build(deps): bump posthog-js from 1.404.1 to 1.405.2

[dependabot]

Bumps posthog-js from 1.404.1 to 1.405.2.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.405.2

1.405.2

Patch Changes

• #4198 fbfc84f Thanks @​pauldambra! - feat: make the pending session recording trigger buffer interval configurable (2026-07-20)
• Updated dependencies [fbfc84f]:
  • @​posthog/types@​1.397.1

posthog-js@1.405.1

1.405.1

Patch Changes

• #4193 dec8fe7 Thanks @​turnipdabeets! - Internal restructuring of remote config failure handling across SDK extensions; no behavior change. (2026-07-20)

posthog-js@1.405.0

1.405.0

Minor Changes

• #4172 9621830 Thanks @​haacked! - send minimal $feature_flag_called events when the server enables it

  When the v2 /flags response carries minimalFlagCalledEvents: true (or, for posthog-node local evaluation, the flag-definitions payload carries minimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false), $feature_flag_called events are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties, $set/$set_once, the $feature/<key> enumeration, $active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags, has_experiment unknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration. before_send runs after the filter and may re-add stripped properties. (2026-07-20)

Patch Changes

• Updated dependencies [9621830]:
  • @​posthog/core@​1.44.0

Commits

• 4e36be6 chore: update versions and lockfile [version bump]
• fbfc84f feat: make pending replay trigger buffer configurable (#4198)
• 81d5c7c chore: update versions and lockfile [version bump]
• dec8fe7 refactor(core): propagate RemoteConfigResult to extension onRemoteConfig hand...
• 34a03e2 chore: update versions and lockfile [version bump]
• 9621830 feat(flags): minimize $feature_flag_called events for non-experiment flags (#...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)