chore(python): bump to 3.14.7

[rnegron]

Problem

• Every PostHog Python service and CI job runs CPython 3.13.13, whose bugfix support ends in October 2026.
• The 3.13 upgrade was forced by an upstream asset rotation, so this one starts early.

Changes

• Everything moves from CPython 3.13.13 to 3.14.7: images, CI, dev tools, docs. Mechanical.
• Nine packages move to versions with 3.14 wheels. The old versions installed pure-Python fallbacks silently, which dropped their C extensions (aiohttp stack, SQLAlchemy, dlt's JSON library).
• charset-normalizer stops at 3.4.3, because newer versions detect encodings 2 to 4 times slower.
• services/llm-gateway moves to 3.14 with litellm 1.93.2 and websockets 16.0, the first websockets release with 3.14 wheels.
• The Rust flags integration job waits 60 seconds for Django instead of 30. Django takes about 25 seconds to start there on 3.14, against 15 to 22 on 3.13.

Before merge and rollout

• Read runner annotations from the class merged first. Without it every query returns 500 on 3.14.
• Run the dev signup deploy smoke test on the 3.14 image.
• Arm a revert PR, as with the 3.13 revert.
• After deploy, diff per-logger error signatures per region.

How did you test this code?

• The full backend matrix passed on 3.14.7 (Backend CI run).
• Local arm64 image builds, 3.13 against 3.14: all 433 packages, 12,130 repo modules, 29 native operations, and Temporal and Celery worker probes match. The only differences are deprecation warnings and one unused backport.
• The dev-two bake-in runs this branch's image. It returns the same status and shape as dev on 119 list endpoints. It shows no 3.14-only error.
• The earlier 3.14 image soaked on dev-two for 17 hours with no restarts or OOM kills.
• Each fully loaded process uses about 87 MB more memory on 3.14 (1,113 MB against 1,026 MB). Cold startup time is about the same.
• Latent: 67 DRF annotations use list[...] before def list. On 3.14 they resolve to the method, but nothing reads them at runtime.
• Not checked: amd64 images, workers against real databases, and load.

Automatic notifications

• Publish to changelog?

Docs update

• The manual dev setup guide, rust/deltalite/README.md and docs/internal/ci-things-already-tried.md name 3.14.

Stack history and done items

• 0. Publish parser wheels for Python 3.14.
• 1. Remove nginx unit, after charts: stop naming the nginx unit entrypoint. Slim the runtime base image is still a draft.
• 2. uv-managed CPython in the image. Not started.
• 3. Bump uv to 0.12.5, then use uv 0.12.13 in Flox and CI.
• 4. Bump for 3.14 wheel coverage.
• 5. Package personhog bindings without import rewriting and upgrade protobuf and opentelemetry.
• 6. This PR.
• 7. Lint sweep: ruff target py314, UP037 and PEP 758, like the 3.13 typing sweep.
• Pin ruff target to py313 and drop Intel Mac support.
• Deploy 3.14.5 or later only, since upstream reverted the incremental GC in 3.14.5.
• tests-posthog[bot] committed the snapshot churn.
• Follow-up: use python -m asyncio pstree PID on the next hung Temporal worker.
• websockets stays pure Python in the root lock: google-genai 1.46.0 caps it below 15.1.
• chdb 4.3.0 aborts under the jemalloc preload on 3.13 too. That is unrelated to this PR.

🤖 Agent context

Autonomy: Human-driven (agent-assisted)

Agent: Claude Code. The latest session ran on Opus 5.5.

• Sessions: https://claude.ai/code/session_014kCEeJVDKRs1k2KDM7Wqhe and https://claude.ai/code/session_018GcySHcU5S9WncgqkWuCGd, then a session that audited the image, merged master and added the wheel fix, then a session that merged master again.
• Skills: /writing-pr-descriptions, /authoring-ci-workflows. CodeRabbit CLI was not run in the latest session.

[trunk-io]

😎 Merged successfully - details.

[github-actions]

🤖 CI report

🚨 Trunk lane — universal lane

This PR is assigned to the universal lane. It cannot merge in parallel with other PRs, so it can take longer to merge. Ask dev-ex if you think this is wrong.

✅ Duplication (Python) — clean

New Python code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

✅ Duplication (TypeScript) — clean

New TypeScript code duplication introduced by this branch. Fails at 70+ tokens in app code, or 150+ tokens when both copies live in test files. Advisory while the gate proves itself: extract a shared helper instead of copying.

⚠️ Bundle size — 🔺 +1.3 KiB (+0.0%)

Uncompressed size of every built .js bundle, compared against the base branch.

Total: 68.92 MiB · 🔺 +1.3 KiB (+0.0%)

No file changed by more than 1000 B.

_{Posted automatically by build-bundle-size-report · uncompressed bytes from dist-report}

✅ Eager graph — within budget

How much code each root ships on the eager path — downloaded and parsed before the surface is interactive. Measured from the esbuild output chunks (post-tree-shake, static imports only); lazy import() / React.lazy chunks are not counted.

Root	Eager (shipped)	Δ vs base	Budget
entry (logged-out pages, app bootstrap) src/index.tsx	1.57 MiB · 22 files	🔺 +99 B (+0.0%)	█████████░ 85.4% of 1.84 MiB
logged-out boot: index + App + bootApp (preloaded by every page, including /login) src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts	3.58 MiB · 629 files	🔺 +99 B (+0.0%)	█████████░ 88.9% of 4.03 MiB
authenticated shell (every logged-in page) src/scenes/AuthenticatedShell.tsx	7.39 MiB · 2,330 files	🔺 +99 B (+0.0%)	█████████░ 88.6% of 8.34 MiB

🟢 node_modules/monaco-editor/ stays out of src/index.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/index.tsx
🟢 [object Object] stays out of src/index.tsx
🟢 [object Object] stays out of src/index.tsx
🟢 node_modules/monaco-editor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/layout/navigation-3000/navigationLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/scenes/dashboard/dashboardLogic.tsx stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/lemon-ui/LemonMarkdown/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/RichContentEditor/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/lib/components/CodeSnippet/ stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 src/taxonomy/core-filter-definitions-by-group.json stays out of src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts
🟢 node_modules/monaco-editor/ stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/lib/components/ActivityLog/describers stays out of src/scenes/AuthenticatedShell.tsx
🟢 [object Object] stays out of src/scenes/AuthenticatedShell.tsx
🟢 src/scenes/session-recordings/player/sessionRecordingPlayerLogic.ts stays out of src/scenes/AuthenticatedShell.tsx
🟢 [object Object] stays out of src/scenes/AuthenticatedShell.tsx
🟢 [object Object] stays out of src/scenes/AuthenticatedShell.tsx
🟢 [object Object] stays out of src/scenes/AuthenticatedShell.tsx

Largest files eagerly shipped from src/index.tsx

Size	File
126.8 KiB	../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js
24.6 KiB	../node_modules/.pnpm/buffer@6.0.3/node_modules/buffer/index.js
6.3 KiB	../node_modules/.pnpm/react@18.3.1/node_modules/react/cjs/react.production.min.js
4.5 KiB	../node_modules/.pnpm/@jspm+core@2.1.0/node_modules/@jspm/core/nodelibs/browser/process.js
3.9 KiB	../node_modules/.pnpm/scheduler@0.23.2/node_modules/scheduler/cjs/scheduler.production.min.js
1.4 KiB	../node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js
1.3 KiB	src/index.tsx
1.3 KiB	src/RootErrorBoundary.tsx
912 B	../node_modules/.pnpm/ieee754@1.2.1/node_modules/ieee754/index.js
854 B	src/scenes/ChunkLoadErrorBoundary.tsx

Largest files eagerly shipped from src/index.tsx + src/scenes/App.tsx + src/scenes/bootApp.ts

Size	File
301.8 KiB	../node_modules/.pnpm/posthog-js@1.434.14_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs
267.6 KiB	../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js
126.8 KiB	../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js
100.4 KiB	src/lib/api.ts
88.0 KiB	src/products.tsx
69.4 KiB	src/lib/lemon-ui/icons/icons.tsx
63.9 KiB	src/lib/utils/eventUsageLogic.ts
38.7 KiB	../node_modules/.pnpm/@dnd-kit+core@6.0.8_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@dnd-kit/core/dist/core.esm.js
33.9 KiB	../node_modules/.pnpm/kea@4.0.0-pre.6_patch_hash=139b8d1f1304f9d9da452a9a1244c94ea679dbcb85687d8999563146879fb6f5_react@18.3.1/node_modules/kea/lib/index.cjs.js
28.4 KiB	src/scenes/scenes.ts

Largest files eagerly shipped from src/scenes/AuthenticatedShell.tsx

Size	File
301.8 KiB	../node_modules/.pnpm/posthog-js@1.434.14_@types+react@18.3.27_react@18.3.1/node_modules/posthog-js/dist/module.mjs
271.7 KiB	src/taxonomy/core-filter-definitions-by-group.json
267.6 KiB	../node_modules/.pnpm/@posthog+icons@0.38.0_react-dom@18.3.1_react@18.3.1__react@18.3.1/node_modules/@posthog/icons/dist/posthog-icons.es.js
153.7 KiB	../node_modules/.pnpm/re2js@0.4.1/node_modules/re2js/build/index.esm.js
126.8 KiB	../node_modules/.pnpm/react-dom@18.3.1_react@18.3.1/node_modules/react-dom/cjs/react-dom.production.min.js
100.4 KiB	src/lib/api.ts
98.5 KiB	../packages/quill/packages/quill/dist/index.js
93.3 KiB	../node_modules/.pnpm/prosemirror-view@1.40.1/node_modules/prosemirror-view/dist/index.js
90.6 KiB	../node_modules/.pnpm/@tiptap+core@3.20.6_@tiptap+pm@3.20.6/node_modules/@tiptap/core/dist/index.js
88.0 KiB	src/products.tsx

_{Posted automatically by check-eager-graph · sizes are eager output bytes (shipped, post-tree-shake) from the esbuild metafile · part of #32479}

✅ Toolbar bundle — eager 2.37 MiB within budget

What the toolbar ships to customer pages, measured from the esbuild output (minified, post-tree-shake). The eager set is the entry plus everything statically imported from it — fetched before any feature runs; deferred chunks load lazily. The eager guardrail is 5.72 MiB. Each output file must also stay below 10 MB, where CloudFront stops compressing it. The module boundary is enforced separately by check-toolbar-graph.

Metric	Size	Δ vs base	Budget
Eager (shipped) entry + static imports	2.37 MiB · 19 files	🔺 +99 B (+0.0%)	████░░░░░░ 41.5% of 5.72 MiB
Deferred (lazy)	2.10 MiB · 44 files	no change	n/a — loads on demand
Loader dist/toolbar.js	1.2 KiB	no change	█░░░░░░░░░ 6.0% of 19.5 KiB

Largest eagerly-shipped chunks

Size	File
797.7 KiB	dist/toolbar/toolbar-app-G6HTHZO4.css
650.9 KiB	dist/toolbar/chunk-chunk-ZLZUDQLU.js
483.6 KiB	dist/toolbar/chunk-chunk-6JFSEK3E.js
138.3 KiB	dist/toolbar/chunk-chunk-SL4WBWFJ.js
131.8 KiB	dist/toolbar/chunk-chunk-FDH2IBXT.js
75.2 KiB	dist/toolbar/toolbar-app-BCYDYBUD.js
69.0 KiB	dist/toolbar/chunk-chunk-TSAL54PB.js
35.6 KiB	dist/toolbar/chunk-chunk-4NNH3FVO.js
21.0 KiB	dist/toolbar/chunk-chunk-GRXIOXBW.js
6.8 KiB	dist/toolbar/chunk-chunk-DV7IWQNF.js

_{Posted automatically by check-toolbar-size · sizes are toolbar output bytes (shipped, post-tree-shake) from the esbuild metafile}

✅ Dist folder size — 🔺 +20.8 KiB (+0.0%)

Total size of the built frontend/dist folder (all assets), compared against the base branch.

Total: 945.87 MiB · 🔺 +20.8 KiB (+0.0%)

ℹ️ MCP UI apps size — 33 app(s), 17665.2 KB JS

Built size of each MCP UI app (main.js + styles.css).

App	JS	CSS
debug	600.0 KB	195.2 KB
action	458.2 KB	195.2 KB
action-list	564.9 KB	195.2 KB
cohort	457.2 KB	195.2 KB
cohort-list	563.8 KB	195.2 KB
email-template	457.0 KB	195.2 KB
error-details	472.9 KB	195.2 KB
error-issue	457.9 KB	195.2 KB
error-issue-list	564.7 KB	195.2 KB
experiment	562.0 KB	195.2 KB
experiment-list	565.6 KB	195.2 KB
experiment-results	567.1 KB	195.2 KB
feature-flag	567.6 KB	195.2 KB
feature-flag-list	571.4 KB	195.2 KB
feature-flag-testing	461.4 KB	195.2 KB
inline-scan	457.7 KB	195.2 KB
insight-actors	563.0 KB	195.2 KB
invite-email-preview	456.4 KB	195.2 KB
llm-costs	560.0 KB	195.2 KB
session-recording	459.0 KB	195.2 KB
survey	458.8 KB	195.2 KB
survey-global-stats	562.7 KB	195.2 KB
survey-list	565.5 KB	195.2 KB
survey-stats	562.7 KB	195.2 KB
trace-span	457.6 KB	195.2 KB
trace-span-list	564.7 KB	195.2 KB
vision-observation-list	563.9 KB	195.2 KB
workflow	457.5 KB	195.2 KB
workflow-list	564.2 KB	195.2 KB
loops-review	461.9 KB	195.2 KB
query-results	756.3 KB	195.2 KB
render-ui	839.5 KB	195.2 KB
visual-review-snapshots	462.0 KB	195.2 KB

⚠️ Playwright — 1 failed, 1 flaky

🎭 Playwright report · View test results →

❌ 1 failed test:

• Save view (chromium)

⚠️ 1 flaky test:

• Creating a SQL insight with a variable and overriding it on a dashboard (chromium)

These issues are not necessarily caused by your changes.
Annoyed by this section? Help fix flakies and failures and it will go green!

⚠️ Backend snapshots — 1 updated (1 modified, 0 added, 0 deleted)

Query snapshots: Backend query snapshots updated

Changes: 1 snapshots (1 modified, 0 added, 0 deleted)

What this means:

• Query snapshots have been automatically updated to match current output
• These changes reflect modifications to database queries or schema

Next steps:

• Review the query changes to ensure they're intentional
• If unexpected, investigate what caused the query to change

Review snapshot changes →

✅ Backend coverage — all changed backend lines covered

🧪 Backend test coverage

Patch coverage — changed backend lines (products + core): ████████████████████ 100.0% (5 / 5)

All changed backend lines are covered ✅

Per-product line coverage (touched products)

Product	Coverage	Lines
platform_features	██░░░░░░░░░░░░░░░░░░ 12.1%	7 / 58
warehouse_sources_queue	██████░░░░░░░░░░░░░░ 29.1%	92 / 316
demo	███████████░░░░░░░░░ 52.9%	1,413 / 2,673
data_tools	████████████░░░░░░░░ 61.2%	90 / 147
aeo	██████████████░░░░░░ 70.5%	467 / 662
ai_gateway	███████████████░░░░░ 75.0%	9 / 12
batch_exports	████████████████░░░░ 81.2%	21,460 / 26,431
apm	█████████████████░░░ 84.1%	1,306 / 1,553
ml_inference	█████████████████░░░ 87.2%	482 / 553
cdp	██████████████████░░ 88.2%	4,545 / 5,155
mcp_analytics	██████████████████░░ 88.9%	4,910 / 5,523
product_tours	██████████████████░░ 89.3%	1,331 / 1,491
dashboards	██████████████████░░ 89.5%	6,850 / 7,652
data_warehouse	██████████████████░░ 89.9%	13,907 / 15,470
signals	██████████████████░░ 90.0%	55,576 / 61,767
notebooks	██████████████████░░ 90.2%	15,287 / 16,945
cohorts	██████████████████░░ 90.4%	8,420 / 9,316
streamlit_apps	██████████████████░░ 90.6%	2,623 / 2,895
managed_warehouse	██████████████████░░ 90.9%	10,215 / 11,234
tasks	██████████████████░░ 90.9%	73,884 / 81,237
data_modeling	██████████████████░░ 91.4%	10,504 / 11,498
business_knowledge	██████████████████░░ 91.6%	6,899 / 7,528
exports	██████████████████░░ 91.7%	9,675 / 10,555
engineering_analytics	██████████████████░░ 91.7%	11,015 / 12,014
ai_training	██████████████████░░ 92.2%	356 / 386
conversations	██████████████████░░ 92.5%	28,716 / 31,047
early_access_features	███████████████████░ 92.6%	1,341 / 1,448
managed_migrations	███████████████████░ 92.7%	1,581 / 1,705
visual_review	███████████████████░ 92.8%	9,244 / 9,966
canvas	███████████████████░ 92.8%	6,877 / 7,409
approvals	███████████████████░ 93.0%	3,918 / 4,214
mcp_registry	███████████████████░ 93.1%	1,670 / 1,794
error_tracking	███████████████████░ 93.1%	15,864 / 17,033
notifications	███████████████████░ 93.2%	1,145 / 1,229
slack_app	███████████████████░ 93.2%	13,677 / 14,674
stamphog	███████████████████░ 93.2%	7,885 / 8,456
surveys	███████████████████░ 93.3%	6,571 / 7,040
context_layer	███████████████████░ 93.8%	3,373 / 3,595
web_analytics	███████████████████░ 93.9%	21,648 / 23,051
alerts	███████████████████░ 94.0%	8,540 / 9,082
billing_alerts	███████████████████░ 94.1%	2,094 / 2,226
ai_observability	███████████████████░ 94.3%	22,516 / 23,871
mcp_store	███████████████████░ 94.4%	8,940 / 9,472
wizard	███████████████████░ 94.7%	6,150 / 6,496
reminders	███████████████████░ 94.8%	760 / 802
workflows	███████████████████░ 94.8%	14,332 / 15,113
review_hog	███████████████████░ 94.9%	11,488 / 12,109
endpoints	███████████████████░ 95.1%	9,206 / 9,681
annotations	███████████████████░ 95.1%	817 / 859
customer_analytics	███████████████████░ 95.1%	24,897 / 26,167
legal_documents	███████████████████░ 95.2%	2,311 / 2,427
marketing_analytics	███████████████████░ 95.3%	19,209 / 20,161
posthog_ai	███████████████████░ 95.3%	2,488 / 2,610
logs	███████████████████░ 95.4%	15,285 / 16,022
experiments	███████████████████░ 95.4%	32,458 / 34,022
growth	███████████████████░ 95.4%	9,811 / 10,282
actions	███████████████████░ 95.5%	756 / 792
data_catalog	███████████████████░ 95.5%	4,401 / 4,606
tracing	███████████████████░ 95.6%	3,517 / 3,680
autoresearch	███████████████████░ 95.7%	8,481 / 8,865
messaging	███████████████████░ 95.8%	3,798 / 3,963
skills	███████████████████░ 95.8%	6,972 / 7,274
replay_vision	███████████████████░ 95.9%	27,153 / 28,310
product_analytics	███████████████████░ 96.0%	28,463 / 29,640
access_control	███████████████████░ 96.3%	7,112 / 7,386
revenue_analytics	███████████████████░ 96.4%	1,876 / 1,946
user_interviews	███████████████████░ 96.5%	2,859 / 2,963
feature_flags	███████████████████░ 96.5%	25,498 / 26,416
warehouse_sources	███████████████████░ 97.2%	452,846 / 465,791
data_quality	████████████████████ 97.6%	7,587 / 7,774
security	████████████████████ 97.9%	1,202 / 1,228
links	████████████████████ 97.9%	234 / 239
metrics	████████████████████ 98.0%	4,084 / 4,166
analytics_platform	████████████████████ 98.3%	2,783 / 2,832
pulse	████████████████████ 98.5%	2,043 / 2,075
live_debugger	████████████████████ 99.2%	626 / 631
field_notes	████████████████████ 99.4%	172 / 173

