1.2.0
What's Changed
- Fix unreliable well-known rewrite flush causing domain handle verification failures by @kraftbj in #93
- Gardening: disable stale tasks by @jeherve in #109
- Align publication theme with the site.standard.theme.basic spec by @pfefferle in #110
- Clamp publication name and description to standard.site grapheme limits by @pfefferle in #108
- Send no-cache headers on the well-known verification routes by @pfefferle in #111
- Add Code of Conduct, Contributing, and Security policy by @pfefferle in #119
- Handle OpenSSL EC keygen failure gracefully in DPoP by @pfefferle in #117
- Add WordPress Playground blueprint for plugin preview by @pfefferle in #116
- chore: pin third-party GitHub Actions to commit SHAs by @mahangu in #121
- Fix: register Settings API options on init, not just admin_init by @pfefferle in #69
- Add
wp atmosphere backfillWP-CLI command by @kraftbj in #91 - Fix dropped cover image for CDN-offloaded featured images by @jeherve in #114
- Bump shivammathur/setup-php from 2.37.1 to 2.37.2 by @dependabot[bot] in #123
- Bump ramsey/composer-install from 5c2bcf28d7b060ef3c601d7b476d5430a7b46c27 to 26d8a556604053a9612623447203a691f406fbe6 by @dependabot[bot] in #125
- Reframe security-audit agent as defensive detection by @pfefferle in #126
- Add settings to control Bluesky reaction and reply import by @pfefferle in #122
- Exclude meta docs from release archives by @pfefferle in #127
- Request the ATmosphere team as reviewer when opening PRs by @pfefferle in #131
- Detach the scoped allowed_redirect_hosts filter even when the redirect throws by @pfefferle in #129
- Never log exception messages from DPoP proof generation by @pfefferle in #128
- Generalize Content_Parser into a selectable registry by @pfefferle in #112
- Judge the percent-decoded host in the URL safety gate by @pfefferle in #130
- Gate all error_log() output behind WP_DEBUG by @jeherve in #135
- Release 1.2.0 by @pfefferle in #137
New Contributors
Full Changelog: 1.1.1...1.2.0