/npm/@grafana%2ffaro-web-sdk/2.4.0/2.5.0) |  |  |
| [@grafana/faro-web-tracing](https://github.com/grafana/faro-web-sdk) ([source](https://github.com/grafana/faro-web-sdk/tree/HEAD/packages/web-tracing)) | [`2.4.0` → `2.5.0`](https://renovatebot.com/diffs/npm/@grafana%2ffaro-web-tracing/2.4.0/2.5.0) |  |  |
---
### Release Notes
<details>
<summary>grafana/faro-web-sdk (@​grafana/faro-web-sdk)</summary>
### [`v2.5.0`](https://github.com/grafana/faro-web-sdk/blob/HEAD/CHANGELOG.md#250)
[Compare Source](https://github.com/grafana/faro-web-sdk/compare/v2.4.0...v2.5.0)
- Fix (`@grafana/faro-web-sdk`): Use monotonic clock instead of wall clock for duration
measurements ([#​2016](https://github.com/grafana/faro-web-sdk/issues/2016)).
- Fix (`@grafana/faro-core`): `faro.api` is now a no-op before `initializeFaro()` runs,
preventing `TypeError: faro.api is undefined` when accessed pre-initialization or with
duplicate singleton copies ([#​1889](https://github.com/grafana/faro-web-sdk/issues/1889)).
- Feature (`@grafana/faro-core`): Extend TS types for new Faro spec fields — `MetaOS`,
`MetaDevice`, `meta.os`, `meta.device`, `meta.app.installationId`, and `fatal` on
`ExceptionEventDefault`. `meta.device` and `meta.app.installationId` are not populated
by the Web SDK. `fatal` can be set via `pushError(err, { fatal: true })` and participates
in dedupe ([#​1997](https://github.com/grafana/faro-web-sdk/issues/1997)).
- Feature (`@grafana/faro-web-sdk`): New default `osMeta` provider populates `meta.os`
(`name`, `version`) from the user agent. Registered automatically and re-exported for
custom meta setups ([#​1997](https://github.com/grafana/faro-web-sdk/issues/1997)).
- Fix (`@grafana/faro-core`): Exception dedupe now considers the stacktrace. The dedupe
key previously referenced a non-existent `stackTrace` field (camelCase typo), so errors
with the same message/type but different stacks were deduped. Consumers relying on
`config.dedupe` may see an increase in reported exceptions ([#​1997](https://github.com/grafana/faro-web-sdk/issues/1997)).
- Chore (`@grafana/faro-*`): Pinned `protobufjs` to `^8.0.1` to remediate CVE-2026-41242,
and updated multiple other dependencies ([#​2008](https://github.com/grafana/faro-web-sdk/issues/2008), [#​2010](https://github.com/grafana/faro-web-sdk/issues/2010), [#​2011](https://github.com/grafana/faro-web-sdk/issues/2011), [#​2012](https://github.com/grafana/faro-web-sdk/issues/2012), [#​2017](https://github.com/grafana/faro-web-sdk/issues/2017), [#​2019](https://github.com/grafana/faro-web-sdk/issues/2019)).
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate
scheduled this pull request to auto merge when all checks succeed 2026-05-07 12:04:45 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.4.0→2.5.02.4.0→2.5.0Release Notes
grafana/faro-web-sdk (@grafana/faro-web-sdk)
v2.5.0Compare Source
Fix (
@grafana/faro-web-sdk): Use monotonic clock instead of wall clock for durationmeasurements (#2016).
Fix (
@grafana/faro-core):faro.apiis now a no-op beforeinitializeFaro()runs,preventing
TypeError: faro.api is undefinedwhen accessed pre-initialization or withduplicate singleton copies (#1889).
Feature (
@grafana/faro-core): Extend TS types for new Faro spec fields —MetaOS,MetaDevice,meta.os,meta.device,meta.app.installationId, andfatalonExceptionEventDefault.meta.deviceandmeta.app.installationIdare not populatedby the Web SDK.
fatalcan be set viapushError(err, { fatal: true })and participatesin dedupe (#1997).
Feature (
@grafana/faro-web-sdk): New defaultosMetaprovider populatesmeta.os(
name,version) from the user agent. Registered automatically and re-exported forcustom meta setups (#1997).
Fix (
@grafana/faro-core): Exception dedupe now considers the stacktrace. The dedupekey previously referenced a non-existent
stackTracefield (camelCase typo), so errorswith the same message/type but different stacks were deduped. Consumers relying on
config.dedupemay see an increase in reported exceptions (#1997).Chore (
@grafana/faro-*): Pinnedprotobufjsto^8.0.1to remediate CVE-2026-41242,and updated multiple other dependencies (#2008, #2010, #2011, #2012, #2017, #2019).
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate.
e78edce745to64f05b795c