[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
posthog-js (source)	1.438.12 → 1.438.21

---

Release Notes

PostHog/posthog-js (posthog-js)

v1.438.21

Compare Source

1.438.21

Patch Changes

• #​5346 f91145d Thanks @​sebxt! - Reject a prefilled survey rating of 0 on rating scales that start at 1.
  (2026-10-23)

• #​5399 02616e1 Thanks @​ARXHHHH! - Ship the IE11 Math.trunc and Number.isInteger polyfills only in array.full.es5.js, so the modern bundles no longer trigger Lighthouse's "Legacy JavaScript" audit.
  (2026-10-23)

• Updated dependencies [f827137, f91145d, 02616e1]:

  • @​posthog/core@1.60.1
  • @​posthog/browser-common@0.9.11

v1.438.20

Compare Source

1.438.20

Patch Changes

• #​5292 d73e6c7 Thanks @​sarmah-rup! - Read query params with form-encoding rules: an encoded plus (%2B) is kept as + instead of becoming a space, and values that contain = are no longer cut off. This fixes UTM, click ID and search keyword properties such as utm_term=c%2B%2B.
  (2026-10-23)
• Updated dependencies [d73e6c7]:
  • @​posthog/browser-common@0.9.10

v1.438.19

Compare Source

1.438.19

Patch Changes

• #​4994 bcd33ce Thanks @​dustinbyrne! - Share autocapture across browser SDKs while preserving existing event capture behavior.
  (2026-10-22)
• Updated dependencies [bcd33ce]:
  • @​posthog/browser-common@0.9.9

v1.438.18

Compare Source

1.438.18

Patch Changes

• #​5189 2aacdcb Thanks @​posthog! - Log why capture() dropped an event (capturing disabled or a bot user agent) when debug: true is set
  (2026-10-22)

• #​5383 0faf643 Thanks @​sarankumar1325! - Conversations: the widget now comes back after reset(), and after a cookieless (on_reject) visitor calls opt_in_capturing(), instead of staying unavailable until the next page load.
  (2026-10-22)

v1.438.17

Compare Source

1.438.17

Patch Changes

• #​5367 23b287f Thanks @​sarankumar1325! - Session replay records mouse movement inside same-origin iframes as mouse movement instead of touch movement, so the replay cursor stays visible.
  (2026-10-22)

• #​5348 45f6cd6 Thanks @​ayushjhanwar-png! - Keep session replay data URI filtering output valid JSON and match svg+xml and parameterised data URIs.
  (2026-10-22)

• #​5325 21a2559 Thanks @​Majny! - Session replay no longer installs the network plugin when the client sets session_recording.recordHeaders and recordBody to false and turns network timing off, even if the project enables network payload capture. Previously request URLs and timings were still recorded.
  (2026-10-22)

v1.438.16

Compare Source

1.438.16

Patch Changes

• #​5370 a50fa7a Thanks @​sarankumar1325! - Conversations: a reset() or opt-out that happens while the widget is still loading its tickets (or a restore link) no longer brings the widget back, restarts polling, or writes the old ticket id back to storage.
  (2026-10-22)

• #​5365 964e736 Thanks @​gustavohstrassburger! - Feature flags read before the user opts in to capturing now send $feature_flag_called the next time they are read after opt in.
  (2026-10-22)

• #​5256 e7c87fa Thanks @​jakesciotto! - Session replay: a scroll on a scroll-snap-type container now lands instantly during real-time playback, so a sheet or carousel that a scroll reveals shows the same content in Safari as in Chrome. Scrolls on other elements still animate.
  (2026-10-22)

• Updated dependencies [964e736]:

  • @​posthog/browser-common@0.9.8
  • @​posthog/core@1.59.4

v1.438.15

Compare Source

1.438.15

Patch Changes

• #​5273 d9148bb Thanks @​posthog! - Warn in debug mode when reloadFeatureFlags() runs inside an onFeatureFlags callback, because cross-tab flag changes can turn it into a request loop
  (2026-10-22)
• Updated dependencies [d9148bb]:
  • @​posthog/browser-common@0.9.7

v1.438.14

Compare Source

1.438.14

Patch Changes

• #​4992 3b7ffc6 Thanks @​dustinbyrne! - Share surveys across browser SDKs; calls to getSurveys before survey setup now invoke the callback immediately with an unavailable error. Notify all survey subscribers when survey loading fails.
  (2026-10-22)
• Updated dependencies [3b7ffc6]:
  • @​posthog/browser-common@0.9.6

v1.438.13

Compare Source

1.438.13

Patch Changes

• #​5322 5beb414 Thanks @​AyobamiH! - Flush buffered web vitals immediately using a beacon when the page is hidden or unloaded.
  (2026-10-20)

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 1

• coderabbit-review-active

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Zoo-Code-Org/Zoo-Code
• Branch: main
• File: .coderabbit.yaml
• Commit: 5cc5a37
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 245ceb5c-1729-4504-8990-284edb14302e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Review status

This PR was opened by an automated account. A human maintainer must verify the change intent, provenance, and validation before merging.

Current step: Awaiting fresh human maintainer or CODEOWNER approval.

Review-state labels are managed by this workflow; do not edit them manually. community-approved is managed the same way — do not add or remove it manually. It signals a fresh community code approval for the current head as an advisory priority only; maintainer review is still required.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!