The WordPress coreCoreCore is the set of software required to run WordPress. The Core Development Team builds WordPress. development team builds WordPress! Follow this site for general updates, status reports, and the occasional code debate. There’s lots of ways to contribute:
Found a bugbugA bug is an error or unexpected result. Performance improvements, code optimization, and are considered enhancements, not defects. After feature freeze, only bugs are dealt with, with regressions (adverse changes from the previous version) being the highest priority.?Create a ticket in the bug tracker.
Joe Youngblood’s report surprised me because I didn’t realize our conservative sanitize_username approach doesn’t apply to registrations when you’re not in multi-site mode.
We should assume every CRUDCRUDCreate, read, update and delete, the four basic functions of storing data. (More on Wikipedia.) attempt is hostile. Where else can we tighten up the range of what we accept? For usernames we could make new registrations have stricter rules than before without breaking backwards compatibility.
Just like we ship with moderated comments on by default, I think it’s a good opportunity to look at every instance where we send an email and look at how we can become less interesting to spammers. Should comment notification emails not include the content by default, and instead just link you to the moderation page?
You may have noticed the new shiny icons in the adminadmin(and super admin) screens in WordPress 7.2 BetaBetaA pre-release of software that is given out to a large group of users to trial under real conditions. Beta versions have gone through alpha testing in-house and are generally fairly close in look, feel and function to the final product; however, design changes often occur as part of the process.. As previously announced on Replacing Dashicons in the admin bar and menu, the icons in the admin bar and menu are now inline SVGs from @wordpress/icons. Before, they were Dashicons font glyphs drawn with CSSCSSCascading Style Sheets.::before.
Most plugins and themes need no changes. Registering menu pages and admin bar nodes, with or without Dashicons, works as before. However, CSS such as admin color schemes and admin themes may need a small update. If your pluginPluginA plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. modifies coreCoreCore is the set of software required to run WordPress. The Core Development Team builds WordPress. icons, it might also need updating.
If your plugin or theme does not modify core admin bar or menu icons, you may jump ahead to the New APIAPIAn API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. section below.
Needs updating: color schemes
Every CSS rule that styles core icons through ::before no longer styles the icons now as they are inline SVG elements.
If your color scheme colors icons through ::before, for backward compatibility, WordPress uses the following best-effort rules to keep the colors until you update it:
SidebarSidebarA sidebar in WordPress is referred to a widget-ready area used by WordPress themes to display information that is not a part of the main content. It is not always a vertical column on the side. It can be a horizontal rectangle below or above the content area, footer, header, or any where in the theme. menu: icons get the icon colors you pass to wp_admin_css_color(), falling back to the menu text color.
Admin bar: if you used SASS to generate your stylesheet based on core’s _admin.scss, then it already colors the .ab-icon element (luckily), so icons get to keep the intended colors.
Otherwise, icons get core’s default colors, which may not be intended. To fix your scheme completely, wherever your stylesheet colors an icon through ::before, color the element as well. The SVG will inherit the color from that element. For rules that color .ab-item::before, color the .ab-icon as well.
Styles that put a background image on the glyph and make the glyph transparent relied on core’s content to create the box. Set content and a size yourself.
/* After (works on 7.2 and earlier versions) */
#adminmenu #menu-posts div.wp-menu-image::before {
content: "";
background: url(logo.png) center / 20px 20px no-repeat;
}
#wpadminbar #wp-admin-bar-wp-logo > .ab-item .ab-icon::before {
content: "";
display: inline-block;
width: 20px;
height: 20px;
background: url(logo.png) center / contain no-repeat;
}
CSS: Replacing a core admin bar icon through .ab-item::before
This applies to the admin bar nodes whose icon used to be drawn on .ab-item::before: edit, customize, site-editor, my-sites, site-name and my-account. The icon is now a separate .ab-icon element, so a content set on .ab-item::before no longer replaces it. Your glyph is hidden, and core’s icon is shown instead.
To fix it, set the content on the ::before of the icon element as well, which takes the place of core’s icon.
/* After (works on 7.2 and earlier versions) */
#wpadminbar #wp-admin-bar-edit > .ab-item::before,
#wpadminbar #wp-admin-bar-edit > .ab-item .ab-icon::before { content: "\f319"; }
PHPPHPThe web scripting language in which WordPress is primarily architected. WordPress requires PHP 7.4 or higher: Modifying the title or icon of a core admin bar node
Certain core nodes used to contain the empty <span class="ab-icon"> in the title to draw the icon. Such nodes, along with the rest of core admin bar nodes, no longer have the empty span, and now set the icon with the new icon argument instead. Except for wp-logo, whose title contains the logo icon itself. For example:
Code that looks for the empty span in these titles will no longer find it and needs to be updated. See also the “Supporting earlier WordPress versions” section below on how to modify admin bar nodes that works across versions. See also the appendix for the full markup changes.
CSS: Styling the front end search icon, the default My Sites site icon, or the Collapse Menu icon
Styles on the pseudo-elements of these icons no longer affect them as well. Target the new element instead.
