v1.0.3
What's Changed
Security
- Updated PHPUnit to 12.5.23 to resolve CVE (argument injection via newline in PHP INI values)
Changes
- Bumped minimum PHP requirement to 8.3 (PHPUnit 12 requires it)
- Minified assets (.min.js/.min.css) loaded in production via SCRIPT_DEBUG detection
- Removed @SuppressWarnings annotations incompatible with PHPStan
- Raised PHPMD complexity thresholds to accommodate AJAX handlers
CI/CD
- Asset minification in release pipeline (terser + csso-cli)
- ZIP structure validation before release
- SBOM generation attached to releases
- WP Plugin Check, i18n validation, PHP compatibility check workflows
- ESLint replaced with oxlint, Stylelint added
- License compliance check
- Accessibility audit (axe-core)
Tested up to: 6.9
Requires at least: 5.8
Requires PHP: 8.3
Full Changelog: v1.0.2...v1.0.3