mixpanel-browser 2.78.0 → 2.80.0

package/.eslintrc.json

@@ -28,6 +28,18 @@
         "semi": [
             "error",
             "always"
+        ],
+        "no-restricted-properties": ["error",
+            {
+                "object": "window",
+                "property": "localStorage",
+                "message": "Use getLocalStorage() from utils.js instead to handle browsers that block storage access."
+            },
+            {
+                "object": "window",
+                "property": "sessionStorage",
+                "message": "Use getSessionStorage() from utils.js instead to handle browsers that block storage access."
+            }
         ]
     },
     "overrides": [{

package/.github/workflows/integration-tests.yml

@@ -16,6 +16,7 @@ jobs:
 
     strategy:
       fail-fast: false
+      max-parallel: 4
       matrix:
         browser: [chrome-latest, edge-latest, safari-latest, firefox-latest, ios-safari-sim, android-chrome-sim]
 

package/.github/workflows/openfeature-provider-tests.yml

@@ -0,0 +1,31 @@
+name: OpenFeature Web Provider Tests
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    strategy:
+      matrix:
+        node-version: [20.x, 22.x]
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Install OpenFeature Web Provider dependencies
+        working-directory: packages/openfeature-web-provider
+        run: npm ci
+      - name: Run OpenFeature Web Provider tests
+        working-directory: packages/openfeature-web-provider
+        run: npm test

package/CHANGELOG.md

@@ -1,4 +1,17 @@
-**2.77.0** (8 Apr 2026)
+**2.80.0** (28 May 2026)
+
+- Fixes a session recording bug where `record_min_ms` could be bypassed after a page navigation or an idle period, causing short recordings to be uploaded. Elapsed time is now measured from the first rrweb event timestamp rather than wall-clock time, so the minimum-duration check stays accurate across navigations.
+- Fixes a malformed first-time-events request URL that contained a double slash (`//`) before the flag ID. The URL is now built cleanly regardless of whether the base ends in `/`.
+- Registers autocapture click/change/submit listeners in the capture phase, so events are reliably observed even when downstream handlers call `stopPropagation()`.
+
+**2.79.0** (14 May 2026)
+
+- Adds support for feature flag variant persistence: variants can now be cached in IndexedDB with a configurable TTL so flag values stay stable across page loads and remain available before the next fetch completes.
+- Enables pageview events for free during session recording when record_heatmap_data is enabled, so heatmaps get accompanying pageview context without separately enabling pageview autocapture.
+- Event-triggered session recordings now wait for remote settings to finish loading (or fail) before deciding whether to start, preventing missed recordings when a triggering event fires during init.
+- Hardens all window.localStorage and window.sessionStorage access with exhaustive try/catch guards, so SDK initialization no longer throws in environments where storage access raises (e.g., strict privacy modes, sandboxed iframes).
+
+**2.78.0** (8 Apr 2026)
 - Adds `loadFlags` method to the `mixpanel.flags` to manually refresh feature flags.
 - Adds `whenReady` method to the `mixpanel.flags`, which returns a Promise that resolves when feature flags are done fetching.
 

package/build.sh

@@ -6,7 +6,7 @@ set -e
 if [ ! -z "$DIST" ]; then
     export FULL=1
     rm -r -f build
-    npm install
+    npm ci
 fi
 
 echo 'Building main bundles'
@@ -21,7 +21,7 @@ if [ ! -z "$DIST" ]; then
 
     # typescript examples require dist files
     echo 'Building TypeScript examples'
-    pushd examples/typescript; npm install && npm run build; popd
+    pushd examples/typescript; npm ci && npm run build; popd
 fi
 
 if [ ! -z "$FULL" ]; then