v0.7.2 — Archive References

Points this repository's references to uams-statamic history at uams-statamic-archive, so they keep resolving now that the new UAMS-Web/uams-statamic has taken the name. The plugin's behavior is unchanged.

Marked pre-release. Nothing pins this repository: wordpress-importer reads it over HTTP rather than as a package.

Maintenance and tooling

• Point references to uams-statamic history at uams-statamic-archive #26
• Bump the plugin version to 0.7.2 #27

Verification at this tag

The remote GitHub Actions chain passed on the validated head ef25c66cf of #27 (23 check runs, all success). The tagged commit is the squash merge 5635f8ee2. Its tree (953e77166) is identical to the validated head's: git diff --quiet exits 0 against the head and 1 against its parent. For #26, npm run ci:local also passed (16 of 16 jobs).

Known gaps

See the Known gaps section of AGENTS.md.

v0.7.1 — ACF Metadata Guard

Restores the ACF metadata guard, so a site running a theme-bundled ACF PRO without acf_get_metadata_by_field() is served again instead of failing with an HTTP 500.

Marked pre-release. Nothing pins this repository: wordpress-importer reads it over HTTP rather than as a package.

What's fixed

• Restore the ACF metadata guard for sites with a theme-bundled ACF #23

Maintenance and tooling

• Bump the plugin version to 0.7.1 #24

Verification at this tag

Both the remote GitHub Actions chain (23 check runs, all success) and npm run ci:local (16 of 16 jobs) passed on the validated head ccff29477 of #24. The tagged commit is the squash merge b9a7b9c00; its tree (7838b0a88) is identical to the validated head's, checked with git diff --quiet (exit 0, against exit 1 for its parent).

Known gaps

See the Known gaps section of AGENTS.md.

v0.7.0 — First Public Release

First release cut from the public repository. It carries the plugin forward from the archived predecessor's v0.6.1, serves Workday and Epic DEP identifiers in a new identifiers block, withholds more credential-bearing options from GET /options, and adds required status checks, a CI aggregate job, and a single-site test process.

Marked pre-release. Nothing pins this repository: wordpress-importer reads it over HTTP rather than as a package.

Changes merged in the archived predecessor after v0.6.1 reached this repository in its initial commit, so they link to that commit.

What's new

• Serve the Workday identifiers and location Epic DEP IDs in an identifiers block fd933d0

Security

• Withhold the Gravity Forms File Upload add-on's purchase_code from GET /options fd933d0
• Withhold credentials inside JSON strings nested in options, starting with Formidable's license-check caches fd933d0
• Pin the 25 plugins reviewed in option_denylist_reviewed_against fd933d0

Maintenance and tooling

• Bump the plugin version to 0.7.0 #21
• Check that every CI job is in the CI job's needs #18
• State the WordPress 6.8.11 floor #17
• Run the Integration suite on a single-site install as well as a multisite #16
• Pin php-stubs/wordpress-stubs to production's WordPress 6.8 #15
• Run the synced-files, handed-back, and download-archive checks in CI #12
• Pass PHPStan on both the 6.9 and 7.1 WordPress stubs #11
• Require CI, Attribution footer, and Closing keywords on main #9
• Make the PHPStan job pass without the Integration Composer setup #3
• Bump pestphp/pest from 5.3.2 to 5.3.3 in the composer-minor-and-patch group across 1 directory #1
• Keep the GitHub download to what the plugin runs fd933d0
• Add the GPL-2.0-or-later LICENSE file fd933d0
• Pin the Side-by-Side block's Blockquote with Citation layouts in tests fd933d0
• Describe the credential-bearing options in D-032 without naming them fd933d0
• Split the key-shaped test fixtures so push protection accepts the public snapshot fd933d0

Verification at this tag

The repository is public, so its GitHub Actions chain runs on every pull request and main requires the CI aggregate, Attribution footer, and Closing keywords checks; release validation no longer rests on the local chain alone. Both passed on the validated head 8252ab22e of #21: the remote chain, including the CI aggregate, Pest (Unit + Integration), and PHPStan, and npm run ci:local, 16 of 16 jobs. The tagged commit is the squash merge ec671497e; its tree (6d5837dc4) is identical to the validated head's, checked with git diff --quiet (exit 0).

Known gaps

See the Known gaps section of AGENTS.md.