/* After (works on 7.2 and earlier versions) */
#wpadminbar #adminbarsearch::before,
#wpadminbar #adminbarsearch .ab-icon { color: red; }
#wpadminbar .quicklinks li div.blavatar::before,
#wpadminbar .quicklinks li div.blavatar svg { color: red; }
#collapse-button .collapse-button-icon::after,
#collapse-button .collapse-button-icon svg { color: red; }
CSS: Targeting a menu item by its Dashicon class
Use the item’s id or its menu-icon-* class instead now.
/* Before */
#adminmenu .dashicons-admin-post::before { content: "\f319"; }
/* After (works on 7.2 and earlier versions) */
#adminmenu .dashicons-admin-post::before { content: "\f319"; }
#adminmenu .menu-icon-post div.wp-menu-image::before { content: "\f319"; }
Note that the old Dashicon class matched every menu item that used that Dashicon, while an id or a menu-icon-* class matches one item.
What keeps working
For backward compatibility, WordPress keeps the most common customizations working without changes.
Sidebar menu
Existing core menu data is unchanged, including the dashicons-* icon values. For example:
get_post_type_object( 'post' )->menu_icon is still dashicons-admin-post.
The $menu global and the REST APIREST APIThe REST API is an acronym for the RESTful Application Program Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front end of an application (think “phone app” or “website”) can communicate with the data store (think “database” or “file system”)
https://developer.wordpress.org/rest-api/ still hold the same dashicons-* values.
If a plugin uses Dashicon in menu_icon and it has a matching core-admin icon, that SVG icon will be rendered instead. This includes post types with no menu_icon, which default to dashicons-admin-post.
See the “New API” section below for more information about the core-admin collection.
Any other Dashicon, image URLURLA specific web address of a website or web page on the Internet, such as a website’s URL www.wordpress.org, base64 SVG or none value renders exactly as before.
A ::before with content on div.wp-menu-image still replaces the icon, and the SVG is not shown.
Admin bar
On all core nodes, a ::before with content on .ab-icon still replaces the icon.
Third-party nodes render exactly as before.
New API to use SVG icons
If you want to use SVG icons instead of Dashicons for your own sidebar menu items and admin bar nodes, you can now pass the name of a registered icon when you register menu pages, post types and admin bar nodes.
Which icons to use
You can use an icon from core’s core-admin collection. Once an icon is added to core-admin, its name will not change and it will not be removed. You can preview the collection in the icon library on Storybook. More icons will be added to core-admin based on feedback from plugin developers.
DO NOT use the core collection for admin icons. It is meant for the front end, content and the Icon blockBlockBlock is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience.. Some plugins or themes might want to unregister core icons.
add_menu_page() and the menu_icon argument of register_post_type() now accept the namespaced name of a registered icon, besides the existing Dashicons, URL, base64 SVG and none values.
In both cases, a name that is not registered renders no icon. With WP_DEBUG enabled, it also triggers a _doing_it_wrong() notice.
wp_is_valid_icon_name()
A new helper function that returns whether a value has the form of a namespaced icon name (collection/icon-name). It does not check that the icon is registered.
Supporting earlier WordPress versions
If your plugin used to show a Dashicon in admin menu or admin bar, and you want to keep supporting it in earlier versions, follow these instructions.
This depends on whether or not your Dashicon already has an official replacement in the core-admin collection. Check the icon replacement mapping here in the manifest. Search for your Dashicon in the 'dashicons' key.
If your Dashicon has no official core-admin icon replacement in 7.2, or you want to use your own SVG icon
You can still use any alternative core-admin icon or your own SVG icon, and you need to pass the icon name explicitly.
For admin menu (add_menu_page() and register_post_type()), since icon names are not supported in earlier versions, gate it with function_exists( 'wp_is_valid_icon_name' ). In contrast, the new argument for admin bar node is ignored in earlier versions, and an empty span in the title is hidden in 7.2, so you can pass both the old Dashicon and the new SVG icon as follows.
If your Dashicon has an official core-admin icon replacement in 7.2
Admin menu icons will be automatically replaced in 7.2 with the SVG icon replacement. However, for admin bar node icons, you still need to pass the mapped icon name explicitly.
If your Dashicon has an official core-admin icon replacement in version later than 7.2
In future versions, WordPress may add more icons to the core-admin collection, which map to more Dashicons. In the future, if a new core-admin icon is registered and you want to use it, you need to further gate it with a registration check as follows.
$icon = 'dashicons-text'; // for < 7.2
if ( function_exists( 'wp_is_valid_icon_name' ) ) {
$registry = WP_Icons_Registry::get_instance();
if ( $registry->is_registered( 'core-admin/invoice' ) ) {
$icon = 'core-admin/invoice'; // for > 7.2 (as an example)
} elseif ( $registry->is_registered( 'core-admin/receipt' ) ) {
$icon = 'core-admin/receipt'; // for 7.2
}
}
add_menu_page(
...,
$icon
);
$wp_admin_bar->add_node(
array(
...
'title' => '<span class="ab-icon dashicons-text" aria-hidden="true"></span> My Node',
'icon' => $icon,
)
);
Appendix: HTMLHTMLHyperText Markup Language. The semantic scripting language primarily used for outputting content in web browsers. markup changes
This appendix shows how the markup and the CSS of each icon changed, for code that targets them directly.
Show the markup changes
Sidebar menu items
The twelve Dashicons used by core’s top-level items are now drawn as inline SVG: Dashboard, Posts, Media, Links, Pages, Comments, Appearance, Plugins, Users, Tools, Settings and (in the networknetwork(versus site, blog) admin) Sites. So is the arrow of the Collapse Menu button.
Menu items that use one of the twelve Dashicons, for example Posts:
<!-- In 7.2 -->
<span class="collapse-button-icon" aria-hidden="true"><svg …>…</svg></span>
Admin bar nodes
Before 7.2, the icons of most of core’s nodes were drawn either on .ab-item::before or on .ab-icon::before. The search and default site icons had their own rules. They are now all drawn as inline SVG.
Icon on .ab-item::before:edit, customize, site-editor, my-sites, site-name, and my-account when there is no avatarAvatarAn avatar is an image or illustration that specifically refers to a character that represents an online user. It’s usually a square box that appears next to the user’s name..
Icon on .ab-icon::before, where the empty span was part of the node title before 7.2: wp-logo, menu-toggle, command-palette, new-content, comments and updates. In 7.2, the span is no longer in the title, except for wp-logo, and the icon is rendered from the icon argument.
<!-- Before 7.2 -->
<div class="blavatar"></div>
#wpadminbar .quicklinks li div.blavatar::before { content: "\f120"; }
<!-- In 7.2 -->
<div class="blavatar"><svg …>…</svg></div>
The icon color is now set on .ab-icon, or on div.blavatar for the default site icon, and inherited by the SVG through currentColor.
Props @audrasjb, @peterwilsoncc, @mcsf, and @wildworks for reviewing this dev notedev noteEach important change in WordPress Core is documented in a developers note, (usually called dev note). Good dev notes generally include a description of the change, the decision that led to this change, and a description of how developers are supposed to work with that change. Dev notes are published on Make/Core blog during the beta phase of WordPress release cycle. Publishing dev notes is particularly important when plugin/theme authors and WordPress developers need to be aware of those changes.In general, all dev notes are compiled into a Field Guide at the beginning of the release candidate phase..
Maybe not your content per se, but the ability to discover it is with the introduction of the /random/ endpoint in WordPress 7.2. A request to example.com/random/ will lead end users to a randomly selected published post. The feature is on by default and is built on the existing rewrite, WP, and WP_Query APIs. If you have a legitimate reason to not support this on a site, or you simply hate fun, there is a filter to disable this entire feature.
The Random URLs
The random base is prefixed to existing archive paths. This default base is translatable and customizable with a new option on wp-admin/options-permalink.php. With the default base and pretty permalinks, the following rules are generated:
/random/ redirects to a random post.
/random/category/release/ redirects to a random post in the release categoryCategoryThe 'category' taxonomy lets you group posts / content together that share a common bond. Categories are pre-defined and broad ranging.. Any publicly queryable taxonomyTaxonomyA taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. https://codex.wordpress.org/Taxonomies#Default_Taxonomies. attached to an eligible post type gets a similar rule, for example /random/tag/dev-note/.
/random/{post-type-slug}/ redirects to a random post of a custom post typeCustom Post TypeWordPress can hold and display many different types of content. A single item of such a content is generally called a post, although post is also a specific post type. Custom Post Types gives your site the ability to have templated posts, to simplify the concept. that is randomable.
Randomable Post Types
A new randomable argument on register_post_type() controls eligibility. When not set, it defaults to true for post types that are publicly_queryable and have has_archive set. Among built-in types, post is randomable; page and attachment are not.
register_post_type(
'musicals',
array(
'public' => true,
'has_archive' => true,
'randomable' => false, // Keep musicals out of /random/.
)
);
Customizing So It’s a Little Less Random
The random post is chosen by the main query. WP::handle_random() runs the main query with three callbacks added for the duration of the request: wp_random_content_pre_get_posts() on pre_get_posts, wp_random_content_posts_orderby() on posts_orderby, and wp_random_content_post_limits() on post_limits. Together they restrict the query to eligible posts, order by RAND(), and limit the result to one row.
Because the selection goes through the main query, existing pre_get_posts callbacks that customize an archive also apply to its random redirect. To change the selection only for random requests, check the query with wp_is_random_content_query():
If you prefer to disable random redirects on your site, you can use the wp_enable_random_content_redirectfilterFilterFilters are one of the two types of Hooks https://codex.wordpress.org/Plugin_API/Hooks. They provide a way for functions to modify data of other functions. They are the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated manner, and should never have side effects such as affecting global variables and output.. A simple mu-pluginPluginA plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. with add_filter( 'wp_enable_random_content_redirect', '__return_false' ); will mean no random rewrite rules are generated, the random base field is hidden on the permalinks screen, and the random query variable is ignored.
The live meeting focuses on upcoming releases and CoreCoreCore is the set of software required to run WordPress. The Core Development Team builds WordPress. development, with time for discussions and open floor.
If you have requests for help with a ticketticketCreated for both bug reports and feature development on the bug tracker. or another discussion topic, please post details in the comments section at the end of this agenda, or bring it up in Dev Chat during open floor.
BetaBetaA pre-release of software that is given out to a large group of users to trial under real conditions. Beta versions have gone through alpha testing in-house and are generally fairly close in look, feel and function to the final product; however, design changes often occur as part of the process. 5 scheduled for Nov 10th
The discussion section of the agenda is for discussing important topics affecting the upcoming release or larger initiatives that impact the Core Team. To nominate a topic for discussion, please leave a comment on this agenda with a summary of the topic, any relevant links that will help people get context for the discussion, and what kind of feedback you are looking for from others participating in the discussion.
