Bump the posthog group across 1 directory with 4 updates

[dependabot]

Bumps the posthog group with 1 update in the / directory: posthog-js.

Updates posthog-js from 1.417.1 to 1.430.2

Release notes

Sourced from posthog-js's releases.

posthog-js@1.430.2

1.430.2

Patch Changes

• #4897 a140fa7 Thanks @​fasyy612! - Send each replay session's snapshots in their own request so a session rotation no longer files the new session's first snapshot under the old session. (2026-09-11)

posthog-js@1.430.1

1.430.1

Patch Changes

• #4913 0224a83 Thanks @​github-actions! - Fix scroll depth metrics carrying over between pages after client-side navigation. (2026-09-11)

posthog-js@1.430.0

1.430.0

Minor Changes

• #4834 5f2b0fe Thanks @​posthog! - Add posthog-js/full, posthog-js/no-external and posthog-js/full/no-external entry points, so desktop apps and other CSP-restricted builds can require a bundle instead of deep-importing an ES module from dist/ (2026-09-11)

Patch Changes

• #4860 8207df8 Thanks @​posthog! - Back off automatic feature flag refreshes on idle visible pages only when remote_config_refresh_interval_ms is omitted, preserving explicitly configured intervals. (2026-09-11)

• #4901 65aafcc Thanks @​marandaneto! - Preserve batched event timestamps so delayed retries do not shift event times and prevent deduplication. (2026-09-11)

• Updated dependencies [8207df8]:

  • @​posthog/types@​1.411.1

posthog-js@1.429.5

1.429.5

Patch Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Cap the retry delay for log exports at 30 seconds, the ceiling the logs contract states. It previously doubled to 64 times the flush interval — 192s on web, 640s on React Native — so a log export now resumes within 30 seconds of a failing endpoint recovering, at the cost of more retry requests while that endpoint is down. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Keep backing off a failing log flush while new records arrive, instead of the next record resetting the retry to the flush interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Logs and metrics now always send service.name and telemetry.sdk.*, even when a resourceAttributes value is too large to encode in full. Previously that value could crowd them out, and the records reached PostHog with no service attribution. (2026-09-10)

• Updated dependencies [19e78cc, 19e78cc, 19e78cc, 19e78cc, 19e78cc, 19e78cc, 19e78cc]:

  • @​posthog/core@​1.53.0
  • @​posthog/types@​1.411.0

... (truncated)

Commits

• 1f9338e chore: update versions and lockfile [version bump]
• a140fa7 fix(replay): send each replay session's snapshots in their own reqest (#4897)
• 652a5bc feat(react-native): expose rageClickConfig for native iOS rage click detectio...
• cc6373b feat(mcp): capture agents feedback (#4870)
• bbc0c69 chore: update versions and lockfile [version bump]
• 18ae6bb feat(react-native): add app and Expo update context to exceptions (#4899)
• 0d50fff chore: update versions and lockfile [version bump]
• 0224a83 fix: $prev_pageview_max_scroll* is kept for the whole tab: resetContext() nev...
• 1e3e931 ci: audit egress on credential-bearing Linux jobs (#4892)
• b6fa51b ci: enforce consistent seven-day dependency cooldowns (#4893)
• Additional commits viewable in compare view

Updates @posthog/browser-common from 0.5.0 to 0.8.3

Release notes

Sourced from @​posthog/browser-common's releases.

@​posthog/browser-common@​0.8.3

0.8.3

Patch Changes

• #4899 18ae6bb Thanks @​marandaneto! - Share the trySafe utility through @​posthog/core. (2026-09-11)
• Updated dependencies [18ae6bb]:
  • @​posthog/core@​1.53.2

Changelog

Sourced from @​posthog/browser-common's changelog.

