Skip to content

V1 release - DO NOT MERGE - #1016

Draft
eli-r-ph wants to merge 29 commits into
mainfrom
v1
Draft

eli-r-ph wants to merge 29 commits into
mainfrom
v1

Conversation

@eli-r-ph

@eli-r-ph eli-r-ph commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

💡 Motivation and Context

Long-lived integration branch for posthog 8.0: capture v1 becomes the only capture path, and capture_ai moves to an isolated v1 lane at /i/v1/ai/events. Feature PRs target v1; this PR merges to main once the series lands. Do not merge.

The major changeset bumps the next release from 7.64.1 to 8.0.0.

Series, stacked in merge order (each PR's base is the one before it, the first targets v1):

Related parity PRs: PostHog/posthog-go#359, PostHog/posthog-rs#279

main is merged into v1 periodically (no rebase, so open PRs keep their anchors).

💚 How did you test it?

Changeset only. Each series PR carries its own tests.

📝 Checklist

  • I reviewed the submitted code.
  • I added tests to verify the changes.
  • I updated the docs if needed.
  • No breaking change or entry added to the changelog.

If releasing new changes

  • Ran sampo add to generate a changeset file

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Authored with Cursor (Claude Opus). Behavior follows the v1 branches of posthog-rs and posthog-go, adapted to this SDK's style.

@eli-r-ph eli-r-ph self-assigned this Oct 6, 2026
@github-actions

github-actions Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

posthog-python Compliance Report

Date: 2026-10-06T19:08:26.100214+00:00
Duration: 259866ms

✅ All Tests Passed!

121/121 tests passed


Capture_V1 Tests

✅ 95/95 tests passed

View Details
Test Status Duration
Endpoint And Method.Targets V1 Endpoint ✅ 516ms
Endpoint And Method.Does Not Use Legacy Endpoints ✅ 511ms
Required Headers.Has Authorization Bearer Header ✅ 511ms
Required Headers.Has Content Type Json ✅ 512ms
Required Headers.Has Posthog Sdk Info Format ✅ 511ms
Required Headers.Has Posthog Attempt Header ✅ 511ms
Required Headers.Has Posthog Request Id ✅ 511ms
Required Headers.Has Posthog Request Timestamp ✅ 511ms
Required Headers.Has User Agent ✅ 511ms
Body Format.Body Has Created At And Batch ✅ 512ms
Body Format.No Api Key In Body ✅ 511ms
Body Format.No Sent At In Body ✅ 511ms
Event Format.Event Has Required Root Fields ✅ 511ms
Event Format.Event Uuid Is Valid ✅ 512ms
Event Format.Event Timestamp Is Rfc3339 ✅ 511ms
Event Format.Non Utc Event Timestamp Is Converted To Utc ✅ 516ms
Event Format.Distinct Id Is String ✅ 511ms
Event Format.Distinct Id At Root Not Properties ✅ 511ms
Event Format.Custom Properties Preserved ✅ 511ms
Event Format.Set Properties Preserved ✅ 511ms
Event Format.Set Once Properties Preserved ✅ 512ms
Event Format.Groups Properties Preserved ✅ 510ms
Event Format.Sdk Generates Uuid If Not Provided ✅ 511ms
Event Format.Event Has Required Root Fields Batch ✅ 514ms
Event Format.Event Uuid Is Valid Batch ✅ 515ms
Event Format.Event Timestamp Is Rfc3339 Batch ✅ 514ms
Event Format.Distinct Id Is String Batch ✅ 514ms
Event Format.Distinct Id At Root Not Properties Batch ✅ 515ms
Event Format.Custom Properties Preserved Batch ✅ 514ms
Event Format.Set Properties Preserved Batch ✅ 514ms
Event Format.Set Once Properties Preserved Batch ✅ 515ms
Event Format.Groups Properties Preserved Batch ✅ 513ms
Event Format.Sdk Generates Uuid If Not Provided Batch ✅ 515ms
Batch Behavior.Multiple Events In Single Batch ✅ 517ms
Batch Behavior.Batch Envelope Smoke ✅ 516ms
Batch Behavior.Flush With No Events Sends Nothing ✅ 507ms
Batch Behavior.Flush At Triggers Batch ✅ 1012ms
Batch Behavior.Created At Reflects Batch Creation Time ✅ 512ms
Deduplication.Generates Unique Uuids ✅ 517ms
Deduplication.Different Events Same Content Different Uuids ✅ 513ms
Deduplication.Preserves Uuid On Retry ✅ 6520ms
Deduplication.Preserves Timestamp On Retry ✅ 6519ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry ✅ 6522ms
Deduplication.No Duplicate Events In Batch ✅ 519ms
Header Behavior On Retry.Attempt Header Starts At One ✅ 511ms
Header Behavior On Retry.Attempt Header Increments On Retry ✅ 13526ms
Header Behavior On Retry.Request Id Preserved On Retry ✅ 6520ms
Header Behavior On Retry.Different Requests Have Different Request Ids ✅ 3021ms
Header Behavior On Retry.Request Timestamp Changes On Retry ✅ 6520ms
Response Format Validation.Success Response Has Uuid Keyed Results ✅ 512ms
Response Format Validation.Success Response Has Ok For Each Event ✅ 514ms
Response Format Validation.Success No Retry After When All Ok ✅ 513ms
Response Format Validation.Success Retry After Present When Retry Events ✅ 1517ms
Response Format Validation.Success No Retry After When Drop Only ✅ 513ms
Response Format Validation.Response Echoes Request Id ✅ 512ms
Retry Behavior.Retries On 408 ✅ 6520ms
Retry Behavior.Retries On 500 ✅ 6517ms
Retry Behavior.Retries On 503 ✅ 8523ms
Retry Behavior.Retries On 504 ✅ 6521ms
Retry Behavior.Retryable Errors Have Retry After ✅ 3517ms
Retry Behavior.Respects Retry After On Retryable Error ✅ 11523ms
Retry Behavior.Does Not Retry On 400 ✅ 2513ms
Retry Behavior.Does Not Retry On 401 ✅ 2514ms
Retry Behavior.Does Not Retry On 402 ✅ 2514ms
Retry Behavior.Does Not Retry On 413 ✅ 2515ms
Retry Behavior.Does Not Retry On 415 ✅ 2514ms
Retry Behavior.Non Retryable Errors Have No Retry After ✅ 2514ms
Retry Behavior.Implements Backoff ✅ 22526ms
Retry Behavior.Max Retries Respected ✅ 22537ms
Partial Batch Handling.Handles 200 Full Success ✅ 2512ms
Partial Batch Handling.Handles 200 With All Ok ✅ 3517ms
Partial Batch Handling.Does Not Retry Dropped Events ✅ 3515ms
Partial Batch Handling.Does Not Retry Limited Events ✅ 3516ms
Partial Batch Handling.Prunes Ok Events On Partial Retry ✅ 6521ms
Partial Batch Handling.Prunes Dropped Events On Partial Retry ✅ 6520ms
Partial Batch Handling.Retries Only Retry Events From Partial ✅ 6523ms
Partial Batch Handling.Partial Retry Preserves Uuids ✅ 6521ms
Partial Batch Handling.Partial Retry Attempt Header Increments ✅ 6518ms
Partial Batch Handling.Partial Retry Request Id Preserved ✅ 6522ms
Partial Batch Handling.Respects Retry After On Partial ✅ 8518ms
Partial Batch Handling.Unknown Result Treated As Terminal ✅ 3514ms
Partial Batch Handling.Mixed Ok Drop Limited No Retry ✅ 3519ms
Compression.Sends Gzip Content Encoding ✅ 512ms
Compression.No Content Encoding When Disabled ✅ 511ms
Compression.Compressed Body Is Decompressible ✅ 511ms
Error Handling.Does Not Retry On Unknown 4Xx ✅ 2513ms
Event Options.Cookieless Mode Override ✅ 511ms
Event Options.Disable Skew Correction Override ✅ 510ms
Event Options.Process Person Profile Override ✅ 511ms
Event Options.Product Tour Id Override ✅ 511ms
Event Options.Unset Options Omitted ✅ 511ms
Event Options.Options Override In Batch ✅ 514ms
Geoip And Historical Migration.Geoip Disable Injected Into Properties ✅ 512ms
Geoip And Historical Migration.Historical Migration Set In Body ✅ 511ms
Geoip And Historical Migration.Historical Migration Absent By Default ✅ 510ms

