CookieChimp Consent SDK 1.1.0

CookieChimp Consent SDK 1.1.0

Published on 25 October 2026. All eight packages are available as npm latest at
1.1.0 with verified package integrity, signatures and provenance.

Platform JSON consent experience

• Render the existing CookieChimp JSON with @cookiechimp/react/platform and
  @cookiechimp/react/platform.css.
• Let visitors choose categories and individual vendors and inspect purposes,
  providers, privacy links and cookie/storage disclosures.
• Apply dashboard layouts, positions, buttons, themes, logos, language and RTL
  settings. Keep headers/actions visible while preference content scrolls.
• Include a 16-preset playground with desktop/mobile preview, JSON export,
  saved-choice replay, built-in motion and reduced-motion support.

Consent correctness

• Correct the public core VERSION export, which previously reported 0.0.0,
  and verify it against the installed package metadata.

• Expose complete effective service choices in every runtime snapshot.

• Ignore saved consent recorded under a different regulation and restore the new
  mode's defaults until a fresh decision is made.

• Scope consent language/direction to consent controls, preserving application
  content. Persist the displayed consent UUID with saved choices.

Example and validation dependencies

Update pinned Next.js dependencies to 16.4.3 in the SDK development package,
examples, fixtures, benchmark applications and isolated release consumer. This
includes the fixes in the 14 October security update.

Connected examples and documentation

The platform guide includes an App Router cookie/initial-state example for
hydration-safe restoration of saved choices.

The React /connected example demonstrates dashboard config, explicit consent
logging, matching backend receipts and retries. The new Mintlify guides explain
platform UI and backend integration separately. Config loading or displaying a
consent ID does not itself send a record or prove delivery.

All eight @cookiechimp packages are versioned together at 1.1.0. Existing
standard entry points remain available; the platform entry is opt-in. Backend
logging, tag blocking, Consent Mode and optional IAB integrations remain explicit.

Release verification

• Reviewed source: 8e1c037.
• Passing release workflow, including the required main checks and protected deployment review.
• Exact package manifest and registry audit.
• Fresh npm consumer verification: all 116 exports, strict standalone declarations, a Next.js 16.4.3 production build, signature auditing, browser consent/script gating, per-vendor choices, withdrawal and reload persistence.
• Live backend evidence: configuration retrieval and four acknowledged decisions, verified against their stored dashboard records.

The token package was published by the original reviewed run from 8d68ddb;
the remaining seven packages were published by the recovery run from 8e1c037.
The package runtime, types and styles match the original reviewed candidate.
The recovery run verified and skipped the identical token tarball. The registry
audit records each package's actual provenance source and workflow invocation.