chore(deps): update npm packages - #475
Merged
Merged
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub. |
renovate
Bot
force-pushed
the
renovate/npm-packages
branch
from
September 13, 2026 20:30
3cc535f to
1bcfce6
Compare
Brooooooklyn
approved these changes
Sep 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
22.1.5→22.1.622.1.7→22.1.822.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.622.1.5→22.1.61.62.1→1.63.06.12.0→6.13.110.5.4→10.5.62.1.4→2.2.11.426.1→1.429.51.103.1→1.104.08.2.2→8.3.0Release Notes
angular/angular (@angular/animations)
v22.1.6Compare Source
compiler
@propertydeclarationscompiler-cli
core
platform-server
router
angular/angular-cli (@angular/build)
v22.1.8Compare Source
@angular/build
angular/components (@angular/cdk)
v22.1.6Compare Source
cdk
microsoft/playwright (@playwright/test)
v1.63.0Compare Source
sanity-io/sanity (@sanity/types)
v6.13.1Compare Source
Sanity Studio v6.13.1
This release includes various improvements and bug fixes.
For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4xMy4w
Install or upgrade Sanity Studio
To upgrade to this version, run:
To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.
📓 Full changelog
6270e125d97879289f65f02ff77546a91f359c29f7a991f451c51ca5bae59a7ca8179e57a90328712a95c0b46992248b2d9dab0bc5285f8124c03b726e0b7172bd9e09db2382521af430cb729fb992c0b1e309b43fc237d234cb24v6.13.0Compare Source
Features
postcss/autoprefixer (autoprefixer)
v10.5.6Compare Source
-webkit-gradients (by @ryanchou1994).v10.5.5Compare Source
sxzz/obug (obug)
v2.2.1Compare Source
🐞 Bug Fixes
View changes on GitHub
v2.2.0Compare Source
🚀 Features
🏎 Performance
View changes on GitHub
PostHog/posthog-js (posthog-js)
v1.429.5Compare Source
1.429.5
Patch Changes
#4579
19e78ccThanks @turnipdabeets! - Cap the retry delay for log exports at 30 seconds, the ceiling the logs contract states. It previously doubled to 64 times the flush interval — 192s on web, 640s on React Native — so a log export now resumes within 30 seconds of a failing endpoint recovering, at the cost of more retry requests while that endpoint is down.(2026-09-10)
#4579
19e78ccThanks @turnipdabeets! - Keep backing off a failing log flush while new records arrive, instead of the next record resetting the retry to the flush interval.(2026-09-10)
#4579
19e78ccThanks @turnipdabeets! - Logs and metrics now always sendservice.nameandtelemetry.sdk.*, even when aresourceAttributesvalue is too large to encode in full. Previously that value could crowd them out, and the records reached PostHog with no service attribution.(2026-09-10)
Updated dependencies [
19e78cc,19e78cc,19e78cc,19e78cc,19e78cc,19e78cc,19e78cc]:v1.429.4Compare Source
1.429.4
Patch Changes
#4862
3278cd0Thanks @pauldambra! - Call the original console method with the console as its receiver when recording console logs. The wrapper passedundefinedinstead, and passed no receiver at all when reporting its own failures, which a console implementation is free to reject.(2026-09-10)
#4887
0da006cThanks @posthog! - Error tracking no longer counts an injected script as your own code. A stack frame isin_apponly when its filename names a script your app was served —http(s),file,blob,app,capacitor,ionic, a bundler scheme, or a bare path. A frame served over any other scheme, such as an in-app browser bridge oniabjs://or an extension content script onchrome-extension://, is kept for context but no longer groups the issue under your code.(2026-09-10)
#4837
99b4fc7Thanks @pauldambra! - Stop recordingautoplayattribute mutations on<video>and<audio>during session replay. The check compared a lowercase tag name againstElement.tagName, which is uppercase for HTML elements, so a looping background video emitted a mutation for everyautoplaytoggle.(2026-09-10)
Updated dependencies [
0da006c]:v1.429.3Compare Source
1.429.3
Patch Changes
#4878
14ba783Thanks @dustinbyrne! - Allow null bootstrap values and treat null or empty distinct IDs as missing.(2026-09-10)
#4831
9498567Thanks @posthog! - Log a console message when advanced_disable_feature_flags stops surveys from displaying(2026-09-10)
Updated dependencies [
14ba783,9498567]:v1.429.2Compare Source
1.429.2
Patch Changes
412c97cThanks @marandaneto! - Fix recording package exports, native ESM loading, and strict TypeScript 4.7 consumer compatibility.(2026-09-10)
412c97c]:v1.429.1Compare Source
1.429.1
Patch Changes
61b92f9Thanks @pauldambra! - Disable browser autofill on input and textarea fields during session replay.(2026-09-09)
v1.429.0Compare Source
1.429.0
Minor Changes
b441eb2Thanks @posthog! - Segment integration: allowsegmentto accept an integration config withfilterProperties, so customers can filter PostHog-generated enrichment properties before Segment sends an event to its destinations. Returningnullor throwing leaves the original Segment event unenriched.(2026-09-09)
Patch Changes
#4876
0c2a15fThanks @dustinbyrne! - Fix dead-click detection for text selection and editable caret gestures when mouse release is delayed, while continuing to report inert text clicks.(2026-09-09)
#4733
24fa541Thanks @dustinbyrne! - fix(web): avoid reporting clicks that select or unselect text as dead clicks(2026-09-09)
#4882
4bd37b7Thanks @lucasheriques! - Fix TypeScript compatibility between public replay events and the replay player.(2026-09-09)
#4833
f1395b6Thanks @posthog! - Keep surveys hidden while capture is disabled and preserve answers if capture stops before submission.(2026-09-09)
Updated dependencies [
0c2a15f,24fa541,b441eb2]:v1.428.11Compare Source