0.8.3

Patch Changes

• #4899 18ae6bb Thanks @​marandaneto! - Share the trySafe utility through @​posthog/core. (2026-09-11)
• Updated dependencies [18ae6bb]:
  • @​posthog/core@​1.53.2

0.8.2

Patch Changes

• #4803 87b34af Thanks @​marandaneto! - Preserve Error details, causes, aggregate errors, and custom enumerable properties in event properties, including cross-realm Errors. Apply string truncation to ordinary capture properties and retain custom toJSON serialization for exception additional properties. (2026-09-07)

0.8.1

Patch Changes

• #4804 988f03a Thanks @​marandaneto! - Recover autocapture targets for dropdown clicks retargeted to the page root, and attribute nested SVG icon clicks to their enclosing button or link while preserving privacy checks. (2026-09-07)

0.8.0

Minor Changes

• #4809 3a5b322 Thanks @​marandaneto! - Add best-effort in-app browser attribution using $webview_app and $webview_app_version, without changing existing $browser or $browser_version values. Detect explicit user-agent markers for Facebook, Facebook Lite, Messenger, Instagram, Threads, LinkedIn, Twitter, TikTok, WhatsApp, Snapchat, WeChat, LINE, Google, Bing, Pinterest, Naver, and KakaoTalk. Unknown apps and versions are omitted; missing markers do not imply a standalone browser. (2026-09-07)

Patch Changes

• Updated dependencies [3a5b322]:
  • @​posthog/core@​1.51.0

0.7.3

Patch Changes

• #4814 21dcebd Thanks @​posthog! - Prevent invalid clock values from breaking UUID generation and continue capturing replay chunks after a chunk fails. (2026-09-07)
• Updated dependencies [74ca945, 5e74132]:
  • @​posthog/core@​1.50.6
  • @​posthog/types@​1.409.1

0.7.2

Patch Changes

• #4732 f00e24d Thanks @​posthog! - Polyfill Array.prototype.findLast in the web vitals attribution bundles so they keep capturing on browsers older than Chrome 97 and Safari 15.4

... (truncated)

Commits

• bbc0c69 chore: update versions and lockfile [version bump]
• 18ae6bb feat(react-native): add app and Expo update context to exceptions (#4899)
• 4951873 build: remove nested builds and duplicate test runs (#4848)
• 369961c chore: update versions and lockfile [version bump]
• 87b34af fix: preserve Error details in event properties (#4803)
• 24a4193 chore: update versions and lockfile [version bump]
• 988f03a fix: capture dropdown clicks and attribute SVG button clicks (#4804)
• fc96d98 chore: update versions and lockfile [version bump]
• 3a5b322 feat(browser): capture best-effort webview app attribution (#4809)
• 575e078 chore: update versions and lockfile [version bump]
• Additional commits viewable in compare view

Updates @posthog/core from 1.48.1 to 1.53.3

Release notes

Sourced from @​posthog/core's releases.

@​posthog/core@​1.53.3

1.53.3

Patch Changes

• #4922 3786cff Thanks @​Mnigos! - Require final 2xx responses for successful writes while preserving immediate-call error handling. (2026-09-14)

@​posthog/core@​1.53.2

1.53.2

Patch Changes

• #4899 18ae6bb Thanks @​marandaneto! - Share the trySafe utility through @​posthog/core. (2026-09-11)

@​posthog/core@​1.53.1

1.53.1

Patch Changes

• #4908 4a3c74b Thanks @​turnipdabeets! - Child spans now share their parent's clock, so a child no longer appears to start before or end after its parent by up to a millisecond, or by more when the system clock is adjusted mid-trace. (2026-09-11)

