mixpanel-browser 2.78.0 → 2.79.0

package/.claude/settings.local.json

@@ -1,16 +1,11 @@
 {
   "permissions": {
     "allow": [
-      "Bash(mkdir:*)",
-      "Bash(cat:*)",
-      "Bash(node --input-type=module -e \"import { expect } from 'chai'; console.log\\('works'\\);\":*)",
-      "Bash(BABEL_ENV=test node:*)",
-      "Bash(npm test)",
-      "Bash(grep -E \"\\\\.\\(js|json\\)$\")",
-      "mcp__plugin_Notion_notion__notion-fetch",
-      "Bash(grep -rn \"sessionStorage\" /home/jakub_grzegorzewski/mixpanel-js/src/*.js)"
-    ],
-    "deny": [],
-    "ask": []
+      "WebFetch(domain:docs.saucelabs.com)",
+      "WebSearch",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "Bash(gh api *)",
+      "Bash(python3 -c \"import sys,json; [print\\(f['path']\\) for f in json.load\\(sys.stdin\\)]\")"
+    ]
   }
 }

package/.eslintrc.json

@@ -28,6 +28,18 @@
         "semi": [
             "error",
             "always"
+        ],
+        "no-restricted-properties": ["error",
+            {
+                "object": "window",
+                "property": "localStorage",
+                "message": "Use getLocalStorage() from utils.js instead to handle browsers that block storage access."
+            },
+            {
+                "object": "window",
+                "property": "sessionStorage",
+                "message": "Use getSessionStorage() from utils.js instead to handle browsers that block storage access."
+            }
         ]
     },
     "overrides": [{

package/.github/workflows/openfeature-provider-tests.yml

@@ -0,0 +1,31 @@
+name: OpenFeature Web Provider Tests
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    strategy:
+      matrix:
+        node-version: [20.x, 22.x]
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Install OpenFeature Web Provider dependencies
+        working-directory: packages/openfeature-web-provider
+        run: npm ci
+      - name: Run OpenFeature Web Provider tests
+        working-directory: packages/openfeature-web-provider
+        run: npm test

package/CHANGELOG.md

@@ -1,4 +1,11 @@
-**2.77.0** (8 Apr 2026)
+**2.79.0** (14 May 2026)
+
+- Adds support for feature flag variant persistence: variants can now be cached in IndexedDB with a configurable TTL so flag values stay stable across page loads and remain available before the next fetch completes.
+- Enables pageview events for free during session recording when record_heatmap_data is enabled, so heatmaps get accompanying pageview context without separately enabling pageview autocapture.
+- Event-triggered session recordings now wait for remote settings to finish loading (or fail) before deciding whether to start, preventing missed recordings when a triggering event fires during init.
+- Hardens all window.localStorage and window.sessionStorage access with exhaustive try/catch guards, so SDK initialization no longer throws in environments where storage access raises (e.g., strict privacy modes, sandboxed iframes).
+
+**2.78.0** (8 Apr 2026)
 - Adds `loadFlags` method to the `mixpanel.flags` to manually refresh feature flags.
 - Adds `whenReady` method to the `mixpanel.flags`, which returns a Promise that resolves when feature flags are done fetching.
 

package/build.sh

@@ -6,7 +6,7 @@ set -e
 if [ ! -z "$DIST" ]; then
     export FULL=1
     rm -r -f build
-    npm install
+    npm ci
 fi
 
 echo 'Building main bundles'
@@ -21,7 +21,7 @@ if [ ! -z "$DIST" ]; then
 
     # typescript examples require dist files
     echo 'Building TypeScript examples'
-    pushd examples/typescript; npm install && npm run build; popd
+    pushd examples/typescript; npm ci && npm run build; popd
 fi
 
 if [ ! -z "$FULL" ]; then