# Changelog

All notable changes to the Nutaan Chatbot Widget plugin will be documented in this file.

## [1.0.8] - 2026-01-28

### Removed

- Removed internal GitHub updater to comply with WordPress.org guidelines

### Fixed

- Fixed PHPCS linting errors in `nutaan-widget.php`
- Properly handled nonce verification for settings page
- Fixed script tag construction to comply with WP standards

## [1.0.6] - 2026-01-17

### Security

- **SECURITY ENHANCEMENT**: Complete security overhaul to meet WordPress plugin guidelines
- Added nonce verification for CSRF protection on settings form
- Implemented comprehensive input validation with regex patterns for credentials
- Enhanced output escaping throughout the plugin using wp_json_encode() and proper escaping functions
- Added proper capability checks with wp_die() for unauthorized access
- Improved $\_GET parameter validation and sanitization
- Added proper error logging for GitHub API failures
- Implemented comprehensive data sanitization for all GitHub API responses
- Added SSL verification for external API requests
- Improved JavaScript security with IIFE pattern and input sanitization
- Added HTML5 pattern validation for credential input fields
- All external links now use rel="noopener noreferrer" for security

### Added

- Added admin notices for missing credentials when widget is enabled
- Enhanced privacy documentation in admin settings page
- Added plugin constants for better code organization

### Improved

- Enhanced GitHub updater with transient caching (12-hour cache) to reduce API calls
- Improved file existence checks before including files
- Better error handling throughout the codebase
- Comprehensive code documentation improvements

## [1.0.5] - 2026-01-03

### Added

- GitHub-based auto-update system for automatic plugin updates
- Custom updater that checks GitHub releases for new versions
- One-click update capability from WordPress dashboard
- Update notifications when new versions are available

### Changed

- Plugin now automatically checks GitHub for updates
- Simplified update process for users

### Documentation

- Added comprehensive UPDATE-GUIDE.md explaining the update mechanism
- Documented alternative WordPress.org submission process

## [1.0.4] - 2025-12-29

### Added

- Quick setup option: paste your complete script tag from Nutaan dashboard to auto-extract credentials
- Visual feedback when credentials are successfully extracted (green highlight animation)
- Status messages for credential extraction (success, partial, or error)
- "OR" divider in admin settings UI separating quick setup from manual entry

### Fixed

- GitHub Actions release workflow: added `mkdir -p` to create directory structure before creating zip file

### Improved

- Admin settings page layout with clearer separation between setup methods
- User experience with instant visual confirmation of extracted credentials

## [1.0.3] - 2025-12-15

### Fixed

- Minor improvements and bug fixes

## [1.0.0] - 2025-11-29

### Added

- Initial release of Nutaan Chatbot Widget
- Easy WordPress admin configuration interface
- Authorization token and API key support
- Enable/disable widget functionality
- Automatic widget loading on all pages
- Settings link on plugins page
- Secure credential sanitization
- Clean uninstall process
- WordPress plugin repository assets (banner and icon)
- Logo integration in admin settings page

### Features

- Simple one-click enable/disable
- Secure API credential management
- Automatic chatbot widget injection
- User-friendly admin interface
- Lightweight implementation
- No coding required for setup

### Security

- Sanitized input validation
- Secure credential storage
- Proper WordPress escaping functions
- Protected against direct file access