Repository navigation
This release hardens how FE Search AI stores secrets — API keys, license keys, and the Yahoo! App ID now use libsodium authenticated encryption with a versioned feai:v2: format, and existing values are re-encrypted transparently with no re-entry required — and moves real-time indexing to a background WP-Cron queue so publishing is never blocked by AI API calls.
Security
- Migrated stored secrets to
sodium_crypto_secretbox()(XSalsa20-Poly1305); tampered ciphertext now fails authentication instead of producing garbage output - Added the
FE_SEARCH_AI_ENCRYPTION_KEYconstant as the canonical key source — define it in wp-config.php (an environment variable can be referenced) so secrets survive WordPress salt rotation; legacyFE_AI_SEARCH_ENCRYPTION_KEYandAUTH_KEYare still tried when decrypting older values - Added the
fe_search_ai_migrate_secret_targetsfilter so add-ons such as Pro can register their own encrypted options for format migration
Sync
- Real-time post indexing is queued and processed in the background via WP-Cron (
fe_search_ai_process_sync_queue), so saving or publishing a post no longer waits on embedding or summary API calls
Chat UI
- Added a page context bar that shows the current post/page as a removable chip in the chat window
- Registered
[fe-search-ai]as the canonical chat shortcode - Added the
fe_search_ai_display_textsfilter and automatic Polylang/WPML/Bogo String Translation integration for custom chat UI texts - Visual polish: context chip labels can wrap, chip remove button hover matches the send button accent, the consent overlay gained an opaque fallback, and admin API status messages wrap long IDs
Documentation
- Expanded the docs site: Pro feature configuration reference, Pro Security tab, MCP integration guide, external service setup, settings field reference, index health, and troubleshooting (EN/JA)
What's Changed
- Potential fix for code scanning alert no. 9: Incomplete multi-character sanitization by @firstelementjp in #103
- Documentation overhaul, [fe-search-ai] canonical shortcode, and misc fixes by @dxd5001 in #104
- deps(deps-dev): bump the npm-development group across 1 directory with 3 updates by @dependabot[bot] in #106
- deps(deps): bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in #107
- Prepare release v1.3.0 by @dxd5001 in #111
Full Changelog: v1.2.0...v1.3.0