[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
posthog-js (source)	1.438.24 → 1.445.4

---

Release Notes

PostHog/posthog-js (posthog-js)

v1.445.4

Compare Source

1.445.4

Patch Changes

• #​5541 13457bd Thanks @​adityareddy-dev! - Preserve CSS URL fragments when resolving relative paths in session recordings.
  (2026-11-04)

• #​5543 720059d Thanks @​veryayskiy! - skip the support widget's initial ticket list request for new anonymous visitors
  (2026-11-04)

v1.445.3

Compare Source

1.445.3

Patch Changes

• #​5521 a265612 Thanks @​phillram! - Web experiments that run on a feature flag now honor each variant's URL conditions, so a variant only changes the pages it targets.
  (2026-11-04)

v1.445.2

Compare Source

1.445.2

Patch Changes

• #​5481 5764ddd Thanks @​gustavohstrassburger! - Feature flags read before the user opts in to capturing now send $feature_flag_called when the user opts in, without being read again. This fixes missing exposures from the React and React Native hooks, which read a flag once on mount.
  (2026-11-04)
• Updated dependencies [5764ddd]:
  • @​posthog/browser-common@0.10.5
  • @​posthog/core@1.63.1

v1.445.1

Compare Source

1.445.1

Patch Changes

• #​5504 7e023a2 Thanks @​seandph! - fix: opt_in_capturing() now captures the $opt_in event (or the custom captureEventName) only when the user was not already opted in. Consent tools often re-apply stored consent on every page load, which sent one billed $opt_in event per page. Opting out and back in, or calling reset() first, still captures it.
  (2026-11-03)

v1.445.0

Compare Source

1.445.0

Minor Changes

• #​5494 b033b8c Thanks @​marandaneto! - Add release integrity manifests and customer-pinned core integrity support to the static loader.
  (2026-11-03)

v1.444.4

Compare Source

1.444.4

Patch Changes

• #​5492 84a5277 Thanks @​marandaneto! - Sanitize web experiment HTML transforms; unsupported tags and attributes are now removed.
  (2026-11-02)

• #​5505 3fbb667 Thanks @​majicmaj! - Recognize self-declared Lightpanda headless browsers in bot detection.
  (2026-11-02)

• #​5503 89c3a6b Thanks @​abdullah129026! - Fix tab widget surveys ignoring the selected position. The popup is only centred next to the tab for the default right position or next to trigger; any other position picked in the survey appearance settings is now honoured.
  (2026-11-02)

• Updated dependencies [3fbb667, 89c3a6b]:

  • @​posthog/core@1.62.1
  • @​posthog/browser-common@0.10.4

v1.444.3

Compare Source

1.444.3

Patch Changes

• #​5493 5e872e1 Thanks @​marandaneto! - Respect external script loading policies when reusing scripts or inserting deferred dependencies.
  (2026-11-02)

• #​5491 aedb488 Thanks @​marandaneto! - Sanitize survey HTML descriptions while preserving rich text formatting.
  (2026-11-02)

• Updated dependencies [aedb488]:

  • @​posthog/browser-common@0.10.3

v1.444.2

Compare Source

1.444.2

Patch Changes

• #​5512 bc6b54c Thanks @​robbie-c! - Fix session replay keeping a stylesheet's old CSS when a <link> changes to a sheet the recorder cannot read
  (2026-11-02)

v1.444.1

Compare Source

1.444.1

Patch Changes

• #​5490 0bf0316 Thanks @​robbie-c! - Fix session replay missing stylesheets that load after 5 seconds or after a <link> changes its rel or href
  (2026-11-02)

v1.444.0

Compare Source

1.444.0

Minor Changes

• #​5480 9bd0e80 Thanks @​veryayskiy! - Add support widget theming: conversations.theme init option, posthog.conversations.setTheme(), dark mode, and --ph-conv-* CSS custom properties
  (2026-10-30)