1.428.11
Patch Changes
d5abeceThanks @bs1180! - fix(surveys): don't show the default "Start typing..." placeholder when the survey's placeholder text is empty(2026-09-09)
v1.428.10Compare Source
1.428.10
Patch Changes
891eefaThanks @robbie-c! - Apply replay URL privacy settings to URL values in captured JSON-LD payloads.(2026-09-09)
891eefa,891eefa]:v1.428.9Compare Source
1.428.9
Patch Changes
e8b2be1Thanks @robbie-c! - Include the masked page URL with JSON-LD replay events.(2026-09-09)
e8b2be1]:v1.428.8Compare Source
v1.428.7Compare Source
1.428.7
Patch Changes
f93160dThanks @marandaneto! - Restore retry queue connectivity tracking when a page returns from the back-forward cache, without reactivating it after an explicitshutdown().(2026-09-08)
v1.428.6Compare Source
1.428.6
Patch Changes
b2affdcThanks @posthog! - PrefersendBeaconfor unbatched events, such as{ send_instantly: true }captures, once PostHog's ownpagehidehandler (orunloadfallback) marks the page as unloading. Captures frombeforeunloador earlierpagehidelisteners retain their normal transport. Preserve response-capable transports on active pages so failed requests can be retried, including whenfetchis unavailable.(2026-09-08)
b2affdc]:v1.428.5Compare Source
v1.428.4Compare Source
1.428.4
Patch Changes
4ae6405Thanks @marandaneto! - Prevent waking an idle tab from extending the previous session recording across the entire idle gap.(2026-09-08)
v1.428.3Compare Source
1.428.3
Patch Changes
4cd5717Thanks @marandaneto! - Wait for the initial remote config outcome before using cached autocapture enablement, so a newly disabled project does not capture events while its settings load. Disabled remote requests retain local startup behavior, and failed or incomplete responses retain the cached fallback.(2026-09-07)
v1.428.2Compare Source
1.428.2
Patch Changes
87b34afThanks @marandaneto! - Preserve Error details, causes, aggregate errors, and custom enumerable properties in event properties, including cross-realm Errors. Apply string truncation to ordinary capture properties and retain custom toJSON serialization for exception additional properties.(2026-09-07)
87b34af]:v1.428.1Compare Source
1.428.1
Patch Changes
988f03aThanks @marandaneto! - Recover autocapture targets for dropdown clicks retargeted to the page root, and attribute nested SVG icon clicks to their enclosing button or link while preserving privacy checks.(2026-09-07)
988f03a]:v1.428.0Compare Source
1.428.0
Minor Changes
3a5b322Thanks @marandaneto! - Add best-effort in-app browser attribution using$webview_appand$webview_app_version, without changing existing$browseror$browser_versionvalues. Detect explicit user-agent markers for Facebook, Facebook Lite, Messenger, Instagram, Threads, LinkedIn, Twitter, TikTok, WhatsApp, Snapchat, WeChat, LINE, Google, Bing, Pinterest, Naver, and KakaoTalk. Unknown apps and versions are omitted; missing markers do not imply a standalone browser.(2026-09-07)
Patch Changes
3a5b322]:v1.427.3Compare Source
1.427.3
Patch Changes
#4815
c207020Thanks @marandaneto! - Prevent queued session recording mutations from capturing content beneath DOM or shadow ancestors that have become blocked.(2026-09-07)
#4785
74ca945Thanks @marandaneto! - Clarify feature flag return-value terminology across SDK APIs. Afalsevalue is a conclusive off evaluation, whileundefinedmeans no evaluation is available. Remote evaluation omits globally inactive flags, whereas backend local evaluation can resolve cached inactive definitions tofalse.(2026-09-07)
#4797
fd4ece8Thanks @posthog! - Prevent exception autocapture from throwing when the handler it wraps belongs to another compartment or a destroyed document.(2026-09-07)
#4754
d73455eThanks @posthog! - Session replay now reports why a recording holds its buffer. An epoch that starts without user interaction keeps its snapshots and uploads nothing, while$recording_statusstill readsactive. Captured events now carry$sdk_debug_replay_flush_hold_reason(no_interaction_since_recording_startedorno_interaction_since_session_rotated), and the SDK logs the reason once per held epoch in debug mode. Discarding a recording (for example when the server turns replay off) also no longer uploads the stylesheet mutations the recorder emits as it stops.(2026-09-07)
#4788
95b159aThanks @fasyy612! - fix(replay): reset the idle clock on a session-id rotation so the new session's first snapshot is not dropped as idle and its recording does not start hours early(2026-09-07)
#4770
24f1937Thanks @fasyy612! - fix(replay): drain the compression queue synchronously on a session-id rotation so the old session's unflushed tail ships under the old session id instead of being discarded(2026-09-07)
#4666
5e74132Thanks @robbie-c! - Preserve universally safe JSON-LD properties and allowlisted tree structure when replay redacts other fields. Keep only DOM-backed ID fragments. Keep only@typevalues shaped like a Schema.org term, and limit types and payloads. Publish a reusable sanitization contract fixture.(2026-09-07)
#4814
21dcebdThanks @posthog! - Prevent invalid clock values from breaking UUID generation and continue capturing replay chunks after a chunk fails.(2026-09-07)
Updated dependencies [
74ca945,5e74132,21dcebd]:v1.427.2Compare Source
1.427.2
Patch Changes
fd87cafThanks @marandaneto! - Prevent failures in automatic and manual exception processing from escaping into customer code.(2026-09-04)
Configuration
📅 Schedule: (in timezone Asia/Shanghai)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.