=== hallowebsite Plugin Vault ===
Contributors: hallowebsite
Requires at least: 6.3
Requires PHP: 8.2
Stable tag: 1.6.0
License: GPLv2 or later

Manages your own plugin ZIPs with releases, versions, changelogs and secure private storage. Publishes one page per plugin with bilingual documentation via shortcodes.

== 1.6.0 ==
* Rebranded to hallowebsite Plugin Vault (author: hallowebsite). Folder, main file, post types, meta keys, shortcodes and block names are unchanged, so it updates in place.
* Public plugin pages at /plugins/{slug}/ (base configurable under Plugin Vault → Plugin-Seiten). Only published plugins with status Active or Beta are reachable; internal/archived plugins return 404 and are excluded from the WP sitemap.
* New fields per plugin: short description EN (DE field is now a textarea), full documentation DE and EN (classic editor), featured image.
* Single-page shortcodes: [hpv_plugin field=""], [hpv_plugin_description], [hpv_plugin_docs toc="1"], [hpv_plugin_download], [hpv_plugin_meta], [hpv_plugin_changelog], [hpv_plugin_releases], [hpv_plugin_lang_switch], [hpv_plugin_image]. They detect the current plugin automatically; use id="" or slug="" elsewhere.
* Language: automatic (site locale), ?hpv_lang=de|en, or forced in settings; falls back to the other language when a text is missing.
* Optional default template (shortcodes/HTML) rendered as the content of every plugin page; switch it off to design the page yourself, e.g. with Kadence Elements.
* Minimal frontend CSS that only uses Kadence palette variables (can be disabled). Simple, semantic markup.
* Release pages now render inside your theme header/footer (noindex, no-referrer kept).
* Cards: title links to the plugin page, new "Learn more" button (show_page_button, page_label, link_title, lang) and Kadence palette colours.
* REST: permalink and description_en added.
* Fix: checksum label in cards said "md5" but the value is SHA-256.

== Update ==
Back up the database and private ZIP directory, then replace the plugin (same folder halloplugin-vault). Permalinks are flushed automatically once. If you already have a page with the slug "plugins", that page keeps working; plugin pages live below it.

== 1.5.1 ==
Wichtige Einstellungen direkt in den Admin-Listen bearbeitbar: Releases (Kanal, Status, Freigabe) und Plugins (Status). Speichert sofort per AJAX, nur für Administratoren.

== 1.5.0 (Sicherheitsupdate) ==
Private Speicherung außerhalb des Webroots; Migration vorhandener Uploads; Freigabe-Token nur im Backend; Veröffentlichung und Berechtigungen strikt prüfen; ZIP-Limits und SHA-256; Block API v3. Vollständige Hinweise in SECURITY-UPGRADE.md.
