[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
posthog-js (source)	1.438.12 → 1.440.0

---

Release Notes

PostHog/posthog-js (posthog-js)

v1.440.0

Compare Source

1.440.0

Minor Changes

• #​5406 285d874 Thanks @​marandaneto! - Add a single-tag browser SDK loader with URL or attribute tokens and optional deferred initialization.
  (2026-10-27)

Patch Changes

• Updated dependencies [96d7ff2]:
  • @​posthog/core@1.61.1

v1.439.2

Compare Source

1.439.2

Patch Changes

• #​5427 8a9a066 Thanks @​posthog! - Fix stale identity when restoring a page from the back-forward cache
  (2026-10-27)

v1.439.1

Compare Source

1.439.1

Patch Changes

• #​5244 52c84e2 Thanks @​61465! - Port upstream rrweb #​1652 into the vendored MutationBuffer to fix a 9–10 s session-replay main-thread freeze when a single render mounts many sibling nodes (e.g. a 50 × 35 table at ~13 000 nodes). The pre-fix addList-based drain tail-rescanned every pass and ran in O(n²); the new drain iterates addedSet in topological order using dom.previousSibling / dom.lastChild / dom.nextSibling and runs in O(n). Fixes #​5227.

  The walk-up loop treats a ShadowRoot parent as its shadow host for ancestry checks so shadow children of a moved host are never serialized before the host itself. @posthog/rrweb-utils picks up three new untainted-prototype accessors (previousSibling, nextSibling, lastChild) that the drain depends on. Nodes that still can't resolve a parent at emission time are counted and reported in one summary console.warn per emission, so a dropped subtree doesn't cascade through the replay via the console-record plugin. (2026-10-27)

v1.439.0

Compare Source

1.439.0

Minor Changes

• #​5405 3150079 Thanks @​marandaneto! - Add defaults: 'latest' to follow the newest defaults and report the applied date in events.
  (2026-10-27)

Patch Changes

• Updated dependencies [3150079]:
  • @​posthog/types@1.417.0

v1.438.24

Compare Source

1.438.24

Patch Changes

• #​5279 d47c184 Thanks @​github-actions! - Fix optional rating surveys with response-based branching when skipped.
  (2026-10-26)
• Updated dependencies [d47c184]:
  • @​posthog/browser-common@0.9.12

v1.438.23

Compare Source

1.438.23

Patch Changes

• #​5335 cb34fe0 Thanks @​hpouillot! - Enable synchronous session replay fetch capture by default for new SDK versions.
  (2026-10-26)
• Updated dependencies [cb34fe0]:
  • @​posthog/types@1.416.1

v1.438.22

Compare Source

1.438.22

Patch Changes

• #​5429 1034948 Thanks @​pauldambra! - fix(browser): stop parsing the whole persistence entry on every capture() to refresh Meta identifiers. This made Interaction to Next Paint slower since 1.426.0, most of all on mobile and for projects with many feature flags.
  (2026-10-26)

v1.438.21

Compare Source

1.438.21

Patch Changes

• #​5346 f91145d Thanks @​sebxt! - Reject a prefilled survey rating of 0 on rating scales that start at 1.
  (2026-10-23)

• #​5399 02616e1 Thanks @​ARXHHHH! - Ship the IE11 Math.trunc and Number.isInteger polyfills only in array.full.es5.js, so the modern bundles no longer trigger Lighthouse's "Legacy JavaScript" audit.
  (2026-10-23)

• Updated dependencies [f827137, f91145d, 02616e1]:

  • @​posthog/core@1.60.1
  • @​posthog/browser-common@0.9.11

v1.438.20

Compare Source

1.438.20

Patch Changes

• #​5292 d73e6c7 Thanks @​sarmah-rup! - Read query params with form-encoding rules: an encoded plus (%2B) is kept as + instead of becoming a space, and values that contain = are no longer cut off. This fixes UTM, click ID and search keyword properties such as utm_term=c%2B%2B.
  (2026-10-23)
• Updated dependencies [d73e6c7]:
  • @​posthog/browser-common@0.9.10

v1.438.19

Compare Source

1.438.19

Patch Changes

• #​4994 bcd33ce Thanks @​dustinbyrne! - Share autocapture across browser SDKs while preserving existing event capture behavior.
  (2026-10-22)
• Updated dependencies [bcd33ce]:
  • @​posthog/browser-common@0.9.9

v1.438.18

Compare Source

1.438.18

Patch Changes

• #​5189 2aacdcb Thanks @​posthog! - Log why capture() dropped an event (capturing disabled or a bot user agent) when debug: true is set
  (2026-10-22)

