v3.9.0 Latest
July 17, 2026
New 2 Improve 6 Fix 15 Security 1 Dev 5
New
- Added German, Spanish, Italian and Portuguese (Brazil) translations, and completed the existing French one.
- Centralized theme integration (BGR_Theme_Integration) that detects the active theme and adds a bgr-theme-{slug} body class with a filterable token map.
Improve
- Mapped review, rating and leaderboard colors to BuddyX --bx-color-* tokens with Reign and dark-literal fallbacks so dark mode renders correctly on BuddyX, BuddyX Pro and Reign.
- Unified the two admin stylesheets onto one shared --bgr-admin-* token vocabulary and tokenized the legacy admin colors.
- Rebuilt the admin settings screen with the modern Wbcom card-panel UI (sidebar navigation). Settings and saved data are unchanged.
- Replaced browser alert/confirm dialogs in the group criteria manager with accessible toast and confirm dialogs.
- Larger, accessible tap targets on the review submission button.
- Converted the star rating layout from floats to inline-flow so it mirrors correctly in RTL.
Fix
- JavaScript translations could never load in production: the translation file lookup used the minified script path, which never matches the file the build produces.
- The screen-reader labels on the star rating, the review actions and the skip link had no translatable source.
- The default review notification emails were hardcoded in English and could not be translated.
- Several translator notes sat in a separate PHP block from their string, so they never reached translators.
- Added visible :focus-visible outlines to review, rating, leaderboard and admin controls (WCAG 2.4.7).
- Dark mode now activates only on the explicit theme toggle (data-bx-mode="dark") and never from the OS preference.
- Removed the deprecated bundled admin wrapper.
- Review acceptance and denial notification emails could not be turned off; the enable toggles now persist an explicit off state.
- The acceptance and denial email toggles now hide their subject and message fields when switched off, matching the submission toggle.
- Removed the stray filled background bar behind each rating criterion in the Add Review form.
- Reworked the reviews pagination into a single consistent, theme-aware style with a clearly marked active page.
- Corrected the feedback slug so plugin activation data is stored under the plugin's own key.
- Corrected a double-escaped ampersand in the Help and Support heading.
- Fixed missing spaces before placeholders and a mistranslation in the French strings, and corrected the Portuguese (Brazil) New Post string.
- The plugin name is no longer translatable, so no locale can rename the product. French rendered it as "BuddyPress Group Evaluations" in the settings heading, the browser title and the feedback prompt.
Security
- Removed logged-out AJAX registrations for the accept, deny, remove and submit review endpoints, which require an authenticated user.
Dev
- Extracted the 125-line inline style block from the group criteria template into an enqueued, tokenized stylesheet with min and RTL builds.
- Consolidated the duplicated rating-color CSS into a single shared helper.
- Replaced HSL colors in the admin accordion with hex, and removed the unused .bgr-switch/.bgr-slider toggle CSS.
- Corrected two PHPStan findings in the translation tooling and the script-textdomain filter, so static analysis runs clean at the configured level.
- Tracked composer.json and the contract-audit baseline, which the blanket *.json ignore rule had been excluding, so the static analysis and contract gates are reproducible.