chore(deps): bump crass from 1.0.7 to 1.0.8 by dependabot[bot] · Pull Request #354 · PostHog/posthog-ruby

dependabot · 2026-11-10T19:31:38Z

Bumps crass from 1.0.7 to 1.0.8.

Release notes

v1.0.8

Security

Moderate: Fixed a tokenizer bug in which a ) following an escaped backslash (\\) inside a bad URL didn't terminate the bad URL token, causing Crass to consume more input than a spec-compliant browser would. CSS sanitizers built on Crass could be tricked into passing through declarations, rules, or at-rules that a browser would then apply. (GHSA-pq4g-8rxf-4g29)

Full Changelog: rgrove/crass@v1.0.7...v1.0.8

Changelog

Sourced from crass's changelog.

1.0.8 (2026-10-21)

Security

Moderate: Fixed a tokenizer bug in which a ) following an escaped backslash (\\) inside a bad URL didn't terminate the bad URL token, causing Crass to consume more input than a spec-compliant browser would. CSS sanitizers built on Crass could be tricked into passing through declarations, rules, or at-rules that a browser would then apply. (GHSA-pq4g-8rxf-4g29)

Commits

fe77509 Release 1.0.8
689fc45 Fix bad URL token not terminating at ) after an escaped backslash
0eff227 Add SECURITY.md
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [crass](https://github.com/rgrove/crass) from 1.0.7 to 1.0.8. - [Release notes](https://github.com/rgrove/crass/releases) - [Changelog](https://github.com/rgrove/crass/blob/main/HISTORY.md) - [Commits](rgrove/crass@v1.0.7...v1.0.8) --- updated-dependencies: - dependency-name: crass dependency-version: 1.0.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-10T19:33:15Z

posthog-ruby-sync Compliance Report

Date: 2026-11-10T19:33:13.426154+00:00
Duration: 55759ms

⚠️ Some Tests Failed

39/47 tests passed, 8 failed

Capture Tests

⚠️ 23/30 tests passed, 7 failed

View Details

Test	Status	Duration
Format Validation.Event Has Required Fields	✅	6ms
Format Validation.Event Has Uuid	✅	4ms
Format Validation.Event Has Lib Properties	✅	4ms
Format Validation.Distinct Id Is String	✅	6ms
Format Validation.Token Is Present	✅	5ms
Format Validation.Custom Properties Preserved	✅	4ms
Format Validation.Event Has Timestamp	✅	6ms
Format Validation.Non Utc Event Timestamp Is Converted To Utc	✅	4ms
Retry Behavior.Retries On 503	✅	5322ms
Retry Behavior.Does Not Retry On 400	❌	5ms
Retry Behavior.Does Not Retry On 401	❌	4ms
Retry Behavior.Respects Retry After Header	✅	8012ms
Retry Behavior.Implements Backoff	❌	257ms
Retry Behavior.Retries On 500	✅	5143ms
Retry Behavior.Retries On 502	✅	5111ms
Retry Behavior.Retries On 504	✅	5151ms
Retry Behavior.Max Retries Respected	❌	512ms
Deduplication.Generates Unique Uuids	✅	11ms
Deduplication.Preserves Uuid On Retry	✅	5136ms
Deduplication.Preserves Uuid And Timestamp On Retry	✅	10262ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry	✅	5160ms
Deduplication.No Duplicate Events In Batch	✅	12ms
Deduplication.Different Events Have Different Uuids	✅	7ms
Compression.Sends Gzip When Enabled	✅	3ms
Batch Format.Uses Proper Batch Structure	✅	4ms
Batch Format.Flush With No Events Sends Nothing	✅	2ms
Batch Format.Multiple Events Batched Together	❌	11ms
Error Handling.Does Not Retry On 403	❌	3ms
Error Handling.Does Not Retry On 413	❌	3ms
Error Handling.Retries On 408	✅	5109ms

Failures

retry_behavior.does_not_retry_on_400

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.does_not_retry_on_401

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.implements_backoff

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.max_retries_respected

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

batch_format.multiple_events_batched_together

Expected 1 requests, got 5

error_handling.does_not_retry_on_403

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

error_handling.does_not_retry_on_413

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

Feature_Flags Tests

⚠️ 16/17 tests passed, 1 failed

View Details

Test	Status	Duration
Request Payload.Request With Person Properties Device Id	✅	6ms
Request Payload.Flags Request Uses V2 Query Param	✅	6ms
Request Payload.Flags Request Hits Flags Path Not Decide	✅	6ms
Request Payload.Flags Request Omits Authorization Header	✅	4ms
Request Payload.Token In Flags Body Matches Init	✅	5ms
Request Payload.Groups Round Trip	✅	4ms
Request Payload.Groups Default To Empty Object	✅	4ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False	✅	4ms
Request Payload.Disable Geoip Omitted Defaults To False	❌	4ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key	✅	4ms
Request Lifecycle.No Flags Request On Init Alone	✅	2ms
Request Lifecycle.No Flags Request On Normal Capture	✅	3ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests	✅	6ms
Request Lifecycle.Mock Response Value Is Returned To Caller	✅	4ms
Retry Behavior.Retries Flags On 502	✅	106ms
Retry Behavior.Retries Flags On 504	✅	153ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event	✅	6ms

Failures

request_payload.disable_geoip_omitted_defaults_to_false

Field 'geoip_disable' not found in /flags request body at path 'geoip_disable'. Available keys: ['distinct_id', 'groups', 'person_properties', 'group_properties', 'flag_keys_to_evaluate', 'token']

github-actions · 2026-11-10T19:34:07Z

posthog-ruby-async Compliance Report

Date: 2026-11-10T19:34:04.107807+00:00
Duration: 98472ms

⚠️ Some Tests Failed

46/47 tests passed, 1 failed

Capture Tests

✅ 30/30 tests passed

View Details

Test	Status	Duration
Format Validation.Event Has Required Fields	✅	109ms
Format Validation.Event Has Uuid	✅	106ms
Format Validation.Event Has Lib Properties	✅	108ms
Format Validation.Distinct Id Is String	✅	105ms
Format Validation.Token Is Present	✅	107ms
Format Validation.Custom Properties Preserved	✅	106ms
Format Validation.Event Has Timestamp	✅	106ms
Format Validation.Non Utc Event Timestamp Is Converted To Utc	✅	7ms
Retry Behavior.Retries On 503	✅	5311ms
Retry Behavior.Does Not Retry On 400	✅	2109ms
Retry Behavior.Does Not Retry On 401	✅	2107ms
Retry Behavior.Respects Retry After Header	✅	8115ms
Retry Behavior.Implements Backoff	✅	15710ms
Retry Behavior.Retries On 500	✅	5208ms
Retry Behavior.Retries On 502	✅	5212ms
Retry Behavior.Retries On 504	✅	5212ms
Retry Behavior.Max Retries Respected	✅	15612ms
Deduplication.Generates Unique Uuids	✅	111ms
Deduplication.Preserves Uuid On Retry	✅	5211ms
Deduplication.Preserves Uuid And Timestamp On Retry	✅	10311ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry	✅	5214ms
Deduplication.No Duplicate Events In Batch	✅	112ms
Deduplication.Different Events Have Different Uuids	✅	107ms
Compression.Sends Gzip When Enabled	✅	106ms
Batch Format.Uses Proper Batch Structure	✅	106ms
Batch Format.Flush With No Events Sends Nothing	✅	5ms
Batch Format.Multiple Events Batched Together	✅	112ms
Error Handling.Does Not Retry On 403	✅	2107ms
Error Handling.Does Not Retry On 413	✅	2109ms
Error Handling.Retries On 408	✅	5212ms

Feature_Flags Tests

⚠️ 16/17 tests passed, 1 failed

View Details

Test	Status	Duration
Request Payload.Request With Person Properties Device Id	✅	107ms
Request Payload.Flags Request Uses V2 Query Param	✅	106ms
Request Payload.Flags Request Hits Flags Path Not Decide	✅	106ms
Request Payload.Flags Request Omits Authorization Header	✅	106ms
Request Payload.Token In Flags Body Matches Init	✅	106ms
Request Payload.Groups Round Trip	✅	106ms
Request Payload.Groups Default To Empty Object	✅	106ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False	✅	106ms
Request Payload.Disable Geoip Omitted Defaults To False	❌	107ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key	✅	108ms
Request Lifecycle.No Flags Request On Init Alone	✅	2ms
Request Lifecycle.No Flags Request On Normal Capture	✅	106ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests	✅	112ms
Request Lifecycle.Mock Response Value Is Returned To Caller	✅	105ms
Retry Behavior.Retries Flags On 502	✅	240ms
Retry Behavior.Retries Flags On 504	✅	255ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event	✅	108ms

Failures

request_payload.disable_geoip_omitted_defaults_to_false

Field 'geoip_disable' not found in /flags request body at path 'geoip_disable'. Available keys: ['distinct_id', 'groups', 'person_properties', 'group_properties', 'flag_keys_to_evaluate', 'token']

github-actions · 2026-11-10T19:39:20Z

SDK performance: posthog-ruby

Benchmarks completed. No changes flagged for review.

Flags require at least a 5% change in the median and all six pairs agreeing on direction. This is a noise filter, not proof of a performance change or a CI gate.

