Skip to content

build(deps): bump the observability group across 1 directory with 2 updates - #693

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/observability-1891ab31e7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/observability-1891ab31e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the observability group with 2 updates in the / directory: posthog and sentry-sdk.

Updates posthog from 7.44.2 to 7.51.0

Release notes

Sourced from posthog's releases.

posthog-v7.51.0

Minor changes

  • 97ea5fd Capture MCP resource discovery and reads from instrumented servers. URL credential redaction (userinfo, credential-named query and fragment parameters) now applies to every captured string, including existing $mcp_tool_call parameters, responses and error messages, so URLs in existing tool-call data will show %5Bredacted%5D values after upgrading. — Thanks @​lucasheriques!

posthog-v7.50.0

Minor changes

  • 7db5105 Prompts.get_all(label="production") fetches every prompt that carries a label in one request and stores them in the prompt cache, so later get(name, label=...) calls are cache hits. Apps with many prompts no longer need one request per prompt per cache cycle. Against a PostHog server that does not support labels on the prompt list endpoint yet, the call fails with a clear error instead of caching wrong versions. — Thanks @​jurajmajerik!

posthog-v7.49.0

Minor changes

  • e85647b OpenAI and LangChain generations now also emit the served service tier as the explicit $ai_service_tier event property, next to the copy inside $ai_model_parameters. Cost processing prices tiered calls only from the explicit property, whose writers assert response-derived values. — Thanks @​bernatixer!

posthog-v7.48.0

Minor changes

  • b8f8253 Capture MCP model identifiers from client metadata or an SDK-owned self-report field. Model capture remains opt-in and preserves application-owned fields across repeated tool listings.

    MCP context and conversation-ID injection now preserve additionalProperties: false in tool schemas, including when model capture is disabled. Servers that validate these schemas now reject undeclared arguments that earlier SDK versions allowed. Declared analytics fields remain valid. — Thanks @​lucasheriques!

posthog-v7.47.3

Patch changes

  • 09a8c4e Only terminal Responses API statuses become $ai_stop_reason: a queued or in-progress background run no longer records a lifecycle state as its stop reason, and an incomplete run is named by what cut it short (incomplete_details.reason, e.g. max_output_tokens). Streaming runs that end incomplete or failed now carry a stop reason too, and the LangChain callback reads stop reasons from response_metadata as well, covering Responses API and Anthropic runs that previously recorded none. — Thanks @​bernatixer!

posthog-v7.47.2

Patch changes

  • 80c541d Honor HTTP-date Retry-After headers in asynchronous requests while preserving the existing retry backoff and delay cap. — Thanks @​Bortlesboat!

posthog-v7.47.1

Patch changes

  • db8ecb8 Report the Python package version in MCP event metadata and request headers so SDK Health can assess the installed package. — Thanks @​marandaneto!

posthog-v7.47.0

Minor changes

  • d4a8f0a OpenAI generations now record the service tier the provider served (service_tier inside $ai_model_parameters), on non-streaming, streaming, and LangChain capture paths. LLM analytics uses it to price flex and priority calls at their real rates instead of standard; a requested tier can be refused, so the value always comes from the response. — Thanks @​bernatixer!

posthog-v7.46.0

Minor changes

  • 4ab555d Label MCP events and requests as posthog-python-mcp, and AI events as posthog-ai — Thanks @​marandaneto!

posthog-v7.45.4

Patch changes

... (truncated)

Commits
  • 14d60f3 chore: Release v7.51.0 [skip ci]
  • 97ea5fd feat(mcp): capture resource discovery and reads (#928)
  • a1002c5 Update generated references
  • 46744fb chore: Release v7.50.0 [skip ci]
  • 7db5105 feat(ai): add Prompts.get_all to fetch all prompts at a label (#938)
  • fc2ff4a ci: remove redundant version bump write permission (#937)
  • 32a5c00 Update generated references
  • 7f3ebb4 chore: Release v7.49.0 [skip ci]
  • e85647b feat(ai): emit the served service tier as the explicit $ai_service_tier prope...
  • f04d44c Update generated references
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.68.1 to 2.69.1

Release notes

Sourced from sentry-sdk's releases.

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

... (truncated)

Commits
  • bd30ffb release: 2.69.1
  • f4d4af7 fix(aiohttp): Preserve SigV4-signed propagation headers
  • 5e2fcf1 feat(django): Add http.route attribute (#7428)
  • 611584b test(mcp): Parametrize tests on the streaming trace lifecycle (#7424)
  • bb53bac test(mcp): Remove vacuous tests (#7420)
  • 42aa532 test(cohere): Parametrize tests on the streaming trace lifecycle (#7419)
  • f1c098a Merge branch 'release/2.69.0'
  • f186a62 Update changelog
  • 131e307 test(openai-agents): Parametrize tests on stream_gen_ai_spans and the strea...
  • 54404e1 release: 2.69.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the observability group with 2 updates in the / directory: [posthog](https://github.com/posthog/posthog-python) and [sentry-sdk](https://github.com/getsentry/sentry-python).


Updates `posthog` from 7.44.2 to 7.51.0
- [Release notes](https://github.com/posthog/posthog-python/releases)
- [Changelog](https://github.com/PostHog/posthog-python/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-python@posthog-v7.44.2...posthog-v7.51.0)

Updates `sentry-sdk` from 2.68.1 to 2.69.1
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.68.1...2.69.1)

---
updated-dependencies:
- dependency-name: posthog
  dependency-version: 7.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: observability
- dependency-name: sentry-sdk
  dependency-version: 2.69.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: observability
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file type: misc labels Sep 14, 2026
@github-actions github-actions Bot added the topic: build Related to build, installation & CI label Sep 14, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​sentry-sdk@​2.68.1 ⏵ 2.69.193 +1100100100100
Updatedpypi/​posthog@​7.44.2 ⏵ 7.51.096 -1100100100100

View full report

@codecov

codecov Bot commented Sep 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.87%. Comparing base (c203470) to head (79390ee).

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #693      +/-   ##
==========================================
+ Coverage   91.30%   93.87%   +2.56%     
==========================================
  Files           3       59      +56     
  Lines         138     3214    +3076     
==========================================
+ Hits          126     3017    +2891     
- Misses         12      197     +185     
Flag Coverage Δ
backend 93.98% <ø> (?)
client 91.30% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file topic: build Related to build, installation & CI type: misc

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants