magdev/wp-prometheus
0
Fork 0
Code Issues Pull Requests Actions Releases 16 Activity
30 Commits 2 Branches 17 Tags
main
Commit Graph
9 Commits
Author SHA1 Message Date
magdevandClaude Opus 4.6 1b1e818ff4 security: Fix XSS, insecure token generation, and harden import/export (v0.4.9) 
Security audit findings addressed:
- Replace jQuery .html() with safe .text() DOM construction (XSS prevention)
- Use crypto.getRandomValues() instead of Math.random() for token generation
- Add 1MB import size limit to prevent DoS via large JSON payloads
- Remove site_url from metric exports (information disclosure)
- Add import mode allowlist validation

Refactoring:
- Extract shared wp_prometheus_authenticate_request() function (DRY)
- Extract showNotice() helper in admin.js (DRY)
- Extract is_hpos_enabled() helper in Collector (DRY)

Performance:
- Optimize WooCommerce product counting with paginate COUNT query

Housekeeping:
- Add missing options to Installer::uninstall() cleanup

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-26 07:47:37 +01:00
magdevandClaude Opus 4.5 3b71a0f7c9 docs: Add database query timing documentation and dashboard panel (v0.4.7)
Create Release Package / build-release (push) Successful in 56s
Details 
- Add Query Duration Distribution panel to Grafana Runtime dashboard
- Add wordpress_db_query_duration_seconds to Help tab metrics reference
- Add SAVEQUERIES documentation section to README
- Update translation files with new strings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-03 19:27:57 +01:00
magdevandClaude Opus 4.5 5aaa73ec24 feat: Add dashboard extension hook for third-party plugins (v0.4.6)
Create Release Package / build-release (push) Successful in 1m5s
Details 
Add wp_prometheus_register_dashboards action hook allowing third-party
plugins to register their own Grafana dashboard templates.

- DashboardProvider: registration system with file/JSON support
- Security: path traversal protection, JSON validation
- Admin UI: "Extension" badge and plugin attribution
- Isolated mode support for dashboard registration hook

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-03 11:16:18 +01:00
magdevandClaude Opus 4.5 e5f2edbafa fix: Separate settings groups to prevent cross-tab overwrites (v0.4.5)
Create Release Package / build-release (push) Successful in 1m2s
Details 
Split Metrics sub-tab settings into separate WordPress option groups:
- wp_prometheus_endpoint_settings for auth token
- wp_prometheus_selection_settings for enabled metrics
- wp_prometheus_advanced_settings for isolated mode

This fixes the bug where saving from one sub-tab would clear settings
from other sub-tabs due to all settings sharing a single option group.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-02 23:12:41 +01:00
magdevandClaude Opus 4.5 cf1797d4bf feat: Split Metrics tab into sub-tabs and fix early mode storage (v0.4.3)
Create Release Package / build-release (push) Failing after 52s
Details 
- Add sub-tabs: Endpoint, Selection, Runtime, Advanced
- Fix early mode checkbox not saving (was outside form element)
- Add CSS styling for horizontal sub-tab navigation
- Update translations with new sub-tab strings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-02 21:45:36 +01:00
magdevandClaude Opus 4.5 898af5e9d2 feat: Add persistent storage support for Redis and APCu (v0.4.0)
Create Release Package / build-release (push) Successful in 56s
Details 
- Add StorageFactory class for storage adapter selection with fallback
- Support Redis storage for shared metrics across instances
- Support APCu storage for high-performance single-server deployments
- Add Storage tab in admin settings with configuration UI
- Add connection testing for Redis and APCu adapters
- Support environment variables for Docker/containerized deployments
- Update Collector to use StorageFactory instead of hardcoded InMemory
- Add all translations (English and German)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-02 16:15:53 +01:00
magdevandClaude Opus 4.5 bad977bef0 feat: Add custom metric builder, export/import, and Grafana dashboards (v0.3.0)
Create Release Package / build-release (push) Successful in 59s
Details 
- Custom Metrics Builder with admin UI for gauge metrics
- Support for static values and WordPress option-based values
- JSON-based export/import with skip/overwrite/rename modes
- Three Grafana dashboard templates (overview, runtime, WooCommerce)
- New tabs: Custom Metrics and Dashboards
- Reset runtime metrics button

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-02 15:27:16 +01:00
magdevandClaude Opus 4.5 bc108f6bd5 feat: Reorganize settings page with tabbed interface (v0.1.1)
Create Release Package / build-release (push) Successful in 57s
Details 
- Add tabbed navigation (License, Metrics, Help)
- Move Prometheus configuration to dedicated Help tab
- Separate static and runtime metrics with descriptions
- Add admin CSS for tab styling
- Add endpoint info, curl examples, and metrics reference in Help tab

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-02 14:30:11 +01:00
magdevandClaude Opus 4.5 7ff87f7c8d Initial plugin setup (v0.0.1)
Create Release Package / build-release (push) Failing after 48s
Details 
- Create initial WordPress plugin structure
- Add Prometheus metrics collector with default metrics
- Implement authenticated /metrics endpoint with Bearer token
- Add license management integration
- Create admin settings page under Settings > Metrics
- Set up Gitea CI/CD pipeline for automated releases
- Add extensibility via wp_prometheus_collect_metrics hook

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-01 15:31:21 +01:00