chore(deps): update dependency posthog-js to v1.372.3#1052
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): update dependency posthog-js to v1.372.3#1052renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
![renovate-approve-2[bot]](https://avatars.githubusercontent.com/in/62175?s=60&v=4){kind=small}
github-actions
Bot
added
qa:running
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
fd85dfa to
9f14241
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
9f14241 to
e9d4e21
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
e9d4e21 to
482668e
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
482668e to
2ef3595
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
2ef3595 to
9037ecb
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
9037ecb to
a0637b2
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
a0637b2 to
ef53804
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
ef53804 to
c94fb8e
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
c94fb8e to
a51ef35
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
a51ef35 to
961e78e
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
961e78e to
0c3ccf9
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
0c3ccf9 to
08523c3
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
4186e19 to
7212c1a
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
7212c1a to
9b91f71
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
9b91f71 to
bf709bd
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
bf709bd to
2331b1f
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
2331b1f to
9be6e4a
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
9be6e4a to
8de1f09
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
8de1f09 to
0828d86
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
0828d86 to
bb384e6
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
bb384e6 to
2c64952
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
2c64952 to
0b89ff1
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
0b89ff1 to
ac4098b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
ac4098b to
bee73f9
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/posthog-js-1.x
branch
from
bee73f9 to
b01af85
Compare
renovate
Bot
changed the title
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.312.0→1.372.3Release Notes
PostHog/posthog-js (posthog-js)
v1.372.3Compare Source
1.372.3
Patch Changes
5b8efc3Thanks @lucasheriques! - Add browser survey translation rendering and language tracking.(2026-04-27)
v1.372.2Compare Source
1.372.2
Patch Changes
cba2570Thanks @veryayskiy! - Fix autofocus(2026-04-27)
v1.372.1Compare Source
1.372.1
Patch Changes
70508dfThanks @dustinbyrne! - Avoid usingBlob.stream()for native async gzip compression to prevent SafariNotReadableErrorstream failures.(2026-04-24)
70508df]:v1.372.0Compare Source
1.372.0
Minor Changes
eaa1322Thanks @veryayskiy! - You cannot write to a resolve ticket. Start a new one.(2026-04-24)
Patch Changes
v1.371.4Compare Source
1.371.4
Patch Changes
3c4fc1eThanks @fasyy612! - bump rrweb to 0.0.60(2026-04-24)
v1.371.3Compare Source
1.371.3
Patch Changes
61cf83eThanks @dustinbyrne! - Fix session recording in the full no-external browser bundles(2026-04-24)
daf028d]:v1.371.2Compare Source
1.371.2
Patch Changes
96f19b7Thanks @turnipdabeets! - Lift OTLP log serialization helpers from posthog-js into @posthog/core so theupcoming React Native logs feature consumes the same builders. Browser gains
two fixes as a side effect: NaN and ±Infinity attribute values no longer get
silently dropped during JSON encoding, and the scope.version OTLP field is
now populated with the SDK version (changes the server's instrumentation_scope
column from "posthog-js@" to "posthog-js@"). (2026-04-23)
96f19b7]:v1.371.1Compare Source
1.371.1
Patch Changes
2da17e8Thanks @marandaneto! - Classify SDK-owned persistence keys with an explicit event exposure policy so new internal persistence state must be intentionally marked as event-visible, hidden, or derived.(2026-04-23)
v1.371.0Compare Source
1.371.0
Patch Changes
#3432
1a8b727Thanks @richardsolomou! - refactor: rename__add_tracing_headerstoaddTracingHeaders. The__prefix signalled an internal/experimental option, but the config is a public API (documented for linking LLM traces to session replays).__add_tracing_headerscontinues to work as a deprecated alias on the browser SDK.Also exposes
patchFetchForTracingHeadersfrom@posthog/coreso non-browser SDKs can reuse the implementation. (2026-04-23)Updated dependencies [
1a8b727]:v1.370.1Compare Source
1.370.1
Patch Changes
6f19ce8Thanks @marandaneto! - fix(surveys): guard survey seen localStorage access(2026-04-22)
