WordPress/two-factor 0.15.0

on GitHub

Breaking Changes

• Trigger two-factor flow only when expected by @kasparsd in #660 and #793.

New Features

• Include user IP address and contextual warning in two-factor code emails by @todeveni in #728
• Consistent user experience for TOTP setup by @kasparsd in #792
• Optimize email text for TOTP by @masteradhoc in #789
• Add "Settings" action link to plugin list for quick access to profile by @hardikRathi in #740
• Additional form hooks by @eric-michel in #742
• Full RFC6238 Compatibility by @ericmann in #656

Documentation

• @since docs by @masteradhoc in #781
• Update user and admin docs, prepare for more screenshots by @jeffpaul in #701
• Add changelog & credits, update release notes by @jeffpaul in #696
• Clear readme.txt by @masteradhoc in #785
• Add date and time information above TOTP setup instructions by @masteradhoc in #772
• Clarify TOTP setup instructions by @masteradhoc in #763
• Update RELEASING.md by @jeffpaul in #787

Development Updates

• Pause deploys to SVN trunk for merges to master by @kasparsd in #738
• Fix CI checks for PHP compatability by @kasparsd in #739
• Fix Playground refs by @kasparsd in #744
• Persist existing translations when introducing new helper text in emails by @kasparsd in #745
• Fix missing_direct_file_access_protection by @masteradhoc in #760
• Fix mismatched_plugin_name by @masteradhoc in #754
• Introduce Props Bot workflow by @jeffpaul in #749
• Plugin Check: Fix Missing $domain parameter by @masteradhoc in #753
• Tests: Update to supported WP version 6.8 by @masteradhoc in #770
• Fix PHP 8.5 deprecated message by @masteradhoc in #762
• Exclude 7.2 and 7.3 checks against trunk by @masteradhoc in #769
• Fix Plugin Check errors: MissingTranslatorsComment & MissingSingularPlaceholder by @masteradhoc in #758
• Add PHP 8.5 tests for latest and trunk version of WP by @masteradhoc in #771
• Add phpcs:ignore for falsepositives by @masteradhoc in #777
• Fix(totp): otpauth link in QR code URL by @sjinks in #784
• Update deploy.yml by @masteradhoc in #773
• Update required WordPress Version by @masteradhoc in #765
• Fix: ensure execution stops after redirects by @sjinks in #786
• Fix WordPress.Security.EscapeOutput.OutputNotEscaped errors by @masteradhoc in #776

Dependency Updates

• Bump qs and express by @dependabot[bot] in #746
• Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #750
• Bump lodash-es from 4.17.21 to 4.17.23 by @dependabot[bot] in #748
• Bump phpunit/phpunit from 8.5.44 to 8.5.52 by @dependabot[bot] in #755
• Bump symfony/process from 5.4.47 to 5.4.51 by @dependabot[bot] in #756
• Bump qs and body-parser by @dependabot[bot] in #782
• Bump webpack from 5.101.3 to 5.105.0 by @dependabot[bot] in #780

New Contributors

• @hardikRathi made their first contribution in #740
• @eric-michel made their first contribution in #742
• @masteradhoc made their first contribution in #754
• @ericmann made their first contribution in #656

Full Changelog: 0.14.2...0.15.0