chore(deps): bump the uv group across 4 directories with 2 updates by dependabot[bot] · Pull Request #1069 · PostHog/posthog-python

dependabot · 2026-10-16T17:59:29Z

Bumps the uv group with 1 update in the /examples/example-ai-llamaindex directory: tinytag.
Bumps the uv group with 1 update in the /examples/example-ai-openai-agents directory: mcp.
Bumps the uv group with 1 update in the /examples/example-ai-pydantic-ai directory: mcp.
Bumps the uv group with 1 update in the /examples/example-ai-semantic-kernel directory: mcp.

Updates tinytag from 2.2.1 to 2.3.0

Release notes

Sourced from tinytag's releases.

2.3.0

Add 'mime_type' attribute for audio MIME type/codec

Add 'is_lossless' attribute to indicate lossless audio

Add 'size' attribute to images for size in bytes

Add option to disable magic byte detection

Make XMP metadata available under 'other.xmp' field

Make bit depth available for lossy files providing it

Add .asf, .ogv and .wmv to list of supported file extensions

Mark deprecated 'extra' dictionary as obsolete

Fix incorrect key when adding common images to 'other' dictionary

Fix disc/track numbers not being returned as lists in 'as_dict()'

Only set audio properties with a positive value

Always read tags and audio properties in a single pass

ID3: Parse multi-value text frames correctly

ID3: Parse COMM and USLT frames correctly

ID3: Fix some errors in parsed size calculations

ID3: Exclude a few frames with custom structures

MPEG: Read VBRI and Xing Info headers for duration/bitrate

MPEG: Fix parsing of layer I and MPEG-2 layer III audio properties

MPEG: Fix slightly incorrect duration estimation

MPEG/MP4: Raise ParseError if header is invalid

MP4: Add 'image/bmp' and 'image/gif' MIME types

MP4: Fix infinite loop if size of certain sub-atoms is zero

MP4: Fix incorrect parsing of descriptor size

MP4: Don't read image data when image reading is disabled

OGG: Parse multi-stream files correctly

Speex: Don't read vendor string as comment

FLAC: Provide actual audio bitrate instead of overall bitrate

FLAC: Parse VORBIS_COMMENT and PICTURE blocks with invalid size

FLAC: Ignore subsequent STREAMINFO blocks

WAV: Include unknown fields in 'other' dictionary

WAV: Calculate bitrate/duration correctly

AIFF/WAV: Read whole ID3 chunk before parsing

ASF: Support parsing additional metadata objects

ASF: Stop parsing if object size is smaller than header

ASF: Make magic header detection more strict

Various performance improvements

Various code refactors

Commits

912d27f Rename header detection option to magic byte detection (#351)
8a93392 Release 2.3.0 (#350)
3bde1f9 README.md: Update outdated MIME type
3dd954d Update changelog
9ecb523 Rename WMA parser to ASF (#349)
74684cc Fix recent tests
7b115fe WMA: Support parsing additional metadata objects (#348)
97c1f86 README.md: Use correct format tag for WMA v2
1faf619 WAV/WMA: Show format tag (codec) in hex format
0ddc9a4 Update changelog
Additional commits viewable in compare view

Updates mcp from 1.28.1 to 1.30.0

Release notes

Sourced from mcp's releases.

v1.30.0

Maintenance release of the 1.x line. 2.x is the current line; 1.x docs are at https://py.sdk.modelcontextprotocol.io/v1/.

A few defaults changed in this release. If you run a server or client on 1.x, skim these first:

Behaviour changes

HTTP client redirects are only followed within the endpoint's origin (#3448)

streamable_http_client and sse_client follow a redirect only if it stays on the same scheme, host and port (or upgrades http to https on the same host).

A redirect anywhere else now fails the request with httpx.HTTPStatusError. If that other URL is the server you meant, use it as the endpoint URL.

The follow_redirects setting on an httpx.AsyncClient you pass in is no longer used for MCP requests, so you don't need it for the trailing-slash redirect any more.

OAuthClientProvider applies the same rule to its own requests.

Idle Streamable HTTP sessions now expire (#3426)

A stateful session with nothing in flight for 30 minutes is closed. The client's next request gets a 404 and it has to initialize again.

Clients that keep the GET stream open (the SDK's client does) are not affected.

A server also holds at most 10 000 sessions at once; beyond that, new sessions get a 503.

To turn either off: FastMCP(..., session_idle_timeout=None, max_sessions=None).

The OAuth client checks the authorization server's issuer (#3431)

Authorization server metadata whose issuer doesn't match the server it was fetched for is now rejected with OAuthFlowError: Authorization server metadata issuer mismatch.

Client registrations are now remembered per issuer; if the server later points at a different authorization server, the client registers again.

If protected resource metadata can't be fetched because of a 5xx/429, the flow now stops instead of falling back to the legacy endpoints.

Two new DeprecationWarnings (#3431, #3451)

ClientCredentialsOAuthProvider / PrivateKeyJWTOAuthProvider without issuer=. Pass your authorization server's issuer URL.

AuthSettings with resource_server_url set but validate_token_resource unset. Set it to True or False.

Both keep working as before in 1.x; this mostly matters if your tests turn warnings into errors.

New

AuthSettings.validate_token_resource: only accept tokens your TokenVerifier reports as issued for this server (#3451).

issuer= on ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider (#3431).

session_idle_timeout= and max_sessions= on FastMCP (#3426).

What's Changed

[v1.x] Resolve tool output-schema references within the schema document only by @maxisbey in modelcontextprotocol/python-sdk#3396

[v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent sessions by @maxisbey in modelcontextprotocol/python-sdk#3426

[v1.x] Validate the authorization server metadata issuer on every discovery path by @maxisbey in modelcontextprotocol/python-sdk#3431

[v1.x] Follow redirects only within the MCP endpoint's origin by @maxisbey in modelcontextprotocol/python-sdk#3448

[v1.x] Add AuthSettings.validate_token_resource to check a bearer token's resource by @maxisbey in modelcontextprotocol/python-sdk#3451

Full Changelog: modelcontextprotocol/python-sdk@v1.29.1...v1.30.0

v1.29.1

What's Changed

[v1.x] Complete the FastMCP Settings model at import time by @maxisbey in modelcontextprotocol/python-sdk#3352

[v1.x] Apply the request body limit to the SSE and OAuth endpoints by @maxisbey in modelcontextprotocol/python-sdk#3344

... (truncated)

Commits

8c2fa6e [v1.x] Add AuthSettings.validate_token_resource to check a bearer token's res...
2106335 [v1.x] Follow redirects only within the MCP endpoint's origin (#3448)
3eed7ce [v1.x] Validate the authorization server metadata issuer on every discovery p...
92120b4 [v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent ses...
5ebdfed [v1.x] Resolve tool output-schema references within the schema document only ...
b222713 [v1.x] Give recursive tool return types an object-rooted output schema (#3377)
4dc224f [v1.x] Apply the request body limit to the SSE and OAuth endpoints (#3344)
ae3338f [v1.x] Complete the FastMCP Settings model at import time (#3352)
98b7159 [v1.x] Move the v1.x docs to /v1/ and mark v1.x as the maintenance line (#3177)
c0c5a9d [v1.x] ci: pick the docs toolchain per worktree in build-docs.sh (#3082)
Additional commits viewable in compare view

Updates mcp from 1.29.1 to 1.30.0

Release notes

Sourced from mcp's releases.

v1.30.0

Maintenance release of the 1.x line. 2.x is the current line; 1.x docs are at https://py.sdk.modelcontextprotocol.io/v1/.

A few defaults changed in this release. If you run a server or client on 1.x, skim these first:

Behaviour changes

HTTP client redirects are only followed within the endpoint's origin (#3448)

streamable_http_client and sse_client follow a redirect only if it stays on the same scheme, host and port (or upgrades http to https on the same host).

A redirect anywhere else now fails the request with httpx.HTTPStatusError. If that other URL is the server you meant, use it as the endpoint URL.

The follow_redirects setting on an httpx.AsyncClient you pass in is no longer used for MCP requests, so you don't need it for the trailing-slash redirect any more.

OAuthClientProvider applies the same rule to its own requests.

Idle Streamable HTTP sessions now expire (#3426)

A stateful session with nothing in flight for 30 minutes is closed. The client's next request gets a 404 and it has to initialize again.

Clients that keep the GET stream open (the SDK's client does) are not affected.

A server also holds at most 10 000 sessions at once; beyond that, new sessions get a 503.

To turn either off: FastMCP(..., session_idle_timeout=None, max_sessions=None).

The OAuth client checks the authorization server's issuer (#3431)

Authorization server metadata whose issuer doesn't match the server it was fetched for is now rejected with OAuthFlowError: Authorization server metadata issuer mismatch.

Client registrations are now remembered per issuer; if the server later points at a different authorization server, the client registers again.

If protected resource metadata can't be fetched because of a 5xx/429, the flow now stops instead of falling back to the legacy endpoints.

Two new DeprecationWarnings (#3431, #3451)

ClientCredentialsOAuthProvider / PrivateKeyJWTOAuthProvider without issuer=. Pass your authorization server's issuer URL.

AuthSettings with resource_server_url set but validate_token_resource unset. Set it to True or False.

Both keep working as before in 1.x; this mostly matters if your tests turn warnings into errors.

New

AuthSettings.validate_token_resource: only accept tokens your TokenVerifier reports as issued for this server (#3451).

issuer= on ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider (#3431).

session_idle_timeout= and max_sessions= on FastMCP (#3426).

What's Changed

[v1.x] Resolve tool output-schema references within the schema document only by @maxisbey in modelcontextprotocol/python-sdk#3396

[v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent sessions by @maxisbey in modelcontextprotocol/python-sdk#3426

[v1.x] Validate the authorization server metadata issuer on every discovery path by @maxisbey in modelcontextprotocol/python-sdk#3431

[v1.x] Follow redirects only within the MCP endpoint's origin by @maxisbey in modelcontextprotocol/python-sdk#3448

[v1.x] Add AuthSettings.validate_token_resource to check a bearer token's resource by @maxisbey in modelcontextprotocol/python-sdk#3451

Full Changelog: modelcontextprotocol/python-sdk@v1.29.1...v1.30.0

v1.29.1

What's Changed

[v1.x] Complete the FastMCP Settings model at import time by @maxisbey in modelcontextprotocol/python-sdk#3352

[v1.x] Apply the request body limit to the SSE and OAuth endpoints by @maxisbey in modelcontextprotocol/python-sdk#3344

... (truncated)

Commits

8c2fa6e [v1.x] Add AuthSettings.validate_token_resource to check a bearer token's res...
2106335 [v1.x] Follow redirects only within the MCP endpoint's origin (#3448)
3eed7ce [v1.x] Validate the authorization server metadata issuer on every discovery p...
92120b4 [v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent ses...
5ebdfed [v1.x] Resolve tool output-schema references within the schema document only ...
b222713 [v1.x] Give recursive tool return types an object-rooted output schema (#3377)
4dc224f [v1.x] Apply the request body limit to the SSE and OAuth endpoints (#3344)
ae3338f [v1.x] Complete the FastMCP Settings model at import time (#3352)
98b7159 [v1.x] Move the v1.x docs to /v1/ and mark v1.x as the maintenance line (#3177)
c0c5a9d [v1.x] ci: pick the docs toolchain per worktree in build-docs.sh (#3082)
Additional commits viewable in compare view

Updates mcp from 2.1.1 to 2.2.0

Release notes

Sourced from mcp's releases.

v1.30.0

Maintenance release of the 1.x line. 2.x is the current line; 1.x docs are at https://py.sdk.modelcontextprotocol.io/v1/.

