All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
0.11.0 - 2026-04-25
This release raises the minimum WordPress version to 6.4. The REST GET /wp-json/zoninator/v1/zones endpoint now requires an authenticated user; sites that depended on anonymous access can restore the previous behaviour via the new zoninator_rest_get_zones_permissions_check filter.
- fix: Enforce auth and nonce on
zoninator_search_postsAJAX handler by @GaryJones in #151 - fix: Harden zone description deserialisation and lock down
/zonesREST index by @GaryJones in #149 - fix: Harden admin UI against reflected and stored XSS by @GaryJones in #148
- fix: Small correctness fixes around locks, AJAX, and i18n by @GaryJones in #150
- Bump minimum WordPress version to 6.4 by @GaryJones in #132
- Migrate test infrastructure to wp-test-utils by @GaryJones in #142
- ci: Standardise test matrix and update readme by @GaryJones in #139
- chore: Migrate dependabot reviewers to CODEOWNERS by @GaryJones in #138
- Standardise configurations and harden GitHub Actions security by @GaryJones in #136
- Update composer.json for consistency by @GaryJones in #135
- Simplify .editorconfig file by @GaryJones in #134
- Migrate integration tests to use wp-env by @GaryJones in #133
- Add wp-env configuration for local development by @GaryJones in #131
- Update Composer, npm, and GitHub Actions dependencies via Dependabot
- Add AGENTS.md with structured agent guidance by @GaryJones in #143
0.10.2 - 2025-10-02
- fix: Prevent exposure of content for password-protected posts by @GaryJones in #125
- Deploy: Don't include .git/ directory by @GaryJones in #106
- Add and apply Rector by @GaryJones in #107
- CS: Fix or ignore coding standards issues by @GaryJones in #112
- Consolidate classes by @GaryJones in #117
- Refactor root file by @GaryJones in #118
- Fix rector config by @GaryJones in #119
- Update GitHub action to install SVN before deploy to WordPress.org by @raamdev in #120
- ci: Add SVN installation step for integration tests by @GaryJones in #123
- fix: Address deprecation notices during tests by @GaryJones in #124
- chore: Modernise i18n by @GaryJones in #126
0.10.1 - 2024-08-15
- Deploy: Don't include the .git/ directory by @GaryJones in #106
0.10.0 - 2024-08-09
This release has PHP 7.4 and WordPress 5.9 as the minimum supported versions.
- Increase min WP and PHP versions by @GaryJones in #98
- Add WP_Error check by @aosmichenko in #78
- Send empty set when search yields no results by @dlh01 in #82
- Increase autocomplete timeout by @pkevan in #69
- Fix bytes by @szepeviktor in #90
- CI: Use valid runs-on value, and fix some issues by @GaryJones in #95
- CI: Update action versions by @GaryJones in #96
- Docs: Various improvements by @GaryJones in #99
- NPM: Add version-bump-prompt by @GaryJones in #100
- Add auto-deploy for WordPress.org plugin repo by @GaryJones in #101
0.9 - 2023-10-20
- Correctly position cloned sortable element on mobile.
- Add method to add post type to Zoninator.
- Fix simple typo.
- Add filter to control fields included in Zoninator zone feed responses.
- Switch from travis to GitHub actions.
- Add default_post_types property to Zoninator class.
0.8 - 2018-01-31
- Added a REST API for retrieving and managing zones.
- Support for special characters in zone names and descriptions.
- Added compatibility with WordPress 4.4 admin styles.
- Add the ability to save zone content to fix race conditions / problems with the autosave in #51.
- Add ability to filter the dates to search in #52.
- General performance improvements.
- Support for term splitting in 4.2.
- Run the init hook later so that we can allow custom post types to attach themselves to the plugin. See this support ticket.
- Better translation support.
- Coding standards cleanup.
- WordPress version requirements bumped to 3.5.
- Support for touch events for mobile via jQuery UI Touch Punch.
- Filter recent posts or search-as-you-type by date (today, yesterday, all) or category for more refined results, props Paul Kevan and the Metro UK team.
- New actions fired when adding/removing posts from zones.
- Bits of clean-up.
- New dropdown that recent posts which can be adding to zones, props metromatic and Metro UK.
- New filter:
zoninator_posts_per_page, to override the default posts_per_page setting. - Use core bundled versions of jQuery UI.
- Introduce z_get_zone_query: returns a WP_Query object so you can run the loop like usual.
- Disable editing and prefixing of slugs. They're just problems waiting to happen...
- Add new filter to allow filtering of search args, props imrannathani for the suggestion.
- Allow scheduled posts to be added to zones, so they automagically show up when they're published, props imrannathani for the idea.
- Default to published post in all zone queries in the front-end. Scheduled posts can still be added via a filter.
- Run clean_term_cache when a post is added or deleted from a zone so that the necessary caches are flushed.
- Add new filter to limit editing access on a per-zone level. props hooman and the National Post team.
- Allow editor role (editor_others_posts) to manage zones (plus other capability fixes, props rinat k.)
- Move Zones to a top-level menu so that it's easier to access. And doesn't make much sense hidden under Dashboard.
- Change the way error and success messages are handled.
- jQuery 1.6.1 compatibility.
- Bug fix: Custom Post Types not being included in search. Thanks, Shawn!
- Bug fix: Custom Post Types not being included in post list. Thanks, Daniel!
- Bug fix: Error thrown when removing last post in a zone. Thanks, Daniel!
- Other cleanup.
- Initial Release!