View all results

Test	Measurement	Before PR	With PR	Change	Assessment
Capture and deliver events (32-byte payload, burst) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Capture and deliver events (32-byte payload, steady) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Queue an event (32-byte payload) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.; head: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.
Queue an event (32-byte payload) Shard: capture	Allocations per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.; head: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.
Queue an event (4,096-byte payload) Shard: capture	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.; head: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.
Queue an event (4,096-byte payload) Shard: capture	Allocations per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.; head: Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.
Evaluate all 10 flags Shard: flags-scaling	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate all 100 flags Shard: flags-scaling	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate all 1,000 flags Shard: flags-scaling	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate one boolean flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a cohort-filtered flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a flag (early match) Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a flag (late match) Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a flag (no match) Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a property-filtered flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a regex-filtered flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a rollout flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Evaluate a multivariate flag Shard: flags-single	Allocated memory per operation	—	—	—	unavailable; base: unsupported; head: unsupported; base: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.; head: Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.
Capture and deliver events (32-byte payload, burst) Shard: capture	Allocations per operation	56.27 count/op	56.27 count/op	No observed change	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Time per operation	110.29 µs/op	110.4 µs/op	0.1% more time	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Idle process memory (RSS)	28.38 MiB	28.4 MiB	<0.1% more memory	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Observed peak process memory (RSS)	31.14 MiB	31.17 MiB	<0.1% more memory	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Managed heap after settling	5.28 MiB	5.28 MiB	<0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Process memory after settling (RSS)	30.38 MiB	30.4 MiB	<0.1% more memory	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Process CPU time per operation	22.48 µs/op	22.67 µs/op	0.8% more time	Not flagged
Capture and deliver events (32-byte payload, burst) Shard: capture	Lifetime peak process memory (RSS)	30.87 MiB	30.91 MiB	0.1% more memory	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Allocations per operation	58.65 count/op	58.65 count/op	No observed change	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Time per operation	110.22 µs/op	110.16 µs/op	<0.1% less time	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Idle process memory (RSS)	33.24 MiB	33.23 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Observed peak process memory (RSS)	41.96 MiB	41.95 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Managed heap after settling	9.15 MiB	9.15 MiB	<0.1% more memory	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Process memory after settling (RSS)	38.78 MiB	38.77 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Process CPU time per operation	30.95 µs/op	31.42 µs/op	1.5% more time	Not flagged
Capture and deliver events (4,096-byte payload, burst) Shard: capture	Lifetime peak process memory (RSS)	41.74 MiB	41.74 MiB	<0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Allocations per operation	58.68 count/op	58.68 count/op	No observed change	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Time per operation	1.02 ms/op	1.02 ms/op	<0.1% less time	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Idle process memory (RSS)	28.33 MiB	28.29 MiB	0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Observed peak process memory (RSS)	30.44 MiB	30.42 MiB	<0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Managed heap after settling	5.28 MiB	5.28 MiB	<0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Process memory after settling (RSS)	30.44 MiB	30.42 MiB	<0.1% less memory	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Process CPU time per operation	34 µs/op	34.04 µs/op	0.1% more time	Not flagged
Capture and deliver events (32-byte payload, steady) Shard: capture	Lifetime peak process memory (RSS)	30.44 MiB	30.42 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Allocations per operation	58.68 count/op	58.68 count/op	No observed change	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Time per operation	1.01 ms/op	1.01 ms/op	<0.1% less time	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Idle process memory (RSS)	33.29 MiB	33.28 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Observed peak process memory (RSS)	40.61 MiB	40.61 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Managed heap after settling	9.15 MiB	9.15 MiB	<0.1% more memory	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Process memory after settling (RSS)	40.28 MiB	40.28 MiB	<0.1% less memory	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Process CPU time per operation	39.4 µs/op	39.79 µs/op	1% more time	Not flagged
Capture and deliver events (4,096-byte payload, steady) Shard: capture	Lifetime peak process memory (RSS)	40.82 MiB	40.8 MiB	<0.1% less memory	Not flagged
Queue an event (32-byte payload) Shard: capture	Caller-thread CPU time per operation	10.49 µs/op	10.29 µs/op	2% less time	Not flagged
Queue an event (32-byte payload) Shard: capture	Time per operation	10.49 µs/op	10.28 µs/op	2% less time	Not flagged
