Changelog

Categories: Security, Feature, Fix, Perf, Admin, Deps.

[1.3.0] - 2026-09-17

Feature

• Optional automatic account deletion: once enabled, a daily task deletes the account behind every pending GDPR deletion request older than a configurable delay (30 days by default) and closes the request. Off by default.

Admin

• New command wimakeit:gdpr:auto-delete to list the requests due, and process them on demand.

[1.2.18] - 2026-09-17

Fix

• "Modify my preferences" on the customer privacy page always opens the cookie settings, even before the visitor's first choice.

[1.2.17] - 2026-09-17

Fix

• The cookie banner and its settings button work again on stores that move scripts to the bottom of the page (a template comment was mistaken for a script tag).

[1.2.16] - 2026-09-08

Fix

• Fixed a fatal error that took every storefront and admin page down when Magento's HTML template minification is enabled — the default in production.

[1.2.15] - 2026-09-04

Fix

• The three privacy account pages now redirect a visitor who is not logged in to the login page, instead of answering with a 500 error.

[1.2.14] - 2026-09-03

Fix

• Consent defaults now apply on the checkout: the block carries a CSP nonce, so measurement tags no longer fire as "granted" throughout the funnel.

[1.2.13] - 2026-08-25

Fix

• Checkout no longer renders order lines and totals twice — the Alpine loader guard is now shared across Wimakeit modules, so only one instance loads.

[1.2.12] - 2026-08-25

Fix

• The cookie banner works on the checkout page again: Alpine is no longer injected from an inline script that Magento's enforced CSP blocked.

[1.2.6] - 2026-08-12

Fix

• The privacy page footer links to the configured Privacy Policy URL instead of two hard-coded French paths that returned 404 on most installs.

[1.2.5] - 2026-08-12

Fix

• The deletion request button keeps its red background, inline layout and padding instead of losing them to the Alpine style binding.

[1.2.4] - 2026-08-12

Feature

• The banner's accent colour is themeable through --wm-gdpr-color and --wm-gdpr-color-rgb; installations that do not redefine them look unchanged.

Fix

• The privacy page shows the customer account menu again, instead of an empty sidebar leaving the visitor no way back into their account.

[1.2.3] - 2026-08-11

Fix

• Consent banner buttons size to their content below 640px, instead of stretching and filling half the screen on a phone.

[1.2.2] - 2026-08-11

Feature

• Privacy policy page created automatically — installing the module now provisions the privacy-policy CMS page the cookie banner links to, with a ready-to-edit GDPR template in French, Dutch or English depending on the store view locale. Existing pages are never overwritten.

Fix

• Leaving the Privacy Policy URL setting empty no longer produces a banner link pointing to the home page.

[1.2.0] - 2026-08-10

Feature

• Deletion requests sent from the customer privacy area now have their own admin grid — until now they were recorded but invisible from the back-office.
• Requests are processed directly from the grid: mark as processing, completed or rejected, one by one or in bulk, with the processing date stamped automatically. A closed request can be reopened.

Admin

• New Marketing → GDPR → Deletion Requests screen: filters on every field, CSV/XML export, and a one-click link from a request to the matching customer account.
• Two permissions under System → Permissions → User Roles: viewing the requests and changing their status are granted separately, so a role can consult without being able to close.

[1.1.10] - 2026-06-29

Deps

• PHP 8.5 certified — constraint widened to >=8.1 <8.6 for Mage-OS 3.x / Magento 2.4.9.

[1.1.9] - 2026-06-05

Deps

• Marketing documentation refreshed to list PHP 8.4 in the supported PHP range.

[1.1.8] - 2026-06-05

Deps

• PHP 8.4 certified — constraint widened to >=8.1 <8.5.
• magento/framework pinned to ^103.0.

[1.1.7] - 2026-05-12

Admin

• Admin dashboard widget code extracted to companion module wimakeit/module-gdpr-admin-dashboard. The main module is now installable on stores that don't use wimakeit/module-admin-dashboard.

Deps

• To keep the GDPR compliance widget on the admin dashboard, install wimakeit/module-gdpr-admin-dashboard alongside this module.

[1.1.6] - 2026-05-10

Feature

• New Enable Debug Logging toggle (Stores → Configuration → Wimakeit → GDPR → General), off by default. Delete-request controller and country resolver emit info/debug/notice/warning only when the toggle is on; error/critical always log.

Perf

• Production stores stop emitting trace lines from the consent/delete flows into var/log/system.log once the toggle is left off.

Deps

• Requires wimakeit/module-core 3.0.9+ for the shared debug logger virtual type.

[1.1.5] - 2026-05-08

Admin

• New Wimakeit → GDPR → Settings menu shortcut that opens directly on the wimakeit_gdpr configuration section. The rich GDPR menu under Marketing is preserved.
• New Wimakeit_Gdpr::config ACL resource so the Settings entry can be granted independently of code edits.

[1.1.4] - 2026-04-29

Deps

• Certified PHP 8.1 → 8.3 support. Composer php constraint tightened to >=8.1 <8.4.

[1.1.3] - 2026-04-21

Fix

• Banner no longer throws Alpine Expression Error: wmGdprConsent is not defined on Luma when defer and dynamic Alpine injection raced. cookie-consent.js is now loaded synchronously so the global is defined before Alpine evaluates x-data.

[1.1.2] - 2026-04-21

Feature

• Self-registering admin dashboard widget — when wimakeit/module-admin-dashboard is installed, the GDPR module exposes a compliance-status widget without any glue code.

Admin

• Internal release pipeline standardized (validate, tag, deploy, release stages).

[1.1.1] - 2026-04-20

Fix

• Settings-button icon no longer rendered at 0×0 on Luma themes that leak global button padding — explicit inner SVG size and reset padding restore the icon.
• Banner action buttons (Accept all / Reject all / Save preferences) now share a uniform height/border-radius and flex: 1 1 140px, so long French labels like "Enregistrer mes choix" no longer spill past the border.
• Dark-mode settings-button stroke recoloured from #888 to #ccc for legible contrast on the dark banner background.

[1.1.0] - 2026-04-20

Feature

• Alpine.js is now bundled for Luma themes (Alpine v3.14.8 standalone). Hyvä and Breeze keep using their own Alpine since they already load it. The banner injects Alpine before cookie-consent.js when window.Alpine is missing, so x-data / x-cloak / :class directives actually process.
• Banner texts are now translated. Admin defaults (Accept all, Reject all, banner title and description) are piped through __() so the FR/EN/NL i18n/*.csv translations apply.
• Cookie list filters to actually-present cookies. The banner renders only cookies actually set in document.cookie (wildcard match) instead of every cookie declared in the registry.

[1.0.1] - 2026-04-14

Admin

• Cron and config classes migrated to the shared AbstractCron / AbstractConfig bases from wimakeit/module-core — consistent logging and typed getters across all Wimakeit modules.
• Composer/Satis distribution archives now exclude internal files (.gitlab-ci.yml, .claude/, docs/, .gitattributes).

Deps

• Depends on wimakeit/module-core for shared cron and config abstractions.

[1.0.0] - 2026-04-13

Feature

• Initial release of Wimakeit GDPR — cookie consent and privacy module for Magento 2 / Mage-OS.
• Cookie consent banner powered by Alpine.js, compatible with Luma, Breeze and Hyvä.
• Admin consent log grid with CSV export — every accept/reject/save is recorded with timestamp, IP (hashed), user-agent and cookie choices.
• Customer privacy page — data export and account-deletion request flow, ready for the "right to be forgotten" and "right to data portability" obligations.
• GeoIP country detection drives consent rules (e.g. apply EU consent flow only to EU visitors).
• Cron purge of old consent log entries based on a configurable retention period.
• Built-in translations for French, English and Dutch (fr_FR, en_US, nl_NL).