Changelog — JPKCom ACF References

Version history of the JPKCom ACF References WordPress plugin.

Version history of jpkcom-acf-references. Entries are taken verbatim from the project's README. A hands-on guide with tips is available in the project guide.

1.0.6

  • Raised the minimum WordPress version to 6.9 and "Tested up to" to WordPress 7.0
  • Switched license metadata to the SPDX identifier GPL-2.0-or-later with the HTTPS license URI

1.0.5

  • Security: updater prefers an exact match against the manifest download_url over the slug heuristic, so a tampered manifest can no longer bypass the checksum gate
  • Security: timing-safe checksum comparison (hash_equals()) with an is_string() guard against hash_file() failures
  • Security: manifest fetch via wp_safe_remote_get() (SSRF defense-in-depth)
  • Fixed PHP warning and missing contributor names in the plugin detail popup (display_name now provided)
  • Fixed PHP warning/deprecation on wp plugin list by completing the no_update transient entry (new_version, package, tested, requires_php)

1.0.4

  • Fixed pagination layout not wrapping on small screens or with long post titles
  • Pagination items now use flex-wrap and consistent page-link styling
  • Previous/next links are hidden when no adjacent post exists
  • Improved output escaping across all templates: __()esc_html__(), get_the_title()esc_html(), get_field()esc_html(), get_the_date()esc_attr(), get_post_type_archive_link()esc_url()

1.0.3

  • Fixed updater checksum verification failing on manual ZIP uploads (local file paths mistaken for URLs)
  • Fixed release ZIP missing top-level directory, causing WordPress to not recognize plugin updates

1.0.2

  • Added check for "SitePress" class

1.0.1

  • Fix for incorrect database content caused by WPML

1.0.0

  • Initial Release