@awetz583 is requesting input on issue #85957 – a new icon for Gallery Grid coming in 7.2.
Open floor 🎙️
Any topic can be raised for discussion in the comments, as well as requests for assistance on tickets. Tickets in the milestone for the next major or maintenance release will be prioritized.
Please include details of tickets / PRs and the links in the comments, and indicate whether you intend to be available during the meeting for discussion or will be async.
“What’s new in GutenbergGutenbergThe Gutenberg project is the new Editor Interface for WordPress. The editor improves the process and experience of creating new content, making writing rich content much simpler. It uses ‘blocks’ to add richness rather than shortcodes, custom HTML etc.
https://wordpress.org/gutenberg/…” posts (labeled with the #gutenberg-new tag) are posted following every Gutenberg release on a biweekly basis, showcasing new features included in each release. As a reminder, here’s an overview of different ways to keep up with Gutenberg and the Editor.
This release lets you format text across several blocks at once, adds emoji reactions to notes, and redesigns the Media inserter on top of the DataViews grid. Save and autosave failures now tell you what went wrong. Developers get server-side CoreCoreCore is the set of software required to run WordPress. The Core Development Team builds WordPress. actions and fields, plus a few Interactivity APIAPIAn API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. fixes. All of this thanks to a fantastic team of contributors, including ten first-timers.
Format text across blocks
Selections that span several blocks are no longer off-limits for formatting. Select the text, and the formatting controls now apply to all of it (#58913).
Working with multi-blockBlockBlock is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience. selections got a few other upgrades, too. You can drag a selection by pressing anywhere inside it (#81602), move a dragged text selection (#81603), and keep your rich text selection when you Shift+click within the same block (#84579).
Emoji reactions for notes
Sometimes an emoji is all the reply a note needs. Notes now support reactions like ❤️, 🎉, 😄, 👀, and 🚀 (#76767).
Notes also got some polish. They highlight and connect to their content more clearly (#80578), and the text for an unsent note now gets a draft marker (#84125). The “Add note” toolbar button now only adds notes and no longer shows avatars (#84635).
A new look for the Media inserter
The Media inserter now shows your media in a DataViews grid, the same component behind the lists in the Site Editor (#82749).
Additionally, audio and other files that aren’t images or videos get proper previews (#84882).
Save failures that explain themselves
Nobody likes a failed save action. Save failure notices now have a copy option and a “Show/Hide details” button, so you can share what went wrong (#82496). Autosave failures with no server response are explained, too, and the HTTPHTTPHTTP is an acronym for Hyper Text Transfer Protocol. HTTP is the underlying protocol used by the World Wide Web and this protocol defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. status is shown when available (#85157).
After a failed autosave, a countdown shows when the next attempt will run (#84656), and the notice goes away once a later save succeeds (#84649).
Security fixes from WordPress 7.1.4
Gutenberg 24.3 also includes the security fixes from WordPress 7.1.4, so updating is recommended.
Other notable highlights
Patterns: the inserter’s “My patterns” is now “Site patterns” and has an author filterFilterFilters are one of the two types of Hooks https://codex.wordpress.org/Plugin_API/Hooks. They provide a way for functions to modify data of other functions. They are the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated manner, and should never have side effects such as affecting global variables and output., and synced patterns you can read but not edit are listed in the inserter and can be detached (#84680, #84661, #84641, #84681).
Design tools: the consistency work continues, with Search, Table, Tab List, Paragraph, and Icon gaining more support, fit text reaching Post Title, and writing mode reaching Quote and Pullquote (#83954, #83949, #83953, #83934, #83948, #83036, #83965, #83964). A new background clip control also lands in the block supports UIUIUser interface (#77142). The changelog lists every block and support.
Non-breaking spaces: they are now marked with a red dot, and a button replaces them with regular spaces (#84737).
Navigation: links can be edited in a popover from the sidebarSidebarA sidebar in WordPress is referred to a widget-ready area used by WordPress themes to display information that is not a part of the main content. It is not always a vertical column on the side. It can be a horizontal rectangle below or above the content area, footer, header, or any where in the theme. List View, and an empty Navigation MenuNavigation MenuA theme feature introduced with Version 3.0. WordPress includes an easy to use mechanism for giving various control options to get users to click from one place to another on a site. shows the inserter in the sidebar (#84005, #84003).
Gallery: the mobile lightbox gets animated swiping (#79114).
Query LoopLoopThe Loop is PHP code used by WordPress to display posts. Using The Loop, WordPress processes each post to be displayed on the current page, and formats it according to how it matches specified criteria within The Loop tags. Any HTML or PHP code in the Loop will be processed on each post. https://codex.wordpress.org/The_Loop:taxonomyTaxonomyA taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. https://codex.wordpress.org/Taxonomies#Default_Taxonomies. terms are listed so they can be browsed, not recalled (#82583).
Table of Contents: headings are read from the post when the block is used in a block context (#85040).
Block toolbar: the parent selector plus only shows when no allowed block splits (#84645).
List View: nesting with top-level items is allowed (#84856).
Client-side media: animated image sub-sizes are generated by default, and EXIF metadata is preserved when converting HEIC to JPEG (#80385, #82040).
Icons: new asterisk and form-based icons (#85442, #84074), popular icons shipped to the core-adminadmin(and super admin) collection (#85072), and the Icon block shows the collection name in the “All” tab (#84055).
Reduced motion: uploaded Cover background videos and front-end Videos no longer autoplay when reduced motion is preferred (#83853, #84308).
Performance: the theme.jsonJSONJSON, or JavaScript Object Notation, is a minimal, readable format for structuring data. It is used primarily to transmit data between a server and web application, as an alternative to XML. data merged from all origins is cached, and the icon library renders faster (#81979, #84327).
Changelog
Features
Block Editor: Allow rich text formatting across blocks. (58913)
UI: Add AvatarAvatarAn avatar is an image or illustration that specifically refers to a character that represents an online user. It’s usually a square box that appears next to the user’s name. with initials, colored fallbacks, and an optional color ring. (84145, 84653, 84822, 84824)
Enhancements
ReactReactReact is a JavaScript library that makes it easy to reason about, construct, and maintain stateless and stateful user interfaces.
https://reactjs.org 19: Add new incompatible plugins. (84607)
Scripts: Run end-to-end tests against the configured wp-env test environment. (84654)
Standardize focus rings with the design system:
Components: Checkbox and radio, DataViews list items, Link, Snackbar, Tabs panels, and the UnitControl unit select. (85379, 85358, 84697, 85168, 84914, 85444)
Editor: Block Directory downloadable blocks, Edit as HTMLHTMLHyperText Markup Language. The semantic scripting language primarily used for outputting content in web browsers. textarea, LinkControl preview, MediaEdit, and the MetaMetaMeta is a term that refers to the inside workings of a group. For us, this is the team that works on internal WordPress sites like WordCamp Central and Make WordPress. Boxes panel toggle. (85307, 85266, 84695, 84940, 85355)
SearchableSelect, SelectControl: Add trigger slots for props and content. (84934, 84828)
Select, Combobox, Autocomplete: Align popup list spacing. (84393)
Snackbar: Keep snackbars with an action on screen longer. (84842)
Tabs: Align interaction backgrounds and focus states. (84572)
Theme: Enrich the design-tokens.js export with more token data. (76604)
Theme: Generate JavaScriptJavaScriptJavaScript or JS is an object-oriented computer programming language commonly used to create interactive effects within web browsers. WordPress makes extensive use of JS for a better user experience. While PHP is executed on the server, JS executes within a user’s browser.
https://www.javascript.com design token fallbacks. (84569)
Improve how notes highlight and connect to content. (80578)
Make the “Add note” toolbar button add-only and drop the avatars. (84635)
Mark the text an unsent note is about with a draft marker. (84125)
Remove the divider between the canvas and floating notes. (84850)
Patterns
Rename the inserter’s “My patterns” to “Site patterns” and add an author filter. (84680)
Support synced patterns the user can read but not edit: list them in the inserter, load them without “Edit original”, and allow detaching them. (84661, 84641, 84681)
Global Styles
Add pseudo-selector support for text inputs and select elements. (71634, 81644)
Font Library: Mark installed font variants in font collections. (84023)
Experiment with proportional stroke scaling. (84081)
Mirror the tagtagA directory in Subversion. WordPress uses tags to store a single snapshot of a version (3.6, 3.6.1, etc.), the common convention of tags in version control systems. (Not to be confused with post tags.) icons to match the other angled icons. (84675)
Ship popular icons to the core-admin collection. (85072)
Bug Fixes
DOM: Fix getOffsetParent infinite loop on a non-element parent. (84374)
Experiments: Don’t invalidate saved option with a legacy key. (84619)
Icons: Restore the missing speech bubble in the postComments icon. (85275)
UI: Show keyboard focus on disabled menu items. (85488)
UI: Synchronize popup hover and keyboard targets. (85487)
UnitControl: Use a neutral color for static unit labels. (85456)
Post Editor
Customize Widgets: Keep the block selected when using wordpress/ui overlays. (84628)
Editor: Fix long author name overflowing the Post sidebar panel. (84165)
Editor: Keep a preview canvas from adopting the entity’s selection. (84832)
Editor: Keep the block toolbar row on phones while no block is selected. (84461)
Editor: Validate parent container when converting blocks to template parts. (84155)
Ensure “Hide block tools” text isn’t wider than the button background. (85051)
Fields: Lock the status and slug fields for users who can’t publish. (84371)
Post Taxonomies: Restore shortcuts to create terms. (84601)
Post slug: Derive the slug preview from the current title instead of generated_slug. (84893)
PostURL: Remove double focus ring outline. (84694)
RevisionsRevisionsThe WordPress revisions system stores a record of each saved draft or published update. The revision system allows you to see what changes were made in each revision by dragging a slider (or using the Next/Previous buttons). The display indicates what has changed in each revision.: Save unsaved changes as a revision before restoring a revision. (84590)
Style Book: Fix crash when the Heading block is unregistered. (84359)
Template field: Show the default template instead of the Select placeholder. (85167)
