build(deps): bump posthog-js from 1.435.8 to 1.436.1

[dependabot]

Bumps posthog-js from 1.435.8 to 1.436.1.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.436.1

1.436.1

Patch Changes

• #5203 633f5b2 Thanks @​marandaneto! - Restore batching for events carrying pending Meta $fbc or $fbp identifiers to reduce races with preceding identify() calls. (2026-10-05)

posthog-js@1.436.0

1.436.0

Minor Changes

• #5083 d576bec Thanks @​61465! - Opt-in WebView bot heuristic for #2921.
  • posthog-js/customizations exports a new isLikelyWebViewBot(ua) helper that flags the UA pattern described in #2921 (a Chrome/... token without the usual AppleWebKit/* + Safari/* co-markers that real Chrome always sends). Wire it into before_send to tag or drop the matching events — see isLikelyWebViewBot JSDoc for a usage example. Default SDK behaviour is unchanged; the helper is tree-shaken out unless you import it.
  • @posthog/core keeps isBlockedUA and DEFAULT_BLOCKED_UA_STRS byte-for-byte compatible, and gains session-level memoisation of isBlockedUA results keyed on (ua, customBlockedUserAgents), so repeat calls within the same session are O(1). (2026-10-05)

Patch Changes

• Updated dependencies [d576bec]:
  • @​posthog/core@​1.56.0

posthog-js@1.435.9

1.435.9

Patch Changes

• #5150 abe2924 Thanks @​DeepanshuPal! - Stop a SecurityError escaping the recorder when an iframe becomes cross-origin while shadow DOM observation starts. (2026-10-05)

Commits

• c4265ad chore: update versions and lockfile [version bump]
• 633f5b2 fix(browser): batch events with pending Meta identifiers (#5203)
• af69a9c chore: update versions and lockfile [version bump]
• 16ee222 feat(react-native): warn when the deprecated session replay package is loaded...
• a0c6dc5 chore: update versions and lockfile [version bump]
• d576bec feat(core): opt-in heuristic bot detection for #2921 (#5083)
• e746356 chore: update versions and lockfile [version bump]
• 3394548 feat(mcp): resolve argument ownership on fresh low-level instances (#5165)
• 6538bab chore: update versions and lockfile [version bump]
• abe2924 fix(rrweb): contain cross-origin iframe shadow observation errors (#5150)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: pierreb-devkit/Vue/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: e43a41b4-43c6-4435-915f-e727fe826002

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}