Skip to content

CHANGELOG.md

Latest commit

 

History

History
257 lines (161 loc) · 7.49 KB

CHANGELOG.md

File metadata and controls

257 lines (161 loc) · 7.49 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.8.2] - 2026-07-12

Security

  • Resolved the majority of Dependabot alerts by updating build/test dependencies (npm audit fix, @wordpress/scripts 31 → 32, @wordpress/components → 36). Remaining alerts are dev-only transitive dependencies pinned by @wordpress/scripts.

Changed

  • Added grouped .github/dependabot.yml config (npm/composer/github-actions) to consolidate future dependency update PRs.

[1.8.1] - 2026-06-16

Changed

  • Renamed "Review" menu to "VMF Review" for consistency.
  • Moved VMF Review menu to bottom of Media submenu (position 902).

[1.8.0] - 2026-03-14

Changed

  • Refactored Plugin class to extend VirtualMediaFolders\Addon\AbstractPlugin base class
  • Refactored SettingsTab to extend AbstractSettingsTab, removed inline enqueue and WP 7 compat logic
  • Removed duplicated singleton boilerplate and manual textdomain loading

[1.7.0] - 2026-03-10

Added

  • WP 7.0+ design-token style overrides for settings and review pages

[1.6.3] - 2026-03-08

Security

  • Updated npm and Composer dependencies.

[1.6.2] - 2026-03-07

Changed

  • Tested up to WordPress 7.0

[1.6.1] - 2026-02-13

Fixed

  • Uncommented build/ in .gitignore (build artifacts should be generated in CI, not committed)

[1.6.0] - 2026-02-09

Changed

  • Replaced inline plugin updater with shared class-github-updater.php

[1.5.1] - 2025-06-25

Fixed

  • Removed redundant require_once calls in Plugin.php (handled by Composer autoloading)

Added

  • uninstall.php for clean plugin removal

[1.5.0] - 2026-02-07

Fixed

  • Renamed generic vmfa-settings script handle to vmfa-editorial-workflow-settings
  • Prevents script/style handle collisions with other add-ons

Changed

  • Improved cross-plugin compatibility by using unique asset handles

[1.4.0] - 2026-01-26

Added

  • Force folder sidebar view for non-admin users in Media Library
  • Non-admins can no longer toggle to list/grid view without folders
  • New MediaLibraryEnforcer component with separate JS/CSS assets

Changed

  • Refactored to use external asset files instead of inline scripts/styles

[1.3.5] - 2026-01-25

Changed

  • Replaced "Remove From" permission with "Delete Folder" permission
  • Delete permission controls who can delete folders (system folders always protected)
  • Moving between folders now only requires "Move To" on destination
  • Removing media to Uncategorized no longer requires special permission

Fixed

  • Permission enforcement now blocks drag-drop moves in Media Library for users without permission
  • Added AJAX interception for vmfo_move_to_folder and vmfo_bulk_move_to_folder actions

[1.3.4] - 2026-01-25

Fixed

  • Permission enforcement now blocks drag-drop moves in Media Library for users without permission
  • Added AJAX interception for vmfo_move_to_folder and vmfo_bulk_move_to_folder actions

[1.3.3] - 2026-01-25

Added

  • GitHub Plugin Updater for automatic updates from GitHub releases
  • GitHub Actions workflows for building release zip files

Changed

  • Moved development documentation to docs/development.md
  • Reorganized README.md structure

[1.3.2] - 2026-01-25

Changed

  • Improved color contrast for WCAG AA accessibility compliance
  • Simplified workflow settings help text for clarity
  • Review page badge now properly vertically aligned with title

Removed

  • Unused VMFA Rules Engine integration code and documentation

[1.3.1] - 2026-01-25

Added

  • JavaScript test suite with Vitest for React components and utilities
  • Test coverage for buildFolderOptions, InboxCard, and PermissionMatrix

Changed

  • Updated vitest to v4.0.18
  • Added vite, @vitejs/plugin-react, @testing-library/react, @testing-library/jest-dom, and jsdom dev dependencies
  • Improved color contrast for WCAG AA accessibility compliance (green stats now use #008a20)
  • Darkened description text color for better readability on light backgrounds
  • Simplified workflow settings help text for clarity
  • Review page badge now properly vertically aligned with title

Removed

  • Unused VMFA Rules Engine integration code and documentation

[1.3.0] - 2026-01-25

Added

  • Internationalization (i18n) support with Norwegian Bokmål translation
  • NPM scripts for translation workflow (npm run i18n)
  • wp_set_script_translations() for JavaScript translations

[1.2.0] - 2026-01-25

Added

  • Unified Review page toolbar with single destination dropdown and Apply button
  • Hierarchical folder display in all dropdowns (matching sidebar structure)
  • Shared buildFolderOptions utility for DRY folder dropdown rendering

Changed

  • Simplified Review page UX: "Approve" is now first option in destination dropdown
  • Folder dropdowns now show hierarchy with "— " prefix for nested folders

Fixed

  • "Allow Editors to review media" toggle now properly saves and loads
  • Boolean options stored as '1'/'0' strings for consistent database handling

[1.1.0] - 2026-01-25

Added

  • Configurable approved folder destination in workflow settings
  • Support for all roles with upload_files capability (custom roles automatically included)
  • Auto-dismiss success notices with fade-out animation after 3 seconds
  • Race condition prevention on Review page (prevents double-clicks and concurrent operations)

Changed

  • Workflow is now always enabled when plugin is active (removed enable/disable toggle)
  • Settings icon updated to Gutenberg settings icon
  • Administrator role excluded from settings (always has full access)
  • Editor has full access by default; Author and custom roles have no access by default

Fixed

  • "Revoke All Permissions" now works correctly for Editor role
  • Saving settings no longer toggles all permissions ON unexpectedly
  • Permission system properly handles empty arrays vs deleted entries

[1.0.0] - 2026-01-24

Added

  • Role-based folder visibility and permissions

    • View, move, upload, and remove actions per folder per role
    • Permission matrix UI in settings
    • Administrators bypass all permission checks

  • Inbox workflow

    • Role-to-folder inbox mapping
    • Automatic routing of uploads to inbox folders
    • vmfa_inbox_assigned action hook for extensibility

  • Review workflow

    • System folders: /Workflow/Needs Review and /Workflow/Approved
    • Protected folders (cannot be renamed or deleted)
    • Dedicated Review admin screen under Media menu
    • Bulk approve and assign actions
    • Notification badge with pending item count

  • Access enforcement across all surfaces

    • REST API filtering and permission checks
    • AJAX media query filtering
    • Admin folder list filtering
    • Server-side enforcement (fail-safe)

  • Settings UI

    • Tab integration with VMF settings
    • Permission matrix component
    • Inbox mapping component
    • Workflow toggle

  • REST API endpoints

    • GET/POST /vmfa-editorial/v1/settings
    • GET/POST /vmfa-editorial/v1/permissions
    • GET/POST /vmfa-editorial/v1/inbox
    • GET/POST /vmfa-editorial/v1/workflow

  • Testing infrastructure

    • PHPUnit with Brain Monkey
    • AccessChecker, InboxService, WorkflowState test suites
    • Vite build configuration

Security

  • All REST endpoints require manage_options capability
  • All AJAX actions verify nonces and capabilities
  • Server-side enforcement prevents bypass of UI restrictions