fix: upgrade posthog-js from 1.404.1 to 1.409.5

Snyk has created this PR to upgrade posthog-js from 1.404.1 to 1.409.5. See this package in npm: posthog-js See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr
💡(frontend) warn in vite config on MediaPipe asset/track-processor drift
2026-08-22 08:07:26 +00:00 · 2026-08-21 17:24:17 +00:00 · 2026-08-21 18:09:31 +02:00 · 2026-08-20 16:09:03 +02:00 · 2026-08-20 16:09:03 +02:00 · 2026-08-20 12:50:26 +02:00
9 changed files with 60 additions and 25 deletions
@@ -11,6 +11,7 @@ and this project adheres to
 ### Changed

 - ✨(backend) accept form-urlencoded on the user token endpoint
+- ✨(summary) configurable s3 region
 - ⬆️(frontend) upgrade i18next and react-i18next patch versions
 - ⬆️(frontend) upgrade posthog-js from 1.395.0 to 1.404.1
 - ⬆️(frontend) upgrade livekit-client and @livekit/components-react
@@ -19,6 +20,7 @@ and this project adheres to

 - 📝(docs) fix minor typos in comments and docstrings
 - ⬆️(backend) bump sqlparse from 0.5.5 to 0.6.0
+- ⬆️(mail) bump @html-to/text-cli from 0.6.0 to 0.6.1

 ## [1.27.0] - 2026-08-14

@@ -180,7 +180,7 @@ services:
    working_dir: /app

  node:
-    image: node:18
+    image: node:22
    user: "${DOCKER_USER:-1000}"
    environment:
      HOME: /tmp
@@ -29,7 +29,7 @@
        "i18next-parser": "9.4.0",
        "i18next-resources-to-backend": "1.2.1",
        "livekit-client": "2.21.0",
-        "posthog-js": "1.404.1",
+        "posthog-js": "^1.409.5",
        "react": "18.3.1",
        "react-aria": "3.50.0",
        "react-aria-components": "1.19.0",
@@ -1719,6 +1719,16 @@
      "dev": true,
      "license": "MIT"
    },
+    "node_modules/@posthog/browser-common": {
+      "version": "0.3.1",
+      "resolved": "https://registry.npmjs.org/@posthog/browser-common/-/browser-common-0.3.1.tgz",
+      "integrity": "sha512-1nhMVY1wnHADTg8tR9yvm+lPAz5ROxznfQlBtLzB2FFo4lp/LU8lk9KyFPsARDkBxCfYachsJfvRjocL1G/AJQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@posthog/core": "^1.46.0",
+        "@posthog/types": "^1.399.0"
+      }
+    },
    "node_modules/@posthog/core": {
      "version": "1.48.3",
      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.48.3.tgz",
@@ -9123,13 +9133,14 @@
      "license": "MIT"
    },
    "node_modules/posthog-js": {
-      "version": "1.404.1",
-      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.404.1.tgz",
-      "integrity": "sha512-ck/HOMKuZ6yefUk5OX+h2s9mUWBsnu0mGDUAWjIwAmQQrloZPShzOhOWuEuZQuMnCKORBFRVGsBAuzsl66cBJA==",
+      "version": "1.409.5",
+      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.409.5.tgz",
+      "integrity": "sha512-s1iJz+vq0YAluUD4OwLjUFIJt/9pqiiB6MITvHWIS16a7pqTJqbSLXsd5/8kJcIgfrOSZHe+mdYAXLYcJCS4LQ==",
      "license": "(Apache-2.0 AND MIT)",
      "dependencies": {
-        "@posthog/core": "^1.43.1",
-        "@posthog/types": "^1.397.0",
+        "@posthog/browser-common": "^0.3.1",
+        "@posthog/core": "^1.46.1",
+        "@posthog/types": "^1.399.0",
        "core-js": "^3.49.0",
        "dompurify": "^3.3.2",
        "fflate": "^0.4.8",
@@ -36,7 +36,7 @@
    "i18next-parser": "9.4.0",
    "i18next-resources-to-backend": "1.2.1",
    "livekit-client": "2.21.0",
-    "posthog-js": "1.404.1",
+    "posthog-js": "1.409.5",
    "react": "18.3.1",
    "react-aria": "3.50.0",
    "react-aria-components": "1.19.0",
@@ -5,16 +5,26 @@ import { visualizer } from 'rollup-plugin-visualizer'
 import svgr from 'vite-plugin-svgr'
 import { viteStaticCopy } from 'vite-plugin-static-copy'

-const mediapipeVersion: string = JSON.parse(
-  readFileSync(
-    new URL(
-      './node_modules/@mediapipe/tasks-vision/package.json',
-      import.meta.url
-    ),
-    'utf-8'
-  )
+const readPackageJson = (path: string) =>
+  JSON.parse(readFileSync(new URL(path, import.meta.url), 'utf-8'))
+
+const mediapipeVersion: string = readPackageJson(
+  './node_modules/@mediapipe/tasks-vision/package.json'
 ).version

+const livekitMediapipeVersion: string = readPackageJson(
+  './node_modules/@livekit/track-processors/package.json'
+).dependencies['@mediapipe/tasks-vision']
+
+if (mediapipeVersion !== livekitMediapipeVersion) {
+  throw new Error(
+    `@mediapipe/tasks-vision@${mediapipeVersion} is installed, but ` +
+      `@livekit/track-processors declares "${livekitMediapipeVersion}". ` +
+      `The two must stay in sync: pin "@mediapipe/tasks-vision" to ` +
+      `"${livekitMediapipeVersion}" in package.json.`
+  )
+}
+
 // https://vitejs.dev/config/
 export default defineConfig(({ mode }) => {
  const env = loadEnv(mode, process.cwd())
@@ -9,7 +9,7 @@
      "version": "1.27.0",
      "license": "MIT",
      "dependencies": {
-        "@html-to/text-cli": "0.6.0",
+        "@html-to/text-cli": "0.6.1",
        "mjml": "5.4.0"
      }
    },
@@ -52,14 +52,14 @@
      "license": "MIT"
    },
    "node_modules/@html-to/text-cli": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/@html-to/text-cli/-/text-cli-0.6.0.tgz",
-      "integrity": "sha512-JwlrCBccUM/QkUpc37P+qG+hpkXRbWOVcHd9vM+5D+O82Ak2p8anGRxisr33//aJzlkYNKNg2I8LDh3Bx2tBPg==",
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/@html-to/text-cli/-/text-cli-0.6.1.tgz",
+      "integrity": "sha512-fnbLS8bra4BkGinXWzUKfalqLPYmz8E2ABT+TgHUZ4inhAUYF2rBEEctOKqZ6FgaJF1iZ//KBBLKVz6nm3RbhA==",
      "license": "MIT",
      "dependencies": {
        "@selderee/plugin-htmlparser2": "~0.12.0",
        "aspargvs": "~0.7.0",
-        "deepmerge-ts": "^7.1.5",
+        "deepmerge-ts": "^8.0.1",
        "htmlparser2": "^10.1.0",
        "selderee": "~0.12.0"
      },
@@ -656,9 +656,19 @@
      "license": "CC0-1.0"
    },
    "node_modules/deepmerge-ts": {
-      "version": "7.1.5",
-      "resolved": "https://registry.npmjs.org/deepmerge-ts/-/deepmerge-ts-7.1.5.tgz",
-      "integrity": "sha512-HOJkrhaYsweh+W+e74Yn7YStZOilkoPb6fycpwNLKzSPtruFs48nYis0zy5yJz1+ktUhHxoRDJ27RQAWLIJVJw==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/deepmerge-ts/-/deepmerge-ts-8.0.1.tgz",
+      "integrity": "sha512-szCXE7YLCvLKR9bFPJcvsezOShdalctSvrgN/LM/QGUEPZQajwjmsMObZ6/DuANT5lxzM/wtO8Feubwdkz8myA==",
+      "funding": [
+        {
+          "type": "ko-fi",
+          "url": "https://ko-fi.com/rebeccastevens"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/deepmerge-ts"
+        }
+      ],
      "license": "BSD-3-Clause",
      "engines": {
        "node": ">=16.0.0"
@@ -4,7 +4,7 @@
  "description": "An util to generate html and text django's templates from mjml templates",
  "type": "module",
  "dependencies": {
-    "@html-to/text-cli": "0.6.0",
+    "@html-to/text-cli": "0.6.1",
    "mjml": "5.4.0"
  },
  "private": true,
@@ -83,6 +83,7 @@ class Settings(BaseSettings):
    aws_s3_access_key_id: str
    aws_s3_secret_access_key: SecretStr
    aws_s3_secure_access: bool = True
+    aws_s3_region_name: str | None = None
    aws_transcript_path: str = "transcripts"
    aws_summary_path: str = "summaries"

@@ -282,6 +282,7 @@ class FileService:
            access_key=settings.aws_s3_access_key_id,
            secret_key=settings.aws_s3_secret_access_key.get_secret_value(),
            secure=settings.aws_s3_secure_access,
+            region=settings.aws_s3_region_name,
        )

        self._bucket_name = settings.aws_storage_bucket_name
Author	SHA1	Message	Date
snyk-bot	af9ec136e0	fix: upgrade posthog-js from 1.404.1 to 1.409.5 Snyk has created this PR to upgrade posthog-js from 1.404.1 to 1.409.5. See this package in npm: posthog-js See this project in Snyk: https://app.eu.snyk.io/org/lasuite-dinum-default/project/96ea03d8-8d09-493d-86bf-363f274e129e?utm_source=github&utm_medium=referral&page=upgrade-pr	2026-08-21 17:24:17 +00:00
lebaudantoine	feb573551f	💡(frontend) warn in vite config on MediaPipe asset/track-processor drift Add a build-time warning in the Vite config that fires when the MediaPipe assets copied by `vite-plugin-static-copy` fall out of sync with the version used by `@livekit/track-processors`. This catches at build time the kind of drift that would otherwise only surface at runtime as broken virtual backgrounds.	2026-08-21 18:09:31 +02:00
lebaudantoine	1d0a0cc637	⬆️(mail) upgrade Node image for mails-install to align with the frontend Node 18 is now legacy, and running `make mails-install` was failing with a "bad engine" error against the current image. Bump the Node image used for `mails-install` to a more recent version, aligned with the one used by the frontend, so the make target runs cleanly again. Note: the Alpine variant cannot be used here, as `bash` is required to build the mail templates.	2026-08-20 16:09:03 +02:00
snyk-bot	eae93f771f	🔒️(mail) fix vulnerabilities in src/mail/package.json Upgrade dependencies to fix the following reported vulnerability: * https://snyk.io/vuln/SNYK-JS-DEEPMERGETS-18912249	2026-08-20 16:09:03 +02:00
Florent Chehab	45175a2a54	♻️(summary) uniformized S3 settings case Quick commit to uniformize the S3 related settings case.	2026-08-20 12:50:26 +02:00
Florent Chehab	8b22059b18	✨(summary) configurable s3 region When using other S3 providers than minio, We neeed to configure the region	2026-08-20 12:41:48 +02:00