mixpanel-browser 2.76.0 → 2.78.0

package/.claude/settings.local.json

@@ -6,7 +6,9 @@
       "Bash(node --input-type=module -e \"import { expect } from 'chai'; console.log\\('works'\\);\":*)",
       "Bash(BABEL_ENV=test node:*)",
       "Bash(npm test)",
-      "Bash(grep -E \"\\\\.\\(js|json\\)$\")"
+      "Bash(grep -E \"\\\\.\\(js|json\\)$\")",
+      "mcp__plugin_Notion_notion__notion-fetch",
+      "Bash(grep -rn \"sessionStorage\" /home/jakub_grzegorzewski/mixpanel-js/src/*.js)"
     ],
     "deny": [],
     "ask": []

package/.github/dependabot.yml

@@ -5,3 +5,11 @@ updates:
     directory: "/" # Tells Dependabot to scan root directory only
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 30
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 30

package/.github/workflows/integration-tests.yml

@@ -25,9 +25,9 @@ jobs:
       SAUCE_TUNNEL_NAME: ci-js-sdk-test-${{ matrix.browser }}-${{ github.run_id }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
       - name: Use Node.js 22.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
         with:
           node-version: 22.x
 

package/.github/workflows/unit-tests.yml

@@ -19,9 +19,9 @@ jobs:
         node-version: [20.x, 22.x, 24.x]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+**2.77.0** (8 Apr 2026)
+- Adds `loadFlags` method to the `mixpanel.flags` to manually refresh feature flags.
+- Adds `whenReady` method to the `mixpanel.flags`, which returns a Promise that resolves when feature flags are done fetching.
+
+**2.77.0** (24 Mar 2026)
+- Session recording now supports cross origin iframe recording by specifying allowed domains via `record_allowed_iframe_origins`.
+- Added type dependency @types/json-logic-js for the RulesLogic type introduced in 2.76.0
+
 **2.76.0** (18 Mar 2026)
 - Added a new network plugin that captures network telemetry during session recordings.
 - Added recording_event_triggers configuration option that allows starting a session recording when targeted events that meet specified property filters occur. Property filters are optional and use json-logic syntax, but this option is mainly intended to be used by remote settings (closed beta). Allows session replays to start on a trigger if a session replay is not already in progress. Does not affect any active recording sessions.