chore(deps): bump mixpanel-browser from 2.72.0 to 2.75.0 by dependabot[bot] · Pull Request #47 · Bazeloth/PixelPorts

dependabot · 2026-03-02T09:57:45Z

Bumps mixpanel-browser from 2.72.0 to 2.75.0.

Release notes

Sourced from mixpanel-browser's releases.

New masking API, remote settings, and more

New Recorder Masking API

Session recording now supports unmasking inputs, as well as an allow-list based masking API for both inputs and text. New configuration options:

Option Type Default Description

record_mask_all_text boolean true When true, all text is masked by default. Use record_unmask_text_selector to selectively reveal specific elements.

record_mask_text_selector string | string[] undefined CSS selector(s) for elements to mask. Only applies when record_mask_all_text is false.

record_unmask_text_selector string | string[] undefined CSS selector(s) for elements to unmask. Only applies when record_mask_all_text is true.

record_mask_all_inputs boolean true When true, all inputs are masked by default. Use record_unmask_input_selector to selectively reveal specific inputs.

record_mask_input_selector string | string[] "" CSS selector(s) for inputs to mask. Only applies when record_mask_all_inputs is false.

record_unmask_input_selector string | string[] "" CSS selector(s) for inputs to unmask. Only applies when record_mask_all_inputs is true.

Old record_mask_text_selector configuration options are migrated to the equivalent new config options for compatibility - e.g. record_mask_text_selector: '' will be applied as record_mask_all_text: false

Initial Remote Settings Support

Preparation to support remote settings functionality which will allow customizing session recording configurations (and eventually more) within the Mixpanel UI. The config option remote_settings_mode allows 3 states:

strict - do not act (for instance, start session recording) unless the remote settings are loaded in a timely manner

fallback - use fallback configuration values (options set during initialization) if remote settings fail to load in a timely manner

disabled (default) - do not use or attempt to load remote settings

Remote settings are currently in a CLOSED alpha as of 1/27/2026, and the SDK API could be updated with breaking changes.

Other fixes

Add missing typescript fields for api_routes (thanks @rnbrady!)

Fix issue where Mixpanel import breaks in Safari when cookies are disabled: mixpanel/mixpanel-js#530

Deleted some outdated example directories

New hooks, extension support, type fixes

This release adds several new hooks for running code and intercepting SDK actions: before_identify, before_register, before_register_once, before_track, before_unregister. It also adds integration code for the Data Inspector browser extension and improves some of the library's type definitions.

Changelog

Sourced from mixpanel-browser's changelog.

2.75.0 (24 Feb 2026)

Adds support for Feature Flags targeting based on events tracked during the current session (Runtime Targeting)

Fixes memory leaks in Session Recording on sites which create/destroy iframes

Fixes usage of arrow functions in hooks config

2.74.0 (27 Jan 2026)

New session recording masking configuration options, including the ability to unmask inputs and allowlist-based selector masking.

Adds initial support for the remote settings API, allowing remote configuration of SDK config options.

Adds new automated browser test suite that runs in CI and locally in chrome headless. See tests/browser/README.html for more information.

Fixes type definitions for api_routes

Removes outdated examples in the examples/ dir

2.73.0 (23 Dec 2025)

Adds several new hooks: before_identify, before_register, before_register_once, before_track, before_unregister

Adds instance-initialization notification to allow Data Inspector browser extension to hook into SDK actions

Fixes and extends type definitions

2.72.0 (14 Nov 2025)

Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})

Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)

Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.

Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)

Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

2.71.1 (30 Oct 2025)

fixes issue with $mp_page_leave events getting tracked when record_heatmap_data is on and there was no session recording taking place.

2.71.0 (2 Oct 2025)

adds Dead Click ($mp_dead_click) autocapture event: when a click occurs but there is no DOM mutation afterwards

adds Page Leave ($mp_page_leave) autocapture event: when a page is "left" either by navigation or leaving the tab

adds additional properties to experiment exposure events for feature flags

upgrades rrweb fork to fix a hidden input masking issue

gets rid of package.json exports feature to be less restrictive of what can be imported

adds type definitions for each build option

2.70.0 (4 Sep 2025)

Feature flags requests now send params on query string with GET instead of POST for easier caching

2.68.0 (11 Aug 2025)

Initial rage-click detection support

Block <audio> tags by default in Session Recording

Add flags.update_context() method for updating context variables and refetching variants

2.67.0 (17 Jul 2025)

Use get_api_host() consistently across the SDK

Include device_id in default Feature Flag context

Track latency props in $experiment_started event

Fix async behavior in mixpanel.reset() when a session recording is active

Fix recorder integration test race conditions

... (truncated)

Commits

cf7f7dd 2.75.0
283172c changelog for 2.75.0
8f18483 add Node 24 to CI matrix
dc8b4c1 Merge branch '2.75.0-rc'
071dde5 rebuild 2.75.0-rc3
768565b try to fix recorder test flakiness
126c71b fix tests
208e9a8 no longer nest event properties for jsonlogic
c9e8f49 build 2.75.0-rc2
bf8e553 Merge remote-tracking branch 'msiebert-first-time-event-targeting' into 2.75....
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

github-actions · 2026-03-02T09:57:56Z