v1.370.0Compare Source
1.370.0
Minor Changes
922a1c1Thanks @hpouillot! - Add exception steps to error tracking (aka breadcrumbs)(2026-04-22)
Patch Changes
922a1c1]:v1.369.5Compare Source
1.369.5
Patch Changes
1a0b58d]:v1.369.4Compare Source
1.369.4
Patch Changes
d61bce1Thanks @sampennington! - fix(cookieless): start in cookieless mode when opt_out_capturing_by_default is set(2026-04-21)
v1.369.3Compare Source
1.369.3
Patch Changes
#3419
ea08727Thanks @haacked! - Reinstate$feature_flag_payloadsand$surveys_activatedin captured event properties.(2026-04-18)
#3416
3d8b2e2Thanks @feliperalmeida! - Updated dependencies: - protobufjs@7.5.5(2026-04-18)
Updated dependencies []:
v1.369.2Compare Source
1.369.2
Patch Changes
4a65604Thanks @dustinbyrne! - Add a preview flag for versioned browser lazy bundle asset paths.(2026-04-16)
4a65604]:v1.369.1Compare Source
1.369.1
Patch Changes
#3393
85ae4d9Thanks @haacked! - Exclude active feature flag payloads from event properties(2026-04-16)
#3392
00cd1ceThanks @haacked! - Fix unnecessary persisted config and activation properties (including product tours, surveys, and session recording config) added to captured events(2026-04-16)
Updated dependencies []:
v1.369.0Compare Source
1.369.0
Minor Changes
#3342
eea5260Thanks @ksvat! - Account for property filters on events in recording triggers for v2 triggers(2026-04-14)
#3281
b1fd228Thanks @ksvat! - Add session replay trigger groups handling (V2)(2026-04-14)
Patch Changes
v1.368.2Compare Source
1.368.2
Patch Changes
f1bea33Thanks @marandaneto! - Disable native gzip compression after a NotReadableError in the browser SDK(2026-04-14)
v1.368.1Compare Source
1.368.1
Patch Changes
d7c71b1Thanks @dmarticus! - Fix bootstrapped feature flags being overwritten by partial /flags response whenadvanced_only_evaluate_survey_feature_flagsis enabled(2026-04-14)
v1.368.0Compare Source
1.368.0
Minor Changes
3fcf5c4Thanks @jonmcwest! - Add posthog.captureLog() API for sending structured log entries to PostHog logs(2026-04-13)
Patch Changes
f5fe0a8Thanks @ksvat! - bump rrweb version(2026-04-13)
3fcf5c4]:v1.367.0Compare Source
1.367.0
Minor Changes
353be9aThanks @dustinbyrne! - feat: Add support for pre-loaded remote-config(2026-04-09)
Patch Changes
v1.366.2Compare Source
1.366.2
Patch Changes
575e354Thanks @lucasheriques! - Add a hover state to numeric survey rating options so they provide clearer pointer feedback before selection.(2026-04-09)
v1.366.1Compare Source
1.366.1
Patch Changes
802bf39Thanks @jabahamondes! - Re-evaluate consent persistent store when config changes to support cross-subdomain consent sharing(2026-04-09)
v1.366.0Compare Source
1.366.0
Minor Changes
b599672Thanks @veryayskiy! - Add customer side identification(2026-04-09)
Patch Changes
v1.365.5Compare Source
1.365.5
Patch Changes
c735b08]:v1.365.4Compare Source
1.365.4
Patch Changes
3939856Thanks @lucasheriques! - Expose the current question index on.survey-boxvia adata-question-indexattribute. This gives consumers rendering surveys via the API a reliable way to know which question is currently displayed without parsing input ids or class names — works for every question type, including link questions which render no input or rating element.(2026-04-08)
v1.365.3Compare Source
1.365.3
Patch Changes
dbdddcaThanks @pauldambra! - Bump @posthog/rrweb packages to 0.0.56, which includes:v1.365.2Compare Source
1.365.2
Patch Changes
c387f6dThanks @pauldambra! - perf(replay): reduce memory and CPU cost of event compression by caching gzipped empty arrays and eliminating redundant JSON.stringify for size estimation(2026-04-08)
c387f6d]:v1.365.1Compare Source
1.365.1
Patch Changes
57ee5b2]:v1.365.0Compare Source
1.365.0
Minor Changes
fc5589fThanks @dmarticus! - preserve $set_once semantics in local flag evaluation cache(2026-04-07)
Patch Changes
fc5589f]:v1.364.7Compare Source
1.364.7
Patch Changes
b25b689Thanks @dustinbyrne! - fix: send $groupidentify for new groups even when no properties are provided(2026-04-03)
v1.364.6Compare Source
1.364.6
Patch Changes
68cd4e5Thanks @dustinbyrne! - Fix slim bundle + extension bundles crash caused by inconsistent property mangling(2026-04-02)
a01a3d5]:v1.364.5Compare Source
1.364.5
Patch Changes
#3309
197eedaThanks @marandaneto! - Extract CLI and sourcemap utilities from @posthog/core into @posthog/plugin-utils to remove cross-spawn from React Native dependencies(2026-04-01)
#3312
c5feb5cThanks @TueHaulund! - Bump @posthog/rrweb-* to 0.0.52 — adds error recovery to the canvas FPS snapshot pipeline, preventing canvas recording from permanently stopping when createImageBitmap or the worker encounters an error(2026-04-01)
