chore: bump posthog-js from 1.416.0 to 1.422.5 in /frontend

[dependabot]

Bumps posthog-js from 1.416.0 to 1.422.5.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.422.5

1.422.5

Patch Changes

• Updated dependencies [a895e7e]:
  • @​posthog/browser-common@​0.7.0

posthog-js@1.422.4

1.422.4

Patch Changes

• #4626 3c650a1 Thanks @​nandinitiw! - Re-translate popover surveys when the display language changes while the survey is on screen, either from a browser languagechange event or from identify() updating the language person property. In-progress answers are preserved. $survey_questions[].question and $survey_language on survey sent / survey dismissed now report the text and language the user saw when they answered, not the language active when the event fired. Feedback-button (widget) surveys are unchanged. (2026-08-28)
• Updated dependencies [3c650a1]:
  • @​posthog/core@​1.49.2

posthog-js@1.422.3

1.422.3

Patch Changes

• #4669 d0279e5 Thanks @​posthog! - Autocapture no longer throws a RangeError into the host page when it sorts element attributes. It now sorts attribute keys with a plain lexical comparator instead of localeCompare, which can throw on browsers with faulty ICU data. (2026-08-28)
• Updated dependencies [d0279e5]:
  • @​posthog/browser-common@​0.6.2

posthog-js@1.422.2

1.422.2

Patch Changes

• #4665 d5ef459 Thanks @​fasyy612! - Session replay can now bound DOM mutation bytes with an opt-in budget. Set __mutationBytesBucketSize (e.g. 1MB) to enable: mutations beyond the sustained budget (__mutationBytesRefillRate, default 25KB/s) are dropped and the recording resyncs with a full snapshot, keeping recordings from apps with very high DOM churn playable. Off by default. (2026-08-28)
• Updated dependencies [d5ef459]:
  • @​posthog/types@​1.407.1

posthog-js@1.422.1

1.422.1

Patch Changes

• #4636 74ff567 Thanks @​yfwmaniish! - Narrow the pinterest entry in the bot-detection blocklist to pinterestbot, so real users on Pinterest's in-app browser (whose UA also contains the substring pinterest) are no longer misclassified as bots and silently excluded from analytics. The crawler's other UA variant remains covered by the existing generic bot.htm entry, so no bot-detection coverage is lost. (2026-08-27)
• Updated dependencies [74ff567]:
  • @​posthog/core@​1.49.1
  • @​posthog/browser-common@​0.6.1

posthog-js@1.422.0

... (truncated)

Commits

• 2239803 chore: update versions and lockfile [version bump]
• a895e7e feat(browser-next): add private experimental browser core (#4378)
• 862ac0b chore: update versions and lockfile [version bump]
• 3c650a1 fix(surveys): re-translate displayed surveys when user language changes (#4626)
• 22ed264 chore: update versions and lockfile [version bump]
• d0279e5 fix(autocapture): sort attribute keys without localeCompare to avoid RangeErr...
• c2855bd chore: update versions and lockfile [version bump]
• d5ef459 fix(replay): bound mutation bytes with a budget and resync via full snapshot ...
• f136c60 chore: update versions and lockfile [version bump]
• dfc3b59 fix(node): honor evaluationContexts during local evaluation (#4660)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)