URLURLA specific web address of a website or web page on the Internet, such as a website’s URL www.wordpress.org: Make cleanForSlug match WordPress Core’s sanitize_title(). (84896)
Notes
Focus the new note form once it’s positioned. (84639)
Keep the avatar round when it fails to load. (85807)
Read note markers from the rich-text record, not its HTML. (84310)
Skip the reaction summary pre-fetch when Core already does it. (85047)
Block Library
Accordion Heading: Anchor inline notes to selected title text. (84497)
Cover: Decode the oEmbed iframeiframeiFrame is an acronym for an inline frame. An iFrame is used inside a webpage to load another HTML document and render it. This HTML document may also contain JavaScript and/or CSS which is loaded at the time when iframe tag is parsed by the user’s browser. source before parsing its query string. (83770)
Custom HTML: Show a floating marker when the block renders nothing. (84150)
Gallery: Let columns override legacy responsive styles. (84360)
Icon: Fix display issues in the block manager. (84107)
Image: Measure the lightbox container, not the image’s parent. (82312)
Layout: Pair physical margins with the physical float on .alignleft and .alignright. (83520)
Font Library: Load all installed font families. (84684)
Media
Preserve EXIF metadata when converting HEIC to JPEG client-side. (82040)
Skip auto-attach on save when attachment pages are enabled. (84851)
For published posts, only auto-attach newly added images. (84890)
Interactivity API
Align directive name validation with WordPress Core. (81023)
Fix late data-wp-html values, throwing functions, and directive conflicts. (84652)
Keep server-rendered data-wp-html content for the server’s token representation. (84889)
AccessibilityAccessibilityAccessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility)
Block Toolbar: Give the phone placeholder button a name and icon when the default block is unregistered. (84533)
ColorPicker: Improve accessibility and discoverability of inputs. (70214)
Cover: Don’t autoplay an uploaded background video when reduced motion is preferred. (83853)
Modal: Keep an accessible name when the headerHeaderThe header of your site is typically the first thing people will experience. The masthead or header art located across the top of your page is part of the look and feel of your website. It can influence a visitor’s opinion about your content and you/ your organization’s brand. It may also look different on different screen sizes. is hidden. (82645)
navigateRegions: Only outline focused Publish and Save regions. (84343)
Notes: Drop misleading aria-haspopup from the “Add note” menu item. (84818)
PaletteEdit: Name picker dialogs and add screen reader dismissal. (84333)
Revisions: Meet AA contrast for the inline deletion diff without an opacity filter. (82258)
ToolsPanel: Put setting names first in accessible action labels. (84341)
Video: Don’t autoplay on the front end when reduced motion is preferred. (84308)
Performance
Cache the theme.json data merged from all origins. (81979)
Connectors: Preload REST APIREST APIThe REST API is an acronym for the RESTful Application Program Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front end of an application (think “phone app” or “website”) can communicate with the data store (think “database” or “file system”)
https://developer.wordpress.org/rest-api/ responses on the Connectors screen. (77353)
Icon: Speed up rendering of the icon library. (84327)
Components: Update guidance after the Emotion migrationMigrationMoving the code, database and media files for a website site from one server to another. Most typically done when changing hosting companies.. (85020, 85023)
Framework: Improve AGENTS.md guidance around running package scripts. (84195)
Menu: Clarify icon, label, and description usage guidelines. (84020)
Note reduced-motion handling for autoplaying media. (84594)
Storybook: Add more visual pages for all tokens. (84373)
Storybook: Keep documentation first by sorting unlisted folders alphabetically. (84563)
Storybook: Present motion tokens as an MDX documentation page. (85080)
Use the null coalescing assignment operator in singleton getters. (85174)
TypeScript:
Block Editor: Convert the store, hooksHooksIn WordPress theme and development, hooks are functions that can be applied to an action or a Filter in WordPress. Actions are functions performed when a certain event occurs in WordPress. Filters allow you to modify certain functions. Arguments used to hook both filters and actions look the same., shared components, utilities, InspectorControls, LinkControl, URLInput, typography controls, and useBlockDropZone to TypeScript. (84615, 84616, 84625, 84629, 84655, 84677, 84720, 84725, 84730, 84844, 84848, 84946)
Block Supports: Share the state text clip helpers with theme.json. (85057)
Include migration hint in useSetting deprecation warning. (85100)
Rich Text: Remove refs from event listener contexts. (84545)
Sorting: Rely on stable standard sort and use toSorted. (52213)
Block Library
A11yAccessibilityAccessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility): Move prefersReducedMotion into the block library’s shared utils. (84297)
Blocks: Clarify button background comment and template part error string. (85176)
Media & Text: Replace deprecated word-break with overflow-wrap: anywhere. (82580)
Remove compat function for unsupported unprefixed style states. (84531)
Rename inspector and toolbar style-states slots for consistency. (84598)
Extensibility
Actions API: Extract the core actions into the wordpress/core-actions script modules, and remove the fields that moved to wordpress/core-fields. (84643, 84897)
Core Actions, Core Fields: Translate the labels with the default text domain. (85139)
Fields API: Take over Core’s registry singleton like the Icons API. (84168)
