Skip to content

Bump the compatible-dependencies group with 6 updates - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/compatible-dependencies-024652d68a
Closed

Bump the compatible-dependencies group with 6 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/compatible-dependencies-024652d68a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the compatible-dependencies group with 6 updates:

Package From To
@posthog/nextjs-config 1.9.68 1.9.69
posthog-js 1.412.1 1.417.0
posthog-node 5.47.11 5.49.0
next 16.2.12 16.3.1
react 19.2.3 19.2.8
react-dom 19.2.3 19.2.8

Updates @posthog/nextjs-config from 1.9.68 to 1.9.69

Release notes

Sourced from @​posthog/nextjs-config's releases.

@​posthog/nextjs-config@​1.9.69

1.9.69

Patch Changes

Changelog

Sourced from @​posthog/nextjs-config's changelog.

1.9.69

Patch Changes

Commits

Updates posthog-js from 1.412.1 to 1.417.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.417.0

1.417.0

Minor Changes

  • #4485 8bc63c3 Thanks @​dustinbyrne! - Default external dependency loading to versioned asset paths with automatic fallback to legacy paths, and add a strict_script_versioning: 'fallback' mode. (2026-08-13)

Patch Changes

  • Updated dependencies [8bc63c3]:
    • @​posthog/types@​1.404.0

posthog-js@1.416.1

1.416.1

Patch Changes

  • #4443 b2c6830 Thanks @​arnohillen! - Harden the session replay stylesheet inlining budget (inlineStylesheetBudgetRules):

    • The default budget (10,000 rules) moves from the recorder chunk into posthog-js session recording options, so npm-pinned or cached bundles keep their configured override (including 0 to disable) and direct rrweb.record() consumers keep unbounded inlining unless they opt in.
    • Deferred inlining is bounded inside a sheet: a resumable cursor stringifies 200 rules per idle slice and emits a sheet's _cssText atomically, so monolithic sheets no longer produce one long task and partial CSS never reaches the wire.
    • Deferred sheets are flushed synchronously when recording stops and on pagehide; residual failure modes are counted via $sdk_debug_replay_deferred_stylesheets_failed / _abandoned.
    • CSSOM-only styles (insertRule output, adoptedStyleSheets) no longer charge the budget, since deferring <link> sheets buys those pages nothing.
    • Telemetry fixes: full-snapshot duration wraps the whole synchronous task, deferred counts are cumulative per session, new gauges cover non-deferrable rules and idle stringification cost, and duration samples straddling tab suspension are discarded ($sdk_debug_replay_discarded_duration_samples). (2026-08-13)
  • Updated dependencies [c9086de, b2c6830]:

    • @​posthog/core@​1.48.0
    • @​posthog/types@​1.403.1

posthog-js@1.416.0

1.416.0

Minor Changes

  • #4495 e4b9947 Thanks @​marandaneto! - feat(browser): add rewriteRequestPath to customize API, feature flag, and asset paths for reverse proxies (2026-08-12)

  • #4493 e34ebf9 Thanks @​marandaneto! - Add reset options for applying bootstrapped identity, feature flag, and session values after posthog.reset() while preserving the legacy boolean argument. (2026-08-12)

Patch Changes

posthog-js@1.415.7

1.415.7

Patch Changes

... (truncated)

Commits
  • 9b41d8a chore: update versions and lockfile [version bump]
  • 8bc63c3 feat(browser): default script versioning to fallback (#4485)
  • c708fbd ci: upgrade PostHog monorepo dependencies after releases (#4517)
  • f6d5ef8 chore: update versions and lockfile [version bump]
  • 5698fd5 fix(mcp): attribute tool calls and handshakes to their own client (#4515)
  • 5c5d26c chore: update versions and lockfile [version bump]
  • 1c5bf6f chore: bump PostHog CLI to 0.11.1 (#4516)
  • 48b1a0c fix(mcp): resolve identify on tools/list (#4504)
  • c9086de feat(aio): public beta captureAi with dedicated AI capture lane (#4289)
  • b2c6830 fix(replay): close the stylesheet budget review findings shipped in #4320 (#4...
  • Additional commits viewable in compare view

Updates posthog-node from 5.47.11 to 5.49.0

Release notes

Sourced from posthog-node's releases.

posthog-node@5.49.0

5.49.0

Minor Changes

  • #4289 c9086de Thanks @​carlos-marchal-ph! - Public beta captureAi() / captureAiImmediate(): AI events on a dedicated isolated endpoint with the event UUID returned. New enableFullAiCapture option replaces the internal _useAiLane / _enableMultimodalCapture; wrappers route through the AI endpoint and skip redaction/truncation when set (privacy mode still wins). (2026-08-13)

