Commit f9e3f15
authored
chore(deps): update dependency posthog-js to v1.302.2 (#986)
This PR contains the following updates:
| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [posthog-js](https://posthog.com/docs/libraries/js)
([source](https://redirect.github.com/PostHog/posthog-js)) |
dependencies | minor | [`1.301.0` ->
`1.302.2`](https://renovatebot.com/diffs/npm/posthog-js/1.301.0/1.302.2)
| [](https://securityscorecards.dev/viewer/?uri=github.com/PostHog/posthog-js)
|
---
### Release Notes
<details>
<summary>PostHog/posthog-js (posthog-js)</summary>
###
[`v1.302.2`](https://redirect.github.com/PostHog/posthog-js/releases/tag/posthog-js%401.302.2)
[Compare
Source](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.302.1...posthog-js@1.302.2)
#### 1.302.2
##### Patch Changes
-
[#​2696](https://redirect.github.com/PostHog/posthog-js/pull/2696)
[`daeacdb`](https://redirect.github.com/PostHog/posthog-js/commit/daeacdb4ca39d4274e3dd51908562b9d83c74f96)
Thanks [@​ksvat](https://redirect.github.com/ksvat)! - Update
[@​posthog/rrweb](https://redirect.github.com/posthog/rrweb)
dependencies to 0.0.33
(2025-12-05)
###
[`v1.302.1`](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.302.0...posthog-js@1.302.1)
[Compare
Source](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.302.0...posthog-js@1.302.1)
###
[`v1.302.0`](https://redirect.github.com/PostHog/posthog-js/releases/tag/posthog-js%401.302.0)
[Compare
Source](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.301.2...posthog-js@1.302.0)
#### 1.302.0
##### Minor Changes
-
[#​2693](https://redirect.github.com/PostHog/posthog-js/pull/2693)
[`4458da7`](https://redirect.github.com/PostHog/posthog-js/commit/4458da7cafa64749059eea6e6a1ef056f64fea98)
Thanks [@​adboio](https://redirect.github.com/adboio)! -
fix(surveys): prefilled questions for hosted surveys
(2025-12-04)
###
[`v1.301.2`](https://redirect.github.com/PostHog/posthog-js/releases/tag/posthog-js%401.301.2)
[Compare
Source](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.301.1...posthog-js@1.301.2)
#### 1.301.2
##### Patch Changes
-
[#​2690](https://redirect.github.com/PostHog/posthog-js/pull/2690)
[`e9c00fd`](https://redirect.github.com/PostHog/posthog-js/commit/e9c00fd451f6ee648ff40dcad538d38bfd5f3ff4)
Thanks [@​robbie-c](https://redirect.github.com/robbie-c)! -
Related to
<https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182>
We didn't include any of the vulnerable deps in any of our packages,
however we did have them as dev / test / example project dependencies.
There was no way that any of these vulnerable packages were included in
any of our published packages.
We've now patched out those dependencies.
Out of an abundance of caution, let's create a new release of all of our
packages. (2025-12-04)
- Updated dependencies
\[[`e9c00fd`](https://redirect.github.com/PostHog/posthog-js/commit/e9c00fd451f6ee648ff40dcad538d38bfd5f3ff4)]:
-
[@​posthog/core](https://redirect.github.com/posthog/core)@​1.7.1
###
[`v1.301.1`](https://redirect.github.com/PostHog/posthog-js/releases/tag/posthog-js%401.301.1)
[Compare
Source](https://redirect.github.com/PostHog/posthog-js/compare/posthog-js@1.301.0...posthog-js@1.301.1)
#### 1.301.1
##### Patch Changes
-
[#​2666](https://redirect.github.com/PostHog/posthog-js/pull/2666)
[`2004d36`](https://redirect.github.com/PostHog/posthog-js/commit/2004d369854d1467ae01120340cfa475ea8c42d5)
Thanks [@​pauldambra](https://redirect.github.com/pauldambra)! -
fix: session id rotation relied on in-memory cache which would be stale
after log idle periods - particularly with multiple windows in play
(2025-12-04)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00
PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only
on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time
(no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/settlemint/docs).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zMi4yIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Update posthog-js to 1.302.2 to bring in recent analytics fixes and
improvements. Includes better session handling and hosted survey
behavior.
- **Dependencies**
- Bump posthog-js from 1.301.0 to 1.302.2.
- Lockfile updates @posthog/core to 1.7.1.
- Pulls upstream fixes: session ID rotation reliability, prefilled
hosted survey questions, rrweb 0.0.33, and a dev-deps security cleanup.
<sup>Written for commit 5d09ba3.
Summary will update automatically on new commits.</sup>
<!-- End of auto-generated description by cubic. -->
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent e04936d commit f9e3f15
2 files changed
+4
-4
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
34 | | - | |
| 34 | + | |
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
| |||
393 | 393 | | |
394 | 394 | | |
395 | 395 | | |
396 | | - | |
| 396 | + | |
397 | 397 | | |
398 | 398 | | |
399 | 399 | | |
| |||
1711 | 1711 | | |
1712 | 1712 | | |
1713 | 1713 | | |
1714 | | - | |
| 1714 | + | |
1715 | 1715 | | |
1716 | 1716 | | |
1717 | 1717 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
| 44 | + | |
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
| |||
0 commit comments