chore(deps): bump posthog-js from 1.386.8 to 1.396.4

[dependabot]

Bumps posthog-js from 1.386.8 to 1.396.4.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.396.4

1.396.4

Patch Changes

• #4035 18e543b Thanks @​posthog! - fix(web): isolate onFeatureFlags callbacks so a throwing user handler no longer breaks the remaining callback chain or gets misattributed as an SDK error (2026-07-01)

• #4039 15bcb42 Thanks @​github-actions! - fix(replay): measure $snapshot_bytes as UTF-8 byte length instead of UTF-16 string length, so non-ASCII session replay payloads are counted accurately against the message size limit (2026-07-01)

posthog-js@1.396.3

1.396.3

Patch Changes

• #4020 e0ad8ef Thanks @​posthog! - Fix TypeError: ....at is not a function thrown by the bundled web-vitals dependency on browsers that predate Array.prototype.at() (Chrome <92, iOS Safari <15.4). The web-vitals entrypoints now install a tiny Array.prototype.at polyfill before web-vitals runs, so web vitals capture works again on older browsers instead of crashing with an unhandled error. (2026-06-30)

posthog-js@1.396.2

1.396.2

Patch Changes

• #4003 b6261e7 Thanks @​marandaneto! - Include a Promise polyfill in the IE11 bundle and avoid Promise-dependent async compression paths when Promise support is unavailable. (2026-06-29)

posthog-js@1.396.1

1.396.1

Patch Changes

• #3999 cdeae17 Thanks @​marandaneto! - Fall back to uncompressed browser requests when gzip encoding fails. (2026-06-29)

posthog-js@1.396.0

1.396.0

Minor Changes

• #3987 74cc6bb Thanks @​TueHaulund! - Add a get_current_url config option that overrides the URL used for client-side URL targeting — session replay URL triggers, the session replay URL blocklist, survey URL display conditions, product tour URL conditions, web experiment URL conditions, and autocapture URL allow/ignore lists. These match against window.location.href directly, which does not reflect a $current_url rewritten in before_send. Apps where the browser URL is not meaningful for targeting (e.g. Electron/desktop builds served from a generated host) can now return the logical URL to match against. Defaults to window.location.href when not set. (2026-06-29)

Patch Changes

• Updated dependencies [74cc6bb]:
  • @​posthog/types@​1.392.0

posthog-js@1.395.0

1.395.0

... (truncated)

Commits

• 5606eb1 chore: update versions and lockfile [version bump]
• 0f83f93 feat: add requestHeaders option to send custom headers (e.g. Authorization) (...
• 18e543b fix(web): isolate onFeatureFlags callbacks from throwing user handlers (#4035)
• e803b8f fix(replay): guard canvas recording worker against blob-script load failures ...
• 15bcb42 fix: Session replay field $snapshot_bytes is semantically wrong, either the...
• dd90e55 test(node): make local polling tests deterministic (#4043)
• 04882b2 chore: update versions and lockfile [version bump]
• 1f16027 fix(nuxt): skip server sourcemap inject when ssr is disabled (#4002)
• 27bb06b fix(ci): include release failure version and links (#4042)
• d1e6df8 chore: update versions and lockfile [version bump]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
website	Ready	Preview, Comment	Jul 1, 2026 7:59pm