Changeset 3690952

Timestamp:

09/11/2026 07:16:21 AM (6 weeks ago)

Author:

aaronhsieh

Message:

Release 1.8.2: WordPress 7.1 compatibility and exact changelog version matching

Location:

site-add-on-watchdog/trunk

Files:

• CHANGELOG.md (modified) (1 diff)
• languages/site-add-on-watchdog.pot (modified) (1 diff)
• readme.txt (modified) (3 diffs)
• site-add-on-watchdog.php (modified) (2 diffs)
• src/Scanner.php (modified) (1 diff)
• src/Version.php (modified) (1 diff)

site-add-on-watchdog/trunk/CHANGELOG.md

@@ -5 +5 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.8.2] - 2026-09-11
+
+### Changed
+
+- Update WordPress compatibility to 7.1.
+- Verify the packaged plugin with an activation and notification-free scan on WordPress 7.1 in CI.
+
+### Fixed
+
+- Match exact released versions in changelog headings instead of similarly numbered versions or prereleases.
+- Recognize heading levels 2 through 6 and inline heading markup without including unrelated entries.
+- Skip versioned changelogs that have no matching release instead of reporting an unrelated security fix.
+- Add eight regression cases for changelog version matching.
 
 ## [1.8.1] - 2026-08-02

site-add-on-watchdog/trunk/languages/site-add-on-watchdog.pot

@@ -3 +3 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: Site Add-on Watchdog 1.8.1\n"
+"Project-Id-Version: Site Add-on Watchdog 1.8.2\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/site-add-on-watchdog\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

site-add-on-watchdog/trunk/readme.txt

@@ -3 +3 @@
 Tags: security, plugins, monitoring, notifications
 Requires at least: 6.0
-Tested up to: 7.0
+Tested up to: 7.1
 Requires PHP: 8.1
-Stable tag: 1.8.1
+Stable tag: 1.8.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -114 +114 @@
 == Changelog ==
 
+= 1.8.2 =
+* Update WordPress compatibility to 7.1.
+* Match exact released versions in changelog headings, including formatted headings and heading levels 2 through 6.
+* Avoid false security alerts from similarly numbered versions, prereleases, and unrelated changelog entries.
+* Add regression coverage for changelog parsing and a packaged WordPress scan smoke test.
+
 = 1.8.1 =
 * Filter WPScan disclosures against the installed plugin version so resolved vulnerabilities are not reported as active.
@@ -136 +142 @@
 == Upgrade Notice ==
 
+= 1.8.2 =
+Updates WordPress compatibility to 7.1 and prevents false security alerts caused by matching unrelated changelog versions.
+
 = 1.8.1 =
 External Cron calls must now use POST. Update existing GET jobs before upgrading; legacy `?key=` authentication remains temporarily available only for POST requests, while new jobs should use the `X-Watchdog-Cron-Key` header.

site-add-on-watchdog/trunk/site-add-on-watchdog.php

@@ -4 +4 @@
  * Plugin Name: Site Add-on Watchdog
  * Description: Monitors installed plugins for potential security risks and outdated versions.
- * Version:     1.8.1
+ * Version:     1.8.2
  * Author:      Aaron
  * Author URI:  https://www.worksbyaaron.com/
@@ -11 +11 @@
  * Requires at least: 6.0
  * Requires PHP: 8.1
- * Tested up to: 7.0
+ * Tested up to: 7.1
  */
 

site-add-on-watchdog/trunk/src/Scanner.php

@@ -295 +295 @@
         }
 
-        $patternForVersion = sprintf(
-            '/<h4[^>]*>[^<]*%s[^<]*<\/h4>\s*(.*?)(?=<h4|\z)/is',
-            preg_quote($remoteVersion, '/')
-        );
-
-        if (preg_match($patternForVersion, $changelogHtml, $match)) {
-            return $match[0];
-        }
-
-        if (preg_match('/<h4[^>]*>.*?<\/h4>\s*(.*?)(?=<h4|\z)/is', $changelogHtml, $match)) {
-            return $match[0];
+        $headingPattern = '/<h([2-6])\b[^>]*>(.*?)<\/h\1>\s*(.*?)(?=<h[2-6]\b|\z)/is';
+        if (preg_match_all($headingPattern, $changelogHtml, $entries, PREG_SET_ORDER)) {
+            $versionPattern = '/(?<![0-9A-Za-z.])v?' . preg_quote($remoteVersion, '/')
+                . '(?![0-9A-Za-z.+-])/i';
+
+            foreach ($entries as $entry) {
+                $heading = $this->stripAllTags($entry[2]);
+                if (preg_match($versionPattern, $heading)) {
+                    return $entry[3];
+                }
+            }
+
+            return '';
         }
 

site-add-on-watchdog/trunk/src/Version.php

@@ -5 +5 @@
 final class Version
 {
-    public const NUMBER = '1.8.1';
+    public const NUMBER = '1.8.2';
     public const PREFIX = 'siteadwa';
 }