Skip to content

chore(deps): bump posthog-node from 4.18.0 to 5.29.2#504

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/posthog-node-5.29.2
Open

chore(deps): bump posthog-node from 4.18.0 to 5.29.2#504
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/posthog-node-5.29.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 12, 2026

Bumps posthog-node from 4.18.0 to 5.29.2.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.29.2

5.29.2

Patch Changes

  • #3351 c735b08 Thanks @​dmarticus! - Send $device_id as a top-level field in /flags requests so the feature flags service can use it for device-based bucketing during remote evaluation (2026-04-09)
  • Updated dependencies [c735b08]:
    • @​posthog/core@​1.25.2

posthog-node@5.29.1

5.29.1

Patch Changes

  • Updated dependencies [57ee5b2]:
    • @​posthog/core@​1.25.1

posthog-node@5.29.0

5.29.0

Minor Changes

Patch Changes

  • Updated dependencies [fc5589f]:
    • @​posthog/core@​1.25.0

posthog-node@5.28.11

5.28.11

Patch Changes

  • Updated dependencies [a01a3d5]:
    • @​posthog/core@​1.24.6

posthog-node@5.28.10

5.28.10

Patch Changes

  • #3309 197eeda Thanks @​marandaneto! - Extract CLI and sourcemap utilities from @​posthog/core into @​posthog/plugin-utils to remove cross-spawn from React Native dependencies (2026-04-01)
  • Updated dependencies [197eeda]:
    • @​posthog/core@​1.24.5

posthog-node@5.28.9

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.29.2

Patch Changes

  • #3351 c735b08 Thanks @​dmarticus! - Send $device_id as a top-level field in /flags requests so the feature flags service can use it for device-based bucketing during remote evaluation (2026-04-09)
  • Updated dependencies [c735b08]:
    • @​posthog/core@​1.25.2

5.29.1

Patch Changes

  • Updated dependencies [57ee5b2]:
    • @​posthog/core@​1.25.1

5.29.0

Minor Changes

Patch Changes

  • Updated dependencies [fc5589f]:
    • @​posthog/core@​1.25.0

5.28.11

Patch Changes

  • Updated dependencies [a01a3d5]:
    • @​posthog/core@​1.24.6

5.28.10

Patch Changes

  • #3309 197eeda Thanks @​marandaneto! - Extract CLI and sourcemap utilities from @​posthog/core into @​posthog/plugin-utils to remove cross-spawn from React Native dependencies (2026-04-01)
  • Updated dependencies [197eeda]:
    • @​posthog/core@​1.24.5

5.28.9

Patch Changes

  • Updated dependencies [a863914]:
    • @​posthog/core@​1.24.4

... (truncated)

Commits
  • 71e99fd chore: update versions and lockfile [version bump]
  • 64363a5 chore: update versions and lockfile [version bump]
  • 749f62e chore: update versions and lockfile [version bump]
  • 8571c13 chore: update versions and lockfile [version bump]
  • 356fb33 chore: update versions and lockfile [version bump]
  • 4d6cef4 chore: update versions and lockfile [version bump]
  • bec9814 chore: update versions and lockfile [version bump]
  • ee9b06a fix(node): fix flaky nestjs interceptor test (#3293)
  • 287eb91 chore: update versions and lockfile [version bump]
  • 7327809 chore: update versions and lockfile [version bump]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for posthog-node since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) from 4.18.0 to 5.29.2.
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.29.2/packages/node)

---
updated-dependencies:
- dependency-name: posthog-node
  dependency-version: 5.29.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 12, 2026
@github-actions github-actions Bot added the chore label Apr 12, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Apr 12, 2026

Greptile Summary

Bumps posthog-node from 4.18.0 to 5.29.2 (a major v4→v5 upgrade). The only usage in the codebase (apps/server/src/lib/metrics.ts) calls new PostHog(key, {host}), client.capture(), and client.shutdown() — all stable core APIs that are unchanged in v5. The notable v5.x breaking change (removal of implicit sendFeatureFlags in v5.5.0) does not apply here since feature flags are not used. The axios/follow-redirects transitive dependencies are cleanly dropped in favour of @posthog/core.

Confidence Score: 5/5

Safe to merge — only core PostHog APIs are used and all remain compatible with v5.

The codebase uses only PostHog constructor, capture, and shutdown, which are stable across v4 and v5. No feature-flag APIs are used, so the one documented v5 breaking change is irrelevant. Transitive removal of axios is a net improvement.

No files require special attention.

Important Files Changed

Filename Overview
apps/server/package.json Bumps posthog-node from ^4.17.0 to ^5.29.2; no API surface changes required in consuming code
bun.lock Lockfile updated: posthog-node 4.18.0→5.29.2 (drops axios/follow-redirects, adds @posthog/core); chrome-devtools-mcp 0.20.0→0.21.0 as a side-effect of the lock refresh (pinned to "latest")

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[metrics.ts] -->|new PostHog / capture / shutdown| B[posthog-node v5.29.2]
    B --> C["@posthog/core 1.25.2"]
    B -.->|optional peer| D[rxjs]
    E[posthog-node v4.18.0] --> F[axios 1.13.5]
    F --> G[follow-redirects]
    style E fill:#ffcccc,stroke:#cc0000
    style F fill:#ffcccc,stroke:#cc0000
    style G fill:#ffcccc,stroke:#cc0000
    style B fill:#ccffcc,stroke:#007700
    style C fill:#ccffcc,stroke:#007700
Loading

Reviews (1): Last reviewed commit: "chore(deps): bump posthog-node from 4.18..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants