Add to changelog

Author: cderv

news/changelog-1.9.md

@@ -33,6 +33,7 @@ All changes included in 1.9:
 ### `website`
 
 - Algolia Insights now uses privacy-friendly defaults: `useCookie: false` with random session tokens when cookie consent is not configured. When `cookie-consent: true` is enabled, Algolia scripts are deferred and only use cookies after user grants "tracking" consent, ensuring GDPR compliance.
+- `cookie-content: { type: express }` is now the default. Previously it was `type: implied`. It now means this will block cookies until the user expressly agrees to allow them (or continue blocking them if the user doesn’t agree).
 
 ## `publish`