Report-only. Patch coverage = changed backend lines covered vs origin/master. Sorted lowest first.
Known gaps: lines covered only by Temporal tests show as uncovered; core line numbers may drift if master changed the same file.

✅ ClickHouse migration SQL — none

No ClickHouse migrations in the latest push.

ℹ️ Docs preview — preview build triggered

Docs from this PR will be published at posthog.com.

Project	Preview	Updated (UTC)
posthog.com	Open preview	Sep 23, 2026, 3:12 PM

The preview should be ready in about 10 minutes. Open the preview at /handbook/engineering/.

✅ Hobby preview — passed

Hobby deployment smoke test passed successfully.

---

_{Run 36424522297}

[trunk-io]

   

Failed Test	Failure Summary	Logs
Dashboards › Creating a SQL insight with a variable and overriding it on a dashboard	The test exceeded the maximum allowed time and timed out.	Logs ↗︎

View Full Report ↗︎ ⋅ Docs

[pr-assigner-resolver-posthog]

👀 Auto-assigned reviewers

These soft owners were skipped because they only have minor changes here. Nothing blocks merge, so self-assign if you'd like a look:

• @PostHog/team-web-analytics (products/web_analytics/product.yaml)
• @PostHog/team-context-mcp (.github/owners.yaml)
• @PostHog/team-ai-observability (owners.yaml)
• @PostHog/team-warehouse-sources (products/warehouse_sources/product.yaml)

Soft owners come from each directory's owners.yaml and each product's product.yaml (resolved nearest-file-wins). The locator after each owner is the file that decided it. Generated files and lockfiles are ignored when deciding ownership.

[posthog-security-review-bot]

✅ Security review complete — c978f1f2f5ab

No findings above the confidence threshold, in 17 min.

_{Add the security-review label to run again on the latest commit.}

[greptile-apps]

The PR appears safe to merge after correcting the non-blocking stale Python version in the deltalite documentation.

_{Reviews (1) · Last reviewed commit: "fix(deps): restore native cp314 wheels"}

[posthog-security-review-bot]

Agent-driven security review - no findings.

[deployment-status-posthog]

Deploy status

Environment	Status	Deployed At	Workflow
dev	✅ Deployed	2026-09-28 14:03 UTC	Run
prod-us	✅ Deployed	2026-09-28 14:21 UTC	Run
prod-eu	✅ Deployed	2026-09-28 14:20 UTC	Run