Bookingistic v2.5.2

Bookingistic v2.5.2

Bookingistic 2.5.2 addresses the second WordPress.org review round: a cron-scheduling bug on fresh activations and missing capability checks on the admin action handlers. The attached zip is the exact package submitted back to the WordPress.org review team.

Highlights

• Fixed: Google Calendar sync cron event now schedules on a fresh activation. The custom "every 15 minutes" recurrence is registered before wp_schedule_event() runs during activation — previously Plugin::boot() only registered the interval after the activation hook had fired, so the event was silently skipped on new installs and Google Calendar sync never started on its own.
• Security: capability checks on every admin save/action handler. In addition to the existing nonce checks, settings, services, staff, bookings (create/status/cancel/reschedule/notes), email automations, integrations and appearance now require the matching Bookingistic capability (manage_bookingistic_settings, manage_bookingistic_services, manage_bookingistic_staff, bookingistic edit/create caps, manage_bookingistic_email_automations, manage_bookingistic) — verified before any input processing, failing closed with a 403. Payments and the staff Google Calendar actions already had capability checks and are unchanged.
• Tests: new cron regression test in the standalone suite (php tests/run-all.php, now 32 assertions) covering recurrence registration.

Verification performed

• Fresh-install activation on a clean WordPress 7.1 with a full headless pass: activation completes with no "unexpected output" warning, and the bookingistic_gcal_sync event is present in the cron list with the 15-minute recurrence immediately after activation (verified via WP Crontrol).
• Official Plugin Check (PCP) on the installed plugin: 0 errors, 0 warnings.
• Standalone test suite: 32 assertions, all passing. PHP 8.0–8.3 syntax lint clean.

Upgrade notes

• No database changes — a safe one-click update from 2.5.x.
• Compatibility: WordPress 6.4+, PHP 8.0+.

Release assets

File	What it is
bookingistic-2.5.2.zip	The WordPress plugin. Upload it under Plugins → Add New → Upload Plugin.
SHA256SUMS.txt	Checksums for every file.

Verify with sha256sum -c SHA256SUMS.txt after download.