Capture_Ai Tests

✅ 5/5 tests passed

View Details
Test Status Duration
Routing.Capture Ai Posts To Ai Endpoint ✅ 511ms
Routing.Capture Does Not Reroute Ai Named Events ✅ 511ms
Identity.Capture Ai Event Has Uuid ✅ 510ms
Identity.Capture Ai Keeps Supplied Uuid ✅ 511ms
Timestamp Format.Non Utc Event Timestamp Is Converted To Utc ✅ 511ms

Feature_Flags Tests

✅ 17/17 tests passed

View Details
Test Status Duration
Request Payload.Request With Person Properties Device Id ✅ 12ms
Request Payload.Flags Request Uses V2 Query Param ✅ 9ms
Request Payload.Flags Request Hits Flags Path Not Decide ✅ 8ms
Request Payload.Flags Request Omits Authorization Header ✅ 9ms
Request Payload.Token In Flags Body Matches Init ✅ 9ms
Request Payload.Groups Round Trip ✅ 9ms
Request Payload.Groups Default To Empty Object ✅ 9ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False ✅ 9ms
Request Payload.Disable Geoip Omitted Defaults To False ✅ 8ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key ✅ 9ms
Request Lifecycle.No Flags Request On Init Alone ✅ 3ms
Request Lifecycle.No Flags Request On Normal Capture ✅ 509ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests ✅ 15ms
Request Lifecycle.Mock Response Value Is Returned To Caller ✅ 9ms
Retry Behavior.Retries Flags On 502 ✅ 313ms
Retry Behavior.Retries Flags On 504 ✅ 314ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event ✅ 511ms

Feature_Flags_Local_Evaluation Tests

✅ 4/4 tests passed

View Details
Test Status Duration
Versioned Boolean Matching.Matching Version Missing ✅ 65ms
Versioned Boolean Matching.Matching Version 1 ✅ 63ms
Versioned Boolean Matching.Matching Version 2 ✅ 61ms
Versioned Boolean Matching.Version Only Reload 1 2 1 2 Missing ✅ 34ms

@eli-r-ph
eli-r-ph marked this pull request as ready for review October 7, 2026 20:43
@eli-r-ph
eli-r-ph requested a review from a team as a code owner October 7, 2026 20:43
@eli-r-ph
eli-r-ph marked this pull request as draft October 8, 2026 19:40
@eli-r-ph

eli-r-ph commented Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

Putting this back in draft for safety as per the other SDK v1 prep branches ✅

…nts (#1017)

feat!: send capture through v1 by default; capture_ai posts to /i/v1/ai/events

Capture v1 is now the default capture mode. The AI lane always posts capture v1 to /i/v1/ai/events, uncompressed, regardless of the analytics capture_mode. Tests move to a shared capture v1 send seam (posthog/test/capture_helpers.py); v0-only tests are pinned to CaptureMode.V0 until v0 removal.
Capture v1 is the only capture path. Remove CaptureMode, the capture_mode
kwarg and POSTHOG_CAPTURE_MODE, the gzip kwarg, request.batch_post and the
v0 endpoint constants, and the backoff dependency. Client and AsyncPosthog
constructors are keyword-only after host.
Rename CaptureV1Error to CaptureError and export it from posthog. Event
shaping moves to posthog.capture_event and transport to
posthog.capture_send. No behavior change.
…1020)

