Bump mixpanel-browser from 2.61.1 to 2.72.0

[dependabot]

Bumps mixpanel-browser from 2.61.1 to 2.72.0.

Release notes

Sourced from mixpanel-browser's releases.

Miscellaneous updates and bugfixes

Additions:

• Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})
• Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)
• Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.

Fixes:

• Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)
• Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

Fix $mp_page_leave over-tracking

Fixes an issue where the $mp_page_leave is automatically captured when record_heatmap_data is on and there is no session recording taking place.

$mp_page_leave events will be excluded from Mixpanel billing for the month of October.

Autocapture Updates

New autocapture events are now available:

• Dead Click ($mp_dead_click): when a click occurs but there is no DOM mutation afterwards
• Page Leave ($mp_page_leave): when a page is "left" either by navigation or leaving the tab

Dead Click event tracking is ON in the default autotrack configuration, but Page Leave tracking must be turned on explicitly (with the config option {autocapture: {page_leave: true}}.

This release also includes several other updates:

• adding additional properties to experiment exposure events for feature flags
• upgrade rrweb fork to fix a hidden input masking issue
• getting rid of package.json exports feature to be less restrictive of what can be imported
• adding type definitions for each build option

rrweb upgrade and stricter disable_persistence

• Upgraded rrweb to use a Mixpanel-maintained fork containing performance fixes from the rrweb team (https://github.com/mixpanel/rrweb)
• Added additional handling for disable_persistence so that sessionStorage and IndexedDB are not modified
• Fixed TypeScript imports for custom builds

Rage-Click detection and other updates

This release adds support for Rage-Click tracking as part of the Autocapture subsystem. It is enabled in the default autocapture config, and can also be controlled explicitly with the rage_click autocapture init option.

Other updates include:

• Session Recording now blocks <audio> tags by default
• A new Feature-Flag method flags.update_context() facilitates updating context variables and refetching variants

Fixes and minor updates

• get_api_host() is now used consistently across the SDK to ensure that per-endpoint API host configs are respected everywhere
• A fix is included for the ordering of (asynchronous) operations when calling mixpanel.reset() while a session recording is active
• Default Feature Flag context now includes device_id alongside distinct_id
• $experiment_started events now include several API-latency-tracking properties

Fine-grained API host configuration and session recording fixes

A new api_hosts configuration option enables different endpoints (events, profiles, groups, session recordings) to be sent to different hosts, for selective proxying, e.g.:

mixpanel.init('<TOKEN>', {
</tr></table> 

... (truncated)

Changelog

Sourced from mixpanel-browser's changelog.

2.72.0 (14 Nov 2025)

• Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})
• Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)
• Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.
• Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)
• Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

2.71.1 (30 Oct 2025)

• fixes issue with $mp_page_leave events getting tracked when record_heatmap_data is on and there was no session recording taking place.

2.71.0 (2 Oct 2025)

• adds Dead Click ($mp_dead_click) autocapture event: when a click occurs but there is no DOM mutation afterwards
• adds Page Leave ($mp_page_leave) autocapture event: when a page is "left" either by navigation or leaving the tab
• adds additional properties to experiment exposure events for feature flags
• upgrades rrweb fork to fix a hidden input masking issue
• gets rid of package.json exports feature to be less restrictive of what can be imported
• adds type definitions for each build option

2.70.0 (4 Sep 2025)

• Feature flags requests now send params on query string with GET instead of POST for easier caching

2.68.0 (11 Aug 2025)

• Initial rage-click detection support
• Block <audio> tags by default in Session Recording
• Add flags.update_context() method for updating context variables and refetching variants

2.67.0 (17 Jul 2025)

• Use get_api_host() consistently across the SDK
• Include device_id in default Feature Flag context
• Track latency props in $experiment_started event
• Fix async behavior in mixpanel.reset() when a session recording is active
• Fix recorder integration test race conditions

2.66.0 (8 Jul 2025)

• Add api_host configuration option to support different hosts/proxies for different endpoints (thanks @​chrisknu)
• Add types.d.ts from existing public repo
• Fix race condition when calling mixpanel.reset() while a session recording is active

2.65.0 (20 May 2025)

• mixpanel.people.track_charge() (deprecated) no longer sets profile property
• Adds page height and width tracking to autocapture click tracking
• Session recording now stops when mixpanel.reset() is called
• Support for adding arbitrary query string params to tracking requests (thanks @​dylan-asos)
• Feature flagging API revisions
• Whale Browser detection

2.64.0 (15 Apr 2025)

• Add record_heatmap_data init option for Session Recording to ensure click events are captured for Heat Maps
• Initial support for feature flagging

... (truncated)

Commits

• c23600f update 2.72.0 changelog
• 9724430 Merge pull request #347 from mixpanel/2.72.0-rc
• 9b5687a fix tests
• 9ab6815 Added integration test for console recording (#352)
• 4505fb1 remove indexeddb expiration integration test (#353)
• 8c94d92 fix pageleave test
• eb286ac release build
• 28afa5a Merge branch 'flags-ts' into 2.72.0-rc
• f20b120 options arg type for update_context
• f09b1ed this should now fail CI
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jakub.grz, a new releaser for mixpanel-browser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}