deps(deps): bump the production-minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the production-minor-and-patch group with 3 updates in the / directory: @supabase/supabase-js, posthog-js and eslint-plugin-react-refresh.

Updates @supabase/supabase-js from 2.110.7 to 2.110.8

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.8

2.110.8 (2026-07-21)

🩹 Fixes

• auth: downgrade aborted/transient fetch failures from console.error to warn (#2544)
• functions: clean up cross-signal abort listener on invoke() return (#2487)
• functions: match response Content-Type case-insensitively (#2515)
• storage: url-encode object key in CDN purge methods (#2545)
• supabase: skip Node warning in Deno (#2541)

❤️ Thank You

• Franco Kaddour @​FrancoKaddour
• Katerina Skroumpelou @​mandarini
• Pedro Henrique
• Vaibhav @​7ttp

v2.110.8-canary.2

2.110.8-canary.2 (2026-07-21)

🩹 Fixes

• storage: url-encode object key in CDN purge methods (#2545)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.110.8-canary.1

2.110.8-canary.1 (2026-07-21)

🩹 Fixes

• auth: downgrade aborted/transient fetch failures from console.error to warn (#2544)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.110.8-canary.0

2.110.8-canary.0 (2026-07-21)

🩹 Fixes

• functions: clean up cross-signal abort listener on invoke() return (#2487)
• functions: match response Content-Type case-insensitively (#2515)
• supabase: skip Node warning in Deno (#2541)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.8 (2026-07-21)

🩹 Fixes

• supabase: skip Node warning in Deno (#2541)

❤️ Thank You

• Vaibhav @​7ttp

Commits

• 01dbb53 fix(supabase): skip Node warning in Deno (#2541)
• 150b00c chore(release): version 2.110.7 changelogs (#2533)
• See full diff in compare view

Updates posthog-js from 1.405.2 to 1.406.2

Release notes

Sourced from posthog-js's releases.

posthog-js@1.406.2

1.406.2

Patch Changes

• #4206 a3112d9 Thanks @​posthog! - fix(surveys): stop recurring surveys re-showing off a stale internal targeting flag

  Recurring surveys could re-display and record a duplicate response when the eligibility check ran against a cached internal targeting flag before fresh flags had loaded. The display loop now waits for feature flags to actually load before trusting the internal targeting flag, and forces a flag reload after a survey is completed so the flag recomputes promptly. (2026-07-21)

posthog-js@1.406.1

1.406.1

Patch Changes

• #4127 220fa2c Thanks @​sarmah-rup! - Don't let save_referrer overwrite a $referrer / $referring_domain that was explicitly set via posthog.register(), so registered attribution values survive pageviews in SPA and iframe contexts (2026-07-21)

posthog-js@1.406.0

1.406.0

Minor Changes

• #4194 d39b903 Thanks @​dustinbyrne! - Move shared browser utility implementations into @posthog/browser-common and consume them directly from posthog-js. (2026-07-21)

Patch Changes

• #4204 ba977d0 Thanks @​turnipdabeets! - Keep autocapture off when a remote config response omits autocapture_opt_out. The SDK now retains the last known server value for the missing-field case, the same as when the config fetch fails, instead of enabling autocapture. Values persisted by earlier SDK versions are still trusted; a browser holding a stale value corrects itself on the first config response that includes the field. (2026-07-21)
• Updated dependencies [d39b903]:
  • @​posthog/browser-common@​0.2.0

posthog-js@1.405.3

1.405.3

Patch Changes

• #4200 91505ba Thanks @​pauldambra! - fix: apply the active full snapshot interval as soon as a recording trigger matches (2026-07-21)

Commits

• 4f49b55 chore: update versions and lockfile [version bump]
• a3112d9 fix(surveys): stop recurring surveys re-showing off a stale internal targetin...
• 975bd48 chore: update versions and lockfile [version bump]
• 220fa2c fix: don't overwrite registered $referrer with document.referrer (#4127)
• 9df5cc0 docs(browser): use customizations entrypoint in playgrounds (#4212)
• 32fb42b chore: update versions and lockfile [version bump]
• ba977d0 fix: ignore missing autocapture_opt_out in remote config instead of enabling ...
• d39b903 refactor(browser): move shared utilities to browser-common (#4194)
• 9c76008 chore: update versions and lockfile [version bump]
• 91505ba fix: reschedule replay snapshots after trigger activation (#4200)
• See full diff in compare view

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.3

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

v0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

v0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

v0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option (like connect or styled)

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
"react-refresh/only-export-components": [
"warn",
{ extraHOCs: ["someLibHOC"] },
</tr></table>

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
</tr></table>

... (truncated)

Commits

• 00818e9 v0.5.3 [publish]
• 202fc4a Fix PascalCase class exported via export { Name } incorrectly treated as Re...
• c0317bf Fix support for nested function calls for extraHOCs [publish]
• 42a1805 Explicit v10 support (fixes #106) [publish]
• 199793e Support nested function calls for extraHOCs (fixes #104)
• 26b3c15 Support false positives with TypeScript function overloading (fixes #105)
• daa2efb Revamp logic to catch more cases [publish] (#97)
• See full diff in compare view

[netlify]

❌ Deploy Preview for postshow failed. Why did it fail? →

Name	Link
🔨 Latest commit	def9331
🔍 Latest deploy log	https://app.netlify.com/projects/postshow/deploys/6a60f0b4dee48f00083ac115