Changelogs

Added

• Added automatic compatibility detection and JavaScript exclusions for Independent Analytics, Burst Statistics, Koko Analytics, Matomo Analytics, WP Statistics, Site Kit by Google, MonsterInsights, ExactMetrics, and PixelYourSite.

Fixed

• Treated an empty or whitespace-only Authorization server variable as absent so compatible hosts can still cache anonymous requests, while preserving the cache bypass for real credentials.
• Normalized panel, field, action, report, and responsive spacing across the settings interface and removed typographic shifts from active navigation states.

Added

• Added a separate origin-pull CDN module that rewrites same-site static URLs to an HTTPS CDN base only for explicitly selected file extensions; third-party URLs, HTML/API routes, data URLs, and unselected types remain untouched.
• Added cache invalidation when CDN settings change, plus controls for images, styles, scripts, fonts, media, and downloadable files.
• Added direct links to Cloudflare's official scoped-token, Global API Key, and Zone ID documentation next to the relevant fields.

Fixed

• Deferred the public Cache-Control header until after response validation, so a Set-Cookie, a non-200 status, or DONOTCACHEPAGE introduced during rendering can no longer instruct a shared or edge cache to store a private page.
• Stopped deselected scheduled database-cleanup tasks (and other list settings such as bypass paths) from being silently restored on save; list settings are now replaced wholesale instead of merged index by index.
• Fixed commerce bypass-path matching so the canonical /checkout on no-trailing-slash permalink sites is protected exactly like /checkout/, at both the origin and in the compiled Cloudflare edge rule.
• Preserved inline <script> and JSON-LD content and removed the stray <?xml> node that the DOM-based CSS, font, and embed optimizers could ship — and cache — on every optimized page.
• Corrected root-relative url(/…) rebasing in collected stylesheets so background and font references resolve against the site origin.
• Accepted CSS.escape()d utility-class selectors (for example Tailwind md:flex, w-1/2) in CSS Training Mode so utility-class themes no longer publish empty safelists.
• Canonicalized the Cloudflare managed-rule fingerprint so key-order differences in Cloudflare's response are no longer misread as drift and no longer trigger a redundant sync on every run.
• Anchored the Cloudflare bypass query-parameter rule to a parameter boundary so a short parameter such as s no longer excludes unrelated parameters like utms.
• Sent Vary: User-Agent when a separate mobile cache variant is active, and honored the "stale if error" duration in the emitted Cache-Control.
• Bounded queue-table growth by pruning terminal jobs on the queue cron, and web-hardened the cache and log directories.
• Stamped the advanced-cache drop-in with the plugin version and regenerated it automatically after an update.
• Removed the non-functional "Cache logged-in users" control.
• Invalidated affected post, homepage, and archive caches when comments are inserted through the front end, REST API, WP-CLI, or lower-level WordPress APIs, and when they are edited, moderated, or deleted.
• Batched related URL purges into one edge notification and removed both desktop and mobile origin variants.
• Prevented the deferred cache-safety header from rejecting the plugin's own otherwise cacheable response.
• Renamed the WP-CLI target option to --page-url so it no longer collides with WP-CLI's reserved --url site selector.
• Preserved explicit URL ports in diagnostic and purge cache keys so local Studio sites target the same artifact as live requests.
• Applied the configured Cloudflare edge lifetime to the managed Cache Rule instead of always respecting the origin value.
• Restricted sitemap warming to same-origin, cache-eligible URLs and bounded sitemap response sizes.
• Discarded obsolete and foreign settings keys during merges, and removed non-functional Gravatar self-hosting and font-preload controls.

Added

• Sitemap-driven cache warming: after a full purge, eligible URLs discovered from the WordPress sitemap are queued for background preloading (controlled by the new cache.preload toggle and bounded by cache.preload_max_urls), with a matching wp gt-performance cache warm command.
• Accessible brief tooltips and clearer labels for cache lifetimes, exceptions, Cloudflare, optimization, Akismet, and Redis controls.

What's Changed

• Added: Recurring, cache-aware Live Countdown block with leap-day handling and Block Bindings presets.
• Improved: All date calculations now use the WordPress site timezone and calendar-day arithmetic across daylight-saving changes.
• Improved: Searchable shortcode picker, block previews, toolbar accessibility, responsive editor controls and theme-neutral patterns.
• Improved: Shortcode processing in titles, excerpts and supported integrations is limited to this plugin's tags.
• Fixed: Countdown Interactivity API code now ships as a JavaScript module.
• Changed: Minimum supported WordPress version is 6.5.
• Changed: Removed duplicate legacy runtime files and consolidated rendering around one date engine.

Commits

• Release 1.8.0 (1f27f44)
• Prepare 1.8.0-beta (47a2613)
• Fix WordPress.org release tag version (38662fe)

• Added Explain This Page and verified purge receipts for deterministic cache diagnostics.
• Added the Cloudflare Free rule compiler and Commerce Safety Lab.
• Added unused-CSS training, staged rollout, review, publishing, and rollback controls.
• Added signed Private Islands for dynamic commerce fragments.
• Added the secure 25-site Fleet policy-console foundation.
• Made release publication compatible with private GitHub repositories by retaining checksums and workflow artifacts while conditionally skipping unavailable provenance attestations.