Tools
Props Bot: Queue runs instead of cancelling superseded ones. (84176)
Testing
Add an iOSiOSThe operating system used on iPhones and iPads. end-to-end test harness and test selecting text across two paragraphs. (84463, 84585, 84640, 84741, 84859)
Add end-to-end tests for the autosave failure notice. (84644)
Automated Testing: Add AI review guidance for lint suppressions. (84638)
Automated Testing: Fix Storybook manifest errors and validate in CI. (84198)
Changelog validation: Reject blank lines between Unreleased entries. (84804)
Entity Actions: Fix the taxonomy collision test against Core trunktrunkA directory in Subversion containing the latest development code in preparation for the next major release cycle. If you are running "trunk", then you are on the latest revision.. (85146)
Flaky end-to-end tests: Open settings sidebar in constrained canvas test. (84606)
Icons: Add unit testunit testCode written to test a small piece of code or functionality within a larger application. Everything from themes to WordPress core have a series of unit tests. Also see regression. coverage for WP_REST_Icon_Collections_Controller. (83168)
React 19 codemod: Apply defaultProps when rendering a memo component. (84568)
Update Ariakit to 0.4.42, Base UI to 1.9.0, Terrazzo token tools to 2.9.0, Testing Library user-event to 14.6.8, and Vite to 8.3.4. (84539, 85066, 84542, 85067, 85068, 84544)
WP Build: Support importing SVG files as inlined data URIs. (85147)
Zed: Exclude node_modules from the file scan and turn off Tailwind CSS. (84604)
Linting
ESLint: Align UI caution components with Storybook status. (84319)
ESLint: Allow design tokens in component JavaScript. (84827)
ESLint: Make jsdoc/escape-inline-tags an error. (84701)
ESLint: Remove an unused comments-pluginPluginA plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. dependency. (85102)
Use the matching wordpress-develop branchbranchA directory in Subversion. WordPress uses branches to store the latest development code for each major release (3.9, 4.0, etc.). Branches are then updated with code for any minor releases of that branch. Sometimes, a major version of WordPress and its minor versions are collectively referred to as a "branch", such as "the 4.0 branch". for pre-release PHPUnit tests. (84758)
First-time contributors
The following PRs were merged by first-time contributors:
@00kaku: Search: Don’t clip the button focus outline when the field is collapsed. (84685)
@anamwp: Revisions: Meet AA contrast for the inline del diff without an opacity filter. (82258)
@ariel-maidana: Media & Text: Restore content padding in classic themes with a CSS reset. (85200)
@awss1i: DropdownMenu: Keep a disabled toggle closed on ArrowDown. (84556)
@bitworks-io: Env: Update simple-git to v4. (84137)
@poligilad-auto: Icons: Mirror the tag icons to match the other angled icons. (84675)
@preetpatel713: Editor: Fix long author name overflowing the Post sidebar panel. (84165)
@rajpreetcodes: Block Editor: Preserve rich text selection on Shift+click within the same block. (84579)
@salvatorecorsi: Accordion Heading: Anchor inline notes to selected title text. (84497)
@yotatameguchi-boop: Duotone: Sync unsupported attribute type guard from Core. (84801)
Contributors
The following contributors merged PRs in this release:
The Presence APIAPIAn API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. meeting took place on Monday, October 26, 2026 at 15:00 UTC in #feature-presence-api. It also hosts the real-time collaboration (RTC) work. This week’s focus was the last two merge criteria, user testing and a security audit.
Presence API 0.18.3 is out. 0.18.0 through 0.18.3 brought a per-room session hash that tells a second browser from a second tab (#815), coreCoreCore is the set of software required to run WordPress. The Core Development Team builds WordPress.’s copy of each API function winning once it exists (#805), and a REST settings save warning an open Settings screen (#868).
0.18.4 was next (#873). @huzaifaalmesbah found that logging out in one browser released post locks still held in another (#890), and the fix was in review (#893).
Everything from last time except the audit is merged: touch (#830), keyboard-only (#841), JavaScriptJavaScriptJavaScript or JS is an object-oriented computer programming language commonly used to create interactive effects within web browsers. WordPress makes extensive use of JS for a better user experience. While PHP is executed on the server, JS executes within a user’s browser.
https://www.javascript.com off (#857), HTMLHTMLHyperText Markup Language. The semantic scripting language primarily used for outputting content in web browsers. validation (#852, #858), Firefox and WebKit (#838), inline CSSCSSCascading Style Sheets. in stylesheets (#825) and linted PHPUnit tests (#817). Thanks to @iamchitti and @rejaulalomkhan.
User testing is #835. Muhib drafted a call for testing for Make/Test in #869, with Playground links and four tasks. @huzaifaalmesbah, @iamchitti and @joefusco left feedback, and @huzaifaalmesbah offered to help get it posted on Make/Test once that feedback is worked in.
The security audit is #834. noruzzaman went through all four surfaces on the issue. The criterion still asks for a review from outside the repository, so @joefusco will ask the Core security team. Anyone who has done security review for core or a large pluginPluginA plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. is welcome to take a look, in the channel or on #834.
#836 measures the post query cache with the plugin’s post locks off and on. A synthetic 20,000-post site is in the issue, and a few large sites on WP Engine are being lined up to measure real traffic.
