Skip to content

v2.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 20:13
· 7 commits to main since this release
v2.1.1
4844269
This commit was signed with the committer’s verified signature.
renatobo Renato Bonomini
GPG key ID: 5E328EC16C20D088
Verified
Learn about vigilant mode.

New Features

  • No new features in this maintenance release.

Improvements

  • Updated the squizlabs/php_codesniffer development dependency from 3.13.5 to 3.13.6, resolving GHSA-hmqg-cxww-wqhq (command injection in the gitblame report via a crafted filename).

Bug Fixes

  • No bug fixes in this release.

Upgrade Notes

  • No functional changes. The plugin's PHP, its endpoints, its capabilities, and its admin screen are byte-for-byte identical to 2.1.0.
  • Nothing was exploitable in a released build. squizlabs/php_codesniffer is a require-dev dependency used for coding-standards checks, and build.sh excludes vendor/ from the release zip, so the affected code was never distributed to any site. This release exists so the repository's own tooling and CI run on a patched version.
  • There are no open Dependabot alerts against this repository as of this release.
Assets 4
Loading