v20260414.0

What's Changed

• chore(deps-dev): Bump webpack-cli from 6.0.1 to 7.0.1 in /search/search-dev-tools by @dependabot[bot] in #6856
• chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 in /tests/e2e by @dependabot[bot] in #6866
• chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 in /search/search-dev-tools by @dependabot[bot] in #6867
• Revert "feat(vip-support): enable 2FA email provider when creating support users" by @katag9k in #6862
• Release gutenberg-0.2-20260323 for RTC by @shekharnwagh in #6869
• Staging release: v20260331.1 by @luiztiago in #6889
• Update the gutenberg version to load to be 0.2 instead by @ingeniumed in #6887
• chore(deps): Bump step-security/harden-runner from 2.16.0 to 2.16.1 by @dependabot[bot] in #6893
• chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.1 in /tests/e2e by @dependabot[bot] in #6897
• chore(deps-dev): Bump picomatch from 4.0.3 to 4.0.4 in /tests/e2e by @dependabot[bot] in #6882
• chore(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #6881
• chore(deps): Bump picomatch in /search/search-dev-tools by @dependabot[bot] in #6880
• chore(deps-dev): Bump @babel/preset-env from 7.29.0 to 7.29.2 in /search/search-dev-tools in the babel group across 1 directory by @dependabot[bot] in #6871
• chore(deps): Bump github/codeql-action from 4.33.0 to 4.35.1 by @dependabot[bot] in #6884
• chore(deps-dev): Bump lodash from 4.17.23 to 4.18.1 in /tests/e2e by @dependabot[bot] in #6898
• chore(deps-dev): Bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in #6899
• chore(deps): Bump lodash from 4.17.23 to 4.18.1 in /search/search-dev-tools by @dependabot[bot] in #6900
• chore: update cron-control by @sjinks in #6892
• chore(deps-dev): Bump eslint-plugin-playwright from 2.10.0 to 2.10.1 in /tests/e2e by @dependabot[bot] in #6872
• chore(deps): Bump codecov/codecov-action from 5.5.2 to 6.0.0 in /.github/actions/run-wp-tests by @dependabot[bot] in #6886
• First pass at repo doc hardening by @rinatkhaziev in #6801
• Update wp-parsely submodule to version 3.23.0 by @acicovic in #6891
• Add and set wp-parsely 3.23 as the default version by @acicovic in #6890
• Staging release: v20260407.1 by @luiztiago in #6902
• Production release: v20260414.0 by @luismulinari in #6919

Full Changelog: v20260331.0...v20260414.0

v20260331.0

What's Changed

• chore(deps): Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #6837
• chore(deps): Bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in #6834
• chore(deps): Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #6836
• chore(deps): Bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in #6835
• Add network-site specific config support for Agentforce by @andrea-sdl in #6844
• feat(wp-cli): add logging to logstash for unban commands by @sjinks in #6843
• chore: update http-concat submodule by @sjinks in #6845
• chore(deps-dev): Bump terser-webpack-plugin from 5.3.17 to 5.4.0 in /search/search-dev-tools by @dependabot[bot] in #6860
• chore(deps): Bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in #6852
• chore(deps): Bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in #6847
• chore(deps-dev): Bump eslint-plugin-playwright from 2.9.0 to 2.10.0 in /tests/e2e by @dependabot[bot] in #6854
• chore(deps): Bump preact from 10.28.4 to 10.29.0 in /search/search-dev-tools by @dependabot[bot] in #6855
• chore(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 by @dependabot[bot] in #6850
• chore(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in /tests/e2e by @dependabot[bot] in #6853
• chore(deps-dev): Bump mini-css-extract-plugin from 2.10.0 to 2.10.1 in /search/search-dev-tools by @dependabot[bot] in #6861
• chore(deps): Bump shivammathur/setup-php from 2.36.0 to 2.37.0 in /.github/actions/run-wp-tests by @dependabot[bot] in #6859
• chore(deps): Bump ramsey/composer-install from 3.1.1 to 4.0.0 in /.github/actions/run-wp-tests by @dependabot[bot] in #6858
• chore(deps-dev): Bump wp-phpunit/wp-phpunit from 6.9.1 to 6.9.4 by @dependabot[bot] in #6848
• chore(deps-dev): Bump johnpbloch/wordpress-core from 6.9.1 to 6.9.4 by @dependabot[bot] in #6849
• chore(deps): Bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] in #6846
• chore(deps): Bump ramsey/composer-install from 3.1.1 to 4.0.0 by @dependabot[bot] in #6851
• chore(deps-dev): Bump sass from 1.97.3 to 1.98.0 in /search/search-dev-tools by @dependabot[bot] in #6857
• Release gutenberg-0.2-20260317 for RTC by @maxschmeling in #6865
• Staging release: v20260317.1 by @luismulinari in #6864
• Staging release: v20260324.1 by @sjinks in #6876
• Production release: v20260331.0 by @luiztiago in #6888