Patch Changes

• Updated dependencies [9bd0e80]:
  • @​posthog/types@1.419.0

v1.443.0

Compare Source

1.443.0

Minor Changes

• #​5470 41ae7fd Thanks @​marandaneto! - Add a nonblocking local bootstrap with early-call queuing, and make hosted and local loaders honor the selected latest, major, or exact-version SDK namespace.
  (2026-10-30)

v1.442.1

Compare Source

1.442.1

Patch Changes

• #​5341 de6b06f Thanks @​sebxt! - Keep the rest of the URL when masking personal data query params and a query value contains ? or the hash contains #.
  (2026-10-29)
• Updated dependencies [de6b06f]:
  • @​posthog/browser-common@0.10.2

v1.442.0

Compare Source

1.442.0

Minor Changes

• #​5467 afde45e Thanks @​veryayskiy! - Add posthog.conversations.open() and posthog.conversations.close() to open and close the support chat panel
  (2026-10-29)

v1.441.2

Compare Source

1.441.2

Patch Changes

• #​5421 34833f2 Thanks @​frostfire575! - Session replay releases a removed shadow DOM host as soon as it leaves the page, instead of keeping it and its detached subtree in memory until the next full snapshot.
  (2026-10-28)

v1.441.1

Compare Source

1.441.1

Patch Changes

• #​5222 6d12d24 Thanks @​posthog! - Fall back to Math.random when crypto.getRandomValues throws, so UUID generation no longer breaks capture.
  (2026-10-28)
• Updated dependencies [6d12d24]:
  • @​posthog/browser-common@0.10.1

v1.441.0

Compare Source

1.441.0

Minor Changes

• #​5269 950d034 Thanks @​dustinbyrne! - Add $input_value to autocapture change events for fields marked data-ph-capture-value, or matched by the new autocapture.capture_value_css_selector_allowlist option (CSS selectors or an (element) => boolean predicate).
  (2026-10-28)

Patch Changes

• Updated dependencies [950d034]:
  • @​posthog/browser-common@0.10.0
  • @​posthog/types@1.418.0

v1.440.0

Compare Source

1.440.0

Minor Changes

• #​5406 285d874 Thanks @​marandaneto! - Add a single-tag browser SDK loader with URL or attribute tokens and optional deferred initialization.
  (2026-10-27)

Patch Changes

• Updated dependencies [96d7ff2]:
  • @​posthog/core@1.61.1

v1.439.2

Compare Source

1.439.2

Patch Changes

• #​5427 8a9a066 Thanks @​posthog! - Fix stale identity when restoring a page from the back-forward cache
  (2026-10-27)

v1.439.1

Compare Source

1.439.1

Patch Changes

• #​5244 52c84e2 Thanks @​61465! - Port upstream rrweb #​1652 into the vendored MutationBuffer to fix a 9–10 s session-replay main-thread freeze when a single render mounts many sibling nodes (e.g. a 50 × 35 table at ~13 000 nodes). The pre-fix addList-based drain tail-rescanned every pass and ran in O(n²); the new drain iterates addedSet in topological order using dom.previousSibling / dom.lastChild / dom.nextSibling and runs in O(n). Fixes #​5227.

  The walk-up loop treats a ShadowRoot parent as its shadow host for ancestry checks so shadow children of a moved host are never serialized before the host itself. @posthog/rrweb-utils picks up three new untainted-prototype accessors (previousSibling, nextSibling, lastChild) that the drain depends on. Nodes that still can't resolve a parent at emission time are counted and reported in one summary console.warn per emission, so a dropped subtree doesn't cascade through the replay via the console-record plugin. (2026-10-27)

v1.439.0

Compare Source

1.439.0

Minor Changes

• #​5405 3150079 Thanks @​marandaneto! - Add defaults: 'latest' to follow the newest defaults and report the applied date in events.
  (2026-10-27)

Patch Changes

• Updated dependencies [3150079]:
  • @​posthog/types@1.417.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 08:00 AM and 05:59 PM, Monday through Friday (* 8-17 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	launchpad	ac04988	Commit Preview URL Branch Preview URL	Nov 07 2026, 10:37 AM