Releases: JPKCom/jpkcom-rank-math-options
Releases · JPKCom/jpkcom-rank-math-options
Release list
v1.0.10
Full Changelog: v1.0.9...v1.0.10
v1.0.9
v1.0.8
v1.0.7
v1.0.6
What's Changed
- ci: bump the github-actions group with 4 updates by @dependabot[bot] in #1
New Contributors
- @dependabot[bot] made their first contribution in #1
Full Changelog: v1.0.5...v1.0.6
Contributors
dependabot
Assets 4
v1.0.5
v1.0.4
v1.0.3
Backport shared plugin-updater hardening (from jpkcom-acf-jobs / creationell-captcha audit). Security fixes: - Prefer exact match against manifest download_url over the slug heuristic so a tampered manifest cannot bypass the checksum gate. - Timing-safe checksum comparison via hash_equals() with an is_string() guard against hash_file() === false. - Manifest fetch via wp_safe_remote_get() (SSRF defense-in-depth). Compatibility fixes: - Contributors now provide display_name (no PHP warning, names shown in the plugin detail popup). - no_update transient entry now carries new_version, package, tested and requires_php (no warning/deprecation on wp plugin list).