Queue an event (4,096-byte payload) Shard: capture	Caller-thread CPU time per operation	10.21 µs/op	10.1 µs/op	1.1% less time	Not flagged
Queue an event (4,096-byte payload) Shard: capture	Time per operation	10.21 µs/op	10.09 µs/op	1.1% less time	Not flagged
Evaluate all 10 flags Shard: flags-scaling	Allocations per operation	343.02 count/op	343.02 count/op	No observed change	Not flagged
Evaluate all 10 flags Shard: flags-scaling	Time per operation	102.84 µs/op	102.5 µs/op	0.3% less time	Not flagged
Evaluate all 10 flags Shard: flags-scaling	Process CPU time per operation	102.85 µs/op	102.5 µs/op	0.3% less time	Not flagged
Evaluate all 100 flags Shard: flags-scaling	Allocations per operation	3,324 count/op	3,324 count/op	No observed change	Not flagged
Evaluate all 100 flags Shard: flags-scaling	Time per operation	1.02 ms/op	1.01 ms/op	0.4% less time	Not flagged
Evaluate all 100 flags Shard: flags-scaling	Process CPU time per operation	1.02 ms/op	1.01 ms/op	0.5% less time	Not flagged
Evaluate all 1,000 flags Shard: flags-scaling	Allocations per operation	33,113.62 count/op	33,113.62 count/op	No observed change	Not flagged
Evaluate all 1,000 flags Shard: flags-scaling	Time per operation	10.74 ms/op	10.76 ms/op	0.2% more time	Not flagged
Evaluate all 1,000 flags Shard: flags-scaling	Process CPU time per operation	10.74 ms/op	10.76 ms/op	0.2% more time	Not flagged
Evaluate 1,000 flags under concurrent load Shard: flags-memory	Idle process memory (RSS)	38.9 MiB	38.92 MiB	<0.1% more memory	Not flagged
Evaluate 1,000 flags under concurrent load Shard: flags-memory	Observed peak process memory (RSS)	40.33 MiB	40.48 MiB	0.4% more memory	Not flagged
Evaluate 1,000 flags under concurrent load Shard: flags-memory	Managed heap after settling	7.98 MiB	7.98 MiB	<0.1% more memory	Not flagged
Evaluate 1,000 flags under concurrent load Shard: flags-memory	Process memory after settling (RSS)	39.36 MiB	39.29 MiB	0.2% less memory	Not flagged
Evaluate 1,000 flags under concurrent load Shard: flags-memory	Lifetime peak process memory (RSS)	40.02 MiB	40.17 MiB	0.4% more memory	Not flagged
Refresh 1,000 flag definitions Shard: flags-memory	Idle process memory (RSS)	38.12 MiB	37.28 MiB	2.2% less memory	Not flagged
Refresh 1,000 flag definitions Shard: flags-memory	Observed peak process memory (RSS)	41.51 MiB	41.49 MiB	<0.1% less memory	Not flagged
Refresh 1,000 flag definitions Shard: flags-memory	Managed heap after settling	9.48 MiB	9.48 MiB	<0.1% less memory	Not flagged
Refresh 1,000 flag definitions Shard: flags-memory	Process memory after settling (RSS)	41.51 MiB	41.49 MiB	<0.1% less memory	Not flagged
Refresh 1,000 flag definitions Shard: flags-memory	Lifetime peak process memory (RSS)	41.51 MiB	41.49 MiB	<0.1% less memory	Not flagged
Evaluate one boolean flag Shard: flags-single	Allocations per operation	38 count/op	38 count/op	No observed change	Not flagged
Evaluate one boolean flag Shard: flags-single	Time per operation	9.3 µs/op	9.35 µs/op	0.6% more time	Not flagged
Evaluate one boolean flag Shard: flags-single	Process CPU time per operation	9.3 µs/op	9.35 µs/op	0.6% more time	Not flagged
Evaluate a cohort-filtered flag Shard: flags-single	Allocations per operation	38 count/op	38 count/op	No observed change	Not flagged
Evaluate a cohort-filtered flag Shard: flags-single	Time per operation	12.27 µs/op	12.19 µs/op	0.6% less time	Not flagged
Evaluate a cohort-filtered flag Shard: flags-single	Process CPU time per operation	12.27 µs/op	12.19 µs/op	0.6% less time	Not flagged
Evaluate a flag (early match) Shard: flags-single	Allocations per operation	55 count/op	55 count/op	No observed change	Not flagged
Evaluate a flag (early match) Shard: flags-single	Time per operation	16.31 µs/op	16.51 µs/op	1.2% more time	Not flagged
Evaluate a flag (early match) Shard: flags-single	Process CPU time per operation	16.31 µs/op	16.51 µs/op	1.2% more time	Not flagged
Evaluate a flag (late match) Shard: flags-single	Allocations per operation	76 count/op	76 count/op	No observed change	Not flagged
Evaluate a flag (late match) Shard: flags-single	Time per operation	23.75 µs/op	23.62 µs/op	0.5% less time	Not flagged
Evaluate a flag (late match) Shard: flags-single	Process CPU time per operation	23.75 µs/op	23.62 µs/op	0.5% less time	Not flagged
Evaluate a flag (no match) Shard: flags-single	Allocations per operation	67 count/op	67 count/op	No observed change	Not flagged
Evaluate a flag (no match) Shard: flags-single	Time per operation	21.61 µs/op	21.59 µs/op	<0.1% less time	Not flagged
Evaluate a flag (no match) Shard: flags-single	Process CPU time per operation	21.61 µs/op	21.59 µs/op	<0.1% less time	Not flagged
Evaluate a property-filtered flag Shard: flags-single	Allocations per operation	34 count/op	34 count/op	No observed change	Not flagged
Evaluate a property-filtered flag Shard: flags-single	Time per operation	9.55 µs/op	9.49 µs/op	0.6% less time	Not flagged
Evaluate a property-filtered flag Shard: flags-single	Process CPU time per operation	9.55 µs/op	9.49 µs/op	0.6% less time	Not flagged
Evaluate a regex-filtered flag Shard: flags-single	Allocations per operation	99 count/op	99 count/op	<0.1% more	Not flagged
Evaluate a regex-filtered flag Shard: flags-single	Time per operation	27.34 µs/op	26.81 µs/op	1.9% less time	Not flagged
Evaluate a regex-filtered flag Shard: flags-single	Process CPU time per operation	27.34 µs/op	26.81 µs/op	1.9% less time	Not flagged
Evaluate a rollout flag Shard: flags-single	Allocations per operation	31 count/op	31 count/op	No observed change	Not flagged
Evaluate a rollout flag Shard: flags-single	Time per operation	8.39 µs/op	8.47 µs/op	1% more time	Not flagged
Evaluate a rollout flag Shard: flags-single	Process CPU time per operation	8.39 µs/op	8.47 µs/op	1% more time	Not flagged
Evaluate a multivariate flag Shard: flags-single	Allocations per operation	37 count/op	37 count/op	No observed change	Not flagged
Evaluate a multivariate flag Shard: flags-single	Time per operation	10.45 µs/op	10.47 µs/op	0.2% more time	Not flagged
Evaluate a multivariate flag Shard: flags-single	Process CPU time per operation	10.45 µs/op	10.48 µs/op	0.2% more time	Not flagged

Values are medians of paired measurements. Not flagged does not mean unchanged. Unavailable means a measurement could not be provided, not zero. Estimated allocation measurements retain their instrumentation uncertainty. RSS measures the whole process, not just SDK allocations; observed peaks are sampled checkpoints. Paired ranges in the diagnostics describe variability, not confidence intervals.

Each shard uses its own runner; compare Before PR against With PR within a row, not across shards.

Compared 43d2b92ce78d31b8aa14a8cdfb2aaa46e9aa9c22 → c014b35f98b2c502313f56fdce204e733a440792.

Full report and diagnostics

102 metric rows; 102 rows shown in all results. Omitted or shortened data remain in comparison.json, including per-runner environments, resource limits, measurement methods, samples and checkpoints.

dependabot Bot requested a review from a team as a code owner November 10, 2026 19:31

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 10, 2026

ioannisj approved these changes Nov 11, 2026

View reviewed changes

ioannisj merged commit 2bb815c into main Nov 11, 2026
30 checks passed

ioannisj deleted the dependabot/bundler/crass-1.0.8 branch November 11, 2026 06:24

Navigation Menu

Repository navigation

chore(deps): bump crass from 1.0.7 to 1.0.8 - #354

chore(deps): bump crass from 1.0.7 to 1.0.8#354
ioannisj merged 1 commit into
mainfrom
dependabot/bundler/crass-1.0.8

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

github-actions Bot commented Nov 10, 2026

Failures

Failures

Uh oh!

github-actions Bot commented Nov 10, 2026

Failures

Uh oh!

github-actions Bot commented Nov 10, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 10, 2026

v1.0.8

Security

1.0.8 (2026-10-21)

Security

Uh oh!

github-actions Bot commented Nov 10, 2026

posthog-ruby-sync Compliance Report

⚠️ Some Tests Failed

Capture Tests

Failures

Feature_Flags Tests

Failures

Uh oh!

github-actions Bot commented Nov 10, 2026

posthog-ruby-async Compliance Report

⚠️ Some Tests Failed

Capture Tests

Feature_Flags Tests

Failures

Uh oh!

github-actions Bot commented Nov 10, 2026

SDK performance: posthog-ruby

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant