Uh oh!
There was an error while loading. Please reload this page.
chore(deps): update dependency posthog-js to v1.374.3 - #1052
Open
renovate[bot] wants to merge 1 commit into
Open
chore(deps): update dependency posthog-js to v1.374.3#1052renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 6, 2026 06:04
fd85dfa to
9f14241ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 6, 2026 22:47
9f14241 to
e9d4e21ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 7, 2026 18:44
e9d4e21 to
482668eComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 8, 2026 14:53
482668e to
2ef3595ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 9, 2026 18:44
2ef3595 to
9037ecbComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 9, 2026 22:29
9037ecb to
a0637b2ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 10, 2026 02:04
a0637b2 to
ef53804ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 10, 2026 06:02
ef53804 to
c94fb8eComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 12, 2026 10:51
c94fb8e to
a51ef35ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 12, 2026 22:35
a51ef35 to
961e78eComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 13, 2026 18:54
961e78e to
0c3ccf9ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 13, 2026 22:38
0c3ccf9 to
08523c3ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 17, 2026 22:32
4186e19 to
7212c1aComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 19, 2026 16:59
7212c1a to
9b91f71ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 20, 2026 02:27
9b91f71 to
bf709bdComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 20, 2026 15:32
bf709bd to
2331b1fComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 20, 2026 18:44
2331b1f to
9be6e4aComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 20, 2026 22:50
9be6e4a to
8de1f09ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 21, 2026 14:52
8de1f09 to
0828d86ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 22, 2026 14:54
0828d86 to
bb384e6ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 22, 2026 18:36
bb384e6 to
2c64952ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 23, 2026 15:04
2c64952 to
0b89ff1ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 23, 2026 20:49
0b89ff1 to
ac4098bComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 24, 2026 02:54
ac4098b to
bee73f9ComparerenovateBotforce-pushed
the
renovate/posthog-js-1.x
branch
from
January 26, 2026 19:08
bee73f9 to
b01af85CompareReview the following changes in direct dependencies. Learn more about Socket for GitHub.
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.312.0→1.374.3Release Notes
PostHog/posthog-js (posthog-js)
v1.374.3Compare Source
1.374.3
Patch Changes
557b893Thanks @eli-r-ph! - Enable $web_vitals reporting when cookieless mode is enabled(2026-05-20)
557b893,a880dbc]:v1.374.2Compare Source
1.374.2
Patch Changes
#3550
df91995Thanks @TueHaulund! - Preserve session-recording remote config acrossposthog.reset().posthog.reset()was clearing the entire persistence store, which wiped$session_recording_remote_configalong with user state. On the next sessionrotation triggered by the reset,
start('session_id_changed')would early-returnbecause the remote config was missing — leaving rrweb torn down and the new
session opening with no Meta + FullSnapshot until the next periodic 5-minute
checkout.
This affected any flow where an app calls
posthog.reset()mid-session(e.g. on sign-out / sign-in) and was particularly visible on Flutter Web
recordings that depend on a fresh FullSnapshot to anchor the CanvasKit DOM. (2026-05-18)
Updated dependencies []:
v1.374.1Compare Source
v1.374.0Compare Source
1.374.0
Minor Changes
594ea11Thanks @pauldambra! - Dead clicks: add a.ph-no-deadclickCSS class (andcapture_dead_clicks.css_selector_ignorelistconfig option) to exclude specific elements from dead-click detection without affecting autocapture, session replay, or heatmaps. Mirrors the existing.ph-no-rageclickpattern.(2026-05-18)
Patch Changes
3c0a09fThanks @pauldambra! - Dead clicks: a click on an<a>(or any element inside an<a>, including across shadow DOM) is no longer flagged as a dead click — the browser navigates / downloads / opens a new window and we can't observe that. Reuses autocapture's existing DOM walker for the ancestor walk. Direct clicks on<button>,<input>,<select>,<textarea>,<label>, and<form>(previously all skipped) are now eligible for dead-click detection: if their JS handler ran, the existing mutation / scroll / selection observers see the effect; if it didn't, dead-click correctly surfaces the bug. A broken<button>with no handler, or an<svg>icon inside one, will now flag — which is exactly the dead-click case we want to catch.(2026-05-18)
