August release candidate (DO NOT MERGE) - #1019

Draft

aram356 wants to merge 293 commits into

mainfrom

This pull request is big! We're only showing the most recent 250 commits

Commits on May 11, 2026

Fix async auction collect abandoning SSP bids when origin is slow
prk-Jr
committed
0c94652
Cargo fmt
prk-Jr
committed
f172f44
Fix mediator always skipped when origin body exceeds SSP auction budget
prk-Jr
committed
14cd493
Merge main into server-side-ad-templates-impl
prk-Jr
committed
913deb4
Cargo fmt
prk-Jr
committed
6210ebb
Adding debug info for auction
prk-Jr
committed
3cdf995
Fix auction bids missing on Next.js buffered HTML path
prk-Jr
committed
e35c593
Add path label and auction time to debug HTML comment
prk-Jr
committed
3dac776
Fix XSS in script injection and cap mediator at A_deadline
prk-Jr
committed
65c0ad3

Commits on May 13, 2026

Added footer slot id
prk-Jr
committed
0f67a8d

Commits on May 14, 2026

Fix page-bids auction context, protect Cache-Control from operator override
prk-Jr
committed
a7e8751
Restore nurl/burl/ad_id through adserver_mock mediation path
prk-Jr
committed
4011363
Populate device.user_agent in auction request
prk-Jr
committed
8516caa
Fix __tsAdInit fallback: look up bids by slot id not div id
prk-Jr
committed
9e0ec5b
Format lint using cargo fmt
prk-Jr
committed
d27a329
Fix clippy doc-markdown lint in adserver_mock
prk-Jr
committed
790c123

Commits on May 15, 2026

Commits on May 18, 2026

feat: forward real client IP and geo to PBS in server-side auction
prk-Jr
committed
6c31b66

Commits on May 21, 2026

20260518-053619 Review fixes for #680 (#708)
aram356
authored
207795c

Commits on May 22, 2026

Merge branch 'main' into server-side-ad-templates-impl
prk-Jr
authored
6311028

Commits on May 23, 2026

Address PR review findings from #680
prk-Jr
committed
93c1678

Commits on May 26, 2026

Formatting
aram356
committed
0346330

Commits on May 27, 2026

Merge branch 'main' into server-side-ad-templates-impl
prk-Jr
authored
fcb04d2

Commits on May 28, 2026

Address pass-4 review findings (#680)
prk-Jr
committed
ca98985

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Resolve server-side ad template review findings
prk-Jr
committed
fd10095
Add per-bidder Prebid nurl suppression and refresh metadata
prk-Jr
committed
def951a
Resolve server-side ad template review issues
prk-Jr
committed
80fe392

Commits on Jun 12, 2026

Resolve server-side ad template auction review findings
prk-Jr
committed
d3d43bc
Resolve beacon, validation, and orchestrator review findings
prk-Jr
committed
0f4dd86
Default tsjs adSlots and bids so gated-off pages never see undefined
prk-Jr
committed
aa43944
Merge remote-tracking branch 'origin/main' into server-side-ad-templates-impl
prk-Jr
committed
a3faf8b
Resolve failing integration tests
prk-Jr
committed
0456948
Remove unused test
prk-Jr
committed
ee3f2d6
Sync trusted-server.toml with main
prk-Jr
committed
d1cd3d8
Harden page-bids gate and keep surrogate headers off private responses
prk-Jr
committed
9613aff

Commits on Jun 13, 2026

Commits on Jun 14, 2026

Bind render bridge to source slot and fix refresh parity
prk-Jr
committed
8fb30b3

Commits on Jun 15, 2026

Commits on Jun 16, 2026

Restore mediated render/accounting fields on the synchronous auction path
prk-Jr
committed
c99bac8
Display TS-defined GPT slots instead of only refreshing them
prk-Jr
committed
b9d2d06
Validate creative-opportunity glob patterns at build time
prk-Jr
committed
fa14100
Match Cache-Control privacy directives case-insensitively
prk-Jr
committed
8f13d5f
Align checked-in creative auction timeout with its 500ms guidance
prk-Jr
committed
f997c66
Correct float-truncation under-bucketing in price_bucket
prk-Jr
committed
3a5c4b4
Cap synchronous mediator timeout to its configured budget
prk-Jr
committed
0f241ca
Warn when a dispatched auction is dropped on non-streaming routes
prk-Jr
committed
64ecc74
Test env-injected creative-opportunity slot-id rejection
prk-Jr
committed
ac0add3
Use a valid glob as the page-pattern doc example
prk-Jr
committed
c324e09
Remove dead test-only parse_ts_eids_cookie helper
prk-Jr
committed
bdb00f5

