build(deps): bump the minor-and-patch group across 1 directory with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: posthog-js, sharp, postcss and prettier.

Updates posthog-js from 1.435.6 to 1.438.7

Release notes

Sourced from posthog-js's releases.

posthog-js@1.438.7

1.438.7

Patch Changes

• #4990 a66cada Thanks @​dustinbyrne! - Share browser logging across SDKs with consistent initialization and cleanup; captureLog and logger calls before logging setup are now dropped instead of buffered. (2026-10-09)
• Updated dependencies [a66cada]:
  • @​posthog/browser-common@​0.9.4

posthog-js@1.438.6

1.438.6

Patch Changes

• #5218 8bc2df6 Thanks @​lucasheriques! - Skip WebMCP intent and model injection for schemas with constraints that the extra fields could break. (2026-10-09)

• #5217 6af3aa8 Thanks @​lucasheriques! - Export WebMCPExtensions from the slim extension-bundles entry point. (2026-10-09)

posthog-js@1.438.5

1.438.5

Patch Changes

• #5258 429b5b2 Thanks @​hpouillot! - Recognize native bundler debug IDs and build-time error tracking release IDs. (2026-10-09)
• Updated dependencies [429b5b2]:
  • @​posthog/core@​1.57.4

posthog-js@1.438.4

1.438.4

Patch Changes

• #5245 76b4402 Thanks @​abrahamguo! - Fix type checking in posthog-js 1.438.2 by publishing the feature flag types it imports from @​posthog/browser-common. (2026-10-09)
• Updated dependencies [76b4402]:
  • @​posthog/browser-common@​0.9.3

posthog-js@1.438.3

1.438.3

Patch Changes

• #5200 34cdfa6 Thanks @​hpouillot! - fix(replay): add a private opt-in to preserve application stacks for failed fetch requests (2026-10-08)
• Updated dependencies [34cdfa6]:
  • @​posthog/types@​1.415.2

... (truncated)

Commits

• c86c1a9 chore: update versions and lockfile [version bump]
• 8751ab6 feat(browser-next): integrate dynamically loaded logs (#4991)
• a66cada refactor(browser-common): extract logs extension (#4990)
• 953607d refactor(browser): make client adapters passive views (#5082)
• 6f5cc87 chore: update versions and lockfile [version bump]
• 8bc2df6 fix(browser): decide WebMCP schema injection from an allowlist of keys (#5218)
• 6af3aa8 fix(browser): export WebMCPExtensions from the slim entry (#5217)
• 789e588 chore: update versions and lockfile [version bump]
• 7199f24 fix(nextjs): support immutable Turbopack sourcemaps (#5202)
• 6086b17 test(browser): add deployment compatibility snapshots (#5231)
• Additional commits viewable in compare view

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract and rotate operations. #4606

• Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract operation. #4606

... (truncated)

Commits

• 51a990f Release v0.35.5
• 96de105 Upgrade to sharp-libvips v1.3.4
• 3a61390 CI: Configure Dependabot with all package.json locations
• 4940c50 Improve gain map support for rotate/flip/flop ops
• 20654aa Prerelease v0.35.5-rc.1
• ef4f934 CI: Upgrade to Ubuntu 26.04
• 358df95 Upgrade to libvips v8.18.7
• 49f4903 Improve gain map support for rotate-then-extract #4606
• 0e2e55e Silence a couple of compiler/static analysis warnings
• cef3b8c Improve gain map support for extract operation #4606
• Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.29

Release notes

Sourced from postcss's releases.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Commits

• a7a1f34 Release 8.5.29 version
• b55a36d Update dependencies
• 7647a81 Escape </style> in output of non-Root nodes (#2163)
• 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
• ebffa97 Add postcss-smooth-corners plugin
• 57d6401 Speed up source map cleaning
• 7e46a03 Speed up parser
• 7f5c417 Improve </style> protection for the case when beffore nodes have different parts
• 7ba9051 Fix useless ESLint warning
• 12b4161 Update dependencies
• Additional commits viewable in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions