Security: omitting the status parameter now creates or updates a draft instead of publishing. Publishing requires explicitly passing status=publish, which remains gated by the publish_posts capability.
1.0.2
Security: editing an existing post that is already published, private, or scheduled (future) now requires the publish_posts capability even when the request does not change the status.
1.0.1
Security: the article endpoint now requires the publish_posts capability when an update changes a post to a published, private, or scheduled (future) status, not just edit_post.
1.0.0
Initial release: article publish endpoint, media upload endpoint, RankMath SEO endpoint, optional API key, settings screen.