build(deps): bump posthog from 3.25.0 to 7.28.0

[dependabot]

Bumps posthog from 3.25.0 to 7.28.0.

Release notes

Sourced from posthog's releases.

posthog-v7.28.0

Minor changes

• 2d7f8cc The client.metrics config can now be set through module-level settings: assign posthog.metrics = {"service_name": ..., ...} alongside posthog.api_key and the dict is applied when setup() builds the global client. Previously module-configured apps had no way to pass the metrics config, so every series recorded through the global client shipped service.name='unknown_service'. Late assignment (e.g. a Django ready() hook running after an early setup()) still applies on the next setup() call, as long as the metrics API hasn't been used yet. — Thanks @​DanielVisca!

Patch changes

• 6766309 Harden the alpha posthog.metrics client based on review follow-ups.

  • Metric attributes are now deep-snapshotted at capture time, so mutating a nested list/dict value after count()/gauge()/histogram() can no longer rewrite an already-recorded series' attributes on the wire.
  • Failed metric flushes now retry with exponential backoff (first retry at the base interval, then doubling per consecutive failure, capped at 64x the flush interval — the shared JS logs ramp) instead of the fixed cadence, and the buffered window is dropped loudly after 8 consecutive failed flushes — previously documented as 3 but effectively 4.
  • Invalid metrics client config (non-dict config or resource_attributes, non-numeric flush_interval, non-integer max_series_per_flush, non-callable before_send) now degrades to defaults with a warning instead of raising from the first client.metrics.count() call, matching the client's no-throw contract. — Thanks @​DanielVisca!

posthog-v7.27.1

Patch changes

• ca5e883 Clarify the queue-full warning to say the event is being dropped, instead of only reporting that the queue is full. — Thanks @​emmayusufu for your first contribution 🎉!

posthog-v7.27.0

Minor changes

• 5ef2c23 $feature_flag_called events are now minimized for non-experiment flags when the server enables it. When the /flags v2 response (minimalFlagCalledEvents) or the local-evaluation payload (minimal_flag_called_events) reports the gate as enabled and the evaluated flag has no linked experiment (has_experiment is false), the event's properties are reduced to a strict allowlist ($feature_flag, $feature_flag_response, $feature_flag_has_experiment, the $feature_flag_* debug scalars, locally_evaluated, $groups, $process_person_profile, $session_id, $lib, $lib_version, $is_server, $geoip_disable, $os, $os_version, $os_distro, $python_runtime, $python_version). Everything else — including super properties and custom event properties — is stripped from those events.

  If the server does not report the gate, if the flag's has_experiment signal is missing, or if the flag is linked to an experiment, the full property set is sent unchanged. There is no SDK-side configuration; the gate is controlled per-team by the server. For evaluate_flags() snapshots, the gate is pinned when the snapshot is created, so deferred flag accesses are shaped by the evaluation that produced them.

  Custom flag_definition_cache providers now receive an additional minimal_flag_called_events key in the definitions payload, so the gate survives external cache round-trips.

  When the server reports has_experiment for a flag, every $feature_flag_called event also carries a $feature_flag_has_experiment boolean property. — Thanks @​haacked!

posthog-v7.26.0

Minor changes

• 1653bcb Add a label option to Prompts.get() to fetch the prompt version a label (e.g. production) currently points to. Labeled fetches are cached separately, and PromptResult carries the resolved label. Requires a PostHog version with prompt labels; older servers ignore the parameter and return the latest version. — Thanks @​jurajmajerik!

posthog-v7.25.0

Minor changes

• 5ab6318 Add the active OpenTelemetry span's $trace_id and $span_id to events captured with capture_exception. — Thanks @​hpouillot!

posthog-v7.24.0

Minor changes

• 556c134 $feature_flag_called events now carry a $feature_flag_has_experiment boolean property when the server reports whether the flag is linked to an experiment. When the server does not report the signal (older deployments), the property is omitted. — Thanks @​haacked!

posthog-v7.23.0

Minor changes

• 5e42b1e Add the posthog.metrics API (count, gauge, histogram) — alpha.

  Backend services can now record metrics through the same statsd-style pre-aggregating client the browser SDK ships, with no OpenTelemetry setup:

... (truncated)

Commits

• 506a478 chore: Release v7.28.0 [skip ci]
• 2d7f8cc feat(metrics): support metrics config via module-level settings (#753)
• 6766309 fix(metrics): harden attribute snapshots, retry backoff, and config validatio...
• b802957 Update generated references
• a967c7b chore: Release v7.27.1 [skip ci]
• ca5e883 fix: say the event is dropped when the queue is full (#731)
• 4a2d202 chore(deps): bump pillow from 12.2.0 to 12.3.0 in /examples/example-ai-autoge...
• e15477a chore(deps): bump pillow from 12.2.0 to 12.3.0 in /examples/example-ai-crewai...
• c5080ce chore(deps): bump pillow from 12.2.0 to 12.3.0 in /examples/example-ai-llamai...
• 00d5997 chore(deps): bump pillow from 12.1.1 to 12.3.0 in /examples/example-ai-smolag...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.48%. Comparing base (1f53ba0) to head (afc0993).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #652   +/-   ##
=======================================
  Coverage   93.48%   93.48%           
=======================================
  Files          59       59           
  Lines        3072     3072           
=======================================
  Hits         2872     2872           
  Misses        200      200           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[dependabot]

Superseded by #667.