Ad Technologies

How Does the Prebid.js 9.0 Update Signals Change in AdTech?

min read
February 20, 2026
By
Meet
How Does the Prebid.js 9.0 Update Signals Change in AdTech
Ad Technologies
Table of contents
TL;DR

The essential Prebid.js 10.x updates publishers need to make so ads keep running correctly and demand stays intact.

-Prebid.js 10.x removes old modules and APIs, so older builds, video setups, and identity fields will stop working unless they’re updated

-Identity now relies on EIDs, and video ads must declare plcmt explicitly, so outdated configs will cause missing bids or misclassified inventory

-Moving site and device settings into ORTB2, checking CMP consent signals, and rebuilding with supported modules keeps auctions stable, privacy-safe, and ready for    11.x

Prebid.js 10.x introduces structural changes that affect how publishers manage identity, video placements, privacy requirements, and PAAPI workflows. Building on the cleanup that began in 9.0, this release formalizes several standards that have been in transition across the ecosystem.

Let's break down the major updates and what they mean for publishers today. 

Removed Modules and Breaking API Changes

Modules Removed (10.x)

A wide range of outdated and under-maintained modules were removed, including:

  • Numerous legacy bid adapters that no longer aligned with ecosystem standards
  • Several analytics modules with declining adoption
  • Deprecated video integrations (e.g., legacy DFP video paths)
  • Bidder companion scripts
  • Multiple internal utility modules with redundant responsibilities

Prebid.js 10.x also removes or replaces several long-standing API conveniences:

Removed / Updated APIs

  • sendTargetingKeys → fully removed
  • getBidResponses() and getNoBidsForAdUnitCode() → switched to modern array-based structures
  • Bid objects no longer include deprecated fields like statusMessage or getStatusCode()
  • Certain legacy configuration keys now either trigger explicit error logs or silent ignores, depending on the parameter. Consult module-specific release notes before relying on earlier field names.

Action Items

  • Audit your Prebid build for removed modules
  • Update any publisher code relying on deprecated APIs
  • Review all peripheral modules, especially custom adapters or analytics setups

The goal: reduce surface area, reduce tech debt, and improve long-term maintainability for publishers and module maintainers.

Identity, EIDs, and Governance: Shift in User Data Handling

  1. bid.userId deprecation has begun but is still temporarily supported.

    Many User ID modules continue to backfill bid.userId for backward compatibility in Prebid 10.x, but the full transition to EID-based structures will be completed in Prebid 11.x. These structures include:

    • userIdAsEids
    • ortb2.user.ext.eids

    This transition ensures a cleaner, more standardized identity format across SSPs, DSPs, and analytics pipelines.

  1. Schain becomes explicit First-Party Data

    The supply chain object must be declared in one of:

    • ortb2.source.schain
    • ortb2.source.ext.schain

    This shift reflects a maturing ecosystem where supply-path transparency is a mandatory requirement, not an optional enhancement.

  1. Tightened storage and consent expectations for User ID modules
    Prebid.js indicates that storage access for User ID submodules may be restricted in the near future.
    To remain compliant, modules must align with:
  • Updated purpose categories
  • Explicit publisher-purpose consents
  • Modernized consent-object handling

Review & Update

  • Ensure your identity configuration uses EIDs rather than deprecated fields.
  • Verify that your CMP provides the required publisher-purpose consent for SharedID and similar modules.
  • Update any custom identity adapters to use the modern storage hooks

Privacy and Consent Management

Prebid.js 10.x further aligns privacy modules with TCF and ORTB2 standards.

Important Changes

  • The TCF Control Module now interprets undefined Purpose 4 and 7 signals as “allowed for publisher‑purpose” use, rather than blocking by default. It still respects explicit CMP consent values.
  • Privacy logic is more deterministic, fewer edge cases where consent is inconsistently interpreted
  • Future restrictions on “vendorless” modules require publishers to rely more heavily on publisher-purpose consent
  • Privacy modules now map cleanly to ORTB2, improving the bidstream integrity

Review & Update

  • Validate CMP configuration for publisher-purpose flags
  • Ensure all privacy modules are updated to their 10.x behavior
  • Check whether the default TCF purpose logic affects existing bidders

Video Advertising: ORTB2 Placement Requirements

Prebid.js 10.x finalizes the changes to video ORTB2 behaviors introduced earlier.

