v0.6.0 — Download Keep-List and Hardening

The first release whose GitHub download holds only the plugin, with a hardened PDF proxy, escaped shortcode output, and a current build toolchain.

What's new

• Add a download keep-list and archive check #25
• Pin the contents of the GitHub download #54

What's fixed

• Echo the admin dependencies after a Shortcake preview #69
• Fix the implode argument order in the class autoloader for PHP 8 #24
• Drop the defaults on the shortcode callback signature #68
• Fill the plugin header and align the version constant #83

Security

• Restrict the PDF asset proxy and escape shortcode attributes #82
• Turn off the pdf.js glyph compiler in the viewer #65
• Apply the in-range lockfile update #64
• Override minimatch to the patched release #63
• Override lodash to the patched release #62
• Move gulp-strip-css-comments to 3 #61
• Move gulp-coffee to 3 #60
• Move gulp to 5 #59
• Move gulp-sass to 6 on Dart Sass #56

Maintenance and tooling

• Set the plugin version to 0.6.0 #84
• Call the shared CI chain from ci.yml #72
• Run the checks in GitHub Actions #49
• Add Rector, PHPStan, and Pint to the first-party PHP #47
• Test the Gulp build and the plugin JavaScript #58
• Pin the shortcode class autoloader #53
• Add PHP tests for the loader and every shortcode #52
• Adopt the PHP 8.2 floor and Pest 5 #44
• Add a PHPUnit harness and a first test #43
• Sync shared skills and rules from uams-claude-skills #81
• Sync shared skills and rules from uams-claude-skills #70
• Sync shared skills and rules from uams-claude-skills #67
• Sync shared skills and rules from uams-claude-skills #22
• Sync shared skills and rules from uams-claude-skills #19