CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file, per the Keep a Changelog standard, and will adhere to Semantic Versioning.

Unreleased - TBD

1.2.0 - 2023-10-16

Note that this release bumps the WordPress minimum version from 5.7 to 5.8.

Added

• Ensure that saving using the keyboard shortcut Ctrl|Command + S triggers the insecure content check (props @Sidsector9, @dinhtungdu, @jeffpaul, @faisal-alvi via #56).
• New admin screen to bulk fix insecure content (props @kmgalanakis, @peterwilsoncc via #112).
• Composer, with PHPCBF and PHPCS to aid with coding standards (props @cameronterry, @peterwilsoncc via #127).
• Check for minimum required PHP version before loading the plugin (props @kmgalanakis, @peterwilsoncc via #135).
• Repo Automater GitHub Action added to automate common repo operations (props @iamdharmesh, @jeffpaul via #142).

Changed

• Bump WordPress "tested up to" version to 6.3 (props @kmgalanakis, @jeffpaul, @dkotter via #140, #144).
• Bump WordPress minimum supported version from 5.7 to 5.8 (props @iamdharmesh, @dkotter via #145).

Fixed

• Properly handle fixing of multiple different instances of insecure content (props @kmgalanakis, @iamdharmesh via #139).
• Ensure all Cypress E2E tests pass when running on WordPress 6.3 (props @iamdharmesh, @dkotter via #145).

Security

• Bump stylelint from 9.10.1 to 15.10.1 (props @dependabot, @ravinderk via #126).
• Bump cypress from 11.2.0 to 13.2.0, @10up/cypress-wp-utils from 0.1.0 to 0.2.0 and @wordpress/env from 5.8.0 to 8.7.0 (props @iamdharmesh, @dkotter via #145).
• Bump postcss from 8.4.27 to 8.4.31 (props @dependabot, @Sidsector9 via #147).

1.1.0 - 2023-06-21

Added

• View element link to highlight and auto-scroll to the insecure element (props @cadic, @peterwilsoncc, @psorensen, @adamsilverstein, @dkotter via #73).

Changed

• Bump WordPress "tested up to" version 6.2 (props @Sidsector9, @iamdharmesh via #117).
• Update the Dependency Review GitHub Action (props @jeffpaul, @Sidsector9 via #122).

Fixed

• Update dependencies of javascript assets (props @cadic, @peterwilsoncc, @psorensen, @adamsilverstein, @dkotter via #73).
• Ensure that HTML blocks and converted classic editor blocks are correctly checked for insecure content (props @nateconley, @Sidsector9 via #108).

Security

• Bump simple-git from 3.15.1 to 3.16.0 (props @dependabot via #107).
• Bump json5 from 1.0.1 to 1.0.2 (props @dependabot via #110).
• Bump ua-parser-js from 1.0.2 to 1.0.33 and browser-sync from 2.27.11 to 2.28.1 (props @dependabot via #111).
• Bump engine.io from 6.4.1 to 6.4.2 (props @dependabot via #119).
• Bump socket.io-parser from 4.2.2 to 4.2.3 (props @dependabot via #121).

1.0.3 - 2023-01-09

Note that this release bumps the WordPress minimum version from 5.3 to 5.7 and the PHP minimum version from 7.0 to 7.4.

Added

• Documentation for our custom WP-CLI commands (props @csloisel, @iamdharmesh via #99).
• Setup E2E testing using Cypress (props @cadic, @iamdharmesh via #75).

Changed

• Bump minimum PHP version from 7.0 to 7.4 (props @Sidsector9, @iamdharmesh, @vikrampm1 via #81).
• Bump minimum WordPress version from 5.3 to 5.7 (props @Sidsector9, @iamdharmesh, @vikrampm1 via #81).
• Update Support Level from Active to Stable (props @jeffpaul, @dkotter via #80).
• Bump WordPress version "tested up to" 6.1 (props @jayedul, @dkotter via #97).

Security

• Bump terser from 4.8.0 to 4.8.1 (props @dependabot via #79).
• Bump loader-utils from 1.4.0 to 1.4.2 (props @dependabot via #87).
• Bump minimatch from 3.0.4 to 3.1.2 (props @dependabot via #88).
• Bump engine.io from 3.2.1 to 6.2.1 (props @dependabot via #90).
• Bump browser-sync from 2.26.12 to 2.27.11 (props @dependabot via #90, #104).
• Bump color-string from 1.5.3 to 1.9.1 (props @dependabot via #91).
• Bump is-svg from 4.2.1 to 4.3.2 and postcss-svgo from 4.0.2 to 4.0.3 (props @dependabot via #92).
• Bump browserslist from 4.14.0 to 4.16.5 (props @dependabot via #94).
• Bump ini from 1.3.5 to 1.3.8 (props @dependabot via #96).
• Bump decode-uri-component from 0.2.0 to 0.2.2 (props @dependabot via #98).
• Bump json5 from 1.0.1 to 1.0.2 (props @dependabot via #102).
• Bump qs from 6.2.3 to 6.11.0 (props @dependabot via #104).

1.0.2 - 2022-06-27

Added

• Dependency security scanning (props @jeffpaul via #70).

Changed

• Bump WordPress version "tested up to" 6.0 (props @cadic via #74).

Security

• Bump minimist from 1.2.5 to 1.2.6 (props @dependabot via #67).
• Bump postcss from 7.0.32 to 7.0.39 (props @dependabot via #68).

1.0.1 - 2022-02-17

Fixed

• Ensure we support WordPress 5.9 (props @dkotter, @mohitwp, @peterwilsoncc via #64).

1.0.0 - 2021-08-24

Added

• Initial public release! 🎉