sync develop to master with release: 1.4.3 by harshalranjhani · Pull Request #387 · rtCamp/login-with-google

harshalranjhani · 2026-07-29T09:18:58Z

Summary

Syncs develop into master for the Login with Google 1.4.3 release.

Changes

Require Google identities to have a verified email address before authentication or registration.
Update Composer and NPM dependencies.
Confirm compatibility with WordPress 7.0.2.

Override webpack-dev-server version

…roved security

Fixes: dependbot alerts

Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.1.0 to 5.2.0. - [Release notes](https://github.com/patrickjuchli/basic-ftp/releases) - [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md) - [Commits](patrickjuchli/basic-ftp@v5.1.0...v5.2.0) --- updated-dependencies: - dependency-name: basic-ftp dependency-version: 5.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [minimatch](https://github.com/isaacs/minimatch) from 10.2.2 to 10.2.4. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.2.2...v10.2.4) --- updated-dependencies: - dependency-name: minimatch dependency-version: 10.2.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…-5.2.0 chore(deps-dev): bump basic-ftp from 5.1.0 to 5.2.0

…/upload-artifact-7 chore(deps): bump actions/upload-artifact from 6 to 7

…/download-artifact-8 chore(deps): bump actions/download-artifact from 7 to 8

…-10.2.4 chore(deps-dev): bump minimatch from 10.2.2 to 10.2.4

…sory

Fix: patch serialize-javascript vulnerability and audit elliptic advisory

Bumps [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) from 31.5.0 to 31.6.0. - [Release notes](https://github.com/WordPress/gutenberg/releases) - [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md) - [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@31.6.0/packages/scripts) --- updated-dependencies: - dependency-name: "@wordpress/scripts" dependency-version: 31.6.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps and [svgo](https://github.com/svg/svgo). These dependencies needed to be updated together. Updates `svgo` from 3.3.2 to 3.3.3 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.2...v3.3.3) Updates `svgo` from 2.8.0 to 2.8.2 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.2...v3.3.3) --- updated-dependencies: - dependency-name: svgo dependency-version: 3.3.3 dependency-type: indirect - dependency-name: svgo dependency-version: 2.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.4 to 5.1.5. - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.1.4...v5.1.5) --- updated-dependencies: - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…/scripts-31.6.0 chore(deps-dev): bump @wordpress/scripts from 31.5.0 to 31.6.0

…9cf7b1a chore(deps): bump svgo

…-5.1.5 chore(deps): bump immutable from 5.1.4 to 5.1.5

Bumps [sass](https://github.com/sass/dart-sass) from 1.97.3 to 1.98.0. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.97.3...1.98.0) --- updated-dependencies: - dependency-name: sass dependency-version: 1.98.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Override yauzl to use patched version

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.5.0 to 2.6.1. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2.5.0...v2.6.1) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

chore(deps-dev): bump sass from 1.97.3 to 1.98.0

…ps/action-gh-release-2.6.1 chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1

Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.4 to 3.4.2. - [Commits](WebReflection/flatted@v3.3.4...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…18.1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1

Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.1.0 to 10.2.0. - [Commits](https://github.com/beaugunderson/ip-address/commits) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.29.0 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [qs](https://github.com/ljharb/qs) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together. Updates `qs` from 6.15.0 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.0...v6.15.2) Updates `express` from 4.22.1 to 4.22.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md) - [Commits](expressjs/express@v4.22.1...v4.22.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect - dependency-name: express dependency-version: 4.22.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.8.4 and updates ancestor dependency [concurrently](https://github.com/open-cli-tools/concurrently). These dependencies need to be updated together. Updates `shell-quote` from 1.8.3 to 1.8.4 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.8.4) Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v9.2.1...v10.0.3) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect - dependency-name: concurrently dependency-version: 10.0.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.13.1 to 2.14.1. - [Commits](vitejs/launch-editor@v2.13.1...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6. - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…r to 5.2.5 Resolves Dependabot alerts #255 (GHSA-64mm-vxmg-q3vj / CVE-2026-55602), #253 (GHSA-mx8g-39q3-5c79 / CVE-2026-9595), #235 (GHSA-79cf-xcqc-c78w / CVE-2026-6402). Lockfile-only update; overrides pin transitive http-proxy-middleware.

Resolves Dependabot alerts #237 (GHSA-5wxr-w449-57cm) and #236 (GHSA-pqwm-q9pv-ph8r / CVE-2026-46420). Same-major action pin bump.

fix(deps): security bumps for 5 Dependabot alerts

Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together. Updates `ws` from 8.19.0 to 8.21.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.19.0...8.21.0) Updates `ws` from 7.5.10 to 7.5.11 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.19.0...8.21.0) --- updated-dependencies: - dependency-name: ws dependency-version: 8.21.0 dependency-type: indirect - dependency-name: ws dependency-version: 7.5.11 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.4...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 5.0.4 to 5.0.7. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v5.0.4...v5.0.7) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 5.0.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps and [svgo](https://github.com/svg/svgo). These dependencies needed to be updated together. Updates `svgo` from 3.3.3 to 3.3.4 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.3...v3.3.4) Updates `svgo` from 2.8.2 to 2.8.3 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v3.3.3...v3.3.4) --- updated-dependencies: - dependency-name: svgo dependency-version: 3.3.4 dependency-type: indirect - dependency-name: svgo dependency-version: 2.8.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.4. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.4) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.8 to 8.5.23. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.23) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: add email verification check

fix: develop merge conflicts to sync with master

chore:update release notes

chore: update readme

vishalkakadiya and others added 30 commits February 20, 2026 16:07

Merge pull request #326 from rtCamp/update/packages

9d14451

Override webpack-dev-server version

Update dependencies in composer and and overides package.json for imp…

a0ca7b0

…roved security

Remove ajv overrides for wp-playground packages in package.json

618bd3f

Merge pull request #329 from rtCamp/security/dependbot

528af19

Fixes: dependbot alerts

Merge pull request #333 from rtCamp/dependabot/npm_and_yarn/basic-ftp…

0bf335e

…-5.2.0 chore(deps-dev): bump basic-ftp from 5.1.0 to 5.2.0

Merge pull request #334 from rtCamp/dependabot/github_actions/actions…

c5705fa

…/upload-artifact-7 chore(deps): bump actions/upload-artifact from 6 to 7

Merge pull request #335 from rtCamp/dependabot/github_actions/actions…

83fda42

…/download-artifact-8 chore(deps): bump actions/download-artifact from 7 to 8

Merge pull request #336 from rtCamp/dependabot/npm_and_yarn/minimatch…

5dcfd41

…-10.2.4 chore(deps-dev): bump minimatch from 10.2.2 to 10.2.4

Fix: patch serialize-javascript vulnerability and audit elliptic advi…

028df4d

…sory

Merge pull request #337 from rtCamp/fix/deps-security-audit-cleanup

6eb6980

Fix: patch serialize-javascript vulnerability and audit elliptic advisory

Merge pull request #338 from rtCamp/dependabot/npm_and_yarn/wordpress…

e2ae33f

…/scripts-31.6.0 chore(deps-dev): bump @wordpress/scripts from 31.5.0 to 31.6.0

Merge pull request #339 from rtCamp/dependabot/npm_and_yarn/multi-26b…

6dd2f11

…9cf7b1a chore(deps): bump svgo

Merge pull request #340 from rtCamp/dependabot/npm_and_yarn/immutable…

7f1c4ae

…-5.1.5 chore(deps): bump immutable from 5.1.4 to 5.1.5

fix ( dependabot ): update yauzl to patched version

c29b0ca

Merge pull request #345 from rtCamp/fix/dependabot-update-yauzl-version

a62ac9c

Override yauzl to use patched version

Merge pull request #344 from rtCamp/dependabot/npm_and_yarn/sass-1.98.0

cc01687

chore(deps-dev): bump sass from 1.97.3 to 1.98.0

Merge pull request #346 from rtCamp/dependabot/github_actions/softpro…

78fdcea

…ps/action-gh-release-2.6.1 chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1

Merge pull request #351 from rtCamp/dependabot/npm_and_yarn/lodash-4.…

5e7c089

…18.1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1

dependabot Bot and others added 25 commits May 7, 2026 08:59

fix(deps): bump shivammathur/setup-php to 2.37.1

43bf7e3

Resolves Dependabot alerts #237 (GHSA-5wxr-w449-57cm) and #236 (GHSA-pqwm-q9pv-ph8r / CVE-2026-46420). Same-major action pin bump.

Merge pull request #374 from rtCamp/deps/security-fixes-2026-06-30

4d73754

fix(deps): security bumps for 5 Dependabot alerts

fix: update version and add email verification check

374c95f

chore: fix dependabot issues

6f4eddc

chore: fix copilot feedback

8b1492e

Merge pull request #386 from rtCamp/fix/email-verified-check

b4435d0

fix: add email verification check

fix: merge conflict

5890f1f

chore: regenerate pot file

efa3bfc

Merge pull request #388 from rtCamp/fix/develop-merge-conflicts

4bab2ae

fix: develop merge conflicts to sync with master

chore:update release notes

1d4fcf3

Merge pull request #389 from rtCamp/chore/update-release-notes

8c012bd

chore:update release notes

harshalranjhani requested a review from Pathan-Amaankhan July 29, 2026 12:25

This comment was marked as resolved.

Sign in to view

harshalranjhani added 2 commits July 29, 2026 18:31

chore: update readme

f6892d9

Merge pull request #390 from rtCamp/chore/update-readme

8b1f701

chore: update readme

harshalranjhani merged commit 200986c into master Jul 29, 2026
7 checks passed

Navigation Menu

Uh oh!

sync develop to master with release: 1.4.3 - #387

sync develop to master with release: 1.4.3#387
harshalranjhani merged 62 commits into
masterfrom
develop

harshalranjhani commented Jul 29, 2026 •

edited

Loading

Uh oh!

This comment was marked as resolved.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Uh oh!

Conversation

harshalranjhani commented Jul 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Uh oh!

This comment was marked as resolved.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

harshalranjhani commented Jul 29, 2026 •

edited

Loading