* feat!: report capture v1 results through CaptureError and on_error

* test: cover _uuid7 layout for the mutation gate

* fix: re-raise sync capture failures in debug mode after reporting them

Also document which events verdict_summary() counts.
* feat: AI lane config and size-aware batching

* chore: tighten AI lane comments

* fix: reject non-finite AI lane config values
eli-r-ph and others added 12 commits October 13, 2026 20:42
test(mcp): drop get_tool checks that fastmcp 4.0.11 invalidated

fastmcp 4.0.11 resolves middleware-injected tools through the server's
tool lookup (PrefectHQ/fastmcp#5431), so get_tool() now returns them.
The two setup assertions that expected None fail on any fresh install.
The SDK behavior the tests check is unchanged and passes on 4.0.10 and
4.0.11.


(cherry picked from commit 897cd43)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
feat!: per-event capture options and legacy property hoisting
* feat!: super_options, context options and personless as the lowest option layer

* docs: state the option layer rules in capture docstrings

* feat!: fill context and super values after before_send

Context tags, context options, super_properties, super_options, the
derived personless option and the environment $release_id now fill only
keys an event leaves unset, after before_send runs. before_send sees
only the event's own values and SDK enrichment, and its changes beat
every default. A None option counts as unset and is filled. Legacy
properties still fill only unset options and are always removed.

* feat!: fill context and super values before before_send

Context tags, context options, super_properties, super_options, the
derived personless option and the environment $release_id now fill
before before_send runs, still only into keys the event leaves unset.
before_send sees every value and has the final say, including removing
a super property. $set, $set_once, $groups and $group_set fill one
level deep when both values are dicts. The set() and set_once() values
now win key by key over a $set or $set_once in properties, as ingestion
merges them. Hoisting still runs once, after the hook.

* feat!: SDK values are defaults that caller values override

$is_server, $geoip_disable and system context now fill last, only keys the
event, context tags and super_properties left unset, before before_send. A
super property $geoip_disable: False now wins over disable_geoip=True.

The groups argument merges into a $groups property key by key and wins,
in Client, AsyncClient and posthog.mcp events.

* fix: copy async default layers at admission; typed groups win on MCP exception events

AsyncPosthog filled defaults in the worker from references to the live
super_properties and options, so a change after capture could reach a queued
event. Each layer is now shallow-copied when the event is admitted, as 7.x
merged super_properties into a new dict at capture.

The MCP exception event now merges typed groups after custom properties, like
the primary event, so both events of a failing call get the same groups.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
feat!: AI wrappers and MCP send personless as a per-event option
* chore(ci): run compliance harness 1.13.1 once per codec

The adapter now advertises capture_ai_v1 and event_options, passes options and uuids through unchanged, and takes its codec from COMPRESSION. The workflow runs the harness containers directly in a gzip/deflate/zstd matrix, so it no longer needs pull-requests: write.

* chore(ci): install zstd extra for adapter protocol tests

* chore: describe the single capture compliance job and harness 1.13.1

The standalone adapter-test setup installs the zstd extra, matching CI.
enable_full_ai_capture now controls only truncation and media redaction. A client object without capture_ai still gets capture calls.
* feat: AsyncPosthog AI capture lane

* fix: type capture v1 send timeouts as float

* feat: AsyncPosthog privacy_mode and enable_full_ai_capture

* fix: keep async capture_ai from raising on a non-string event name
* test: capture invariant hardening

* test: assert exactly one capture loss line per failed batch
* docs: 8.0 migration guide, README and openfeature-provider pin

* chore: let openfeature provider accept posthog 7 and 8

* docs: say options beat legacy properties at every layer

* docs: name the CaptureError import and the posthoganalytics mirror

* docs: note that sync_mode failures re-raise in debug mode

* docs: describe the late fill of context and super values

* docs: describe the fill of context and super values before before_send

* docs: SDK values are defaults that caller values override

* docs: use real quota tags; a billing limit is a 402

Capture never sends billing_limit_exceeded or billing as a per-event tag.
Product quotas drop single events in a 2xx with tags such as
llm_events_over_quota; a request over the billing limit gets a 402 with
no per-event results.

* docs: complete the 8.0 migration guide

* chore(examples): run the pinned AI examples against the local SDK
* feat!: keep the posthog-python identity when instrumenting MCP

MCP instrumentation relabeled the whole client, so the app's own events and flag requests reported posthog-python-mcp. Capture v1 takes $lib from the per-request PostHog-Sdk-Info header, which is now always posthog-python.

