Security update

This is a security release for Google Tag 2.x. No other changes have been made since 2.0.7.

Google Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011
Google Tag - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-012

NOTES
- This release is compatible with Drupal 8.8, 8.9, 9.x, or 10.x.
- It may be necessary to apply the core patch in [#3114467] if the GTM snippets are no longer added to the page. This applies if other modules defining condition plugins are used on the site.

Resolves AI (Artificial Intelligence) - Access bypass, Information disclosure - SA-CONTRIB-2025-004

Also:

Added CSRF check on the Deepchat endpoint.

See AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003.

See Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001.

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Few notes to take into account:

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Few notes to take into account:

• Updated session clear

Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073