chore(deps): bump posthog-node from 5.14.0 to 5.47.0

[dependabot]

Bumps posthog-node from 5.14.0 to 5.47.0.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.47.0

5.47.0

Minor Changes

• #4308 6e7f3ae Thanks @​ablaszkiewicz! - Emit the release id that posthog-cli injects into your bundle as $release_id on $exception events, so PostHog can attach exceptions to a release without joining through symbol sets. Adds getInjectedReleaseId() to @posthog/core. The property is only attached when an injected release id can be read. (2026-07-30)

Patch Changes

• Updated dependencies [6e7f3ae]:
  • @​posthog/core@​1.46.0

posthog-node@5.46.1

5.46.1

Patch Changes

• #4234 6c8fde0 Thanks @​hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)
• Updated dependencies [6c8fde0]:
  • @​posthog/core@​1.45.1

posthog-node@5.46.0

5.46.0

Minor Changes

• #4172 9621830 Thanks @​haacked! - send minimal $feature_flag_called events when the server enables it

  When the v2 /flags response carries minimalFlagCalledEvents: true (or, for posthog-node local evaluation, the flag-definitions payload carries minimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false), $feature_flag_called events are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties, $set/$set_once, the $feature/<key> enumeration, $active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags, has_experiment unknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration. before_send runs after the filter and may re-add stripped properties. (2026-07-20)

Patch Changes

• Updated dependencies [9621830]:
  • @​posthog/core@​1.44.0

posthog-node@5.45.2

5.45.2

Patch Changes

• #4168 06d19a2 Thanks @​dustinbyrne! - Avoid Next.js Edge runtime warnings for native compression and fatal error handling. (2026-07-16)
• Updated dependencies [06d19a2]:
  • @​posthog/core@​1.43.1

posthog-node@5.45.1

5.45.1

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.47.0

Minor Changes

• #4308 6e7f3ae Thanks @​ablaszkiewicz! - Emit the release id that posthog-cli injects into your bundle as $release_id on $exception events, so PostHog can attach exceptions to a release without joining through symbol sets. Adds getInjectedReleaseId() to @posthog/core. The property is only attached when an injected release id can be read. (2026-07-30)

Patch Changes

• Updated dependencies [6e7f3ae]:
  • @​posthog/core@​1.46.0

5.46.1

Patch Changes

• #4234 6c8fde0 Thanks @​hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)
• Updated dependencies [6c8fde0]:
  • @​posthog/core@​1.45.1

5.46.0

Minor Changes

• #4172 9621830 Thanks @​haacked! - send minimal $feature_flag_called events when the server enables it

  When the v2 /flags response carries minimalFlagCalledEvents: true (or, for posthog-node local evaluation, the flag-definitions payload carries minimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false), $feature_flag_called events are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties, $set/$set_once, the $feature/<key> enumeration, $active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags, has_experiment unknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration. before_send runs after the filter and may re-add stripped properties. (2026-07-20)

Patch Changes

• Updated dependencies [9621830]:
  • @​posthog/core@​1.44.0

5.45.2

Patch Changes

• #4168 06d19a2 Thanks @​dustinbyrne! - Avoid Next.js Edge runtime warnings for native compression and fatal error handling. (2026-07-16)
• Updated dependencies [06d19a2]:
  • @​posthog/core@​1.43.1

5.45.1

Patch Changes

• #4164 9eb2b28 Thanks @​dustinbyrne! - Fix the default Node.js event flush interval at 5 seconds. (2026-07-16)

... (truncated)

Commits

• 4ef8a41 chore: update versions and lockfile [version bump]
• 6e7f3ae feat: emit $release_id from the injected release id (#4308)
• 3b2e68d fix: prevent Jest worker resource leaks (#4247)
• 7c00f92 chore: update versions and lockfile [version bump]
• 34a03e2 chore: update versions and lockfile [version bump]
• 9621830 feat(flags): minimize $feature_flag_called events for non-experiment flags (#...
• 8bf1b19 chore: ban object-literal type assertions in package sources (#4192)
• be17ec1 chore: update versions and lockfile [version bump]
• 06d19a2 fix: avoid Next.js Edge runtime warnings (#4168)
• 60c2492 chore: update versions and lockfile [version bump]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for posthog-node since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)