chore: bump posthog-js from 1.416.0 to 1.418.10 in /frontend

[dependabot]

Bumps posthog-js from 1.416.0 to 1.418.10.

Release notes

Sourced from posthog-js's releases.

posthog-js@1.418.10

1.418.10

Patch Changes

• #4451 e1d993c Thanks @​posthog! - Guard the replayer's hover handling against non-element and detached hover targets, which previously threw an unhandled TypeError (querySelectorAll on a node without that method) and stopped session recording playback mid-stream. (2026-08-21)

• #4557 4451274 Thanks @​posthog! - Keep replay playback running when a recording adopts constructed stylesheets across a document swap. A constructed stylesheet can only be adopted by the document that created it, so a sheet held over a swap is rejected and the error previously stopped the player. Adoption now falls back to whatever is already applied. (2026-08-21)

posthog-js@1.418.9

1.418.9

Patch Changes

• #4588 c8df61c Thanks @​clr182! - fix(replay): attribute the backdated sessionIdle marker to the session that went idle, so a rotation-born session's recording no longer starts hours before its first snapshot (2026-08-21)

posthog-js@1.418.8

1.418.8

Patch Changes

• #4583 6322f09 Thanks @​turnipdabeets! - Fix logs and metrics being silently dropped when an attribute holds a very large integer, a function, a symbol, a sparse array, or a truncated emoji. Cap log and metric attributes at 20 levels of nesting, 1,000 entries per object and 10,000 values in total, marking anything beyond as [Truncated]. Type OtlpAnyValue.intValue as string | number — code reading that field must handle both. (2026-08-21)
• Updated dependencies [6322f09]:
  • @​posthog/core@​1.48.7
  • @​posthog/types@​1.405.1

posthog-js@1.418.7

1.418.7

Patch Changes

• #4459 caed377 Thanks @​posthog! - fix(browser): stop the $posthog_cookieless sentinel from leaking into identify() and real events. A tab that missed a cross-tab consent flip could emit the sentinel as a durable distinct_id — merging distinct real users into a single person. It now adopts the identity persisted by the tab that handled consent, falling back to a fresh anonymous device id when persistence is not shared. (2026-08-21)

• #4567 5bd2c8d Thanks @​github-actions! - Render React component stacks as linked exception causes so error tracking identifies the crashing component. (2026-08-21)

posthog-js@1.418.6

1.418.6

Patch Changes

• #4578 bae46bf Thanks @​marandaneto! - Drop events when a before-send hook throws instead of sending the unmodified event. (2026-08-20)

... (truncated)

Commits

• 3508c05 chore: update versions and lockfile [version bump]
• 557140e feat(node): isEnabled() accepts a caller-supplied default value (#4484)
• 4451274 fix(replay): keep playback alive when a stylesheet adoption is rejected (#4557)
• e1d993c fix(replay): keep playback alive when a hover target is not an element (#4451)
• ab5c30c chore: update versions and lockfile [version bump]
• 556d235 fix(core): settle displaced flag reloads against a request that carried their...
• 6ccc78e chore: update versions and lockfile [version bump]
• 00d22ea fix(node): return undefined instead of null variant in getFeatureFlagResult (...
• c81aeb8 chore: update versions and lockfile [version bump]
• c8df61c fix(replay): keep backdated idle lifecycle markers out of rotation-born sessi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)