chore: release prep for v1.25.15 (#166)

Author: SunDevil311

CHANGELOG.md

@@ -22,6 +22,21 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
 
 ---
 
+## [1.25.15] - 2025-11-18
+
+### Added
+
+- Added `https://vercel-insights.com` to `script-src` and `connect-src` in `hooks.server.js` to allow for Vercel Analytics.
+
+### Changed
+
+- Added `vercel-insights.com` to the `disallowedHosts` list in `service-worker.js`, in order to prevent SW caching.
+- Bumped project version to `v1.25.15`.
+- Updated dependencies:
+  - `svelte` `5.43.10` → `5.43.12`
+
+---
+
 ## [1.25.14] - 2025-11-18
 
 ### Changed
@@ -1930,7 +1945,8 @@ This enables analytics filtering and CSP hardening for the audit environment.
 
 <!-- Link references -->
 
-[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.14...HEAD
+[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.15...HEAD
+[1.25.15]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.15
 [1.25.14]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.14
 [1.25.13]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.13
 [1.25.12]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.12

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@networkpro/web",
   "private": false,
-  "version": "1.25.14",
+  "version": "1.25.15",
   "description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
   "keywords": [
     "advisory",
@@ -88,7 +88,7 @@
     "dompurify": "^3.3.0",
     "posthog-js": "^1.295.0",
     "semver": "^7.7.3",
-    "svelte": "5.43.10"
+    "svelte": "5.43.12"
   },
   "devDependencies": {
     "@eslint/compat": "^2.0.0",

package.json

@@ -51,10 +51,10 @@ export async function handle({ event, resolve }) {
 
   const cspDirectives = [
     "default-src 'self';",
-    "script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com;",
+    "script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
     "style-src 'self' 'unsafe-inline';",
     "img-src 'self' data:;",
-    "connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com;",
+    "connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
     "font-src 'self' data:;",
     "form-action 'self';",
     "base-uri 'self';",

src/hooks.server.js

@@ -17,6 +17,7 @@ const isDev = location.hostname === 'localhost';
 const disallowedHosts = [
   'us.i.posthog.com', // Add PostHog to disallowed hosts
   'posthog.com', // Add PostHog to disallowed hosts
+  'vercel-insights.com', // Add Vercel to disallowed hosts
 ];
 
 import { build, files, version } from '$service-worker';