A few defaults changed in this release. If you run a server or client on 1.x, skim these first:

Behaviour changes

HTTP client redirects are only followed within the endpoint's origin (#3448)

streamable_http_client and sse_client follow a redirect only if it stays on the same scheme, host and port (or upgrades http to https on the same host).

A redirect anywhere else now fails the request with httpx.HTTPStatusError. If that other URL is the server you meant, use it as the endpoint URL.

The follow_redirects setting on an httpx.AsyncClient you pass in is no longer used for MCP requests, so you don't need it for the trailing-slash redirect any more.

OAuthClientProvider applies the same rule to its own requests.

Idle Streamable HTTP sessions now expire (#3426)

A stateful session with nothing in flight for 30 minutes is closed. The client's next request gets a 404 and it has to initialize again.

Clients that keep the GET stream open (the SDK's client does) are not affected.

A server also holds at most 10 000 sessions at once; beyond that, new sessions get a 503.

To turn either off: FastMCP(..., session_idle_timeout=None, max_sessions=None).

The OAuth client checks the authorization server's issuer (#3431)

Authorization server metadata whose issuer doesn't match the server it was fetched for is now rejected with OAuthFlowError: Authorization server metadata issuer mismatch.

Client registrations are now remembered per issuer; if the server later points at a different authorization server, the client registers again.

If protected resource metadata can't be fetched because of a 5xx/429, the flow now stops instead of falling back to the legacy endpoints.

Two new DeprecationWarnings (#3431, #3451)

ClientCredentialsOAuthProvider / PrivateKeyJWTOAuthProvider without issuer=. Pass your authorization server's issuer URL.

AuthSettings with resource_server_url set but validate_token_resource unset. Set it to True or False.

Both keep working as before in 1.x; this mostly matters if your tests turn warnings into errors.

New

AuthSettings.validate_token_resource: only accept tokens your TokenVerifier reports as issued for this server (#3451).

issuer= on ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider (#3431).

session_idle_timeout= and max_sessions= on FastMCP (#3426).

What's Changed

[v1.x] Resolve tool output-schema references within the schema document only by @maxisbey in modelcontextprotocol/python-sdk#3396

[v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent sessions by @maxisbey in modelcontextprotocol/python-sdk#3426

[v1.x] Validate the authorization server metadata issuer on every discovery path by @maxisbey in modelcontextprotocol/python-sdk#3431

[v1.x] Follow redirects only within the MCP endpoint's origin by @maxisbey in modelcontextprotocol/python-sdk#3448

[v1.x] Add AuthSettings.validate_token_resource to check a bearer token's resource by @maxisbey in modelcontextprotocol/python-sdk#3451

Full Changelog: modelcontextprotocol/python-sdk@v1.29.1...v1.30.0

v1.29.1

What's Changed

[v1.x] Complete the FastMCP Settings model at import time by @maxisbey in modelcontextprotocol/python-sdk#3352

[v1.x] Apply the request body limit to the SSE and OAuth endpoints by @maxisbey in modelcontextprotocol/python-sdk#3344

... (truncated)

Commits

8c2fa6e [v1.x] Add AuthSettings.validate_token_resource to check a bearer token's res...
2106335 [v1.x] Follow redirects only within the MCP endpoint's origin (#3448)
3eed7ce [v1.x] Validate the authorization server metadata issuer on every discovery p...
92120b4 [v1.x] Expire idle Streamable HTTP sessions by default and cap concurrent ses...
5ebdfed [v1.x] Resolve tool output-schema references within the schema document only ...
b222713 [v1.x] Give recursive tool return types an object-rooted output schema (#3377)
4dc224f [v1.x] Apply the request body limit to the SSE and OAuth endpoints (#3344)
ae3338f [v1.x] Complete the FastMCP Settings model at import time (#3352)
98b7159 [v1.x] Move the v1.x docs to /v1/ and mark v1.x as the maintenance line (#3177)
c0c5a9d [v1.x] ci: pick the docs toolchain per worktree in build-docs.sh (#3082)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 1 update in the /examples/example-ai-llamaindex directory: [tinytag](https://github.com/tinytag/tinytag). Bumps the uv group with 1 update in the /examples/example-ai-openai-agents directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Bumps the uv group with 1 update in the /examples/example-ai-pydantic-ai directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Bumps the uv group with 1 update in the /examples/example-ai-semantic-kernel directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `mcp` from 1.28.1 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) Updates `mcp` from 1.29.1 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) Updates `mcp` from 2.1.1 to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) --- updated-dependencies: - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 1.30.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 1.30.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 2.2.0 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-16T18:02:22Z

posthog-python Compliance Report

Date: 2026-10-16T18:04:25.673176+00:00
Duration: 259944ms

✅ All Tests Passed!

121/121 tests passed

Capture_V1 Tests

✅ 95/95 tests passed

View Details

Test	Status	Duration
Endpoint And Method.Targets V1 Endpoint	✅	517ms
Endpoint And Method.Does Not Use Legacy Endpoints	✅	510ms
Required Headers.Has Authorization Bearer Header	✅	510ms
Required Headers.Has Content Type Json	✅	511ms
Required Headers.Has Posthog Sdk Info Format	✅	511ms
Required Headers.Has Posthog Attempt Header	✅	509ms
Required Headers.Has Posthog Request Id	✅	510ms
Required Headers.Has Posthog Request Timestamp	✅	510ms
Required Headers.Has User Agent	✅	510ms
Body Format.Body Has Created At And Batch	✅	510ms
Body Format.No Api Key In Body	✅	509ms
Body Format.No Sent At In Body	✅	510ms
Event Format.Event Has Required Root Fields	✅	509ms
Event Format.Event Uuid Is Valid	✅	511ms
Event Format.Event Timestamp Is Rfc3339	✅	510ms
Event Format.Non Utc Event Timestamp Is Converted To Utc	✅	516ms
Event Format.Distinct Id Is String	✅	510ms
Event Format.Distinct Id At Root Not Properties	✅	510ms
Event Format.Custom Properties Preserved	✅	510ms
Event Format.Set Properties Preserved	✅	510ms
Event Format.Set Once Properties Preserved	✅	510ms
Event Format.Groups Properties Preserved	✅	510ms
Event Format.Sdk Generates Uuid If Not Provided	✅	511ms
Event Format.Event Has Required Root Fields Batch	✅	514ms
Event Format.Event Uuid Is Valid Batch	✅	514ms
Event Format.Event Timestamp Is Rfc3339 Batch	✅	512ms
Event Format.Distinct Id Is String Batch	✅	514ms
Event Format.Distinct Id At Root Not Properties Batch	✅	513ms
Event Format.Custom Properties Preserved Batch	✅	514ms
Event Format.Set Properties Preserved Batch	✅	513ms
Event Format.Set Once Properties Preserved Batch	✅	513ms
Event Format.Groups Properties Preserved Batch	✅	514ms
Event Format.Sdk Generates Uuid If Not Provided Batch	✅	514ms
Batch Behavior.Multiple Events In Single Batch	✅	517ms
Batch Behavior.Batch Envelope Smoke	✅	515ms
Batch Behavior.Flush With No Events Sends Nothing	✅	506ms
Batch Behavior.Flush At Triggers Batch	✅	1012ms
Batch Behavior.Created At Reflects Batch Creation Time	✅	511ms
Deduplication.Generates Unique Uuids	✅	517ms
Deduplication.Different Events Same Content Different Uuids	✅	512ms
Deduplication.Preserves Uuid On Retry	✅	6520ms
Deduplication.Preserves Timestamp On Retry	✅	6520ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry	✅	6524ms
Deduplication.No Duplicate Events In Batch	✅	518ms
Header Behavior On Retry.Attempt Header Starts At One	✅	510ms
Header Behavior On Retry.Attempt Header Increments On Retry	✅	13527ms
Header Behavior On Retry.Request Id Preserved On Retry	✅	6517ms
Header Behavior On Retry.Different Requests Have Different Request Ids	✅	3020ms
Header Behavior On Retry.Request Timestamp Changes On Retry	✅	6521ms
Response Format Validation.Success Response Has Uuid Keyed Results	✅	511ms
Response Format Validation.Success Response Has Ok For Each Event	✅	514ms
Response Format Validation.Success No Retry After When All Ok	✅	512ms
Response Format Validation.Success Retry After Present When Retry Events	✅	1516ms
Response Format Validation.Success No Retry After When Drop Only	✅	513ms
Response Format Validation.Response Echoes Request Id	✅	510ms
Retry Behavior.Retries On 408	✅	6520ms
Retry Behavior.Retries On 500	✅	6520ms
Retry Behavior.Retries On 503	✅	8524ms
Retry Behavior.Retries On 504	✅	6521ms
Retry Behavior.Retryable Errors Have Retry After	✅	3515ms
Retry Behavior.Respects Retry After On Retryable Error	✅	11523ms
Retry Behavior.Does Not Retry On 400	✅	2514ms
Retry Behavior.Does Not Retry On 401	✅	2515ms
Retry Behavior.Does Not Retry On 402	✅	2513ms
Retry Behavior.Does Not Retry On 413	✅	2514ms
Retry Behavior.Does Not Retry On 415	✅	2514ms
Retry Behavior.Non Retryable Errors Have No Retry After	✅	2513ms
Retry Behavior.Implements Backoff	✅	22526ms
Retry Behavior.Max Retries Respected	✅	22534ms
Partial Batch Handling.Handles 200 Full Success	✅	2514ms
Partial Batch Handling.Handles 200 With All Ok	✅	3515ms
Partial Batch Handling.Does Not Retry Dropped Events	✅	3515ms
Partial Batch Handling.Does Not Retry Limited Events	✅	3517ms
Partial Batch Handling.Prunes Ok Events On Partial Retry	✅	6521ms
Partial Batch Handling.Prunes Dropped Events On Partial Retry	✅	6522ms
Partial Batch Handling.Retries Only Retry Events From Partial	✅	6520ms
Partial Batch Handling.Partial Retry Preserves Uuids	✅	6521ms
Partial Batch Handling.Partial Retry Attempt Header Increments	✅	6517ms
Partial Batch Handling.Partial Retry Request Id Preserved	✅	6526ms
Partial Batch Handling.Respects Retry After On Partial	✅	8519ms
Partial Batch Handling.Unknown Result Treated As Terminal	✅	3516ms
Partial Batch Handling.Mixed Ok Drop Limited No Retry	✅	3522ms
Compression.Sends Gzip Content Encoding	✅	512ms
Compression.No Content Encoding When Disabled	✅	511ms
Compression.Compressed Body Is Decompressible	✅	513ms
Error Handling.Does Not Retry On Unknown 4Xx	✅	2514ms
Event Options.Cookieless Mode Override	✅	513ms
Event Options.Disable Skew Correction Override	✅	512ms
Event Options.Process Person Profile Override	✅	510ms
Event Options.Product Tour Id Override	✅	511ms
Event Options.Unset Options Omitted	✅	511ms
Event Options.Options Override In Batch	✅	516ms
Geoip And Historical Migration.Geoip Disable Injected Into Properties	✅	510ms
Geoip And Historical Migration.Historical Migration Set In Body	✅	512ms
Geoip And Historical Migration.Historical Migration Absent By Default	✅	512ms

