release: v0.12.28

Author: chubes4

CHANGELOG.md

@@ -2,6 +2,42 @@
 
 All notable changes to this project will be documented in this file. Entries are generated by homeboy from git commits.
 
+## [0.12.28] - 2026-07-18
+
+### Changed
+- Normalize root extra-plugin source subpaths
+- Accept canonical GitHub repository casing
+- Serve WordPress through the Cloudflare Worker
+- Use MDI constrained runtime for R2 revisions
+- Persist canonical MDI revisions in R2
+- Probe MDI primary R2 persistence
+- Serialize Cloudflare WordPress state revisions
+- Boot Cloudflare runtime from streamed WordPress seed
+- Probe Cloudflare WordPress short bootstrap
+- Skip installer checks for seeded WordPress
+- Expose visual explanation controls
+- Disable WordPress bootstrap side effects
+- Boot Cloudflare WordPress from install seed
+- Filter remote WordPress archive entries
+- Load PHPUnit dependencies after database install
+- Resolve omitted publication base from repository metadata
+- Consolidate WordPress runtime inputs
+- Split streamed WordPress boot probes
+- Stream WordPress server files in Cloudflare boot
+- Probe PHP and WordPress archive overlap
+- Split Cloudflare archive memory probes
+- Instrument Cloudflare WordPress boot phases
+- Add stateful block editor mutation steps
+- Expose editor actions to fuzz sequences
+- Forward runtime environment to PHPUnit
+- Raise Cloudflare WordPress boot CPU budget
+- Add Cloudflare WordPress runtime gate
+
+### Fixed
+- Fix runtime backend boundary enforcement
+- Fix runner workspace default branch resolution
+- Fix nested mount overlays
+
 ## [0.12.27] - 2026-07-18
 
 ### Changed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "wp-codebox-workspace",
-  "version": "0.12.27",
+  "version": "0.12.28",
   "private": true,
   "type": "module",
   "exports": {

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/wp-codebox-cli",
-  "version": "0.12.27",
+  "version": "0.12.28",
   "description": "WP Codebox CLI — secure WordPress code execution from anywhere. Run disposable Playground sandboxes from any host: CLI, CI, mobile, Node service, or WP plugin.",
   "type": "module",
   "bin": {

packages/runtime-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/wp-codebox-core",
-  "version": "0.12.27",
+  "version": "0.12.28",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

packages/runtime-playground/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automattic/wp-codebox-playground",
-  "version": "0.12.27",
+  "version": "0.12.28",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

packages/wordpress-plugin/wp-codebox.php

@@ -3,7 +3,7 @@
  * Plugin Name: WP Codebox
  * Plugin URI: https://github.com/Automattic/wp-codebox
  * Description: Secure coding environments inside WordPress. WordPress ability surface for launching disposable WP Codebox Playground sandboxes that can't touch your host site.
- * Version: 0.12.27
+ * Version: 0.12.28
  * Requires at least: 6.9
  * Requires PHP: 8.2
  * Author: Automattic
@@ -15,7 +15,7 @@
 	die;
 }
 
-define( 'WP_CODEBOX_PLUGIN_VERSION', '0.12.27' );
+define( 'WP_CODEBOX_PLUGIN_VERSION', '0.12.28' );
 define( 'WP_CODEBOX_PLUGIN_PATH', plugin_dir_path( __FILE__ ) );
 define( 'WP_CODEBOX_PLUGIN_URL', plugin_dir_url( __FILE__ ) );