Release: 2.27.3 by asadraza-usercentrics · Pull Request #223 · Usercentrics/react-native-sdk

asadraza-usercentrics · 2026-06-25T09:21:42Z

Summary by CodeRabbit

Bug Fixes
- Improved initialization error reporting when selected providers are no longer available.
- Resolved an iOS packaging issue that could trigger install warnings due to an extra privacy file in the app package.
Chores
- Updated the SDK to version 2.27.3 across supported platforms.
- Tightened the public API surface and adjusted Android packaging rules.

codeant-ai · 2026-06-25T09:21:46Z

Skipping CodeAnt AI review — this PR is a back-merge between long-lived branches (release/2.27.3 → master). The diff here has already been reviewed when the underlying commits landed on the source branch, so re-running analysis would produce duplicate findings on already-reviewed code.

If you want to analyze this anyway (e.g. you resolved conflicts with new logic), comment @codeant-ai : review and CodeAnt will start a review.

coderabbitai · 2026-06-25T09:21:54Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c28a83c8-7baa-44c8-b19c-489480e48fb5

📥 Commits

Reviewing files that changed from the base of the PR and between 1514998 and 5eb945d.

⛔ Files ignored due to path filters (3)

package-lock.json is excluded by !**/package-lock.json
sample/ios/Podfile.lock is excluded by !**/*.lock
sample/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (3)

CHANGELOG.md
android/build.gradle.kts
package.json

📝 Walkthrough

Walkthrough

Updated release metadata to 2.27.3 across the changelog, Android dependency version, and package metadata.

Changes

Release 2.27.3

Layer / File(s)	Summary
Release metadata and notes `package.json`, `android/build.gradle.kts`, `CHANGELOG.md`	`package.json` updates `version` and `iosPackageVersion` to 2.27.3, `android/build.gradle.kts` bumps `usercentricsVersion` to 2.27.3, and `CHANGELOG.md` adds the 2.27.3 release entry.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Usercentrics/react-native-sdk#156: Updates the same release metadata pattern across package.json, android/build.gradle.kts, and CHANGELOG.md.
Usercentrics/react-native-sdk#160: Bumps the same Android and package version fields for another patch release.
Usercentrics/react-native-sdk#172: Changes the same version variables and release note entry for a nearby SDK release.

Suggested labels

Review effort 1/5, size:S

Suggested reviewers

islameldesoky95
rodrigo-leal-usercentrics
uc-brunosouza

Poem

🐰 Hop hop, the patch is here,
2.27.3 brings release cheer.
I nibbled logs and version ink,
Android and iOS now link.
Hoppity, tidy, bright, and new!

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the release bump to version 2.27.3.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch release/2.27.3

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

qodo-code-review · 2026-06-25T09:22:11Z

PR Summary by Qodo

Release 2.27.3: changelog + version bumps (Android & React Native)
📝 Documentation ⚙️ Configuration changes 🕐 Less than 10 minutes

Description

• Add 2.27.3 release notes covering ACM init fix, SPM zip cleanup, and Android API/ProGuard
 tightening.
• Bump Android Gradle version constant to 2.27.3.
• Bump npm package and iOS package versions to 2.27.3.

Diagram

graph TD
  A["CHANGELOG.md"] --> B["Release notes 2.27.3"]
  C["android/build.gradle.kts"] --> D["Android artifact v2.27.3"]
  E["package.json"] --> F["RN package v2.27.3"]
  E --> G["iOS package v2.27.3"]

High-Level Assessment

The PR follows the standard release process: record release notes and align all published version identifiers to 2.27.3. Alternatives (e.g., deriving versions from a single source file) could reduce repetition, but are out of scope for a patch release and would add process risk.

Files changed (3) +11 / -3

Documentation (1) +8 / -0

CHANGELOG.mdAdd 2.27.3 release notes +8/-0

Add 2.27.3 release notes

• Adds a new 2.27.3 section with fixes (ACM initialization failure surfaced; iOS SPM zip stray PrivacyInfo file) and Android chores (reduced public API surface; tightened ProGuard rules).

CHANGELOG.md

Other (2) +3 / -3

build.gradle.ktsBump Android SDK version constant to 2.27.3 +1/-1

Bump Android SDK version constant to 2.27.3
• Updates the 'usercentricsVersion' string from 2.27.1 to 2.27.3 for Android build/publishing alignment.
android/build.gradle.kts

package.jsonBump npm and iOS package versions to 2.27.3 +2/-2

Bump npm and iOS package versions to 2.27.3
• Updates the package 'version' and 'iosPackageVersion' from 2.27.1 to 2.27.3 to match the release.
package.json

pantoaibot · 2026-06-25T09:22:38Z

PR Summary:

Release 2.27.3 — version bumps and changelog for fixes and Android API tightening.

Bumped library versions: android/build.gradle.kts -> usercentricsVersion = "2.27.3"; package.json -> "version": "2.27.3" and "iosPackageVersion": "2.27.3".
Updated CHANGELOG with highlights:
- Fix: ACM (Additional Consent Mode) initialization now surfaces failure when selected ATP providers are missing from Google's ATP CDN instead of continuing with an empty provider list.
- Fix (iOS): removed stray PrivacyInfo.xcprivacy at SPM zip root to prevent pod install warnings.
- Chore (Android): reduced public API surface — UCButtonSettings, UCButtonType, UCToggle, PredefinedUIAlertDialogFactory, UCSecondLayerViewModel, and related UI internals are now internal or annotated @InternalUsercentricsApi (they were never documented public API).
- Chore (Android): audited and tightened consumer ProGuard rules.
Note: No other source logic changes shown in the diffs. Potential breaking impact for downstream consumers who were using the now-internal Android types or relying on previous ProGuard rules — update integrations accordingly.

_{Reviewed by Panto AI}

pantoaibot · 2026-06-25T09:24:02Z

Reviewed up to commit:5eb945d62e1594982c51a76b76951782a8a736f1

_{Reviewed by Panto AI}

qodo-code-review · 2026-06-25T09:24:19Z

Code Review by Qodo

🐞 Bugs (1) 📘 Rule violations (0) 📜 Skill insights (0)

1. Legacy Gradle version skew 🐞 Bug ≡ Correctness

Description

This PR bumps the Android dependency version in android/build.gradle.kts to 2.27.3, but
android/build-legacy.gradle remains pinned to 2.27.1. Consumers building via the legacy Gradle
script (which is shipped in the npm package) will resolve a different Usercentrics native SDK
version than consumers building via the Kotlin DSL script, leading to inconsistent behavior across
integration paths.

Code

android/build.gradle.kts[1]
+val usercentricsVersion = "2.27.3"

Evidence

The Kotlin DSL build file now depends on usercentrics-ui:2.27.3, while the legacy Gradle script
still defines and uses usercentrics_version = "2.27.1". Since package.json includes the entire
android directory in the published files list, the legacy script remains part of the distributed
package and can be used by consumers, causing the dependency version skew.

android/build.gradle.kts[1-2]
android/build-legacy.gradle[1-2]
android/build-legacy.gradle[70-75]
package.json[12-16]

Agent prompt

The issue below was found during a code review. Follow the provided context and guidance below and implement a solution

## Issue description
The release bump updates `android/build.gradle.kts` to `2.27.3`, but the legacy Android build script `android/build-legacy.gradle` still pins `com.usercentrics.sdk:usercentrics-ui` to `2.27.1`. This leaves two Android build entrypoints resolving different native SDK versions.

## Issue Context
The `android/` directory is part of the published npm package, so the legacy build script remains available to consumers.

## Fix Focus Areas
- android/build-legacy.gradle[1-2]
- android/build-legacy.gradle[70-75]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

asadraza-usercentrics added 2 commits June 25, 2026 09:04

Release: 2.27.3

dea17dd

Release: 2.27.3

5eb945d

uc-brunosilva requested review from islameldesoky95, luislino-uc and uc-brunosilva June 25, 2026 09:23

uc-brunosilva assigned asadraza-usercentrics Jun 25, 2026

uc-brunosilva approved these changes Jun 25, 2026

View reviewed changes

pantoaibot Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread android/build.gradle.kts

pantoaibot Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread package.json

pantoaibot Bot reviewed Jun 25, 2026

View reviewed changes

Comment thread CHANGELOG.md

islameldesoky95 approved these changes Jun 25, 2026

View reviewed changes

asadraza-usercentrics merged commit 9b26528 into master Jun 25, 2026
23 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release: 2.27.3#223

Release: 2.27.3#223
asadraza-usercentrics merged 2 commits into
masterfrom
release/2.27.3

asadraza-usercentrics commented Jun 25, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

codeant-ai Bot commented Jun 25, 2026

Uh oh!

coderabbitai Bot commented Jun 25, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Poem

❌ Failed checks (1 warning)

Uh oh!

qodo-code-review Bot commented Jun 25, 2026

Uh oh!

pantoaibot Bot commented Jun 25, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pantoaibot Bot commented Jun 25, 2026

Uh oh!

qodo-code-review Bot commented Jun 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

asadraza-usercentrics commented Jun 25, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

codeant-ai Bot commented Jun 25, 2026

Uh oh!

coderabbitai Bot commented Jun 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Poem

❌ Failed checks (1 warning)

Uh oh!

qodo-code-review Bot commented Jun 25, 2026

PR Summary by Qodo

Uh oh!

pantoaibot Bot commented Jun 25, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pantoaibot Bot commented Jun 25, 2026

Uh oh!

qodo-code-review Bot commented Jun 25, 2026

Code Review by Qodo

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

asadraza-usercentrics commented Jun 25, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 25, 2026 •

edited

Loading