Repository navigation
Releases: ArloSoftware/arlowp-plugin
Releases · ArloSoftware/arlowp-plugin
Release list
Version 5.1.2
What's Changed
- Release v5.1.2 by @ArloSoftwareTeam in #480
Enhancements
- Support for the 2026 Canadian time zone changes. The British Columbia,
Manitoba, Alberta and Yukon time zones sent by Arlo are now recognised. - System requirements now checks for outdated server time zone data affecting
the November 2026 Canadian time zone changes.
Bug fixes
- Event times use the UTC offset from Arlo when a time zone is not recognised
or the server's time zone data disagrees with it, and unrecognised time
zones no longer cause errors. - Corrected and added Arlo time zone mappings.
- Admin Events list start and finish dates now show the local clock time
rather than UTC beside a local time zone abbreviation. - Admin Events list flags events that use Arlo's stored UTC offset because
the server does not recognise the time zone or its rules disagree. - Fixed-offset time zone abbreviations now use a clear UTC offset label.
Full Changelog: v5.1.1...v5.1.2
Version 5.1.1
What's Changed
Bug fixes
- [arlo_event_rich_snippet] now safely returns no output outside an event list
context, preventing PHP warnings and deprecation notices.
Full Changelog: v5.1.0...v5.1.1
Version 5.1.0
What's Changed
Enhancements
- Theme Z: new design theme.
- Non-production deployment mode: sites using a test platform now sync daily or weekly rather than every 30 minutes, reducing unnecessary API traffic.
- Connection health tracking: sync auto-disables after sustained platform failures; admin settings shows a live status indicator and cleaner reconnect flow.
- Improved Google structured data: event and course rich snippets updated to the Google 2026 spec — correct attendance mode (online/in-person), eventStatus, RFC 3339 datetimes, and Course provider field (previously absent, making course pages ineligible for Google rich results).
- Shortcode validation indicator on the Pages settings tab: live check shows whether each assigned page contains the expected shortcode.
- Warning shown when two or more Arlo page types are assigned to the same host page.
- Admin Pages tab: each host-page tab now shows the live URL/slug of the assigned page, a private-page indicator, and direct View and Edit links.
- [arlo_event_presenters]: new layout=list attribute for list display.
- On activation, newly created Arlo pages are automatically assigned to their corresponding page type slot; Settings → Pages no longer opens with all dropdowns blank after a fresh install.
- Page-setup admin notice now shows two categorised lists: pages with no assignment under "Finish the setup", and assigned-but-unpublished pages (with status label) under "Review these pages".
Bug fixes
- Schema hash depended on the configured table prefix, causing a spurious mismatch on any non-wp_ prefix that dropped and recreated all Arlo tables and triggered a full re-import during plugin upgrades.
- Event, presenter, and venue detail pages could briefly show content from an in-progress import before sync completed.
- Plugin pages that have been deleted or unpublished now show a stale-assignment warning in admin with a recovery path; search form degrades gracefully on the front end rather than disappearing.
- Theme Z: corrected show-more button visibility on first load and grouped event paging in the new theme.
- Settings saved confirmation and all admin notices were silently discarded since the plugin's initial release.
- Import sync throttle was permanently bypassed — syncs ran on every cron tick unconditionally rather than respecting the minimum interval.
- Empty search form submission exposed the nonce in the browser address bar.
- [arlo_event_template_list_image_src]: urldecode attribute was ignored; URL decoding was always applied regardless of the attribute value.
- [arlo_event_template_summary]: digest attribute was mishandled for zero, negative, and non-integer values — output was suppressed or content was truncated unexpectedly.
- [arlo_event_presenters]: link='false' produced an empty anchor rather than plain text.
- Category and region filter selects had incorrect ARIA roles and missing translated labels.
- Draft or pending regionalized host page accessed by slug caused a 302 redirect loop when regions were configured.
Performance improvements
- Eliminated 1,000+ duplicate database queries per page load by caching the import ID for the request lifetime.
- Admin list pagination (events, templates, presenters, venues, sessions, online activities) replaced full-result fetches with count queries — events admin reduced from ~16s to ~49ms on large datasets.
- Front-end page loads no longer scan all bundled theme directories to resolve the active theme's assets.
Security
- Output escaping hardened across shortcodes, admin list tables, widgets, and the import log page to meet current WordPress coding standards.
- Capability and nonce enforcement strengthened on admin AJAX handlers and GET-parameter action handlers.
- Scheduler nonce moved from URL query string to POST body; snapshot callback nonce consumption made atomic.
- HMAC verification in the import crypto layer uses timing-safe comparison.
- SQL query text no longer included in importer error log messages.
- Sync log CSV export: field values sanitised against formula injection when the export is opened in a spreadsheet application.
- Removed the bundled demo Google Maps API key.
Compatibility
- Support for PHP up to 8.5.
- Support for WordPress 7.0.
New Contributors
- @tonghou23 made their first contribution in #471
Full Changelog: v4.2.0...v5.1.0
Version v4.3.0-beta.2
Merge pull request #471 from ArloSoftware/themes/theme.z theme.z
Version v4.3.0-beta.1
Merge pull request #472 from ArloSoftware/reconcile-release-4.3.1 Reconcile with released version, supporting PHP > 8.1 and latest WordPress
Version v4.3.0-beta.0
Merge pull request #468 from ArloSoftware/feature/update-readme Update README.md
v4.2.0
Version v4.2.0-beta.1
Bump version to 4.2.0
Version v4.2.0-beta.0
Add GitHub Action to Build Master