Releases: 10up/insecure-content-warning
Releases · 10up/insecure-content-warning
1.2.1
Note that this release bumps the WordPress minimum version from 5.8 to 6.4.
Changed
- Bump WordPress "tested up to" version to 6.6 (props @QAharshalkadu, @ankitguptaindia, @jeffpaul, @dkotter via #152, #153, #168, #176).
- Bump WordPress minimum supported version from 5.8 to 6.4 (props @jeffpaul, @ankitguptaindia, @dkotter via #168, #176).
- Changed import of
PluginPostStatusInfo
component from@wordpress/edit-post
to@wordpress/editor
(props @gabriel-glo, @dkotter via #178).
Security
- Bump
@babel/traverse
from 7.22.10 to 7.23.2 (props @dependabot, @peterwilsoncc via #150). - Bump
axios
from 0.25.0 to 1.7.4 and@wordpress/scripts
from 26.17.0 to 26.19.0 (props @dependabot, @ravinderk, @faisal-alvi via #155, #179). - Bump
express
from 4.18.2 to 4.19.2,follow-redirects
from 1.15.3 to 1.15.6 andwebpack-dev-middleware
from 5.3.3 to 5.3.4 (props @dependabot, @Sidsector9 via #167). - Bump
braces
from 3.0.2 to 3.0.3,pac-resolver
from 7.0.0 to 7.0.1,socks
from 2.7.1 to 2.8.3,ws
from 7.5.9 to 7.5.10 and removedip
(props @dependabot, @iamdharmesh via #172).
Developer
- Support for the WordPress.org plugin preview (props @dkotter, @jeffpaul via #156).
- Clean up NPM dependencies and update node to v20 (props @dhanendran, @iamdharmesh, @Sidsector9, @dkotter via #154, #160).
- Update the users in
CODEOWNERS
(props @jeffpaul, @dkotter via #157). - Replaced
lee-dohm/no-response
withactions/stale
to help with closing no-response/stale issues (props @jeffpaul, @dkotter via #165). - Bumped
actions/upload-artifact
from v3 to v4 (props @iamdharmesh, @jeffpaul via #169). - Added a "Testing" section to the
CONTRIBUTING.md
file (props @kmgalanakis, @jeffpaul via #170). - Move from
actions/upload-release-asset
tosoftprops/action-gh-release
Github action (props @Sidsector9, @jeffpaul via #177). - Update repo badges, add WordPress Playground badge (props @jeffpaul, @dkotter via #180).
- Run E2E tests on the zip generated by "Build release zip" action and fix failing tests (props @dkotter, @iamdharmesh via #182).
New Contributors
- @QAharshalkadu made their first contribution in #152
- @dhanendran made their first contribution in #154
- @ankitguptaindia made their first contribution in #168
- @gabriel-glo made their first contribution in #178
Full Changelog: 1.2.0...1.2.1
View closed items in the milestone.
1.2.0
Note that this release bumps the WordPress minimum version from 5.7 to 5.8.
Added
- Ensure that saving using the keyboard shortcut
Ctrl|Command + S
triggers the insecure content check (props @Sidsector9, @dinhtungdu, @jeffpaul, @faisal-alvi via #56). - New admin screen to bulk fix insecure content (props @kmgalanakis, @peterwilsoncc via #112).
- Composer, with PHPCBF and PHPCS to aid with coding standards (props @cameronterry, @peterwilsoncc via #127).
- Check for minimum required PHP version before loading the plugin (props @kmgalanakis, @peterwilsoncc via #135).
- Repo Automater GitHub Action added to automate common repo operations (props @iamdharmesh, @jeffpaul via #142).
Changed
- Bump WordPress "tested up to" version to 6.3 (props @kmgalanakis, @jeffpaul, @dkotter via #140, #144).
- Bump WordPress minimum supported version from 5.7 to 5.8 (props @iamdharmesh, @dkotter via #145).
Fixed
- Properly handle fixing of multiple different instances of insecure content (props @kmgalanakis, @iamdharmesh via #139).
- Ensure all Cypress E2E tests pass when running on WordPress 6.3 (props @iamdharmesh, @dkotter via #145).
Security
- Bump
stylelint
from 9.10.1 to 15.10.1 (props @dependabot, @ravinderk via #126). - Bump
cypress
from 11.2.0 to 13.2.0,@10up/cypress-wp-utils
from 0.1.0 to 0.2.0 and@wordpress/env
from 5.8.0 to 8.7.0 (props @iamdharmesh, @dkotter via #145). - Bump
postcss
from 8.4.27 to 8.4.31 (props @dependabot, @Sidsector9 via #147).
New Contributors
- @faisal-alvi made their first contribution in #56
- @kmgalanakis made their first contribution in #112
- @ravinderk made their first contribution in #126
- @cameronterry made their first contribution in #127
Full Changelog: 1.1.0...1.2.0
View closed items in the milestone.
1.1.0
Added
View element
link to highlight and auto-scroll to the insecure element (props @cadic, @peterwilsoncc, @psorensen, @adamsilverstein, @dkotter via #73).
Changed
- Bump WordPress "tested up to" version 6.2 (props @Sidsector9, @iamdharmesh via #117).
- Update the Dependency Review GitHub Action (props @jeffpaul, @Sidsector9 via #122).
Fixed
- Update dependencies of javascript assets (props @cadic, @peterwilsoncc, @psorensen, @adamsilverstein, @dkotter via #73).
- Ensure that HTML blocks and converted classic editor blocks are correctly checked for insecure content (props @nateconley, @Sidsector9 via #108).
Security
- Bump
simple-git
from 3.15.1 to 3.16.0 (props @dependabot via #107). - Bump
json5
from 1.0.1 to 1.0.2 (props @dependabot via #110). - Bump
ua-parser-js
from 1.0.2 to 1.0.33 andbrowser-sync
from 2.27.11 to 2.28.1 (props @dependabot via #111). - Bump
engine.io
from 6.4.1 to 6.4.2 (props @dependabot via #119). - Bump
socket.io-parser
from 4.2.2 to 4.2.3 (props @dependabot via #121).
New Contributors
- @nateconley made their first contribution in #108
Full Changelog: 1.0.3...1.1.0
View closed items in the milestone.
1.0.3
Note that this release bumps the WordPress minimum version from 5.3 to 5.7 and the PHP minimum version from 7.0 to 7.4.
Added
- Documentation for our custom WP-CLI commands (props @csloisel, @iamdharmesh via #99).
- Setup E2E testing using Cypress (props @cadic, @iamdharmesh via #75).
Changed
- Bump minimum PHP version from 7.0 to 7.4 (props @Sidsector9, @iamdharmesh, @vikrampm1 via #81).
- Bump minimum WordPress version from 5.3 to 5.7 (props @Sidsector9, @iamdharmesh, @vikrampm1 via #81).
- Update Support Level from
Active
toStable
(props @jeffpaul, @dkotter via #80). - Bump WordPress version "tested up to" 6.1 (props @jayedul, @dkotter via #97).
Security
- Bump
terser
from 4.8.0 to 4.8.1 (props @dependabot via #79). - Bump
loader-utils
from 1.4.0 to 1.4.2 (props @dependabot via #87). - Bump
minimatch
from 3.0.4 to 3.1.2 (props @dependabot via #88). - Bump
engine.io
from 3.2.1 to 6.2.1 (props @dependabot via #90). - Bump
browser-sync
from 2.26.12 to 2.27.11 (props @dependabot via #90, #104). - Bump
color-string
from 1.5.3 to 1.9.1 (props @dependabot via #91). - Bump
is-svg
from 4.2.1 to 4.3.2 andpostcss-svgo
from 4.0.2 to 4.0.3 (props @dependabot via #92). - Bump
browserslist
from 4.14.0 to 4.16.5 (props @dependabot via #94). - Bump
ini
from 1.3.5 to 1.3.8 (props @dependabot via #96). - Bump
decode-uri-component
from 0.2.0 to 0.2.2 (props @dependabot via #98). - Bump
json5
from 1.0.1 to 1.0.2 (props @dependabot via #102). - Bump
qs
from 6.2.3 to 6.11.0 (props @dependabot via #104).
New Contributors
- @cadic made their first contribution in #75
- @iamdharmesh made their first contribution in #75
- @Sidsector9 made their first contribution in #81
- @vikrampm1 made their first contribution in #81
- @jayedul made their first contribution in #97
Full Changelog: 1.0.2...1.0.3
View closed items in the milestone.
1.0.2
Added
Changed
Security
- Bump
minimist
from 1.2.5 to 1.2.6 (props @dependabot via #67). - Bump
postcss
from 7.0.32 to 7.0.39 (props @dependabot via #68).
Full Changelog: 1.0.1...1.0.2
View all closed issues in the milestone.
1.0.1
Fixed
- Ensure we support WordPress 5.9 (props @dkotter, @mohitwp, @peterwilsoncc via #64).