Repository navigation
Release 1.1.1: WP.org QA gate (WPCS, PHPStan, Plugin Check) + fixes - #12
Merged
Merged
Conversation
- composer: PHPCS 3.13 + WPCS 3.4 + PHPCompatibilityWP, PHPStan 2 with WordPress/WooCommerce stubs; lock file is now tracked so CI and local runs use identical tool versions - phpcs.xml.dist: WordPress-Extra/Docs, prefix check, PHP 7.4+, WP 6.5+ - bin/build-zip.php builds the distributable ZIP from the root .distignore - bin/check-versions.php enforces header/readme/constant/changelog/tag agree - bin/setup-local-site.sh prepares a LocalWP QA site with Plugin Check - .gitattributes forces LF so PHPCS results match between Windows and CI
…port fixes - Settings: saving with an empty password field no longer wipes the stored API password - API: credentials, Site ID and currency are XML-escaped (esc_xml); shared SOAP envelope builder; API error text is escaped before it reaches the UI - Products are requested in the store currency; descriptions from the API go through wp_kses_post; manage_stock gets a real boolean - Category images are reused instead of re-downloaded on every import; temp files are removed when a sideload fails; dead code removed - Import queues are stored with autoload off - Uninstall also removes the created/updated counters - ABSPATH guards and file docblocks on all PHP files, underscore-prefixed methods renamed, SOAP schema property names documented for PHPCS - readme: Tested up to 7.1, Requires at least 6.5, clearer External Services section, 1.1.1 changelog; header WC tested up to 11.2
- ci.yml (QA): version consistency, php -l on PHP 7.4–8.5, PHPCS (WPCS) with PR annotations, PHPStan, and Plugin Check on the built ZIP - release.yml: tag v* -> QA -> build ZIP -> GitHub Release -> WordPress.org. Builds from the tagged commit (was always main), deploys exactly the checked ZIP contents, manual runs no longer deploy to WP.org by default - Removed deploy.yml, deploy-assets.yml, deploy-wporg.yml, deploy_wporg.yml and plugin-check.yml (duplicated or broken; superseded by the above)
HA-HUB-I
force-pushed
the
release/1.1.1
branch
from
October 28, 2026 10:25
004f638 to
9d1ed51
Compare
4 of 5 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Prepares 1.1.1 for WordPress.org and puts every future release behind an automated QA gate.
Plugin fixes (1.1.1)
&or<used to break them); API error text is escaped before it is shown; API descriptions go throughwp_kses_post.get_woocommerce_currency()).manage_stockgets a real boolean; import queues are no longer autoloaded; uninstall removes all counters.Tested up to: 7.1(the only Plugin Check error on 1.1.0),Requires at least: 6.5(needed forRequires Plugins), clearer External Services section, changelog.QA tooling
composer qa= version check + PHPCS (WPCS 3.4 + PHPCompatibilityWP) + PHPStan L5 (WP/WC stubs) + Plugin Check.composer.lockis now tracked.bin/build-zip.phpbuilds the ZIP from.distignore;bin/check-versions.phpkeeps header/readme/constant/changelog/tag in sync..gitattributesforces LF so local (Windows) and CI results match.CI
ci.yml(QA): version consistency,php -lon PHP 7.4–8.5, PHPCS with PR annotations, PHPStan, Plugin Check on the built ZIP.release.yml: tagv*→ QA → build → GitHub Release → WordPress.org. Builds from the tagged commit (it used to buildmain), deploys exactly the checked ZIP, manual runs don't deploy to WP.org unless asked.Test plan
debug.log; SOAP envelope valid with&<>"in credentials; empty password keeps stored one; queue option autoload offgit tag v1.1.1 && git push origin v1.1.1Known open item
gencloud.bg has no privacy policy / terms page, so the External Services section has no such links. WP.org reviewers may ask for them.