* chore: remove the unused request identity plumbing and stale MCP client advice
fix!: follow capture redirects only to the configured origin

_post_v1 disables automatic redirects and resends the batch only on a 307 or 308 to the origin of host, at most 5 times. Any other redirect returns as a terminal failure. Covers the sync client and the async client, which lost its v0 same-origin guard when v1 became the only path.
* ci: reuse Python SDK upgrade PRs unless queued (#1021)

* ci: reuse Python SDK upgrade PRs unless queued

* ci: protect reused upgrade PRs from stale and queued writes

(cherry picked from commit 945bbbc)

* feat(error-tracking): standardize exception event metadata (#898)

* feat(error-tracking): standardize exception metadata

* fix(error-tracking): preserve explicit trace context

* fix(error-tracking): restrict exception group traversal

* fix(error-tracking): deprecate reserved property overrides

* fix(error-tracking): bound exception group traversal

(cherry picked from commit 6d6cc3d)

* chore: Release v7.65.0 [skip ci]

(cherry picked from commit c4e6bdd)

* Update generated references

(cherry picked from commit 50efa65)

* feat(asgi): add error tracking middleware (#1037)

* feat(asgi): add error tracking middleware

* chore(asgi): type exception capture metadata

* fix(asgi): make tracing header trust explicit

* refactor(asgi): expose request properties terminology

(cherry picked from commit 1c6a47a)

* feat(mcp): resolve fresh low-level tool ownership (#1009)

* feat(mcp): resolve fresh low-level tool ownership

Add resolve_original_tool for raw MCP SDK 1.x and 2.x servers. Prefer ownership learned from a served listing and keep unknown ownership fail-open.

Generated-By: PostHog Desktop
Task-Id: db1a8a08-fe03-43b6-9e49-705e8b1f375e

* fix(mcp): preserve listed argument ownership

Generated-By: PostHog Desktop
Task-Id: db1a8a08-fe03-43b6-9e49-705e8b1f375e

* fix(mcp): preserve arguments for unknown schemas

Generated-By: PostHog Desktop
Task-Id: db1a8a08-fe03-43b6-9e49-705e8b1f375e

* fix(mcp): preserve low-level tool schemas

Generated-By: PostHog Desktop
Task-Id: db1a8a08-fe03-43b6-9e49-705e8b1f375e
(cherry picked from commit 127009d)

* feat(flask): add error tracking integration (#1038)

* feat(flask): add error tracking integration

* fix(flask): use canonical exception metadata

* chore(flask): type exception capture metadata

* refactor(flask): expose request properties terminology

* fix(flask): preserve exception privacy settings

(cherry picked from commit 292855d)

* chore: Release v7.66.0 [skip ci]

(cherry picked from commit d23ef68)

* Update generated references

(cherry picked from commit c0e05b1)

* feat(drf): add automatic error tracking integration (#1036)

* feat(drf): add automatic error tracking integration

* fix(drf): align exception metadata with SDK spec

* chore(drf): type exception capture metadata

* fix(drf): honor Django request filtering

* test(drf): describe context data as properties

* feat(drf): support exception capture opt-out

* chore(drf): update public API snapshot

* fix(drf): align exception capture configuration

* test(drf): preserve omitted setting default

(cherry picked from commit 9baf8a5)

* chore: Release v7.67.0 [skip ci]

(cherry picked from commit a655c8b)

* Update generated references

(cherry picked from commit 509c852)

---------

Co-authored-by: Dustin Byrne <dustin@posthog.com>
Co-authored-by: Hugues Pouillot <hpouillot@gmail.com>
Co-authored-by: releaser-posthog-python[bot] <262414804+releaser-posthog-python[bot]@users.noreply.github.com>
Co-authored-by: Georgis Andonis <6430745+gesh@users.noreply.github.com>
eli-r-ph and others added 9 commits October 20, 2026 10:06
* fix: make request.post and request.flags arguments keyword-only

* feat: add a level argument to capture_exception and ignore reserved exception properties

* feat: warn when a non-string session or window id is dropped

* docs: describe the exception level, keyword-only request args and session id warning

* fix: warn once without the value when replacing an invalid event uuid

An invalid caller uuid is still replaced with a generated UUIDv7, but the
SDK now logs one warning that names the rule instead of an error that
echoes the value. An empty string counts as unset and gets a generated
uuid without a log. Client and AsyncClient share one helper.

* fix: treat a per-call disable_geoip as a value of the event

A disable_geoip argument now fills $geoip_disable as the event's own
value: above context tags, super_properties and the client setting, and
below a $geoip_disable in the call's properties. disable_geoip=False now
sends $geoip_disable: false. Client and AsyncClient share the layer in
_build_event_defaults.
* fix(ai): fail at setup when an AI integration's client lacks capture_ai

* fix(ai)!: log and disable AI capture for a client without capture_ai

Raising TypeError at construction could stop the host application over an
analytics problem. The integration now logs one error at setup and captures no
AI events; provider calls work and return normally.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat(mcp): set $mcp_interface on mcp analytics events (#1032)

feat(mcp): add interface property to server events

Generated-By: PostHog Desktop
Task-Id: 651bf7d9-01f4-4d75-8583-868e29fdd314
(cherry picked from commit a3bd254)

* chore: Release v7.67.1 [skip ci]

(cherry picked from commit 4ae3d26)

* Update generated references

(cherry picked from commit 492d71b)

* feat(integrations): align request middleware configuration (#1040)

* Align ASGI and Flask integration defaults

* feat(integrations): align request middleware configuration

(cherry picked from commit 2f0d67d)

* chore: Release v7.68.0 [skip ci]

(cherry picked from commit ad553de)

* Update generated references

(cherry picked from commit 90f8d69)

* chore(deps): bump the uv group across 2 directories with 3 updates (#1042)

Bumps the uv group with 1 update in the /examples/example-ai-llamaindex directory: [banks](https://github.com/masci/banks).
Bumps the uv group with 2 updates in the /examples/example-ai-pydantic-ai directory: [pydantic-ai](https://github.com/pydantic/pydantic-ai) and [pydantic-ai-slim](https://github.com/pydantic/pydantic-ai).

