@duckduckgo/autoconsent 16.51.0 → 16.52.0

package/.github/workflows/ddg-release.yml

@@ -334,8 +334,8 @@ jobs:
                   token: ${{ secrets.DAX_WEB_AUTOFILL_AUTOMATION }}
             - uses: actions/setup-node@v4
               with:
-                  # this should match the node version in the extension CI, to avoid package.lock inconsistencies
-                  node-version: 22
+                  # use the extension's own Node version, to avoid package.lock inconsistencies
+                  node-version-file: extension/.nvmrc
                   cache: 'npm'
                   cache-dependency-path: extension/package-lock.json
             - name: Update extension autoconsent reference

package/AGENTS.md

@@ -133,6 +133,7 @@ shadow root or same-origin iframe.
 
 ### Updating existing rules
 - **For site-specific popups, prefer a heuristic-pattern fix over a new rule, and check whether a rule is needed at all.** If the popup is unique to a site (not a shared CMP) and already has a reject, dismiss, or acknowledge button that the heuristic should match, extend `lib/heuristic-patterns.ts` instead of adding a `urlPattern`-scoped JSON rule. Do not use a heuristic fix in place of a generic CMP rule. A heuristic change must not cause false positives on other sites.
+- **When the heuristic already handles the popup, test every region before concluding that no fix is needed.**
 - If an existing generic rule fails on a specific site: first look for other sites with the same failure (spec sites, data/coverage.json, publicwww). If the issue applies to more sites, update the generic rule; if the issue is truly site-specific, prefer making a site-specific rule or a config exception. Never change a generic rule to fix a site-specific implementation problem.
 - After updating an existing generic rule, do a heavy testing run: all known sites (specs + data/coverage.json + publicwww) across the expanded set. Inspect both API results AND screenshots.
 - **When adding or fixing a rule for a site, remove stale site-specific rules covering the same site.** If a site-specific rule is obsolete in all regions (the site switched CMP), remove it rather than leaving it alongside the new or updated rule.

package/CHANGELOG.md

@@ -1,3 +1,34 @@
+# v16.52.0 (Wed Oct 14 2026)
+
+#### Rules
+
+- Rule update: quantcast [#1701](https://github.com/duckduckgo/autoconsent/pull/1701) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: Tealium [#1757](https://github.com/duckduckgo/autoconsent/pull/1757) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: lta [#1759](https://github.com/duckduckgo/autoconsent/pull/1759) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: pigu [#1760](https://github.com/duckduckgo/autoconsent/pull/1760) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: community.screwfix.com [#1756](https://github.com/duckduckgo/autoconsent/pull/1756) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: la-becanerie [#1761](https://github.com/duckduckgo/autoconsent/pull/1761) ([@daxtheduck](https://github.com/daxtheduck))
+- Rule update: mizuno.com [#1758](https://github.com/duckduckgo/autoconsent/pull/1758) ([@daxtheduck](https://github.com/daxtheduck))
+
+#### Enhancements
+
+- Rule update: quantcast + make click step with all:true async [#1627](https://github.com/duckduckgo/autoconsent/pull/1627) ([@daxtheduck](https://github.com/daxtheduck) [@muodov](https://github.com/muodov))
+
+#### CI / Release Automation
+
+- Remove unused Dockerfile; match extension Node in release job [#1754](https://github.com/duckduckgo/autoconsent/pull/1754) ([@muodov](https://github.com/muodov))
+
+#### AI / Agent Workflow
+
+- Test every region before relying on the heuristic [#1773](https://github.com/duckduckgo/autoconsent/pull/1773) ([@muodov](https://github.com/muodov))
+
+#### Authors: 2
+
+- Dax ([@daxtheduck](https://github.com/daxtheduck))
+- Maxim Tsoy ([@muodov](https://github.com/muodov))
+
+---
+
 # v16.51.0 (Tue Oct 13 2026)
 
 #### Rules