Opens in a new tab

Changelog

November 3, 2026
  • NEW Added a live preview to "Dialog & Widget » Dialog » Appearance", "Settings" and "Localization". It shows the real dialog with your unsaved changes before you save, in a desktop or mobile view, and shows how many changes are unsaved. The preview can be docked, moved, resized and maximized
  • NEW Added a live preview to "Blockers » Content Blockers » Appearance" and to the editing page of a Content Blocker. On the "Appearance" page, you can choose which preset (A–D) to preview
  • NEW Added 24 presets to the color assistant in "Dialog & Widget » Dialog » Appearance" and in the Setup Assistant, grouped into the styles Light, Dark, Bright and Soft. A preset applies a complete dialog appearance, including colors, corner radii and fonts. The "Default" preset restores the appearance Borlabs Cookie comes with
  • NEW Added categories, a category filter and a search to the Library. The type filter, category filter and search can be combined, and each type filter shows the number of matching packages
  • NEW Added the filter "Available Updates" to the Library. It lists all installed packages that have an update available, and you can update all of them at once with "Update all"
  • NEW Added the setting "Consent log retention period in months" to the new card "Consent settings" in "Settings » Admin & Plugin Settings". Consent logs are now kept for the set number of months (default: 24), no longer for the cookie lifetime. When you update, the retention period is set so that no consent log is deleted earlier than before
  • NEW Added a card to the Legacy Importer that deletes the database tables and options of Borlabs Cookie 2.x, which are no longer needed after the upgrade. The data of Borlabs Cookie 3.x is not affected
  • NEW Added "Discard changes" next to the save buttons of all settings pages. It discards your unsaved changes and reloads the page with the saved values. This applies to the settings pages of "Dialog & Widget", "Blockers » Content Blockers", "Consent Management » IAB TCF", "Library & Scanner" and "Settings"
  • IMPROVED Added a "Status" switch for every Service and Content Blocker to the package installation settings in the Library. It sets whether the Service or Content Blocker is active after the package is installed, reinstalled or updated. When reinstalling or updating, the current status is preselected
  • IMPROVED When all packages suggested by a Cloud Scan are installed through bulk installation or the details page of a suggestion, Borlabs Cookie now sends an email with the follow-up steps for these packages. Until now, only the Setup Assistant sent this email. It is sent once per scan
  • IMPROVED The WP-CLI commands library install, library uninstall, library update and library config-template now accept a package key as well as its ID, and library list now shows each package’s key
  • IMPROVED Added the options --aggregate-consents and --consent-log-retention-period to the WP-CLI command plugin-config
  • IMPROVED AI crawlers and AI agents whose user agent contains no generic bot keyword are now recognized as bots, for example ChatGPT-User, Claude-User, Perplexity-User, MistralAI-User, meta-externalagent and Google-Agent. They are handled according to the setting "Cookies for bots/crawlers"
  • IMPROVED If the widget is disabled and the privacy page has no element that opens the privacy preferences, the widget is now shown on the privacy page so visitors can always change their consent
  • IMPROVED The setting "Aggregate consents" has moved from "General Settings" to the new card "Consent settings" in "Admin & Plugin Settings". In WP-CLI, the option --aggregate-consents has moved from general-config to plugin-config
  • IMPROVED Package cards in the Library now show the package’s category, and badges show whether automatic updates overwrite the code or translations. The "Things to know" section now explains these badges and the package types
  • IMPROVED The Library now shows a message when no packages match the current filters, when no packages are installed, or when all installed packages are up to date
  • IMPROVED A corrupted stored configuration, for example one written by a migration tool, is now replaced with the default configuration and an error is logged, instead of the corrupted value being used
  • IMPROVED Improved and optimized overall code quality
  • ERROR RESOLVED The loading indicator of the GeoIP database and IAB TCF Global Vendor List downloads kept spinning when the download failed
  • ERROR RESOLVED After submitting a form with invalid values, the page did not always scroll to the first invalid field of that form
  • ERROR RESOLVED In the package installation results, components without a translated type name were shown with an empty type
October 12, 2026
  • ERROR RESOLVED The IAB TCF API was not signaled when the dialog was shown. Kudos to Andreas for finding the error.
