[Snyk] Upgrade web-vitals from 2.1.4 to 5.3.0

[mhill-os]

Snyk has created this PR to upgrade web-vitals from 2.1.4 to 5.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 81 versions ahead of your current version.

• The recommended version was released 2 months ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: web-vitals

• 5.3.0 - 2026-05-28
  

  Release v5.3.0

• 5.3.0-soft-navs-5 - 2026-06-24
• 5.3.0-soft-navs-4 - 2026-06-07
• 5.3.0-soft-navs-3 - 2026-06-01
• 5.3.0-soft-navs-2 - 2026-05-29
• 5.3.0-soft-navs - 2026-05-28
• 5.2.0 - 2026-03-25
  

  Release v5.2.0

• 5.2.0-soft-navs-7 - 2026-05-28
• 5.2.0-soft-navs-6 - 2026-05-05
• 5.2.0-soft-navs-5 - 2026-04-28
• 5.2.0-soft-navs-4 - 2026-04-25
• 5.2.0-soft-navs-3 - 2026-04-20
• 5.2.0-soft-navs-2 - 2026-03-27
• 5.2.0-soft-navs - 2026-03-26
• 5.1.0 - 2025-07-31
  

  Release v5.1.0

• 5.1.0-soft-navs-2 - 2025-09-18
• 5.1.0-soft-navs - 2025-07-31
• 5.0.3 - 2025-06-11
  

  Release v5.0.3

• 5.0.3-soft-navs - 2025-06-11
• 5.0.2 - 2025-05-29
  

  Release v5.0.2

• 5.0.1 - 2025-05-13
  

  Release v5.0.1

• 5.0.1-soft-navs - 2025-05-15
• 5.0.0 - 2025-05-07
  

  Release v5.0.0

• 5.0.0-rc.2 - 2025-04-24
  

  Release v5.0.0-rc.2

• 5.0.0-rc.1 - 2025-04-23
  

  Release v5.0.0-rc.1

• 5.0.0-rc.0 - 2024-10-03
• 4.2.4 - 2024-10-22
• 4.2.3 - 2024-08-07
• 4.2.3-soft-navs - 2024-08-12
• 4.2.2 - 2024-07-17
• 4.2.2-soft-navs-2 - 2024-08-01
• 4.2.2-soft-navs - 2024-07-31
• 4.2.1 - 2024-06-30
• 4.2.0 - 2024-06-20
• 4.2.0-debug.0 - 2024-06-13
• 4.1.1 - 2024-06-11
• 4.1.0 - 2024-06-06
• 4.0.1 - 2024-05-22
• 4.0.0 - 2024-05-13
• 4.0.0-rc.0 - 2024-05-03
• 4.0.0-beta.3 - 2024-04-22
• 4.0.0-beta.2 - 2024-04-05
• 4.0.0-beta.1 - 2024-04-01
• 4.0.0-beta.0 - 2024-03-29
• 3.5.2 - 2024-01-25
• 3.5.2-soft-navs-16 - 2024-01-26
• 3.5.1 - 2023-12-27
• 3.5.1-soft-navs-15 - 2023-12-28
• 3.5.0 - 2023-09-28
• 3.5.0-soft-navs-14 - 2023-12-15
• 3.5.0-soft-navs-13 - 2023-12-13
• 3.5.0-soft-navs-12 - 2023-12-13
• 3.5.0-soft-navs-11 - 2023-12-13
• 3.5.0-soft-navs-10 - 2023-09-28
• 3.4.0 - 2023-07-10
• 3.4.0-soft-navs-9 - 2023-07-10
• 3.3.2 - 2023-05-29
• 3.3.2-soft-navs-8 - 2023-05-29
• 3.3.1 - 2023-04-04
• 3.3.1-types-2 - 2023-05-26
• 3.3.1-types - 2023-05-26
• 3.3.1-soft-navs-7 - 2023-04-04
• 3.3.0 - 2023-03-09
• 3.3.0-soft-navs-6 - 2023-03-09
• 3.1.1 - 2023-01-10
• 3.1.1-soft-navs-5 - 2023-02-11
• 3.1.1-soft-navs-4 - 2023-02-10
• 3.1.1-soft-navs-3 - 2023-02-09
• 3.1.1-soft-navs-2 - 2023-02-09
• 3.1.1-soft-navs-1 - 2023-02-08
• 3.1.1-soft-navs - 2023-01-26
• 3.1.0 - 2022-11-16
• 3.0.4 - 2022-10-19
• 3.0.3 - 2022-10-04
• 3.0.2 - 2022-09-15
• 3.0.1 - 2022-08-31
• 3.0.0 - 2022-08-24
• 3.0.0-rc.0 - 2022-07-27
• 3.0.0-beta.2 - 2022-05-12
• 3.0.0-beta.1 - 2022-05-11
• 3.0.0-beta.0 - 2022-04-25
• 2.1.4 - 2022-01-21

from web-vitals GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This is a major version upgrade from v2 to v5, introducing several significant breaking changes across versions 3, 4, and 5. Code modifications will be required.

v3.0.0 Breaking Changes

• API Signature Change: All metric functions (e.g., onFCP, onLCP) now accept a configuration object as the second parameter. The callback function is now the first parameter. Previously, the callback was the only parameter. [3]

v4.0.0 Breaking Changes

• Function Removal: All getXXX() functions (e.g., getCLS, getFCP), which were deprecated in v3, have been removed. [9]
• FID Deprecation: The onFID() function was officially deprecated in favor of onINP() (Interaction to Next Paint). [8]
• Attribution Renaming: In the attribution build, several properties were renamed (e.g., eventTarget to interactionTarget). [9]

v5.0.0 Breaking Changes

• FID Removal: The onFID() function, deprecated in v4, has been completely removed. First Input Delay (FID) is no longer a Core Web Vital and has been replaced by INP. [6]
• Browser Support: The browser support policy has changed to Baseline Widely available, which may affect very old browsers. If you support legacy browsers, you may need to adjust your build process to transpile the library. [6]

Recommendation:
Review your implementation carefully. You will need to:

1. Update all metric function calls to match the new v3 signature.
2. Replace any usage of the removed getXXX() functions with their onXXX counterparts.
3. Replace any usage of onFID() with onINP() to measure user interaction responsiveness. [6, 8]

Source: Official Changelog, v4 Upgrade Guide, v5 Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.