Roobely – Advanced Blocks

Roobely is a modern WordPress block plugin designed for performance, flexibility, and a clean editing experience. Roobely adds 29 advanced blocks to the WordPress block editor, plus a flexible row-column layout builder, global colors and typography, and responsive controls with per-device visibility. Roobely is an actively maintained fork of the Qubely blocks plugin. It gets regular updates and fixes so your blocks keep working with new WordPress releases. Roobely focuses on:

• Faster editor performance
• Lightweight asset loading
• Clean and maintainable architecture
• Responsive design controls
• Better compatibility with modern themes
• Optimized frontend performance

1.0.10 Improved: Smarter handling of legacy Qubely content in the editor, with a helpful notice and upgrade path to Roobely Pro. Improved: Lighter front-end output and editor performance. 1.0.9 Fix: Qubely migration in the editor no longer rewrites links or filenames. 1.0.8 Bugfix: Row block: setting Alignment to None on a nested Row (a Row inside a Column of a Full-width or Wide Row) now sticks. Previously the editor copied the parent Row's alignment onto the nested Row every time the editor loaded, so the next save wrote alignfull again. Improvement: Legacy Row alignment recovery (for rows saved with an align class but no align attribute) now only reads the Row's outer wrapper class, in both the editor and the server-side migration. Bugfix: Row block: opening a saved page no longer gives every Row a new internal ID (uniqueId), so the editor no longer reports unsaved changes right after loading. A new ID is now only created when a Row has none, or when it is a duplicate (a duplicated, copied or pasted Row whose ID another block on the page already uses). 1.0.7 Bugfix: Restore editor-generated CSS as the authoritative frontend CSS source, preventing page saves from replacing responsive block styles with an incomplete server-side reconstruction. Bugfix: Attach per-page block CSS to Roobely's registered stylesheet during wp_enqueue_scripts, ensuring it is printed in the document head with a reliable cascade order. Bugfix: Generate declared block-style defaults for legacy content that omits default attributes, restoring frontend styling for recovered blocks. Bugfix: Decode legacy Unicode-escaped Roobely block content before Gutenberg recovery so encoded rich text, including HTML line breaks and entities, can be recovered and saved in its valid form. Improvement: Watch the editor for newly rendered recovery prompts instead of checking only once during editor load. 1.0.6 Bugfix: Fixed a typo in an internal function name (roobely_resigter_rest_order_by_fields → roobely_register_rest_order_by_fields) and its hook registration Security/Compliance: Removed remaining class_exists() self-guards around the plugin's own classes (ROOBELY_Options, ROOBELY_Initial_Setup) — these guards are only appropriate for shared libraries, and the classes are already uniquely named Bugfix: Moved a helper function (roobely_excerpt_max_charlength) that was being redeclared inside the Post Grid block's render callback (guarded by function_exists()) out to a proper top-level declaration, so it's defined once per request instead of relying on a redeclare guard - fixes a latent fatal-error risk when multiple Post Grid blocks appear on one page Security/Compliance: Renamed two internal post meta keys that used a double-underscore (__) prefix, which is reserved for WordPress core, to single-underscore/no-underscore equivalents consistent with the rest of the plugin: __roobely_available_blocks → _roobely_available_blocks, and __roobely_global_settings → roobely_global_settings (this also fixes the "saved preset" lookup, which was silently reading the wrong meta key and always returning empty) Security: check_ajax_referer() is now used for the Settings AJAX handler's nonce check, in place of a manual wp_verify_nonce() call, for consistency with WordPress's recommended AJAX security pattern Security: Dynamic CSS generation in CssEngine.php now runs numeric values through an additional sanitization step before they're inserted into generated CSS rules, as defense-in-depth against a malformed/tampered stored attribute value breaking out of its declaration Documentation: Updated WPML config to match the renamed post meta key 1.0.5 Security/Compliance: Renamed the AJAX action and handler used by the Settings page from wp_ajax_update_roobely_options / ajax_update_roobely_options to wp_ajax_roobely_update_options / roobely_ajax_update_options, so the action name no longer starts with the generic word "update" and is unique to the plugin Security/Compliance: Renamed the localized block-editor script object from wpApiSettings to roobelyApiSettings, since the wp prefix is reserved for WordPress core Cleanup: Removed if (!function_exists()) guards around the plugin's own functions in roobely.php; all function names are already uniquely prefixed, and this pattern is only appropriate for shared libraries, not a plugin's own always-loaded functions Bugfix: Animated Heading block now enqueues the minified jquery.animatedheadline.min.js asset instead of the unminified source file, consistent with how the rest of the plugin's scripts are loaded 1.0.4 Security: Google Maps API key is now entirely omitted from the data sent to the block editor for Editors/Authors (not just blanked) - only Administrators (manage_options) receive the key at all; other roles see the existing "please configure an API key" notice Security: Removed the Mailchimp API key from the data sent to the block editor - it was never read by any editor script Documentation: Added Contact Form to the Included Blocks list Compatibility: align-wide theme support is now declared as a fallback on after_setup_theme instead of unconditionally at plugin load, so themes that opt out are respected Bugfix: Minimum PHP/WordPress version checks in code now match the readme/plugin header (PHP 7.4, WordPress 6.1) instead of long-outdated values Cleanup: Excluded build-tools/ from the release package Cleanup: Removed unused sanitize_interaction_json() method Documentation: Noted that assets/reactjs/src/ is the primary editable source, since assets/js/roobely.js is a generated build output 1.0.3 Cleanup: Removed the read-only fallback that checked for a legacy roobely-json-{id}.json file in the uploads directory; interaction data is now read exclusively from the _roobely_interaction_json post meta, which has been the sole write path since 1.0.2 Cleanup: Removed the unused roobely_interactions REST post meta registration, which was never read from or written to; _roobely_interaction_json is the single, consistent meta key for interaction data end-to-end 1.0.2 Security: Fixed .htaccess rule that was blocking the plugin's own generated stylesheets on Apache (previously denied .css as well as .json in the uploads/roobely directory) Security: Hardened roobely_global_settings post meta with auth and sanitize callbacks Bugfix: Block preview now generates CSS and interaction data live from the post's current content instead of relying on static preview files that were never populated Bugfix: Interaction (scroll/mouse animation) data is now regenerated from saved block attributes on every post save, instead of only being read from a field nothing wrote to Bugfix: The "File System" CSS location setting now actually writes/removes the per-post CSS file it relies on Cleanup: Removed unused legacy roobely-preview.css/json file-writer and a stray undefined-variable reference in the Google Fonts loader Documentation: Corrected readme Third-Party Libraries entry (custom video modal, not a Magnific Popup fork) and added the missing Vimeo external service disclosure Documentation: Improved Source Code section in readme.txt with clear public repository link (Bitbucket) 1.0.1 Security: Strengthened REST API permission callbacks Privacy: Google Fonts disabled by default Security: Improved CSS and JSON sanitization Security: Better escaping in Post Grid block Documentation: Full external services and source code disclosure Maintenance: Updated Font Awesome to 7.2.0 Compatibility: Tested up to WordPress 7.0 1.0.0 Initial release