Skip to content

Release 0.11.1 - #1040

Merged
GaryJones merged 61 commits into
mainfrom
release/0.11.1
Aug 18, 2026
Merged

Release 0.11.1#1040
GaryJones merged 61 commits into
mainfrom
release/0.11.1

Conversation

@GaryJones

@GaryJones GaryJones commented Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

This release merges develop into main for the 0.11.1 patch. It is a maintenance and compatibility release built on top of the 0.11.0 security work.

The headline change is a fix for an information-disclosure issue in the Editorial Metadata module (#1036): registering the fields with show_in_rest so Gutenberg could save them also exposed their values on read, so internal editorial metadata on every published post was served to anonymous REST clients. The fix strips those keys from responses for readers who cannot edit the post, while keeping the block-editor save path intact. Alongside it are calendar date-handling corrections (#1009), a declaration of WordPress 7.1 compatibility (#1039, following the 7.0 declaration and wp.org asset workflow in #1007), a fix for a latent VIPCS failure that was surfacing on cold-cache CI runs (#1037), and a batch of dependency updates that includes security fixes for brace-expansion, axios, postcss and shell-quote.

This branch carries only the release chore, as three commits per ~/code/plugin-standards/RELEASE_PROCESS.md: the changelog entry, the regenerated POT, and the version bumps across the plugin header and constant, the package manifests, the readme stable tag and AGENTS reference. All the functional changes already landed on develop.

WordPress 7.1 verification

7.1 is at RC4 and ships imminently. Rather than claim compatibility speculatively, the full integration suite was run against WordPress/WordPress#7.1-branch (reported 7.1-RC4) via wp-env: single-site and multisite each passed with 284 tests and 574 assertions, including the new REST read-exposure guard. The existing WP latest CI job also exercises trunk (the 7.1 line) on every push and is green.

Notes for the reviewer

  • The CHANGELOG entry is dated 2026-08-18 (today's release day).
  • Please tag 0.11.1 after merge so the compare link resolves and the wp.org deploy fires.

Test plan

  • Integration suite green on WP 7.1-RC4 (single-site + multisite)
  • develop CI green (PHP lint/standards, integration, JS lint/jest, build/E2E, lockfile-registry)
  • Tag 0.11.1 after merge

GaryJones and others added 30 commits June 10, 2026 12:02
@GaryJones
Merge pull request #1006 from Automattic/backfill/release-0.11.0
bf351f8 
Backfill 0.11.0 release into develop
@GaryJones
docs: declare compatibility with WordPress 7.0
da43258 
WordPress 7.0 is now generally available and the integration suite
already runs against WP latest, so the readme's "Tested up to" header
can move from 6.9 to 7.0.
@GaryJones
ci: add a workflow to refresh the wordpress.org readme and assets
10ded34 
WordPress.org reads the compatibility headers from SVN trunk, but trunk
is only rewritten on a full release. This adds a manual workflow that
syncs just the readme and assets to trunk (and the stable tag's readme),
so headers like "Tested up to" can be refreshed without cutting a release.
@GaryJones
Merge pull request #1007 from Automattic/update/tested-up-to-7-0
248c332 
Declare WordPress 7.0 compatibility and add a wp.org asset-update workflow
@GaryJones
fix: keep post_date_gmt in sync when dragging posts on the calendar
22dc0e2 
Dragging a post to a different day only updated post_date, leaving a
scheduled post's post_date_gmt on the old date. Core publishes on
post_date_gmt, so the post went live at the old time while displaying
the new date. The direct database update also bypasses
_future_post_hook(), so the publish cron event still fired at the old
time regardless of direction.

The ef_calendar_allow_ajax_to_set_timestamp filter (default false) was
added in 2011 so that moving a floating-date post on the calendar stays
a planning action rather than scheduling it. That remains the behaviour
for floating dates, but a post with a concrete publish timestamp now
always has it kept in sync — a mismatched pair is never a valid state —
and its publish cron event is rescheduled to match.

The new GMT value is derived with get_gmt_from_date() rather than
reusing the old GMT time-of-day, which mishandled posts whose local and
GMT dates fall on different days and DST changes between the two dates.

Fixes #1008
@GaryJones
fix: convert quick-create timestamp to GMT when opted in
64fa35c 
When the ef_calendar_allow_ajax_to_set_timestamp filter is enabled,
quick-created posts had post_date_gmt set to the site-local time
verbatim, so the stored timestamp was wrong by the site's UTC offset.
Derive it with get_gmt_from_date() instead, matching how the
drag-and-drop handler now sets it.
@GaryJones
Merge pull request #1009 from Automattic/GaryJones/issue-1008-investi…
ca83e3a 
…gation

Keep post_date_gmt in sync when dragging posts on the calendar
@dependabot
npm(deps-dev): bump @playwright/test from 1.60.0 to 1.61.0
d88d64d 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.60.0 to 1.61.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@GaryJones
Merge pull request #1011 from Automattic/dependabot/npm_and_yarn/play…
55e5dba 
…wright/test-1.61.0

npm(deps-dev): bump @playwright/test from 1.60.0 to 1.61.0
@dependabot
npm(deps-dev): bump form-data from 4.0.5 to 4.0.6
a69e498 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump launch-editor from 2.12.0 to 2.14.1
70827dd 
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.12.0 to 2.14.1.
- [Commits](vitejs/launch-editor@v2.12.0...v2.14.1)

---
updated-dependencies:
- dependency-name: launch-editor
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump @automattic/eslint-plugin-wpvip from 1.2.1 to 1.3.0
78df1fa 
Bumps [@automattic/eslint-plugin-wpvip](https://github.com/Automattic/eslint-config-wpvip) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/Automattic/eslint-config-wpvip/releases)
- [Commits](Automattic/eslint-config-wpvip@1.2.1...1.3.0)

---
updated-dependencies:
- dependency-name: "@automattic/eslint-plugin-wpvip"
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Actions(deps): bump the actions group with 2 updates
4b74bea 
Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

Updates `softprops/action-gh-release` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...718ea10)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump the dev-dependencies group across 1 directory wit…
6555f9c 
…h 7 updates

Bumps the dev-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@wordpress/data](https://github.com/WordPress/gutenberg/tree/HEAD/packages/data) | `10.48.0` | `10.48.1` |
| [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) | `11.8.0` | `11.8.1` |
| [@wordpress/jest-console](https://github.com/WordPress/gutenberg/tree/HEAD/packages/jest-console) | `8.48.0` | `8.48.1` |
| [@wordpress/jest-preset-default](https://github.com/WordPress/gutenberg/tree/HEAD/packages/jest-preset-default) | `12.48.0` | `12.48.1` |
| [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) | `32.4.0` | `32.4.1` |
| [@wordpress/url](https://github.com/WordPress/gutenberg/tree/HEAD/packages/url) | `4.48.0` | `4.48.1` |



Updates `@wordpress/data` from 10.48.0 to 10.48.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/data/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/data)

Updates `@wordpress/env` from 11.8.0 to 11.8.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/v11.8.1/packages/env)

Updates `@wordpress/i18n` from 6.21.0 to 6.21.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/i18n/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/i18n)

Updates `@wordpress/jest-console` from 8.48.0 to 8.48.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/jest-console/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/jest-console)

Updates `@wordpress/jest-preset-default` from 12.48.0 to 12.48.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/jest-preset-default/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/jest-preset-default)

Updates `@wordpress/scripts` from 32.4.0 to 32.4.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/scripts)

Updates `@wordpress/url` from 4.48.0 to 4.48.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/url/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/HEAD/packages/url)

