Skip to content

chore(deps): bump the npm-dependencies group with 6 updates - #26

Merged
marandaneto merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-634f69a140
Sep 5, 2026
Merged

chore(deps): bump the npm-dependencies group with 6 updates#26
marandaneto merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-634f69a140

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 6 updates:

Package From To
posthog-node 5.50.0 5.51.4
@opencode-ai/plugin 1.0.69 1.18.25
@opencode-ai/sdk 1.0.69 1.18.25
@types/node 26.2.0 26.4.0
oxfmt 0.64.0 0.65.0
oxlint 1.79.0 1.80.0

Updates posthog-node from 5.50.0 to 5.51.4

Release notes

Sourced from posthog-node's releases.

posthog-node@5.51.4

5.51.4

Patch Changes

  • #4636 74ff567 Thanks @​yfwmaniish! - Narrow the pinterest entry in the bot-detection blocklist to pinterestbot, so real users on Pinterest's in-app browser (whose UA also contains the substring pinterest) are no longer misclassified as bots and silently excluded from analytics. The crawler's other UA variant remains covered by the existing generic bot.htm entry, so no bot-detection coverage is lost. (2026-08-27)

  • #4660 dfc3b59 Thanks @​posthog! - Honor evaluationContexts during local evaluation — flags whose evaluation contexts don't overlap the configured list are no longer evaluated locally and resolve to undefined. (2026-08-27)

  • Updated dependencies [74ff567]:

    • @​posthog/core@​1.49.1

posthog-node@5.51.3

5.51.3

Patch Changes

posthog-node@5.51.2

5.51.2

Patch Changes

  • #4639 1faeb74 Thanks @​marandaneto! - Handle empty feature flag evaluation key scopes without running local or remote evaluation. (2026-08-25)

  • #4610 930de19 Thanks @​marandaneto! - Share feature flag matching, hashing, variant, and payload evaluation helpers across the Node.js and Convex SDKs without changing their runtime-specific SemVer behavior. (2026-08-25)

  • Updated dependencies [930de19, d4eee8f]:

    • @​posthog/core@​1.48.11
Changelog

Sourced from posthog-node's changelog.

5.51.4

Patch Changes

  • #4636 74ff567 Thanks @​yfwmaniish! - Narrow the pinterest entry in the bot-detection blocklist to pinterestbot, so real users on Pinterest's in-app browser (whose UA also contains the substring pinterest) are no longer misclassified as bots and silently excluded from analytics. The crawler's other UA variant remains covered by the existing generic bot.htm entry, so no bot-detection coverage is lost. (2026-08-27)

  • #4660 dfc3b59 Thanks @​posthog! - Honor evaluationContexts during local evaluation — flags whose evaluation contexts don't overlap the configured list are no longer evaluated locally and resolve to undefined. (2026-08-27)

  • Updated dependencies [74ff567]:

    • @​posthog/core@​1.49.1

5.51.3

Patch Changes

5.51.2

Patch Changes

  • #4639 1faeb74 Thanks @​marandaneto! - Handle empty feature flag evaluation key scopes without running local or remote evaluation. (2026-08-25)

  • #4610 930de19 Thanks @​marandaneto! - Share feature flag matching, hashing, variant, and payload evaluation helpers across the Node.js and Convex SDKs without changing their runtime-specific SemVer behavior. (2026-08-25)

  • Updated dependencies [930de19, d4eee8f]:

    • @​posthog/core@​1.48.11

5.51.1

Patch Changes

  • #4614 3593c43 Thanks @​iamomiid! - The Node SDK now sends the raw gzip bytes as the request body instead of wrapping them in a Blob. On Node 24.16 and later, reading a Blob request body leaks a native BlobReader that is never released, so a service calling capture() and flush() once per request grew by roughly 2.3 KB of heap per event and never gave it back. This completes the work in #4423: switching to node:zlib removed the compression-time Blob reads, but the body itself was still a Blob and still got read once per request. Compression behaviour, headers and the wire format are unchanged, and the edge build keeps using CompressionStream. (2026-08-24)
  • Updated dependencies [3593c43]:
    • @​posthog/core@​1.48.9