Full Changelog: v20260325.1...v20260331.0

v20260325.1

What's Changed

• Revert "Test TeamCity Build" by @sjinks in #6879

Full Changelog: v20260325.0...v20260325.1

v20260325.0

What's Changed

• Test TeamCity Build by @sjinks in #6878

Full Changelog: v20260324.0...v20260325.0

v20260324.0

What's Changed

• Production release: v20260324.0 by @sjinks in #6875

Full Changelog: v20260317.0...v20260324.0

v20260317.0

What's Changed

• Add WPVIP User-Agent header to stats pixel request by @Copilot in #6826
• fix(qm-object-cache): PHP 8.4 implicit nullable parameter deprecation by @enescala in #6828
• chore(deps): Bump immutable from 5.1.4 to 5.1.5 in /search/search-dev-tools by @dependabot[bot] in #6823
• chore(deps): Bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #6812
• chore(deps-dev): Bump svgo from 4.0.0 to 4.0.1 in /search/search-dev-tools by @dependabot[bot] in #6824
• chore(deps): Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #6811
• chore(deps-dev): Bump css-minimizer-webpack-plugin from 7.0.4 to 8.0.0 in /search/search-dev-tools by @dependabot[bot] in #6816
• chore(deps-dev): Bump webpack from 5.105.2 to 5.105.3 in /search/search-dev-tools by @dependabot[bot] in #6815
• chore(deps-dev): Bump eslint-plugin-playwright from 2.7.1 to 2.9.0 in /tests/e2e by @dependabot[bot] in #6817
• chore(deps-dev): Bump @types/node from 25.3.0 to 25.3.3 in /tests/e2e by @dependabot[bot] in #6814
• chore(deps): Bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in #6810
• chore(deps-dev): Bump autoprefixer from 10.4.24 to 10.4.27 in /search/search-dev-tools by @dependabot[bot] in #6813
• security: fix vulnerable dependencies by @sjinks in #6830
• chore(deps-dev): Bump globals from 17.3.0 to 17.4.0 in /search/search-dev-tools by @dependabot[bot] in #6818
• chore(deps): Bump serialize-javascript and terser-webpack-plugin in /search/search-dev-tools by @dependabot[bot] in #6833
• test: properly clean up $_SERVER vars by @sjinks in #6832
• chore(deps-dev): Bump babel-loader from 10.0.0 to 10.1.1 in /search/search-dev-tools in the babel group by @dependabot[bot] in #6838
• chore(deps-dev): Bump @types/node from 25.3.3 to 25.4.0 in /tests/e2e by @dependabot[bot] in #6839
• chore(deps-dev): Bump webpack from 5.105.3 to 5.105.4 in /search/search-dev-tools by @dependabot[bot] in #6840
• feat(wp-cli): introduce wp security unban commands by @sjinks in #6831
• Staging release: v20260310.1 by @luiztiago in #6842
• Production release: v20260317.0 by @luismulinari in #6863