@​posthog/core@​1.53.0

1.53.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

Patch Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Cap the retry delay for log exports at 30 seconds, the ceiling the logs contract states. It previously doubled to 64 times the flush interval — 192s on web, 640s on React Native — so a log export now resumes within 30 seconds of a failing endpoint recovering, at the cost of more retry requests while that endpoint is down. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Keep backing off a failing log flush while new records arrive, instead of the next record resetting the retry to the flush interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Stop a throwing getter in metrics.resourceAttributes from breaking every metrics export — the key is recorded as [Unserializable] instead. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Honor Retry-After when the ingestion endpoint refuses a logs or metrics batch, instead of retrying on the SDK's own schedule alone. A refusal naming a longer wait extends the one being served, up to five minutes from when it started. Retry delays now carry jitter so clients refused together do not return together, and metrics backs off exponentially across consecutive failures rather than retrying on a fixed interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Logs and metrics now always send service.name and telemetry.sdk.*, even when a resourceAttributes value is too large to encode in full. Previously that value could crowd them out, and the records reached PostHog with no service attribution. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Stop sending logs and metrics batches over 10 MiB, or too large to serialize at all, instead of spending a request to discover the endpoint refuses them.

... (truncated)

Changelog

Sourced from @​posthog/core's changelog.

1.53.3

Patch Changes

• #4922 3786cff Thanks @​Mnigos! - Require final 2xx responses for successful writes while preserving immediate-call error handling. (2026-09-14)

1.53.2

Patch Changes

• #4899 18ae6bb Thanks @​marandaneto! - Share the trySafe utility through @​posthog/core. (2026-09-11)

1.53.1

Patch Changes

• #4908 4a3c74b Thanks @​turnipdabeets! - Child spans now share their parent's clock, so a child no longer appears to start before or end after its parent by up to a millisecond, or by more when the system clock is adjusted mid-trace. (2026-09-11)

1.53.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

Patch Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Cap the retry delay for log exports at 30 seconds, the ceiling the logs contract states. It previously doubled to 64 times the flush interval — 192s on web, 640s on React Native — so a log export now resumes within 30 seconds of a failing endpoint recovering, at the cost of more retry requests while that endpoint is down. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Keep backing off a failing log flush while new records arrive, instead of the next record resetting the retry to the flush interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Stop a throwing getter in metrics.resourceAttributes from breaking every metrics export — the key is recorded as [Unserializable] instead. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Honor Retry-After when the ingestion endpoint refuses a logs or metrics batch, instead of retrying on the SDK's own schedule alone. A refusal naming a longer wait extends the one being served, up to five minutes from when it started. Retry delays now carry jitter so clients refused together do not return together, and metrics backs off exponentially across consecutive failures rather than retrying on a fixed interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Logs and metrics now always send service.name and telemetry.sdk.*, even when a resourceAttributes value is too large to encode in full. Previously that value could crowd them out, and the records reached PostHog with no service attribution. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Stop sending logs and metrics batches over 10 MiB, or too large to serialize at all, instead of spending a request to discover the endpoint refuses them. (2026-09-10)

• Updated dependencies [19e78cc]:

  • @​posthog/types@​1.411.0

... (truncated)

Commits

• 89ff860 chore: update versions and lockfile [version bump]
• 3786cff fix(core): reject terminal non-2xx write responses (#4922)
• bbc0c69 chore: update versions and lockfile [version bump]
• 18ae6bb feat(react-native): add app and Expo update context to exceptions (#4899)
• bc1cc15 chore: update versions and lockfile [version bump]
• 4a3c74b fix(traces): share the parent's clock basis across local child spans (#4908)
• 1bef871 chore: update versions and lockfile [version bump]
• 19e78cc feat(node): distributed tracing spans (#4579)
• 3c85b4e chore: update versions and lockfile [version bump]
• 0da006c fix(error-tracking): classify in_app by filename scheme (#4887)
• Additional commits viewable in compare view

Updates @posthog/types from 1.402.2 to 1.412.0

Release notes

Sourced from @​posthog/types's releases.

