[dependabot]

Bumps posthog-ruby from 3.23.7 to 3.28.4.

Release notes

Sourced from posthog-ruby's releases.

posthog-ruby-v3.28.4

Patch Changes

• 1a2260c: Fix MCP instrumentation returning internal errors with mcp 1.8.0 by forwarding request keywords, including authentication context, to the MCP server.

posthog-ruby-v3.28.3

Patch Changes

• 23134c3: Serialize numeric NaN and positive or negative Infinity in event properties as JSON null instead of losing the event. Preserve nested properties, array positions, and caller-owned values in synchronous and background delivery.

posthog-ruby-v3.28.2

Patch Changes

• 01f7d09: Fix local feature flag evaluation to stringify explicitly null properties as "null" instead of an empty string for contains, prefix, suffix, and regex operators (including their negations). Flag values or selected variants can change for explicitly null person or group properties; missing properties still allow remote evaluation fallback.

posthog-ruby-v3.28.1

Patch Changes

• 5d3224e: Compare numeric strings numerically for locally evaluated feature flag gt, gte, lt, and lte conditions, including when the filter is a JSON number. This corrects flag membership for values such as "10" > 2 and "100" < 30. Invalid or non-finite property values no longer match via string ordering; invalid numeric conditions use the existing remote-evaluation fallback.

posthog-ruby-v3.28.0

Minor Changes

• 1643b9d: Local flag evaluation honors experiment holdouts. A flag whose definition carries filters.holdout now resolves a held-out identifier to holdout-<id> before its release conditions, matching the server instead of silently bucketing the identifier into a regular variant.

posthog-ruby-v3.27.1

Patch Changes

• 6416934: Allow external flag definition cache consumers to evaluate flags locally and refresh cached definitions without a secret key.

posthog-ruby-v3.27.0

Minor Changes

• bd2d976: Add an optional default_value: keyword to PostHog::FeatureFlagEvaluations#enabled?. It is returned when the flag has no value in the snapshot — it was never loaded, the /flags request failed, or no flag with that key exists — while a flag that does have a value, including false and variant strings, still wins over the default. A flag the server returned but marked as failed resolves to false, not the default. Calls that omit the keyword keep returning false for a missing flag.

posthog-ruby-v3.26.4

Patch Changes

• 5adef1c: Fix feature flag and remote config response parsing with JSON 3, restoring remote flag evaluation and local definition loading.

posthog-ruby-v3.26.3

Patch Changes

• 4970ac8: Fix PostHog::MCP.instrument raising LoadError at boot on stdio-only MCP servers that don't have the rack gem installed. A missing rack now only skips the Streamable HTTP transport extension.

posthog-ruby-v3.26.2

Patch Changes

• 1941de3: Stop copying the tool descriptors into $mcp_response on $mcp_tools_list events. The response keeps only the envelope (nextCursor, ttlMs, and so on) and the tool names stay in $mcp_listed_tool_names.

... (truncated)

Commits

• cbc8fcf chore: update package versions [version bump] [skip ci]
• 1a2260c fix(mcp): forward request keywords for mcp 1.8.0 (#318)
• cecca01 chore: update package versions [version bump] [skip ci]
• 23134c3 fix: serialize non-finite event properties as null (#315)
• 8579805 chore: update package versions [version bump] [skip ci]
• 01f7d09 fix(flags): match explicit null properties with string operators (#312)
• a9df480 chore(deps): bump the github-actions group with 6 updates (#314)
• b370f8c ci(release): make gem publish safe to re-run (#311)
• 0901100 chore: update package versions [version bump] [skip ci]
• 5d3224e fix(flags): compare numeric string properties numerically (#310)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	posthog-ruby@​3.23.7 ⏵ 3.28.4
	posthog-rails@​3.18.6 ⏵ 3.19.6			+1

View full report

[dependabot]

Looks like posthog-ruby is up-to-date now, so this is no longer needed.