chore: release prep for v1.25.16 (#167)

Author: SunDevil311

CHANGELOG.md

@@ -22,6 +22,22 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.16] - 2025-11-18
+
+### Changed
+
+- Removed `vercel-insights.com` from the `disallowedHosts` list in `service-worker.js`.
+
+### Removed
+
+- Removed `https://vercel-insights.com` from `script-src` and `connect-src` in `hooks.server.js`.
+
+### Notes
+
+- **Analytics:** Reverted Vercel Analytics integration due to inline script injection requirement. Continuing with PostHog Cloud until migration to CSP-compliant Matomo is feasible.
+
+---
+
 ## [1.25.15] - 2025-11-18
 
 ### Added
@@ -1945,7 +1961,8 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.15...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.16...HEAD
+[1.25.16]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.16
 [1.25.15]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.15
 [1.25.14]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.14
 [1.25.13]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.13

cspell.json

@@ -46,6 +46,7 @@
     "lsheet",
     "Mailvelope",
     "Maricopa",
+    "Matomo",
     "mdsvex",
     "MSYS",
     "navigations",

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.15",
+  "version": "1.25.16",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",

package.json

@@ -51,10 +51,10 @@ export async function handle({ event, resolve }) {
 
   const cspDirectives = [
     "default-src 'self';",
-    "script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
+    "script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com;",
     "style-src 'self' 'unsafe-inline';",
     "img-src 'self' data:;",
-    "connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
+    "connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com;",
     "font-src 'self' data:;",
     "form-action 'self';",
     "base-uri 'self';",

src/hooks.server.js

@@ -17,7 +17,6 @@ const isDev = location.hostname === 'localhost';
 const disallowedHosts = [
   'us.i.posthog.com', // Add PostHog to disallowed hosts
   'posthog.com', // Add PostHog to disallowed hosts
-  'vercel-insights.com', // Add Vercel to disallowed hosts
 ];
 
 import { build, files, version } from '$service-worker';