build(deps): bump posthog-node from 5.30.6 to 5.55.0

[dependabot]

Bumps posthog-node from 5.30.6 to 5.55.0.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.55.0

5.55.0

Minor Changes

• #5140 2d2560a Thanks @​dustinbyrne! - Allow featureFlagsPollingInterval: null to disable automatic local flag polling while retaining initialization and manual refresh. (2026-09-30)

posthog-node@5.54.1

5.54.1

Patch Changes

• #4832 ac479db Thanks @​dustinbyrne! - Support snake_case feature flag cache payloads while preserving compatibility with camelCase providers and cached data. (2026-09-25)

posthog-node@5.54.0

5.54.0

Minor Changes

• #5099 e3955f8 Thanks @​marandaneto! - Expose feature flag evaluation reasons and preserve them in OpenFeature resolution metadata. (2026-09-25)

posthog-node@5.53.0

5.53.0

Minor Changes

• #5050 31dd1ad Thanks @​posthog! - Read a feature flag's evaluation runtime with getFeatureFlagEvaluationRuntime(key) and getFeatureFlagKeysByEvaluationRuntime(runtime) (2026-09-23)

posthog-node@5.52.6

5.52.6

Patch Changes

• #5078 f4704ac Thanks @​rubychilds! - Honor filters.holdout during local feature flag evaluation. A user in an experiment holdout now receives the holdout-<id> variant instead of being bucketed into a regular variant, matching how the server evaluates the same flag. The holdout is resolved before the release conditions, so a held-out user never reaches the flag's targeting — including when those conditions would have excluded them, so isFeatureEnabled can return true where it previously returned false. Experiments with an active holdout will see variant assignment change for the held-out share of traffic on upgrade, bringing locally evaluated assignments in line with server-evaluated ones. (2026-09-23)
• Updated dependencies [f4704ac]:
  • @​posthog/core@​1.55.2

posthog-node@5.52.5

5.52.5

Patch Changes

• #5018 9cd8ebd Thanks @​turnipdabeets! - Stop dropping long spans that end: maxSpanAgeMs now evicts spans only once maxLiveSpans is reached, so a span that runs past the age limit and then ends is exported, and its children are no longer orphaned. (2026-09-21)

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.55.0

Minor Changes

• #5140 2d2560a Thanks @​dustinbyrne! - Allow featureFlagsPollingInterval: null to disable automatic local flag polling while retaining initialization and manual refresh. (2026-09-30)

5.54.1

Patch Changes

• #4832 ac479db Thanks @​dustinbyrne! - Support snake_case feature flag cache payloads while preserving compatibility with camelCase providers and cached data. (2026-09-25)

5.54.0

Minor Changes

• #5099 e3955f8 Thanks @​marandaneto! - Expose feature flag evaluation reasons and preserve them in OpenFeature resolution metadata. (2026-09-25)

5.53.0

Minor Changes

• #5050 31dd1ad Thanks @​posthog! - Read a feature flag's evaluation runtime with getFeatureFlagEvaluationRuntime(key) and getFeatureFlagKeysByEvaluationRuntime(runtime) (2026-09-23)

5.52.6

Patch Changes

• #5078 f4704ac Thanks @​rubychilds! - Honor filters.holdout during local feature flag evaluation. A user in an experiment holdout now receives the holdout-<id> variant instead of being bucketed into a regular variant, matching how the server evaluates the same flag. The holdout is resolved before the release conditions, so a held-out user never reaches the flag's targeting — including when those conditions would have excluded them, so isFeatureEnabled can return true where it previously returned false. Experiments with an active holdout will see variant assignment change for the held-out share of traffic on upgrade, bringing locally evaluated assignments in line with server-evaluated ones. (2026-09-23)
• Updated dependencies [f4704ac]:
  • @​posthog/core@​1.55.2

5.52.5

Patch Changes

• #5018 9cd8ebd Thanks @​turnipdabeets! - Stop dropping long spans that end: maxSpanAgeMs now evicts spans only once maxLiveSpans is reached, so a span that runs past the age limit and then ends is exported, and its children are no longer orphaned. (2026-09-21)

• #4800 aad7464 Thanks @​marandaneto! - Respect the definitions response's property_matching_version during local feature flag evaluation. Version 2 uses explicit boolean/string equality and per-member array matching, while missing or other versions retain service legacy matching (including empty-array truthiness). Preserve the version in Node definition caches and Convex persisted definitions, and propagate it through person, group, cohort and dependency evaluation without mixing snapshots during reloads. Existing numeric ambiguity fallback and SemVer parsing policies are unchanged. (2026-09-21)

• Updated dependencies [9cd8ebd, aad7464]:

  • @​posthog/core@​1.55.1

5.52.4

... (truncated)

Commits

• e1dd962 chore: update versions and lockfile [version bump]
• 2d2560a feat(node): allow disabling automatic feature flag polling (#5140)
• bd66cee fix(replay): reduce debug properties without losing diagnostics (#5144)
• 3c24aa5 test(node): strengthen SDK regression coverage (#5105)
• 490ffe8 chore: update versions and lockfile [version bump]
• ac479db fix(node): support snake_case flag definition caches (#4832)
• 518ae78 chore: update versions and lockfile [version bump]
• e3955f8 feat: expose feature flag reasons in the Node OpenFeature provider (#5099)
• 7b3121f chore: update versions and lockfile [version bump]
• 31dd1ad feat(node): expose a flag's evaluation runtime through the SDK (#5050)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Updates posthog-node from 5.30.6 to 5.55.0 in packages/arkor. Local flag evaluation now honors experiment holdouts, so held-out users receive the holdout-<id> variant instead of a regular one, matching server-side evaluation.

• Supports snake_case feature flag cache payloads while keeping camelCase data working.
• featureFlagsPollingInterval: null now disables automatic polling while retaining initialization and manual refresh.
• Adds evaluation reasons to OpenFeature resolution metadata and methods to read a flag's evaluation runtime.

^{Written for commit e0196c6. Summary will update on new commits.}

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-node@​5.30.6 ⏵ 5.55.0	-4		+2	+1

View full report

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: arkorlab/arkor/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 206f46a0-333e-46be-8bfe-b519bdcc59f6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/arkor

The overall line coverage in commit e0196c6 in the dependabot/npm_and_y... branch remains at 98%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/create-arkor

The overall line coverage in commit e0196c6 in the dependabot/npm_and_y... branch remains at 60%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/cli-internal

The overall line coverage in commit e0196c6 in the dependabot/npm_and_y... branch remains at 97%, unchanged from commit 03548ea in the main branch.

TypeScript / code-coverage/studio-app

The overall line coverage in commit e0196c6 in the dependabot/npm_and_y... branch remains at 53%, unchanged from commit 03548ea in the main branch.

---

_{Updated October 02, 2026 19:50 UTC}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!