Skip to content

wordpress-v0.1.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 16:11
· 142 commits to main since this release
Immutable release. Only release title and notes can be modified.
wordpress-v0.1.9
e9c7c7e

Changed

  • cli/NOTICE now names the product wordpress-cli, the binary this connector installs, instead of the generator's internal -pp-cli name. No code change.

Security

  • An error can no longer show a credential the server repeated back in an encoded form. The CLI and the MCP server masked a key, token or password only as written or URL-escaped. When an API error or an HTML page returned in place of JSON echoed it HTML-entity-encoded, JSON-escaped, double URL-encoded, base64 or hex, it reached the terminal, --json and --agent output, and MCP tool results. Now any such text that still carries a credential this program holds, in any of those forms, is replaced whole by [text withheld: it repeated a secret value this program holds]; the HTTP status, the hint and the exit code are kept. The same check also runs on every error a command prints, including --json and --agent error output, and on every MCP error result; successful output is unchanged.
Assets 28
Loading