build(deps): bump posthog-node from 5.30.6 to 5.52.4

[dependabot]

Bumps posthog-node from 5.30.6 to 5.52.4.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.52.4

5.52.4

Patch Changes

• #4885 39a8980 Thanks @​decknamec! - Server-side feature flags now resolve in posthog-node and posthog-edge even when a proxy rewrites the request's User-Agent. Flags restricted to the client runtime now resolve to undefined in these SDKs, where a rewritten User-Agent previously let them through. (2026-09-15)
• Updated dependencies [39a8980]:
  • @​posthog/core@​1.54.2

posthog-node@5.52.3

5.52.3

Patch Changes

• #4941 07c1045 Thanks @​marandaneto! - Capture causes and AggregateError members with relationship metadata and individual stacks, limiting output to 50 entries and 1,000 member inspections. (2026-09-15)
• Updated dependencies [07c1045]:
  • @​posthog/core@​1.54.1

posthog-node@5.52.2

5.52.2

Patch Changes

• #4951 55c5142 Thanks @​marandaneto! - Fix Express exception events reporting the initial response status instead of the final HTTP status. (2026-09-14)

posthog-node@5.52.1

5.52.1

Patch Changes

• #4908 4a3c74b Thanks @​turnipdabeets! - Child spans now share their parent's clock, so a child no longer appears to start before or end after its parent by up to a millisecond, or by more when the system clock is adjusted mid-trace. (2026-09-11)
• Updated dependencies [4a3c74b]:
  • @​posthog/core@​1.53.1

posthog-node@5.52.0

5.52.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

Patch Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Stop a throwing getter in metrics.resourceAttributes from breaking every metrics export — the key is recorded as [Unserializable] instead. (2026-09-10)

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.52.4

Patch Changes

• #4885 39a8980 Thanks @​decknamec! - Server-side feature flags now resolve in posthog-node and posthog-edge even when a proxy rewrites the request's User-Agent. Flags restricted to the client runtime now resolve to undefined in these SDKs, where a rewritten User-Agent previously let them through. (2026-09-15)
• Updated dependencies [39a8980]:
  • @​posthog/core@​1.54.2

5.52.3

Patch Changes

• #4941 07c1045 Thanks @​marandaneto! - Capture causes and AggregateError members with relationship metadata and individual stacks, limiting output to 50 entries and 1,000 member inspections. (2026-09-15)
• Updated dependencies [07c1045]:
  • @​posthog/core@​1.54.1

5.52.2

Patch Changes

• #4951 55c5142 Thanks @​marandaneto! - Fix Express exception events reporting the initial response status instead of the final HTTP status. (2026-09-14)

5.52.1

Patch Changes

• #4908 4a3c74b Thanks @​turnipdabeets! - Child spans now share their parent's clock, so a child no longer appears to start before or end after its parent by up to a millisecond, or by more when the system clock is adjusted mid-trace. (2026-09-11)
• Updated dependencies [4a3c74b]:
  • @​posthog/core@​1.53.1

5.52.0

Minor Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Add experimental distributed tracing to posthog-node: startSpan, withSpan and getActiveSpan record spans against a new traces client option. A service with tracing off still forwards an inbound traceparent, including from spans nested inside the one that received it, so a distributed trace is not severed. A traceparent may be passed as the one-element array req.headersDistinct gives. A beforeSpanSend hook sees every span before it is exported and may edit or drop it, and maxAttributesPerSpan, maxEventsPerSpan, maxAttributeValueLength, maxLiveSpans and maxSpanAgeMs bound what a single span and a single process may hold. (2026-09-10)

Patch Changes

• #4579 19e78cc Thanks @​turnipdabeets! - Stop a throwing getter in metrics.resourceAttributes from breaking every metrics export — the key is recorded as [Unserializable] instead. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Honor Retry-After when the ingestion endpoint refuses a logs or metrics batch, instead of retrying on the SDK's own schedule alone. A refusal naming a longer wait extends the one being served, up to five minutes from when it started. Retry delays now carry jitter so clients refused together do not return together, and metrics backs off exponentially across consecutive failures rather than retrying on a fixed interval. (2026-09-10)

• #4579 19e78cc Thanks @​turnipdabeets! - Logs and metrics now always send service.name and telemetry.sdk.*, even when a resourceAttributes value is too large to encode in full. Previously that value could crowd them out, and the records reached PostHog with no service attribution.

... (truncated)

Commits

• bba9db4 chore: update versions and lockfile [version bump]
• 39a8980 fix(core): declare the evaluation runtime on /flags requests (#4885)
• 8aecf43 chore: update versions and lockfile [version bump]
• 07c1045 fix(error-tracking): link causes and aggregate members in one event (#4941)
• 94ba514 chore: update versions and lockfile [version bump]
• 55c5142 fix(node): capture the final Express response status (#4951)
• 3786cff fix(core): reject terminal non-2xx write responses (#4922)
• bc1cc15 chore: update versions and lockfile [version bump]
• 1bef871 chore: update versions and lockfile [version bump]
• 19e78cc feat(node): distributed tracing spans (#4579)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Updates posthog-node from 5.30.6 to 5.52.4. This brings in new features like experimental distributed tracing and several bug fixes. Note that the new version requires Node.js 20.20.0 or 22.22.0 and above, so environments on older versions will need to upgrade.

^{Written for commit db10f11. Summary will update on new commits.}

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 93d2d925-4697-4533-b78f-b822297387e2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-node@​5.30.6 ⏵ 5.52.4	-4		+2	+1

View full report

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/arkor

The overall line coverage in commit db10f11 in the dependabot/npm_and_y... branch remains at 98%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/create-arkor

The overall line coverage in commit db10f11 in the dependabot/npm_and_y... branch remains at 60%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/cli-internal

The overall line coverage in commit db10f11 in the dependabot/npm_and_y... branch remains at 97%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/studio-app

The overall line coverage in commit db10f11 in the dependabot/npm_and_y... branch remains at 53%, unchanged from commit 03548ea in the main branch.

---

_{Updated September 18, 2026 19:49 UTC}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!