deps(deps): bump the production-minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the production-minor-and-patch group with 3 updates in the / directory: @supabase/supabase-js, posthog-js and eslint-plugin-react-refresh.

Updates @supabase/supabase-js from 2.110.7 to 2.110.9

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.9

2.110.9 (2026-07-27)

🩹 Fixes

• auth: downgrade stale refresh token console noise (#2559)
• realtime: preserve presence refs (#2566)
• repo: override sharp to >=0.35.0 to clear libvips advisory (#2548)
• repo: populate symbols in sdk-compliance so capabilities are verifiable (#2547)
• repo: bump postcss, babel, next to clear audit advisories (#2561)

❤️ Thank You

• Katerina Skroumpelou @​mandarini
• Vaibhav @​7ttp

v2.110.9-canary.3

2.110.9-canary.3 (2026-07-27)

🩹 Fixes

• realtime: preserve presence refs (#2566)

❤️ Thank You

• Vaibhav @​7ttp

v2.110.9-canary.2

2.110.9-canary.2 (2026-07-27)

🩹 Fixes

• auth: downgrade stale refresh token console noise (#2559)
• repo: bump postcss, babel, next to clear audit advisories (#2561)

❤️ Thank You

• Katerina Skroumpelou @​mandarini
• Vaibhav @​7ttp

v2.110.9-canary.1

2.110.9-canary.1 (2026-07-23)

This was a version bump only, there were no code changes.

v2.110.9-canary.0

2.110.9-canary.0 (2026-07-22)

🩹 Fixes

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

🩹 Fixes

• supabase: skip Node warning in Deno (#2541)

❤️ Thank You

• Vaibhav @​7ttp

Commits

• fc2e61e chore(repo): bump postcss override and fix playwright 1.62 tsconfig failure (...
• 22050de chore(release): version 2.110.8 changelogs (#2546)
• 01dbb53 fix(supabase): skip Node warning in Deno (#2541)
• 150b00c chore(release): version 2.110.7 changelogs (#2533)
• See full diff in compare view

Updates posthog-js from 1.405.2 to 1.407.3

Release notes

Sourced from posthog-js's releases.

posthog-js@1.407.3

1.407.3

Patch Changes

• #4214 f7399a0 Thanks @​felipeatom! - Fix canRenderSurvey / canRenderSurveyAsync reporting a survey as renderable before its event/action activation trigger has fired. Surveys gated on a "User sends events" filter are now only eligible once the trigger event is received. (2026-07-27)

• #4231 eabe2ef Thanks @​marandaneto! - Send analytics request timestamps in capture bodies while retaining query timestamps for session recordings. (2026-07-27)

• #4102 fa4844b Thanks @​marandaneto! - Send SDK library identity in feature flag person properties instead of URL query parameters. (2026-07-27)

• #4220 11330b3 Thanks @​SegFaultZero! - fix(replay): prevent server timings from dropped ingestion requests causing an endless capture loop (2026-07-27)

• Updated dependencies [7210789]:

  • @​posthog/browser-common@​0.2.2

posthog-js@1.407.2

1.407.2

Patch Changes

• #4224 ba7042b Thanks @​turnipdabeets! - Fix session replay recordings being unplayable after the session rotated in a tab with no user interaction. When a session expired and rotated (for example in a long-lived background tab), a recorder that had not yet seen user interaction kept attributing snapshots — including full snapshots — to the previous session, so the new session never received a playable full snapshot. The recorder now restarts on rotation in this state, re-syncs its session id from the session manager if they ever diverge, and flushes its buffer on the normal cadence before the first user interaction instead of holding data until the next rotation or page unload. (2026-07-23)

posthog-js@1.407.1

1.407.1

Patch Changes

• #4218 33f0bd7 Thanks @​marandaneto! - Send ISO feature flag timestamps in request bodies, use numeric sent_at query timestamps for capture POSTs, and preserve _ cache busting for dynamic GET requests. (2026-07-23)

posthog-js@1.407.0

1.407.0

Minor Changes

• #4222 0f2407b Thanks @​turnipdabeets! - feat: add a default-value option to isFeatureEnabled

  isFeatureEnabled(key, { defaultValue: false }) now returns the given default when the flag has no value — flags not loaded yet, or no flag with that key — and the return type narrows to boolean. The option name is the same in posthog-js, posthog-js-lite, and posthog-react-native. Without defaultValue, behavior is unchanged: boolean | undefined. (2026-07-22)

Patch Changes

• #4203 90e7483 Thanks @​posthog! - fix(conversations): let users start a new conversation while a ticket is still open

  The support widget now surfaces the ticket list navigation (and its "New conversation" button) whenever the user has any ticket, instead of only when they have multiple tickets

... (truncated)

Commits

• 0eb778b chore: update versions and lockfile [version bump]
• 3b2e68d fix: prevent Jest worker resource leaks (#4247)
• 7e0355a ci: isolate minimum TypeScript consumer tests (#4262)
• b9232e9 chore: remove Node.js deprecation warnings (#4260)
• a485eb5 chore: address priority dependency debt (#4258)
• fa4844b fix(browser): send sdk identity in flags person properties (#4102)
• 2b948da ci: upgrade GitHub Actions to Node 24 (#4245)
• ead5955 ci: refresh TypeScript compatibility matrix (#4261)
• 3791710 chore(tests): fail on unexpected console output (#4263)
• 70d8b1c ci: reduce duplicate browser work (#4257)
• Additional commits viewable in compare view

Updates eslint-plugin-react-refresh from 0.4.26 to 0.5.3

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

v0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

v0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

v0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option (like connect or styled)

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
// other rules
"react-refresh/only-export-components": [
"warn",
{ extraHOCs: ["someLibHOC"] },
</tr></table>

... (truncated)

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.5.3

• Fix check for non component class exported via export { } #110 (fixes #109)

0.5.2

• Support nested function calls for extraHOCs (actually fixes #104)

0.5.1

• Mark ESLint v10 as supported
• Support false positives with TypeScript function overloading (fixes #105)
• Support nested function calls for extraHOCs (fixes #104)

0.5.0

Breaking changes

• The package now ships as ESM and requires ESLint 9 + node 20. Because legacy config doesn't support ESM, this requires to use flat config
• A new reactRefresh export is available and prefered over the default export. It's an object with two properties:
  • plugin: The plugin object with the rules
  • configs: An object containing configuration presets, each exposed as a function. These functions accept your custom options, merge them with sensible defaults for that config, and return the final config object.
• customHOCs option was renamed to extraHOCs
• Validation of HOCs calls is now more strict, you may need to add some HOCs to the extraHOCs option

Config example:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig(
/* Main config */
reactRefresh.configs.vite({ extraHOCs: ["someLibHOC"] }),
);

Config example without config:

import { defineConfig } from "eslint/config";
import { reactRefresh } from "eslint-plugin-react-refresh";
export default defineConfig({
files: ["/*.ts", "/*.tsx"],
plugins: {
// other plugins
"react-refresh": reactRefresh.plugin,
},
rules: {
</tr></table>

... (truncated)

Commits

• 00818e9 v0.5.3 [publish]
• 202fc4a Fix PascalCase class exported via export { Name } incorrectly treated as Re...
• c0317bf Fix support for nested function calls for extraHOCs [publish]
• 42a1805 Explicit v10 support (fixes #106) [publish]
• 199793e Support nested function calls for extraHOCs (fixes #104)
• 26b3c15 Support false positives with TypeScript function overloading (fixes #105)
• daa2efb Revamp logic to catch more cases [publish] (#97)
• See full diff in compare view

[netlify]

✅ Deploy Preview for postshow ready!

Name	Link
🔨 Latest commit	4b5ae4f
🔍 Latest deploy log	https://app.netlify.com/projects/postshow/deploys/6a67835ebd554a000922659c
😎 Deploy Preview	https://deploy-preview-9--postshow.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.