Updates `banks` from 2.4.5 to 2.5.1
- [Release notes](https://github.com/masci/banks/releases)
- [Commits](masci/banks@v2.4.5...v2.5.1)

Updates `pydantic-ai` from 1.102.0 to 1.107.7
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v1.102.0...v1.107.7)

Updates `pydantic-ai-slim` from 1.102.0 to 1.107.7
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v1.102.0...v1.107.7)

---
updated-dependencies:
- dependency-name: banks
  dependency-version: 2.5.1
  dependency-type: indirect
  dependency-group: uv
- dependency-name: pydantic-ai
  dependency-version: 1.107.7
  dependency-type: direct:production
  dependency-group: uv
- dependency-name: pydantic-ai-slim
  dependency-version: 1.107.7
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit ee686ff)

* test(django): read the middleware context test's event after defaults fill

On v1, context properties are filled inside _enqueue, before before_send.
The test patched _enqueue itself, so it saw the event before the fill and
lost $request_path and role. It now records the event in before_send.
The assertions are unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: redirect origin and logging fixes from review; scope AI routing docs

- Compare redirect origins as requests sends them, so a Unicode host
  matches its IDNA form.
- Log a refused or exhausted capture redirect at debug; failed-batch
  reporting owns warnings.
- The migration guide says the OpenTelemetry integration still exports
  to /i/v0/ai/otel.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Georgis Andonis <6430745+gesh@users.noreply.github.com>
Co-authored-by: releaser-posthog-python[bot] <262414804+releaser-posthog-python[bot]@users.noreply.github.com>
Co-authored-by: Hugues Pouillot <hpouillot@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: drop only the invalid event, and size analytics by capture's limits

An event with a missing, empty or non-string name, or one that cannot be
serialized (for example with NaN), is dropped alone instead of failing the
whole batch at capture. A property key JSON cannot represent is dropped from
its event. The analytics per-event limit is capture's 10 MiB request limit,
since capture reports an event over its per-event limit in the response.
A personal API key disables the client like an empty key, and logs no longer
include event content or invalid timestamp values.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* test: cover the event name, warn-once and personal key helpers in test_utils

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: keep the module client disabled for a personal API key; narrow two guide claims

- setup() re-derived disabled from the key being non-empty, which
  re-enabled a client given a phx_ key on every module call.
- The guide now says finite float keys are stringified (NaN keys drop
  the event) and that only the SDK's own log lines drop event content.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: note the 200-byte event name limit in the 8.0 migration guide

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: drop an event whose before_send leaves a non-string distinct_id

before_send can set any value, and capture v1 rejects the whole request
for a non-string distinct_id. The SDK now drops that event locally with
one warning per reason, and never converts the value or makes up an ID.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: take group and alias ids from the caller, and apply request context by one rule

group_identify uses the caller's distinct id, then the context id, then
$<group_type>_<group_key>, never a random id, and no longer adds the context
session id. alias() no longer takes its target from the context distinct id.
Context tags and options now reach alias and group_identify like capture.
An empty or whitespace-only distinct id counts as missing, and generated
personless distinct ids are UUIDv7.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: context reach for alias and group_identify; 200-byte distinct id limit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: drop product_tour_id from the guide; name the legacy option properties

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Clients that fail together now retry at slightly different times, so they
do not all hit capture at once while it recovers. Retry-After still sets a
minimum wait, and the 30 s cap still applies.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
… (#1107)

* fix(integrations): align tracing-header capture across frameworks (#1061)

(cherry picked from commit 780cba9)

* fix: adapt the tracing header port to v1 and note it in the 8.0 guide

v1 turns person processing off for a generated distinct ID with an event
option, which beats the legacy property, so the ported test checks the
derived option. The 8.0 migration guide notes the default and the off
switch.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Dustin Byrne <dustin@posthog.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: report capture's dropped duplicate copies as drops

Capture now keeps the first event for each uuid in a request and returns
duplicates_dropped on that uuid's result. The SDK reports that many later
copies as drops with reason duplicate_event_uuid and never resends them,
and verdict_summary counts each drop by its own reason.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: note older capture's 400 for duplicate uuids

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
…1114)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
eli-r-ph and others added 2 commits October 23, 2026 15:24
* feat(metrics): attach trace exemplars to flushed metric series (#1057)

(cherry picked from commit 3cc2d64)

* chore: Release v7.69.0 [skip ci]

(cherry picked from commit 653ff87)

* Update generated references

(cherry picked from commit 6f65898)

* feat(ai): add per-request context to span processor (#1060)

* feat: span processor request context

* fix: span processor review feedback

* fix: span processor review follow-ups

(cherry picked from commit 6916499)

* chore: Release v7.70.0 [skip ci]

(cherry picked from commit a615eed)

* Update generated references

(cherry picked from commit a49648e)

* fix(prompts): share one request between concurrent fetches of the same prompt (#1059)

(cherry picked from commit 10d094e)

* chore: Release v7.70.1 [skip ci]

(cherry picked from commit ec71a24)

* Update generated references

(cherry picked from commit fc3c434)

* fix(ai): mark cancelled async LLM calls as errors (#1065)

* fix(ai): mark cancelled async LLM calls as errors

* test: fix Python 3.10 cancellation and FastMCP compatibility

(cherry picked from commit fec41f2)

* chore: Release v7.70.2 [skip ci]

(cherry picked from commit e381808)

* Update generated references

(cherry picked from commit f33d55d)

* chore(deps): bump the ai-providers group with 8 updates (#1054)

Bumps the ai-providers group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [langchain](https://github.com/langchain-ai/langchain) | `1.4.2` | `1.4.3` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.8.0` | `1.11.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.12` | `1.2.13` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.5` | `1.6.6` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.6.7` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.7.4` | `1.7.5` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.25.0` | `2.28.0` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.1.2` | `1.1.3` |

Updates `langchain` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.4.2...langchain==1.4.3)

Updates `anthropic` from 1.8.0 to 1.11.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v1.8.0...v1.11.0)

Updates `langgraph` from 1.2.12 to 1.2.13
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.12...1.2.13)

Updates `langchain-core` from 1.6.5 to 1.6.6
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.6.5...langchain-core==1.6.6)

Updates `langchain-openai` from 1.6.6 to 1.6.7
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.6.6...langchain-openai==1.6.7)

Updates `langchain-anthropic` from 1.7.4 to 1.7.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-anthropic==1.7.4...langchain-anthropic==1.7.5)

Updates `google-genai` from 2.25.0 to 2.28.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.25.0...v2.28.0)

Updates `langchain-text-splitters` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.2...langchain-text-splitters==1.1.3)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: anthropic
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
- dependency-name: langgraph
  dependency-version: 1.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-core
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-openai
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-anthropic
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: google-genai
  dependency-version: 2.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ai-providers
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Byrne <dustin@posthog.com>
(cherry picked from commit f95e1f4)

* chore(deps): bump the github-actions group with 2 updates (#1055)

Bumps the github-actions group with 2 updates: [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) and [PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml](https://github.com/posthog/posthog-sdk-test-harness).

Updates `dtolnay/rust-toolchain` from 7e38f4b43b4db5c8dd498af069a4f6196df1d067 to e2a55d2ffb04f378e9626c28d38b36d230d1e12f
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](dtolnay/rust-toolchain@7e38f4b...e2a55d2)

Updates `PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml` from 1.11.0 to 1.13.1
- [Release notes](https://github.com/posthog/posthog-sdk-test-harness/releases)
- [Changelog](https://github.com/PostHog/posthog-sdk-test-harness/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-sdk-test-harness@4593de8...e32f08b)

---
updated-dependencies:
- dependency-name: dtolnay/rust-toolchain
  dependency-version: e2a55d2ffb04f378e9626c28d38b36d230d1e12f
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Byrne <dustin@posthog.com>
(cherry picked from commit 9b7e632)

* chore(deps): bump mcp from 1.28.1 to 1.30.0 (#1068)

Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.28.1 to 1.30.0.
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 1.30.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 12e88a2)

* docs: clarify reusable flush and terminal shutdown guidance (#1043)

* docs: clarify reusable flush and terminal shutdown guidance

* docs: preserve published 7.67.0 reference snapshot

(cherry picked from commit d0b6f71)

* chore: Release v7.71.0 [skip ci]

(cherry picked from commit 20a574e)

* Update generated references

(cherry picked from commit 883eaca)

* chore(deps): bump the uv group across 4 directories with 2 updates (#1069)

Bumps the uv group with 1 update in the /examples/example-ai-llamaindex directory: [tinytag](https://github.com/tinytag/tinytag).
Bumps the uv group with 1 update in the /examples/example-ai-openai-agents directory: [mcp](https://github.com/modelcontextprotocol/python-sdk).
Bumps the uv group with 1 update in the /examples/example-ai-pydantic-ai directory: [mcp](https://github.com/modelcontextprotocol/python-sdk).
Bumps the uv group with 1 update in the /examples/example-ai-semantic-kernel directory: [mcp](https://github.com/modelcontextprotocol/python-sdk).

Updates `tinytag` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/tinytag/tinytag/releases)
- [Commits](tinytag/tinytag@2.2.1...2.3.0)

Updates `mcp` from 1.28.1 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0)

Updates `mcp` from 1.29.1 to 1.30.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0)

Updates `mcp` from 2.1.1 to 2.2.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0)

---
updated-dependencies:
- dependency-name: tinytag
  dependency-version: 2.3.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 1.30.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 1.30.0
  dependency-type: indirect
  dependency-group: uv
- dependency-name: mcp
  dependency-version: 2.2.0
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit b1363dc)

* chore(deps-dev): bump claude-agent-sdk from 0.1.50 to 0.2.121 (#1073)

Bumps [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) from 0.1.50 to 0.2.121.
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.1.50...v0.2.121)

---
updated-dependencies:
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.121
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a89acf8)

* feat(mcp): stop sending standalone $identify events (#1067)

* feat(mcp): stop sending standalone $identify events

The identify callback still sets distinct_id, $set and $groups on every
event. The standalone event carried no $anon_distinct_id, so ingestion
merged no person, and stateless servers sent one per tool call.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore(mcp): assert no $identify over the wire and refresh docs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit facd617)

* chore: Release v7.72.0 [skip ci]

(cherry picked from commit 876b955)

* Update generated references

(cherry picked from commit b8327de)

* chore(deps): bump the github-actions group with 6 updates (#1083)

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `e2a55d2ffb04f378e9626c28d38b36d230d1e12f` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` |
| [PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml](https://github.com/posthog/posthog-sdk-test-harness) | `1.13.1` | `1.15.0` |

Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c18668a...1c37ad0)

Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...24c5418)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `dtolnay/rust-toolchain` from e2a55d2ffb04f378e9626c28d38b36d230d1e12f to 683b588c487a69d01f6c6ddf40f036ff682cc2c8
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](dtolnay/rust-toolchain@e2a55d2...683b588)

Updates `PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml` from 1.13.1 to 1.15.0
- [Release notes](https://github.com/posthog/posthog-sdk-test-harness/releases)
- [Changelog](https://github.com/PostHog/posthog-sdk-test-harness/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-sdk-test-harness@e32f08b...64ffa6a)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: dtolnay/rust-toolchain
  dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 3822271)

* chore(deps): bump the ai-providers group with 6 updates (#1082)

Bumps the ai-providers group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [langchain](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.4.4` |
| [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.11.0` | `1.13.0` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.13` | `1.2.14` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.6.9` |
| [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.7` | `1.7.0` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.28.0` | `2.29.0` |

Updates `langchain` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==1.4.3...langchain==1.4.4)

Updates `anthropic` from 1.11.0 to 1.13.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v1.11.0...v1.13.0)

Updates `langgraph` from 1.2.13 to 1.2.14
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.13...1.2.14)

Updates `langchain-core` from 1.6.6 to 1.6.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.6.6...langchain-core==1.6.9)

Updates `langchain-openai` from 1.6.7 to 1.7.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-openai==1.6.7...langchain-openai==1.7.0)

Updates `google-genai` from 2.28.0 to 2.29.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.28.0...v2.29.0)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: anthropic
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
- dependency-name: langgraph
  dependency-version: 1.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-core
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-providers
- dependency-name: langchain-openai
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
- dependency-name: google-genai
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-providers
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 9b70476)

* feat(llma): support scorer and experiment tags (#1085)

(cherry picked from commit b086f65)

* chore: Release v7.73.0 [skip ci]

(cherry picked from commit 81931fa)

* Update generated references

(cherry picked from commit 9e62e0f)

* fix(flags): accept rediss:// URLs for flag_fallback_cache_url (#1080)

Signed-off-by: Sebastian Turner <sebastiant3484@gmail.com>
(cherry picked from commit 20dabaa)

* chore: Release v7.73.1 [skip ci]

(cherry picked from commit 223b592)

* Update generated references

(cherry picked from commit e9e0830)

* chore(deps): bump aiohttp from 3.14.3 to 3.14.4 (#1086)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 305dee3)

* chore(deps): bump the uv group across 7 directories with 1 update (#1087)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
- dependency-name: aiohttp
  dependency-version: 3.14.4
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 1b86549)

* fix(flags): compare numeric string properties numerically (#1088)

(cherry picked from commit 63b5dcc)

* chore: Release v7.73.2 [skip ci]

(cherry picked from commit cb7580e)

* Update generated references

(cherry picked from commit 1222ac7)

* fix(ai): keep the openai.Stream API on sync OpenAI streams (#1062)

Sync chat completions and Responses streams returned a bare generator, so
`with`, `close()` and attributes such as `.response` were lost. Wrap them
with _StreamWrapper, as #804 did for Anthropic and #645 did for async.

Co-authored-by: Dustin Byrne <dustin@posthog.com>
(cherry picked from commit f70b3cc)

* fix(ai): take cumulative Anthropic stream usage from message_delta (#1074)

Anthropic's message_delta usage is cumulative. With server tools (web
search, web fetch, code execution) its input and cache counts exceed
message_start's, but the stream accumulator only recorded message_start's
input and cache counts, so streamed generations under-reported input
tokens and cache writes. Keep the larger of the two for each count.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit 57d1607)

* chore: Release v7.73.3 [skip ci]

(cherry picked from commit 24c6722)

* Update generated references

(cherry picked from commit bf87352)

* feat(llma): add datasets to offline evaluations (#1090)

* feat(llma): add datasets to offline evaluations

* chore(llma): share evaluation request and response helpers

* fix(llma): address dataset sdk review feedback

(cherry picked from commit b8879a7)

* chore: Release v7.74.0 [skip ci]

(cherry picked from commit ac7fa99)

* Update generated references

(cherry picked from commit b14dd9e)

* feat(django): add request context to OpenTelemetry spans (#1070)

* feat(django): add request context to OpenTelemetry spans

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* fix(tracing): preserve span attributes and active context values

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* chore: use current tracing header settings in span checks

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* fix(tracing): respect disabled context owners

Generated-By: PostHog Desktop
Task-Id: bfd18848-e498-4352-a58a-b9ba85de4198
(cherry picked from commit 5f01fe9)

* fix: enrich Flask, ASGI, and Celery spans with context (#1075)

* fix(flask): add request context to active OpenTelemetry spans

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* fix(asgi): enrich active request spans

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* fix(celery): enrich active task spans with job context

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* chore: use current tracing header settings in framework checks

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* fix(celery): preserve caller span identity during eager tasks

Generated-By: PostHog Desktop
Task-Id: 5681be44-4986-48db-b140-1bda88f75f96

* chore(tests): use enabled clients in span tests

Generated-By: PostHog Desktop
Task-Id: bfd18848-e498-4352-a58a-b9ba85de4198
(cherry picked from commit 5ddb446)

* chore: Release v7.75.0 [skip ci]

(cherry picked from commit 908c77b)

* Update generated references

(cherry picked from commit a5b93ee)

* fix(flags): match explicit null properties with string operators (#1092)

(cherry picked from commit e9056e3)

* chore: Release v7.75.1 [skip ci]

(cherry picked from commit 361ca83)

* Update generated references

(cherry picked from commit 5e296d8)

* fix(ai): capture OpenAI chat custom tool calls instead of raising (#1098)

A custom tool call has `custom` instead of `function`, so formatting the
response raised AttributeError from the wrapped create(), after the provider
call had succeeded. Read the name and input from `custom`, matching
PostHog/posthog-js#5251.

(cherry picked from commit 4697e6f)

* chore: Release v7.75.2 [skip ci]

(cherry picked from commit e63a898)

* Update generated references

(cherry picked from commit e9710ec)

* fix(ai): record mid-stream errors on streamed OpenAI, Anthropic and Gemini events (#1094)

* fix(ai): record mid-stream errors on streamed OpenAI, Anthropic and Gemini events

capture_streaming_event hard-coded $ai_http_status=200, and the stream
generators only had a finally block. When the provider stream raised after
the first chunk (overloaded, connection reset), the event was sent as a
success with no $ai_is_error/$ai_error, unlike the non-streaming path.

Catch the exception in each sync and async generator, pass it through
StreamingEventData, and re-raise unchanged. The event now carries
$ai_is_error, $ai_error and the error's status code (0 when it has none).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

* fix(ai): pass the stream error to StreamingEventData directly and update the API snapshot

mypy 1.16 rejected splatting {"error": error} into StreamingEventData(...)
(typeddict-item). The field accepts None and capture_streaming_event reads it
with .get(), so pass error=error. Regenerate the public API snapshot for the new
StreamingEventData.error field.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
(cherry picked from commit dc2a2b4)

* fix(ai): keep the refusal of a non-streamed OpenAI chat completion in the captured output (#1095)

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
(cherry picked from commit 42c8b7b)

* fix(ai): record an integer $ai_http_status in the LangChain callback handler (#1096)

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
(cherry picked from commit a6ddc2e)

* chore: Release v7.75.3 [skip ci]

(cherry picked from commit dc01266)

* Update generated references

(cherry picked from commit 9185524)

* fix(ai): keep latest cumulative output tokens across message_deltas (#1100)

* fix(ai): keep latest cumulative output tokens across message_deltas

Server tools such as web search can emit several message_delta events in
one Anthropic stream, and each delta's usage is cumulative. The stream
accumulator added every delta's output_tokens together, so a stream with
two deltas reporting 50 then 110 cumulative tokens captured 160. Keep
the latest cumulative value, matching how the input and cache counts are
already handled and how the Anthropic SDK accumulates usage.

* style(ai): format cumulative token async regression test

---------

Co-authored-by: Manoel Aranda Neto <marandaneto@gmail.com>
(cherry picked from commit 34ec4f8)

* chore: Release v7.75.4 [skip ci]

(cherry picked from commit 84664b4)

* Update generated references

(cherry picked from commit e17a8be)

* fix: serialize non-finite floats as null in JSON payloads (#1081)

* fix: serialize non-finite floats as null in JSON payloads

Added a helper function to replace non-finite floats with None in JSON serialization.

* test: cover non-finite float serialization in batch payloads

* chore: refresh public API snapshot for DatetimeSerializer.encode

(cherry picked from commit 18b39e8)

* fix: annotate client timeouts as float (#1106)

`timeout` and `feature_flags_request_timeout_seconds` were typed (or
inferred) as `int`, so type checkers rejected fractional values even
though they go straight to requests/httpx, which accept floats.

Fixes #1089

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
(cherry picked from commit b3fcec6)

* chore: Release v7.75.5 [skip ci]

(cherry picked from commit a774223)

* Update generated references

(cherry picked from commit 8c2d8f6)

* fix(flags): retain tracking metadata in local evaluation snapshots (#1041)

(cherry picked from commit a95331f)

* chore: Release v7.75.6 [skip ci]

(cherry picked from commit a5909dc)

* Update generated references

(cherry picked from commit 4b280fc)

* chore(deps): bump uv to 0.13.4 and certifi to 2026.10.19 (#1104)

Bump uv to 0.13.4 and certifi to 2026.10.19

Eight eMudhra intermediate CA private keys were broken, so anyone
holding them can impersonate TLS servers to clients that still trust
emSign ECC Root CA - G3. uv 0.13.4 and certifi 2026.10.19 are the first
releases whose bundled CA store drops that root, and the versions pinned
here still trust it. See the Python.org notice.
https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

Claude-Session: https://claude.ai/code/session_01T4ck1tYoQv3mzBTXH17asD

Co-authored-by: Claude <noreply@anthropic.com>
(cherry picked from commit 7651b10)

* test: send NaN and Infinity as null on the v1 path, as #1081 does on main

#1081 keeps an event whose properties hold a non-finite float and writes
the value as null. The v1 before_send test expected that event to be
dropped; a capture v1 body test now pins the null on the wire, and the
migration guide says so.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Sebastian Turner <sebastiant3484@gmail.com>
Co-authored-by: Daniel Visca <daniel.v@posthog.com>
Co-authored-by: releaser-posthog-python[bot] <262414804+releaser-posthog-python[bot]@users.noreply.github.com>
Co-authored-by: Carlos Marchal <carlos@posthog.com>
Co-authored-by: Juraj Majerik <juro.majerik@gmail.com>
Co-authored-by: Manoel Aranda Neto <5731772+marandaneto@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Byrne <dustin@posthog.com>
Co-authored-by: Georgis Andonis <6430745+gesh@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Radu Raicea <radu@raicea.com>
Co-authored-by: Sebastian Turner <sebastiant3484@gmail.com>
Co-authored-by: mosafariuk <mosafariuk@gmail.com>
Co-authored-by: alexcastgonz <82875882+pcbeingused333@users.noreply.github.com>
Co-authored-by: Paul D'Ambra <paul.dambra@gmail.com>
Co-authored-by: Harsh Kashyap <55448981+Harsh23Kashyap@users.noreply.github.com>
Co-authored-by: Manoel Aranda Neto <marandaneto@gmail.com>
Co-authored-by: Anna Garcia <11654201+turnipdabeets@users.noreply.github.com>
Co-authored-by: Georges-Antoine Assi <3247106+gantoine@users.noreply.github.com>
…ties (#1121)

Flag properties from flags or send_feature_flags are values the SDK
adds, so they now fill after the call's properties, context tags and
super_properties, like $is_server and system properties. 7.x already
let context tags and super_properties win over them.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant