Changes
- Add opt-in URL Change Alerts for supported local home/siteurl updates.
- Sanitize admin form nonces before verification while preserving permission checks.
- Enqueue page-scoped admin CSS and include it in the distribution.
- Use WordPress URL parsing for URL change alerts.
- Rename the plugin entrypoint to cerrojo-security-toolkit.php and align build, tests, and CI references.
Installation
Download the attached cerrojo-security-toolkit.zip, not the automatically generated source archives. Existing installations may require reactivation after the entrypoint rename. Avoid activating both old and new copies simultaneously.
Validation
- Local checks: 246 unit tests (2,378 assertions), 9 packaging tests (713 assertions), syntax and dependency audit passed.
- GitHub CI passed on PHP 8.1-8.4 and the WooCommerce compatibility job.
- Manual WordPress installation/UI testing and Plugin Check against this exact release ZIP remain pending. This release does not indicate WordPress.org approval.
SHA-256 (ZIP): 88f95802ff103360406f002c429c276dd6ff33b56bdb69e2f14c8cad31f8c4c9