v2.0.8 - Milestone B Follow-up Hardening

What's Changed

• Milestone B follow-up hardening (v2.0.8) by @Horlicks-p in #6

Full Changelog: v2.0.7...v2.0.8

v2.0.7

What's Changed

• Hotfix: isolate bundled Parsedown (v2.0.7) by @Horlicks-p in #5

Full Changelog: v2.0.6...v2.0.7

v2.0.6

What's Changed

• Milestone B: correctness & stability (v2.0.6) by @Horlicks-p in #4

Full Changelog: v2.0.5...v2.0.6

v2.0.5 – Auto Update

Auto Update

• New: Automatic updates from GitHub Releases via bundled Plugin Update Checker 5.6 (MIT). The updater prefers the release ZIP asset (runtime files only) over source archives.
• New: moelog_aiqna_questions_block_html filter — themes can customize the question list container markup from functions.php; customizations now survive automatic updates.

Upgrading

Installs at 2.0.4 or earlier need one final manual update using the attached ZIP (they don't have the updater yet). From 2.0.5 onward, updates appear in the WordPress admin automatically.

🤖 Generated with Claude Code

v2.0.4 – Security Hardening

Security Hardening (Milestone A)

• Access policy: Draft, private, password-protected, and missing posts, plus invalid answer tokens, now return a consistent 404 before question metadata, cache, or AI access.
• Static cache: Apache cache directories deny direct HTTP access; existing .htaccess files are upgraded automatically. Normal answer URLs continue to be served through PHP.
• Trusted proxies: Only REMOTE_ADDR is trusted by default. CF-Connecting-IP / X-Forwarded-For require explicitly configured proxy CIDRs (MOELOG_AIQNA_TRUSTED_PROXIES).
• Feedback endpoints: Server-side post/question validation with recomputed hashes, idempotent votes, per-visitor and site-wide rate limits, and anonymized identifiers in logs and emails.
• Gemini: API key moved from the request URL to the x-goog-api-key header.
• Anthropic: Opus 4.7/4.8, Sonnet 5, and unknown models use a conservative sampling surface (no model-name regex guessing); extendable via the moelog_aiqna_anthropic_temperature_models filter.
• Compatibility: Existing public answer URLs and saved model IDs are not rewritten. Tested up to WordPress 7.0.

Upgrade notes and acceptance records: tests/manual/A1–A4_*.md

🤖 Generated with Claude Code

v2.0.3 - Upgrade Anthropic model to claude-opus-4-7

What's Changed

• fix: Upgrade Anthropic default model to \claude-opus-4-7\
  • v2.0.2 誤將日期後綴從 \20251101\ 改成 \20251001\，原本是對的
  • 直接升至 \claude-opus-4-7\ 避免後綴爭議，並使用最新模型
  • 同步更新 PHP 常數、model registry、翻譯檔、docs

Full Changelog

v2.0.2...v2.0.3