• 1.4.4 29a034f975

    v1.4.4 Pre-release

    javier released this 2026-09-18 14:36:58 +00:00 | 1 commits to main since this release

    1.4.4

    Release date: 2026-09-18

    Highlights

    • Maintenance release: Composer dependency updates plus full code, security, and compatibility reviews — no behavior changes

    Changed

    • Composer dependencies updated: aws/aws-sdk-php 3.393.4 → 3.395.5, guzzlehttp/guzzle 8.0.2 → 8.2.0, guzzlehttp/psr7 3.0.1 → 3.1.0, symfony/filesystem v8.1.5 → v8.1.6 (no known CVEs)
    • Dev tooling updated: PHPStan 2.2.9 → 2.2.14, johnbillion/wp-compat 2.0.0 → 2.0.1, php-stubs/wordpress-stubs 6.9.4 → 7.1.0, szepeviktor/phpstan-wordpress 2.0.3 → 2.0.4, nikic/php-parser 5.8.0 → 5.9.0

    Security

    • composer audit (production and dev dependencies): no known CVEs
    • Full AGENTS-security.md checklist re-verified against the codebase — no new findings; all superglobal access remains validated and all S3 operations stay inside try/catch

    Compatibility

    • WordPress: 5.3 - 7.1 (floor re-verified with wp-compat 2.0.1: the single binding symbol is the big_image_size_threshold filter, WP 5.3 — a 4.7 floor fails on that symbol only; WordPress 7.2 is still in alpha with final release scheduled December 2026, so 7.1 remains the ceiling)
    • PHP: 8.1 - 8.5 (full-range PHPCompatibility scan 5.6-8.5 clean for the declared range; plugin code itself uses PHP 8.0 features — str_starts_with(), mixed type — which PHPCompatibility 9.3.5 does not flag, so the floor was confirmed by manual review; the effective floor stays 8.1 via aws/aws-sdk-php requiring >= 8.1)

    Tests

    • PHP Coding Standards: 3.13.6 (0 errors)
    • WordPress Coding Standards: 3.4.1 (0 violations)
    • PHPStan: Level 9, 0 errors
    • PHPUnit: 83 tests, 130 assertions
    • composer audit: no known CVEs
    Downloads