#3315
7b944fcThanks @TueHaulund! - Bump @posthog/rrweb-* to 0.0.53 — fixes infinite recursion crash ("Maximum call stack size exceeded") when calling posthog.reset() or restarting the recorder on pages with shadow DOM elements (e.g. CometChat)(2026-04-01)
Updated dependencies [
197eeda]:v1.364.4Compare Source
1.364.4
Patch Changes
2365df5Thanks @TueHaulund! - fix: skip deep copy for snapshot/exception events to prevent stack overflow on deeply nested DOM trees(2026-03-31)
v1.364.3Compare Source
1.364.3
Patch Changes
bab5f3aThanks @dustinbyrne! - Strip workspace:* references from lib/package.json after build(2026-03-31)
v1.364.2Compare Source
1.364.2
Patch Changes
341caafThanks @marandaneto! - fix: wrap sendBeacon body in Blob to ensure Content-Type header is set(2026-03-30)
a863914]:v1.364.1Compare Source
1.364.1
Patch Changes
4bdfdbc]:v1.364.0Compare Source
1.364.0
Minor Changes
00a5079Thanks @pauldambra! - Reject the strings "undefined" and "null" in posthog.identify(). All invalid distinct IDs now log a critical console error (always visible, not debug-only).(2026-03-27)
Patch Changes
8d34289Thanks @marandaneto! - Use async native CompressionStream for gzip compression to avoid blocking the main thread(2026-03-27)
8d34289]:v1.363.6Compare Source
1.363.6
Patch Changes
32edaadThanks @pauldambra! - Bump @posthog/rrweb packages to 0.0.51, which includes:v1.363.5Compare Source
1.363.5
Patch Changes
#3278
c59dc90Thanks @dustinbyrne! - Add tree-shakeable ESM extension-bundles entry point for slim builds(2026-03-25)
#3274
ba08262Thanks @pauldambra! - fix: document visibility change shoudln't capture dead click(2026-03-25)
Updated dependencies [
ba08262]:v1.363.4Compare Source
1.363.4
Patch Changes
664a11bThanks @fasyy612! - bump rrweb dependency version(2026-03-24)
v1.363.3Compare Source
1.363.3
Patch Changes
42fbd41Thanks @marandaneto! - Reduce browser SDK bundle size by ~6.6 KB (-3.7%) through code modernization, build config tuning, string deduplication, enum-to-const conversions, and property access shorthand getters.(2026-03-23)
v1.363.2Compare Source
1.363.2
Patch Changes
#3267
e5ef520Thanks @ksvat! - bump rrweb dependency version(2026-03-23)
#3260
1435ec8Thanks @kyleswank! - Log warning instead of throwing error when session recording script is blocked by ad blockers(2026-03-23)
Updated dependencies []:
v1.363.1Compare Source
1.363.1
Patch Changes
314120a]:v1.363.0Compare Source
1.363.0
Minor Changes
7efa558Thanks @dmarticus! - prevent silent identity switch during bootstrap and auto-identify anonymous users(2026-03-20)
Patch Changes
1acd6fdThanks @dmarticus! - handle plain array and object forms in overrideFeatureFlags(2026-03-20)
1acd6fd]:v1.362.0Compare Source
1.362.0
Minor Changes
ff8a93eThanks @sampennington! - Fixed $set_once initial person properties (e.g. $initial_current_url) not being included with $identify calls when they had already been sent with a prior event. This ensures initial properties are reliably set when identifying users across subdomains, even if an anonymous event was captured first.(2026-03-18)
Patch Changes
9cd2313]:v1.361.1Compare Source
1.361.1
Patch Changes
c265d62Thanks @marandaneto! - fix: preserve_overrideSDKInfofrom terser mangling so wrapper SDKs can call it(2026-03-18)
v1.361.0Compare Source
1.361.0
Minor Changes
#3201
552c018Thanks @frankh! - Add a serviceName config option to logs config(2026-03-18)
#3240
e4a58d0Thanks @marandaneto! - Add internal_overrideSDKInfomethod to allow wrapper SDKs to override$liband$lib_versionevent properties(2026-03-18)
#3241
fe1fd7bThanks @dustinbyrne! - feat: addadvanced_feature_flags_dedup_per_sessionconfig option to scope$feature_flag_calleddeduplication to the current session(2026-03-18)
Patch Changes
#3239
bf4f078Thanks @jonathanlab! - fix: debug mode not persisting across page navigations(2026-03-18)
#3228
8773fdfThanks @TueHaulund! - fix: restart session recorder when session rotates externally while idle, preventing "Recording not found" for sessions where analytics events triggered session rotation(2026-03-18)
Updated dependencies [
552c018,fe1fd7b]:v1.360.2Compare Source
1.360.2
Patch Changes
bc30c2dThanks @dustinbyrne! - fix: Calling reset() now automatically reloads feature flags(2026-03-13)
bc30c2d,bc30c2d]:v1.360.1Compare Source
1.360.1
Patch Changes
4009c15]:v1.360.0Compare Source
1.360.0
Patch Changes
#3213
db089fdThanks @TueHaulund! - fix(replay): treat legacy configs without cache_timestamp as freshConfigs persisted by older SDK versions never include a cache_timestamp.
