2.2.3

2.2.3

• Verified with Mattermost version 8-11 and WordPress 6.9.x
• Notifications are no longer sent for non‑standard login errors when all “Unsuccessful login” roles are unchecked (#2, itsumonotakumi)
• Fix override handling for Mattermost login/register button filter output
• Hardened OAuth2 post-login redirects to same-host only; external redirect_to values now fall back to admin/home
• Updated Composer dependencies (guzzlehttp/*, league/oauth2-client, symfony/deprecation-contracts) and removed paragonie/random_compat

Note

The vendor/ folder is not included in this Github repo. Please download the entire plugin from wordpress.org if you want the full release archive.