Skip to content

chore(deps): bump posthog-js from 1.438.9 to 1.438.21 - #154

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/posthog-js-1.438.21
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/posthog-js-1.438.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps posthog-js from 1.438.9 to 1.438.21.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.438.21

1.438.21

Patch Changes

  • #5346 f91145d Thanks @​sebxt! - Reject a prefilled survey rating of 0 on rating scales that start at 1. (2026-10-23)

  • #5399 02616e1 Thanks @​ARXHHHH! - Ship the IE11 Math.trunc and Number.isInteger polyfills only in array.full.es5.js, so the modern bundles no longer trigger Lighthouse's "Legacy JavaScript" audit. (2026-10-23)

  • Updated dependencies [f827137, f91145d, 02616e1]:

    • @​posthog/core@​1.60.1
    • @​posthog/browser-common@​0.9.11

posthog-js@1.438.20

1.438.20

Patch Changes

  • #5292 d73e6c7 Thanks @​sarmah-rup! - Read query params with form-encoding rules: an encoded plus (%2B) is kept as + instead of becoming a space, and values that contain = are no longer cut off. This fixes UTM, click ID and search keyword properties such as utm_term=c%2B%2B. (2026-10-23)
  • Updated dependencies [d73e6c7]:
    • @​posthog/browser-common@​0.9.10

posthog-js@1.438.19

1.438.19

Patch Changes

  • #4994 bcd33ce Thanks @​dustinbyrne! - Share autocapture across browser SDKs while preserving existing event capture behavior. (2026-10-22)
  • Updated dependencies [bcd33ce]:
    • @​posthog/browser-common@​0.9.9

posthog-js@1.438.18

1.438.18

Patch Changes

  • #5189 2aacdcb Thanks @​posthog! - Log why capture() dropped an event (capturing disabled or a bot user agent) when debug: true is set (2026-10-22)

  • #5383 0faf643 Thanks @​sarankumar1325! - Conversations: the widget now comes back after reset(), and after a cookieless (on_reject) visitor calls opt_in_capturing(), instead of staying unavailable until the next page load. (2026-10-22)

posthog-js@1.438.17

1.438.17

Patch Changes

... (truncated)

Commits
  • a0b18d4 chore: update versions and lockfile [version bump]
  • f827137 fix(flags): fall back for incompatible local regex matching (#5354)
  • faacff0 fix(aio): keep content out of ai events in privacy mode (#5385)
  • 02616e1 fix(browser): ship uuidv7 polyfills only in the es5 bundle (#5399)
  • d778694 fix(examples): use gpt-image-2.5-flare in the OpenAI image generation example...
  • c481b82 ci(release): name excluded approvers in the Slack approval request (#5379)
  • 997d4ff feat(react-native): attach $recording_status and $sdk_debug_* to captured eve...
  • f91145d fix(surveys): reject a prefilled rating of 0 on scales that start at 1 (#5346)
  • e291b87 chore: update versions and lockfile [version bump]
  • 13c21ae docs: require signed commits in contributor docs (#5394)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [posthog-js](https://github.com/PostHog/posthog-js) from 1.438.9 to 1.438.21.
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.438.9...posthog-js@1.438.21)

---
updated-dependencies:
- dependency-name: posthog-js
  dependency-version: 1.438.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants