Release: 2.28.1

[uc-brunosilva]

User description

Summary

• Bump SDK version to 2.28.1 (package.json, package-lock.json, android/build.gradle.kts)
• Regenerate sample/ios/Podfile.lock against native UsercentricsUI 2.28.1

Note

CHANGELOG.md entry for 2.28.1 still needs to be added before merge.

---

CodeAnt-AI Description

Release 2.28.1

What Changed

• Updated the React Native SDK package version to 2.28.1.
• Updated the iOS package version and Android native version to match 2.28.1.
• Refreshed the lockfile so the bundled package metadata stays in sync with this release.

Impact

✅ Release package version aligned across platforms
✅ Clearer version tracking for 2.28.1 builds
✅ Smoother publishing and dependency checks

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

Summary by CodeRabbit

• Chores
  • Updated the package version to 2.28.1.
  • Updated the Android and iOS SDK integrations to version 2.28.1.

[codeant-ai]

CodeAnt AI is reviewing your PR.

[codeant-ai]

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[coderabbitai]

📝 Walkthrough

Walkthrough

The release version is updated from 2.28.0 to 2.28.1 in the Android dependency configuration and in the npm/iOS package metadata.

Changes

Version alignment

Layer / File(s)	Summary
Release version bump android/build.gradle.kts, package.json	Updates the Android Usercentrics dependency version and the npm/iOS package version fields to 2.28.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• Usercentrics/react-native-sdk#223: Updates the same Android and package version fields for a subsequent Usercentrics SDK release.
• Usercentrics/react-native-sdk#211: Performs the same version-only update across Android and package metadata.
• Usercentrics/react-native-sdk#162: Aligns the same Usercentrics SDK and package version sources.

Suggested labels: Review effort 1/5, size:S

Suggested reviewers: uc-brunosouza

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: releasing version 2.28.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bump/2.28.1

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install timed out. The project may have too many dependencies for the sandbox.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[qodo-code-review]

PR Summary by Qodo

Release 2.28.1: bump React Native SDK + Android native version

⚙️ Configuration changes 🕐 Less than 5 minutes

AI Description

• Bump SDK package version to 2.28.1 in package metadata.
• Update Android build to depend on native Usercentrics 2.28.1.
• Align iOS package version metadata with the 2.28.1 release.

Diagram

graph TD
  A["package.json"] --> B["NPM package version: 2.28.1"] --> C["Consumers install 2.28.1"]
  D["android/build.gradle.kts"] --> E["Android native UC: 2.28.1"] --> F["Android app build"]

Loading

High-Level Assessment

The following are alternative approaches to this PR:

1. Single source of truth for version (e.g., version file + sync scripts)

• ➕ Reduces risk of forgetting to bump one of the platform/package version fields
• ➕ Makes releases more repeatable and easier to automate
• ➖ Adds release tooling complexity
• ➖ Requires adopting/maintaining synchronization in CI or pre-release scripts

2. Derive native dependency versions from package.json during build

• ➕ Avoids manual duplication of version numbers across JS and native build files
• ➕ Ensures Android/iOS native versions stay aligned with the JS package
• ➖ Can complicate Gradle/CocoaPods setup and caching
• ➖ May be harder to override native versions independently when needed

Recommendation: For a patch release, the current explicit bumps are acceptable and low-risk. If version drift has been an issue, introduce a single-source version file or release script to update package.json and native build pins together.

Files changed (2) +3 / -3

Other (2) +3 / -3

build.gradle.ktsBump Android native Usercentrics version to 2.28.1 +1/-1

Bump Android native Usercentrics version to 2.28.1

• Updates the Gradle Kotlin build configuration to use Usercentrics native SDK version 2.28.1 instead of 2.28.0.

android/build.gradle.kts

package.jsonBump JS package + iOS package metadata to 2.28.1 +2/-2

Bump JS package + iOS package metadata to 2.28.1

• Updates the NPM package version and the iOS package version metadata from 2.28.0 to 2.28.1 to match the release.

package.json

[pantoaibot]

PR Summary:

Release: 2.28.1 — version bump only

• Bumped SDK/package version to 2.28.1:
  • android/build.gradle.kts: usercentricsVersion from 2.28.0 -> 2.28.1
  • package.json: version and iosPackageVersion from 2.28.0 -> 2.28.1
• No functional, structural, or logic changes in source code.
• No dependency upgrades, performance changes, or breaking changes detected.

Reviewed by Panto AI

[codeant-ai]

CodeAnt AI finished reviewing your PR.

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (1) 📘 Rule violations (0) 📜 Skill insights (0)

1. Missing 2.28.1 changelog 🐞 Bug ⚙ Maintainability

Description

The PR bumps the published package/native versions to 2.28.1 but CHANGELOG.md still shows 2.28.0 as
the latest release, leaving 2.28.1 without release notes. This makes the release documentation
inconsistent with the shipped version.

Code

package.json[R3-10]

+  "version": "2.28.1",
  "description": "Usercentrics SDK",
  "homepage": "https://usercentrics.com",
  "main": "lib/index.js",
  "types": "lib/index.d.ts",
  "author": "Usercentrics <developer@usercentrics.com>",
  "iosPackageName": "react-native-usercentrics",
-  "iosPackageVersion": "2.28.0",
+  "iosPackageVersion": "2.28.1",

Evidence

The repo’s package version indicates a 2.28.1 release, but the changelog header indicates the newest
documented release is still 2.28.0.

package.json[1-11]
CHANGELOG.md[1-6]

Agent prompt

The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
The package is being released as 2.28.1, but `CHANGELOG.md` does not include a 2.28.1 section (it currently starts with 2.28.0). This leaves release notes out of sync with the released artifact.

## Issue Context
- `package.json` has been bumped to `2.28.1` (including `iosPackageVersion`).
- `CHANGELOG.md` still lists `2.28.0` as the latest entry.

## Fix Focus Areas
- CHANGELOG.md[1-10]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

---

[pantoaibot]

[VALIDATION] You bumped usercentricsVersion to "2.28.1" (new line 1). Confirm that the corresponding Android artifact (com.usercentrics.sdk:usercentrics-ui:2.28.1) is published and resolvable from your configured repositories. The dependency is referenced in the dependencies block (see reference lines 61-91); if the artifact is not available builds will fail. If you rely on a private Maven repository, ensure CI has access and repository coordinates are present in build.gradle or settings.gradle.

[pantoaibot]

Reviewed up to commit:be13b616e783ee40997577ea9882a914b418d00e

Additional Suggestion

Others

- The PR/summary notes that CHANGELOG.md entry for 2.28.1 is still missing. Add a short entry under a new 2.28.1 – header summarizing the changes in this release (or link to release notes), so releases are traceable and consumers can see what changed before publishing.

[Release Notes](https://docs.usercentrics.com/cmp_in_app_sdk/latest/about/history/)

### 2.28.1 – Jul 16, 2026
## Chores
* **[Android/iOS]** Bumped React Native bridge SDK to 2.28.1 and updated embedded native `UsercentricsUI` dependency

### 2.28.0 – Jul 8, 2026
## Fixes
* **[Android/iOS]** Fixed multiple overlapping banner instances on rapid `showFirstLayer`/`showSecondLayer` calls
* **[Android]** Fixed button spacing being ignored in the 2nd layer footer
* **[iOS]** Fixed Unity static package iOS build failing to compile
* **[PUR]** Fixed flexible special features/purposes in Consent-or-Pay being forced mandatory instead of showing a toggle
* **[Billing]** Fixed session buffer overcounting causing a spike in the Displays metric
* **[TCF]** Removed hard AppsFlyer import and fixed incorrect purpose-one treatment

Reviewed by Panto AI

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Around line 3-10: Add the missing 2.28.1 release entry to CHANGELOG.md,
documenting the changes included in this release and placing it in the
appropriate chronological position before merging. Keep the package version
metadata unchanged.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5e6187d9-aa3b-40b2-944c-a7a70c416bf8

📥 Commits

Reviewing files that changed from the base of the PR and between fbca38d and be13b61.

⛔ Files ignored due to path filters (2)

• package-lock.json is excluded by !**/package-lock.json
• sample/ios/Podfile.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• android/build.gradle.kts
• package.json