CookieChimp Consent SDK 1.2.0

CookieChimp Consent SDK 1.2.0

All nine packages are published on npm as latest 1.2.0, including @cookiechimp/react-native.

React Native and Expo

• Add @cookiechimp/react-native with native consent banners and preferences
  using dashboard copy, categories, vendors and styling.
• Use connected configuration or a bundled offline config, persist choices in
  AsyncStorage, and queue consent records for delivery when online.
• Control analytics and advertising SDKs with vendor callbacks and reopen privacy
  preferences from app settings through the imperative API or React hooks.
• Run core consent without browser APIs, with native storage, iOS/Android record
  metadata and an explicit retry API for app foreground and reconnect handling.

Web SDK improvements

• Block configured tracking images, including detached images and responsive
  candidates, through the optional dynamic controller until consent allows them.
• Reduce the additional size of connected sync while retaining the existing
  marginal bundle size target.
• Keep consent logging queues intact when a stopped log finishes an old request.
• Match configured branding in the platform banner and preferences.
• Expand US state privacy-format encoding for Minnesota, Maryland, Indiana,
  Kentucky and Rhode Island.

npm publication

Published through the protected GitHub OIDC workflow from 150b0292be3502b355bf0a0f00118d7c557db340. All nine registry tarballs match the attached manifest and expected source provenance. Fresh npm installs passed web export/type/browser checks and Expo iOS/Android bundle exports; both npm signature audits reported no invalid or missing signatures. Device and live delivery checks were separately confirmed by Daniel.

Use matching versions of the CookieChimp packages. Install the native package with:

npm install @cookiechimp/react-native@1.2.0 @react-native-async-storage/async-storage

The attached tarballs are the exact published packages. npm-audit.json records registry bytes and provenance; registry-consumer.json records fresh npm consumer and signature checks. The temporary bootstrap stage was removed after publication and was never published.

CookieChimp Consent SDK 1.1.0

CookieChimp Consent SDK 1.1.0

Published on 25 October 2026. All eight packages are available as npm latest at
1.1.0 with verified package integrity, signatures and provenance.

Platform JSON consent experience

• Render the existing CookieChimp JSON with @cookiechimp/react/platform and
  @cookiechimp/react/platform.css.
• Let visitors choose categories and individual vendors and inspect purposes,
  providers, privacy links and cookie/storage disclosures.
• Apply dashboard layouts, positions, buttons, themes, logos, language and RTL
  settings. Keep headers/actions visible while preference content scrolls.
• Include a 16-preset playground with desktop/mobile preview, JSON export,
  saved-choice replay, built-in motion and reduced-motion support.

Consent correctness

• Correct the public core VERSION export, which previously reported 0.0.0,
  and verify it against the installed package metadata.

• Expose complete effective service choices in every runtime snapshot.

• Ignore saved consent recorded under a different regulation and restore the new
  mode's defaults until a fresh decision is made.

• Scope consent language/direction to consent controls, preserving application
  content. Persist the displayed consent UUID with saved choices.

Example and validation dependencies

Update pinned Next.js dependencies to 16.4.3 in the SDK development package,
examples, fixtures, benchmark applications and isolated release consumer. This
includes the fixes in the 14 October security update.

Connected examples and documentation

The platform guide includes an App Router cookie/initial-state example for
hydration-safe restoration of saved choices.

The React /connected example demonstrates dashboard config, explicit consent
logging, matching backend receipts and retries. The new Mintlify guides explain
platform UI and backend integration separately. Config loading or displaying a
consent ID does not itself send a record or prove delivery.

All eight @cookiechimp packages are versioned together at 1.1.0. Existing
standard entry points remain available; the platform entry is opt-in. Backend
logging, tag blocking, Consent Mode and optional IAB integrations remain explicit.

Release verification

• Reviewed source: 8e1c037.
• Passing release workflow, including the required main checks and protected deployment review.
• Exact package manifest and registry audit.
• Fresh npm consumer verification: all 116 exports, strict standalone declarations, a Next.js 16.4.3 production build, signature auditing, browser consent/script gating, per-vendor choices, withdrawal and reload persistence.
• Live backend evidence: configuration retrieval and four acknowledged decisions, verified against their stored dashboard records.

The token package was published by the original reviewed run from 8d68ddb;
the remaining seven packages were published by the recovery run from 8e1c037.
The package runtime, types and styles match the original reviewed candidate.
The recovery run verified and skipped the identical token tarball. The registry
audit records each package's actual provenance source and workflow invocation.