Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: wp-cli/extension-command
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: wp-cli/extension-command
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: copilot/allow-php-file-install
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 20 commits
  • 3 files changed
  • 4 contributors

Commits on Jan 19, 2026

  1. Initial plan

    Copilot committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    55a4daa View commit details
    Browse the repository at this point in the history

  2. Add support for installing plugins from single PHP file URLs 

    Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    da838b3 View commit details
    Browse the repository at this point in the history

  3. Add documentation and additional tests for PHP file installation 

    Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    1f1924d View commit details
    Browse the repository at this point in the history

  4. Address code review feedback: add validation and improve code structure 

    Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    075cb79 View commit details
    Browse the repository at this point in the history

  5. Add security validations for path traversal and improve UX with downl… 

    …oad message timing

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    0b4d7aa View commit details
    Browse the repository at this point in the history

  6. Fix security validations: properly check path traversal and validate … 

    …plugin headers

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    78e54f7 View commit details
    Browse the repository at this point in the history

  7. Optimize: check file existence before download and simplify path vali… 

    …dation

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    82f7819 View commit details
    Browse the repository at this point in the history

  8. Add support for GitHub Gist page URLs (gist.github.com) 

    Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 19, 2026
    Configuration menu
    Copy the full SHA
    551fe3e View commit details
    Browse the repository at this point in the history

  9. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    3a4d190 View commit details
    Browse the repository at this point in the history

  10. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    584d505 View commit details
    Browse the repository at this point in the history

  11. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    9f699f1 View commit details
    Browse the repository at this point in the history

Commits on Jan 22, 2026

  1. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Jan 22, 2026
    Configuration menu
    Copy the full SHA
    232e96b View commit details
    Browse the repository at this point in the history

  2. Improve error handling and validation in gist URL processing 

    - Add specific error handling for HTTP codes 401, 500, 503
- Add fallback for malformed rate limit responses
- Verify plugin directory creation after wp_mkdir_p()
- Fix regex pattern to properly match uppercase hex in gist IDs
- Add catch-all for unexpected HTTP status codes

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 22, 2026
    Configuration menu
    Copy the full SHA
    881032e View commit details
    Browse the repository at this point in the history

  3. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Jan 22, 2026
    Configuration menu
    Copy the full SHA
    264d2aa View commit details
    Browse the repository at this point in the history

  4. Merge branch 'main' into copilot/allow-php-file-install

    @swissspidy
    swissspidy committed Jan 22, 2026
    Configuration menu
    Copy the full SHA
    7138fb8 View commit details
    Browse the repository at this point in the history

  5. remove double check

    @swissspidy
    swissspidy committed Jan 22, 2026
    Configuration menu
    Copy the full SHA
    cb58c28 View commit details
    Browse the repository at this point in the history

  6. Apply suggestion from @swissspidy

    @swissspidy
    swissspidy authored Jan 22, 2026
    Configuration menu
    Copy the full SHA
    ff342c9 View commit details
    Browse the repository at this point in the history

  7. Support anonymous gists by making username optional in regex 

    Anonymous gists don't have a username in the URL path (e.g.,
gist.github.com/1234567890abcdef). Updated regex to make the username
segment optional using non-capturing group (?:[^/]+/)? so both
user-owned and anonymous gists are supported.

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 22, 2026
    Configuration menu
    Copy the full SHA
    aa00d38 View commit details
    Browse the repository at this point in the history

  8. Make PHP extension checks case-insensitive 

    Convert extension to lowercase before comparison in all PHP extension
checks to handle files with uppercase extensions (e.g., .PHP, .Php).
This makes the validation more robust and consistent across:
- Sanitized filename validation
- URL path detection
- Gist file filtering

Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
    @swissspidy
    Copilot and swissspidy committed Jan 22, 2026
    Configuration menu
    Copy the full SHA
    aadf613 View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2026

  1. Update src/WP_CLI/CommandWithUpgrade.php 

    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    @swissspidy
    swissspidy and Copilot authored Feb 5, 2026
    Configuration menu
    Copy the full SHA
    dad98c9 View commit details
    Browse the repository at this point in the history
Loading