New Contributors

• @enescala made their first contribution in #6828

Full Changelog: v20260310.0...v20260317.0

v20260310.0

What's Changed

• chore(deps-dev): Bump postcss-loader from 8.2.0 to 8.2.1 in /search/search-dev-tools by @dependabot[bot] in #6780
• chore(deps-dev): Bump css-loader from 7.1.3 to 7.1.4 in /search/search-dev-tools by @dependabot[bot] in #6779
• chore(deps-dev): Bump webpack from 5.105.0 to 5.105.2 in /search/search-dev-tools by @dependabot[bot] in #6777
• chore(deps-dev): Bump @types/node from 25.2.2 to 25.2.3 in /tests/e2e by @dependabot[bot] in #6778
• chore: update Akismet to 5.6 by @sjinks in #6787
• chore(deps): Bump preact from 10.28.3 to 10.28.4 in /search/search-dev-tools by @dependabot[bot] in #6793
• chore(deps): Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in #6788
• chore(deps): Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #6789
• chore(deps-dev): Bump eslint-plugin-playwright from 2.5.1 to 2.7.1 in /tests/e2e by @dependabot[bot] in #6795
• chore(deps-dev): Bump @types/node from 25.2.3 to 25.3.0 in /tests/e2e by @dependabot[bot] in #6794
• chore(deps-dev): Bump acorn from 8.15.0 to 8.16.0 in /search/search-dev-tools by @dependabot[bot] in #6791
• chore(deps-dev): Bump @automattic/eslint-plugin-wpvip from 1.1.1 to 1.2.0 in /search/search-dev-tools by @dependabot[bot] in #6790
• chore(deps-dev): Bump @automattic/eslint-plugin-wpvip from 1.1.1 to 1.2.0 in /tests/e2e by @dependabot[bot] in #6792
• Remove Varnish support and implement class-based purges by @rinatkhaziev in #6642
• chore: add Copilot setup steps by @sjinks in #6800
• fix: insecure deserialization of remote data by @sjinks in #6798
• Add checks for HTTP_CF_CONNECTING_IP by @mchanDev in #6781
• chore(deps-dev): Bump erusev/parsedown from 1.7.4 to 1.8.0 by @dependabot[bot] in #6775
• ci: update Copilot Setup Steps workflow by @sjinks in #6806
• chore(deps-dev): Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #6804
• chore(deps-dev): Bump minimatch from 3.1.2 to 3.1.5 in /tests/e2e by @dependabot[bot] in #6802
• chore(deps-dev): Bump minimatch from 3.1.2 to 3.1.5 in /search/search-dev-tools by @dependabot[bot] in #6803
• ci: do not checkout mu-plugins-ext for Copilot by @sjinks in #6808
• Staging release: v20260303.1 by @rinatkhaziev in #6822
• Move purge cache tool from widget to nav menu and implement better guard rails (require domain confirmation) by @yolih in #6819
• Staging release: v20260305.0 by @rinatkhaziev in #6825
• Production release: v20260310.0 by @luiztiago in #6841

New Contributors

• @yolih made their first contribution in #6819

Full Changelog: v20260303.0...v20260310.0

v20260303.0

What's Changed

• Switch Pendo visitor ID from hashed email to plain email by @smithjw1 in #6773
• chore(deps-dev): Bump qs from 6.14.1 to 6.14.2 in /search/search-dev-tools by @dependabot[bot] in #6774
• chore(ci): update changelog action version and add changelog title by @seanlanglands in #6770
• chore(deps): Bump github/codeql-action from 4.32.2 to 4.32.3 by @dependabot[bot] in #6776
• fix: syntax errors in release workflows by @sjinks in #6782
• Staging release: v20260217.1 by @luiztiago in #6784
• Staging release: v20260224.1 by @rinatkhaziev in #6797
• Production release: v20260303.0 by @rinatkhaziev in #6821

Full Changelog: v20260224.0...v20260303.0

v20260224.0

What's Changed

• Production release: v20260224.0 by @rinatkhaziev in #6796

Full Changelog: v20260217.0...v20260224.0

v20260217.0

What's Changed

• Update Jetpack to 15.5 by @rebeccahum in #6758
• Add VIP Agentforce integration loader by @brunobasto in #6741
• fix(two-factor): otpauth link in QR code URL by @sjinks in #6759
• fix: convert public-facing inline scripts into external assets by @sjinks in #6754
• chore(deps-dev): Bump wp-phpunit/wp-phpunit from 6.9.0 to 6.9.1 by @dependabot[bot] in #6762
• chore(deps): Bump step-security/harden-runner from 2.14.1 to 2.14.2 by @dependabot[bot] in #6768
• chore(deps): Bump github/codeql-action from 4.32.1 to 4.32.2 by @dependabot[bot] in #6766
• fix(two-factor): ensure execution stops after redirects by @sjinks in #6761
• chore(deps-dev): Bump @types/node from 25.2.0 to 25.2.2 in /tests/e2e by @dependabot[bot] in #6767
• chore(deps-dev): Bump @playwright/test from 1.58.1 to 1.58.2 in /tests/e2e by @dependabot[bot] in #6763
• chore(deps-dev): Bump johnpbloch/wordpress-core from 6.9.0 to 6.9.1 by @dependabot[bot] in #6764
• chore(deps-dev): Bump sass-loader from 16.0.6 to 16.0.7 in /search/search-dev-tools by @dependabot[bot] in #6769
• chore(deps-dev): Bump webpack from 5.104.1 to 5.105.0 in /search/search-dev-tools by @dependabot[bot] in #6765
• Add email to WordPress telemetry by @smithjw1 in #6760
• Staging release: v20260210.1 by @luismulinari in #6772
• Production release: v20260217.0 by @luiztiago in #6783

Full Changelog: v20260210.0...v20260217.0