Smart Admin Plugin Manager v1.3.0

[1.3.0] - 2026-02-23

Added

• Secure GitHub Release updater (includes/class-sapm-github-updater.php)
  • Native integration with WordPress update transient and plugin details API
  • Metadata fetch from GitHub Releases (/releases/latest) with schema validation
  • Runtime fetch lock and last-good metadata fallback
• Frontend Optimizer mode
  • New frontend filtering engine (includes/class-sapm-frontend.php) with plugin and asset rules
  • Frontend settings and rules management in dedicated admin tab
  • Frontend admin-bar drawer runtime (assets/frontend-bar.js) for quick per-page overrides
• Integrity-gated package installation
  • SHA256 verification against release .sha256 asset before install
  • Strict package URL equality check and trusted-host allowlist
  • ZIP structure validation (required root folder + main plugin file)

Changed

• Bootstrap loading flow
  • Plugin bootstrap now loads GitHub updater module from smart-admin-plugin-manager.php
• Administration UI redesign
  • Settings page reorganized into section switcher and tab routing (Administration, Frontend, Update Optimizer)
  • Admin components and styles refactored for cleaner layout and better UX consistency
• Frontend drawer architecture
  • assets/frontend-bar.js refactored for isolated mount (Shadow DOM) and stronger per-page override UX
  • Frontend bar styling consolidated into shared assets/drawer.css for visual consistency
• Admin AJAX surface expansion (includes/class-sapm-admin.php)
  • Added handlers for admin theme persistence and frontend rule/settings operations
  • Added JSON input sanitization helper for stricter payload handling
• Update optimizer flow refinement (includes/class-sapm-update-optimizer.php)
  • Improved page/context gating and update-check orchestration for lower admin overhead

Fixed

• Removed noisy debug logging from dependency/cascade execution paths (class-sapm-admin.php, class-sapm-core.php, class-sapm-dependencies.php)
• Improved frontend enqueue ordering for better compatibility with complex theme/plugin stacks

Security

• Enforced secure update transport and source policy:
  • HTTPS-only update URLs
  • Host allowlist checks for GitHub asset domains
  • SHA256 integrity verification before upgrade extraction
  • Extracted source folder/file integrity checks prior to installation

Docs

• Updated README.md and readme.txt with current release context and compatibility highlights

Breaking Changes

• None. Release is backward-compatible with existing rule storage and MU-loader behavior.