What's Changed

• Improved automated release process
• Improved caching errors
• Clarify steps in RELEASE.MD by @cdils in #407
• set update-browserslist.yaml to manual dispatch only by @chuckadams in #444
• [bump-version] Bump version to 1.3.0 by @github-actions[bot] in #453
• Generate POT - 2026-02-25-215627 by @github-actions[bot] in #454
• Release merging 1.3.0 into main for production release! by @Ipstenu in #439

Full Changelog: 1.2.2...main

Props

Co-authored-by: Carrie Dils
Co-authored-by: Chuck Adams
Co-authored-by: John Blackbourn
Co-authored-by: Andy Fragen
Co-authored-by: Norcross
Co-authored-by: rmccue
Co-authored-by: Joe Dolson
Co-authored-by: Shady Sharaf

What's Changed

• Validate bundle hash by @afragen in #437

Full Changelog: 1.3.0-RC2...1.3.0-RC3

What's Changed

• Pass at validation of hash by @afragen in #436

Full Changelog: 1.3.0-RC1...1.3.0-RC2

What's Changed

• Add RELEASE.md documenting the version release process by @cdils in #355
• Update changelog.md with 1.2.1 release notes by @cdils in #391
• Pass 4 arguments to maybe_rename_on_package_download. by @costdev in #394
• [bump-version] Bump version to 1.2.2 by @github-actions[bot] in #395

Full Changelog: 1.2.1...1.2.2

⚠️ WARNING: Release 1.2.1 is withdrawn as of 2026-01-11 ⚠️

This release has been withdrawn due to a bug in the updater code that prevents further updates from being available. Historical release notes are preserved below:

See release post at fair.pm

What's Changed

• confirm array or object parts exist before using by @norcross in #372
• Rename function for context by @afragen in #377
• Update rename on download by @afragen in #378
• Fix modal for empty $sections by @afragen in #375
• Update jdecked/twemoji to 17.0.2. by @costdev in #379
• Workflows: Add WP 6.8, 6.9 and PHP 8.5 to PHPUnit tests. by @costdev in #380
• More FAIR Connect naming changes by @johnbillion in #385
• Hash the directory name of a package on install. by @costdev in #227
• Update ca POT translation (12-18-25) by @marcarmengou in #387
• [bump-version] Bump version to 1.2.1 by @github-actions[bot] in #388
• Fix variable quoting in Generate POT by @cdils in #389

Full Changelog: 1.2.0...1.2.1

See release post at fair.pm

What's Changed

• Generate POT - 2025-11-07 by @github-actions[bot] in #314
• Issue and PR Templates by @Ipstenu in #304
• Updater: Use stylesheet directory to determine theme’s style.css location. by @peterwilsoncc in #323
• Docs: Convert block comments to multiple single line comments. by @costdev in #326
• Make emoji use and rendering consistent in GitHub templates. by @costdev in #321
• Link to the FAIRPM repo's discussions section. by @costdev in #322
• fix for non-fair plugin install with no did string by @afragen in #328
• Parse IndexNow request earlier. by @peterwilsoncc in #317
• Skip IndexNow notifications during imports. by @peterwilsoncc in #319
• Add readme.txt and changelog by @afragen in #331
• Add array_first() and array_last() compatibility from WP6.9 by @afragen in #332
• Update get|set_transient to get|set_site_transient by @afragen in #330
• Rename minifair to FAIR Beacon by @jdevalk in #340
• Ensure proper format of $icons in transient by @afragen in #343
• Add Author URI and Security contact to plugin header by @toderash in #346
• rework dotorg_connectivity site health check - 2 by @joedolson in #337
• removing data on uninstall by @norcross in #347
• Appropriate slug rename on update by @afragen in #342
• Support custom avatars when gravatar is left enabled. by @joedolson in #349
• [browserslist] Update browser regex by @github-actions[bot] in #325
• Change text naming of plugin by @joedolson in #351
• Update assets for FAIR Connect renaming by @joedolson in #352
• Add screenshots by @jazzsequence in #348
• Generate POT - 2025-11-08 by @github-actions[bot] in #324
• Generate POT - 2025-12-10 by @github-actions[bot] in #358
• Update ca POT translation (9-24-25) by @marcarmengou in #270
• add missing translator comments by @afragen in #359
• German translation files for FAIR 1.0 by @La-Geek in #297
• Generate missing i18n files - 2025-12-10 by @github-actions[bot] in #361
• Generate POT - 2025-12-10 by @github-actions[bot] in #360
• Populate alsoKnownAs data after fetching it from the ledger. by @johnbillion in #357
• Open the validated domain in a new tab so it doesn't open in the modal iframe by @johnbillion in #356
• Update conditional for possible empty $svg by @afragen in #363
• Generate POT - 2025-12-11 by @github-actions[bot] in #365
• Don't create a bundle for versions older than FAIR supports by @johnbillion in #288
• Update de_DE translation by @Soean in #112
• Close existing automated PRs before creating new ones by @jazzsequence in #362
• Update sv_SE to .pot for 2025-06-16 by @tobifjellner in #109
• Generate missing i18n files - 2025-12-11 by @github-actions[bot] in #366
• [bump-version] Bump version to 1.2.0 by @github-actions[bot] in #368
• Fix jq command in workflow for closing PRs by @rmccue in #369

New Contributors

• @toderash made their first contribution in #346
• @jazzsequence made their first contribution in #348

Full Changelog: 1.1.0...1.2.0

Introducing FAIR 1.1, our newest release as part of our regular 6-week release train. We’ve got some great new features, as well as refinements of existing ones.

