GitHub Theme Updater 2.2.0

First public release of GitHub Theme Updater - a WordPress plugin that updates a theme straight from a GitHub repository, private ones included, with backups, one-click rollback, protected paths and live progress.

Highlights in 2.2.0

• Live update progress - the Update tab lists every step (release lookup, download, unpack, deletability check, backup, cleanup, copy, finish), a running file count and the elapsed time. Opening the tab while an update runs elsewhere picks the progress up. Works without JavaScript too.
• Ignored paths (.git and node_modules by default) - left out of backups, never installed from the archive and never touched on disk. Keeps a backup of a theme full of dev leftovers from hitting the PHP time limit.
• Operation log - the last 5 updates and restores, failed ones included, with version, result, file count, author and duration.

Fixed

• Path traversal in the backup identifier (.. is rejected).
• Lock race between two clicks in the same second - the lock is now a single INSERT IGNORE on wp_options; manual backups take the same lock.
• Double token encryption when saving an already encrypted value.
• Implicitly nullable parameters deprecated in PHP 8.4 (8.4 added to CI).
• An undeletable file halfway through cleanup could leave the site without a theme.

Requirements

WordPress 5.8+, PHP 7.4+. Licence: GPL-2.0-or-later.

Install

Download the ZIP below, then Plugins → Add New → Upload Plugin. Full documentation in the README.