• #​5383 0faf643 Thanks @​sarankumar1325! - Conversations: the widget now comes back after reset(), and after a cookieless (on_reject) visitor calls opt_in_capturing(), instead of staying unavailable until the next page load.
  (2026-10-22)

v1.438.17

Compare Source

1.438.17

Patch Changes

• #​5367 23b287f Thanks @​sarankumar1325! - Session replay records mouse movement inside same-origin iframes as mouse movement instead of touch movement, so the replay cursor stays visible.
  (2026-10-22)

• #​5348 45f6cd6 Thanks @​ayushjhanwar-png! - Keep session replay data URI filtering output valid JSON and match svg+xml and parameterised data URIs.
  (2026-10-22)

• #​5325 21a2559 Thanks @​Majny! - Session replay no longer installs the network plugin when the client sets session_recording.recordHeaders and recordBody to false and turns network timing off, even if the project enables network payload capture. Previously request URLs and timings were still recorded.
  (2026-10-22)

v1.438.16

Compare Source

1.438.16

Patch Changes

• #​5370 a50fa7a Thanks @​sarankumar1325! - Conversations: a reset() or opt-out that happens while the widget is still loading its tickets (or a restore link) no longer brings the widget back, restarts polling, or writes the old ticket id back to storage.
  (2026-10-22)

• #​5365 964e736 Thanks @​gustavohstrassburger! - Feature flags read before the user opts in to capturing now send $feature_flag_called the next time they are read after opt in.
  (2026-10-22)

• #​5256 e7c87fa Thanks @​jakesciotto! - Session replay: a scroll on a scroll-snap-type container now lands instantly during real-time playback, so a sheet or carousel that a scroll reveals shows the same content in Safari as in Chrome. Scrolls on other elements still animate.
  (2026-10-22)

• Updated dependencies [964e736]:

  • @​posthog/browser-common@0.9.8
  • @​posthog/core@1.59.4

v1.438.15

Compare Source

1.438.15

Patch Changes

• #​5273 d9148bb Thanks @​posthog! - Warn in debug mode when reloadFeatureFlags() runs inside an onFeatureFlags callback, because cross-tab flag changes can turn it into a request loop
  (2026-10-22)
• Updated dependencies [d9148bb]:
  • @​posthog/browser-common@0.9.7

v1.438.14

Compare Source

1.438.14

Patch Changes

• #​4992 3b7ffc6 Thanks @​dustinbyrne! - Share surveys across browser SDKs; calls to getSurveys before survey setup now invoke the callback immediately with an unavailable error. Notify all survey subscribers when survey loading fails.
  (2026-10-22)
• Updated dependencies [3b7ffc6]:
  • @​posthog/browser-common@0.9.6

v1.438.13

Compare Source

1.438.13

Patch Changes

• #​5322 5beb414 Thanks @​AyobamiH! - Flush buffered web vitals immediately using a beacon when the page is hidden or unloaded.
  (2026-10-20)

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 1

• coderabbit-review-active

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Zoo-Code-Org/Zoo-Code
• Branch: main
• File: .coderabbit.yaml
• Commit: 87b57cb
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d0578acc-d842-4fb4-802c-1b37c69cee13

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Review status

This PR was opened by an automated account. A human maintainer must verify the change intent, provenance, and validation before merging.

Current step: Awaiting fresh human maintainer or CODEOWNER approval.

Review-state labels are managed by this workflow; do not edit them manually. community-approved is managed the same way — do not add or remove it manually. It signals a fresh community code approval for the current head as an advisory priority only; maintainer review is still required.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!