Capture_Ai Tests

✅ 5/5 tests passed

View Details

Test	Status	Duration
Routing.Capture Ai Posts To Ai Endpoint	✅	511ms
Routing.Capture Does Not Reroute Ai Named Events	✅	511ms
Identity.Capture Ai Event Has Uuid	✅	513ms
Identity.Capture Ai Keeps Supplied Uuid	✅	511ms
Timestamp Format.Non Utc Event Timestamp Is Converted To Utc	✅	512ms

Feature_Flags Tests

✅ 17/17 tests passed

View Details

Test	Status	Duration
Request Payload.Request With Person Properties Device Id	✅	12ms
Request Payload.Flags Request Uses V2 Query Param	✅	11ms
Request Payload.Flags Request Hits Flags Path Not Decide	✅	14ms
Request Payload.Flags Request Omits Authorization Header	✅	15ms
Request Payload.Token In Flags Body Matches Init	✅	9ms
Request Payload.Groups Round Trip	✅	10ms
Request Payload.Groups Default To Empty Object	✅	12ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False	✅	11ms
Request Payload.Disable Geoip Omitted Defaults To False	✅	11ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key	✅	12ms
Request Lifecycle.No Flags Request On Init Alone	✅	5ms
Request Lifecycle.No Flags Request On Normal Capture	✅	511ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests	✅	16ms
Request Lifecycle.Mock Response Value Is Returned To Caller	✅	9ms
Retry Behavior.Retries Flags On 502	✅	316ms
Retry Behavior.Retries Flags On 504	✅	314ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event	✅	513ms

Feature_Flags_Local_Evaluation Tests

✅ 4/4 tests passed

View Details

Test	Status	Duration
Versioned Boolean Matching.Matching Version Missing	✅	75ms
Versioned Boolean Matching.Matching Version 1	✅	69ms
Versioned Boolean Matching.Matching Version 2	✅	68ms
Versioned Boolean Matching.Version Only Reload 1 2 1 2 Missing	✅	36ms

