In This Release
🏛 Core PRs
- Core: gvlid as a list (#15877)
- Core: skip ad units with no enabled media types (#15874)
- ortbConverter: copy ext.prebid.deal.source to bid.meta.deal (#15904)
- Build: NPM submodule imports pull in their parent module (#15854)
🚀 New Features
- Transfon Security RTD Module: initial release (#15894)
🛠 Maintenance
Bid adapters
- Escalax Bid Adapter: update (#15737)
- NoBid Bid Adapter: forward ortb2Imp and preserve special characters in payload - version 1.4.2 (#15897)
- Publink.io Bid Adapter: forward explicit priority-bid permission (#15908)
- Smaato Bid Adapter: mtype media type, sync consent signals, floor conversion (#15893)
- TNE Catalyst Bid Adapter: remove deleted GVL ID (#15945)
RTD modules
- SemantIQ RTD Provider: migrate to TypeScript (#15892)
- SemantIQ RTD Provider: call onDone only once (#15898)
- SemantIQ RTD Provider: drop falsy company ids (#15899)
- SemantIQ RTD Provider: fix typo (#15911)
Tests
- Tests: fix typo (#15906)
🧹 CI housekeeping
Changes to the repository's CI workflows only, mostly the experimental local-model (Qwen3.5) PR reviewers. They don't affect the published package.
- CI: run Alibaba OpenCodeReview on new pull requests (#15912)
- CI: fix permissions for local OpenCodeReview npm install (#15914)
- CI: fix OpenCodeReview workflow validation on runner temp path (#15915)
- CI: stop OCR aggregate budget from skipping all reviews (#15916)
- CI: stream OpenCodeReview progress and narrow JS/TS reviews (#15917)
- CI: add isolated Qwen3.5 2B smoke path and realistic OCR tool preflight (#15919)
- CI: validate Qwen3.5 review precision on hidden-bug and clean PRs (#15921)
- CI: add bounded one-pass local Qwen reviewer for experimental PRs (#15924)
- CI: switch bounded reviewer to Qwen3.5 9B, retire OCR agent and preserve diagnostics (#15927)
- CI: fix Codex P1 findings in bounded Qwen reviewer (#15930)
- CI: enable bounded Qwen3.5 9B PR reviews and restore experimental OCR agent (#15931)
- CI: strengthen Qwen3.5 9B OCR tool-call preflight and diagnostics (#15934)
- CI: require exactly one valid OCR tool call and avoid example contamination (#15935)
- CI: validate OCR explanations and allow 180-second CPU inference (#15936)
- CI: expand bounded Qwen coverage to 40K-character JS/TS patches (#15937)
- CI: fix OCR preflight jq syntax with tested standalone validator (#15938)
- CI: upgrade Qwen review workflows to checkout v6 (Node 24) (#15941)
- CI: chunk large bounded Qwen diffs to avoid test-file inference timeouts (#15942)