[dependabot]

Bumps the python-dependencies group in /fp-cloud-cli with 1 update: posthog.

Updates posthog from 7.53.0 to 7.58.0

Release notes

Sourced from posthog's releases.

posthog-v7.58.0

Minor changes

• 7abd976 Add distributed tracing (alpha): start_span() and get_active_span() record spans and export them to PostHog as OTLP, with no OpenTelemetry dependency, when the new traces client option is set. — Thanks @​turnipdabeets!

posthog-v7.57.0

Minor changes

• f69e670 After a failed prompt refetch, the SDK now serves the stale cached prompt for a cooldown period (60 seconds by default) instead of retrying the network on every prompts.get() call. When the failure is a 429, the cooldown follows the Retry-After the server sends, capped at one hour. This keeps a rate-limited client from holding itself against the limit. Matches the behavior the JavaScript SDK already has. — Thanks @​jurajmajerik!

posthog-v7.56.0

Minor changes

• 8ee7ad1 Enable MCP model capture and conversation correlation by default. Advertised tool schemas gain an llm_model argument (never enforced at dispatch) and eligible tool results gain a conversation handle; MCPAnalyticsOptions(capture_model=False, enable_conversation_id=False) restores the previous shape. Fresh low-level instances now read the self-reported model instead of staying silent.

  Standalone FastMCP on MCP SDK 1.x skips llm_model injection when application middleware can change tool listing or dispatch. Model metadata capture remains enabled; this prevents cold replicas from rejecting injected arguments and preserves replacement tools' own arguments. — Thanks @​lucasheriques!

posthog-v7.55.0

Minor changes

• d0ecc9f prompts.get_all() now works without a label. It fetches the latest version of every prompt in one request and warms the cache for plain prompts.get(name) calls. Previously the label was required, and passing label=None sent the literal string "None" as the label filter, returning an empty result. — Thanks @​jurajmajerik!

posthog-v7.54.2

Patch changes

• 79fcb12 MCP virtual tools now use conversation IDs when enable_conversation_id is enabled. — Thanks @​gesh!

posthog-v7.54.1

Patch changes

• ed02588 MCP analytics now adds its virtual tools (get_more_tools, send_feedback) to the first tools/list page only, rather than to every page and to the last page respectively.

  If one of your own tools already uses a virtual tool's name, PostHog warns and names the option that renames its own — missing_capability_tool_name, or collect_feedback's tool_name. Warnings also reach the posthog.mcp logger, so you see them without setting the logger option. — Thanks @​gesh!

posthog-v7.54.0

Minor changes

• f07d67c Add LangChain v1 agent middleware for AI observability. — Thanks @​gouveags for your first contribution 🎉!

Commits

• 4ddb453 chore: Release v7.58.0 [skip ci]
• 7abd976 feat(traces): wire tracing into the client (#957)
• 186d204 feat(traces): before_span_send hook (#956)
• 5563ab9 feat(traces): per-span limits and exception stacktraces (#955)
• 6786b5f feat(traces): span export queue with retries (#954)
• ff7decc feat(traces): span pipeline (#953)
• d7d43c8 feat(traces): span batch transport (#952)
• d369f6e feat(traces): span handles (#951)
• 584230f feat(traces): OTLP span encoding and client-side validity (#950)
• 0affb06 feat(traces): W3C trace context ids and traceparent parsing (#949)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 87c97163-95d0-4697-b123-e0ef0ec01953

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​posthog@​7.53.0 ⏵ 7.58.0	-1

View full report

[github-actions]

Thanks @dependabot[bot] for keeping our dependencies current! 🙌

[github-actions]

Automated approval for Dependabot dependency update.