[Snyk] Upgrade posthog-js from 1.111.0 to 1.116.6

[simlarsen]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade posthog-js from 1.111.0 to 1.116.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 23 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2024-03-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	432/1000 Why? Proof of Concept exploit, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: posthog-js

• 1.116.6 - 2024-03-25
  

  1.116.6 - 2024-03-25

  • fix: Reloading toolbar after closing (#1095)
• 1.116.5 - 2024-03-23
  

  1.116.5 - 2024-03-23

  • fix: posthog init should reject invalid config in TypeScript (#1097)
• 1.116.4 - 2024-03-22
  

  1.116.4 - 2024-03-22

  • fix: custom event on sampling decision (#1094)
  • feat: signal we have wrapped fetch (#1083)
• 1.116.3 - 2024-03-20
  

  1.116.3 - 2024-03-20

  • fix: Return this if already loaded (#1092)
• 1.116.2 - 2024-03-18
  

  1.116.2 - 2024-03-18

  • feat: add property so we can check if a client is using a proxy (#1084)
• 1.116.1 - 2024-03-18
  

  1.116.1 - 2024-03-18

  • chore: Remove v2 rrweb checks (#1080)
• 1.116.0 - 2024-03-15
  

  1.116.0 - 2024-03-15

  • fix: allow payload scrubbing override (#1085)
• 1.115.2 - 2024-03-15
  

  1.115.2 - 2024-03-15

  • fix: canvas recording patches (#1082)
  • chore: remove cypress log noise (#1086)
• 1.115.1 - 2024-03-15
  

  1.115.1 - 2024-03-15

  • chore: remove v1 rrweb loading (#1078)
• 1.115.0 - 2024-03-14
  

  1.115.0 - 2024-03-14

  • feat: track recording URL without pageview capture (#1076)
  • fix: return typing of global functions (#1081)
• 1.114.2 - 2024-03-12
• 1.114.1 - 2024-03-12
• 1.114.0 - 2024-03-12
• 1.113.4 - 2024-03-12
• 1.113.3 - 2024-03-12
• 1.113.2 - 2024-03-11
• 1.113.1 - 2024-03-11
• 1.113.0 - 2024-03-11
• 1.112.1 - 2024-03-11
• 1.112.0 - 2024-03-08
• 1.111.3 - 2024-03-07
• 1.111.2 - 2024-03-06
• 1.111.1 - 2024-03-06
• 1.111.0 - 2024-03-05

from posthog-js GitHub release notes

Commit messages

Package name: posthog-js

• 174f83b chore: Bump version to 1.116.6
• b5f783c fix: Reloading toolbar after closing ([Snyk] Security upgrade axios from 1.6.3 to 1.6.4 #1095)
• f1771a0 chore: Bump version to 1.116.5
• 3f6f550 fix: posthog init should reject invalid config in TypeScript ([Snyk] Security upgrade axios from 1.6.3 to 1.6.4 #1097)
• d6280fb chore: Bump version to 1.116.4
• d80af4c fix: custom event on sampling decision ([Snyk] Security upgrade typeorm from 0.3.17 to 0.3.18 #1094)
• 123bd01 feat: signal we have wrapped fetch ([Snyk] Upgrade ts-node from 10.9.1 to 10.9.2 #1083)
• 77148cb chore: Bump version to 1.116.3
• 6fd350d fix: Return this if already loaded ([Snyk] Upgrade @clickhouse/client from 0.2.6 to 0.2.7 #1092)
• 8e4eef2 chore: Bump version to 1.116.2
• e0d0801 feat: add property so we can check if a client is using a proxy (fix: update status page html css page breadcrump #1084)
• 5b3c1d3 chore: Bump version to 1.116.1
• 0e1bc8c chore: Remove v2 rrweb checks (Bump msgpackr from 1.10.0 to 1.10.1 in /CommonServer #1080)
• ec6fb94 chore: Bump version to 1.116.0
• 7ceed28 fix: allow payload scrubbing override (fix: update wrong workflow breadcrumbs #1085)
• bf605f9 chore: Bump version to 1.115.2
• 7dbde87 fix: canvas recording patches (fix: schedule ongoing error #1082)
• 59ac3f2 chore: remove cypress log noise (Enhancement: Ensure page titles are consistent #1086)
• 9df1369 chore: Bump version to 1.115.1
• b40a968 chore: remove v1 rrweb loading ([Snyk] Security upgrade axios from 1.6.2 to 1.6.3 #1078)
• b635a77 chore: Bump version to 1.115.0
• cdb1fb9 feat: track recording URL without pageview capture ([Snyk] Security upgrade axios from 1.6.2 to 1.6.3 #1076)
• f6442ef fix: return typing of global functions ([Snyk] Upgrade ts-node from 10.9.1 to 10.9.2 #1081)
• 18479b4 chore: Bump version to 1.114.2

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs