v1.21.0

Onboarding, after the first real run on a client site. Everything Ben asked for after testing 1.20.0.

The wizard installs without switching things on. Only the Hello Digitizer child theme and Elementor are activated. The other eleven plugins are installed and left inactive, so each client site runs what you choose for it rather than what the baseline happens to contain. Their goal state is "installed", so a second run recognises them and skips rather than switching them on behind you.

Every module ships disabled, Onboarding included. Activating the plugin now changes nothing at all until you turn something on from the Modules screen. Existing sites are untouched: a module you already switched on stays on, because a module's default is consulted only for a module the site has never saved a setting for.

Automatic updates, as a checkbox. On by default, applied only to items on the baseline, and to items the run skipped as well - so re-running on an older site catches it up. Three limits, all of them visible on the screen rather than left to be discovered: items installed from GitHub are excluded, because WordPress has no way to check them for updates; the box is not offered on a site that has background updates turned off, where the list would never be processed; and it asks for the capability to update plugins and themes, which on a multisite network means a network administrator, since the lists are network-wide.

Removing the default themes a finished site no longer needs. A second checkbox, run once after the items. It keeps the newest default and the theme this WordPress is configured to fall back to if the active theme ever breaks, and it never removes the active theme, a theme another installed theme names as its parent, or a theme that only carries a core directory name without being one of WordPress's own - a host's design in a directory called twentytwentyfour is not core's to delete. It declines entirely on multisite, where one directory of themes is shared by every site and "unused here" can mean "active somewhere else".

Verification. 300 assertions across six stub harnesses in tests/, php -l and node --check clean, the four Plugin Check security sniffs at zero. Hebrew catalog at 611 strings with none missing. Five rounds of review, eight findings, all real and all fixed.

1.20.0 has no release of its own: it shipped Onboarding enabled by default, which would have written that choice into every site's settings permanently, and 1.21.0 reverses it. Its changes are all included here.