Changelog
ChangelogPower Extensions

Power Extensions

These are all the changes for each version of the Power Extensions bundle.

18.0.0

Release date: 20/05/2026

Breaking changes

  • [HTTP Client/PHP Constants and Environment Variables via Schema] Changed namespace (#2354)
  • [HTTP Client/PHP Constants and Environment Variables via Schema] Users need to be logged-in to access fields (#2354)
  • [PHP Constants and Environment Variables via Schema] The list of environment variables that can be queried is empty by default (#2354)

Fixed

  • [Cache Control] Added missing import in Cache Control Schema Configuration block (#2323)
  • Several bug fixes (#2392)

Security

  • [Email Sender] Require user to be logged-in to execute the _sendEmail mutation, and strip CRLF from email header values to prevent header injection (#2354)
  • [HTTP Client] Require user to be logged-in to execute the _sendHTTPRequest field; hard-block requests to private, loopback, link-local and reserved addresses (incl. cloud metadata endpoints) regardless of the configured allow/deny list (#2354)
  • [PHP Constants and Environment Variables via Schema] Require user to be logged-in to execute the _env field; permanently deny access to known-secret entries (DB_*, AUTH_*, *_KEY, *_SALT, *_SECRET, *PASSWORD*, *_TOKEN, …) for non-admin users regardless of the configured allow/deny list; change the default behavior to "Allow" with an empty allow-list, so no entries are readable until explicitly configured (#2354)

17.1.0

Release date: 23/03/2026

  • Skipped version (keep the same version as the Gato GraphQL plugin)

17.0.0

Improvements

  • Validate plugin license against Gato's new FluentCart-powered shop (#2303)
  • Persisted Queries: Update GraphiQL to v5 (#2299)

Fixed

  • Fixed - Show new version updates when clicking on the Show details link in Plugin updates

16.1.0

  • Skipped version (keep the same version as the Gato GraphQL plugin)

16.0.0

Fixed

  • [Function Fields] Passing a not-set position to _arrayItem (#2262)

15.3.0

  • Skipped version (keep the same version as the Gato GraphQL plugin)

15.2.0

Added

  • [Function Fields] Added fields _isString, _isNumeric, _isInteger, _isFloat, _isJSONObject and _isArray (#2162)
  • [Helper Function Collection] Added field _htmlParseHTML5 (#2210)

Improvements

  • Tested up to WordPress 6.9 (#2215)

15.1.0

  • Skipped version (keep the same version as the Gato GraphQL plugin)

15.0.0

  • No changes (keep the same version as the Gato GraphQL plugin)

14.0.0

Breaking changes

  • Upgraded min PHP version from 7.4 to 8.1 (#2057)

Improvements

  • Upgrade plugin to latest dependencies for PHP 8.1 (#2059)

13.2.0

Added

  • [Helper Function Collection] Added field _arrayOfJSONObjectsExtractPropertyAndConvertToObject (#1905)
  • [PHP Functions via Schema] Added field _objectIntersectKeyWithArrays (#1906)
  • [Helper Function Collection] Added field _arrayDeepFlatten (#1915)

Fixed

  • [Internal GraphQL Server] Do not include dependencies from the Gato GraphQL plugin (#1909)

13.1.0

Added

  • [Multiple Query Execution] New @exportFrom directive (#1848)
  • [Field to Input] Add property param to @passOnwards directive to fetch the value from another field (#1849)
  • [PHP Functions via Schema] Added fields _strArrayReplace and _strArrayReplaceMultiple (#1863)

Improvements

  • [Internal GraphQL Server] Display only the 1st error/warning from each entry in the Logs visualizer
  • [Multiple Query Execution] @export directive now uses IdentifierString instead of String for the as argument (#1854)
  • [Field to Input] @passOnwards directive now uses IdentifierString instead of String for the as argument (#1854)

13.0.0

Improvements

  • [Query Functions] Allow to not print nested errors with the @applyField (#1823)

12.1.0

Improvements

  • Do not escape forward HTML tags in fields _arrayEncodeAsJSONString and _objectEncodeAsJSONString (#1799)
  • Encode multibyte Unicode characters literally in fields _arrayEncodeAsJSONString and _objectEncodeAsJSONString (#1799)

12.0.0

  • No changes (keep the same version as the Gato GraphQL plugin)

11.3.0

Added

  • New field _objectRecursiveReplace (#1752)

Improvements

  • Tested up WordPress 6.8

Fixed

  • Translation loading error message in WordPress 6.8

11.2.0

Added

  • [Schema Functions] New field _objectMerge (#1726)

Improvements

  • [Schema Functions] Don't throw error when passing less than 2 items to _arrayMerge(arrays:) (#1732)

Fixed

  • [Query Functions] Error when setting value with different shape (eg: JSON) when iterating @underEachArrayItem

11.1.0

(Skipped)

11.0.0

Required actions

  • Important: Before updating this plugin, you need to update Gato GraphQL first! (Otherwise the application will throw an exception.)

Breaking changes

  • Register the changelog URL for the plugin, to show the new version's changelog when updating it (#1707)

10.4.0

Improvements

  • Persisted Queries: Make the GraphiQL client full-width (#1699)

10.3.0

Added

  • [Response Error Trigger] Field _warn and directive @warn to trigger warnings (#1689)

Improvements

  • Use the smaller images between PNG and WEBP (#1679)

10.2.0

Added

  • [Helper Function Collection] Field _generateRandomString (#1671)

10.1.0

Added

  • [Schema Functions] Fields _arrayEncodeAsJSONString and _objectEncodeAsJSONString (#1647)
  • [Helper Function Collection] Field _arrayOfJSONObjectsExtractPropertiesAndConvertToObject (#1653)

10.0.0

  • Initial launch