[asadowski10]

Summary

Brings the 1.2.1 version bump back into develop, same as #18 for 1.2.0. The release itself goes through the companion PR to main.

The only differences with develop are the version bump files (.plugin-data, plugin header and constant, package.json / package-lock.json, block.json, readme.txt, blueprint, .pot) and CHANGELOG.md ([Unreleased] becomes [1.2.1]).

Test plan

• composer cs, npx wp-scripts lint-js src, npm run build

---

Generated by Claude Code

---

Note

Low Risk
Mechanical version and changelog updates only; no functional code changes in the diff.

Overview
Syncs 1.2.1 release metadata into develop after the release to main, matching the usual post-release back-merge pattern.

Version strings move from 1.2.0 to 1.2.1 in .plugin-data, the plugin header and BLOCKPARTY_IFRAME_VERSION, package.json / lockfile, block.json, readme.txt stable tag, the .pot header, and the WordPress Playground blueprint install ref.

Release notes are finalized: CHANGELOG.md promotes [Unreleased] to [1.2.1] - 2026-11-05 (security allowlisting for iframe attributes and http/https sources, French translations, WPCS/platform bumps), and readme.txt gains a matching 1.2.1 changelog section. No block or PHP rendering logic changes appear in this diff—only versioning and documentation.

^{Reviewed by Cursor Bugbot for commit bc01291. Bugbot is set up for automated code reviews on this repo. Configure here.}