Cerrojo Security Toolkit 0.2.2

Changes

• Add opt-in URL Change Alerts for supported local home/siteurl updates.
• Sanitize admin form nonces before verification while preserving permission checks.
• Enqueue page-scoped admin CSS and include it in the distribution.
• Use WordPress URL parsing for URL change alerts.
• Rename the plugin entrypoint to cerrojo-security-toolkit.php and align build, tests, and CI references.

Installation

Download the attached cerrojo-security-toolkit.zip, not the automatically generated source archives. Existing installations may require reactivation after the entrypoint rename. Avoid activating both old and new copies simultaneously.

Validation

• Local checks: 246 unit tests (2,378 assertions), 9 packaging tests (713 assertions), syntax and dependency audit passed.
• GitHub CI passed on PHP 8.1-8.4 and the WooCommerce compatibility job.
• Manual WordPress installation/UI testing and Plugin Check against this exact release ZIP remain pending. This release does not indicate WordPress.org approval.

SHA-256 (ZIP): 88f95802ff103360406f002c429c276dd6ff33b56bdb69e2f14c8cad31f8c4c9

Cerrojo Security Toolkit 0.2.1

Identity correction

This release supersedes v0.2.0 for WordPress.org submission.

• Renames the public plugin identity to Cerrojo Security Toolkit.
• Uses the WordPress.org package slug and text domain cerrojo-security-toolkit.
• Avoids a collision with an existing WordPress update identity using the previous public name.
• Preserves existing namespaces, settings, hooks, nonces, admin URLs, and other compatibility-sensitive identifiers.

No security behavior or saved configuration was removed by this correction.

Verification

• WordPress Plugin Check 2.1.0: 0 errors, 0 warnings, 0 info.
• PHP 8.1.10 and PHP 8.4.4: 218 tests, 2,134 assertions.
• Package verification: 9 tests, 670 assertions.
• Asset SHA-256: 20503615e98953d40965dcc45bcb513bc4b7b30b4d59170a970d03facde214fc.

Bastion Security 0.2.0

Highlights

• Adds selective REST API route controls by HTTP method and registered route template.
• Adds administrator-account and plugin-activity email alerts.
• Adds progressive login protection and XML-RPC pingback protection.
• Expands reversible HTTP security-header policies and security diagnostics.
• Introduces a WordPress.org-ready package with canonical metadata, licensing, and production-only contents.

Verification

• WordPress Plugin Check 2.1.0: 0 errors, 0 warnings, 0 info.
• PHP 8.1.10 and PHP 8.4.4: 218 tests, 2,129 assertions.
• Package verification: 9 tests, 670 assertions.
• Asset SHA-256: 396b434578856924b54b00471b0ed6cf38af1ca7cbac6bd9980aac813ef354cc.

Bastion Security WP 0.1.0

Initial release of Bastion Security WP.

• Adds read-only WordPress Site Health diagnostics for security posture evidence.
• Includes a capped, read-only REST route inventory without invoking route callbacks.
• Targets WordPress 6.8-7.0 and PHP 8.1-8.4.
• Provides a production-only installable ZIP rooted at bastion-security-wp/.

Validated by GitHub Actions CI run 32196495808 for commit bbfd1cc.

Artifact SHA-256: ddc50d35c020a4ea4f82b6de046f05f61bb13644dff8e925d3433395404f6dc3