---
updated-dependencies:
- dependency-name: "@wordpress/data"
  dependency-version: 10.48.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/env"
  dependency-version: 11.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/i18n"
  dependency-version: 6.21.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/jest-console"
  dependency-version: 8.48.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/jest-preset-default"
  dependency-version: 12.48.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/scripts"
  dependency-version: 32.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/url"
  dependency-version: 4.48.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@GaryJones
Merge pull request #1015 from Automattic/dependabot/github_actions/ac…
b548e70 
…tions-36a64773f7

Actions(deps): bump the actions group with 2 updates
@GaryJones
Merge pull request #1014 from Automattic/dependabot/npm_and_yarn/laun…
3bfade8 
…ch-editor-2.14.1

npm(deps-dev): bump launch-editor from 2.12.0 to 2.14.1
@GaryJones
Merge pull request #1013 from Automattic/dependabot/npm_and_yarn/form…
187011d 
…-data-4.0.6

npm(deps-dev): bump form-data from 4.0.5 to 4.0.6
@GaryJones
Merge pull request #1010 from Automattic/dependabot/npm_and_yarn/dev-…
4b58382 
…dependencies-7cb06d0053

npm(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates
@dependabot
npm(deps): bump qs, @wp-playground/cli and express
23f0834 
Bumps [qs](https://github.com/ljharb/qs), [@wp-playground/cli](https://github.com/WordPress/wordpress-playground) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `qs` from 6.14.2 to 6.15.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.2...v6.15.3)

Updates `@wp-playground/cli` from 3.1.15 to 3.1.42
- [Release notes](https://github.com/WordPress/wordpress-playground/releases)
- [Changelog](https://github.com/WordPress/wordpress-playground/blob/trunk/CHANGELOG.md)
- [Commits](WordPress/wordpress-playground@v3.1.15...v3.1.42)

Updates `express` from 4.22.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](expressjs/express@v4.22.1...v4.22.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.3
  dependency-type: indirect
- dependency-name: "@wp-playground/cli"
  dependency-version: 3.1.42
  dependency-type: indirect
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@GaryJones
Merge pull request #1017 from Automattic/dependabot/npm_and_yarn/mult…
25a6a9b 
…i-26f2ca72e9

npm(deps): bump qs, @wp-playground/cli and express
@GaryJones
fix: align prettier to wp-prettier@3.0.3 for eslint-plugin-wpvip 1.3.0
99f3412 
@automattic/eslint-plugin-wpvip 1.3.0 declares its own top-level
peerOptional prettier@^3.0.0. The existing override only pinned the
nested eslint-plugin-prettier > prettier to wp-prettier@3.0.3, so npm
tried to satisfy the new top-level peer with real prettier and
conflicted with the root wp-prettier@2.8.5, breaking npm ci under
strict peer resolution.

Pin the plugin's own prettier peer to wp-prettier@3.0.3 and raise the
root prettier devDependency to match, giving a single consistent
wp-prettier@3.0.3 across the tree. Lint and Jest pass under the new
eslint-plugin-security 4 and eslint-plugin-jsdoc 63 majors that 1.3.0
brings in.
@GaryJones
Merge pull request #1002 from Automattic/dependabot/npm_and_yarn/auto…
3f6887c 
…mattic/eslint-plugin-wpvip-1.3.0

npm(deps-dev): bump @automattic/eslint-plugin-wpvip from 1.2.1 to 1.3.0
@dependabot
npm(deps-dev): bump the dev-dependencies group with 7 updates
9abde57 
Bumps the dev-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@wordpress/data](https://github.com/WordPress/gutenberg/tree/HEAD/packages/data) | `10.48.1` | `10.49.0` |
| [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) | `11.8.1` | `11.9.0` |
| [@wordpress/i18n](https://github.com/WordPress/gutenberg/tree/HEAD/packages/i18n) | `6.21.1` | `6.22.0` |
| [@wordpress/jest-console](https://github.com/WordPress/gutenberg/tree/HEAD/packages/jest-console) | `8.48.1` | `8.49.0` |
| [@wordpress/jest-preset-default](https://github.com/WordPress/gutenberg/tree/HEAD/packages/jest-preset-default) | `12.48.1` | `12.49.0` |
| [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) | `32.4.1` | `32.5.1` |
| [@wordpress/url](https://github.com/WordPress/gutenberg/tree/HEAD/packages/url) | `4.48.1` | `4.49.0` |


Updates `@wordpress/data` from 10.48.1 to 10.49.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/data/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/data@10.49.0/packages/data)

Updates `@wordpress/env` from 11.8.1 to 11.9.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/env@11.9.0/packages/env)

Updates `@wordpress/i18n` from 6.21.1 to 6.22.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/i18n/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/i18n@6.22.0/packages/i18n)

Updates `@wordpress/jest-console` from 8.48.1 to 8.49.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/jest-console/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/jest-console@8.49.0/packages/jest-console)

Updates `@wordpress/jest-preset-default` from 12.48.1 to 12.49.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/jest-preset-default/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/jest-preset-default@12.49.0/packages/jest-preset-default)

Updates `@wordpress/scripts` from 32.4.1 to 32.5.1
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@32.5.1/packages/scripts)

Updates `@wordpress/url` from 4.48.1 to 4.49.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/url/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/url@4.49.0/packages/url)

---
updated-dependencies:
- dependency-name: "@wordpress/data"
  dependency-version: 10.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/env"
  dependency-version: 11.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/i18n"
  dependency-version: 6.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/jest-console"
  dependency-version: 8.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/jest-preset-default"
  dependency-version: 12.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/scripts"
  dependency-version: 32.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@wordpress/url"
  dependency-version: 4.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump webpack-cli from 7.0.3 to 7.1.0
b562232 
Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 7.0.3 to 7.1.0.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.3...webpack-cli@7.1.0)

---
updated-dependencies:
- dependency-name: webpack-cli
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps): bump downshift from 9.3.6 to 9.4.0
a54de7d 
Bumps [downshift](https://github.com/downshift-js/downshift) from 9.3.6 to 9.4.0.
- [Release notes](https://github.com/downshift-js/downshift/releases)
- [Changelog](https://github.com/downshift-js/downshift/blob/master/CHANGELOG.md)
- [Commits](downshift-js/downshift@v9.3.6...v9.4.0)

---
updated-dependencies:
- dependency-name: downshift
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump @playwright/test from 1.61.0 to 1.61.1
6d23c8c 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.0 to 1.61.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.61.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5
3bed8a5 
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.7.4...0.7.5)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump axios from 1.16.1 to 1.18.1
7e05e46 
Bumps [axios](https://github.com/axios/axios) from 1.16.1 to 1.18.1.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.1...v1.18.1)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump immutable from 5.1.5 to 5.1.9
708a1dc 
Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.5 to 5.1.9.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v5.1.5...v5.1.9)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 5.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
npm(deps-dev): bump svgo from 3.3.3 to 3.3.4
cf13bd4 
Bumps [svgo](https://github.com/svg/svgo) from 3.3.3 to 3.3.4.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v3.3.3...v3.3.4)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
GaryJones and others added 19 commits August 18, 2026 15:12
@GaryJones
Merge pull request #1036 from Automattic/GaryJones/rest-editorial-met…
dbe856c 
…adata-read-exposure

Stop editorial metadata leaking to unauthorised REST readers
@GaryJones
Merge pull request #1032 from Automattic/dependabot/github_actions/ac…
86d0e5c 
…tions-6ba95eca5a

Actions(deps): bump the actions group across 1 directory with 4 updates
@GaryJones
Merge pull request #1019 from Automattic/dependabot/npm_and_yarn/dev-…
531e445 
…dependencies-9c2f2f6431

npm(deps-dev): bump the dev-dependencies group with 7 updates
@GaryJones
Merge pull request #1020 from Automattic/dependabot/npm_and_yarn/webp…
9043ee7 
…ack-cli-7.1.0

npm(deps-dev): bump webpack-cli from 7.0.3 to 7.1.0
@GaryJones
Merge pull request #1021 from Automattic/dependabot/npm_and_yarn/down…
79ff8e5 
…shift-9.4.0

npm(deps): bump downshift from 9.3.6 to 9.4.0
@GaryJones
Merge pull request #1022 from Automattic/dependabot/npm_and_yarn/play…
69a0288 
…wright/test-1.61.1

npm(deps-dev): bump @playwright/test from 1.61.0 to 1.61.1
@GaryJones
Merge pull request #1024 from Automattic/dependabot/npm_and_yarn/webs…
5653610 
…ocket-driver-0.7.5

npm(deps-dev): bump websocket-driver from 0.7.4 to 0.7.5
@GaryJones
Merge pull request #1026 from Automattic/dependabot/npm_and_yarn/axio…
3c44e98 
…s-1.18.1

npm(deps-dev): bump axios from 1.16.1 to 1.18.1
@GaryJones
Merge pull request #1027 from Automattic/dependabot/npm_and_yarn/immu…
d183bd7 
…table-5.1.9

npm(deps-dev): bump immutable from 5.1.5 to 5.1.9
@GaryJones
Merge pull request #1028 from Automattic/dependabot/npm_and_yarn/svgo…
9122e4f 
…-3.3.4

npm(deps-dev): bump svgo from 3.3.3 to 3.3.4
@GaryJones
Merge pull request #1029 from Automattic/dependabot/npm_and_yarn/fast…
1648cf8 
…-xml-parser-5.10.1

npm(deps): bump fast-xml-parser from 5.9.3 to 5.10.1
@GaryJones
Merge pull request #1031 from Automattic/dependabot/npm_and_yarn/shel…
044e9bd 
…l-quote-1.10.0

npm(deps-dev): bump shell-quote from 1.8.4 to 1.10.0
@GaryJones
Merge pull request #1033 from Automattic/dependabot/npm_and_yarn/post…
7fe27a0 
…css-8.5.25

npm(deps-dev): bump postcss from 8.5.15 to 8.5.25
@GaryJones
Merge pull request #1034 from Automattic/dependabot/npm_and_yarn/ip-a…
33325de 
…ddress-10.4.0

npm(deps): bump ip-address from 10.2.0 to 10.4.0
@GaryJones
Merge pull request #1035 from Automattic/dependabot/npm_and_yarn/fast…
d2330a9 
…-uri-3.1.5

npm(deps-dev): bump fast-uri from 3.1.2 to 3.1.5
@dependabot
npm(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18
75a4fde 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.18.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@GaryJones
Merge pull request #1038 from Automattic/dependabot/npm_and_yarn/brac…
02252c7 
…e-expansion-1.1.18

npm(deps-dev): bump brace-expansion from 1.1.12 to 1.1.18
@GaryJones
docs: declare compatibility with WordPress 7.1
c596740 
WordPress 7.1 ships within a day (currently RC4). The full integration
suite passes against 7.1-RC4 in both single-site and multisite, so raise
the readme's tested-up-to claim from 7.0 to 7.1 on that verified basis.
@GaryJones
Merge pull request #1039 from Automattic/GaryJones/tested-up-to-7-1
8c7c90c 
Declare compatibility with WordPress 7.1
@GaryJones
GaryJones requested a review from a team as a code owner August 18, 2026 15:31
@GaryJones GaryJones added this to the 0.11.1 milestone Aug 18, 2026
@GaryJones GaryJones self-assigned this Aug 18, 2026
@GaryJones
GaryJones merged commit 799f8a5 into main Aug 18, 2026
12 of 14 checks passed
@GaryJones
GaryJones deleted the release/0.11.1 branch August 18, 2026 22:25
@GaryJones GaryJones mentioned this pull request Aug 18, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@GaryJones GaryJones

Labels

None yet

Projects

None yet

Milestone

0.11.1

Development

Successfully merging this pull request may close these issues.

1 participant

@GaryJones