Commits on Jun 17, 2026

Merge main into server-side-ad-templates-impl
prk-Jr
committed
747b98b
Force EC Set-Cookie responses to stay shared-uncacheable
prk-Jr
committed
83620ab
Preserve server-side bidder params on Prebid refresh auctions
prk-Jr
committed
0cf84e4
Reject build-time creative-opportunity configs the runtime can't load
prk-Jr
committed
32de4aa
Close EC and ad-stack gaps in page-bids and publisher flow
prk-Jr
committed
f456b50

Commits on Jun 19, 2026

Close cache-privacy and refresh-recovery gaps from PR review
prk-Jr
committed
a3160d5

Commits on Jun 20, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 25, 2026

Fix server-side ad template review blockers
prk-Jr
committed
975b4aa
Fix EdgeZero empty ad-template config gate
prk-Jr
committed
ae17b45

Commits on Jun 29, 2026

Merge remote-tracking branch 'origin/main' into server-side-ad-templates-impl
prk-Jr
committed
904e676
Address fourth-pass PR review findings
prk-Jr
committed
a11f946
Drop tokio from the integration-tests lockfile
prk-Jr
committed
ae9d50a

Commits on Jun 30, 2026

Commits on Jul 1, 2026

Commits on Jul 2, 2026

Merge origin/main into server-side-ad-templates-impl
prk-Jr
committed
224fcaf
Add server-side ad-template CLI on top of server-side ad templates
prk-Jr
committed
4ec0f3f
Apply review follow-ups for server-side auction hardening
prk-Jr
committed
711dc38

Commits on Jul 6, 2026

Add ts audit ad-templates generate with multi-page slot merge

prk-Jr
and
claude
committed
fe198d9
Merge main into server-side-ad-templates-impl
prk-Jr
committed
a92e7b2

Commits on Jul 7, 2026

Merge server-side-ad-templates-impl into feature/ts-cli-ad-templates

prk-Jr
and
claude
committed
ecde812
Apply optional follow-ups from server-side ad-template review
prk-Jr
committed
b3374ae
Merge main into server-side-ad-templates-impl
prk-Jr
committed
ca4f881
Harden ad-template audit against hostile page data
prk-Jr
committed
f444a15
Merge remote-tracking branch 'origin/server-side-ad-templates-impl' into feature/ts-cli-ad-templates
prk-Jr
committed
43cd1b4

Commits on Jul 8, 2026

Address ad-template generate review findings
prk-Jr
committed
db302cb
Merge origin/main into feature/ts-cli-ad-templates
prk-Jr
committed
d63a87e

Commits on Jul 9, 2026

Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
efe9fe0
Resolve ad-template CLI review findings
prk-Jr
committed
ccccfa7
Box audit CLI arguments
prk-Jr
committed
c0da7e7
Run browser fixture tests serially
prk-Jr
committed
39d22ca

Commits on Jul 14, 2026

Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
eb89ea3

Commits on Jul 15, 2026

Commits on Jul 17, 2026

Add admin endpoint to look up EC entries by id
prk-Jr
committed
d5be3d9
Do not bot-gate the admin EC lookup KV graph
prk-Jr
committed
12592bb
Add admin endpoint to echo request EID cookies
prk-Jr
committed
9869ac7

Commits on Jul 18, 2026

Add ISO 8601 companions to admin EC lookup timestamps
prk-Jr
committed
8dc31cc

Commits on Jul 20, 2026

Merge branch 'main' into feat/admin-ec-lookup-endpoint
aram356
authored
3c80b49
Upgrade EdgeZero to the deploy-actions branch
aram356
committed
bc13f27

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Merge branch 'main' into worktree-edgezero-316-upgrade
aram356
authored
96dd1f7

Commits on Jul 23, 2026

Merge branch 'main' into feat/admin-ec-lookup-endpoint
aram356
authored
aa34a3c

Commits on Jul 26, 2026

Merge remote-tracking branch 'origin/main' into worktree-edgezero-316-upgrade
aram356
committed
1e7b4ca

