@duckduckgo/autoconsent 16.45.0 → 16.47.0

package/.github/dependabot.yml

@@ -4,6 +4,12 @@ updates:
       directory: '/' # Location of package manifests
       schedule:
           interval: 'weekly'
+      cooldown:
+          default-days: 7
+      ignore:
+          # typescript-eslint and ts-node do not support TypeScript 7 yet.
+          - dependency-name: 'typescript'
+            versions: ['>=7']
       labels:
           - 'category: dependencies'
       groups:

package/.github/labeler.yml

@@ -36,7 +36,7 @@
                 - 'web-test-runner.config.mjs'
 
 # Not a release-note category: exactly one 'category:' label is required per PR.
-'code-update-needed':
+'needs-code-update':
     - changed-files:
           - any-glob-to-any-file:
                 - 'lib/**/*.ts'

package/.github/workflows/release-labels.yml

@@ -16,28 +16,36 @@ permissions:
     issues: write
     pull-requests: write
 
-concurrency:
-    group: release-labels-${{ github.event.pull_request.number }}
-    cancel-in-progress: true
-
 jobs:
-    release-labels:
+    # No concurrency group here: a 'labeled' event right after 'opened' must not cancel this job.
+    path-labels:
+        if: >-
+            ${{
+              github.event.action == 'opened' ||
+              github.event.action == 'reopened' ||
+              github.event.action == 'ready_for_review'
+            }}
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4
 
             - name: Apply path-based labels
-              if: >-
-                  ${{
-                    github.event.action == 'opened' ||
-                    github.event.action == 'reopened' ||
-                    github.event.action == 'ready_for_review'
-                  }}
               uses: actions/labeler@v6
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   sync-labels: false
 
+    release-labels:
+        needs: path-labels
+        # Run when path-labels is skipped or fails, so the label check still happens.
+        if: ${{ !cancelled() }}
+        runs-on: ubuntu-latest
+        concurrency:
+            group: release-labels-${{ github.event.pull_request.number }}
+            cancel-in-progress: true
+        steps:
+            - uses: actions/checkout@v4
+
             - name: Use Node.js
               uses: actions/setup-node@v4
               with:

package/CHANGELOG.md

@@ -1,3 +1,54 @@
+# v16.47.0 (Wed Oct 07 2026)
+
+#### Rules
+
+- Rule update: controlgame [#1616](https://github.com/duckduckgo/autoconsent/pull/1616) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: dalecarnegie [#1617](https://github.com/duckduckgo/autoconsent/pull/1617) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: jpmorgan-chase [#1615](https://github.com/duckduckgo/autoconsent/pull/1615) ([@daxtheduck](https://github.com/daxtheduck))
+
+#### Bug Fixes
+
+- Don't wait for a DOM mutation after an attempt that skipped the heuristic [#1611](https://github.com/duckduckgo/autoconsent/pull/1611) ([@muodov](https://github.com/muodov))
+
+#### Dependencies
+
+- Upgrade TypeScript to 6 and add a 7-day Dependabot cooldown [#1607](https://github.com/duckduckgo/autoconsent/pull/1607) ([@muodov](https://github.com/muodov))
+
+#### CI / Release Automation
+
+- Use needs-code-update label and stop label events from cancelling the labeler [#1609](https://github.com/duckduckgo/autoconsent/pull/1609) ([@claude](https://github.com/claude) [@muodov](https://github.com/muodov))
+
+#### Authors: 3
+
+- Claude ([@claude](https://github.com/claude))
+- Dax ([@daxtheduck](https://github.com/daxtheduck))
+- Maxim Tsoy ([@muodov](https://github.com/muodov))
+
+---
+
+# v16.46.0 (Tue Oct 06 2026)
+
+#### Rules
+
+- Handle GPC flyout from Securiti [#1612](https://github.com/duckduckgo/autoconsent/pull/1612) ([@muodov](https://github.com/muodov))
+- Add rule for the LEGO.com consent modal [#1613](https://github.com/duckduckgo/autoconsent/pull/1613) ([@muodov](https://github.com/muodov))
+- Rule update: Cookie popup on fanatics sites [#1594](https://github.com/duckduckgo/autoconsent/pull/1594) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: https://openrouter.ai/ [#1608](https://github.com/duckduckgo/autoconsent/pull/1608) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: cookiez [#1597](https://github.com/duckduckgo/autoconsent/pull/1597) ([@daxtheduck](https://github.com/daxtheduck) [@muodov](https://github.com/muodov))
+- Rule update: cookieyes [#1598](https://github.com/duckduckgo/autoconsent/pull/1598) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: squarespace-cookie-banner [#1599](https://github.com/duckduckgo/autoconsent/pull/1599) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: speciesplus.net [#1600](https://github.com/duckduckgo/autoconsent/pull/1600) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: privacy-area [#1601](https://github.com/duckduckgo/autoconsent/pull/1601) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: ziptozipmoving [#1602](https://github.com/duckduckgo/autoconsent/pull/1602) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: cuvva.com [#1603](https://github.com/duckduckgo/autoconsent/pull/1603) ([@daxtheduck](https://github.com/daxtheduck))
+
+#### Authors: 2
+
+- Dax ([@daxtheduck](https://github.com/daxtheduck))
+- Maxim Tsoy ([@muodov](https://github.com/muodov))
+
+---
+
 # v16.45.0 (Sun Oct 04 2026)
 
 #### Dependencies