chore(web): Upgrade @posthog/ai

[brendan-kellam]

Summary by CodeRabbit

• Chores
  • Removed an explicit version override for the langsmith dependency to relax constraints.
  • Upgraded the @posthog/ai dependency to ^7.18.7.
  • Added a changelog entry noting the dependency upgrade.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 37524119-8d3f-4a54-a781-667c75a52427

📥 Commits

Reviewing files that changed from the base of the PR and between a615659 and 508ba85.

📒 Files selected for processing (1)

• CHANGELOG.md

---

Walkthrough

Removes a root langsmith resolutions override and upgrades @posthog/ai in packages/web from ^7.15.0 to ^7.18.7, with a corresponding changelog entry.

Changes

Dependency Updates

Layer / File(s)	Summary
Langsmith resolution cleanup package.json	The resolutions entry for langsmith@npm:>=0.5.0 <1.0.0 is removed, eliminating the explicit version override.
@posthog/ai version upgrade packages/web/package.json, CHANGELOG.md	The @posthog/ai dependency is bumped from ^7.15.0 to ^7.18.7 and an Unreleased → Changed changelog entry documenting the upgrade is added.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• sourcebot-dev/sourcebot#882: Both PRs update the @posthog/ai dependency in packages/web/package.json for PostHog LLM analytics integration.

Suggested reviewers

• msukkari

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: upgrading the @posthog/ai dependency in the web package, which is reflected in the primary diff of updating the package version from ^7.15.0 to ^7.18.7.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bkellam/upgrade-posthog-ai

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

License Audit

⚠️ Status: PASS

Metric	Count
Total packages	2070
Resolved (non-standard)	11
Unresolved	0
Strong copyleft	0
Weak copyleft	39

Weak Copyleft Packages (informational)

Package	Version	License
@img/sharp-libvips-darwin-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.0.5	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-ppc64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-riscv64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-wasm32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-wasm32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-win32-arm64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
axe-core	4.10.3	MPL-2.0
dompurify	3.4.0	(MPL-2.0 OR Apache-2.0)
lightningcss	1.32.0	MPL-2.0
lightningcss-android-arm64	1.32.0	MPL-2.0
lightningcss-darwin-arm64	1.32.0	MPL-2.0
lightningcss-darwin-x64	1.32.0	MPL-2.0
lightningcss-freebsd-x64	1.32.0	MPL-2.0
lightningcss-linux-arm-gnueabihf	1.32.0	MPL-2.0
lightningcss-linux-arm64-gnu	1.32.0	MPL-2.0
lightningcss-linux-arm64-musl	1.32.0	MPL-2.0
lightningcss-linux-x64-gnu	1.32.0	MPL-2.0
lightningcss-linux-x64-musl	1.32.0	MPL-2.0
lightningcss-win32-arm64-msvc	1.32.0	MPL-2.0
lightningcss-win32-x64-msvc	1.32.0	MPL-2.0

Resolved Packages (11)

Package	Version	Original	Resolved	Source
@react-grab/cli	0.1.23	UNKNOWN	MIT	LICENSE file in package tarball (via unpkg); confirmed at aidenybai/react-grab GitHub repo
@react-grab/cli	0.1.29	UNKNOWN	MIT	LICENSE file in package tarball (via unpkg); confirmed at aidenybai/react-grab GitHub repo
@react-grab/mcp	0.1.29	UNKNOWN	MIT	LICENSE file in package tarball (via unpkg); confirmed at aidenybai/react-grab GitHub repo
codemirror-lang-elixir	4.0.0	UNKNOWN	Apache-2.0	LICENSE file at livebook-dev/codemirror-lang-elixir GitHub repo; npm registry latest version also declares Apache-2.0
element-source	0.0.3	UNKNOWN	MIT	LICENSE file in package tarball (via unpkg); confirmed at aidenybai/element-source GitHub repo
lezer-elixir	1.1.2	UNKNOWN	Apache-2.0	LICENSE file at livebook-dev/lezer-elixir GitHub repo; npm registry latest version also declares Apache-2.0
map-stream	0.1.0	UNKNOWN	MIT	LICENCE file at dominictarr/map-stream GitHub repo; latest package.json also declares MIT
memorystream	0.3.1	UNKNOWN	MIT	extracted from 'licenses' array in npm registry metadata (type: MIT)
pause-stream	0.0.11	MIT,Apache2	MIT	extracted from array (package is dual-licensed under MIT or Apache-2.0; MIT chosen as the more permissive option)
posthog-js	1.369.0	SEE LICENSE IN LICENSE	Apache-2.0	LICENSE file at PostHog/posthog-js GitHub repo
valid-url	1.0.9	UNKNOWN	MIT	LICENSE file at ogt/valid-url GitHub repo