Defaulting to 0 treats them as always stale, causing the persisted config
to be cleared before start() runs — so recording never starts for
customers on older core SDK versions paired with the latest CDN recorder. (2026-03-09)
#3207
c5a37cbThanks @dustinbyrne! - fix: PostHogFeatureFlags uses a TreeShakeable type(2026-03-09)
Updated dependencies [
c5a37cb]:v1.359.1Compare Source
1.359.1
Patch Changes
2b0cd52Thanks @marandaneto! - chore: upgrade dompurify to 3.3.2(2026-03-06)
v1.359.0Compare Source
1.359.0
Minor Changes
9180726Thanks @dustinbyrne! - feat: Tree-shake feature flags(2026-03-05)
Patch Changes
v1.358.1Compare Source
1.358.1
Patch Changes
#3191
9f41d26Thanks @TueHaulund! - fix(replay): fall back to persisted config when remote config fetch failsWhen the remote config fetch failed (network error, ad blocker, CDN outage), the SDK received an empty
{}response with nosessionRecordingkey. TheonRemoteConfighandler returned early without ever setting_receivedFlags = true, leaving the recording permanently stuck inpending_configstatus for the entire page session.This removes the
_receivedFlagsgate entirely. The 1-hour TTL on persisted config (added in #3051, increased from 5 minutes) and the stale-config retry in_onScriptLoaded(added in #3093) already prevent recording from starting with outdated config. The additional gate was redundant and created a deadlock when the config fetch failed.Now when the config fetch fails,
startIfEnabledOrStop()is called and falls back to persisted config from a previous page load. If no persisted config exists (first-ever visit), recording is correctly disabled rather than silently stuck. (2026-03-04)#3198
9d0df0eThanks @TueHaulund! - Reduce session replay memory pressure by tracking per-event sizes in SnapshotBuffer, eliminating redundant JSON.stringify calls during buffer operations. Also bumps @posthog/rrweb to 0.0.46 which uses FNV-1a hash-based canvas frame deduplication instead of storing full base64 strings.(2026-03-04)
Updated dependencies []:
v1.358.0Compare Source
1.358.0
Minor Changes
0e08337Thanks @dustinbyrne! - feat: Tree-shake surveys, toolbar, exceptions, conversations, logs, experiments(2026-03-03)
Patch Changes
20c1ff2Thanks @dustinbyrne! - Add Extension interface for tree-shakable extensions(2026-03-03)
v1.357.2Compare Source
1.357.2
Patch Changes
f485c92Thanks @slshults! - fix: Move tablet detection logic into detectDeviceType for consistent classification across all call sites(2026-03-03)
v1.357.1Compare Source
1.357.1
Patch Changes
91223c5Thanks @adboio! - avoid re-checking URLs if they have not changed(2026-03-02)
5e8d5fc]:v1.357.0Compare Source
1.357.0
Minor Changes
4f885c0Thanks @marandaneto! - feat: add local sampleRate config for session recording(2026-03-02)
Patch Changes
0dce119Thanks @TueHaulund! - Bump @posthog/rrweb-* to 0.0.45 — reuses a single OffscreenCanvas in the canvas recording worker instead of allocating a new one per frame, fixing a memory leak in Safari where GPU-backed canvas resources were not being garbage collected promptly(2026-03-02)
4f885c0]:Configuration
📅 Schedule: (UTC)
* 0-4,22-23 * * 1-5)* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.