Bump mixpanel-browser and @types/mixpanel-browser

[dependabot]

Bumps mixpanel-browser and @types/mixpanel-browser. These dependencies needed to be updated together.
Updates mixpanel-browser from 2.64.0 to 2.67.0

Release notes

Sourced from mixpanel-browser's releases.

Fixes and minor updates

• get_api_host() is now used consistently across the SDK to ensure that per-endpoint API host configs are respected everywhere
• A fix is included for the ordering of (asynchronous) operations when calling mixpanel.reset() while a session recording is active
• Default Feature Flag context now includes device_id alongside distinct_id
• $experiment_started events now include several API-latency-tracking properties

Fine-grained API host configuration and session recording fixes

A new api_hosts configuration option enables different endpoints (events, profiles, groups, session recordings) to be sent to different hosts, for selective proxying, e.g.:

mixpanel.init('<TOKEN>', {
  api_hosts: {
    // proxy only session-recording requests, and leave the rest on the default host api-js.mixpanel.com
    'record': 'https://my-proxy.com',
  },
});

This release also fixes a race condition when calling mixpanel.reset() while a session recording is active, and adds an initial TypeScript types.d.ts file.

Updates to revenue, session recording, autocapture, etc

This release packages up changes and improvements to several subsystems:

• The long-deprecated mixpanel.people.track_charge() method now only prints a console error and no longer sets a profile property or produces any other change. The old version of Mixpanel's Revenue analysis UI has been replaced by a newer suite of analysis tools which don't depend on profile properties (see https://docs.mixpanel.com/docs/features/revenue_analytics).
• Autocapture click tracking properties now include page height and width.
• Session recording now stops when mixpanel.reset() is called.
• New init optionapi_extra_query_params adds support for appending arbitrary query string params to tracking requests (useful for non-standard proxy setups)
• The API of the Feature Flagging system (under development) has been revised
• Whale Browser is now detected automatically

Changelog

Sourced from mixpanel-browser's changelog.

2.67.0 (17 Jul 2025)

• Use get_api_host() consistently across the SDK
• Include device_id in default Feature Flag context
• Track latency props in $experiment_started event
• Fix async behavior in mixpanel.reset() when a session recording is active
• Fix recorder integration test race conditions

2.66.0 (8 Jul 2025)

• Add api_host configuration option to support different hosts/proxies for different endpoints (thanks @​chrisknu)
• Add types.d.ts from existing public repo
• Fix race condition when calling mixpanel.reset() while a session recording is active

2.65.0 (20 May 2025)

• mixpanel.people.track_charge() (deprecated) no longer sets profile property
• Adds page height and width tracking to autocapture click tracking
• Session recording now stops when mixpanel.reset() is called
• Support for adding arbitrary query string params to tracking requests (thanks @​dylan-asos)
• Feature flagging API revisions
• Whale Browser detection

2.64.0 (15 Apr 2025)

• Add record_heatmap_data init option for Session Recording to ensure click events are captured for Heat Maps
• Initial support for feature flagging

2.63.0 (1 Apr 2025)

• Update rrweb to latest alpha version
• Refactor SDK build process to rely mainly on Rollup

2.62.0 (26 Mar 2025)

• Replace UUID generator with UUIDv4 (using native API when available)
• Consistently use native JSON serialization when available
• Fix for session recording idle timeout race condition

2.61.2 (14 Mar 2025)

• Revert 10ms throttle on enqueueing events to improve tracking reliability on page unload

2.61.1 (11 Mar 2025)

• Session recording stops if initial DOM snapshot fails
• Errors triggered by rrweb's record function are now caught
• Fix for issue causing opt-out check error messages in debug mode

2.61.0 (6 Mar 2025)

• Session recordings now continue across page loads within the same tab, using IndexedDB for persistence

2.60.0 (31 Jan 2025)

• Expanded Autocapture configs
• Prevent duplicate values in persistence when using people.union (thanks @​chrisdeely)

2.59.0 (21 Jan 2025)

• Initial Autocapture support

... (truncated)

Commits

• ec87a0a 2.67.0
• 952dea9 changelog for 2.67.0
• 0ea33fd Merge branch '2.67.0-rc'
• e51b679 Update conventions, ignore is no longer used
• 742fabb Create dependabot yml from template, set ignore rule from example directory (...
• 6cdecd6 Push to 2.67
• 2033e9e Dist files
• b1c6a3f send in variant fetch start/complete as date strings
• ba23ab0 Merge pull request #281 from mixpanel/jg-final-flush
• 591fa50 test fix
• Additional commits viewable in compare view

Updates @types/mixpanel-browser from 2.54.0 to 2.66.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Project	Deployment	Preview	Comments	Updated (UTC)
docs	❌ Failed			Aug 13, 2025 10:18am

[dependabot]

Superseded by #1532.