This commit is contained in:
Javier Casares 2026-08-18 10:47:06 +00:00
commit b2849880ec
8 changed files with 91 additions and 16 deletions

View file

@ -1,5 +1,26 @@
== Changelog ==
= 1.5.0 =
_Release date: 2026-08-18_
**Fixed**
* API key not saving when the browser auto-fills the password field with the stored encrypted value — the sanitizer now detects already-encrypted input (`v2:` prefix) and returns it as-is instead of failing UUID validation.
* "Test connection" validated against the public catalog endpoint (`/plugins`), so invalid API keys reported "Connected". Now uses the authenticated `/me/subscriptions` endpoint; a 401 response produces "Invalid API key".
* "Test connection" read the key from saved options only — entering a new key and testing before saving always tested the old (or empty) key. The AJAX handler now accepts the key from the form field.
**Added**
* `settings_errors()` call on the settings page so validation messages (e.g. "invalid API key format") are actually visible to the user.
* Registration link (`https://www.robotstxt.software/wp-login.php?action=register`) in the API key field description.
**Tests**
* PHPCS (WordPress-Core, WordPress-Docs, WordPress-Extra): pass
* PHPStan level 9 + wp-compat: pass
* PHPUnit: 146 tests, 385 assertions
= 1.4.1 =
_Release date: 2026-08-17_