Update dependency posthog-node to v5.49.1 - #910
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
renovate
Bot
force-pushed
the
renovate/posthog-node-5.x-lockfile
branch
from
August 20, 2026 04:51
adbc7ab to
b5dcb21
Compare
renovate
Bot
force-pushed
the
renovate/posthog-node-5.x-lockfile
branch
from
August 20, 2026 10:43
b5dcb21 to
c135453
Compare
renovate
Bot
force-pushed
the
renovate/posthog-node-5.x-lockfile
branch
from
August 20, 2026 12:44
c135453 to
cc76d3d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.41.0→5.49.1Release Notes
PostHog/posthog-js (posthog-node)
v5.49.1Compare Source
Patch Changes
0a0206fThanks @marandaneto! - Normalize capture timestamp overrides to equivalent UTC ISO strings in the browser and Node.js SDKs and shared core.(2026-08-14)
0a0206f]:v5.49.0Compare Source
Minor Changes
c9086deThanks @carlos-marchal-ph! - Public betacaptureAi()/captureAiImmediate(): AI events on a dedicated isolated endpoint with the event UUID returned. NewenableFullAiCaptureoption replaces the internal_useAiLane/_enableMultimodalCapture; wrappers route through the AI endpoint and skip redaction/truncation when set (privacy mode still wins).(2026-08-13)
Patch Changes
c9086de]:v5.48.2Compare Source
Patch Changes
a77115bThanks @marandaneto! - Log shutdown timeouts without rejecting, and correct the Node.jsshutdown()return type toPromise<void>.(2026-08-12)
a77115b]:v5.48.1Compare Source
Patch Changes
#4346
4751b33Thanks @marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies.(2026-08-06)
#4423
64ba193Thanks @marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression.(2026-08-06)
Updated dependencies [
64ba193]:v5.48.0Compare Source
Minor Changes
fa3457fThanks @haacked! - Support thestarts_with,not_starts_with,ends_with, andnot_ends_withproperty filter operators in feature flag local evaluation. Matching is case-insensitive and mirrorsicontains, so flags using these operators no longer fall back to remote evaluation.(2026-08-05)
v5.47.11Compare Source
Patch Changes
3c40b6cThanks @marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics.(2026-08-05)
3c40b6c]:v5.47.10Compare Source
Patch Changes
d3c4538Thanks @posthog! - Keep$referring_domainand canonicalutm_*/campaign parameters on minimal$feature_flag_calledevents. Previously the minimal allowlist stripped every campaign parameter, so a flag-called event landing first in a session could set the session's UTM attribution and channel type to NULL in web analytics.(2026-08-04)
d3c4538]:v5.47.9Compare Source
Patch Changes
facb4c1Thanks @marandaneto! - FixenableExceptionAutocapturesuppressing Node's default crash on unhandled promise rejections; fatal rejections instrictorwarn-with-error-codemode and rejections handled by anotherunhandledRejectionlistener are no longer captured.(2026-08-04)
v5.47.8Compare Source
Patch Changes
d4ffb83Thanks @marandaneto! - Schedule local feature flag polls after each request settles.(2026-08-04)
821a2c6]:v5.47.7Compare Source
Patch Changes
1cf9c6dThanks @marandaneto! - Bound stack source context reads and skip non-regular or oversized files.(2026-08-03)
v5.47.6Compare Source
Patch Changes
f3a71a1Thanks @marandaneto! - Clear completed lifecycle timeout handles so successful shutdowns do not leave timers running.(2026-08-03)
f3a71a1]:v5.47.5Compare Source
Patch Changes
eb0a793Thanks @ATKasem! - fix:personPropertiesandgroupPropertieson the feature flag methods are no longer typed asRecord<string, string>, so numeric and boolean values type-check without a cast. Local evaluation already handled them —matchPropertytakesRecord<string, any>and compares numerically forgt/gte/lt/lte— only the public types disagreed. These now use the sharedPropertiestype (personProperties?: Properties,groupProperties?: Record<string, Properties>), matchingsetPersonPropertiesForFlags/setGroupPropertiesForFlagsso theanycan be narrowed later. Types only, no runtime change.(2026-08-03)
eb0a793]:v5.47.4Compare Source
Patch Changes
7c3a9afThanks @marandaneto! - Preserve events added to a full queue while an earlier batch is being flushed.(2026-08-03)
7c3a9af]:v5.47.3Compare Source
Patch Changes
#4349
0e2b371Thanks @marandaneto! - Apply the feature flag definition request timeout while consuming the response body.(2026-07-31)
#4349