Patch Changes

  • Updated dependencies [c9086de]:
    • @​posthog/core@​1.48.0

posthog-node@5.48.2

5.48.2

Patch Changes

  • #4506 a77115b Thanks @​marandaneto! - Log shutdown timeouts without rejecting, and correct the Node.js shutdown() return type to Promise<void>. (2026-08-12)
  • Updated dependencies [a77115b]:
    • @​posthog/core@​1.47.1

posthog-node@5.48.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

posthog-node@5.48.0

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)
Changelog

Sourced from posthog-node's changelog.

5.49.0

Minor Changes

  • #4289 c9086de Thanks @​carlos-marchal-ph! - Public beta captureAi() / captureAiImmediate(): AI events on a dedicated isolated endpoint with the event UUID returned. New enableFullAiCapture option replaces the internal _useAiLane / _enableMultimodalCapture; wrappers route through the AI endpoint and skip redaction/truncation when set (privacy mode still wins). (2026-08-13)

Patch Changes

  • Updated dependencies [c9086de]:
    • @​posthog/core@​1.48.0

5.48.2

Patch Changes

  • #4506 a77115b Thanks @​marandaneto! - Log shutdown timeouts without rejecting, and correct the Node.js shutdown() return type to Promise<void>. (2026-08-12)
  • Updated dependencies [a77115b]:
    • @​posthog/core@​1.47.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)
Commits
  • 5c5d26c chore: update versions and lockfile [version bump]
  • c9086de feat(aio): public beta captureAi with dedicated AI capture lane (#4289)
  • 9c0632a chore: update versions and lockfile [version bump]
  • a77115b fix(node): resolve shutdown timeouts without rejecting (#4506)
  • 3c9cd11 chore: update versions and lockfile [version bump]
  • 886ef7b chore: update versions and lockfile [version bump]
  • 4751b33 fix(node): enforce Capture V1 response body timeouts (#4346)
  • 64ba193 fix(node): use zlib for payload compression (#4423)
  • d69f041 chore: update versions and lockfile [version bump]
  • fa3457f feat(node): support starts_with and ends_with in local evaluation (#4342)
  • Additional commits viewable in compare view

Updates next from 16.2.12 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.21

Misc Changes

  • Anchor the async local storage instances to global symbols: #97255
  • test: deflake use-cache-size-zero warm reload: #97421
  • Scaffolding for concurrentRouterQueue flag: #97413
  • Reorganize client router modules: #97402

Credits

Huge thanks to @​unstubbable, @​gnoff, and @​acdlite for helping!

v16.3.1-canary.20

Misc Changes

  • Wait for back-before-hydration recoveries in the browser: #97321
  • Extract metadata resolution primitives: #97388
  • test: update React 18 redbox snapshot: #97415
  • Turbopack: retain conditions when replacing resolve request keys: #97372
  • Remove server route matcher stack: #94157

Credits

Huge thanks to @​gaearon, @​gnoff, @​timneutkens, and @​mischnic for helping!

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 19.2.3 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the compatible-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@posthog/nextjs-config](https://github.com/PostHog/posthog-js/tree/HEAD/packages/nextjs-config) | `1.9.68` | `1.9.69` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.412.1` | `1.417.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.47.11` | `5.49.0` |
| [next](https://github.com/vercel/next.js) | `16.2.12` | `16.3.1` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.8` |


Updates `@posthog/nextjs-config` from 1.9.68 to 1.9.69
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/nextjs-config/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/@posthog/nextjs-config@1.9.69/packages/nextjs-config)

Updates `posthog-js` from 1.412.1 to 1.417.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.412.1...posthog-js@1.417.0)

Updates `posthog-node` from 5.47.11 to 5.49.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.49.0/packages/node)

Updates `next` from 16.2.12 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.1)

Updates `react` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.3 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: "@posthog/nextjs-config"
  dependency-version: 1.9.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
- dependency-name: posthog-js
  dependency-version: 1.417.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: posthog-node
  dependency-version: 5.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: next
  dependency-version: 16.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: compatible-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: compatible-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026
@0thernet

Copy link
Copy Markdown
Contributor

Superseded by #4. This npm-ecosystem branch could not update bun.lock; the replacement uses Dependabot’s Bun ecosystem so frozen CI receives a coherent manifest and lockfile.

@0thernet 0thernet closed this Aug 17, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/compatible-dependencies-024652d68a branch August 17, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant