Release plugin version 0.7.3

[kasparsd]

Covers 0.7.2...79c3641

• Pass a WP_Error object to the wp_login_failed filter. #478
• remove time-based-side-channel vulnerability in TOTP class #458 (security improvement)
• PHP 8.1 compatibility: replace FILTER_SANITIZE_STRING #428
• Add PHP8 linter and fix linter issues #465
• Fix PHP8 linter #466
• Add <label> to provider name #387
• Improve TOTP autocomplete behaviour #420

Changelog

Includes the following changes 0.7.2...79c3641

• Make wp_login_failed action call compatible with the WP core argument count and types. Reported in #471 by @dziudek and fixed in #478 by @dd32.
• Use hash_equals() for nonce comparison to improve security. Reported in #458 and fixed in #458 by @calvinalkan.
• Improve compatibility with PHP 8.1 by replacing all instances of FILTER_SANITIZE_STRING usage. Reported and fixed in #428 by @sjinks.
• Add automated checks for PHP 8 compatibility in #465 and #466 by @kasparsd.
• Improve accessibility of two-factor settings in the user profile by introducing a label that links the method names with the associated checkboxes. Reported and fixed in #387 by @r-a-y.
• Improve TOTP autocomplete behaviour by setting the autocomplete attribute to one-time-code. Reported and fixed in #420 by @squaredpx.

[kasparsd]

@iandunn, @jeffpaul Technically these are all minor changes that are backwards compatible. Are we OK with pushing them out as a patch release instead of a minor 1.8.0 release?

[iandunn]

Yeah, a patch release sounds like a good idea to me 👍🏻

[jeffpaul]

@kasparsd looks like this would also include:

• Improve TOTP autocomplete behaviour #420

#438 && #470 are effectively on hold, but may be worth re-enabling to see if the 0.7.3 release runs smoothly (or at least provides some error messages I can help triage in hopes of getting this to work for 0.8.0)?

[kasparsd]

Totally missed that, thank you @jeffpaul!