Skip to content

chore(deps): bump posthog from 7.47.0 to 7.47.1 - #2330

Merged
JSv4 merged 1 commit into
mainfrom
dependabot/pip/posthog-7.47.1
Sep 14, 2026
Merged

JSv4 merged 1 commit into
mainfrom
dependabot/pip/posthog-7.47.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps posthog from 7.47.0 to 7.47.1.

Release notes

Sourced from posthog's releases.

posthog-v7.47.1

Patch changes

  • db8ecb8 Report the Python package version in MCP event metadata and request headers so SDK Health can assess the installed package. — Thanks @​marandaneto!
Commits
  • 289e67b chore: Release v7.47.1 [skip ci]
  • db8ecb8 fix(mcp): report the Python package version (#921)
  • c7584fd chore(deps): bump the ai-providers group with 6 updates (#924)
  • 4238ccc chore(deps): bump the github-actions group with 2 updates (#925)
  • 4795b3d Update generated references
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [posthog](https://github.com/posthog/posthog-python) from 7.47.0 to 7.47.1.
- [Release notes](https://github.com/posthog/posthog-python/releases)
- [Changelog](https://github.com/PostHog/posthog-python/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-python@posthog-v7.47.0...posthog-v7.47.1)

---
updated-dependencies:
- dependency-name: posthog
  dependency-version: 7.47.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 10, 2026
@claude

claude Bot commented Sep 10, 2026

Copy link
Copy Markdown

Review

This is a minimal, low-risk Dependabot patch bump: posthog 7.47.0 → 7.47.1, touching a single pinned version line in requirements/base.txt.

Summary of the change:

  • Per the upstream release notes, 7.47.1 is a small fix that reports the Python package version in MCP event metadata/request headers (for SDK health assessment) — no breaking API changes.

Assessment against the review criteria:

  • Code quality/best practices: N/A — no application code changed, just a version pin.
  • Bugs: None expected; this is a patch-level release per semver, and the changelog shows only an internal telemetry-metadata fix scoped to PostHog's own MCP instrumentation, not user-facing behavior.
  • Performance: No impact.
  • Security: No CVE fix bundled in this release per the notes; nothing that changes OpenContracts' security posture. Bumping to the latest patch is still net-positive hygiene.
  • Test coverage: No test changes needed — this is a transitive third-party dependency bump, not exercised by dedicated OpenContracts tests. CI running the existing suite is a sufficient check.

No concerns. Safe to merge once CI passes.

@JSv4
JSv4 merged commit e2aacdc into main Sep 14, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/posthog-7.47.1 branch September 14, 2026 07:22
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 14, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant