Skip to content

release: build v1.0.8 package#11

Merged
altugank merged 1 commit into
mainfrom
release/v1.0.8
Jun 9, 2026
Merged

release: build v1.0.8 package#11
altugank merged 1 commit into
mainfrom
release/v1.0.8

Conversation

@altugank

@altugank altugank commented Jun 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

Cuts the v1.0.8 build for live testing.

What's in this build vs 1.0.7

  • Webhook signature verified before any event (incl. ping); rate limiting now proxy/CDN-aware (Cloudflare built in)
  • Authenticated v2: encryption for the PAT and webhook secret (backward compatible)
  • Atomic theme restore (a failed restore can't brick the live theme)
  • Path-traversal guards, SSRF-safe HTTP, secret/PAT redaction, full uninstall cleanup
  • Correct backup size units; admin heading spacing + button icon alignment

Validation

Built clean (no __MACOSX/.DS_Store/VCS junk; single top-level wp-puller/ folder). Extracted in a live WordPress 7.0 / PHP 8.2 install: every file passes php -l and get_plugin_data() reports WP Puller 1.0.8.

How to try it live

Download wp-puller.zip from this branch (or from main after merge) → WP Admin → Plugins → Add New → Upload Plugin.

Bump version to 1.0.8 (header, WP_PULLER_VERSION, $version) — consistent with
the @SInCE 1.0.8 tags on the recent hardening — and rebuild wp-puller.zip from
the current source so the release artifact matches main.

The package was validated by extracting it in a live WordPress: all files
pass php -l and get_plugin_data() reports "WP Puller" v1.0.8.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@altugank altugank merged commit 2e49320 into main Jun 9, 2026
6 checks passed
@altugank altugank deleted the release/v1.0.8 branch June 9, 2026 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant