[dependabot]

Bumps the resq-systems group in /src/ResQ.Viz.Web with 1 update: @resq-systems/analytics.

Updates @resq-systems/analytics from 2.0.2 to 3.1.0

Release notes

Sourced from @​resq-systems/analytics's releases.

@​resq-systems/analytics@​3.1.0

Minor Changes

• #336 2795c94 Thanks @​WomB0ComB0! - Fix GA4 collecting nothing by queuing gtag commands as arguments objects through a documented window.gtag, and add configParams to the GA4 provider config

@​resq-systems/analytics@​3.0.0

Major Changes

• #332 f27d9df Thanks @​WomB0ComB0! - Analytics is now opt-in. initAnalytics() and <AnalyticsProvider> record the config and load nothing — no gtag.js script, no posthog-js import, no request — until the visitor accepts through grantConsent(), or an acceptance from an earlier visit is stored. track, identify and pageview are no-ops until then.

  New exports: grantConsent, denyConsent, getConsent, onConsentChange, CONSENT_STORAGE_KEY, localStorageConsentStore and the ConsentState / ConsentDecision / ConsentStore types; from @resq-systems/analytics/react, the headless useConsent, useConsentBanner and openPrivacySettings. Withdrawing consent opts PostHog out, disables the GA4 stream and deletes its _ga cookies. GA4 now boots with Consent Mode's advertising signals set to denied.

  Migration: render an Accept/Decline banner that calls grantConsent() / denyConsent() (see the README's Consent section) and link your privacy notice from it. Without a banner, no analytics is sent.

Changelog

Sourced from @​resq-systems/analytics's changelog.

3.1.0

Minor Changes

• #336 2795c94 Thanks @​WomB0ComB0! - Fix GA4 collecting nothing by queuing gtag commands as arguments objects through a documented window.gtag, and add configParams to the GA4 provider config

3.0.0

Major Changes

• #332 f27d9df Thanks @​WomB0ComB0! - Analytics is now opt-in. initAnalytics() and <AnalyticsProvider> record the config and load nothing — no gtag.js script, no posthog-js import, no request — until the visitor accepts through grantConsent(), or an acceptance from an earlier visit is stored. track, identify and pageview are no-ops until then.

  New exports: grantConsent, denyConsent, getConsent, onConsentChange, CONSENT_STORAGE_KEY, localStorageConsentStore and the ConsentState / ConsentDecision / ConsentStore types; from @resq-systems/analytics/react, the headless useConsent, useConsentBanner and openPrivacySettings. Withdrawing consent opts PostHog out, disables the GA4 stream and deletes its _ga cookies. GA4 now boots with Consent Mode's advertising signals set to denied.

  Migration: render an Accept/Decline banner that calls grantConsent() / denyConsent() (see the README's Consent section) and link your privacy notice from it. Without a banner, no analytics is sent.

Commits

• 2b699f2 chore: version packages (#337)
• 2795c94 fix(analytics): queue gtag commands as arguments objects so GA4 collects (#336)
• a1d96e7 chore: version packages (#333)
• f27d9df chore(compliance): opt-in analytics consent, policy docs, release evidence (#...
• c1c12d6 docs: point package README license links at LICENSE (#331)
• 76fd1c2 chore(deps): bump the bun-minor-patch group across 1 directory with 38 update...
• 0a57748 chore(deps): bump the bun-minor-patch group across 1 directory with 31 update...
• 395dda1 chore(deps): bump the bun-minor-patch group with 18 updates (#283)
• 632674f chore(deps): bump the bun-minor-patch group with 15 updates (#265)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: chore, deps. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 062d236b-d4f7-4969-bc5d-0db0e1787eb7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​resq-systems/​analytics@​2.0.2 ⏵ 3.1.0	+1		+1	+1

View full report