* feat(metrics): attach trace exemplars to flushed metric series (#1057) (cherry picked from commit 3cc2d64) * chore: Release v7.69.0 [skip ci] (cherry picked from commit 653ff87) * Update generated references (cherry picked from commit 6f65898) * feat(ai): add per-request context to span processor (#1060) * feat: span processor request context * fix: span processor review feedback * fix: span processor review follow-ups (cherry picked from commit 6916499) * chore: Release v7.70.0 [skip ci] (cherry picked from commit a615eed) * Update generated references (cherry picked from commit a49648e) * fix(prompts): share one request between concurrent fetches of the same prompt (#1059) (cherry picked from commit 10d094e) * chore: Release v7.70.1 [skip ci] (cherry picked from commit ec71a24) * Update generated references (cherry picked from commit fc3c434) * fix(ai): mark cancelled async LLM calls as errors (#1065) * fix(ai): mark cancelled async LLM calls as errors * test: fix Python 3.10 cancellation and FastMCP compatibility (cherry picked from commit fec41f2) * chore: Release v7.70.2 [skip ci] (cherry picked from commit e381808) * Update generated references (cherry picked from commit f33d55d) * chore(deps): bump the ai-providers group with 8 updates (#1054) Bumps the ai-providers group with 8 updates: | Package | From | To | | --- | --- | --- | | [langchain](https://github.com/langchain-ai/langchain) | `1.4.2` | `1.4.3` | | [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.8.0` | `1.11.0` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.12` | `1.2.13` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.5` | `1.6.6` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.6.7` | | [langchain-anthropic](https://github.com/langchain-ai/langchain) | `1.7.4` | `1.7.5` | | [google-genai](https://github.com/googleapis/python-genai) | `2.25.0` | `2.28.0` | | [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `1.1.2` | `1.1.3` | Updates `langchain` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.4.2...langchain==1.4.3) Updates `anthropic` from 1.8.0 to 1.11.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-python@v1.8.0...v1.11.0) Updates `langgraph` from 1.2.12 to 1.2.13 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.2.12...1.2.13) Updates `langchain-core` from 1.6.5 to 1.6.6 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.6.5...langchain-core==1.6.6) Updates `langchain-openai` from 1.6.6 to 1.6.7 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.6.6...langchain-openai==1.6.7) Updates `langchain-anthropic` from 1.7.4 to 1.7.5 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-anthropic==1.7.4...langchain-anthropic==1.7.5) Updates `google-genai` from 2.25.0 to 2.28.0 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/python-genai@v2.25.0...v2.28.0) Updates `langchain-text-splitters` from 1.1.2 to 1.1.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-text-splitters==1.1.2...langchain-text-splitters==1.1.3) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: anthropic dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-providers - dependency-name: langgraph dependency-version: 1.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: langchain-core dependency-version: 1.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: langchain-openai dependency-version: 1.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: langchain-anthropic dependency-version: 1.7.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: google-genai dependency-version: 2.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-providers - dependency-name: langchain-text-splitters dependency-version: 1.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: ai-providers ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Dustin Byrne <dustin@posthog.com> (cherry picked from commit f95e1f4) * chore(deps): bump the github-actions group with 2 updates (#1055) Bumps the github-actions group with 2 updates: [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) and [PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml](https://github.com/posthog/posthog-sdk-test-harness). Updates `dtolnay/rust-toolchain` from 7e38f4b43b4db5c8dd498af069a4f6196df1d067 to e2a55d2ffb04f378e9626c28d38b36d230d1e12f - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@7e38f4b...e2a55d2) Updates `PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml` from 1.11.0 to 1.13.1 - [Release notes](https://github.com/posthog/posthog-sdk-test-harness/releases) - [Changelog](https://github.com/PostHog/posthog-sdk-test-harness/blob/main/CHANGELOG.md) - [Commits](PostHog/posthog-sdk-test-harness@4593de8...e32f08b) --- updated-dependencies: - dependency-name: dtolnay/rust-toolchain dependency-version: e2a55d2ffb04f378e9626c28d38b36d230d1e12f dependency-type: direct:production dependency-group: github-actions - dependency-name: PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Dustin Byrne <dustin@posthog.com> (cherry picked from commit 9b7e632) * chore(deps): bump mcp from 1.28.1 to 1.30.0 (#1068) Bumps [mcp](https://github.com/modelcontextprotocol/python-sdk) from 1.28.1 to 1.30.0. - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) --- updated-dependencies: - dependency-name: mcp dependency-version: 1.30.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 12e88a2) * docs: clarify reusable flush and terminal shutdown guidance (#1043) * docs: clarify reusable flush and terminal shutdown guidance * docs: preserve published 7.67.0 reference snapshot (cherry picked from commit d0b6f71) * chore: Release v7.71.0 [skip ci] (cherry picked from commit 20a574e) * Update generated references (cherry picked from commit 883eaca) * chore(deps): bump the uv group across 4 directories with 2 updates (#1069) Bumps the uv group with 1 update in the /examples/example-ai-llamaindex directory: [tinytag](https://github.com/tinytag/tinytag). Bumps the uv group with 1 update in the /examples/example-ai-openai-agents directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Bumps the uv group with 1 update in the /examples/example-ai-pydantic-ai directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Bumps the uv group with 1 update in the /examples/example-ai-semantic-kernel directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Updates `tinytag` from 2.2.1 to 2.3.0 - [Release notes](https://github.com/tinytag/tinytag/releases) - [Commits](tinytag/tinytag@2.2.1...2.3.0) Updates `mcp` from 1.28.1 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) Updates `mcp` from 1.29.1 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) Updates `mcp` from 2.1.1 to 2.2.0 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.28.1...v1.30.0) --- updated-dependencies: - dependency-name: tinytag dependency-version: 2.3.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 1.30.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 1.30.0 dependency-type: indirect dependency-group: uv - dependency-name: mcp dependency-version: 2.2.0 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit b1363dc) * chore(deps-dev): bump claude-agent-sdk from 0.1.50 to 0.2.121 (#1073) Bumps [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) from 0.1.50 to 0.2.121. - [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-python@v0.1.50...v0.2.121) --- updated-dependencies: - dependency-name: claude-agent-sdk dependency-version: 0.2.121 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit a89acf8) * feat(mcp): stop sending standalone $identify events (#1067) * feat(mcp): stop sending standalone $identify events The identify callback still sets distinct_id, $set and $groups on every event. The standalone event carried no $anon_distinct_id, so ingestion merged no person, and stateless servers sent one per tool call. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * chore(mcp): assert no $identify over the wire and refresh docs Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit facd617) * chore: Release v7.72.0 [skip ci] (cherry picked from commit 876b955) * Update generated references (cherry picked from commit b8327de) * chore(deps): bump the github-actions group with 6 updates (#1083) Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `e2a55d2ffb04f378e9626c28d38b36d230d1e12f` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` | | [PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml](https://github.com/posthog/posthog-sdk-test-harness) | `1.13.1` | `1.15.0` | Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@c18668a...1c37ad0) Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) Updates `dtolnay/rust-toolchain` from e2a55d2ffb04f378e9626c28d38b36d230d1e12f to 683b588c487a69d01f6c6ddf40f036ff682cc2c8 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@e2a55d2...683b588) Updates `PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml` from 1.13.1 to 1.15.0 - [Release notes](https://github.com/posthog/posthog-sdk-test-harness/releases) - [Changelog](https://github.com/PostHog/posthog-sdk-test-harness/blob/main/CHANGELOG.md) - [Commits](PostHog/posthog-sdk-test-harness@e32f08b...64ffa6a) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dtolnay/rust-toolchain dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8 dependency-type: direct:production dependency-group: github-actions - dependency-name: PostHog/posthog-sdk-test-harness/.github/workflows/test-sdk-action.yml dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 3822271) * chore(deps): bump the ai-providers group with 6 updates (#1082) Bumps the ai-providers group with 6 updates: | Package | From | To | | --- | --- | --- | | [langchain](https://github.com/langchain-ai/langchain) | `1.4.3` | `1.4.4` | | [anthropic](https://github.com/anthropics/anthropic-sdk-python) | `1.11.0` | `1.13.0` | | [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.13` | `1.2.14` | | [langchain-core](https://github.com/langchain-ai/langchain) | `1.6.6` | `1.6.9` | | [langchain-openai](https://github.com/langchain-ai/langchain) | `1.6.7` | `1.7.0` | | [google-genai](https://github.com/googleapis/python-genai) | `2.28.0` | `2.29.0` | Updates `langchain` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain==1.4.3...langchain==1.4.4) Updates `anthropic` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-python@v1.11.0...v1.13.0) Updates `langgraph` from 1.2.13 to 1.2.14 - [Release notes](https://github.com/langchain-ai/langgraph/releases) - [Commits](langchain-ai/langgraph@1.2.13...1.2.14) Updates `langchain-core` from 1.6.6 to 1.6.9 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-core==1.6.6...langchain-core==1.6.9) Updates `langchain-openai` from 1.6.7 to 1.7.0 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@langchain-openai==1.6.7...langchain-openai==1.7.0) Updates `google-genai` from 2.28.0 to 2.29.0 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](googleapis/python-genai@v2.28.0...v2.29.0) --- updated-dependencies: - dependency-name: langchain dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: anthropic dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-providers - dependency-name: langgraph dependency-version: 1.