Derive current_version from tagged wp.org versions instead of plugin header

The wp.org API "version" field reflects the latest code in SVN trunk,
but some authors release to trunk without creating an SVN tag. Since
our version list is built from tags, the reported version may not exist
as a downloadable release. Use the highest tagged version instead.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: retlehs

internal/http/handlers.go

@@ -1,7 +1,6 @@
 package http
 
 import (
-	"cmp"
 	"context"
 	"crypto/sha256"
 	"database/sql"
@@ -26,6 +25,7 @@ import (
 	"github.com/roots/wp-composer/internal/config"
 	"github.com/roots/wp-composer/internal/deploy"
 	"github.com/roots/wp-composer/internal/og"
+	"github.com/roots/wp-composer/internal/version"
 )
 
 const perPage = 12
@@ -842,35 +842,11 @@ func parseVersions(pkg *packageDetail) []versionRow {
 			}
 			return 1
 		}
-		return compareVersions(b.Version, a.Version)
+		return version.Compare(b.Version, a.Version)
 	})
 	return rows
 }
 
-// compareVersions compares two version strings numerically by segment.
-// Returns -1, 0, or 1.
-func compareVersions(a, b string) int {
-	aParts := strings.Split(a, ".")
-	bParts := strings.Split(b, ".")
-	maxLen := len(aParts)
-	if len(bParts) > maxLen {
-		maxLen = len(bParts)
-	}
-	for i := range maxLen {
-		var av, bv int
-		if i < len(aParts) {
-			av, _ = strconv.Atoi(aParts[i])
-		}
-		if i < len(bParts) {
-			bv, _ = strconv.Atoi(bParts[i])
-		}
-		if c := cmp.Compare(av, bv); c != 0 {
-			return c
-		}
-	}
-	return 0
-}
-
 func queryDashboardStats(ctx context.Context, db *sql.DB) map[string]any {
 	stats := map[string]any{
 		"Stats": struct {

internal/packages/package.go

@@ -43,6 +43,7 @@ type Package struct {
 }
 
 // NormalizeAndStoreVersions normalizes raw versions and serializes to VersionsJSON.
+// It also sets CurrentVersion to the highest available version.
 // Returns the number of valid versions.
 func (p *Package) NormalizeAndStoreVersions() (int, error) {
 	if p.RawVersions == nil {
@@ -57,6 +58,11 @@ func (p *Package) NormalizeAndStoreVersions() (int, error) {
 		return 0, fmt.Errorf("marshaling versions: %w", err)
 	}
 	p.VersionsJSON = string(data)
+
+	if latest := version.Latest(normalized); latest != "" {
+		p.CurrentVersion = &latest
+	}
+
 	return len(normalized), nil
 }
 

internal/version/normalize.go

@@ -1,7 +1,9 @@
 package version
 
 import (
+	"cmp"
 	"regexp"
+	"strconv"
 	"strings"
 )
 
@@ -49,3 +51,42 @@ func NormalizeVersions(versions map[string]string) map[string]string {
 	}
 	return result
 }
+
+// Compare compares two version strings numerically by segment.
+// Returns -1, 0, or 1.
+func Compare(a, b string) int {
+	aParts := strings.Split(a, ".")
+	bParts := strings.Split(b, ".")
+	maxLen := len(aParts)
+	if len(bParts) > maxLen {
+		maxLen = len(bParts)
+	}
+	for i := range maxLen {
+		var av, bv int
+		if i < len(aParts) {
+			av, _ = strconv.Atoi(aParts[i])
+		}
+		if i < len(bParts) {
+			bv, _ = strconv.Atoi(bParts[i])
+		}
+		if c := cmp.Compare(av, bv); c != 0 {
+			return c
+		}
+	}
+	return 0
+}
+
+// Latest returns the highest version from a map of version -> download URL,
+// excluding dev-trunk. Returns empty string if no versions are present.
+func Latest(versions map[string]string) string {
+	var latest string
+	for v := range versions {
+		if v == "dev-trunk" {
+			continue
+		}
+		if latest == "" || Compare(v, latest) > 0 {
+			latest = v
+		}
+	}
+	return latest
+}