Commits on Aug 4, 2026

Update EdgeZero to latest deploy-actions branch tip
aram356
committed
b743345

Commits on Aug 6, 2026

Add DataDome protection decision logs
ChristianPavilonis
committed
44f7658
Log incoming DataDome client IP
ChristianPavilonis
committed
302d161
feat(datadome): suppress client tag for excluded IPs
ChristianPavilonis
committed
aeb3f4c
Add DataDome staging test bypass
ChristianPavilonis
committed
fc96334
Log DataDome test-bypass registration state
ChristianPavilonis
committed
1ce7892
fix datadome staging bypass privacy
ChristianPavilonis
committed
7e6f365
Improve publisher HTML cache policy when SSAT is inactive
ChristianPavilonis
committed
126c17f
Document dedicated server-side ad template switch
ChristianPavilonis
committed
92e2a78
Add dedicated server-side ad template switch
ChristianPavilonis
committed
5805446

Commits on Aug 7, 2026

Merge branch 'main' into log/datadome
aram356
authored
6f28df2

Commits on Aug 11, 2026

Merge branch 'main' into log/datadome
aram356
authored
95114d8
Address DataDome review feedback
ChristianPavilonis
committed
d0fffb9

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Merge ESI #1013 into rc/202608
prk-Jr
committed
fa93269
Add GAM ts cohort attribution design spec

aram356
authored and
prk-Jr
committed
a86c4ce
Show requested slot sizes in GPT diagnostics
ChristianPavilonis
committed
f5ca22e
Finalize GAM cohort attribution design
prk-Jr
committed
400f299
Add GAM attribution implementation plan
prk-Jr
committed
ec62128
Add GPT GAM attribution option
prk-Jr
committed
71e0714
Authorize GAM attribution bundle
prk-Jr
committed
990b6bf
Cover disabled GPT attribution
prk-Jr
committed
0bfee82
Queue page-level GAM attribution
prk-Jr
committed
06ec213
Merge pull request #1032 from fix/gpt-diagnostics-observed-slot-size
ChristianPavilonis
committed
31a104f
Render APS creatives in opaque data frames
ChristianPavilonis
committed
19c3709

Commits on Aug 15, 2026

Add GAM attribution bundle fallback
prk-Jr
committed
18d28a5
Characterize targeting collisions
prk-Jr
committed
d65f656
Define GAM attribution streaming semantics
prk-Jr
committed
ef37c11
Document GAM attribution configuration
prk-Jr
committed
1749414
Use explicit GAM attribution branch
prk-Jr
committed
ef35343
Align GAM rollback and failure coverage
prk-Jr
committed
97e097d
Merge remote GAM attribution spec
prk-Jr
committed
367a593
Merge GAM cohort attribution implementation
prk-Jr
committed
78107e6
Merge branch 'main' into feature/ts-cli-ad-templates
prk-Jr
authored
fb07665
Sync EdgeZero to latest deploy-actions tip and adopt config gc
aram356
committed
5420390
Re-merge PR #940: Sync EdgeZero to latest deploy-actions tip and adopt config gc
aram356
committed
acca2dd
Merge remote-tracking branch 'origin/main' into worktree-edgezero-316-upgrade
aram356
committed
b23f270
Re-merge PR #940 after syncing it with main (which now carries #992 and #1010)
aram356
committed
f2a5eb8

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Fix ad-template CLI section rendering and harden the audit commands
prk-Jr
committed
31de3f6
Verify generated ad-template config before it replaces the operator file
prk-Jr
committed
07b37a1
Add multi-page collection and crawl planning for ad-template generate
prk-Jr
committed
e7f8268
Accumulate cross-page slot evidence for ad-template generate
prk-Jr
committed
73ac39c
Infer section ad-unit templates from cross-page evidence
prk-Jr
committed
f32a1ac
Let the ad-template writer express section policy and per-section patterns
prk-Jr
committed
deced19
Crawl site sections in ad-template generate and write inferred templates
prk-Jr
committed
6722e19
Add device-profile cross-checking to ad-template generate
prk-Jr
committed
d9133f2
Document ad-template slot generation
prk-Jr
committed
2ea48e0
Report why a crawled page yielded no ad slots
prk-Jr
committed
90bc61e
Pace the ad-template crawl and allow a headful browser
prk-Jr
committed
b8a5e5c
Answer consent APIs and report GPT state during ad-template generate
prk-Jr
committed
142e384
Audit through a proxy and collapse lowercase React div-id tokens
prk-Jr
committed
f5c8616
Refuse ad-template slots that are one placement under per-render div ids
prk-Jr
committed
230958b
Document the ad-template crawl options added after the first draft
prk-Jr
committed
64b9414
Merge branch 'main' into 1014-gpt-diagnostics-doc-completeness
prk-Jr
authored
5156908
Merge branch 'main' into feat/admin-ec-lookup-endpoint
prk-Jr
committed
866bcd4
Merge #1025 1014-gpt-diagnostics-doc-completeness into rc/202608
prk-Jr
committed
253ff9c
Merge remote-tracking branch 'origin/main' into feat/ssat-debug-comment-config
prk-Jr
committed
0fb0cbb
Revise SSAT debug comment sensitivity model
prk-Jr
committed
7d2ba2d
Merge #1034 docs/gam-ts-cohort-attribution-spec into rc/202608
prk-Jr
committed
a04f47d
Tighten SSAT debug metadata privacy model
prk-Jr
committed
3715f27
Merge #928 feat/admin-ec-lookup-endpoint into rc/202608
prk-Jr
committed
b8b917e
Validate redacted SSAT metadata by schema
prk-Jr
committed
8a61578
Clarify SSAT upstream safety contract
prk-Jr
committed
de3db0a
Update SSAT debug comment implementation plan
prk-Jr
committed
1af743c
Merge #823 feature/ts-cli-ad-templates into rc/202608
prk-Jr
committed
691706d
Correct SSAT implementation verification plan
prk-Jr
committed
e7f057d
Fix SSAT plan metadata type handling
prk-Jr
committed
a99033f
Harden SSAT debug comment configuration modes
prk-Jr
committed
9825743
Enforce SSAT debug response metadata schemas
prk-Jr
committed
567c963
Document SSAT debug sensitivity modes
prk-Jr
committed
737c18a
Implement configurable cache header policies
ChristianPavilonis
committed
d7737d3
Format cache configuration docs
ChristianPavilonis
committed
d6328f4
Address cache policy review feedback
ChristianPavilonis
committed
0e413c2
Fix cache policy clippy warnings
ChristianPavilonis
committed
2de213d
Fix publisher test cache policy argument
ChristianPavilonis
committed
d6920d4
Preserve integration configuration values on rebase
ChristianPavilonis
committed
3b9063f
Harden configurable asset cache rules
ChristianPavilonis
committed
f4169fb
Resolve cache policy review feedback
ChristianPavilonis
committed
fd6d832
Merge remote-tracking branch 'origin/pr/1033' into rc/202608
ChristianPavilonis
committed
fefe73a
Merge remote-tracking branch 'origin/pr/860' into rc/202608
ChristianPavilonis
committed
49061aa

Commits on Aug 18, 2026

Design SSAT debug comment output formatting
prk-Jr
committed
8f5b345
Plan SSAT debug comment output formatting
prk-Jr
committed
0565947
Configure SSAT debug comment output format
prk-Jr
committed
2050f18
Pretty print SSAT debug comment dumps
prk-Jr
committed
00a969a
Document SSAT debug comment formatting
prk-Jr
committed
e4c52a8
Format SSAT debug comment implementation plan
prk-Jr
committed
ccda520
Document SSAT auction debug comment usage
prk-Jr
committed
67d1608
Merge #943 feat/ssat-debug-comment-config into rc/202608
prk-Jr
committed
2f4e77e
Merge branch 'rc/202608' of github.com:IABTechLab/trusted-server into rc/202608
ChristianPavilonis
committed
a603e98
Revert "Merge remote-tracking branch 'origin/pr/1033' into rc/202608"
ChristianPavilonis
committed
bf9cfdd
Reapply "Merge remote-tracking branch 'origin/pr/1033' into rc/202608"
ChristianPavilonis
committed
3953cd6
Revert "Reapply "Merge remote-tracking branch 'origin/pr/1033' into rc/202608""
ChristianPavilonis
committed
104d163
Merge branch 'main' into rc/202608
aram356
authored
f082560