2.8.0

Note that this release bumps the minimum required version of WordPress from 6.4 to 6.5.

Added

• Support for the WordPress.org plugin preview (props @faisal-alvi, @jeffpaul via #297).

Changed

• Update PHP compatibility check to use 10up/wp-compat-validation-tool (props @Sidsector9, @jeffpaul, @faisal-alvi via #291).
• Bump Wordpress "tested up to" version 6.7 (props @sudip-md, @jeffpaul, @dkotter via #310, #312).
• Bump WordPress minimum supported version to 6.5 (props @sudip-md, @jeffpaul, @dkotter via #310, #312).

Fixed

• Ensure all strings are properly translated (props @pedro-mendonca, @dkotter via #295).
• Properly handle malformed simple_local_avatar user data (props @adekbadek, @dkotter, @faisal-alvi via #302).

Security

• Run a user capability check before we clear the avatar cache (props @dkotter, @truonghuuphuc, @Sidsector9 via #309).
• Ensure REST API requests to set an avatar only allow existing attachment IDs to be used (props @dkotter, @justus12337, @faisal-alvi via GHSA-wfjh-m788-w2c5).
• Bump axios from 1.6.7 to 1.7.4 (props @dependabot, @faisal-alvi via #298).
• Bump webpack from 5.90.0 to 5.94.0 (props @dependabot, @faisal-alvi via #303).
• Bump ws from 7.5.10 to 8.18.0 and @wordpress/scripts from 27.1.0 to 30.4.0 (props @dependabot, @faisal-alvi via #305, #311).
• Bump body-parser from 1.20.2 to 1.20.3, express from 4.19.2 to 4.21.0, send from 0.18.0 to 0.19.0 and serve-static from 1.15.0 to 1.16.2 (props @dependabot, @faisal-alvi via #306).

Developer

• Update repo badges, add WordPress Playground badge, add plugin banner image (props @faisal-alvi, @thrijith, @jeffpaul via #297, #300, #304, #307).

New Contributors

• @pedro-mendonca made their first contribution in #295
• @adekbadek made their first contribution in #302
• @truonghuuphuc made their first contribution in #309
• @justus12337 made their first contribution in GHSA-wfjh-m788-w2c5

---

Full Changelog: 2.7.11...2.8.0
View closed items in the milestone.