Skip to content

v1.3.0

Latest

Choose a tag to compare

@firstelementjp firstelementjp released this 21 Oct 01:41
· 12 commits to main since this release

This release hardens how FE Search AI stores secrets — API keys, license keys, and the Yahoo! App ID now use libsodium authenticated encryption with a versioned feai:v2: format, and existing values are re-encrypted transparently with no re-entry required — and moves real-time indexing to a background WP-Cron queue so publishing is never blocked by AI API calls.

Security

  • Migrated stored secrets to sodium_crypto_secretbox() (XSalsa20-Poly1305); tampered ciphertext now fails authentication instead of producing garbage output
  • Added the FE_SEARCH_AI_ENCRYPTION_KEY constant as the canonical key source — define it in wp-config.php (an environment variable can be referenced) so secrets survive WordPress salt rotation; legacy FE_AI_SEARCH_ENCRYPTION_KEY and AUTH_KEY are still tried when decrypting older values
  • Added the fe_search_ai_migrate_secret_targets filter so add-ons such as Pro can register their own encrypted options for format migration

Sync

  • Real-time post indexing is queued and processed in the background via WP-Cron (fe_search_ai_process_sync_queue), so saving or publishing a post no longer waits on embedding or summary API calls

Chat UI

  • Added a page context bar that shows the current post/page as a removable chip in the chat window
  • Registered [fe-search-ai] as the canonical chat shortcode
  • Added the fe_search_ai_display_texts filter and automatic Polylang/WPML/Bogo String Translation integration for custom chat UI texts
  • Visual polish: context chip labels can wrap, chip remove button hover matches the send button accent, the consent overlay gained an opaque fallback, and admin API status messages wrap long IDs

Documentation

  • Expanded the docs site: Pro feature configuration reference, Pro Security tab, MCP integration guide, external service setup, settings field reference, index health, and troubleshooting (EN/JA)

What's Changed

  • Potential fix for code scanning alert no. 9: Incomplete multi-character sanitization by @firstelementjp in #103
  • Documentation overhaul, [fe-search-ai] canonical shortcode, and misc fixes by @dxd5001 in #104
  • deps(deps-dev): bump the npm-development group across 1 directory with 3 updates by @dependabot[bot] in #106
  • deps(deps): bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in #107
  • Prepare release v1.3.0 by @dxd5001 in #111

Full Changelog: v1.2.0...v1.3.0