Skip to content

Bump the compatible-dependencies group across 1 directory with 6 updates - #5

Merged
0thernet merged 1 commit into
mainfrom
dependabot/bun/compatible-dependencies-024652d68a
Aug 18, 2026
Merged

Bump the compatible-dependencies group across 1 directory with 6 updates#5
0thernet merged 1 commit into
mainfrom
dependabot/bun/compatible-dependencies-024652d68a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the compatible-dependencies group with 6 updates in the / directory:

Package From To
@posthog/nextjs-config 1.9.68 1.9.69
posthog-js 1.412.1 1.417.1
posthog-node 5.47.11 5.49.1
next 16.2.12 16.3.1
react 19.2.3 19.2.8
react-dom 19.2.3 19.2.8

Updates @posthog/nextjs-config from 1.9.68 to 1.9.69

Release notes

Sourced from @​posthog/nextjs-config's releases.

@​posthog/nextjs-config@​1.9.69

1.9.69

Patch Changes

Changelog

Sourced from @​posthog/nextjs-config's changelog.

1.9.69

Patch Changes

Commits

Updates posthog-js from 1.412.1 to 1.417.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.417.1

1.417.1

Patch Changes

  • #4521 0a0206f Thanks @​marandaneto! - Normalize capture timestamp overrides to equivalent UTC ISO strings in the browser and Node.js SDKs and shared core. (2026-08-14)

  • #4523 6230b5b Thanks @​marandaneto! - Prevent swallowed rrweb observer initialization errors from breaking session replay teardown and subsequent recorder restarts. (2026-08-14)

  • #4503 eb05237 Thanks @​pauldambra! - fix(dead-clicks): treat visibility and focus changes as liveness signals, not dead-click evidence

    The dead-click detector treated a visibilitychange as evidence a click was dead: it measured Math.abs(clickTimestamp - lastVisibilityChange) and, once that exceeded the threshold, timed the click out as dead. Because it only recorded the tab becoming visible, any click in a session where the tab had ever been backgrounded (median gap ~1 minute) was flagged.

    A visibility or focus change near a click is the opposite — a sign the click did something (it woke/focused the tab, opened a new tab, or opened a new window/popup) — so these signals now only ever suppress a dead click, never cause one:

    • Visibility changes are recorded in both directions (a click that opens a new tab sends the current tab to hidden), and a window focus/blur observer is added, since a click that opens a new window/popup may leave the tab visible and only surface as the current window losing focus.
    • A click within a wake-up/interaction window (1s, wide enough for a real "tab back, then click" gesture) of any such change is suppressed.
    • The visibility signal no longer feeds the dead-marking path at all. $dead_click_visibility_changed_timeout stays in the payload (always false) for shape compatibility, and a new $dead_click_focus_changed_delay_ms is emitted for observability.
    • Visibility/focus changes are now recorded onto each queued candidate the instant they fire (like scroll), instead of being read from a single shared timestamp when the click is checked ~1s later. A click that hides or blurs the tab (opening a new tab/window) suspends that check while the tab is backgrounded; by the time it resumes the tab has usually returned, and the shared timestamp would have been overwritten by that later transition — losing the click-correlated one and wrongly flagging the click dead. Stamping the candidate as the event fires makes delayed hide→show and blur→focus sequences suppress correctly. (2026-08-14)

  • Updated dependencies [0a0206f, eb05237]:

    • @​posthog/core@​1.48.1
    • @​posthog/types@​1.404.1

posthog-js@1.417.0

1.417.0

Minor Changes

  • #4485 8bc63c3 Thanks @​dustinbyrne! - Default external dependency loading to versioned asset paths with automatic fallback to legacy paths, and add a strict_script_versioning: 'fallback' mode. (2026-08-13)

Patch Changes

  • Updated dependencies [8bc63c3]:
    • @​posthog/types@​1.404.0

posthog-js@1.416.1

1.416.1

Patch Changes

  • #4443 b2c6830 Thanks @​arnohillen! - Harden the session replay stylesheet inlining budget (inlineStylesheetBudgetRules):
    • The default budget (10,000 rules) moves from the recorder chunk into posthog-js session recording options, so npm-pinned or cached bundles keep their configured override (including 0 to disable) and direct rrweb.record() consumers keep unbounded inlining unless they opt in.
    • Deferred inlining is bounded inside a sheet: a resumable cursor stringifies 200 rules per idle slice and emits a sheet's _cssText atomically, so monolithic sheets no longer produce one long task and partial CSS never reaches the wire.
    • Deferred sheets are flushed synchronously when recording stops and on pagehide; residual failure modes are counted via $sdk_debug_replay_deferred_stylesheets_failed / _abandoned.
    • CSSOM-only styles (insertRule output, adoptedStyleSheets) no longer charge the budget, since deferring <link> sheets buys those pages nothing.
    • Telemetry fixes: full-snapshot duration wraps the whole synchronous task, deferred counts are cumulative per session, new gauges cover non-deferrable rules and idle stringification cost, and duration samples straddling tab suspension are discarded ($sdk_debug_replay_discarded_duration_samples). (2026-08-13)

... (truncated)

Commits
  • 6872a1c chore: update versions and lockfile [version bump]
  • aba7d55 fix: perf(react-native): useFeatureFlags / useFeatureFlag re-read the full fl...
  • 0a0206f fix: normalize SDK timestamps to UTC (#4521)
  • eb05237 fix(dead-clicks): treat visibility and focus changes as liveness signals, not...
  • 6230b5b fix(replay): recover from observer initialization failures (#4523)
  • a4a25fe ci: upgrade React Native plugin in PostHog after releases (#4518)
  • e4d64b6 ci: Remove auto-merge from PostHog upgrade workflow (#4519)
  • 65c4809 chore: update versions and lockfile [version bump]
  • 1030636 fix(rollup): inject chunk ids in-memory in renderChunk for SRI compatibility ...
  • 9b41d8a chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view

Updates posthog-node from 5.47.11 to 5.49.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.49.1

5.49.1

Patch Changes

  • #4521 0a0206f Thanks @​marandaneto! - Normalize capture timestamp overrides to equivalent UTC ISO strings in the browser and Node.js SDKs and shared core. (2026-08-14)
  • Updated dependencies [0a0206f]:
    • @​posthog/core@​1.48.1

posthog-node@5.49.0

5.49.0

Minor Changes

  • #4289 c9086de Thanks @​carlos-marchal-ph! - Public beta captureAi() / captureAiImmediate(): AI events on a dedicated isolated endpoint with the event UUID returned. New enableFullAiCapture option replaces the internal _useAiLane / _enableMultimodalCapture; wrappers route through the AI endpoint and skip redaction/truncation when set (privacy mode still wins). (2026-08-13)

Patch Changes

  • Updated dependencies [c9086de]:
    • @​posthog/core@​1.48.0

posthog-node@5.48.2

5.48.2

Patch Changes

  • #4506 a77115b Thanks @​marandaneto! - Log shutdown timeouts without rejecting, and correct the Node.js shutdown() return type to Promise<void>. (2026-08-12)
  • Updated dependencies [a77115b]:
    • @​posthog/core@​1.47.1

posthog-node@5.48.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

posthog-node@5.48.0

5.48.0

Minor Changes

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.49.1

Patch Changes

  • #4521 0a0206f Thanks @​marandaneto! - Normalize capture timestamp overrides to equivalent UTC ISO strings in the browser and Node.js SDKs and shared core. (2026-08-14)
  • Updated dependencies [0a0206f]:
    • @​posthog/core@​1.48.1

5.49.0

Minor Changes

  • #4289 c9086de Thanks @​carlos-marchal-ph! - Public beta captureAi() / captureAiImmediate(): AI events on a dedicated isolated endpoint with the event UUID returned. New enableFullAiCapture option replaces the internal _useAiLane / _enableMultimodalCapture; wrappers route through the AI endpoint and skip redaction/truncation when set (privacy mode still wins). (2026-08-13)

Patch Changes

  • Updated dependencies [c9086de]:
    • @​posthog/core@​1.48.0

5.48.2

Patch Changes

  • #4506 a77115b Thanks @​marandaneto! - Log shutdown timeouts without rejecting, and correct the Node.js shutdown() return type to Promise<void>. (2026-08-12)
  • Updated dependencies [a77115b]:
    • @​posthog/core@​1.47.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)
Commits
  • 6872a1c chore: update versions and lockfile [version bump]
  • 0a0206f fix: normalize SDK timestamps to UTC (#4521)
  • 5c5d26c chore: update versions and lockfile [version bump]
  • c9086de feat(aio): public beta captureAi with dedicated AI capture lane (#4289)
  • 9c0632a chore: update versions and lockfile [version bump]
  • a77115b fix(node): resolve shutdown timeouts without rejecting (#4506)
  • 3c9cd11 chore: update versions and lockfile [version bump]
  • 886ef7b chore: update versions and lockfile [version bump]
  • 4751b33 fix(node): enforce Capture V1 response body timeouts (#4346)
  • 64ba193 fix(node): use zlib for payload compression (#4423)
  • Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.22

Misc Changes

  • fix(turbo-persistence): allow 32-bit usize conversion: #97288
  • test: restore missing NFT exports* unit fixtures: #97459
  • [ci] Fix backport canary release dispatch: #97383
  • turbo-tasks-backend: Enforce that tasks exist when accessing them: #96043
  • turbo-tasks-backend: add persistence delete/tombstone plumbing for GC: #95975
  • turbo-persistence: add key-value tombstones for MultiValue families: #96929

Credits

Huge thanks to @​hardfist, @​mischnic, @​ztanner, and @​lukesandberg for helping!

v16.3.1-canary.21

Misc Changes

  • Anchor the async local storage instances to global symbols: #97255
  • test: deflake use-cache-size-zero warm reload: #97421
  • Scaffolding for concurrentRouterQueue flag: #97413
  • Reorganize client router modules: #97402

Credits

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 19.2.3 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026
@dependabot dependabot Bot changed the title Bump the compatible-dependencies group with 6 updates Bump the compatible-dependencies group across 1 directory with 6 updates Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/compatible-dependencies-024652d68a branch 2 times, most recently from 363cfe3 to 9102d1d Compare August 17, 2026 23:07
@dependabot
Bump the compatible-dependencies group across 1 directory with 6 updates
b55f2d7 
Bumps the compatible-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@posthog/nextjs-config](https://github.com/PostHog/posthog-js/tree/HEAD/packages/nextjs-config) | `1.9.68` | `1.9.69` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.412.1` | `1.417.1` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.47.11` | `5.49.1` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.8` |



Updates `@posthog/nextjs-config` from 1.9.68 to 1.9.69
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/nextjs-config/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/@posthog/nextjs-config@1.9.69/packages/nextjs-config)

Updates `posthog-js` from 1.412.1 to 1.417.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.412.1...posthog-js@1.417.1)

Updates `posthog-node` from 5.47.11 to 5.49.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.49.1/packages/node)

Updates `next` from 16.2.12 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.1)

Updates `react` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@posthog/nextjs-config"
  dependency-version: 1.9.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
- dependency-name: next
  dependency-version: 16.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: posthog-js
  dependency-version: 1.417.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: posthog-node
  dependency-version: 5.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/compatible-dependencies-024652d68a branch from 9102d1d to b55f2d7 Compare August 18, 2026 05:02
@0thernet
0thernet merged commit 72ebc17 into main Aug 18, 2026
2 checks passed
@0thernet
0thernet deleted the dependabot/bun/compatible-dependencies-024652d68a branch August 18, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@0thernet