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: langchain-core dependency-version: 1.6.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-providers - dependency-name: langchain-openai dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-providers - dependency-name: google-genai dependency-version: 2.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-providers ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 9b70476) * feat(llma): support scorer and experiment tags (#1085) (cherry picked from commit b086f65) * chore: Release v7.73.0 [skip ci] (cherry picked from commit 81931fa) * Update generated references (cherry picked from commit 9e62e0f) * fix(flags): accept rediss:// URLs for flag_fallback_cache_url (#1080) Signed-off-by: Sebastian Turner <sebastiant3484@gmail.com> (cherry picked from commit 20dabaa) * chore: Release v7.73.1 [skip ci] (cherry picked from commit 223b592) * Update generated references (cherry picked from commit e9e0830) * chore(deps): bump aiohttp from 3.14.3 to 3.14.4 (#1086) --- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 305dee3) * chore(deps): bump the uv group across 7 directories with 1 update (#1087) --- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv - dependency-name: aiohttp dependency-version: 3.14.4 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> (cherry picked from commit 1b86549) * fix(flags): compare numeric string properties numerically (#1088) (cherry picked from commit 63b5dcc) * chore: Release v7.73.2 [skip ci] (cherry picked from commit cb7580e) * Update generated references (cherry picked from commit 1222ac7) * fix(ai): keep the openai.Stream API on sync OpenAI streams (#1062) Sync chat completions and Responses streams returned a bare generator, so `with`, `close()` and attributes such as `.response` were lost. Wrap them with _StreamWrapper, as #804 did for Anthropic and #645 did for async. Co-authored-by: Dustin Byrne <dustin@posthog.com> (cherry picked from commit f70b3cc) * fix(ai): take cumulative Anthropic stream usage from message_delta (#1074) Anthropic's message_delta usage is cumulative. With server tools (web search, web fetch, code execution) its input and cache counts exceed message_start's, but the stream accumulator only recorded message_start's input and cache counts, so streamed generations under-reported input tokens and cache writes. Keep the larger of the two for each count. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> (cherry picked from commit 57d1607) * chore: Release v7.73.3 [skip ci] (cherry picked from commit 24c6722) * Update generated references (cherry picked from commit bf87352) * feat(llma): add datasets to offline evaluations (#1090) * feat(llma): add datasets to offline evaluations * chore(llma): share evaluation request and response helpers * fix(llma): address dataset sdk review feedback (cherry picked from commit b8879a7) * chore: Release v7.74.0 [skip ci] (cherry picked from commit ac7fa99) * Update generated references (cherry picked from commit b14dd9e) * feat(django): add request context to OpenTelemetry spans (#1070) * feat(django): add request context to OpenTelemetry spans Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * fix(tracing): preserve span attributes and active context values Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * chore: use current tracing header settings in span checks Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * fix(tracing): respect disabled context owners Generated-By: PostHog Desktop Task-Id: bfd18848-e498-4352-a58a-b9ba85de4198 (cherry picked from commit 5f01fe9) * fix: enrich Flask, ASGI, and Celery spans with context (#1075) * fix(flask): add request context to active OpenTelemetry spans Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * fix(asgi): enrich active request spans Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * fix(celery): enrich active task spans with job context Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * chore: use current tracing header settings in framework checks Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * fix(celery): preserve caller span identity during eager tasks Generated-By: PostHog Desktop Task-Id: 5681be44-4986-48db-b140-1bda88f75f96 * chore(tests): use enabled clients in span tests Generated-By: PostHog Desktop Task-Id: bfd18848-e498-4352-a58a-b9ba85de4198 (cherry picked from commit 5ddb446) * chore: Release v7.75.0 [skip ci] (cherry picked from commit 908c77b) * Update generated references (cherry picked from commit a5b93ee) * fix(flags): match explicit null properties with string operators (#1092) (cherry picked from commit e9056e3) * chore: Release v7.75.1 [skip ci] (cherry picked from commit 361ca83) * Update generated references (cherry picked from commit 5e296d8) * fix(ai): capture OpenAI chat custom tool calls instead of raising (#1098) A custom tool call has `custom` instead of `function`, so formatting the response raised AttributeError from the wrapped create(), after the provider call had succeeded. Read the name and input from `custom`, matching PostHog/posthog-js#5251. (cherry picked from commit 4697e6f) * chore: Release v7.75.2 [skip ci] (cherry picked from commit e63a898) * Update generated references (cherry picked from commit e9710ec) * fix(ai): record mid-stream errors on streamed OpenAI, Anthropic and Gemini events (#1094) * fix(ai): record mid-stream errors on streamed OpenAI, Anthropic and Gemini events capture_streaming_event hard-coded $ai_http_status=200, and the stream generators only had a finally block. When the provider stream raised after the first chunk (overloaded, connection reset), the event was sent as a success with no $ai_is_error/$ai_error, unlike the non-streaming path. Catch the exception in each sync and async generator, pass it through StreamingEventData, and re-raise unchanged. The event now carries $ai_is_error, $ai_error and the error's status code (0 when it has none). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> * fix(ai): pass the stream error to StreamingEventData directly and update the API snapshot mypy 1.16 rejected splatting {"error": error} into StreamingEventData(...) (typeddict-item). The field accepts None and capture_streaming_event reads it with .get(), so pass error=error. Regenerate the public API snapshot for the new StreamingEventData.error field. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com> (cherry picked from commit dc2a2b4) * fix(ai): keep the refusal of a non-streamed OpenAI chat completion in the captured output (#1095) Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com> (cherry picked from commit 42c8b7b) * fix(ai): record an integer $ai_http_status in the LangChain callback handler (#1096) Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com> (cherry picked from commit a6ddc2e) * chore: Release v7.75.3 [skip ci] (cherry picked from commit dc01266) * Update generated references (cherry picked from commit 9185524) * fix(ai): keep latest cumulative output tokens across message_deltas (#1100) * fix(ai): keep latest cumulative output tokens across message_deltas Server tools such as web search can emit several message_delta events in one Anthropic stream, and each delta's usage is cumulative. The stream accumulator added every delta's output_tokens together, so a stream with two deltas reporting 50 then 110 cumulative tokens captured 160. Keep the latest cumulative value, matching how the input and cache counts are already handled and how the Anthropic SDK accumulates usage. * style(ai): format cumulative token async regression test --------- Co-authored-by: Manoel Aranda Neto <marandaneto@gmail.com> (cherry picked from commit 34ec4f8) * chore: Release v7.75.4 [skip ci] (cherry picked from commit 84664b4) * Update generated references (cherry picked from commit e17a8be) * fix: serialize non-finite floats as null in JSON payloads (#1081) * fix: serialize non-finite floats as null in JSON payloads Added a helper function to replace non-finite floats with None in JSON serialization. * test: cover non-finite float serialization in batch payloads * chore: refresh public API snapshot for DatetimeSerializer.encode (cherry picked from commit 18b39e8) * fix: annotate client timeouts as float (#1106) `timeout` and `feature_flags_request_timeout_seconds` were typed (or inferred) as `int`, so type checkers rejected fractional values even though they go straight to requests/httpx, which accept floats. Fixes #1089 Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com> (cherry picked from commit b3fcec6) * chore: Release v7.75.5 [skip ci] (cherry picked from commit a774223) * Update generated references (cherry picked from commit 8c2d8f6) * fix(flags): retain tracking metadata in local evaluation snapshots (#1041) (cherry picked from commit a95331f) * chore: Release v7.75.6 [skip ci] (cherry picked from commit a5909dc) * Update generated references (cherry picked from commit 4b280fc) * chore(deps): bump uv to 0.13.4 and certifi to 2026.10.19 (#1104) Bump uv to 0.13.4 and certifi to 2026.10.19 Eight eMudhra intermediate CA private keys were broken, so anyone holding them can impersonate TLS servers to clients that still trust emSign ECC Root CA - G3. uv 0.13.4 and certifi 2026.10.19 are the first releases whose bundled CA store drops that root, and the versions pinned here still trust it. See the Python.org notice. https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 Claude-Session: https://claude.ai/code/session_01T4ck1tYoQv3mzBTXH17asD Co-authored-by: Claude <noreply@anthropic.com> (cherry picked from commit 7651b10) * test: send NaN and Infinity as null on the v1 path, as #1081 does on main #1081 keeps an event whose properties hold a non-finite float and writes the value as null. The v1 before_send test expected that event to be dropped; a capture v1 body test now pins the null on the wire, and the migration guide says so. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Sebastian Turner <sebastiant3484@gmail.com> Co-authored-by: Daniel Visca <daniel.v@posthog.com> Co-authored-by: releaser-posthog-python[bot] <262414804+releaser-posthog-python[bot]@users.noreply.github.com> Co-authored-by: Carlos Marchal <carlos@posthog.com> Co-authored-by: Juraj Majerik <juro.majerik@gmail.com> Co-authored-by: Manoel Aranda Neto <5731772+marandaneto@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Dustin Byrne <dustin@posthog.com> Co-authored-by: Georgis Andonis <6430745+gesh@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Radu Raicea <radu@raicea.com> Co-authored-by: Sebastian Turner <sebastiant3484@gmail.com> Co-authored-by: mosafariuk <mosafariuk@gmail.com> Co-authored-by: alexcastgonz <82875882+pcbeingused333@users.noreply.github.com> Co-authored-by: Paul D'Ambra <paul.dambra@gmail.com> Co-authored-by: Harsh Kashyap <55448981+Harsh23Kashyap@users.noreply.github.com> Co-authored-by: Manoel Aranda Neto <marandaneto@gmail.com> Co-authored-by: Anna Garcia <11654201+turnipdabeets@users.noreply.github.com> Co-authored-by: Georges-Antoine Assi <3247106+gantoine@users.noreply.github.com>

