v1.4.0

changelog.txt

@@ -1,5 +1,44 @@
 == Changelog ==
 
+= 1.4.0 =
+
+_Release date: 2026-08-10_
+
+**Highlights**
+
+* Security hardening, data preservation option, and WP-CLI commands
+* 66 tests (up from 38), 100% coverage of tested classes
+
+**Added**
+
+* Data preservation option — checkbox under Settings → iDrivee2 to opt in to data deletion on uninstall (default: preserve)
+* WP-CLI commands: `wp idrivee2 test-connection`, `wp idrivee2 cleanup-local-files`, `wp idrivee2 stats --days=N`
+
+**Security**
+
+* Logger: validate IP with `filter_var( FILTER_VALIDATE_IP )` instead of `sanitize_text_field`
+* Admin page: `wp_unslash()` at read point for `$_POST['test_file']`
+* Cron cleanup: `wp_delete_file()` replaces `WP_Filesystem()` (cron-safe, no credentials needed)
+* Uninstall: data preservation is opt-in per AGENTS policy (default: preserve all data)
+
+**Changed**
+
+* WordPress minimum corrected 4.1 → 5.3 (wp-compat verified)
+* Uninstall: `delete_post_meta_by_key()` replaces raw SQL
+* `robotstxt-updater.php` documented as EXTERNAL DEPENDENCY
+
+**Compatibility**
+
+* WordPress: 5.3 - 7.1
+* PHP: 8.1 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: 3.13.5 (0 errors)
+* WordPress Coding Standards: 3.3.0 (0 violations)
+* PHPStan: Level 9, 0 errors
+* PHPUnit: 66 tests, 109 assertions
+
 = 1.3.0 =
 
 _Release date: 2026-07-18_