v0.6.0

Square Terminal for WooCommerce 0.6.0

The settings screen now reads in the order the work is actually done.

Changed

Setup reads top to bottom

Previously the screen asked for an access token above the button that makes one unnecessary, and buried Connect to Square below the webhook fields. It is now ordered by what a merchant does:

1. Square account — choose the environment, connect, pick the location
2. Terminal — pair a reader, and see whether webhooks are working
3. Checkout behaviour — receipt screen, signature, debug logs
4. Advanced settings — collapsed; manual access tokens and webhook plumbing

Manual credentials live under Advanced because connecting removes the need for them. They still work exactly as before for sites that prefer them.

Webhooks answer "is this working?"

The webhook row no longer asks for a URL. The plugin serves the route, so it knows the URL — it is shown read-only to copy into Square rather than typed in.

The row reports either when a signature-verified webhook last arrived, or that none has — and in that second case it names the Webhook Signature Key as the thing to check, because a key mismatch is exactly what an absence of verified deliveries looks like.

Only verified deliveries are recorded. The webhook route is public, so recording rejections would let any unauthenticated caller make this screen claim webhooks were broken when they were not.

Wording

The Enable setting refers to WCPOS.

Fixed

• Webhook signature verification no longer depends on the merchant having typed the notification URL correctly. Square signs each webhook over the exact notification URL, so a typo broke verification silently. It now defaults to the route the plugin actually serves. An override remains under Advanced for sites behind a proxy or custom domain, where the public URL differs from the one WordPress derives.

Upgrade notes

• No settings changes required. Existing values, including a manually entered webhook URL, are preserved and continue to take precedence.
• Requires PHP 8.1+, WordPress 6.5+, and WooCommerce 8.0+.

Verification status

• Observed: composer lint clean, composer test 229 tests / 807 assertions, composer test:js 26/26.
• Observed: the rendered settings markup keeps its <table> and <details> tags balanced, with the accordion last, so the collapsible section cannot swallow the rows above it. Packaging was simulated to confirm the new stylesheet ships.
• Not verified in a browser. This is a layout change and no screenshot was taken of the result. The structural failure mode was tested directly rather than assumed, but appearance has not been seen.