From 736f44881a4a5f8388c35711dd406395748158d2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Brian=20Sch=C3=A4ffner?= <burnify.design@gmail.com>
Date: Fri, 2 Oct 2026 21:55:43 +0200
Subject: [PATCH] fix(wp-cli-console): prepare clean production archive for
 v1.0.3

---
 .github/workflows/archive.yml | 11 +++++++++++
 CHANGELOG.md                  |  8 ++++++--
 README.md                     | 12 ++++++++++++
 wp-cli-console.php            |  2 +-
 4 files changed, 30 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/archive.yml b/.github/workflows/archive.yml
index 5cc4ca9..7a3511a 100644
--- a/.github/workflows/archive.yml
+++ b/.github/workflows/archive.yml
@@ -19,8 +19,19 @@ permissions:
 
 jobs:
   archive:
+    permissions:
+      contents: read
+      actions: read
+      attestations: write
+      id-token: write
     uses: sympress/workflows/.github/workflows/wordpress-archive.yml@177fa0d727b278d2103052ec77c102b4a4c492a0
     with:
+      artifact_attestation: false
+      artifact_extra_excludes: >-
+        /tests /docs /AGENTS.md /CONTRIBUTING.md /qa-adoption.json
+        /phpcs.xml /phpcs.xml.dist /phpstan.neon /phpstan.neon.dist
+        /phpunit*.xml* /.php-cs-fixer* /.gitignore /.gitattributes
+        /composer.review*.json /composer.review*.lock /coverage-html
       main_file: wp-cli-console.php
       package_version: ${{ github.event.inputs.version }}
     secrets:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b2d2115..7167a86 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 where applicable.
 
-## Unreleased
+## [1.0.3] - 2026-10-02
 
-- Initial WP-CLI Console package documentation.
+- Repair archive caller permissions for the pinned reusable build workflow.
+- Exclude tests, development documentation, QA configuration and coverage output
+  from the production archive while retaining production Composer dependencies,
+  artifact checksums and the manifest.
+- Align the source plugin header with the new archive release version.
diff --git a/README.md b/README.md
index a70370c..6a0e48c 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,18 @@ composer qa
 
 This package is licensed under `GPL-2.0-or-later`.
 
+## Release archives
+
+The archive workflow and archive check use the reviewed reusable workflow commit
+`177fa0d727b278d2103052ec77c102b4a4c492a0`. Releases install production Composer
+dependencies and include the artifact manifest and checksums. Tests, development
+documentation, QA configuration and coverage output are excluded. Source ZIPs
+also use `.gitattributes` export exclusions. Artifact attestation remains disabled.
+
+Version 1.0.3 prepares a fresh archive with corrected caller permissions; earlier
+tags and published archives retain their original contents. The new archive must
+pass the hosted archive check before it is attached to the release.
+
 ## Positional value validation
 
 Externally supplied positional option names are validated before invoking the
diff --git a/wp-cli-console.php b/wp-cli-console.php
index d55996f..569a138 100644
--- a/wp-cli-console.php
+++ b/wp-cli-console.php
@@ -3,7 +3,7 @@
 /**
  * Plugin Name: WP-CLI Console
  * Description: Symfony Console wrappers for useful WP-CLI workflows.
- * Version: 1.0.0
+ * Version: 1.0.3
  * Requires at least: 6.9
  * Requires PHP: 8.5
  * Author: Brian Schaeffner