• Added Explain This Page diagnostics backed by the production cache policy, deterministic cache keys, local artifact metadata, and compiled edge expectations.
• Added Verified Purge with bounded redacted receipts covering origin removal, post-purge response fingerprints, response privacy signals, and Cloudflare cache headers.
• Added a Cloudflare Free rule compiler with exact expression preview, managed-rule drift detection, competing-rule overlap warnings, expected create/update/noop operation, and ten-rule capacity reporting.
• Added Commerce Safety Lab in-memory policy simulation and safe read-only checks for FluentCart, Easy Digital Downloads, and WooCommerce dynamic routes.
• Added administrator-only Unused CSS Training Mode with bounded selector observation, one-hour sessions, candidate review, publication, rollback, and deterministic 0/10/25/50/100 percent rollout cohorts.
• Added opt-in signed Private Islands for explicitly registered cart-count, account-link, and developer fragments with private no-store responses and fail-closed public fallbacks.
• Added a 25-site Fleet Console foundation using five-minute, one-use, license-signed configuration bundles with recursive credential removal and no remote-code capability.
• Added standalone Safety Lab and Fleet screens, Cloudflare plan UI, administrator-bar shortcuts, WP-CLI commands, and focused unit coverage for the new policy and signing layers.

• Added stable, port-safe license identities for Studio and other local WordPress sites so FluentCart protected-package signatures are not corrupted by localhost:PORT values.
• Kept ordinary production site URLs unchanged and added a gt_performance_license_site_url filter for deliberate identity overrides.

• Moved the live manual database scan and selectable cleanup interface from Optimization to Tools while keeping scheduled database maintenance in Optimization.
• Returned completed manual cleanup actions to the Tools tab and removed the redundant one-click cleanup card.
• Added compatible WP_REDIS_* configuration for Till Krüss Redis Object Cache, including ACL credential arrays, TCP/TLS and Unix sockets, database, prefix, timeouts, legacy key salt, and the emergency disable constant.
• Kept GTP_REDIS_* constants as highest-precedence overrides and added isolated configuration coverage for compatibility and precedence.
• Published the $199 FluentCart product page with verified direct-checkout links, one-site lifetime-license details, and responsive purchase sections.

• Added encrypted FluentCart license activation, weekly verification, deactivation, version checks, protected package delivery, and native WordPress update metadata.
• Added a dedicated License tab with masked credentials, plan and expiration details, on-demand update checks, wp-config.php license support, and administrator-friendly errors.
• Added response normalization and tests for FluentCart's live top-level updater response, malformed versions, unsafe package URLs, and the no-update path.
• Fixed activation-time registration of the plugin's custom queue and weekly cron schedules.
• Added the GT Performance FluentCart product identity plus reproducible WordPress directory, storefront, and social assets that embed real WordPress Studio screenshots.

• Added partial and validated regular-expression matching to the unused-CSS selector safelist.
• Added automatic Perfmatters feature ownership plus compatibility reporting for Akismet, Jetpack, Jetpack Boost, FlyingPress, WP Rocket, LiteSpeed Cache, WP Super Cache, W3 Total Cache, Autoptimize, and Core Forms.
• Added Jetpack visitor-state cache bypasses and automatic Akismet/Jetpack CSS and JavaScript safeguards.
• Added encrypted Redis credentials, TLS, ACL username, logical database, persistent connection, prefix, timeout, health-test, guarded drop-in installation controls, and documented wp-config.php constants for every connection setting.
• Added administrator-bar actions for current-page purge, cache warming, CSS regeneration, full page/edge purge, object-cache flush, Redis testing, and report/settings navigation.
• Added a pinned GitHub Actions release flow with version-surface validation, changelog release notes, PHP quality gates, verified ZIP packaging, SHA-256 checksums, artifact provenance attestations, and automatic prerelease publishing.

Fixed

• Send Email, Auto-Responder, and Emailit action cards now show variables for the current form fields on the Actions tab.
• Field variables are rendered server-side instead of depending on Fields-tab JavaScript.
• Added regression coverage for named, array, duplicate, and internal field handling.

What's Changed

Performance

• Replaced request-time block and field-group discovery with a generated OPcache-friendly manifest.
• Consolidated editor styles into one cacheable bundle, with site-specific bundles that exclude blocks disabled through Block Manager.
• Removed the TOC block's full-post do_blocks() re-render and moved its runtime CSS/JavaScript to conditional assets.
• Moved external-image downloads and thumbnail generation out of post saves into a bounded WP-Cron queue.
• Changed migration and recovery scans from unbounded all-post queries to resumable keyset batches, including an optional background migration worker.
• Added request-level image attachment lookup caching, post cache priming, bounded URL-preview responses, and contextual module loading.
• Moved callout, feature-grid, post-display, checklist, changelog, and pros/cons variation styling into cacheable stylesheets or CSS custom properties.

Added

• Block Manager for disabling unused block registrations and field groups.
• Asynchronous block usage inventory, job status, and performance diagnostics.
• Optional Server-Timing metrics in debug environments.
• Generated-artifact checks, PHP 7.4-8.5 compatibility CI, JSON validation, and PHPUnit coverage.

Fixed

• Replaced PHP 8-only str_ends_with() calls while retaining the advertised PHP 7.4 minimum.
• Reworked public star ratings to use atomic database tables and a REST endpoint, preventing lost concurrent votes and transient-option growth.
• Made URL Preview editor code cacheable and limited remote HTML responses to 1 MB.

Commits

• Release 2.9.0 performance overhaul (5503112)

Stats

• Commits: 1
• Changes: 48 files changed, 12640 insertions(+), 1356 deletions(-)

Plugin Info

• Blocks included: 29
• Requires WordPress: 6.0+
• Requires PHP: 7.4+
• Requires: ACF Pro 6.0+ or Secure Custom Fields

Installation

1. Download acf-blocks-plugin-*.zip from the assets below
2. Go to Plugins → Add New → Upload Plugin in WordPress admin
3. Upload the zip file and activate