mixpanel-browser 2.75.0 → 2.77.0

package/.claude/settings.local.json

@@ -0,0 +1,14 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(mkdir:*)",
+      "Bash(cat:*)",
+      "Bash(node --input-type=module -e \"import { expect } from 'chai'; console.log\\('works'\\);\":*)",
+      "Bash(BABEL_ENV=test node:*)",
+      "Bash(npm test)",
+      "Bash(grep -E \"\\\\.\\(js|json\\)$\")"
+    ],
+    "deny": [],
+    "ask": []
+  }
+}

package/.github/dependabot.yml

@@ -5,3 +5,11 @@ updates:
     directory: "/" # Tells Dependabot to scan root directory only
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 30
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 30

package/.github/workflows/integration-tests.yml

@@ -2,9 +2,9 @@ name: Integration Tests
 
 on:
   push:
-    branches: [master]
+    branches: [master, '**/*-rc']
   pull_request:
-    branches: [master]
+    branches: [master, '**/*-rc']
 
 jobs:
   build:
@@ -25,9 +25,9 @@ jobs:
       SAUCE_TUNNEL_NAME: ci-js-sdk-test-${{ matrix.browser }}-${{ github.run_id }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
       - name: Use Node.js 22.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
         with:
           node-version: 22.x
 

package/.github/workflows/unit-tests.yml

@@ -2,9 +2,9 @@ name: Unit Tests
 
 on:
   push:
-    branches: [master]
+    branches: [master, '**/*-rc']
   pull_request:
-    branches: [master]
+    branches: [master, '**/*-rc']
 
 jobs:
   build:
@@ -19,9 +19,9 @@ jobs:
         node-version: [20.x, 22.x, 24.x]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+**2.77.0** (24 Mar 2026)
+- Session recording now supports cross origin iframe recording by specifying allowed domains via `record_allowed_iframe_origins`.
+- Added type dependency @types/json-logic-js for the RulesLogic type introduced in 2.76.0
+
+**2.76.0** (18 Mar 2026)
+- Added a new network plugin that captures network telemetry during session recordings.
+- Added recording_event_triggers configuration option that allows starting a session recording when targeted events that meet specified property filters occur. Property filters are optional and use json-logic syntax, but this option is mainly intended to be used by remote settings (closed beta). Allows session replays to start on a trigger if a session replay is not already in progress. Does not affect any active recording sessions.
+- Added mixpanel.enable() public method, complementing the existing disable() method. Re-enables tracking for some or all events after disable() has been called.
+- Changed async bundles (e.g., mixpanel-recorder, mixpanel-targeting) loaded via CDN or loader-module-with-async-modules entry points to use hash-based file names for consistent versioning with the main SDK (e.g. mixpanel-recorder.min.js => mixpanel-recorder-bIS4LMGd.min.js). For customers who already proxy these files individually from the CDN, we recommend proxying everything under cdn.mxpnl.com/libs/* for reliability.
+- Fixed event property matching in targeting to respect case sensitivity, consistent with how Mixpanel handles property names.
+- Added dependency declaration for @mixpanel/rrweb-utils, a peer dependency of @mixpanel/rrweb-plugin-console-record. This was causing errors for users with strict peer dependencies enabled.
+- Fixed an error thrown when disabling recording from remote settings and AbortController is not supported in the browser.
+- Stabilized Safari simulator tests and ported remote settings tests to new test infrastructure.
+
 **2.75.0** (24 Feb 2026)
 - Adds support for Feature Flags targeting based on events tracked during the current session (Runtime Targeting)
 - Fixes memory leaks in Session Recording on sites which create/destroy iframes

package/build.sh

@@ -14,16 +14,18 @@ npx rollup -c rollup.config.mjs
 
 ln -sf mixpanel.globals.js build/mixpanel.js
 
-if [ ! -z "$FULL" ]; then
-    echo 'Bundling module-loader test runners'
-    npx webpack tests/module-cjs.js tests/module-cjs.bundle.js
-    npx browserify tests/module-es2015.js -t [ babelify --compact false ] --outfile tests/module-es2015.bundle.js
-
-    pushd examples/typescript; npm install && npm run build; popd
-fi
-
 if [ ! -z "$DIST" ]; then
     echo 'Copying to dist/'
     rm -r dist
     rsync -av --exclude='test' build/ dist/
+
+    # typescript examples require dist files
+    echo 'Building TypeScript examples'
+    pushd examples/typescript; npm install && npm run build; popd
+fi
+
+if [ ! -z "$FULL" ]; then
+    echo 'Bundling module-loader test runners'
+    npx webpack tests/module-cjs.js tests/module-cjs.bundle.js
+    npx browserify tests/module-es2015.js -t [ babelify --compact false ] --outfile tests/module-es2015.bundle.js
 fi