fix(deps): update dependency web-vitals to v4

[descope]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
web-vitals	dependencies	major	3.5.1 -> 4.2.4

---

Release Notes

GoogleChrome/web-vitals (web-vitals)

v4.2.4

Compare Source

• Fix memory leak in registering new event listeners on every keydown and click (#​554)

v4.2.3

Compare Source

• Fix missing LoAF entries in INP attribution (#​512)

v4.2.2

Compare Source

• Fix interaction count after bfcache restore (#​505)

v4.2.1

Compare Source

• Fix compatibility issues with TypeScript v5.5 (#​497)

v4.2.0

Compare Source

• Refactor INP attribution code to fix errors on Windows 10 (#​495)

v4.1.1

Compare Source

• Fix pending LoAF cleanup logic (#​493)

v4.1.0

Compare Source

• Move the support check to the top of the onINP() function (#​490)
• Fix missing LoAF attribution when entries are dispatched before event entries (#​487)

v4.0.1

Compare Source

• Add the ReportCallback type back but deprecate it (#​483)

v4.0.0

Compare Source

[!NOTE]
See the upgrading to v4 guide for a complete list of all API changes in version 4.

• [BREAKING] Update types to support more generic usage (#​471)
• [BREAKING] Split waitingDuration to make it easier to understand redirect delays (#​458)
• [BREAKING] Rename TTFBAttribution fields from *Time to *Duration (#​453)
• [BREAKING] Rename resourceLoadTime to resourceLoadDuration in LCP attribution (#​450)
• [BREAKING] Add INP breakdown timings and LoAF attribution (#​442)
• [BREAKING] Deprecate onFID() and remove previously deprecated APIs (#​435)
• Expose the target element in INP attribution (#​479)
• Save INP target after interactions to reduce null values when removed from the DOM (#​477)
• Cap TTFB in attribution (#​440)
• Fix reportAllChanges behavior for LCP when library is loaded late (#​468)

v3.5.2

Compare Source

• Pick the first non-null target for INP attribution (#​421)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
auth-hosting	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 21, 2025 10:58am
auth-hosting-sandbox-us	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 21, 2025 10:58am
nir-itai-playground	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 21, 2025 10:58am

5 Skipped Deployments

Name	Status	Preview	Comments	Updated (UTC)
auth-hosting-dev	⬜️ Ignored (Inspect)	Visit Preview		Apr 21, 2025 10:58am
auth-hosting-euc1	⬜️ Ignored (Inspect)	Visit Preview		Apr 21, 2025 10:58am
auth-hosting-sandbox	⬜️ Ignored (Inspect)	Visit Preview		Apr 21, 2025 10:58am
auth-hosting-star1	⬜️ Ignored (Inspect)	Visit Preview		Apr 21, 2025 10:58am
auth-hosting-star2	⬜️ Ignored (Inspect)	Visit Preview		Apr 21, 2025 10:58am

[descope]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[descope]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[vercel]

Your Vercel team allenzhou is not permitted to deploy from this git repository. Contact an administrator to add github organization descope as a Protected Git Scope in allenzhou on Vercel. Once added, commit again to see your changes.

Learn more: https://vercel.com/docs/security/protected-git-scopes