594ea11]:v1.373.5Compare Source
1.373.5
Patch Changes
221973eThanks @lucasheriques! - Surveys: submit open text questions with Cmd/Ctrl+Enter. The textarea still inserts a newline on plain Enter (native behaviour), matching the convention used by Slack, GitHub, Discord, and ChatGPT for multi-line inputs. Single-line "Other:" inputs continue to submit on plain Enter as before.(2026-05-15)
v1.373.4Compare Source
1.373.4
Patch Changes
4b895bfThanks @marandaneto! - Validate gzip request bodies at the browser send boundary and fall back to JSON if the outgoing body is not gzip data.(2026-05-12)
4b895bf]:v1.373.3Compare Source
1.373.3
Patch Changes
ad60818]:v1.373.2Compare Source
1.373.2
Patch Changes
223d925Thanks @marandaneto! - Validate native gzip output before sending requests and fall back when CompressionStream returns malformed data.(2026-05-11)
223d925]:v1.373.1Compare Source
1.373.1
Patch Changes
7d027bcThanks @dustinbyrne! - Prevent browser log capture from throwing when console arguments contain unreadable properties.(2026-05-11)
v1.373.0Compare Source
1.373.0
Minor Changes
4c0c7d9Thanks @williamchong! -capture()now accepts an optionaluuidonCaptureOptions.(2026-05-11)
Patch Changes
#3561
3511848Thanks @marandaneto! - Handle invalid persisted session replay config JSON gracefully(2026-05-11)
#3559
0a835faThanks @marandaneto! - Skip remote config background refreshes when no document is available.(2026-05-11)
Updated dependencies [
4c0c7d9,0a835fa]:v1.372.10Compare Source
1.372.10
Patch Changes
#3544
d120042Thanks @ksvat! - fix: stop session recording before destroying sessionManager inopt_out_capturing()withcookieless_mode: "on_reject". Previously, queued/throttled rrweb events (e.g. mousemove) could fire after the sessionManager was set toundefinedand throw[SessionRecording] must be started with a valid sessionManager. Also adds a defensive early-return inonRRwebEmitso any remaining late events bail out instead of throwing.(2026-05-07)
#3542
94a5ba0Thanks @TueHaulund! - Preserve<style>textContent when the browser's CSSOM serialization wouldemit empty longhands from
var()inside a shorthand. When a stylesheet hase.g.
padding: var(--p); padding-bottom: var(--pb);, browsers store theshorthand's longhands with empty token lists per the CSS Custom Properties
spec, and
CSSStyleRule.cssTextre-emits them aspadding-top: ; padding-right: ; padding-left: ;. The previous behavior replaced the<style>text with that corrupted output, silently dropping layout ruleson replay. We now detect the empty-longhand pattern and keep the original
textContent in that case. Affects users of any CSS-in-JS framework that
combines
var()with shorthands (Chakra UI v3, Panda CSS, Emotion, etc.).Same class of bug as rrweb-io/rrweb#1667. (2026-05-07)
Updated dependencies []:
v1.372.9Compare Source
1.372.9
Patch Changes
026e09dThanks @TueHaulund! - Pull in the canvas-manager fix from@posthog/rrweb0.0.61: skip canvassnapshots while the WebGL context is lost so transparent bitmaps don't
poison the worker's fingerprint dedup map and silently kill canvas
recording for the rest of the session. Also wraps
getCanvas()intry/catch so DOM/shadow-root traversal errors can't cancel the rAF
loop. See PR #3527 for context. (2026-05-05)
v1.372.8Compare Source
1.372.8
Patch Changes
255b273Thanks @marandaneto! - Gate survey translation logs behind SDK debug logging to avoid production console spam.(2026-05-04)
220cd61,255b273]:v1.372.7Compare Source
1.372.7
Patch Changes
8aee3d5]:v1.372.6Compare Source
1.372.6
Patch Changes
cf56753Thanks @lucasheriques! - Add translated survey rendering support in React Native and share survey translation logic through@posthog/core.(2026-05-01)
cf56753,04db756]:v1.372.5Compare Source
1.372.5
Patch Changes
c726aaeThanks @posthog! - fix(exceptions): avoid cross-origin property access when calling the previouswindow.onunhandledrejectionhandler(2026-04-29)
v1.372.4Compare Source
1.372.4
Patch Changes
5a6b2a5Thanks @posthog! - Fix copy autocapture when copying or cutting text from Shadow DOM or document fragment contexts.(2026-04-29)
v1.372.3Compare Source
1.372.3
Patch Changes
5b8efc3Thanks @lucasheriques! - Add browser survey translation rendering and language tracking.(2026-04-27)
v1.372.2Compare Source
1.372.2
Patch Changes
cba2570Thanks @veryayskiy! - Fix autofocus(2026-04-27)
v1.372.1Compare Source
1.372.1
Patch Changes
70508dfThanks @dustinbyrne! - Avoid usingBlob.stream()for native async gzip compression to prevent SafariNotReadableErrorstream failures.(2026-04-24)
70508df]:v1.372.0Compare Source
1.372.0
Minor Changes
eaa1322Thanks @veryayskiy! - You cannot write to a resolve ticket. Start a new one.(2026-04-24)
Patch Changes
v1.371.4Compare Source
1.371.4
Patch Changes
3c4fc1eThanks @fasyy612! - bump rrweb to 0.0.60(2026-04-24)
v1.371.3Compare Source
1.371.3
Patch Changes
61cf83eThanks @dustinbyrne! - Fix session recording in the full no-external browser bundles(2026-04-24)
daf028d]:v1.371.2Compare Source
1.371.2
Patch Changes
96f19b7Thanks @turnipdabeets! - Lift OTLP log serialization helpers from posthog-js into @posthog/core so theupcoming React Native logs feature consumes the same builders. Browser gains
two fixes as a side effect: NaN and ±Infinity attribute values no longer get
silently dropped during JSON encoding, and the scope.version OTLP field is
now populated with the SDK version (changes the server's instrumentation_scope
column from "posthog-js@" to "posthog-js@"). (2026-04-23)
96f19b7]:v1.371.1Compare Source
1.371.1
Patch Changes
2da17e8Thanks @marandaneto! - Classify SDK-owned persistence keys with an explicit event exposure policy so new internal persistence state must be intentionally marked as event-visible, hidden, or derived.(2026-04-23)
v1.371.0Compare Source
1.371.0
Patch Changes
#3432
1a8b727Thanks @richardsolomou! - refactor: rename__add_tracing_headerstoaddTracingHeaders. The__prefix signalled an internal/experimental option, but the config is a public API (documented for linking LLM traces to session replays).__add_tracing_headerscontinues to work as a deprecated alias on the browser SDK.Also exposes
patchFetchForTracingHeadersfrom@posthog/coreso non-browser SDKs can reuse the implementation. (2026-04-23)Updated dependencies [
1a8b727]:v1.370.1Compare Source
1.370.1
Patch Changes
6f19ce8Thanks @marandaneto! - fix(surveys): guard survey seen localStorage access(2026-04-22)
v1.370.0Compare Source
1.370.0
Minor Changes
922a1c1Thanks @hpouillot! - Add exception steps to error tracking (aka breadcrumbs)(2026-04-22)
Patch Changes
922a1c1]:v1.369.5Compare Source
1.369.5
Patch Changes
1a0b58d]:v1.369.4Compare Source
1.369.4
Patch Changes
d61bce1Thanks @sampennington! - fix(cookieless): start in cookieless mode when opt_out_capturing_by_default is set(2026-04-21)
v1.369.3Compare Source
1.369.3
Patch Changes
#3419
ea08727Thanks @haacked! - Reinstate$feature_flag_payloadsand$surveys_activatedin captured event properties.(2026-04-18)
#3416
3d8b2e2Thanks @feliperalmeida! - Updated dependencies: - protobufjs@7.5.5(2026-04-18)
Updated dependencies []:
v1.369.2Compare Source
1.369.2
Patch Changes
4a65604Thanks @dustinbyrne! - Add a preview flag for versioned browser lazy bundle asset paths.(2026-04-16)
4a65604]:v1.369.1Compare Source
1.369.1
Patch Changes
#3393
85ae4d9Thanks @haacked! - Exclude active feature flag payloads from event properties(2026-04-16)
#3392
00cd1ceThanks @haacked! - Fix unnecessary persisted config and activation properties (including product tours, surveys, and session recording config) added to captured events(2026-04-16)
Updated dependencies []:
v1.369.0Compare Source
1.369.0
Minor Changes
#3342
eea5260Thanks @ksvat! - Account for property filters on events in recording triggers for v2 triggers(2026-04-14)
#3281
b1fd228Thanks @ksvat! - Add session replay trigger groups handling (V2)(2026-04-14)
Patch Changes
v1.368.2Compare Source
1.368.2
Patch Changes
f1bea33Thanks @marandaneto! - Disable native gzip compression after a NotReadableError in the browser SDK(2026-04-14)
v1.368.1Compare Source
1.368.1
Patch Changes
d7c71b1Thanks @dmarticus! - Fix bootstrapped feature flags being overwritten by partial /flags response whenadvanced_only_evaluate_survey_feature_flagsis enabled(2026-04-14)
v1.368.0Compare Source
1.368.0
Minor Changes
3fcf5c4Thanks @jonmcwest! - Add posthog.captureLog() API for sending structured log entries to PostHog logs(2026-04-13)
Patch Changes
f5fe0a8Thanks @ksvat! - bump rrweb version(2026-04-13)
3fcf5c4]:v1.367.0Compare Source
1.367.0
Minor Changes
353be9aThanks @dustinbyrne! - feat: Add support for pre-loaded remote-config(2026-04-09)
Patch Changes
v1.366.2Compare Source
1.366.2
Patch Changes
575e354Thanks @lucasheriques! - Add a hover state to numeric survey rating options so they provide clearer pointer feedback before selection.(2026-04-09)
v1.366.1Compare Source
1.366.1
Patch Changes
802bf39Thanks @jabahamondes! - Re-evaluate consent persistent store when config changes to support cross-subdomain consent sharing(2026-04-09)
v1.366.0Compare Source
1.366.0
Minor Changes
b599672Thanks @veryayskiy! - Add customer side identification(2026-04-09)
Patch Changes
v1.365.5Compare Source
1.365.5
Patch Changes
c735b08]:v1.365.4Compare Source
1.365.4
Patch Changes
3939856Thanks @lucasheriques! - Expose the current question index on.survey-boxvia adata-question-indexattribute. This gives consumers rendering surveys via the API a reliable way to know which question is currently displayed without parsing input ids or class names — works for every question type, including link questions which render no input or rating element.(2026-04-08)
v1.365.3Compare Source
1.365.3
Patch Changes
dbdddcaThanks @pauldambra! - Bump @posthog/rrweb packages to 0.0.56, which includes:v1.365.2Compare Source
1.365.2
Patch Changes
c387f6dThanks @pauldambra! - perf(replay): reduce memory and CPU cost of event compression by caching gzipped empty arrays and eliminating redundant JSON.stringify for size estimation(2026-04-08)
c387f6d]:v1.365.1Compare Source
1.365.1
Patch Changes
57ee5b2]:v1.365.0Compare Source
1.365.0
Minor Changes
fc5589fThanks @dmarticus! - preserve $set_once semantics in local flag evaluation cache(2026-04-07)
Patch Changes
fc5589f]:v1.364.7Compare Source
1.364.7
Patch Changes
b25b689Thanks @dustinbyrne! - fix: send $groupidentify for new groups even when no properties are provided(2026-04-03)
v1.364.6Compare Source
1.364.6
Patch Changes
68cd4e5Thanks @dustinbyrne! - Fix slim bundle + extension bundles crash caused by inconsistent property mangling(2026-04-02)
a01a3d5]:v1.364.5Compare Source
1.364.5
Patch Changes
#3309
197eedaThanks @marandaneto! - Extract CLI and sourcemap utilities from @posthog/core into @posthog/plugin-utils to remove cross-spawn from React Native dependencies(2026-04-01)
#3312
c5feb5cThanks @TueHaulund! - Bump @posthog/rrweb-* to 0.0.52 — adds error recovery to the canvas FPS snapshot pipeline, preventing canvas recording from permanently stopping when createImageBitmap or the worker encounters an error(2026-04-01)
#3315
7b944fcThanks @TueHaulund! - Bump @posthog/rrweb-* to 0.0.53 — fixes infinite recursion crash ("Maximum call stack size exceeded") when calling posthog.reset() or restarting the recorder on pages with shadow DOM elements (e.g. CometChat)(2026-04-01)
Updated dependencies [
197eeda]:v1.364.4Compare Source
1.364.4
Patch Changes
2365df5Thanks @TueHaulund! - fix: skip deep copy for snapshot/exception events to prevent stack overflow on deeply nested DOM trees(2026-03-31)
v1.364.3Compare Source
1.364.3
Patch Changes
bab5f3aThanks @dustinbyrne! - Strip workspace:* references from lib/package.json after build(2026-03-31)
v1.364.2Compare Source
1.364.2
Patch Changes
341caafThanks @marandaneto! - fix: wrap sendBeacon body in Blob to ensure Content-Type header is set(2026-03-30)
a863914]:v1.364.1Compare Source
1.364.1
Patch Changes
4bdfdbc]:v1.364.0Compare Source
1.364.0
Minor Changes
00a5079Thanks @pauldambra! - Reject the strings "undefined" and "null" in posthog.identify(). All invalid distinct IDs now log a critical console error (always visible, not debug-only).(2026-03-27)
Patch Changes
8d34289Thanks @marandaneto! - Use async native CompressionStream for gzip compression to avoid blocking the main thread(2026-03-27)
8d34289]:v1.363.6Compare Source
1.363.6
Patch Changes
32edaadThanks @pauldambra! - Bump @posthog/rrweb packages to 0.0.51, which includes:v1.363.5Compare Source
1.363.5
Patch Changes
#3278
c59dc90Thanks @dustinbyrne! - Add tree-shakeable ESM extension-bundles entry point for slim builds(2026-03-25)
#3274
ba08262Thanks @pauldambra! - fix: document visibility change shoudln't capture dead click(2026-03-25)
Updated dependencies [
ba08262]:v1.363.4Compare Source
1.363.4
Patch Changes
664a11bThanks @fasyy612! - bump rrweb dependency version(2026-03-24)
v1.363.3[Compar
Configuration
📅 Schedule: (UTC)
* 0-4,22-23 * * 1-5)* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.