1.0.0

Welcome FAIR 1.0!

In this release, we've added the ability to view federated packages in the plugin browser. If your selected aggregator supports FAIR federated plugins, they'll now appear in search results and listings.

Federated plugins show information on which repository they're sourced from, as well as DNS validation status if available, helping users determine which packages are authentic. We're working to develop more trust layers, so expect to see more on this in the future.

In addition, we now verify cryptographic signatures on packages, bringing strong verification to the WordPress plugin ecosystem. These use Ed25519 keys for signing, ensuring a high level of security for all FAIR Protocol packages - providing better security than plugins from legacy sources.

By the way: we've also updated our website, including a new directory to browse federated packages!

We've got a bunch of smaller changes as well, which you can find below. Thanks as always to our amazing contributors.

What's Changed

• [browserslist] Update browser regex by @github-actions[bot] in #209
• Add release asset header by @afragen in #211
• [browserslist] Update browser regex by @github-actions[bot] in #214
• Add defaults for missing data by @afragen in #220
• Use wp_cache_* instead of get|set_transient by @afragen in #218
• Fix dashboard news widget and add caching by @afragen in #223
• Generate POT - 2025-08-17 by @github-actions[bot] in #224
• [browserslist] Update browser regex by @github-actions[bot] in #226
• Use local metadata when attempting to get Mini-FAIR data from same site as package is registered by @afragen in #221
• Remove primary dashboard widget news feed by @afragen in #229
• Increase planets items by @afragen in #230
• Icons: Guard against a non-array updates response by @afragen in #244
• Prevent pings of unpublished URLs. by @peterwilsoncc in #246
• Change from wp_cache_* to *_transient for fair-plugin by @afragen in #248
• [browserslist] Update browser regex by @github-actions[bot] in #232
• Use bridged data from legacy endpoints by @rmccue in #250
• Add the "Activate" button to get_action_button(). by @costdev in #251
• Check if the package is installed before trying to set its filepath and slug. by @costdev in #253
• [browserslist] Update browser regex by @github-actions[bot] in #254
• Update class-lite.php to use wp_remote_get by @afragen in #256
• Verify signatures when downloading packages by @costdev in #247
• Add package domain validation by @rmccue in #243
• Ensure the user is allowed to activate the plugin. by @costdev in #260
• Remove debug message upon successful signature verification. by @costdev in #259
• Rename package from fair to fairpm by @rmccue in #263
• Only support PLC DIDs for now. by @costdev in #261
• Allow searching by DID by @costdev in #258
• Add some contact info to composer.json by @philipjohn in #119
• [bump-version] Bump version to 1.0.0 by @github-actions[bot] in #264
• Generate POT - 2025-09-23 by @github-actions[bot] in #265

New Contributors

• @philipjohn made their first contribution in #119

Full Changelog: 0.4.1...1.0.0