Skip to content

1.6.3

Latest
Latest

Choose a tag to compare

View all tags
@dkotter dkotter released this 29 Oct 19:25
1.6.3
44f76d6
This commit was signed with the committer’s verified signature.
dkotter Darin Kotter
GPG key ID: 9CA69474B7C871DE
Verified
Learn about vigilant mode.

This is a security release, it is recommended to upgrade immediately.

Added

  • "Settings" page link right on the plugins page to review the settings of the plugin from there directly (#92).

Changed

  • Change our default capability from edit_posts to manage_categories. Note: this is a breaking change for Authors and Contributors who will no longer have access to trigger a catalog indexing (GHSA-38fv-295q-m8cf).
  • Bump WordPress tested-up-to version 7.1 (#84, #110, #119).
  • Bump minimum supported WordPress version to 6.6 (#85).

Fixed

  • Fatal error accessing object cache properties that may be protected/private in drop-ins (#96).
  • Ensure the index deletion properly deletes terms (GHSA-r5x5-g636-fr9r).

Security

Developer

  • Update all third-party actions our workflows rely on to use versions based on specific commit hashes (#79).
  • Use cross system bash interpreter, #!/usr/bin/env bash (#83).
  • Fix workflow permissions (#90).
  • Fix issue with attaching release assets during release deploy action (#94).
  • Added Cypress test cases (#97).
  • Added translation functions to button labels and refactored ToolsPage class to use esc_html_e() and esc_attr_e() for improved localization support and code consistency (#101).
  • Update NPM dev dependencies via npm audit fix` (#103).
  • Add Patchstack security-reporting FAQ (#104).
  • E2E tests: update 10up/cypress-wp-utils to 0.7.2 (#121).
  • Bump 10up-toolkit from 6.0.1 to 6.5.0 (#93).
  • Bump @babel/core from 7.24.3 to 7.29.7 (#116).
  • Bump @babel/plugin-transform-modules-systemjs from 7.24.1 to 7.29.7 (#115).
  • Bump baseline-browser-mapping from 2.9.19 to 2.11.34 (#125).
  • Bump brace-expansion from 1.1.12 to 1.1.21 (#125).
  • Bump browserslist from 4.28.1 to 4.29.5 (#125).
  • Bump compression from 1.7.4 to 1.8.2 (#91, #125).
  • Bump fast-uri from 3.1.0 to 3.1.9 (#115, #125).
  • Bump fast-xml-parser from 5.9.3 to 5.11.2 (#125).
  • Bump flatted from 3.3.1 to 3.4.2 (#115).
  • Bump follow-redirects from 1.15.11 to 1.16.2 (#115, #125).
  • Bump http-proxy-middleware from 2.0.6 to 2.0.11 (#87, #125).
  • Bump immutable from 4.3.5 to 4.3.9 (#109).
  • Bump inquirer from 8.2.6 to 8.2.7 (#98).
  • Bump js-yaml from 3.14.2 to 3.15.2 (#125).
  • Bump on-headers from 1.0.2 to 1.1.0 (#91).
  • Bump launch-editor from 2.12.0 to 2.14.2 (#115, #125).
  • Bump lodash from 4.17.21 to 4.18.1 (#105, #115).
  • Bump node-forge from 1.3.3 to 1.4.0 (#115).
  • Bump phpunit/phpunit from 9.6.13 to 9.6.33 (#106).
  • Bump postcss from 8.4.38 to 8.5.16 (#115).
  • Bump qs from 6.14.1 to 6.15.3 (#108, #115).
  • Bump shell-quote from 1.8.3 to 1.9.0 (#115).
  • Bump squizlabs/php_codesniffer from 3.7.2 to 3.13.6 (#118).
  • Bump svgo from 3.2.0 to 3.3.3 (#115).
  • Bump tar-fs from 2.1.1 to 3.0.8 and from 3.0.5 to 3.0.8, and from 2.1.2 to 3.0.9 and from 3.0.8 to 3.0.9, and from 2.1.3 to 2.1.4 and from 3.0.9 to 3.1.1 (#81, #89, #99).
  • Bump webpack from 5.94.0 to 5.105.0 (#107).
  • Bump webpack-dev-server from 5.2.2 to 5.2.5 (#115).
  • Bump wp-coding-standards/wpcs from 3.0.1 to 3.4.1 (#118).
  • Bump ws from 8.19.0 to 8.22.0 and from 7.5.10 to 7.5.13 (#125).
  • Remove extract-zip (#125).
  • Remove tmp (#98).

New Contributors

Full Changelog: 1.6.2...1.6.3
View closed items in the milestone.

Contributors

heyjones, sanketio, and 5 other contributors
Assets 3
Loading