Skip to content

chore(vscode-plugin): bump posthog-node from 5.47.3 to 5.48.1 in /agent-support/vscode - #2126

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent-support/vscode/main/posthog-node-5.48.1
Open

chore(vscode-plugin): bump posthog-node from 5.47.3 to 5.48.1 in /agent-support/vscode#2126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent-support/vscode/main/posthog-node-5.48.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps posthog-node from 5.47.3 to 5.48.1.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.48.1

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

posthog-node@5.48.0

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)

posthog-node@5.47.11

5.47.11

Patch Changes

  • #4380 3c40b6c Thanks @​marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics. (2026-08-05)
  • Updated dependencies [3c40b6c]:
    • @​posthog/core@​1.46.8

posthog-node@5.47.10

5.47.10

Patch Changes

  • #4287 d3c4538 Thanks @​posthog! - Keep $referring_domain and canonical utm_*/campaign parameters on minimal $feature_flag_called events. Previously the minimal allowlist stripped every campaign parameter, so a flag-called event landing first in a session could set the session's UTM attribution and channel type to NULL in web analytics. (2026-08-04)
  • Updated dependencies [d3c4538]:
    • @​posthog/core@​1.46.7

posthog-node@5.47.9

5.47.9

Patch Changes

  • #4350 facb4c1 Thanks @​marandaneto! - Fix enableExceptionAutocapture suppressing Node's default crash on unhandled promise rejections; fatal rejections in strict or warn-with-error-code mode and rejections handled by another unhandledRejection listener are no longer captured. (2026-08-04)

posthog-node@5.47.8

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.48.1

Patch Changes

  • #4346 4751b33 Thanks @​marandaneto! - Enforce configured request timeouts while consuming Capture V1 response bodies. (2026-08-06)

  • #4423 64ba193 Thanks @​marandaneto! - Use Node's zlib gzip implementation for Node SDK payloads to avoid sustained memory growth from frequent Web Streams compression. (2026-08-06)

  • Updated dependencies [64ba193]:

    • @​posthog/core@​1.46.9

5.48.0

Minor Changes

  • #4342 fa3457f Thanks @​haacked! - Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation. (2026-08-05)

5.47.11

Patch Changes

  • #4380 3c40b6c Thanks @​marandaneto! - Keep request timeouts active through response body consumption and clarify eventual event UUID deduplication semantics. (2026-08-05)
  • Updated dependencies [3c40b6c]:
    • @​posthog/core@​1.46.8

5.47.10

Patch Changes

  • #4287 d3c4538 Thanks @​posthog! - Keep $referring_domain and canonical utm_*/campaign parameters on minimal $feature_flag_called events. Previously the minimal allowlist stripped every campaign parameter, so a flag-called event landing first in a session could set the session's UTM attribution and channel type to NULL in web analytics. (2026-08-04)
  • Updated dependencies [d3c4538]:
    • @​posthog/core@​1.46.7

5.47.9

Patch Changes

  • #4350 facb4c1 Thanks @​marandaneto! - Fix enableExceptionAutocapture suppressing Node's default crash on unhandled promise rejections; fatal rejections in strict or warn-with-error-code mode and rejections handled by another unhandledRejection listener are no longer captured. (2026-08-04)

5.47.8

Patch Changes

... (truncated)

Commits
  • 886ef7b chore: update versions and lockfile [version bump]
  • 4751b33 fix(node): enforce Capture V1 response body timeouts (#4346)
  • 64ba193 fix(node): use zlib for payload compression (#4423)
  • d69f041 chore: update versions and lockfile [version bump]
  • fa3457f feat(node): support starts_with and ends_with in local evaluation (#4342)
  • 4575585 chore: update versions and lockfile [version bump]
  • 32434e4 feat(react-native): add push notification support (#4415)
  • 09752b9 chore: update versions and lockfile [version bump]
  • 323f1c8 chore: update versions and lockfile [version bump]
  • d3c4538 fix(core): keep session-attribution props on minimal $feature_flag_called eve...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Open in Devin Review

Bumps [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) from 5.47.3 to 5.48.1.
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.48.1/packages/node)

---
updated-dependencies:
- dependency-name: posthog-node
  dependency-version: 5.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​posthog-node@​5.47.3 ⏵ 5.48.191 +110079 +1100 +1100

View full report

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Open in Devin Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant