New. Plugins page. Show changelog in the update notice.

[alexandergull]

https://app.doboard.com/1/task/46119

[Copilot]

Copilot review overview

🟡 Changes recommended

Version mismatches can display unrelated release notes, and list styling may be stripped during sanitization.

Review effort: Balanced
Findings: 2 · 1 · 1

Open (4)

• Validate GitHub releases against the requested version tag · New
• Avoid using another release's notes when the version is unmatched · New
• Allow list-style in the sanitized changelog styles · New
• Add automated coverage for changelog fetch and fallback behavior · New

What changed in this PR

Adds changelog details to pending update notices on the WordPress Plugins page.

Changes:

• Fetches and caches changelogs from WordPress.org or GitHub.
• Sanitizes and injects changelog markup into update rows.
• Registers the notice within the admin plugin lifecycle.

File	Description
AbstractUpdateChangelogNotice.php	Implements fetching, parsing, caching, and injection.
UpdateChangelogNotice.php	Configures plugin-specific rendering and escaping.
Escape.php	Adds the changelog HTML allowlist.
spbc-admin.php	Registers the update notice.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.