chore(deps): bump posthog-js from 1.372.3 to 1.376.0 in /web

[dependabot]

Bumps posthog-js from 1.372.3 to 1.376.0.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.376.0

1.376.0

Minor Changes

• #3655 6e8d349 Thanks @​arnaudhillen! - Expose the in-repo @posthog/rrweb, @posthog/rrweb-types, and @posthog/rrweb-plugin-console-record packages as subpath entry points on posthog-js. Consumers can now import { Replayer } from 'posthog-js/rrweb', import type { eventWithTime } from 'posthog-js/rrweb-types', and import { LogLevel } from 'posthog-js/rrweb-plugin-console-record' instead of installing the underlying rrweb packages directly. The rrweb worker sourcemap (image-bitmap-data-url-worker-*.js.map) is also shipped from posthog-js/dist/ so downstream bundlers no longer need to reach into node_modules/@posthog/rrweb. (2026-05-22)

Patch Changes

• #3639 c806cca Thanks @​marandaneto! - Use native async gzip compression for session recording events when CompressionStream is available. (2026-05-22)
• Updated dependencies [c806cca]:
  • @​posthog/core@​1.29.9
  • @​posthog/types@​1.376.0

posthog-js@1.375.0

1.375.0

Minor Changes

• #3641 2e1d5f4 Thanks @​dustinbyrne! - Add flag_keys config to restrict browser feature flag remote evaluation to specific flag keys. (2026-05-21)

Patch Changes

• Updated dependencies [2e1d5f4]:
  • @​posthog/types@​1.375.0
  • @​posthog/core@​1.29.8

posthog-js@1.374.4

1.374.4

Patch Changes

• #3638 87e2145 Thanks @​marandaneto! - Apply tracing headers to matching XMLHttpRequest requests (2026-05-21)

• #3646 4f87827 Thanks @​marandaneto! - Avoid throwing or initializing PostHogProvider when no API key or client is provided (2026-05-21)

• #3645 280832b Thanks @​TueHaulund! - Capture <link rel="stylesheet"> URLs from link.sheet.href and try link.sheet directly for inlining, so recordings survive SPA history.pushState navigations between routes of different path depths (where link.href re-resolves against a new baseURI but link.sheet.href preserves the URL the browser actually fetched).

  Ships the fix landed in #3635, which only bumped the internal @posthog/rrweb-snapshot package — that package is bundled into posthog-js at build time but is not published to npm on its own, so a posthog-js bump is needed to actually deliver the change. (2026-05-21)

• Updated dependencies []:

  • @​posthog/types@​1.374.4
  • @​posthog/core@​1.29.7

posthog-js@1.374.3

... (truncated)

Commits

• 3d41c1d chore: update versions and lockfile [version bump]
• c806cca feat: use async gzip for replay event compression (#3639)
• 6e8d349 feat(replay): expose rrweb subpath entries on posthog-js (#3655)
• ec81cc6 chore: validate changeset versioning (#3647)
• 6d3d39f chore(ci): bump pinned posthog-sdk-test-harness SHA (#3660)
• b191176 chore(ci): bump pinned PostHog/.github reusable workflow SHA (#3659)
• fb18a0a chore: pin github actions to sha (#3644)
• a05405d chore: update versions and lockfile [version bump]
• 18ea8b5 feat(node): promote flag definition cache provider types (#3642)
• 2e1d5f4 feat: add browser flag_keys config (#3641)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, web. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.