Agentic Daisy

Changelog — WebCalendar for WordPress

Changelog

Every release of WebCalendar for WordPress, documented. Latest version: 1.0.5, released June 4, 2026.

Install WebCalendar — Free on WordPress.org

1.0.5 — June 4, 2026

Completes the iCal time-zone import fix from 1.0.4. If you import .ics calendars — especially if you imported on 1.0.4 and saw times off by an hour — update now.

  • Fix: iCal import time-zone conversion now actually runs. 1.0.4 shipped the core fix but did not pass the site time zone to the importer, so UTC and zoned times were still stored verbatim and imported events appeared shifted by the UTC offset (for example, one hour during British Summer Time). The site time zone is now wired into the importer, so imported events land at the correct local time and day.

1.0.4 — June 4, 2026

Fixes imported iCal events appearing at the wrong time when the source file uses UTC or a different time zone.

  • Fix: iCal import now preserves event times across time zones. DTSTART/DTEND TZID values are forwarded on import, and UTC or zoned times are rebased to the calendar’s time zone, so imported events no longer appear shifted by several hours.
  • Updated the webcalendar-core engine to ^4.3.4, which includes the EventMapper time-zone import fixes.

1.0.3 — May 4, 2026

Critical fix for plugin activation on shared hosting, plus admin form save fixes. Strongly recommended.

  • Fix: Database connections now parse DB_HOST the same way WordPress core does — bare localhost resolves to a Unix socket, matching shared-hosting environments. Resolves the “Can’t assign requested address” error reported on plugin activation.
  • Fix: Activation no longer aborts on database connection errors — initial data seeding (categories, holiday calendar, layer subscriptions) retries automatically on the next admin request.
  • Fix: REST API validators for optional numeric fields now accept empty values as “not provided” instead of returning HTTP 400. Resolves admin form save failures when no category was selected.
  • Fix: The REST owner validator accepts the global-owner sentinel used by categories and nonuser calendars.
  • Testing: New E2E lane runs every test with WP_DEBUG enabled and fails on any plugin-originated PHP notice, warning, deprecation, or fatal — 39 critical-flow specs covering activation, REST write paths, and rendering.
  • Testing: New socket-only MySQL activation lane reproduces the WordPress.org reviewer environment end-to-end as a regression guard.

1.0.2 — April 21, 2026

Security hardening across REST, uploads, and outbound HTTP.

  • Security: Remote-calendar sync and webhook delivery now block private-IP and cloud-metadata destinations (SSRF hardening).
  • Security: Admin file uploads (CSV and iCal import) now route through WordPress’s upload handler with an explicit MIME allowlist, and temporary uploads are cleaned up after processing.
  • Security: Added direct-file-access guards to all directory index stubs.
  • Security: REST export-route nonce inputs are sanitized before verification.
  • Security: All 23 REST write endpoints across 8 controllers now declare explicit argument schemas with per-field sanitization and validation.
  • WP-CLI import/export commands now use the WordPress Filesystem API instead of raw file I/O.
  • Fix: The popup “View Event Details” link works with emoji event titles.
  • 1,038 automated tests (+23 new regression guards), PHPStan Level 9, zero coding-standards errors on changed code.

1.0.1 — March 9, 2026

WordPress.org review compliance plus several frontend fixes.

  • Fix: Single event pages now display the participant list.
  • Fix: The frontend calendar fetches all pages of events, fixing missing events on busy days.
  • Fix: Recurring event detail pages show the correct occurrence date.
  • Plugin slug changed to agenticdaisy-calendar per WordPress.org review.
  • Added external-service disclosures (OpenStreetMap, Google Maps, social sharing, add-to-calendar).
  • Bundled Leaflet locally instead of loading from a CDN.
  • WordPress Plugin Check: zero errors.
  • 1,126 automated tests, PHPStan Level 9, 86%+ coverage.

1.0.0 — March 5, 2026

Initial release — a full-featured calendar plugin, free, with no license gating.

  • Full calendar admin UI with month, week, and day views.
  • Event CRUD via REST API with full RFC 5545 recurring event support.
  • Categories with color coding and layer-based calendar filtering.
  • iCal import/export and remote calendar subscription with automatic sync.
  •  shortcode and Gutenberg blocks (Calendar, Upcoming Events).
  • Single event pages with SEO-friendly permalinks and Schema.org JSON-LD.
  • Open Graph and Twitter Card meta tags, social share buttons, and “Add to Google/Outlook/Yahoo” one-click buttons.
  • Global holiday management with standard US holiday import.
  • Conflict detection with “Save Anyway” option for overlapping events.
  • Email notification system with invitation templates and reminders.
  • Role-based access control with 36 granular capabilities.
  • REST API rate limiting and event pagination with safety caps.
  • 1,126 automated tests, PHPStan Level 9.

Stay Up to Date

WordPress notifies you of updates automatically from your admin dashboard. You can also follow @agenticdaisy on X for release announcements, or view this changelog on WordPress.org. Found a security issue? See our security policy.

Install WebCalendar — Free on WordPress.org