-
v1.4.4 Pre-release
released this
2026-09-18 14:36:58 +00:00 | 1 commits to main since this release1.4.4
Release date: 2026-09-18
Highlights
- Maintenance release: Composer dependency updates plus full code, security, and compatibility reviews — no behavior changes
Changed
- Composer dependencies updated:
aws/aws-sdk-php3.393.4 → 3.395.5,guzzlehttp/guzzle8.0.2 → 8.2.0,guzzlehttp/psr73.0.1 → 3.1.0,symfony/filesystemv8.1.5 → v8.1.6 (no known CVEs) - Dev tooling updated: PHPStan 2.2.9 → 2.2.14,
johnbillion/wp-compat2.0.0 → 2.0.1,php-stubs/wordpress-stubs6.9.4 → 7.1.0,szepeviktor/phpstan-wordpress2.0.3 → 2.0.4,nikic/php-parser5.8.0 → 5.9.0
Security
composer audit(production and dev dependencies): no known CVEs- Full
AGENTS-security.mdchecklist re-verified against the codebase — no new findings; all superglobal access remains validated and all S3 operations stay inside try/catch
Compatibility
- WordPress: 5.3 - 7.1 (floor re-verified with wp-compat 2.0.1: the single binding symbol is the
big_image_size_thresholdfilter, WP 5.3 — a 4.7 floor fails on that symbol only; WordPress 7.2 is still in alpha with final release scheduled December 2026, so 7.1 remains the ceiling) - PHP: 8.1 - 8.5 (full-range PHPCompatibility scan 5.6-8.5 clean for the declared range; plugin code itself uses PHP 8.0 features —
str_starts_with(),mixedtype — which PHPCompatibility 9.3.5 does not flag, so the floor was confirmed by manual review; the effective floor stays 8.1 viaaws/aws-sdk-phprequiring >= 8.1)
Tests
- PHP Coding Standards: 3.13.6 (0 errors)
- WordPress Coding Standards: 3.4.1 (0 violations)
- PHPStan: Level 9, 0 errors
- PHPUnit: 83 tests, 130 assertions
- composer audit: no known CVEs
Downloads