Skip to content

v2.1.0

Choose a tag to compare

View all tags
@Evy04 Evy04 released this 16 Aug 21:59
· 4 commits to main since this release
v2.1.0
a633eaf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Etherlabz Intercom Sync 2.1.0

Security-focused release, plus a full compliance pass for the WordPress.org directory and a redesigned settings screen.

Security

  • Token encryption reworked to AES-256-GCM with a random IV per value. Old-format values still decrypt and migrate automatically on the next save; if a stored value ever becomes undecryptable (security keys changed), the plugin now says so loudly instead of failing silently.
  • Stored secrets are never echoed into the settings page. Each credential shows as a locked chip with explicit Change and Remove controls.
  • The Fin cancel/refund/note endpoints now require the caller's email to match the order's billing email. If your Fin action config doesn't forward the customer email, add the header mapping — these endpoints return 400/404 without it.
  • Messenger inline settings JSON hardened against script-tag breakout.

Breaking

  • All options, hooks, cron events, AJAX actions and the REST namespace moved from the iws_ prefix to etherlabz_intercom_ (iws/v1 → etherlabz-intercom/v1). Settings migrate automatically on upgrade; custom code hooking iws_* filters and Fin configs pointing at iws/v1 URLs must be updated.
  • Minimum PHP is now 8.0 (the code already used PHP 8.0 syntax; the header now says so).

Also

  • Settings screen redesigned to match the Etherlabz design language.
  • Admin assets cache-bust on file changes, uninstall removes every option and cron (both prefixes), sync log no longer autoloads, cart-abandonment cron unschedules itself when disabled.
  • Tested up to WordPress 7.0. Passes the official Plugin Check with zero errors.

What's Changed

  • Exclude loose root screenshots from build zip by @Evy04 in #2
  • Security hardening + wp.org compliance pass, refreshed admin UI by @Evy04 in #3
  • Refresh admin screenshots to the redesigned UI by @Evy04 in #4
  • Rename the global prefix to etherlabz_intercom_ (v2.1.0) by @Evy04 in #5
  • Submission polish: readme accuracy + header/package cleanup by @Evy04 in #6
  • Warn clearly when stored secrets can no longer be decrypted by @Evy04 in #7
  • Explicit Change flow for secret fields, slimmer settings copy by @Evy04 in #8
  • Secret fields: Remove action, icon buttons, level control row by @Evy04 in #9
  • Fix stale asset caching; polish secret-field controls by @Evy04 in #10

Full Changelog: v2.0.0...v2.1.0

Contributors

Evy04
Assets 3
Loading