2026-08-25

auto-sizes 1.8.0

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)

dominant-color-images 1.3.0

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)

embed-optimizer 1.0.0-beta6

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)

image-prioritizer 1.0.0-beta4

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)

Bug Fixes

• Fix TypeScript 6 type errors in the video lazy-loading script. (2434)

optimization-detective 1.0.0-beta7

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)
• Bump the bundled web-vitals library from 5.1.0 to 6.1.0, including its 6.0.0 major release. (2606, 2629)
• Ship the source maps for the bundled web-vitals library, which it began publishing in 6.0.0.
• Move URL Metrics storage HMAC validation into the REST endpoint callback so it runs once all parameters have been validated and sanitized, returning a rest_invalid_param error. (2436)
• Remove the deprecated constants along with the deprecated.php file that contained them.

Important

optimization-detective 1.0.0-beta6 was previously released on its own which which included a security fix:

• Add validation of the SCRIPT element containing the detection args JSON. This fixes a DOM clobbering vulnerability in which an injected element with a colliding id could shadow the script and cause an arbitrary module to be imported, which required an authenticated user with at least a contributor role. Props to Asaf Mozes (amosec) for responsible disclosure.

speculation-rules 1.7.0

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)
• Harden the JSON encoding of the inline speculation rules script and add a sourceURL to the authentication admin notice script. (2169)

web-worker-offloading 0.3.0

Enhancements

• Add declare( strict_types = 1 ) to all PHP files. (2424)
• Bump minimum required WordPress version to 6.9. (2517)
• Bump minimum required PHP version from 7.2 to 7.4. (2469)
• Improve code quality with native property types and stricter static analysis. (1729)