Rebuild the production WordPress archive for v1.0.3

.github/workflows/archive.yml

@@ -19,8 +19,19 @@ permissions:
 
 jobs:
   archive:
+    permissions:
+      contents: read
+      actions: read
+      attestations: write
+      id-token: write
     uses: sympress/workflows/.github/workflows/wordpress-archive.yml@177fa0d727b278d2103052ec77c102b4a4c492a0
     with:
+      artifact_attestation: false
+      artifact_extra_excludes: >-
+        /tests /docs /AGENTS.md /CONTRIBUTING.md /qa-adoption.json
+        /phpcs.xml /phpcs.xml.dist /phpstan.neon /phpstan.neon.dist
+        /phpunit*.xml* /.php-cs-fixer* /.gitignore /.gitattributes
+        /composer.review*.json /composer.review*.lock /coverage-html
       main_file: wp-cli-console.php
       package_version: ${{ github.event.inputs.version }}
     secrets:

CHANGELOG.md

@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 where applicable.
 
-## Unreleased
+## [1.0.3] - 2026-10-02
 
-- Initial WP-CLI Console package documentation.
+- Repair archive caller permissions for the pinned reusable build workflow.
+- Exclude tests, development documentation, QA configuration and coverage output
+  from the production archive while retaining production Composer dependencies,
+  artifact checksums and the manifest.
+- Align the source plugin header with the new archive release version.

README.md

@@ -70,6 +70,18 @@ composer qa
 
 This package is licensed under `GPL-2.0-or-later`.
 
+## Release archives
+
+The archive workflow and archive check use the reviewed reusable workflow commit
+`177fa0d727b278d2103052ec77c102b4a4c492a0`. Releases install production Composer
+dependencies and include the artifact manifest and checksums. Tests, development
+documentation, QA configuration and coverage output are excluded. Source ZIPs
+also use `.gitattributes` export exclusions. Artifact attestation remains disabled.
+
+Version 1.0.3 prepares a fresh archive with corrected caller permissions; earlier
+tags and published archives retain their original contents. The new archive must
+pass the hosted archive check before it is attached to the release.
+
 ## Positional value validation
 
 Externally supplied positional option names are validated before invoking the

wp-cli-console.php

@@ -3,7 +3,7 @@
 /**
  * Plugin Name: WP-CLI Console
  * Description: Symfony Console wrappers for useful WP-CLI workflows.
- * Version: 1.0.0
+ * Version: 1.0.3
  * Requires at least: 6.9
  * Requires PHP: 8.5
  * Author: Brian Schaeffner