build(deps): bump posthog-node from 5.50.0 to 5.51.4

[dependabot]

Bumps posthog-node from 5.50.0 to 5.51.4.

Release notes

Sourced from posthog-node's releases.

posthog-node@5.51.4

5.51.4

Patch Changes

• #4636 74ff567 Thanks @​yfwmaniish! - Narrow the pinterest entry in the bot-detection blocklist to pinterestbot, so real users on Pinterest's in-app browser (whose UA also contains the substring pinterest) are no longer misclassified as bots and silently excluded from analytics. The crawler's other UA variant remains covered by the existing generic bot.htm entry, so no bot-detection coverage is lost. (2026-08-27)

• #4660 dfc3b59 Thanks @​posthog! - Honor evaluationContexts during local evaluation — flags whose evaluation contexts don't overlap the configured list are no longer evaluated locally and resolve to undefined. (2026-08-27)

• Updated dependencies [74ff567]:

  • @​posthog/core@​1.49.1

posthog-node@5.51.3

5.51.3

Patch Changes

• #4651 e899b1c Thanks @​marandaneto! - Treat omitted local evaluation properties as inconclusive for is_not_set. (2026-08-27)
• Updated dependencies [7902e44, e899b1c]:
  • @​posthog/core@​1.48.12

posthog-node@5.51.2

5.51.2

Patch Changes

• #4639 1faeb74 Thanks @​marandaneto! - Handle empty feature flag evaluation key scopes without running local or remote evaluation. (2026-08-25)

• #4610 930de19 Thanks @​marandaneto! - Share feature flag matching, hashing, variant, and payload evaluation helpers across the Node.js and Convex SDKs without changing their runtime-specific SemVer behavior. (2026-08-25)

• Updated dependencies [930de19, d4eee8f]:

  • @​posthog/core@​1.48.11

posthog-node@5.51.1

5.51.1

Patch Changes

• #4614 3593c43 Thanks @​iamomiid! - The Node SDK now sends the raw gzip bytes as the request body instead of wrapping them in a Blob. On Node 24.16 and later, reading a Blob request body leaks a native BlobReader that is never released, so a service calling capture() and flush() once per request grew by roughly 2.3 KB of heap per event and never gave it back. This completes the work in #4423: switching to node:zlib removed the compression-time Blob reads, but the body itself was still a Blob and still got read once per request. Compression behaviour, headers and the wire format are unchanged, and the edge build keeps using CompressionStream. (2026-08-24)
• Updated dependencies [3593c43]:
  • @​posthog/core@​1.48.9

posthog-node@5.51.0

5.51.0

Minor Changes

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.51.4

Patch Changes

• #4636 74ff567 Thanks @​yfwmaniish! - Narrow the pinterest entry in the bot-detection blocklist to pinterestbot, so real users on Pinterest's in-app browser (whose UA also contains the substring pinterest) are no longer misclassified as bots and silently excluded from analytics. The crawler's other UA variant remains covered by the existing generic bot.htm entry, so no bot-detection coverage is lost. (2026-08-27)

• #4660 dfc3b59 Thanks @​posthog! - Honor evaluationContexts during local evaluation — flags whose evaluation contexts don't overlap the configured list are no longer evaluated locally and resolve to undefined. (2026-08-27)

• Updated dependencies [74ff567]:

  • @​posthog/core@​1.49.1

5.51.3

Patch Changes

• #4651 e899b1c Thanks @​marandaneto! - Treat omitted local evaluation properties as inconclusive for is_not_set. (2026-08-27)
• Updated dependencies [7902e44, e899b1c]:
  • @​posthog/core@​1.48.12

5.51.2

Patch Changes

• #4639 1faeb74 Thanks @​marandaneto! - Handle empty feature flag evaluation key scopes without running local or remote evaluation. (2026-08-25)

• #4610 930de19 Thanks @​marandaneto! - Share feature flag matching, hashing, variant, and payload evaluation helpers across the Node.js and Convex SDKs without changing their runtime-specific SemVer behavior. (2026-08-25)

• Updated dependencies [930de19, d4eee8f]:

  • @​posthog/core@​1.48.11

5.51.1

Patch Changes

• #4614 3593c43 Thanks @​iamomiid! - The Node SDK now sends the raw gzip bytes as the request body instead of wrapping them in a Blob. On Node 24.16 and later, reading a Blob request body leaks a native BlobReader that is never released, so a service calling capture() and flush() once per request grew by roughly 2.3 KB of heap per event and never gave it back. This completes the work in #4423: switching to node:zlib removed the compression-time Blob reads, but the body itself was still a Blob and still got read once per request. Compression behaviour, headers and the wire format are unchanged, and the edge build keeps using CompressionStream. (2026-08-24)
• Updated dependencies [3593c43]:
  • @​posthog/core@​1.48.9

5.51.0

Minor Changes

• #4564 233ac88 Thanks @​marandaneto! - Fall back to remote evaluation when a requested flag is missing from loaded local definitions. This changes scoped calls that previously omitted the flag without making a request. (2026-08-24)

Commits

• f136c60 chore: update versions and lockfile [version bump]
• dfc3b59 fix(node): honor evaluationContexts during local evaluation (#4660)
• db9c291 chore: update versions and lockfile [version bump]
• e899b1c fix(flags): align presence operator semantics (#4651)
• d22676a chore: update versions and lockfile [version bump]
• 1faeb74 fix(flags): handle empty evaluation key scopes (#4639)
• d4eee8f refactor(surveys): share property matching helpers (#4611)
• 930de19 refactor(feature-flags): share local evaluation helpers (#4610)
• 0540533 chore: update versions and lockfile [version bump]
• 3593c43 fix(node): send gzip bytes instead of a Blob request body (#4614)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)