5.51.0

Minor Changes

  • #4564 233ac88 Thanks @​marandaneto! - Fall back to remote evaluation when a requested flag is missing from loaded local definitions. This changes scoped calls that previously omitted the flag without making a request. (2026-08-24)
Commits
  • f136c60 chore: update versions and lockfile [version bump]
  • dfc3b59 fix(node): honor evaluationContexts during local evaluation (#4660)
  • db9c291 chore: update versions and lockfile [version bump]
  • e899b1c fix(flags): align presence operator semantics (#4651)
  • d22676a chore: update versions and lockfile [version bump]
  • 1faeb74 fix(flags): handle empty evaluation key scopes (#4639)
  • d4eee8f refactor(surveys): share property matching helpers (#4611)
  • 930de19 refactor(feature-flags): share local evaluation helpers (#4610)
  • 0540533 chore: update versions and lockfile [version bump]
  • 3593c43 fix(node): send gzip bytes instead of a Blob request body (#4614)
  • Additional commits viewable in compare view

Updates @opencode-ai/plugin from 1.0.69 to 1.18.25

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opencode-ai/plugin since your current version.


Updates @opencode-ai/sdk from 1.0.69 to 1.18.25

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opencode-ai/sdk since your current version.


Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates oxfmt from 0.64.0 to 0.65.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

Updates oxlint from 1.79.0 to 1.80.0

Release notes

Sourced from oxlint's releases.

oxlint v1.80.0 & oxfmt v0.65.0

Table of Contents

Oxlint v1.80.0

🚀 Features

  • 70c3e35 linter/typescript/no-confusing-non-null-assertion: Implement suggestion (#26012) (Mikhail Baev)

🐛 Bug Fixes

  • 17ae11c linter/oxc/double-comparisons: Handle grouped logical expressions (#26044) (camc314)
  • 8a353a7 linter/eslint/no-control-regex: Refine help message text (#25996) (Rahul Mishra)
  • 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)
  • 8d94cd1 linter/eslint/no-useless-rename: Preserve type modifiers (#26020) (Cameron)
  • 2cde1f6 rust: Address nightly deprecations (#25998) (Boshen)
  • 51d36d7 linter/vue: Resolve vue imports via shared import helpers (#25903) (Connor Shea)
  • 83a68d2 linter/react/no-react-children: Resolve react imports by symbol (#25901) (Connor Shea)
  • 124e196 linter: Resolve globals by reference, not by name (#25905) (Connor Shea)
  • a701bcc linter: Remove invalid React compiler doc links (#25900) (Boshen)

📚 Documentation

  • 9b7e153 linter: Set version to 1.79.0 for rules shipped in 1.79.0 (#25902) (connorshea)

Oxfmt v0.65.0

🐛 Bug Fixes

  • bf37dd5 formatter: Preserve class decorators before export when the statement is suppressed (#26034) (leaysgur)
Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.81.0] - 2026-08-31

📚 Documentation

  • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-dependencies group with 6 updates
bc40a87 
Bumps the npm-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.50.0` | `5.51.4` |
| @opencode-ai/plugin | `1.0.69` | `1.18.25` |
| [@opencode-ai/sdk](https://github.com/sst/opencode-sdk-js) | `1.0.69` | `1.18.25` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.64.0` | `0.65.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.79.0` | `1.80.0` |


Updates `posthog-node` from 5.50.0 to 5.51.4
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.51.4/packages/node)

Updates `@opencode-ai/plugin` from 1.0.69 to 1.18.25

Updates `@opencode-ai/sdk` from 1.0.69 to 1.18.25
- [Release notes](https://github.com/sst/opencode-sdk-js/releases)
- [Changelog](https://github.com/anomalyco/opencode-sdk-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sst/opencode-sdk-js/commits)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `oxfmt` from 0.64.0 to 0.65.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.65.0/npm/oxfmt)

Updates `oxlint` from 1.79.0 to 1.80.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.80.0/npm/oxlint)

---
updated-dependencies:
- dependency-name: posthog-node
  dependency-version: 5.51.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opencode-ai/plugin"
  dependency-version: 1.18.25
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@opencode-ai/sdk"
  dependency-version: 1.18.25
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: oxfmt
  dependency-version: 0.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: oxlint
  dependency-version: 1.80.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 4, 2026 21:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@marandaneto
marandaneto merged commit 8e1b582 into main Sep 5, 2026
9 checks passed
@marandaneto
marandaneto deleted the dependabot/npm_and_yarn/npm-dependencies-634f69a140 branch September 5, 2026 06:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@marandaneto marandaneto marandaneto approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@marandaneto