0e2b371Thanks @marandaneto! - Keep the feature flag definition request timeout active until the request settles.(2026-07-31)
v5.47.2Compare Source
Patch Changes
b9a241eThanks @ioannisj! - Fixidentify()leaving a user anonymous when the supplied ID already matches the persisted distinct ID (for example after a non-identified bootstrap seeded the same ID). The user is now marked identified and a person-processed$setevent is captured. Ports the same fix from posthog-js (browser) to the shared core used by React Native, Node, and posthog-js-lite.(2026-07-31)
b9a241e]:v5.47.1Compare Source
Patch Changes
3c40b6cThanks @marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics.(2026-08-05)
3c40b6c]:v5.47.0Compare Source
Minor Changes
6e7f3aeThanks @ablaszkiewicz! - Emit the release id that posthog-cli injects into your bundle as$release_idon$exceptionevents, so PostHog can attach exceptions to a release without joining through symbol sets. AddsgetInjectedReleaseId()to@posthog/core. The property is only attached when an injected release id can be read.(2026-07-30)
Patch Changes
6e7f3ae]:v5.46.1Compare Source
Patch Changes
6c8fde0Thanks @hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames.(2026-07-23)
6c8fde0]:v5.46.0Compare Source
Minor Changes
#4172
9621830Thanks @haacked! - send minimal$feature_flag_calledevents when the server enables itWhen the v2
/flagsresponse carriesminimalFlagCalledEvents: true(or, for posthog-node local evaluation, the flag-definitions payload carriesminimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false),$feature_flag_calledevents are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties,$set/$set_once, the$feature/<key>enumeration,$active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags,has_experimentunknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration.before_sendruns after the filter and may re-add stripped properties. (2026-07-20)Patch Changes
9621830]:v5.45.2Compare Source
Patch Changes
06d19a2Thanks @dustinbyrne! - Avoid Next.js Edge runtime warnings for native compression and fatal error handling.(2026-07-16)
06d19a2]:v5.45.1Compare Source
Patch Changes
9eb2b28Thanks @dustinbyrne! - Fix the default Node.js event flush interval at 5 seconds.(2026-07-16)
v5.45.0Compare Source
Minor Changes
#4159
fad6d9aThanks @haacked! - add$feature_flag_has_experimentto$feature_flag_calledevents$feature_flag_calledevents now carry a$feature_flag_has_experimentboolean sourced from the server'shas_experimentflag metadata (the/flags?v=2response for remote evaluation, the/api/feature_flag/local_evaluationdefinitions for posthog-node local evaluation). The property is only sent when the server explicitly reportshas_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)Patch Changes
fad6d9a]:v5.44.0Compare Source
Minor Changes
fc2cb2eThanks @eli-r-ph! - Raise the defaultmaxQueueSizefrom 1000 to 10000. Backend workloads are more likely to burst-enqueue events synchronously ahead of a flush than browser/mobile clients, so the previous default risked silently dropping events under bursty load. An explicitmaxQueueSizeoption still overrides this default.(2026-07-15)
Patch Changes
fc2cb2e]:v5.43.0Compare Source
Minor Changes
#4117
1eddff7Thanks @DanielVisca! - add the posthog.metrics API (count, gauge, histogram) to posthog-node — alphaBackend services can now record metrics through the same statsd-style pre-aggregating client the browser SDK ships, with no OpenTelemetry setup:
Samples aggregate in memory and flush as OTLP/JSON to
/i/v1/metrics(one data point per series per window). Pending metrics are flushed onshutdown(). Core gains_sendMetricsBatchonPostHogCoreStateless(same outcome contract as_sendLogsBatch) and a sharedresolveMetricsConfig, so any core-based SDK can hostPostHogMetrics. (2026-07-15)Patch Changes
1eddff7]:v5.42.0Compare Source
Minor Changes
dc2aa5bThanks @posthog! - Expose the error tracking rate-limiter config via the newexceptionRateLimiterRefillRateandexceptionRateLimiterBucketSizeoptions. Burst protection is scoped per exception type (each distinct$exceptiontype gets its own token bucket, with no aggregate cap across types), so these let customers with high-cardinality exception types tune the per-type allowance.(2026-07-14)
Patch Changes
dc2aa5b]:Configuration
📅 Schedule: (in timezone America/New_York)
* 0-23 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.