v1.4.0

readme.txt

@@ -1,11 +1,11 @@
 === iDrivee2 Media Upload ===
 Contributors: robotstxt, javiercasares
 Tags: media, upload, s3, cdn, storage, idrivee2, cloud
-Requires at least: 4.1
+Requires at least: 5.3
 Tested up to: 7.1
-Stable tag: 1.3.0
+Stable tag: 1.4.0
 Requires PHP: 8.1
-Version: 1.3.0
+Version: 1.4.0
 License: GPL-3.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -199,6 +199,48 @@ PHP 8.2 or higher is required. The plugin uses strict type declarations and is t
 
 == Changelog ==
 
+= 1.4.0 =
+
+_Release date: 2026-08-10_
+
+**Highlights**
+
+* Security hardening, data preservation option, and WP-CLI commands
+* 66 tests (up from 38), 100% coverage of tested classes
+
+**Added**
+
+* **Data preservation option** — new checkbox under Settings → iDrivee2 ("Delete all plugin data when the plugin is uninstalled"). By default all data is preserved on uninstall; users must explicitly opt in to removal.
+* **WP-CLI commands** — three new commands for ops automation:
+  * `wp idrivee2 test-connection` — verify S3 bucket accessibility
+  * `wp idrivee2 cleanup-local-files` — manually trigger the cron file cleanup
+  * `wp idrivee2 stats --days=N` — show S3 operation statistics (default 7 days, max 30)
+
+**Security**
+
+* Logger: `get_client_ip()` now validates with `filter_var( FILTER_VALIDATE_IP )` — rejects malformed or spoofed `REMOTE_ADDR` values
+* Admin page: `$_POST['test_file']` now calls `wp_unslash()` at read point
+* Cron cleanup: replaced `WP_Filesystem()` with `wp_delete_file()` — works in cron without credentials
+* Uninstall: data preservation is now opt-in (default: preserve) per AGENTS data preservation policy
+
+**Changed**
+
+* WordPress minimum corrected from 4.1 to 5.3 (verified via wp-compat — `big_image_size_threshold` filter is the binding constraint)
+* `uninstall.php`: replaced direct `$wpdb->query()` with `delete_post_meta_by_key()` (WordPress DB API)
+* `robotstxt-updater.php`: documented as external dependency with justification
+
+**Compatibility**
+
+* WordPress: 5.3 - 7.1
+* PHP: 8.1 - 8.5
+
+**Tests**
+
+* PHP Coding Standards: 3.13.5 (0 errors)
+* WordPress Coding Standards: 3.3.0 (0 violations)
+* PHPStan: Level 9, 0 errors
+* PHPUnit: 66 tests, 109 assertions, 100% coverage
+
 = 1.3.0 =
 
 _Release date: 2026-07-18_