Prebid.js 10.x introduces structural changes that affect how publishers manage identity, video placements, privacy requirements, and PAAPI workflows. Building on the cleanup that began in 9.0, this release formalizes several standards that have been in transition across the ecosystem.
Let's break down the major updates and what they mean for publishers today.
Removed Modules and Breaking API Changes
Modules Removed (10.x)
A wide range of outdated and under-maintained modules were removed, including:
- Numerous legacy bid adapters that no longer aligned with ecosystem standards
- Several analytics modules with declining adoption
- Deprecated video integrations (e.g., legacy DFP video paths)
- Bidder companion scripts
- Multiple internal utility modules with redundant responsibilities
Prebid.js 10.x also removes or replaces several long-standing API conveniences:
Removed / Updated APIs
-
sendTargetingKeys → fully removed
-
getBidResponses() and
getNoBidsForAdUnitCode()
→ switched to modern array-based structures
-
Bid objects no longer include deprecated fields like
statusMessage or
getStatusCode()
-
Certain legacy configuration keys now either trigger explicit error logs or silent ignores,
depending on the parameter. Consult module-specific release notes before relying on earlier field names.
Action Items
- Audit your Prebid build for removed modules
- Update any publisher code relying on deprecated APIs
- Review all peripheral modules, especially custom adapters or analytics setups
The goal: reduce surface area, reduce tech debt, and improve long-term maintainability for publishers and module maintainers.
Identity, EIDs, and Governance: Shift in User Data Handling
-
bid.userId
deprecation has begun but is still temporarily supported.
Many User ID modules continue to backfill
bid.userId
for backward compatibility in Prebid 10.x, but the full transition to EID-based
structures will be completed in Prebid 11.x. These structures include:
-
userIdAsEids
-
ortb2.user.ext.eids
This transition ensures a cleaner, more standardized identity format across SSPs,
DSPs, and analytics pipelines.
-
Schain becomes explicit First-Party Data
The supply chain object must be declared in one of:
-
ortb2.source.schain
-
ortb2.source.ext.schain
This shift reflects a maturing ecosystem where supply-path transparency is a mandatory
requirement, not an optional enhancement.
- Tightened storage and consent expectations for User ID modules
Prebid.js indicates that storage access for User ID submodules may be restricted in the near future.
To remain compliant, modules must align with:
- Updated purpose categories
- Explicit publisher-purpose consents
- Modernized consent-object handling
Review & Update
- Ensure your identity configuration uses EIDs rather than deprecated fields.
- Verify that your CMP provides the required publisher-purpose consent for SharedID and similar modules.
- Update any custom identity adapters to use the modern storage hooks
Privacy and Consent Management
Prebid.js 10.x further aligns privacy modules with TCF and ORTB2 standards.
Important Changes
- The TCF Control Module now interprets undefined Purpose 4 and 7 signals as “allowed for publisher‑purpose” use, rather than blocking by default. It still respects explicit CMP consent values.
- Privacy logic is more deterministic, fewer edge cases where consent is inconsistently interpreted
- Future restrictions on “vendorless” modules require publishers to rely more heavily on publisher-purpose consent
- Privacy modules now map cleanly to ORTB2, improving the bidstream integrity
Review & Update
- Validate CMP configuration for publisher-purpose flags
- Ensure all privacy modules are updated to their 10.x behavior
- Check whether the default TCF purpose logic affects existing bidders
Video Advertising: ORTB2 Placement Requirements
Prebid.js 10.x finalizes the changes to video ORTB2 behaviors introduced earlier.
Key Video Updates in 10.x
-
No placement inference from context
-
Prebid.js no longer infers
plcmt
from
context
-
For in-stream units, define
plcmt
inside
ortb2Imp.video.plcmt.
Outstream contexts may still infer
plcmt = 4
automatically, but all other inference paths are removed.
-
Outstream remains the only inference exception
-
If
context = "outstream",
inferring
plcmt = 4
is permitted
- All other inference paths are removed
-
ORTB2 structures cleaned up for consistency
- Better alignment with IAB standards
- Less discrepancy across adapters
- Reduced risk of downstream misclassification
Steps to Take
-
Explicitly set
plcmt
for every video ad unit
-
Review custom players for correct ORTB2 mapping
PAAPI (Privacy Sandbox) Updates
Prebid.js 10.x introduces updates to PAAPI integration, replacing legacy FLEDGE-style
configuration and improving compatibility with GPT.js.
Key Updates
Updates to make:
- Update PAAPI configuration to reflect new defaults
- Review whether publisher-level TLS, GPT-driven TLS, or custom component sellers are required
- Confirm bid adapter compatibility with PAAPI extensions
Publisher-Facing Configuration Changes
Prebid 10.x includes several configuration shifts designed to streamline future development.
Key Changes
-
pbadslot
has been deprecated
- Explicit setting is discouraged
- Future Prebid versions will remove population entirely
-
Publishers should rely on
ortb2Imp.ext.gpid
instead
-
Top-level configuration removal
Fields like
site,
app, and
device
are no longer supported at the top level. All must be placed in:
ortb2: { site, app, device }
-
Default timing updates
-
Updated S2S
tmax
- Revised User ID module default timeouts
4. Topics API changes
Publishers must now explicitly define which frames are used for Topics collection,
an important signal for privacy governance.
Action Items
-
Audit Prebid configuration for deprecated fields
-
Move all site/app/device settings into
ortb2
-
Update any legacy topic-gathering frames
Why Prebid.js 10.x Matters
The era of implicit behavior in AdTech is ending.
Prebid.js 10.x pushes the ecosystem toward:
- Explicit ORTB2
- Explicit identity
- Explicit consent governance
- Explicit video placement
- Explicit PAAPI control
- Explicit module usage
As the industry shifts toward privacy-first design and browser-based auctioning, the only sustainable path is clarity and standardization.