build(deps): bump posthog-js from 1.402.3 to 1.404.0

[dependabot]

Bumps posthog-js from 1.402.3 to 1.404.0.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.404.0

1.404.0

Minor Changes

• #4149 607bf54 Thanks @​pauldambra! - Add dead swipe detection to dead clicks autocapture. When dead clicks autocapture is enabled, touch swipe gestures that produce no observable screen change (no scroll, mutation, selection or visibility change) are now captured as $dead_swipe events, surfacing failed navigations on touch devices. Configurable via capture_dead_swipes (default true) and swipe_threshold_px (default 30) on the capture_dead_clicks config. Swipes over surfaces whose response cannot be observed (canvas, video and other media elements under the finger) are skipped, and captures are limited per page load via max_dead_swipes_per_page_load (default 10). (2026-07-16)

Patch Changes

• #4171 df17ddc Thanks @​posthog! - Catch synchronous throws from a monkey-patched window.fetch so they no longer escape as unhandled exceptions. A synchronous throw is now routed through the same handling as an async rejection, so the request queue retries instead of the error leaking into error tracking. (2026-07-16)
• Updated dependencies [607bf54]:
  • @​posthog/types@​1.397.0

posthog-js@1.403.0

1.403.0

Minor Changes

• #4159 fad6d9a Thanks @​haacked! - add $feature_flag_has_experiment to $feature_flag_called events

  $feature_flag_called events now carry a $feature_flag_has_experiment boolean sourced from the server's has_experiment flag metadata (the /flags?v=2 response for remote evaluation, the /api/feature_flag/local_evaluation definitions for posthog-node local evaluation). The property is only sent when the server explicitly reports has_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)

Patch Changes

• Updated dependencies [fad6d9a]:
  • @​posthog/core@​1.43.0
  • @​posthog/types@​1.396.0

Commits

• 97b2a55 chore: update versions and lockfile [version bump]
• 607bf54 feat(dead-clicks): detect dead swipes as $dead_swipe events (#4149)
• df17ddc fix(web): route synchronous fetch throws through the request queue (#4171)
• be17ec1 chore: update versions and lockfile [version bump]
• ba536ba fix(next): preserve dynamic rendering bailouts (#4170)
• 06d19a2 fix: avoid Next.js Edge runtime warnings (#4168)
• faf3e7d fix(next): require Pages Router resolver context (#4169)
• 60c2492 chore: update versions and lockfile [version bump]
• ff6fd2f fix(docs): publish deprecated underscore members and strip leaked JSDoc aster...
• 9eb2b28 fix(node): standardize flush interval default (#4164)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)