Path to core
The readiness gate on #550 still has December 3 as the earliest date, eight weeks with no breaking API change from 0.17.0, and that is the earliest an initial proposal would go to TracTracAn open source project by Edgewall Software that serves as a bug tracker and project management tool for WordPress.. It also asks for three outside projects on the API, and GSE is the only one so far. Anyone building on the API, or considering it for a plugin or host, is welcome to get in touch.
Open floor
@jaredrethman asked on the guide whether WordPress could fire an action for each stored edit-log row, so a hosted relay could stream changes without running a process on the server (comment). The Presence API already does this for presence, firing set_presence and removed_presence on every write.
@alecgeatches said the engine could likely support it, with the caveat that a server-side request per row would leave the server working hard to keep up, so the cost belongs with whoever hooksHooksIn WordPress theme and development, hooks are functions that can be applied to an action or a Filter in WordPress. Actions are functions performed when a certain event occurs in WordPress. Filters allow you to modify certain functions. Arguments used to hook both filters and actions look the same. in, queued or batched on their side.
@jaredrethman noted that gutenberg_sync_engines_room_changed already fires per write and the Redis notifier sends one publish per request, so a relay only needs that wake hint, never the rows. Editor presence already rides that hint, and carrying set_presence and removed_presence too would take Heartbeat polling off the adminadmin(and super admin). He opened #901 for what a relay would need.
Since the meeting
Presence API 0.18.4 shipped October 26 with the logout fix (#893), and the personal data export now leaves out reserved rows (#896).
0.19.0 shipped October 29 with a presence-api.keepalivefilterFilterFilters are one of the two types of Hooks https://codex.wordpress.org/Plugin_API/Hooks. They provide a way for functions to modify data of other functions. They are the counterpart to Actions. Unlike Actions, filters are meant to work in an isolated manner, and should never have side effects such as affecting global variables and output. (#904) and a presence-api.roomChanged action (#903), so a push transport can hold a tab’s rows and refresh presence at once.
0.20.0 shipped November 1 with wp_presence_admin_state() (#924), which completes #901, and wp_presence_room_changed now fires when an edited post’s title or status changes (#915).
The docs are live, a first pass at automated docs for what’s built so far, generated and checked against the code.
One major change landed this week: the notification repository is now scoped per user, laying the groundwork for the REST APIREST APIThe REST API is an acronym for the RESTful Application Program Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front end of an application (think “phone app” or “website”) can communicate with the data store (think “database” or “file system”)
https://developer.wordpress.org/rest-api/. In addition, we merged a README note and four Dependabot bumps. A batch of community PRs (fixes, tooling, and PHPPHPThe web scripting language in which WordPress is primarily architected. WordPress requires PHP 7.4 or higher test-matrix updates) is open and waiting for review.
Highlights
Notification repository is now user-scoped (#626, elphizu). The Notification_Repository interface was rewritten so every lookup takes a user_id. find_by_id() now finds a message by its message ID for a specific user, and new find_by_user() and count_by_user() methods support filtering by status, channel, context, after/before (for polling), expiry and pagination. The wpdb implementation was updated to match, the legacy interface-notification.php was removed, and new PHPUnit coverage was added. Users can now only reach their own notifications through the repository, and the REST layer gets what it needs for listing and totals (X-WP-Total).
README note about the demo code pluginPluginA plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. (#648, jonathanbossenger), pointing contributors to the demo plugin.
#626 fix: make notification repository user-scoped (elphizu)
Docs
#648 Adding a note to the readme about the demo code plugin (jonathanbossenger)
Dependency updates
All patchpatchA special text file that describes changes to code, by identifying the files and lines which are added, removed, and altered. It may also be referred to as a diff. A patch can be applied to a codebase for testing.-level npm bumps from Dependabot, merged 2026-10-23:
Still open from Dependabot: #647 eslint 10.4.0 → 10.13.0, and #654 fast-uri 3.1.8 → 3.1.9.
In progress
Opened this week
#649 add modern php versions to testsuite (masteradhoc)
#652 fix(channel-registry): guard title key with array_key_exists() like other optional args (hmbashar)
#653 fix(base-image): guard json_unserialize() against invalidinvalidA resolution on the bug tracker (and generally common in software development, sometimes also notabug) that indicates the ticket is not a bug, is a support request, or is generally invalid.JSONJSONJSON, or JavaScript Object Notation, is a minimal, readable format for structuring data. It is used primarily to transmit data between a server and web application, as an alternative to XML. input (hmbashar)
Open and updated this week (none are drafts)
#644 REST: Add missing text domain and fix typos in REST API controller strings (devmuhib009)
#633 fix: convert notification store to thunks (KhushalSainS)
#632 Tooling: Fix the test:php, php-install, lint:css and docGen npm scripts (huzaifaalmesbah)
#628GitHubGitHubGitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged by the repository owner. https://github.com/: Add a Props Bot workflow (huzaifaalmesbah)
#627 Model: Handle dates in UTC in Serde and the message factory (huzaifaalmesbah)
#625 GitHub: Update the pull request template (huzaifaalmesbah)
#624 Framework: Store one Factory instance per subclass (huzaifaalmesbah)
#552 Types: add return type declaration to jsonSerialize methods (SirLouen)
Closed without merging
#383 Update wp-env and add useful script commands (Sephsekla), a 2023 draft
#568 npm: bump form-data from 4.0.5 to 4.0.6 (Dependabot)
You must be logged in to post a comment.