chore(deps): update faro-web-sdk monorepo to v2.3.1

[renovate-sh-app]

This PR contains the following updates:

Package	Change	Age	Confidence
@grafana/faro-web-sdk (source)	2.2.4 → 2.3.1
@grafana/faro-web-tracing (source)	2.2.4 → 2.3.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grafana/faro-web-sdk (@​grafana/faro-web-sdk)

v2.3.1

Compare Source

• Fix (@grafana/faro-web-sdk): Prevent infinite recursion in session meta sync when session
  attributes contain values not surviving JSON serialization such as undefined (#​1956).

• Chore (@grafana/faro-*): Updated multiple dependencies to address security vulnerabilities
  (#​1948, #​1941).

v2.3.0

Compare Source

• Feature (@grafana/faro-web-sdk): Fetch transport now supports async dynamic header values.
  Each header value can be a function returning Promise<string>, resolved at request time
  (e.g. for token refresh). Sync dynamic headers (() => string) continue to work (#​1490).

• Feature (@grafana/faro-core): Add optional fingerprint attribute to exception events for
  custom error grouping. The fingerprint can be passed via pushError options or set in the
  beforeSend hook.

• Feature (@grafana/faro-instrumentation-replay): Enable full input and text
  masking by default (maskAllInputs: true, maskTextSelector: '*') (#​1926).

• Feature (@grafana/faro-instrumentation-replay): Add samplingRate option to
  ReplayInstrumentationOptions to decouple replay coverage from global session sampling (#​1919).

• Chore (@grafana/faro-*): Updated multiple dependencies to address security vulnerabilities
  (#​1931, #​1922, #​1930).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

---

Note

Low Risk
Lockfile-only dependency bumps for Grafana Faro and related OpenTelemetry/protobuf tooling; main risk is unexpected telemetry/runtime behavior changes from updated transitive packages.

Overview
Updates example/webview_demo/package-lock.json to resolve @grafana/faro-web-sdk, @grafana/faro-core, and @grafana/faro-web-tracing from 2.2.4 to 2.3.1.

This also refreshes related transitive deps (notably multiple @opentelemetry/* packages to 0.213.0/2.6.0, import-in-the-middle to 3.0.1, and protobufjs to 7.5.4), removing several previously nested OpenTelemetry lock entries.

^{Reviewed by Cursor Bugbot for commit 44da664. Bugbot is set up for automated code reviews on this repo. Configure here.}

[robert-northmind]

Superseded by #199 which consolidates all open Renovate dependency updates into a single PR.

[renovate-sh-app]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (^2.2.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.