dependabot Bot requested a review from a team as a code owner October 16, 2026 17:59

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 16, 2026

dustinbyrne approved these changes Oct 16, 2026

View reviewed changes

ioannisj approved these changes Oct 16, 2026

View reviewed changes

ioannisj merged commit b1363dc into main Oct 16, 2026
43 checks passed

ioannisj deleted the dependabot/uv/examples/example-ai-llamaindex/uv-9645a58912 branch October 16, 2026 20:45

Navigation Menu

Repository navigation

chore(deps): bump the uv group across 4 directories with 2 updates - #1069

chore(deps): bump the uv group across 4 directories with 2 updates#1069
ioannisj merged 1 commit into
mainfrom
dependabot/uv/examples/example-ai-llamaindex/uv-9645a58912

dependabot Bot commented on behalf of github Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 16, 2026

2.3.0

v1.30.0

Behaviour changes

New

What's Changed

v1.29.1

What's Changed

v1.30.0

Behaviour changes

New

What's Changed

v1.29.1

What's Changed

v1.30.0

Behaviour changes

New

What's Changed

v1.29.1

What's Changed

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

posthog-python Compliance Report

✅ All Tests Passed!

Capture_V1 Tests

Capture_Ai Tests

Feature_Flags Tests

Feature_Flags_Local_Evaluation Tests

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented Oct 16, 2026 •

edited

Loading