Summary
A compliance release with no change in behaviour. Every direct database call
the WordPress.org Plugin Check flags now states its reason at the call site,
and the Microsoft sign-in browser cookie is unslashed before it is checked.
Fixed
- The WordPress.org Plugin Check report for the Free build is clean again.
Each direct database call it flagged (schema probes in migrations, named
locks, compare-and-set writes on the plugin's own job tables, and the
prepared-SQL helpers) now carries its reason where the call is made. Nothing
about what those calls do has changed.
- The browser cookie that ties a Microsoft sign-in to the browser that started
it is unslashed before the hex check that already discards anything else.
Upgrade Notes
- Nothing to do. No migration, no reconnection, no settings change.
