Close the inert-pattern hole in the credential scan
Make the CI checks say how many files they actually read
Test against the newest WordPress and WooCommerce, and ship updates automatically