@​posthog/types@​1.412.0

1.412.0

Minor Changes

• #4918 c666606 Thanks @​pauldambra! - Add metrics.network config to record HTTP and HTTPS fetch and XMLHttpRequest durations as histograms, with an optional custom metric name and attributes. (2026-09-14)

@​posthog/types@​1.411.1

1.411.1

Patch Changes

• #4860 8207df8 Thanks @​posthog! - Back off automatic feature flag refreshes on idle visible pages only when remote_config_refresh_interval_ms is omitted, preserving explicitly configured intervals. (2026-09-11)

@​posthog/types@​1.411.0

1.411.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

@​posthog/types@​1.410.1

1.410.1

Patch Changes

• #4878 14ba783 Thanks @​dustinbyrne! - Allow null bootstrap values and treat null or empty distinct IDs as missing. (2026-09-10)

• #4831 9498567 Thanks @​posthog! - Log a console message when advanced_disable_feature_flags stops surveys from displaying (2026-09-10)

@​posthog/types@​1.410.0

1.410.0

Minor Changes

• #4707 b441eb2 Thanks @​posthog! - Segment integration: allow segment to accept an integration config with filterProperties, so customers can filter PostHog-generated enrichment properties before Segment sends an event to its destinations. Returning null or throwing leaves the original Segment event unenriched. (2026-09-09)

Patch Changes

• #4876 0c2a15f Thanks @​dustinbyrne! - Fix dead-click detection for text selection and editable caret gestures when mouse release is delayed, while continuing to report inert text clicks. (2026-09-09)

• #4733 24fa541 Thanks @​dustinbyrne! - fix(web): avoid reporting clicks that select or unselect text as dead clicks (2026-09-09)

... (truncated)

Changelog

Sourced from @​posthog/types's changelog.

1.412.0

Minor Changes

• #4918 c666606 Thanks @​pauldambra! - Add metrics.network config to record HTTP and HTTPS fetch and XMLHttpRequest durations as histograms, with an optional custom metric name and attributes. (2026-09-14)

1.411.1

Patch Changes

• #4860 8207df8 Thanks @​posthog! - Back off automatic feature flag refreshes on idle visible pages only when remote_config_refresh_interval_ms is omitted, preserving explicitly configured intervals. (2026-09-11)

1.411.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

1.410.1

Patch Changes

• #4878 14ba783 Thanks @​dustinbyrne! - Allow null bootstrap values and treat null or empty distinct IDs as missing. (2026-09-10)

• #4831 9498567 Thanks @​posthog! - Log a console message when advanced_disable_feature_flags stops surveys from displaying (2026-09-10)

1.410.0

Minor Changes

• #4707 b441eb2 Thanks @​posthog! - Segment integration: allow segment to accept an integration config with filterProperties, so customers can filter PostHog-generated enrichment properties before Segment sends an event to its destinations. Returning null or throwing leaves the original Segment event unenriched. (2026-09-09)

Patch Changes

• #4876 0c2a15f Thanks @​dustinbyrne! - Fix dead-click detection for text selection and editable caret gestures when mouse release is delayed, while continuing to report inert text clicks. (2026-09-09)

• #4733 24fa541 Thanks @​dustinbyrne! - fix(web): avoid reporting clicks that select or unselect text as dead clicks (2026-09-09)

1.409.4

Patch Changes

... (truncated)

Commits

• 424c45a chore: update versions and lockfile [version bump]
• c666606 feat(metrics): record fetch and XHR durations as a histogram (#4918)
• b3430b7 chore: update versions and lockfile [version bump]
• 8207df8 fix(browser): back off the automatic feature flag refresh on idle pages (#4860)
• 1bef871 chore: update versions and lockfile [version bump]
• 19e78cc feat(node): distributed tracing spans (#4579)
• a8f1181 chore: update versions and lockfile [version bump]
• 9498567 fix(surveys): warn when advanced_disable_feature_flags hides surveys (#4831)
• 14ba783 fix: ignore empty bootstrap distinct IDs and allow nullable values (#4878)
• b867751 chore: update versions and lockfile [version bump]
• Additional commits viewable in compare view