One of the big features we’ve included in 1.1 is WP-CLI support for plugins, making it possible to manage plugins directly from the command line using their DID. We’ve heard from a lot of people that they’d love to be able to manage FAIR-distributed plugins using the CLI - and now you can!

We’ve also improved consistency and accuracy with a few parts of our user interface, helping to clarify the experience for everyone.

All of this, plus loads of other fixes below – as always, thanks to our amazing contributors.

Our plan is to release regularly on a roughly 6 week cadence to make sure we’re always getting the latest and greatest out to you.

We’ve also been cooking in the background on other components in the FAIR ecosystem, including significant work on AspireCloud and AspireExplorer – plus, we’ve just wrapped up our hackathon with Patchstack, building the groundwork for our labeler system (more on that soon!).

P.s. Still getting your head around FAIR? Check out our explainer video and post!

What's Changed

• Workflows: When detecting POT changes, ignore the creation date. by @costdev in #274
• Add a Playground link to a PR. by @costdev in #278
• Banner defaults should be empty string, not null by @afragen in #280
• Fix icon dimension check to match protocol requirements by @meszarosrob in #282
• Add WP-CLI support by @costdev in #277
• [browserslist] Update browser regex by @github-actions[bot] in #275
• Generate POT - 2025-10-04 by @github-actions[bot] in #285
• Add more data to get_package_data(), renamed from get_update_data() by @afragen in #286
• Generate POT - 2025-10-09 by @github-actions[bot] in #289
• [browserslist] Update browser regex by @github-actions[bot] in #298
• Add last_updated to metadata document by @costdev in #262
• Add plugin banner & icon assets by @joedolson in #306
• Skip avatar URLs or link markup that do not contain secure.gravatar.com. by @costdev in #302
• Modify Add Plugins message. by @afragen in #305
• fix duplicate entries in featured tab by @afragen in #307
• Fix plugin search, broke with escaping by @afragen in #309
• [browserslist] Update browser regex by @github-actions[bot] in #312
• Sort plugin modal tabs by @afragen in #310
• Patch update browsers bin by @ramonfincken in #44
• [bump-version] Bump version to 1.1.0 by @github-actions[bot] in #313
• Generate POT - 2025-10-27 by @github-actions[bot] in #303

New Contributors

• @meszarosrob made their first contribution in #282

Full Changelog: 1.0.0...1.1.0

Welcome FAIR 1.0!

In this release, we've added the ability to view federated packages in the plugin browser. If your selected aggregator supports FAIR federated plugins, they'll now appear in search results and listings.

Federated plugins show information on which repository they're sourced from, as well as DNS validation status if available, helping users determine which packages are authentic. We're working to develop more trust layers, so expect to see more on this in the future.

In addition, we now verify cryptographic signatures on packages, bringing strong verification to the WordPress plugin ecosystem. These use Ed25519 keys for signing, ensuring a high level of security for all FAIR Protocol packages - providing better security than plugins from legacy sources.

By the way: we've also updated our website, including a new directory to browse federated packages!

We've got a bunch of smaller changes as well, which you can find below. Thanks as always to our amazing contributors.

What's Changed

• [browserslist] Update browser regex by @github-actions[bot] in #209
• Add release asset header by @afragen in #211
• [browserslist] Update browser regex by @github-actions[bot] in #214
• Add defaults for missing data by @afragen in #220
• Use wp_cache_* instead of get|set_transient by @afragen in #218
• Fix dashboard news widget and add caching by @afragen in #223
• Generate POT - 2025-08-17 by @github-actions[bot] in #224
• [browserslist] Update browser regex by @github-actions[bot] in #226
• Use local metadata when attempting to get Mini-FAIR data from same site as package is registered by @afragen in #221
• Remove primary dashboard widget news feed by @afragen in #229
• Increase planets items by @afragen in #230
• Icons: Guard against a non-array updates response by @afragen in #244
• Prevent pings of unpublished URLs. by @peterwilsoncc in #246
• Change from wp_cache_* to *_transient for fair-plugin by @afragen in #248
• [browserslist] Update browser regex by @github-actions[bot] in #232
• Use bridged data from legacy endpoints by @rmccue in #250
• Add the "Activate" button to get_action_button(). by @costdev in #251
• Check if the package is installed before trying to set its filepath and slug. by @costdev in #253
• [browserslist] Update browser regex by @github-actions[bot] in #254
• Update class-lite.php to use wp_remote_get by @afragen in #256
• Verify signatures when downloading packages by @costdev in #247
• Add package domain validation by @rmccue in #243
• Ensure the user is allowed to activate the plugin. by @costdev in #260
• Remove debug message upon successful signature verification. by @costdev in #259
• Rename package from fair to fairpm by @rmccue in #263
• Only support PLC DIDs for now. by @costdev in #261
• Allow searching by DID by @costdev in #258
• Add some contact info to composer.json by @philipjohn in #119
• [bump-version] Bump version to 1.0.0 by @github-actions[bot] in #264
• Generate POT - 2025-09-23 by @github-actions[bot] in #265

New Contributors

• @philipjohn made their first contribution in #119

Full Changelog: 0.4.1...1.0.0