Releases · JPKCom/jpkcom-simple-lang

16 Jun 11:59

github-actions

v1.2.3

d48c76e

v1.2.3 Latest

Latest

Full Changelog: v1.2.2...v1.2.3

Assets 4

16 Jun 11:41

JPKCom

v1.2.2

98180f2

v1.2.2

Backport shared plugin-updater hardening (from jpkcom-acf-jobs / creationell-captcha audit).

Security fixes:
- Prefer exact match against manifest download_url over the slug heuristic
  so a tampered manifest cannot bypass the checksum gate.
- Timing-safe checksum comparison via hash_equals() with an is_string()
  guard against hash_file() === false.
- Manifest fetch via wp_safe_remote_get() (SSRF defense-in-depth).

Compatibility fixes:
- Contributors now provide display_name (no PHP warning, names shown in
  the plugin detail popup).
- no_update transient entry now carries new_version, package, tested and
  requires_php (no warning/deprecation on wp plugin list).

Assets 4