posthog-js@1.427.3

1.427.3

Patch Changes

• #4815 c207020 Thanks @marandaneto! - Prevent queued session recording mutations from capturing content beneath DOM or shadow ancestors that have become blocked.
  (2026-09-07)

• #4785 74ca945 Thanks @marandaneto! - Clarify feature flag return-value terminology across SDK APIs. A false value is a conclusive off evaluation, while undefined means no evaluation is available. Remote evaluation omits globally inactive flags, whereas backend local evaluation can resolve cached inactive definitions to false.
  (2026-09-07)

• #4797 fd4ece8 Thanks @posthog! - Prevent exception autocapture from throwing when the handler it wraps belongs to another compartment or a destroyed document.
  (2026-09-07)

• #4754 d73455e Thanks @posthog! - Session replay now reports why a recording holds its buffer. An epoch that starts without user interaction keeps its snapshots and uploads nothing, while $recording_status still reads active. Captured events now carry $sdk_debug_replay_flush_hold_reason (no_interaction_since_recording_started or no_interaction_since_session_rotated), and the SDK logs the reason once per held epoch in debug mode. Discarding a recording (for example when the server turns replay off) also no longer uploads the stylesheet mutations the recorder emits as it stops.
  (2026-09-07)

• #4788 95b159a Thanks @fasyy612! - fix(replay): reset the idle clock on a session-id rotation so the new session's first snapshot is not dropped as idle and its recording does not start hours early
  (2026-09-07)

• #4770 24f1937 Thanks @fasyy612! - fix(replay): drain the compression queue synchronously on a session-id rotation so the old session's unflushed tail ships under the old session id instead of being discarded
  (2026-09-07)

• #4666 5e74132 Thanks @robbie-c! - Preserve universally safe JSON-LD properties and allowlisted tree structure when replay redacts other fields. Keep only DOM-backed ID fragments. Keep only @type values shaped like a Schema.org term, and limit types and payloads. Publish a reusable sanitization contract fixture.
  (2026-09-07)

• #4814 21dcebd Thanks @posthog! - Prevent invalid clock values from breaking UUID generation and continue capturing replay chunks after a chunk fails.
  (2026-09-07)

• Updated dependencies [74ca945, 5e74132, 21dcebd]:

  • @posthog/core@1.50.6
  • @posthog/types@1.409.1
  • @posthog/browser-common@0.7.3