September 28, 2026
  • NEW Added a notice in the WordPress admin when the URL of the website no longer matches the URL registered with the license
  • IMPROVED Improved the security of the Cloud Scan REST API endpoint
  • IMPROVED Links and text in tables within the dialog are no longer affected by third-party CSS
  • IMPROVED Improved and optimized overall code quality
  • ERROR RESOLVED The "Save" button was missing from the IAB TCF dialog when it was not part of the button order
  • ERROR RESOLVED In the package details of the Library, settings fields of a package were missing when they had no translation for the language of the website. The English text is now used instead
  • ERROR RESOLVED In the IAB TCF dialog, the legal description of a purpose was shown as an illustration when the purpose had no illustrations
September 16, 2026
  • IMPROVED Updated our build pipeline to resolve a naming collision between our CSS and JavaScript files that caused the JavaScript file to be generated as borlabs-cookie2.min.js. Since many third-party optimization plugins exclude our JavaScript based on its filename, the file is now generated as borlabs-cookie.min.js again.
  • ERROR RESOLVED Removed script module preload hints to prevent conflicts with WordPress import maps.
September 12, 2026
  • NEW Added support for IAB TCF 2.4.
  • NEW Added Critical CSS and preload tags for improved performance.
  • NEW Added widget background setting to improve readability.
  • NEW Added WP-CLI commands for regenerating the JavaScript configuration and CSS styling files, including automatic cache clearing.
  • NEW Added the filter hooks borlabsCookie/frontendResources/deferNonCriticalCss, borlabsCookie/frontendResources/inlineCriticalCss, and borlabsCookie/styleBuilder/modifyCriticalCss.
  • IMPROVED Enhanced WP-CLI commands and added support for changing additional settings.
  • IMPROVED Reworked and re-enabled the compact TCF layout, which had been disabled since version 3.4.2.1.
  • IMPROVED Added more detailed scanner status information when a scan fails, making it easier to identify the cause.
  • IMPROVED Standardized the English translation to use sentence case instead of title case.
  • IMPROVED Improved and optimized overall code quality.
  • ERROR RESOLVED Fixed unnecessary loading of widget and TCF JavaScript when both features are disabled or not in use.
August 12, 2026
  • SECURITY UPDATE An XSS vulnerability was reported and has since been fixed. The vulnerability is difficult to exploit, as attackers are limited to just 35 characters of malicious code, which is only executed when an administrator opens the consent logs. As of version 3.4.2.2, the consent logs can be opened safely again. Kudos to Jörg for bringing this vulnerability to our attention.
August 10, 2026
  • WORKAROUND As requested by the IAB, the TCF compact layout has been temporarily disabled. It will undergo revisions and be re-enabled with version 3.4.3, expected by late August to mid-September 2026.
June 11, 2026
  • NEW Added the filter hook borlabsCookie/styleBlocker/shouldBlockUrl.
  • IMPROVED Script Blocker now respects additional attributes.
  • IMPROVED Prepared the Cloud Scanner to provide more detailed information in future scans when a page cannot be scanned.
  • IMPROVED Added new database indexes to slightly improve query performance.
  • ERROR RESOLVED When viewing the provider information of a Content Blocker, all services associated with the provider were listed. To make it clearer which service consent is granted to, only the service assigned to the Content Blocker is now displayed.
April 28, 2026
  • NEW Added support for TCF device storage disclosures.
  • IMPROVED Compatibility with WordPress 7.0 has been improved.
  • IMPROVED The Google Analytics check in the Debug Console now also includes the Google Site Kit service.
  • IMPROVED Compatibility across PHP 7.4 and PHP 8.5 has been improved.
  • ERROR RESOLVED A rare JavaScript error that occurred when consent was updated to essential services only while consent still existed for a service that no longer exists has been fixed.
  • IMPROVED The telemetry system was improved. For more information, please see https://borlabs.io/borlabs-cookie/telemetry/.
  • ERROR RESOLVED The text in mails containing navigation instructions to the settings has been corrected, as the location have changed in version 3.4.
  • ERROR RESOLVED The text in the Debug Console containing navigation instructions to the settings has been corrected, as the labels and location have changed in version 3.4.
March 2, 2026
  • IMPROVED As announced in the mailing dated May 9, 2025, we are now moving on to the fourth phase of automatic transition to Borlabs Cookie 3.4. In this phase, all websites that are not part of a multisite network will request the upgrade too. The upgrade can still be disabled via the dashboard in Borlabs Cookie.