Bump posthog-node from 4.17.2 to 5.6.0

[dependabot]

Bumps posthog-node from 4.17.2 to 5.6.0.

Changelog

Sourced from posthog-node's changelog.

5.6.0 – 2025-07-15

1. Added support for filtering feature flags with flagKeys parameter in sendFeatureFlags options

5.5.1 – 2025-07-15

1. wrap InconclusiveMatchErrors in logMsgIfDebug for local flag evaluations on sendFeatureFlags

5.5.0 – 2025-07-10

1. feat: make the sendFeatureFlags parameter more declarative and ergonomic. Implementation notes below:

Modified sendFeatureFlags to be type boolean | SendFeatureFlagsOptions, (which is defined thusly)

export interface SendFeatureFlagsOptions {
  onlyEvaluateLocally?: boolean
  personProperties?: Record<string, any>
  groupProperties?: Record<string, Record<string, any>>
}

This lets users declare (1) whether to use local evaluation, and (2) which properties to supply explicitly for that evaluation, every time they want to send feature flags. It also supports the old boolean behavior if folks don't care and would rather the SDK infer it.

Now, you can make calls like this

posthog.captureImmediate({
  distinctId: "user123",
  event: "test event",
  sendFeatureFlags: {
    onlyEvaluateLocally: true,
    personProperties: {
      plan: "premium",
    },
  },
  properties: {
    foo: "bar",
  },
});

or simply

posthog.captureImmediate({
  distinctId: "user123",
  event: "test event",
  sendFeatureFlags: true // this will still infer local evaluation if it appears to be configured, but it won't try to pull properties from the event message
  properties: {
</tr></table> 

... (truncated)

Commits

• ad0c6a1 feat(flags): support evaluating a subset of feature flags keys in `SendFeatur...
• 46f3129 fix(flags): log level for locally evaluated flags (#574)
• 8c37342 fix: Ignore new flag filter type in local evaluation (#567)
• e345a62 feat(flags): make the sendFeatureFlags parameter more declarative and ergon...
• 71a421f docs: Add CHANGELOG notice about GZip compression (#564)
• 3bd5200 feat(flags): respect local evaluation preferences with sendFeatureFlags; ad...
• 1bd00dc feat(flags): decouple local evaluation from personal API keys; support decryp...
• 1870757 feat(err): add capture exception immediate method (#558)
• ebad1b9 fix(flags): Handle double-encoded JSON response (#529)
• dbb49ed chore(flags): roll everyone onto /flags (#523)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
next-forge	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 1, 2025 4:46am
next-forge-api	❌ Failed (Inspect)			Aug 1, 2025 4:46am
next-forge-app	❌ Failed (Inspect)			Aug 1, 2025 4:46am
next-forge-storybook	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 1, 2025 4:46am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​negotiator@​0.6.3 ⏵ 0.6.4				-2
	ultracite@​4.2.5 ⏵ 4.2.13	-1		+1	+1
	fumadocs-core@​15.6.7
	@​prisma/​nextjs-monorepo-workaround-plugin@​6.8.2 ⏵ 6.13.0	+1
	posthog-node@​4.17.2 ⏵ 5.6.0	+1			+2
	vitest@​3.1.4 ⏵ 3.2.4				+1
	@​logtail/​next@​0.2.0 ⏵ 0.2.1	+1		+1
	@​tailwindcss/​postcss@​4.1.11
	postcss@​8.5.6
	sonner@​2.0.6
	@​turbo/​gen@​2.5.3 ⏵ 2.5.5				+5
	@​ai-sdk/​openai@​1.3.22 ⏵ 1.3.23	+1		+1	+1
	tailwindcss@​4.1.11
	tailwind-merge@​3.3.1
	concurrently@​9.1.2 ⏵ 9.2.0	+1		+1
	turbo@​2.5.3 ⏵ 2.5.5	+1		+1	+5
	ws@​8.18.2 ⏵ 8.18.3	+1
	@​t3-oss/​env-nextjs@​0.13.4 ⏵ 0.13.8			+7	-3
	@​liveblocks/​client@​2.24.2 ⏵ 2.24.3				+2
	@​t3-oss/​env-core@​0.13.4 ⏵ 0.13.8	+1		+7	-3
	chromatic@​12.0.0 ⏵ 12.2.0	+1		+1	-1
	import-in-the-middle@​1.13.2 ⏵ 1.14.2	+1			-1
	@​neondatabase/​serverless@​1.0.0 ⏵ 1.0.1	+1
	@​sentry/​nextjs@​9.22.0 ⏵ 9.44.0			+1	+1
	@​chromatic-com/​storybook@​3.2.6 ⏵ 3.2.7	+1		+1	+2
	sharp@​0.34.3
	@​testing-library/​dom@​10.4.1
	@​liveblocks/​node@​2.24.2 ⏵ 2.24.3	+1			+1
	@​knocklabs/​react@​0.7.11 ⏵ 0.7.27			+1	+1
	react-resizable-panels@​3.0.4
	basehub@​8.2.7 ⏵ 8.2.11	+1		+1	+2
	@​clerk/​themes@​2.2.46 ⏵ 2.4.4
	@​liveblocks/​react@​2.24.2 ⏵ 2.24.3				+2
See 20 more rows in the dashboard

View full report

[dependabot]

Superseded by #628.