[dependabot]

Bumps posthog-ruby from 3.23.7 to 3.27.0.

Release notes

Sourced from posthog-ruby's releases.

posthog-ruby-v3.27.0

Minor Changes

• bd2d976: Add an optional default_value: keyword to PostHog::FeatureFlagEvaluations#enabled?. It is returned when the flag has no value in the snapshot — it was never loaded, the /flags request failed, or no flag with that key exists — while a flag that does have a value, including false and variant strings, still wins over the default. A flag the server returned but marked as failed resolves to false, not the default. Calls that omit the keyword keep returning false for a missing flag.

posthog-ruby-v3.26.4

Patch Changes

• 5adef1c: Fix feature flag and remote config response parsing with JSON 3, restoring remote flag evaluation and local definition loading.

posthog-ruby-v3.26.3

Patch Changes

• 4970ac8: Fix PostHog::MCP.instrument raising LoadError at boot on stdio-only MCP servers that don't have the rack gem installed. A missing rack now only skips the Streamable HTTP transport extension.

posthog-ruby-v3.26.2

Patch Changes

• 1941de3: Stop copying the tool descriptors into $mcp_response on $mcp_tools_list events. The response keeps only the envelope (nextCursor, ttlMs, and so on) and the tool names stay in $mcp_listed_tool_names.

posthog-ruby-v3.26.1

Patch Changes

• 161de85: Fix instance tracking for client subclasses so PostHog::MCP::Client can initialize outside test mode and shut down without raising. Clients that skip registration no longer remove another client's duplicate-instance warning on shutdown.

posthog-ruby-v3.26.0

Minor Changes

• 34f209d: Enable MCP model capture and conversation ids by default, matching the JavaScript and Python MCP SDKs. Pass capture_model: false or enable_conversation_id: false to opt out.

posthog-ruby-v3.25.0

Minor Changes

• 07ea7f0: Read the release id from the POSTHOG_RELEASE_ID environment variable and send it as $release_id on every event, including $exception, $identify, $groupidentify, $create_alias and minimal $feature_flag_called events. On $exception events, error tracking uses it to link the exception to its release by a direct id lookup. Create the release and get its id with posthog-cli release resolve. The client reads the variable once, when it is created. An explicit $release_id in the event properties or the request context wins over the environment variable, and before_send can still change or remove it.

posthog-ruby-v3.24.0

Minor Changes

• 5397eae: Add PostHog::MCP, experimental and unsupported MCP analytics for servers built on the official mcp gem. This is not an officially supported PostHog SDK: no support is provided for it, and its API, its options, and the $mcp_* event schema it captures may change in a minor release. A warning is logged when you require 'posthog/mcp'. Docs: https://posthog.com/docs/mcp-analytics

  PostHog::MCP.instrument(server, client) captures $mcp_initialize, $mcp_tools_list, $mcp_tool_call, prompt/resource events, $mcp_missing_capability, $identify and sibling $exception events (agent intent via an injected context argument, conversation ids, stateless Mcp-Session-Id tokens, sanitization and truncation). Also adds PostHog::MCP::Client for custom dispatchers, PostHog::MCP::RackMiddleware, and a private per-event _lib/_lib_version override in Client#capture so MCP events report $lib: posthog-ruby-mcp without relabeling the host client.

posthog-ruby-v3.23.8

Patch Changes

• 8f2bce6: Honor the definitions response's property_matching_version during local flag evaluation, including groups, cohorts, dependencies, and external definition caches. Version 2 uses explicit equality with the service's empty-filter truthiness rule and JSON null/composite representations. Missing/1 now intentionally matches the service's legacy aggregate boolean truthiness instead of Ruby's previous unversioned explicit behavior (for example, false matches "banana" in legacy mode). Definition refreshes retain matching rules with their snapshot and version-only changes take effect on the next evaluation. Cache providers must preserve the version alongside definitions; older entries default to legacy.

Commits

• 820d4bf chore: update package versions [version bump] [skip ci]
• bd2d976 feat(flags): accept a caller default in FeatureFlagEvaluations#enabled? (#285)
• 56abbac chore: propagate Ruby releases to Rails with Changesets (#299)
• a910737 chore: update package versions [version bump] [skip ci]
• 5adef1c fix(flags): support JSON 3 response parsing (#297)
• 11b9e89 chore: update package versions [version bump] [skip ci]
• 2952fbf fix(rails): update pinned Ruby SDK to 3.26.2 (#294)
• b72240a docs: require Rails releases for Ruby SDK changes (#295)
• ee9e2a6 chore(deps-dev): bump the bundler-dependencies group with 2 updates (#293)
• 23d0198 chore: update package versions [version bump] [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-ruby@​3.23.7 ⏵ 3.27.0
	posthog-rails@​3.18.6 ⏵ 3.18.9

View full report

[dependabot]

Superseded by #21.