Back to milestones

202610

Open

Due by October 30, 2026

•Last updated Oct 9, 2026

30% complete

Lockr script guard rewrites any script URL containing aim.loc.kr to the Lockr SDK
Bug
IABTechLab/trusted-server#1199 · opened on Sep 24, 2026 · 202610
Concurrent cargo builds race on the shared tsjs dist and can embed a partial bundle set
Bug
IABTechLab/trusted-server#1200 · opened on Sep 24, 2026 · 202610
Unknown integration IDs and fields in [integrations.*] pass validation and are ignored
Bug
IABTechLab/trusted-server#1201 · opened on Sep 24, 2026 · 202610
ts prebid bundle widens config file permissions and echoes config lines in parse errors
Bug
IABTechLab/trusted-server#1202 · opened on Sep 24, 2026 · 202610
A non-2xx mediator response drops all winners instead of falling back to local ranking
Bug
IABTechLab/trusted-server#1203 · opened on Sep 24, 2026 · 202610
Set up the pinned Node in every Rust CI job and drop the unused trusted-server-js deps
Task
IABTechLab/trusted-server#1204 · opened on Sep 24, 2026 · 202610
Prebid attribute rewriter runs before js_asset_proxy and drops enabled assets
Bug
IABTechLab/trusted-server#1205 · opened on Sep 24, 2026 · 202610
Regression from #1135: App Router pages with GTM URLs in RSC data fail to serve
Bug
IABTechLab/trusted-server#1206 · opened on Sep 24, 2026 · 202610
Regression from #1135: __NEXT_DATA__ is corrupted when script text splits after _
Bug
IABTechLab/trusted-server#1207 · opened on Sep 24, 2026 · 202610
GTM script rewriter clobbers Next.js __NEXT_DATA__ rewrites and can truncate it
Bug
IABTechLab/trusted-server#1208 · opened on Sep 24, 2026 · 202610
Image optimizer keys that collide after trimming resolve nondeterministically
Bug
IABTechLab/trusted-server#1211 · opened on Sep 25, 2026 · 202610
Add a CI gate for non-allowlisted URL hosts on changed lines
Task
IABTechLab/trusted-server#1215 · opened on Sep 26, 2026 · 202610
Automatically open PR for documentation changes when code merged to main
Task
IABTechLab/trusted-server#1105 · opened on Sep 1, 2026 · 202610
Client CWV: defer tsjs bundle, CLS min-height injection, disableInitialLoad
Task
IABTechLab/trusted-server#854 · opened on Jul 7, 2026 · 202610
Per-request fixed cost: release profile, settings pipeline trim, build-time tsjs hashes
Task
IABTechLab/trusted-server#855 · opened on Jul 7, 2026 · 202610
Create debug endpoint for mobile user to trace ad rendering
Epic
IABTechLab/trusted-server#1050 · opened on Aug 20, 2026 · 202610
3
SPEC Specify mobile ad-rendering trace endpoint
Task
IABTechLab/trusted-server#1108 · opened on Sep 1, 2026 · 202610
Add mobile ad-rendering trace workflow
Unread
#1107 opened Sep 1, 2026 · Updated Oct 9, 2026
86
Report deployed git version in x-ts-version
Unread
#1213 opened Sep 25, 2026 · Updated Oct 10, 2026
30
Build tsjs bundles into a private OUT_DIR and validate the set
Unread
#1214 opened Sep 25, 2026 · Updated Oct 10, 2026
20
ts audit writes the full GTM script URL into container_id
Bug
IABTechLab/trusted-server#1219 · opened on Sep 29, 2026 · 202610
Request body re-sent on 301/302 redirects
Bug
IABTechLab/trusted-server#431 · opened on Mar 4, 2026 · 202610
Ensure what cookie data is being forwarded to Prebid Server / 3rd party backends
Bug
IABTechLab/trusted-server#763 · opened on Jun 10, 2026 · 202610
1
Scope secret references to prevent config-store writers exfiltrating unrelated secrets
Bug
IABTechLab/trusted-server#1037 · opened on Aug 18, 2026 · 202610
Nothing is processed over HTTP/2, because the request host is read from a header HTTP/2 does not send
Bug
IABTechLab/trusted-server#1118 · opened on Sep 4, 2026 · 202610