Key Video Updates in 10.x

  1. No placement inference from context
    • Prebid.js no longer infers plcmt from context
    • For in-stream units, define plcmt inside ortb2Imp.video.plcmt. Outstream contexts may still infer plcmt = 4 automatically, but all other inference paths are removed.
  2. Outstream remains the only inference exception
    • If context = "outstream", inferring plcmt = 4 is permitted
    • All other inference paths are removed
  3. ORTB2 structures cleaned up for consistency
    • Better alignment with IAB standards
    • Less discrepancy across adapters
    • Reduced risk of downstream misclassification

Steps to Take

  • Explicitly set plcmt for every video ad unit
  • Review custom players for correct ORTB2 mapping

PAAPI (Privacy Sandbox) Updates

Prebid.js 10.x introduces updates to PAAPI integration, replacing legacy FLEDGE-style configuration and improving compatibility with GPT.js.

Key Updates

  • Inside PAAPI configuration objects, the autoConfig flag has been replaced by a nested parameter controlling how Prebid synchronizes GPT targeting and auction configuration.

    This change is still experimental and not available as a global configWithTargeting switch.

  • The experimental PAAPI module currently supports:
    • Full auction configuration
    • IGB response objects
    • Component seller usage
    • Publisher-designated TLS and GPT.js TLS submodules

Updates to make: 

  • Update PAAPI configuration to reflect new defaults
  • Review whether publisher-level TLS, GPT-driven TLS, or custom component sellers are required
  • Confirm bid adapter compatibility with PAAPI extensions

Publisher-Facing Configuration Changes

Prebid 10.x includes several configuration shifts designed to streamline future development.

Key Changes

  1. pbadslot has been deprecated
    • Explicit setting is discouraged
    • Future Prebid versions will remove population entirely
    • Publishers should rely on ortb2Imp.ext.gpid instead
  2. Top-level configuration removal

    Fields like site, app, and device are no longer supported at the top level. All must be placed in:

    ortb2: { site, app, device }

  3. Default timing updates
    • Updated S2S tmax
    • Revised User ID module default timeouts

4. Topics API changes

Publishers must now explicitly define which frames are used for Topics collection, an important signal for privacy governance.

Action Items

  • Audit Prebid configuration for deprecated fields
  • Move all site/app/device settings into ortb2
  • Update any legacy topic-gathering frames

Why Prebid.js 10.x Matters

The era of implicit behavior in AdTech is ending.

Prebid.js 10.x pushes the ecosystem toward:

  • Explicit ORTB2
  • Explicit identity
  • Explicit consent governance
  • Explicit video placement
  • Explicit PAAPI control
  • Explicit module usage

As the industry shifts toward privacy-first design and browser-based auctioning, the only sustainable path is clarity and standardization.

Frequently Asked Questions

1. How do I upgrade from Prebid.js 9 to 10 without breaking ads?

Start by removing deprecated modules, updating identity settings to EIDs, replacing old video context inference with explicit plcmt values, and validating consent signals from your CMP. Then rebuild Prebid using only supported modules.

2. Which modules were removed in Prebid.js 10 and need immediate replacement?

Prebid.js 10 removes multiple outdated bid adapters, older analytics modules, legacy DFP video paths, companion scripts, and internal utilities. Any publisher using these must replace them or remove the dependency.

3. How does Prebid.js 10 change my header bidding setup?

Header bidding setups must define ORTB2 fields explicitly, especially for identity and video. Deprecated APIs like sendTargetingKeys no longer work, and cookie banner consent signals must be mapped correctly to TCF and ORTB2.

4. How does Prebid.js 10 affect Core Web Vitals?

Prebid.js 10 reduces unused modules, cleans up deprecated code, and encourages explicit configuration. This cuts script weight and helps stabilize CLS and FID by removing older, inconsistent behaviors.

Meet the author

Meet

Explore insights from Sandhya Soans on ad tech, revenue optimization, and the latest tools to elevate your digital advertising game.

LinkedIn

Explore other blogs in this category