[Snyk] Upgrade web-vitals from 2.1.4 to 6.0.0

[mhill-os]

Snyk has created this PR to upgrade web-vitals from 2.1.4 to 6.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 82 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: web-vitals

• 6.0.0 - 2026-07-21
  

  Release v6.0.0

• 5.3.0 - 2026-05-28
  

  Release v5.3.0

• 5.3.0-soft-navs-5 - 2026-06-24
• 5.3.0-soft-navs-4 - 2026-06-07
• 5.3.0-soft-navs-3 - 2026-06-01
• 5.3.0-soft-navs-2 - 2026-05-29
• 5.3.0-soft-navs - 2026-05-28
• 5.2.0 - 2026-03-25
  

  Release v5.2.0

• 5.2.0-soft-navs-7 - 2026-05-28
• 5.2.0-soft-navs-6 - 2026-05-05
• 5.2.0-soft-navs-5 - 2026-04-28
• 5.2.0-soft-navs-4 - 2026-04-25
• 5.2.0-soft-navs-3 - 2026-04-20
• 5.2.0-soft-navs-2 - 2026-03-27
• 5.2.0-soft-navs - 2026-03-26
• 5.1.0 - 2025-07-31
  

  Release v5.1.0

• 5.1.0-soft-navs-2 - 2025-09-18
• 5.1.0-soft-navs - 2025-07-31
• 5.0.3 - 2025-06-11
  

  Release v5.0.3

• 5.0.3-soft-navs - 2025-06-11
• 5.0.2 - 2025-05-29
  

  Release v5.0.2

• 5.0.1 - 2025-05-13
  

  Release v5.0.1

• 5.0.1-soft-navs - 2025-05-15
• 5.0.0 - 2025-05-07
  

  Release v5.0.0

• 5.0.0-rc.2 - 2025-04-24
  

  Release v5.0.0-rc.2

• 5.0.0-rc.1 - 2025-04-23
  

  Release v5.0.0-rc.1

• 5.0.0-rc.0 - 2024-10-03
• 4.2.4 - 2024-10-22
• 4.2.3 - 2024-08-07
• 4.2.3-soft-navs - 2024-08-12
• 4.2.2 - 2024-07-17
• 4.2.2-soft-navs-2 - 2024-08-01
• 4.2.2-soft-navs - 2024-07-31
• 4.2.1 - 2024-06-30
• 4.2.0 - 2024-06-20
• 4.2.0-debug.0 - 2024-06-13
• 4.1.1 - 2024-06-11
• 4.1.0 - 2024-06-06
• 4.0.1 - 2024-05-22
• 4.0.0 - 2024-05-13
• 4.0.0-rc.0 - 2024-05-03
• 4.0.0-beta.3 - 2024-04-22
• 4.0.0-beta.2 - 2024-04-05
• 4.0.0-beta.1 - 2024-04-01
• 4.0.0-beta.0 - 2024-03-29
• 3.5.2 - 2024-01-25
• 3.5.2-soft-navs-16 - 2024-01-26
• 3.5.1 - 2023-12-27
• 3.5.1-soft-navs-15 - 2023-12-28
• 3.5.0 - 2023-09-28
• 3.5.0-soft-navs-14 - 2023-12-15
• 3.5.0-soft-navs-13 - 2023-12-13
• 3.5.0-soft-navs-12 - 2023-12-13
• 3.5.0-soft-navs-11 - 2023-12-13
• 3.5.0-soft-navs-10 - 2023-09-28
• 3.4.0 - 2023-07-10
• 3.4.0-soft-navs-9 - 2023-07-10
• 3.3.2 - 2023-05-29
• 3.3.2-soft-navs-8 - 2023-05-29
• 3.3.1 - 2023-04-04
• 3.3.1-types-2 - 2023-05-26
• 3.3.1-types - 2023-05-26
• 3.3.1-soft-navs-7 - 2023-04-04
• 3.3.0 - 2023-03-09
• 3.3.0-soft-navs-6 - 2023-03-09
• 3.1.1 - 2023-01-10
• 3.1.1-soft-navs-5 - 2023-02-11
• 3.1.1-soft-navs-4 - 2023-02-10
• 3.1.1-soft-navs-3 - 2023-02-09
• 3.1.1-soft-navs-2 - 2023-02-09
• 3.1.1-soft-navs-1 - 2023-02-08
• 3.1.1-soft-navs - 2023-01-26
• 3.1.0 - 2022-11-16
• 3.0.4 - 2022-10-19
• 3.0.3 - 2022-10-04
• 3.0.2 - 2022-09-15
• 3.0.1 - 2022-08-31
• 3.0.0 - 2022-08-24
• 3.0.0-rc.0 - 2022-07-27
• 3.0.0-beta.2 - 2022-05-12
• 3.0.0-beta.1 - 2022-05-11
• 3.0.0-beta.0 - 2022-04-25
• 2.1.4 - 2022-01-21

from web-vitals GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This is a major version upgrade from v2 to v6, which includes several significant breaking changes across multiple major versions. Developer action is required to migrate.

Key Breaking Changes:

• v6.0.0:

  • Introduces support for Soft Navigations, which may change how metrics are reported in Single Page Applications (SPAs).
  • The default for the includeProcessedEventEntries configuration option was changed to false.

• v5.0.0:

  • Removed onFID(): The onFID() function and all support for the First Input Delay (FID) metric have been removed, as it has been replaced by Interaction to Next Paint (INP).
  • Browser Support: Support is now limited to browsers that meet the Baseline Widely available criteria. If you need to support legacy browsers, you must transpile the library's code.

• v4.0.0:

  • Removed getXXX() functions: All getXXX() functions (e.g., getLCP, getCLS) that were deprecated in v3 have been removed. You must use the onXXX() callback functions instead (e.g., onLCP, onCLS).
  • Attribution Renaming: Several fields in the attribution objects were renamed for clarity (e.g., waitingTime to waitingDuration, eventTarget to interactionTarget).

• v3.0.0:

  • The isFinal flag was removed from metric objects. The final value is now passed when the page visibility state changes to 'hidden'.

Recommendation:
Given the number of breaking changes, developers must carefully review their implementation. Key actions include:

1. Replace any usage of onFID with onINP.
2. Replace all getXXX() function calls with their onXXX() counterparts.
3. If using the attribution build, update your code to use the renamed fields.
4. Review the new soft navigation support to understand its impact on your analytics.

Sources: Official Changelog, v4 Upgrade Guide, v5 Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.