Bump mixpanel-browser and @types/mixpanel-browser

[dependabot]

Bumps mixpanel-browser and @types/mixpanel-browser. These dependencies needed to be updated together.
Updates mixpanel-browser from 2.64.0 to 2.73.0

Release notes

Sourced from mixpanel-browser's releases.

New hooks, extension support, type fixes

This release adds several new hooks for running code and intercepting SDK actions: before_identify, before_register, before_register_once, before_track, before_unregister. It also adds integration code for the Data Inspector browser extension and improves some of the library's type definitions.

Miscellaneous updates and bugfixes

Additions:

• Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})
• Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)
• Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.

Fixes:

• Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)
• Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

Fix $mp_page_leave over-tracking

Fixes an issue where the $mp_page_leave is automatically captured when record_heatmap_data is on and there is no session recording taking place.

$mp_page_leave events will be excluded from Mixpanel billing for the month of October.

Autocapture Updates

New autocapture events are now available:

• Dead Click ($mp_dead_click): when a click occurs but there is no DOM mutation afterwards
• Page Leave ($mp_page_leave): when a page is "left" either by navigation or leaving the tab

Dead Click event tracking is ON in the default autotrack configuration, but Page Leave tracking must be turned on explicitly (with the config option {autocapture: {page_leave: true}}.

This release also includes several other updates:

• adding additional properties to experiment exposure events for feature flags
• upgrade rrweb fork to fix a hidden input masking issue
• getting rid of package.json exports feature to be less restrictive of what can be imported
• adding type definitions for each build option

rrweb upgrade and stricter disable_persistence

• Upgraded rrweb to use a Mixpanel-maintained fork containing performance fixes from the rrweb team (https://github.com/mixpanel/rrweb)
• Added additional handling for disable_persistence so that sessionStorage and IndexedDB are not modified
• Fixed TypeScript imports for custom builds

Rage-Click detection and other updates

This release adds support for Rage-Click tracking as part of the Autocapture subsystem. It is enabled in the default autocapture config, and can also be controlled explicitly with the rage_click autocapture init option.

Other updates include:

• Session Recording now blocks <audio> tags by default
• A new Feature-Flag method flags.update_context() facilitates updating context variables and refetching variants

Fixes and minor updates

• get_api_host() is now used consistently across the SDK to ensure that per-endpoint API host configs are respected everywhere
• A fix is included for the ordering of (asynchronous) operations when calling mixpanel.reset() while a session recording is active
• Default Feature Flag context now includes device_id alongside distinct_id
• $experiment_started events now include several API-latency-tracking properties

Fine-grained API host configuration and session recording fixes

... (truncated)

Changelog

Sourced from mixpanel-browser's changelog.

2.73.0 (23 Dec 2025)

• Adds several new hooks: before_identify, before_register, before_register_once, before_track, before_unregister
• Adds instance-initialization notification to allow Data Inspector browser extension to hook into SDK actions
• Fixes and extends type definitions

2.72.0 (14 Nov 2025)

• Adds Autocapture rage-click configuration option interactive_elements_only, to ignore clicks on non-interactive page elements such as text. Configure with: mixpanel.init('<TOKEN>', {autocapture: {rage_click: {interactive_elements_only: true}}})
• Adds TypeScript types for Feature Flags subsystem (mixpanel.flags)
• Adds JS console data to Session Recordings, enabled by default but configurable via the record_console initialization option.
• Fixes an issue in session recording where closing and opening a page would upload a replay shorter than the configured minimum duration (record_min_ms)
• Fixes an issue in session recording where payloads get truncated on old Safari versions due to a bug in their CompressionStream implementation

2.71.1 (30 Oct 2025)

• fixes issue with $mp_page_leave events getting tracked when record_heatmap_data is on and there was no session recording taking place.

2.71.0 (2 Oct 2025)

• adds Dead Click ($mp_dead_click) autocapture event: when a click occurs but there is no DOM mutation afterwards
• adds Page Leave ($mp_page_leave) autocapture event: when a page is "left" either by navigation or leaving the tab
• adds additional properties to experiment exposure events for feature flags
• upgrades rrweb fork to fix a hidden input masking issue
• gets rid of package.json exports feature to be less restrictive of what can be imported
• adds type definitions for each build option

2.70.0 (4 Sep 2025)

• Feature flags requests now send params on query string with GET instead of POST for easier caching

2.68.0 (11 Aug 2025)

• Initial rage-click detection support
• Block <audio> tags by default in Session Recording
• Add flags.update_context() method for updating context variables and refetching variants

2.67.0 (17 Jul 2025)

• Use get_api_host() consistently across the SDK
• Include device_id in default Feature Flag context
• Track latency props in $experiment_started event
• Fix async behavior in mixpanel.reset() when a session recording is active
• Fix recorder integration test race conditions

2.66.0 (8 Jul 2025)

• Add api_host configuration option to support different hosts/proxies for different endpoints (thanks @​chrisknu)
• Add types.d.ts from existing public repo
• Fix race condition when calling mixpanel.reset() while a session recording is active

2.65.0 (20 May 2025)

• mixpanel.people.track_charge() (deprecated) no longer sets profile property
• Adds page height and width tracking to autocapture click tracking
• Session recording now stops when mixpanel.reset() is called
• Support for adding arbitrary query string params to tracking requests (thanks @​dylan-asos)
• Feature flagging API revisions
• Whale Browser detection

... (truncated)

Commits

• 02d5abf 2.73.0
• cb16824 rebuild 2.73.0
• 795fcfe changelog for 2.73.0
• 0340090 rebuild 2.73.0-rc4
• 6a74dac specify Dict as available type for array-return from register hooks
• f310ba0 rebuild 2.73.0-rc3
• 9444076 add types for new hooks
• 9559565 fix types file
• 6559522 Merge remote-tracking branch 'hans-fix-some-type-issues' into 2.73.0-rc
• 4878bcc rebuild 2.73.0-rc2
• Additional commits viewable in compare view

Updates @types/mixpanel-browser from 2.54.0 to 2.66.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Upgrades analytics dependencies and aligns session-recording transitive deps with Mixpanel’s maintained fork.

• Bumps mixpanel-browser to ^2.73.0 and @types/mixpanel-browser to ^2.66.0 in package.json
• yarn.lock refresh replaces rrweb/rrdom packages with Mixpanel’s @mixpanel/rrweb suite and adds @mixpanel/rrweb-plugin-console-record; removes old rrweb entries
• No application code changes

^{Written by Cursor Bugbot for commit 5d74ce0. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
docs	Error		Dec 26, 2025 9:02am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

Superseded by #1626.