[Snyk] Upgrade mixpanel from 0.4.1 to 0.18.0

[kazup01]

Snyk has created this PR to upgrade mixpanel from 0.4.1 to 0.18.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 19 versions ahead of your current version.

• The recommended version was released on a year ago.

Release notes

Package name: mixpanel

• 0.18.0 - 2023-09-12
  

  The library can now be initialized with a logger option to provide custom logging instead of the default console logging:

  const bunyan = require(`bunyan`);
  const mixpanel = Mixpanel.init(`<YOUR_TOKEN>`, {debug: true, logger: bunyan});

  Any logger which implements the interface at https://github.com/mixpanel/mixpanel-node/blob/7f334f1d3f07e1c7783887b8090211614a26d5bc/lib/mixpanel-node.d.ts#L9-L15 will work:

  export interface CustomLogger {
    trace(message?: any, ...optionalParams: any[]): void;
    debug(message?: any, ...optionalParams: any[]): void;
    info(message?: any, ...optionalParams: any[]): void;
    warn(message?: any, ...optionalParams: any[]): void;
    error(message?: any, ...optionalParams: any[]): void;
  }

  Support has also been dropped for the long-deprecated Mixpanel.Client() initializer.

• 0.17.0 - 2022-08-11
  

  As of this release, time properties set as Date objects will be sent to the Mixpanel API with millisecond precision (instead of being rounded to the second).

• 0.16.0 - 2022-06-02
  

  The configuration option geolocate can be used to take advantage of Mixpanel's automatic geolocation properties (converting the source IP address into properties for country/region/city). This is generally useful when the NodeJS SDK is used in a client application, such as an Electron app or IoT device; whereas in a server application (e.g. an Express application server), the IP address will be that of the server rather than the user. To turn on geolocation, initialize the library with geolocate: true:

  const mixpanel = Mixpanel.init('<YOUR_TOKEN>', {
    geolocate: true,
  });

  The SDK also now sends the current library version as a property with every event, like Mixpanel's other SDKs.

• 0.15.0 - 2022-05-20
  

  The library now defaults to using keepAlive (https://nodejs.org/api/http.html#new-agentoptions) so that each request doesn't have to establish a new connection. This should result in better performance and network reliability. If you need to turn this option off, initialize the library with keepAlive: false:

  const mixpanel = Mixpanel.init('<YOUR_TOKEN>', {
    keepAlive: false,
  });

• 0.14.0 - 2021-10-29
  

  Profile update operations set and set_once now support passing latitude/longitude for geolocation (see https://help.mixpanel.com/hc/en-us/articles/115004499343#latitude-and-longitude-based-geolocation). These should be passed in the 'modifiers' object param, e.g.:

  mixpanel.people.set('billybob', {
    plan: 'premium',
    games_played: 1,
  }, {
    $latitude: 40.7127753,
    $longitude: -74.0059728,
  });

  Event operations like track() already supported latitude/longitude as regular event properties.

• 0.13.0 - 2020-09-04
  

  The supported method for authenticating import() calls (for events more than 5 days old) is now via the project's API Secret, passed via the secret config option:

  const mixpanel = Mixpanel.init(`<TRACKING TOKEN>`, {secret: `<API SECRET>`});

  This will be passed as a HTTP Basic auth header as described in https://developer.mixpanel.com/reference/importing-old-events. It will only be sent over HTTPS (the default protocol); the library will throw an error rather than send the secret over HTTP in plaintext.

  The older API "Key" authentication for import will still work, but is now deprecated and may be removed in a future version.

• 0.12.0 - 2020-09-01
  

  0.12.0

• 0.11.0 - 2019-11-26
  

  This release adds support for Mixpanel Groups, through the mixpanel.groups object, analogous to mixpanel.people. For projects which have groups support enabled, you can send group profile updates via calls such as:

  mixpanel.groups.set('company', 'Acme Inc.', {
  'Industry': 'widgets',
  '$name': 'Acme Inc.',
  });

  mixpanel.groups.remove('company', 'Acme Inc.', {
  'products': 'anvil',
  'customer segments': 'coyotes'
  });

  mixpanel.groups.delete_group('company', 'Acme Inc.');

  // etc

  
  


• 
  0.10.3 - 2019-10-09
  

  0.10.3

  
  


• 
  0.10.2 - 2019-03-26
  

  0.10.2

  
  


• 
  0.10.1 - 2018-12-04
  


• 
  0.10.0 - 2018-11-13
  


• 
  0.9.2 - 2018-05-22
  


• 
  0.9.1 - 2018-04-12
  


• 
  0.9.0 - 2018-02-09
  


• 
  0.8.0 - 2017-11-28
  


• 
  0.7.0 - 2017-04-07
  


• 
  0.6.0 - 2017-01-04
  


• 
  0.5.0 - 2016-09-15
  


• 
  0.4.1 - 2016-09-09
  

from mixpanel GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs