Allows admin chosen post types to have a featured post check box on the edit screen. Also adds appropriate classes to front end post display, and allows featured posts to be queried via a taxonomy query.
WordPress/gutenberg (@wordpress/block-editor)
### [`v12.7.0`](https://togithub.com/WordPress/gutenberg/releases/tag/v12.7.0): 12.7.0
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/block-editor@12.6.0...@wordpress/block-editor@12.7.0)
#### Changelog
##### Enhancements
##### Block Library
- Columns: Add border support. ([31737](https://togithub.com/WordPress/gutenberg/pull/31737))
- Comment Template: Fix comment pagination with nested replies. ([38187](https://togithub.com/WordPress/gutenberg/pull/38187))
- Comments Query Loop: Show placeholder comments on site editor. ([38072](https://togithub.com/WordPress/gutenberg/pull/38072))
- Group Blocks: Add margin support (top/bottom). ([37344](https://togithub.com/WordPress/gutenberg/pull/37344))
- Navigation: Try unifying submenu arrow positioning. ([37003](https://togithub.com/WordPress/gutenberg/pull/37003))
- Page List: Simplify loading state. ([38983](https://togithub.com/WordPress/gutenberg/pull/38983))
- Submenu: Add revert button. ([38203](https://togithub.com/WordPress/gutenberg/pull/38203))
##### Components
- FocalPointPicker: Allow updating its value while dragging. ([38247](https://togithub.com/WordPress/gutenberg/pull/38247))
- General Interface: Simplify site icon animation on hover. ([38783](https://togithub.com/WordPress/gutenberg/pull/38783))
- Navigator: Add `NavigatorButton` and `NavigatorBackButton` components. ([38634](https://togithub.com/WordPress/gutenberg/pull/38634))
- Type Refactor: Use `forwardedRef` type for all forwarded refs in [@wordpress/components](https://togithub.com/wordpress/components). ([38948](https://togithub.com/WordPress/gutenberg/pull/38948))
##### Block Editor
- Block Editor: Add settings to enable/disable auto anchor generation. ([38780](https://togithub.com/WordPress/gutenberg/pull/38780))
- Block Transforms: Keep additional HTML classes during a block transform. ([38964](https://togithub.com/WordPress/gutenberg/pull/38964))
- LineHeightControl: Enhance interactions by migrating internals to `NumberControl` on Style options. ([37160](https://togithub.com/WordPress/gutenberg/pull/37160))
- List View: Add multi-select behaviour for blocks when shift key is selected. ([38314](https://togithub.com/WordPress/gutenberg/pull/38314))
- Quick Inserter: Prioritize showing patterns instead of blocks. ([38709](https://togithub.com/WordPress/gutenberg/pull/38709))
- Template Parts: Show existing template parts and a list of block patterns at creation flow. ([38814](https://togithub.com/WordPress/gutenberg/pull/38814))
##### Styles
- Add initial version of the style engine. ([37978](https://togithub.com/WordPress/gutenberg/pull/37978))
- Style engine: Refine `Box` type. ([38894](https://togithub.com/WordPress/gutenberg/pull/38894))
##### Post Editor
- Enable tooltip for the main dashboard button. ([38790](https://togithub.com/WordPress/gutenberg/pull/38790))
##### Themes
- Lowered specificity of alignment rules for support layout so wide alignments work. ([38947](https://togithub.com/WordPress/gutenberg/pull/38947))
- Remove data-align divs for themes that support layout. ([38613](https://togithub.com/WordPress/gutenberg/pull/38613))
- Remove the div wrapper from the aligned image blocks. ([38657](https://togithub.com/WordPress/gutenberg/pull/38657))
##### Patterns
- Allow pattern registration from directory with theme.json. ([38323](https://togithub.com/WordPress/gutenberg/pull/38323))
##### List View
- Expand block list tree on selection. ([35817](https://togithub.com/WordPress/gutenberg/pull/35817))
##### Bug Fixes
##### Block Library
- Block Transforms: Fix Image and Video to Cover block transformations. ([38959](https://togithub.com/WordPress/gutenberg/pull/38959))
- Cover: Fix gradient overlay (remove black background color) ([38765](https://togithub.com/WordPress/gutenberg/pull/38765))
- File: Fix PDF file block full content fixture. ([38725](https://togithub.com/WordPress/gutenberg/pull/38725))
- Latest Posts: Add missing class to post title. ([38740](https://togithub.com/WordPress/gutenberg/pull/38740))
- Logo: Avoid division by zero in site logo. ([38808](https://togithub.com/WordPress/gutenberg/pull/38808))
- Post navigation link: Use correct closing tag. ([38976](https://togithub.com/WordPress/gutenberg/pull/38976))
- Query Loop: Display nothing if we want only sticky posts but no stickies exist. ([38909](https://togithub.com/WordPress/gutenberg/pull/38909))
- Template Parts: Decode entities in labels. ([38805](https://togithub.com/WordPress/gutenberg/pull/38805))
- Social Links: Only apply the social links block migration if there's a need for a migration. ([38561](https://togithub.com/WordPress/gutenberg/pull/38561))
##### Block Editor
- Backport from core: Global styles duotone not rendering in post editor. ([38897](https://togithub.com/WordPress/gutenberg/pull/38897))
- Block Editor: insertDefaultBlock should not trigger an error if the default block is not registered. ([38886](https://togithub.com/WordPress/gutenberg/pull/38886))
- Inserter: Fix focus loss after closing patterns explorer from modal. ([38884](https://togithub.com/WordPress/gutenberg/pull/38884))
- Multi-selection: avoid RichText instances becoming disabled after multi selection. ([38821](https://togithub.com/WordPress/gutenberg/pull/38821))
- Rehabilitate drag gesture in `LineHeightControl`. ([38930](https://togithub.com/WordPress/gutenberg/pull/38930))
- RichText: Fix wrong block merging when pressing `delete` consecutively. ([38991](https://togithub.com/WordPress/gutenberg/pull/38991))
##### Site Editor
- Add site editor initial redirect error handling. ([38655](https://togithub.com/WordPress/gutenberg/pull/38655))
- Add template check to 'setPage' action. ([38656](https://togithub.com/WordPress/gutenberg/pull/38656))
- Adds additional check to guard against incompete presets. ([38902](https://togithub.com/WordPress/gutenberg/pull/38902))
- Limit template part slugs to Latin chars. ([38695](https://togithub.com/WordPress/gutenberg/pull/38695))
- Template List: Decode entities in record titles. ([38863](https://togithub.com/WordPress/gutenberg/pull/38863))
##### Styles
- Allow child classes to be called instead of the parents. ([38857](https://togithub.com/WordPress/gutenberg/pull/38857))
- Backport: Allow for classic themes using default presets. ([38701](https://togithub.com/WordPress/gutenberg/pull/38701))
- Fix global styles loading logic. ([38745](https://togithub.com/WordPress/gutenberg/pull/38745))
##### Components
- Fix unexpected dragging triggered on spinner buttons on hover in Safari. ([38840](https://togithub.com/WordPress/gutenberg/pull/38840))
- Show tooltip on toggle custom size in FontSizePicker. ([38985](https://togithub.com/WordPress/gutenberg/pull/38985))
##### List View
- Fix error triggering after duplicating a block making it unselectable. ([38760](https://togithub.com/WordPress/gutenberg/pull/38760))
- Fix UI broken due to error when deleting first item in canvas. ([38775](https://togithub.com/WordPress/gutenberg/pull/38775))
##### CSS & Styling
- Fix button width on Widgets Editor. ([38846](https://togithub.com/WordPress/gutenberg/pull/38846))
- Load block support styles in the `` for block themes. ([38750](https://togithub.com/WordPress/gutenberg/pull/38750))
- Change location of block support styles in ``. ([39164](https://togithub.com/WordPress/gutenberg/pull/39164))
- Reduce the margin of the block toolbar. ([38746](https://togithub.com/WordPress/gutenberg/pull/38746))
##### Block Directory
- Fix the block activation when metadata registered on server. ([38697](https://togithub.com/WordPress/gutenberg/pull/38697))
##### Colors
- Strip double # char on HexInput. ([38335](https://togithub.com/WordPress/gutenberg/pull/38335))
##### Packages
- Core Data: CanUser resolver always use the OPTIONS method. ([38901](https://togithub.com/WordPress/gutenberg/pull/38901))
- Dom: Avoid RangeError in findPrevious method. ([38961](https://togithub.com/WordPress/gutenberg/pull/38961))
##### Apps
- Fix Custom Palette colors and support multiple origins and theme cache issues. ([38417](https://togithub.com/WordPress/gutenberg/pull/38417))
##### Accessibility
- Adds aria-label to the search button, as accessibility enhancement. ([38136](https://togithub.com/WordPress/gutenberg/pull/38136))
- Avoid duplicate labels for "Save Draft" and "Save as pending" buttons. ([38776](https://togithub.com/WordPress/gutenberg/pull/38776))
- RichText: Reverse disableLineBreaks to determine aria-multiline state. ([38652](https://togithub.com/WordPress/gutenberg/pull/38652))
- TreeGrid: Add Home/End keys to jump to start/end of grid. ([38679](https://togithub.com/WordPress/gutenberg/pull/38679))
##### Performance
##### CSS & Styling
- Use `wp_unique_id()` instead of `uniqid()` to generate CSS class names. ([38891](https://togithub.com/WordPress/gutenberg/pull/38891))
##### Experiments
##### New APIs in Core Data
- Propose useEntityRecords (experimental). ([38782](https://togithub.com/WordPress/gutenberg/pull/38782))
- UseEntityRecord (experimental). ([38522](https://togithub.com/WordPress/gutenberg/pull/38522))
##### Documentation
##### Handbook
- Add documentation for deprecating styles. ([38540](https://togithub.com/WordPress/gutenberg/pull/38540))
- Add documentation about the `patterns` field of `theme.json`. ([38700](https://togithub.com/WordPress/gutenberg/pull/38700))
- Add more info about contextual patterns and pattern transformations. ([38809](https://togithub.com/WordPress/gutenberg/pull/38809))
- Add semantic patterns documentation. ([38778](https://togithub.com/WordPress/gutenberg/pull/38778))
- Clarify deprecations documentation. ([38683](https://togithub.com/WordPress/gutenberg/pull/38683))
- Fix hyperlink in block `Metadata` page. ([38941](https://togithub.com/WordPress/gutenberg/pull/38941))
- Improve point release documentation to include even more detail. ([38631](https://togithub.com/WordPress/gutenberg/pull/38631))
- Increase support for `experimental-link-color` until WordPress 5.9 is the minimum version. ([38711](https://togithub.com/WordPress/gutenberg/pull/38711))
- Group: Update block supports. ([38962](https://togithub.com/WordPress/gutenberg/pull/38962))
- Links changed for Developer.wordpress.org on block editor section. ([38841](https://togithub.com/WordPress/gutenberg/pull/38841))
- Removing comma so that the code snippet of `theme.json` represents standard JSON. ([38938](https://togithub.com/WordPress/gutenberg/pull/38938))
- `theme.json` Update version section docs to v2 ([38937](https://togithub.com/WordPress/gutenberg/pull/38937))
- Update Getting Started with more granular options. ([38682](https://togithub.com/WordPress/gutenberg/pull/38682))
##### Block Library
- Add instructions on how to add new core blocks to block-library. ([38868](https://togithub.com/WordPress/gutenberg/pull/38868))
##### Components
- FormFileUpload: Add Storybook stories. ([38734](https://togithub.com/WordPress/gutenberg/pull/38734))
- Storybook: Move experimental components to correct section. ([38640](https://togithub.com/WordPress/gutenberg/pull/38640))
- Storybook: Remove story for Typography Panel. ([38867](https://togithub.com/WordPress/gutenberg/pull/38867))
- wp-env: Document some caveats when using xdebug with VSCode. ([38882](https://togithub.com/WordPress/gutenberg/pull/38882))
##### Code Quality
##### Block Library
- Cover: Remove unnecessary `temporaryMinHeight`. ([38887](https://togithub.com/WordPress/gutenberg/pull/38887))
- Cover block: Update deprecated gradient fixture. ([38728](https://togithub.com/WordPress/gutenberg/pull/38728))
- Gallery: Register gallery in block_names dynamic block array. ([38689](https://togithub.com/WordPress/gutenberg/pull/38689))
- Navigation: Improve consistency of block hook. ([38705](https://togithub.com/WordPress/gutenberg/pull/38705))
- Navigation: Select dropdown encapsulation and further consolidation. ([38627](https://togithub.com/WordPress/gutenberg/pull/38627))
- Navigation: Update wp_kses usage to be consistent (use wp_kses_post). ([38732](https://togithub.com/WordPress/gutenberg/pull/38732))
- Post Navigation Link: Prefer kses to blanket esc_html on label. ([38696](https://togithub.com/WordPress/gutenberg/pull/38696))
- Remove data-controls mock from Image block RN tests. ([38852](https://togithub.com/WordPress/gutenberg/pull/38852))
##### Components
- Block Supports: Improve image block regex. ([38742](https://togithub.com/WordPress/gutenberg/pull/38742))
- Block Supports: Load Styles on `` backport to core. ([38880](https://togithub.com/WordPress/gutenberg/pull/38880))
- Context: Omit `as` prop in types. ([38844](https://togithub.com/WordPress/gutenberg/pull/38844))
- Core Data: Remove fallback for OPTIONS response headers in canUser resolver. ([38881](https://togithub.com/WordPress/gutenberg/pull/38881))
- Core Data: TypeScript definitions for entity records. ([38666](https://togithub.com/WordPress/gutenberg/pull/38666))
- Data: Normalize selector args when handling metadata selectors/actions. ([38945](https://togithub.com/WordPress/gutenberg/pull/38945))
- Edit Site: Migrate store to thunks. ([38812](https://togithub.com/WordPress/gutenberg/pull/38812))
- Icons: Deprecate duplicate icons. ([38849](https://togithub.com/WordPress/gutenberg/pull/38849))
- PostTrash: Call trashPost action with no arguments, rewrite to hooks. ([38615](https://togithub.com/WordPress/gutenberg/pull/38615))
##### npm Packages
- Packages: Automate cherry-picking to `trunk` commits created during publishing. ([38977](https://togithub.com/WordPress/gutenberg/pull/38977))
- Packages: Ensure that private packages do not update when publishing to npm. ([38946](https://togithub.com/WordPress/gutenberg/pull/38946))
##### Tools
##### Testing
- Add end-to-end test for merging paragraphs and soft line break afterwards. ([39009](https://togithub.com/WordPress/gutenberg/pull/39009))
- Post Visibility end-to-end test: Improve XPath selector to avoid reliance on DOM structure. ([38717](https://togithub.com/WordPress/gutenberg/pull/38717))
- Replace no-shadow eslint rule with [@typescript-eslint/no-shadow](https://togithub.com/typescript-eslint/no-shadow). ([38665](https://togithub.com/WordPress/gutenberg/pull/38665))
- Remove client ID from fixtures. ([38685](https://togithub.com/WordPress/gutenberg/pull/38685))
- Remove `originalContent` from fixtures. ([38638](https://togithub.com/WordPress/gutenberg/pull/38638))
- RichText: Add test for merging and then splitting paragraphs. ([39007](https://togithub.com/WordPress/gutenberg/pull/39007))
- Site Editor Tests: Use REST API to delete templates and template parts. ([38524](https://togithub.com/WordPress/gutenberg/pull/38524))
- TreeGrid: Add tests for callback functions. ([38942](https://togithub.com/WordPress/gutenberg/pull/38942))
##### Build Tooling
- Build separate full contributors list. ([38777](https://togithub.com/WordPress/gutenberg/pull/38777))
- Bump [@svgr/webpack](https://togithub.com/svgr/webpack) from ^5.5.0 to ^6.2.1 ([38866](https://togithub.com/WordPress/gutenberg/pull/38866))
- Generate full release contributors list in release changelog. ([38704](https://togithub.com/WordPress/gutenberg/pull/38704))
- Generate sourcemap for production plugin builds. ([33718](https://togithub.com/WordPress/gutenberg/pull/33718))
- Mobile: Improve npm clean scripts for react-native-editor. ([38752](https://togithub.com/WordPress/gutenberg/pull/38752))
- PWA: Fix URL query param issue. ([38755](https://togithub.com/WordPress/gutenberg/pull/38755))
- Scripts: Do not exit `build` when no entry found in `src` directory. ([38737](https://togithub.com/WordPress/gutenberg/pull/38737))
- Scripts: Fix Entry points are not detected in Windows OS. ([38781](https://togithub.com/WordPress/gutenberg/pull/38781))
- Scripts: Copy PHP files from `src` into `build`. ([38715](https://togithub.com/WordPress/gutenberg/pull/38715))
##### Components
- BaseControl: Refactor stories to use Controls. ([38741](https://togithub.com/WordPress/gutenberg/pull/38741))
- Migrate Post Template Delete button from `confirm()` to `ConfirmDialog`. ([37535](https://togithub.com/WordPress/gutenberg/pull/37535))
- Migrate the Post 'Switch to draft' button to `ConfirmDialog` component. ([37491](https://togithub.com/WordPress/gutenberg/pull/37491))
- Storybook: Ensure rerender for RTL switcher. ([38963](https://togithub.com/WordPress/gutenberg/pull/38963))
##### Post Editor
- Edit Post: Migrate store actions to thunks. ([36551](https://togithub.com/WordPress/gutenberg/pull/36551))
- Editor store: Remove a noop SETUP_EDITOR action. ([38622](https://togithub.com/WordPress/gutenberg/pull/38622))
- Migrate editor store to thunks. ([35929](https://togithub.com/WordPress/gutenberg/pull/35929))
##### Styles
- Allow to extend the `WP_Theme_JSON_Gutenberg` class. ([38671](https://togithub.com/WordPress/gutenberg/pull/38671))
- Global Styles: Fix PHP warning in WP_REST_Global_Styles_Controller. ([38888](https://togithub.com/WordPress/gutenberg/pull/38888))
- Update Global Styles code to continue adding settings & styles. ([38883](https://togithub.com/WordPress/gutenberg/pull/38883))
##### Block Library
- Change Gallery block code ownership. ([38722](https://togithub.com/WordPress/gutenberg/pull/38722))
#### First time contributors
The following PRs were merged by first time contrbutors:
- [@Alex-Kostov](https://togithub.com/Alex-Kostov): Fix for widget customizer panel,. ([38746](https://togithub.com/WordPress/gutenberg/pull/38746))
- [@HasnainAshfaq](https://togithub.com/HasnainAshfaq): Version section update. ([38937](https://togithub.com/WordPress/gutenberg/pull/38937))
- [@mjstoney](https://togithub.com/mjstoney): (Issue [#38390](https://togithub.com/WordPress/gutenberg/issues/38390)) Fixed CSS position property to fix button width. ([38846](https://togithub.com/WordPress/gutenberg/pull/38846))
- [@razwan](https://togithub.com/razwan): Add resolvePoint prop to FocalPointPicker component to allow updating value while dragging. ([38247](https://togithub.com/WordPress/gutenberg/pull/38247))
- [@sanzeeb3](https://togithub.com/sanzeeb3): Fix hyperlink in block `Metadata` page. ([38941](https://togithub.com/WordPress/gutenberg/pull/38941))
- [@Sisanu](https://togithub.com/Sisanu): Adds aria-label to the search button, as accessibility enhancement. ([38136](https://togithub.com/WordPress/gutenberg/pull/38136))
#### Contributors
The following contributors merged PRs in this release:
[@aaronrobertshaw](https://togithub.com/aaronrobertshaw) [@adamziel](https://togithub.com/adamziel) [@ajlende](https://togithub.com/ajlende) [@Alex-Kostov](https://togithub.com/Alex-Kostov) [@alexstine](https://togithub.com/alexstine) [@andrewserong](https://togithub.com/andrewserong) [@annezazu](https://togithub.com/annezazu) [@audrasjb](https://togithub.com/audrasjb) [@bph](https://togithub.com/bph) [@c4rl0sbr4v0](https://togithub.com/c4rl0sbr4v0) [@chad1008](https://togithub.com/chad1008) [@ciampo](https://togithub.com/ciampo) [@DAreRodz](https://togithub.com/DAreRodz) [@delowardev](https://togithub.com/delowardev) [@dmsnell](https://togithub.com/dmsnell) [@ellatrix](https://togithub.com/ellatrix) [@fluiddot](https://togithub.com/fluiddot) [@geriux](https://togithub.com/geriux) [@getdave](https://togithub.com/getdave) [@glendaviesnz](https://togithub.com/glendaviesnz) [@gziolo](https://togithub.com/gziolo) [@HasnainAshfaq](https://togithub.com/HasnainAshfaq) [@jasmussen](https://togithub.com/jasmussen) [@jeherve](https://togithub.com/jeherve) [@jorgefilipecosta](https://togithub.com/jorgefilipecosta) [@jsnajdr](https://togithub.com/jsnajdr) [@KevinBatdorf](https://togithub.com/KevinBatdorf) [@MaggieCabrera](https://togithub.com/MaggieCabrera) [@Mamaduka](https://togithub.com/Mamaduka) [@mchowning](https://togithub.com/mchowning) [@michalczaplinski](https://togithub.com/michalczaplinski) [@mirka](https://togithub.com/mirka) [@mjstoney](https://togithub.com/mjstoney) [@mkevins](https://togithub.com/mkevins) [@ndiego](https://togithub.com/ndiego) [@noahtallen](https://togithub.com/noahtallen) [@ntsekouras](https://togithub.com/ntsekouras) [@oandregal](https://togithub.com/oandregal) [@ocean90](https://togithub.com/ocean90) [@PatelUtkarsh](https://togithub.com/PatelUtkarsh) [@ramonjd](https://togithub.com/ramonjd) [@razwan](https://togithub.com/razwan) [@ryanwelcher](https://togithub.com/ryanwelcher) [@sanzeeb3](https://togithub.com/sanzeeb3) [@Sisanu](https://togithub.com/Sisanu) [@stokesman](https://togithub.com/stokesman) [@t-hamano](https://togithub.com/t-hamano) [@talldan](https://togithub.com/talldan) [@twstokes](https://togithub.com/twstokes) [@webmandesign](https://togithub.com/webmandesign) [@westonruter](https://togithub.com/westonruter) [@youknowriad](https://togithub.com/youknowriad)
WordPress/gutenberg (@wordpress/blocks)
### [`v12.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/blocks/CHANGELOG.md#12160-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/blocks@12.15.0...@wordpress/blocks@12.16.0)
WordPress/gutenberg (@wordpress/components)
### [`v25.5.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/components/CHANGELOG.md#2550-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/components@25.4.0...@wordpress/components@25.5.0)
##### New Feature
- Add a new `ProgressBar` component. ([#53030](https://togithub.com/WordPress/gutenberg/pull/53030)).
##### Enhancements
- `ColorPalette`, `BorderControl`: Don't hyphenate hex value in `aria-label` ([#52932](https://togithub.com/WordPress/gutenberg/pull/52932)).
- `MenuItemsChoice`, `MenuItem`: Support a `disabled` prop on a menu item ([#52737](https://togithub.com/WordPress/gutenberg/pull/52737)).
- `TabPanel`: Introduce a new version of `TabPanel` with updated internals and improved adherence to ARIA guidance on `tabpanel` focus behavior while maintaining the same functionality and API surface.([#52133](https://togithub.com/WordPress/gutenberg/pull/52133)).
##### Bug Fix
- `Modal`: Fix loss of focus when clicking outside ([#52653](https://togithub.com/WordPress/gutenberg/pull/52653)).
WordPress/gutenberg (@wordpress/compose)
### [`v6.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/compose/CHANGELOG.md#6160-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/compose@6.15.0...@wordpress/compose@6.16.0)
WordPress/gutenberg (@wordpress/data)
### [`v9.9.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/data/CHANGELOG.md#990-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/data@9.8.0...@wordpress/data@9.9.0)
##### Bug Fix
- Update the type definitions for dispatched actions by accounting for Promisified return values and thunks. Previously, a dispatched action's return type was the same as the return type of the original action creator, which did not account for how dispatch works internally. (Plain actions get wrapped in a Promise, and thunk actions ultimately resolve to the innermost function's return type).
- Update the type definition for dispatch() to handle string store descriptors correctly.
WordPress/gutenberg (@wordpress/element)
### [`v5.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/element/CHANGELOG.md#5160-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/element@5.15.0...@wordpress/element@5.16.0)
WordPress/gutenberg (@wordpress/i18n)
### [`v4.39.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/i18n/CHANGELOG.md#4390-2023-08-10)
[Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/i18n@4.38.0...@wordpress/i18n@4.39.0)
cure53/DOMPurify (dompurify)
### [`v3.0.5`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.5): DOMPurify 3.0.5
[Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.4...3.0.5)
- Fixed a licensing issue spotted and reported by [@george-thomas-hill](https://togithub.com/george-thomas-hill)
- Updated several build and test dependencies
### [`v3.0.4`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.4): DOMPurify 3.0.4
[Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.3...3.0.4)
- Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks [@leeN](https://togithub.com/leeN)
- Fixed a typo with `shadowrootmod` which should be `shadowrootmode`, thanks [@masatokinugawa](https://togithub.com/masatokinugawa)
### [`v3.0.3`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.3): DOMPurify 3.0.3
[Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.2...3.0.3)
- Added new `TRUSTED_TYPES_POLICY` configuration option, thanks [@dejang](https://togithub.com/dejang)
- Added `feDropShadow` to the SVG filter allow-list, thanks [@SelfMadeSystem](https://togithub.com/SelfMadeSystem)
### [`v3.0.2`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.2): DOMPurify 3.0.2
[Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.1...3.0.2)
- Fixed an issue with `ALLOWED_URI_REGEXP` not being reset, thanks [@mukilane](https://togithub.com/mukilane)
- Added `mprescripts` tag to allowed MathML elements, thanks [@duyhai94](https://togithub.com/duyhai94)
- Added SMS URI scheme to allowed URI schemes, tanks [@Kiwka](https://togithub.com/Kiwka)
- Updated supported browser versions for nicer code and smaller size, thanks [@buzinas](https://togithub.com/buzinas)
nodejs/node (node)
### [`v16.20.2`](https://togithub.com/nodejs/node/releases/tag/v16.20.2): 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS
[Compare Source](https://togithub.com/nodejs/node/compare/v16.20.1...v16.20.2)
This is a security release.
##### Notable Changes
The following CVEs are fixed in this release:
- [CVE-2023-32002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002): Policies can be bypassed via Module.\_load (High)
- [CVE-2023-32006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006): Policies can be bypassed by module.constructor.createRequire (Medium)
- [CVE-2023-32559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559): Policies can be bypassed via process.binding (Medium)
- OpenSSL Security Releases
- [OpenSSL security advisory 14th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000264.html).
- [OpenSSL security advisory 19th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000265.html).
- [OpenSSL security advisory 31st July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000267.html)
More detailed information on each of the vulnerabilities can be found in [August 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/august-2023-security-releases/) blog post.
##### Commits
- \[[`40c3958a5a`](https://togithub.com/nodejs/node/commit/40c3958a5a)] - **deps**: update archs files for OpenSSL-1.1.1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`a9ac9da89a`](https://togithub.com/nodejs/node/commit/a9ac9da89a)] - **deps**: fix openssl crypto clean (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`362d4c7494`](https://togithub.com/nodejs/node/commit/362d4c7494)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043)
- \[[`d8ccfe9ad4`](https://togithub.com/nodejs/node/commit/d8ccfe9ad4)] - **policy**: handle Module.constructor and main.extensions bypass (RafaelGSS) [nodejs-private/node-private#445](https://togithub.com/nodejs-private/node-private/pull/445)
- \[[`242aaa0caa`](https://togithub.com/nodejs/node/commit/242aaa0caa)] - **policy**: disable process.binding() when enabled (Tobias Nießen) [nodejs-private/node-private#459](https://togithub.com/nodejs-private/node-private/pull/459)
### [`v16.20.1`](https://togithub.com/nodejs/node/releases/tag/v16.20.1): 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS
[Compare Source](https://togithub.com/nodejs/node/compare/v16.20.0...v16.20.1)
This is a security release.
##### Notable Changes
The following CVEs are fixed in this release:
- [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High)
- [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium)
- [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium)
- [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt).
- [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt).
- [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt)
- c-ares vulnerabilities:
- [GHSA-9g78-jv2r-p7vc](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc)
- [GHSA-8r8p-23f3-64c2](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2)
- [GHSA-54xr-f67r-4pc4](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4)
- [GHSA-x6mf-cxr9-8q6v](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v)
More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post.
##### Commits
- \[[`5a92ea7a3b`](https://togithub.com/nodejs/node/commit/5a92ea7a3b)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen)
- \[[`5df04e893a`](https://togithub.com/nodejs/node/commit/5df04e893a)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#48156](https://togithub.com/nodejs/node/pull/48156)
- \[[`c171cbd124`](https://togithub.com/nodejs/node/commit/c171cbd124)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#48115](https://togithub.com/nodejs/node/pull/48115)
- \[[`155d3aac02`](https://togithub.com/nodejs/node/commit/155d3aac02)] - **deps**: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) [#48369](https://togithub.com/nodejs/node/pull/48369)
- \[[`8d4c8f8ebe`](https://togithub.com/nodejs/node/commit/8d4c8f8ebe)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1u (RafaelGSS) [#48369](https://togithub.com/nodejs/node/pull/48369)
- \[[`1a5c9284eb`](https://togithub.com/nodejs/node/commit/1a5c9284eb)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://togithub.com/nodejs-private/node-private/pull/426)
- \[[`e42ff4b018`](https://togithub.com/nodejs/node/commit/e42ff4b018)] - **http**: disable request smuggling via empty headers (Paolo Insogna) [nodejs-private/node-private#429](https://togithub.com/nodejs-private/node-private/pull/429)
- \[[`10042683c8`](https://togithub.com/nodejs/node/commit/10042683c8)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://togithub.com/nodejs-private/node-private/pull/408)
- \[[`a6f4e87bc9`](https://togithub.com/nodejs/node/commit/a6f4e87bc9)] - **policy**: handle mainModule.\__proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://togithub.com/nodejs-private/node-private/pull/416)
- \[[`b77000f4d7`](https://togithub.com/nodejs/node/commit/b77000f4d7)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#47851](https://togithub.com/nodejs/node/pull/47851)
### [`v16.20.0`](https://togithub.com/nodejs/node/releases/tag/v16.20.0): 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs
[Compare Source](https://togithub.com/nodejs/node/compare/v16.19.1...v16.20.0)
##### Notable Changes
- **deps:**
- update undici to 5.20.0 (Node.js GitHub Bot) [#46711](https://togithub.com/nodejs/node/pull/46711)
- update c-ares to 1.19.0 (Michaël Zasso) [#46415](https://togithub.com/nodejs/node/pull/46415)
- upgrade npm to 8.19.4 (npm team) [#46677](https://togithub.com/nodejs/node/pull/46677)
- update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](https://togithub.com/nodejs/node/pull/46842)
- **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](https://togithub.com/nodejs/node/pull/44376)
##### Commits
- \[[`de6dd67790`](https://togithub.com/nodejs/node/commit/de6dd67790)] - **crypto**: avoid hang when no algorithm available (Richard Lau) [#46237](https://togithub.com/nodejs/node/pull/46237)
- \[[`4617512788`](https://togithub.com/nodejs/node/commit/4617512788)] - **crypto**: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) [#46185](https://togithub.com/nodejs/node/pull/46185)
- \[[`24972164fc`](https://togithub.com/nodejs/node/commit/24972164fc)] - **deps**: update undici to 5.20.0 (Node.js GitHub Bot) [#46711](https://togithub.com/nodejs/node/pull/46711)
- \[[`85f88c6a8d`](https://togithub.com/nodejs/node/commit/85f88c6a8d)] - **deps**: V8: cherry-pick [`90be99f`](https://togithub.com/nodejs/node/commit/90be99fab31c) (Michaël Zasso) [#46646](https://togithub.com/nodejs/node/pull/46646)
- \[[`b4ebe6d47b`](https://togithub.com/nodejs/node/commit/b4ebe6d47b)] - **deps**: update c-ares to 1.19.0 (Michaël Zasso) [#46415](https://togithub.com/nodejs/node/pull/46415)
- \[[`56cbc7fdda`](https://togithub.com/nodejs/node/commit/56cbc7fdda)] - **deps**: V8: cherry-pick [`c2792e5`](https://togithub.com/nodejs/node/commit/c2792e58035f) (Jiawen Geng) [#44961](https://togithub.com/nodejs/node/pull/44961)
- \[[`7af9bdb31e`](https://togithub.com/nodejs/node/commit/7af9bdb31e)] - **deps**: upgrade npm to 8.19.4 (npm team) [#46677](https://togithub.com/nodejs/node/pull/46677)
- \[[`962a7471b5`](https://togithub.com/nodejs/node/commit/962a7471b5)] - **deps**: update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](https://togithub.com/nodejs/node/pull/46842)
- \[[`748bc96e35`](https://togithub.com/nodejs/node/commit/748bc96e35)] - **deps**: update corepack to 0.16.0 (Node.js GitHub Bot) [#46710](https://togithub.com/nodejs/node/pull/46710)
- \[[`a467782499`](https://togithub.com/nodejs/node/commit/a467782499)] - **deps**: update corepack to 0.15.3 (Node.js GitHub Bot) [#46037](https://togithub.com/nodejs/node/pull/46037)
- \[[`1913b6763d`](https://togithub.com/nodejs/node/commit/1913b6763d)] - **deps**: update corepack to 0.15.2 (Node.js GitHub Bot) [#45635](https://togithub.com/nodejs/node/pull/45635)
- \[[`809371a15f`](https://togithub.com/nodejs/node/commit/809371a15f)] - **module**: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) [#45147](https://togithub.com/nodejs/node/pull/45147)
- \[[`086bb2f8d4`](https://togithub.com/nodejs/node/commit/086bb2f8d4)] - ***Revert*** "**src**: let http2 streams end after session close" (Rich Trott) [#46721](https://togithub.com/nodejs/node/pull/46721)
- \[[`6a01d39120`](https://togithub.com/nodejs/node/commit/6a01d39120)] - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](https://togithub.com/nodejs/node/pull/44376)
- \[[`d081032a60`](https://togithub.com/nodejs/node/commit/d081032a60)] - **test**: fix test-net-connect-reset-until-connected (Vita Batrla) [#46781](https://togithub.com/nodejs/node/pull/46781)
- \[[`efe1be47ec`](https://togithub.com/nodejs/node/commit/efe1be47ec)] - **test**: skip test depending on `overlapped-checker` when not available (Antoine du Hamel) [#45015](https://togithub.com/nodejs/node/pull/45015)
- \[[`fc47d58abe`](https://togithub.com/nodejs/node/commit/fc47d58abe)] - **test**: remove cjs loader from stack traces (Geoffrey Booth) [#44197](https://togithub.com/nodejs/node/pull/44197)
- \[[`cf76d0790d`](https://togithub.com/nodejs/node/commit/cf76d0790d)] - **test**: fix WPT title when no META title is present (Filip Skokan) [#46804](https://togithub.com/nodejs/node/pull/46804)
- \[[`0d1485b924`](https://togithub.com/nodejs/node/commit/0d1485b924)] - **test**: fix default WPT titles (Filip Skokan) [#46778](https://togithub.com/nodejs/node/pull/46778)
- \[[`088e9cde3d`](https://togithub.com/nodejs/node/commit/088e9cde3d)] - **test**: add WPTRunner support for variants and generating WPT reports (Filip Skokan) [#46498](https://togithub.com/nodejs/node/pull/46498)
- \[[`908c4dff44`](https://togithub.com/nodejs/node/commit/908c4dff44)] - **test**: mark test-crypto-key-objects flaky on Linux (Richard Lau) [#46684](https://togithub.com/nodejs/node/pull/46684)
- \[[`768e56227e`](https://togithub.com/nodejs/node/commit/768e56227e)] - **tools**: make `utils.SearchFiles` deterministic (Bruno Pitrus) [#44496](https://togithub.com/nodejs/node/pull/44496)
### [`v16.19.1`](https://togithub.com/nodejs/node/releases/tag/v16.19.1): 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau
[Compare Source](https://togithub.com/nodejs/node/compare/v16.19.0...v16.19.1)
This is a security release.
##### Notable Changes
The following CVEs are fixed in this release:
- **[CVE-2023-23918](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23918)**: Node.js Permissions policies can be bypassed via process.mainModule (High)
- **[CVE-2023-23919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23919)**: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
- **[CVE-2023-23920](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23920)**: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
Fixed by an update to undici:
- **[CVE-2023-23936](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23936)**: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
- See for more information.
- **[CVE-2023-24807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24807)**: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
- See for more information.
More detailed information on each of the vulnerabilities can be found in [February 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/) blog post.
This security release includes OpenSSL security updates as outlined in the recent
[OpenSSL security advisory](https://www.openssl.org/news/secadv/20230207.txt).
##### Commits
- \[[`7fef050447`](https://togithub.com/nodejs/node/commit/7fef050447)] - **build**: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) [nodejs-private/node-private#374](https://togithub.com/nodejs-private/node-private/pull/374)
- \[[`b558e9f476`](https://togithub.com/nodejs/node/commit/b558e9f476)] - **crypto**: clear OpenSSL error on invalid ca cert (RafaelGSS) [nodejs-private/node-private#375](https://togithub.com/nodejs-private/node-private/pull/375)
- \[[`160adb7ffc`](https://togithub.com/nodejs/node/commit/160adb7ffc)] - **crypto**: clear OpenSSL error queue after calling X509\_check_private_key() (Filip Skokan) [#45495](https://togithub.com/nodejs/node/pull/45495)
- \[[`d0ece30948`](https://togithub.com/nodejs/node/commit/d0ece30948)] - **crypto**: clear OpenSSL error queue after calling X509\_verify() (Takuro Sato) [#45377](https://togithub.com/nodejs/node/pull/45377)
- \[[`2d9ae4f184`](https://togithub.com/nodejs/node/commit/2d9ae4f184)] - **deps**: update undici to v5.19.1 (Matteo Collina) [nodejs-private/node-private#388](https://togithub.com/nodejs-private/node-private/pull/388)
- \[[`d80e8312fd`](https://togithub.com/nodejs/node/commit/d80e8312fd)] - **deps**: cherry-pick Windows ARM64 fix for openssl (Richard Lau) [#46568](https://togithub.com/nodejs/node/pull/46568)
- \[[`de5c8d2c2f`](https://togithub.com/nodejs/node/commit/de5c8d2c2f)] - **deps**: update archs files for quictls/openssl-1.1.1t+quic (RafaelGSS) [#46568](https://togithub.com/nodejs/node/pull/46568)
- \[[`1a8ccfe908`](https://togithub.com/nodejs/node/commit/1a8ccfe908)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1t+quic (RafaelGSS) [#46568](https://togithub.com/nodejs/node/pull/46568)
- \[[`693789780b`](https://togithub.com/nodejs/node/commit/693789780b)] - **doc**: clarify release notes for Node.js 16.19.0 (Richard Lau) [#45846](https://togithub.com/nodejs/node/pull/45846)
- \[[`f95ef064f4`](https://togithub.com/nodejs/node/commit/f95ef064f4)] - **lib**: makeRequireFunction patch when experimental policy (RafaelGSS) [nodejs-private/node-private#358](https://togithub.com/nodejs-private/node-private/pull/358)
- \[[`b02d895137`](https://togithub.com/nodejs/node/commit/b02d895137)] - **policy**: makeRequireFunction on mainModule.require (RafaelGSS) [nodejs-private/node-private#358](https://togithub.com/nodejs-private/node-private/pull/358)
- \[[`d7f83c420c`](https://togithub.com/nodejs/node/commit/d7f83c420c)] - **test**: avoid left behind child processes (Richard Lau) [#46276](https://togithub.com/nodejs/node/pull/46276)
### [`v16.19.0`](https://togithub.com/nodejs/node/releases/tag/v16.19.0): 2022-12-13, Version 16.19.0 'Gallium' (LTS), @richardlau
[Compare Source](https://togithub.com/nodejs/node/compare/v16.18.1...v16.19.0)
##### Notable Changes
##### OpenSSL 1.1.1s
This update is a bugfix release and does not address any security
vulnerabilities.
##### Root certificates updated to NSS 3.85
Certificates added:
- Autoridad de Certificacion Firmaprofesional CIF [`A626340`](https://togithub.com/nodejs/node/commit/A62634068)
- Certainly Root E1
- Certainly Root R1
- D-TRUST BR Root CA 1 2020
- D-TRUST EV Root CA 1 2020
- DigiCert TLS ECC P384 Root G5
- DigiCert TLS RSA4096 Root G5
- E-Tugra Global Root CA ECC v3
- E-Tugra Global Root CA RSA v3
- HiPKI Root CA - G1
- ISRG Root X2
- Security Communication ECC RootCA1
- Security Communication RootCA3
- Telia Root CA v2
- vTrus ECC Root CA
- vTrus Root CA
Certificates removed:
- Cybertrust Global Root
- DST Root CA X3
- GlobalSign Root CA - R2
- Hellenic Academic and Research Institutions RootCA 2011
##### Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
.
##### Other Notable Changes
- \[[`33707dcd03`](https://togithub.com/nodejs/node/commit/33707dcd03)] - **dgram**: add dgram send queue info (theanarkh) [#44149](https://togithub.com/nodejs/node/pull/44149)
Dependency updates:
- \[[`3b2b70d792`](https://togithub.com/nodejs/node/commit/3b2b70d792)] - **deps**: upgrade npm to 8.19.3 (npm team) [#45322](https://togithub.com/nodejs/node/pull/45322)
Experimental features:
- \[[`1e0dcd1ee0`](https://togithub.com/nodejs/node/commit/1e0dcd1ee0)] - **cli**: add `--watch` (Moshe Atlow) [#44366](https://togithub.com/nodejs/node/pull/44366)
- \[[`8c73279ebb`](https://togithub.com/nodejs/node/commit/8c73279ebb)] - **util**: add default value option to parsearg (Manuel Spigolon) [#44631](https://togithub.com/nodejs/node/pull/44631)
##### Commits
- \[[`bbef3c42f6`](https://togithub.com/nodejs/node/commit/bbef3c42f6)] - **build**: add version info to timezone update PR (Darshan Sen) [#45021](https://togithub.com/nodejs/node/pull/45021)
- \[[`cc2c7648e0`](https://togithub.com/nodejs/node/commit/cc2c7648e0)] - **build**: support Python 3.11 (Luigi Pinca) [#45191](https://togithub.com/nodejs/node/pull/45191)
- \[[`ac24c80663`](https://togithub.com/nodejs/node/commit/ac24c80663)] - **build**: remove redundant condition from common.gypi (Richard Lau) [#45076](https://togithub.com/nodejs/node/pull/45076)
- \[[`03dcbe3030`](https://togithub.com/nodejs/node/commit/03dcbe3030)] - **build**: fix bad upstream merge (Stephen Gallagher) [#44642](https://togithub.com/nodejs/node/pull/44642)
- \[[`1e0dcd1ee0`](https://togithub.com/nodejs/node/commit/1e0dcd1ee0)] - **cli**: add `--watch` (Moshe Atlow) [#44366](https://togithub.com/nodejs/node/pull/44366)
- \[[`96d131665e`](https://togithub.com/nodejs/node/commit/96d131665e)] - **cluster**: use inspector utils (Moshe Atlow) [#44592](https://togithub.com/nodejs/node/pull/44592)
- \[[`704836033a`](https://togithub.com/nodejs/node/commit/704836033a)] - **crypto**: update root certificates (Luigi Pinca) [#45490](https://togithub.com/nodejs/node/pull/45490)
- \[[`5a776d4a69`](https://togithub.com/nodejs/node/commit/5a776d4a69)] - **deps**: update timezone to 2022f (Richard Lau) [#45613](https://togithub.com/nodejs/node/pull/45613)
- \[[`3b2b70d792`](https://togithub.com/nodejs/node/commit/3b2b70d792)] - **deps**: upgrade npm to 8.19.3 (npm team) [#45322](https://togithub.com/nodejs/node/pull/45322)
- \[[`9fbc8b21db`](https://togithub.com/nodejs/node/commit/9fbc8b21db)] - **deps**: update corepack to 0.15.1 (Node.js GitHub Bot) [#45331](https://togithub.com/nodejs/node/pull/45331)
- \[[`87e3d002ca`](https://togithub.com/nodejs/node/commit/87e3d002ca)] - **deps**: update corepack to 0.15.0 (Node.js GitHub Bot) [#45235](https://togithub.com/nodejs/node/pull/45235)
- \[[`e972ff7b13`](https://togithub.com/nodejs/node/commit/e972ff7b13)] - **deps**: V8: backport [`bbd800c`](https://togithub.com/nodejs/node/commit/bbd800c6e359) (Chengzhong Wu) [#44947](https://togithub.com/nodejs/node/pull/44947)
- \[[`af9d8217c0`](https://togithub.com/nodejs/node/commit/af9d8217c0)] - **deps**: V8: cherry-pick [`b953542`](https://togithub.com/nodejs/node/commit/b95354290941) (Chengzhong Wu) [#44947](https://togithub.com/nodejs/node/pull/44947)
- \[[`38202d321b`](https://togithub.com/nodejs/node/commit/38202d321b)] - **deps**: update undici to 5.12.0 (Node.js GitHub Bot) [#45236](https://togithub.com/nodejs/node/pull/45236)
- \[[`7c0da6adf9`](https://togithub.com/nodejs/node/commit/7c0da6adf9)] - **deps**: update archs files for OpenSSL-1.1.1s (RafaelGSS) [#45274](https://togithub.com/nodejs/node/pull/45274)
- \[[`1149ead6f7`](https://togithub.com/nodejs/node/commit/1149ead6f7)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1s (RafaelGSS) [#45274](https://togithub.com/nodejs/node/pull/45274)
- \[[`cd54bce4f5`](https://togithub.com/nodejs/node/commit/cd54bce4f5)] - **deps**: update timezone (Node.js GitHub Bot) [#44950](https://togithub.com/nodejs/node/pull/44950)
- \[[`2901abe4f0`](https://togithub.com/nodejs/node/commit/2901abe4f0)] - **deps**: update undici to 5.11.0 (Node.js GitHub Bot) [#44929](https://togithub.com/nodejs/node/pull/44929)
- \[[`c80cf97033`](https://togithub.com/nodejs/node/commit/c80cf97033)] - **deps**: update corepack to 0.14.2 (Node.js GitHub Bot) [#44775](https://togithub.com/nodejs/node/pull/44775)
- \[[`33707dcd03`](https://togithub.com/nodejs/node/commit/33707dcd03)] - **dgram**: add dgram send queue info (theanarkh) [#44149](https://togithub.com/nodejs/node/pull/44149)
- \[[`c708d9bb94`](https://togithub.com/nodejs/node/commit/c708d9bb94)] - **doc**: fix typo in parseArgs default value (Tobias Nießen) [#45083](https://togithub.com/nodejs/node/pull/45083)
- \[[`5a0efa05d2`](https://togithub.com/nodejs/node/commit/5a0efa05d2)] - **node-api**: handle no support for external buffers (Michael Dawson) [#45181](https://togithub.com/nodejs/node/pull/45181)
- \[[`db31de634e`](https://togithub.com/nodejs/node/commit/db31de634e)] - **readline**: refactor to avoid unsafe regex primordials (Antoine du Hamel) [#43475](https://togithub.com/nodejs/node/pull/43475)
- \[[`fbc52e5729`](https://togithub.com/nodejs/node/commit/fbc52e5729)] - **src**: disambiguate terms used to refer to builtins and addons (Joyee Cheung) [#44135](https://togithub.com/nodejs/node/pull/44135)
- \[[`953072d3db`](https://togithub.com/nodejs/node/commit/953072d3db)] - **src**: let http2 streams end after session close (Santiago Gimeno) [#45153](https://togithub.com/nodejs/node/pull/45153)
- \[[`54608d8dc3`](https://togithub.com/nodejs/node/commit/54608d8dc3)] - **src**: split property helpers from node::Environment (Chengzhong Wu) [#44056](https://togithub.com/nodejs/node/pull/44056)
- \[[`6733556783`](https://togithub.com/nodejs/node/commit/6733556783)] - **test**: add test to validate changelogs for releases (Richard Lau) [#45325](https
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
^12.6.0
->^12.7.0
^12.15.0
->^12.16.0
^25.4.0
->^25.5.0
^6.15.0
->^6.16.0
^9.8.0
->^9.9.0
^5.15.0
->^5.16.0
^4.38.0
->^4.39.0
3.0.1
->3.0.5
>= 16
->>= v16.20.2
Release Notes
WordPress/gutenberg (@wordpress/block-editor)
### [`v12.7.0`](https://togithub.com/WordPress/gutenberg/releases/tag/v12.7.0): 12.7.0 [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/block-editor@12.6.0...@wordpress/block-editor@12.7.0) #### Changelog ##### Enhancements ##### Block Library - Columns: Add border support. ([31737](https://togithub.com/WordPress/gutenberg/pull/31737)) - Comment Template: Fix comment pagination with nested replies. ([38187](https://togithub.com/WordPress/gutenberg/pull/38187)) - Comments Query Loop: Show placeholder comments on site editor. ([38072](https://togithub.com/WordPress/gutenberg/pull/38072)) - Group Blocks: Add margin support (top/bottom). ([37344](https://togithub.com/WordPress/gutenberg/pull/37344)) - Navigation: Try unifying submenu arrow positioning. ([37003](https://togithub.com/WordPress/gutenberg/pull/37003)) - Page List: Simplify loading state. ([38983](https://togithub.com/WordPress/gutenberg/pull/38983)) - Submenu: Add revert button. ([38203](https://togithub.com/WordPress/gutenberg/pull/38203)) ##### Components - FocalPointPicker: Allow updating its value while dragging. ([38247](https://togithub.com/WordPress/gutenberg/pull/38247)) - General Interface: Simplify site icon animation on hover. ([38783](https://togithub.com/WordPress/gutenberg/pull/38783)) - Navigator: Add `NavigatorButton` and `NavigatorBackButton` components. ([38634](https://togithub.com/WordPress/gutenberg/pull/38634)) - Type Refactor: Use `forwardedRef` type for all forwarded refs in [@wordpress/components](https://togithub.com/wordpress/components). ([38948](https://togithub.com/WordPress/gutenberg/pull/38948)) ##### Block Editor - Block Editor: Add settings to enable/disable auto anchor generation. ([38780](https://togithub.com/WordPress/gutenberg/pull/38780)) - Block Transforms: Keep additional HTML classes during a block transform. ([38964](https://togithub.com/WordPress/gutenberg/pull/38964)) - LineHeightControl: Enhance interactions by migrating internals to `NumberControl` on Style options. ([37160](https://togithub.com/WordPress/gutenberg/pull/37160)) - List View: Add multi-select behaviour for blocks when shift key is selected. ([38314](https://togithub.com/WordPress/gutenberg/pull/38314)) - Quick Inserter: Prioritize showing patterns instead of blocks. ([38709](https://togithub.com/WordPress/gutenberg/pull/38709)) - Template Parts: Show existing template parts and a list of block patterns at creation flow. ([38814](https://togithub.com/WordPress/gutenberg/pull/38814)) ##### Styles - Add initial version of the style engine. ([37978](https://togithub.com/WordPress/gutenberg/pull/37978)) - Style engine: Refine `Box` type. ([38894](https://togithub.com/WordPress/gutenberg/pull/38894)) ##### Post Editor - Enable tooltip for the main dashboard button. ([38790](https://togithub.com/WordPress/gutenberg/pull/38790)) ##### Themes - Lowered specificity of alignment rules for support layout so wide alignments work. ([38947](https://togithub.com/WordPress/gutenberg/pull/38947)) - Remove data-align divs for themes that support layout. ([38613](https://togithub.com/WordPress/gutenberg/pull/38613)) - Remove the div wrapper from the aligned image blocks. ([38657](https://togithub.com/WordPress/gutenberg/pull/38657)) ##### Patterns - Allow pattern registration from directory with theme.json. ([38323](https://togithub.com/WordPress/gutenberg/pull/38323)) ##### List View - Expand block list tree on selection. ([35817](https://togithub.com/WordPress/gutenberg/pull/35817)) ##### Bug Fixes ##### Block Library - Block Transforms: Fix Image and Video to Cover block transformations. ([38959](https://togithub.com/WordPress/gutenberg/pull/38959)) - Cover: Fix gradient overlay (remove black background color) ([38765](https://togithub.com/WordPress/gutenberg/pull/38765)) - File: Fix PDF file block full content fixture. ([38725](https://togithub.com/WordPress/gutenberg/pull/38725)) - Latest Posts: Add missing class to post title. ([38740](https://togithub.com/WordPress/gutenberg/pull/38740)) - Logo: Avoid division by zero in site logo. ([38808](https://togithub.com/WordPress/gutenberg/pull/38808)) - Post navigation link: Use correct closing tag. ([38976](https://togithub.com/WordPress/gutenberg/pull/38976)) - Query Loop: Display nothing if we want only sticky posts but no stickies exist. ([38909](https://togithub.com/WordPress/gutenberg/pull/38909)) - Template Parts: Decode entities in labels. ([38805](https://togithub.com/WordPress/gutenberg/pull/38805)) - Social Links: Only apply the social links block migration if there's a need for a migration. ([38561](https://togithub.com/WordPress/gutenberg/pull/38561)) ##### Block Editor - Backport from core: Global styles duotone not rendering in post editor. ([38897](https://togithub.com/WordPress/gutenberg/pull/38897)) - Block Editor: insertDefaultBlock should not trigger an error if the default block is not registered. ([38886](https://togithub.com/WordPress/gutenberg/pull/38886)) - Inserter: Fix focus loss after closing patterns explorer from modal. ([38884](https://togithub.com/WordPress/gutenberg/pull/38884)) - Multi-selection: avoid RichText instances becoming disabled after multi selection. ([38821](https://togithub.com/WordPress/gutenberg/pull/38821)) - Rehabilitate drag gesture in `LineHeightControl`. ([38930](https://togithub.com/WordPress/gutenberg/pull/38930)) - RichText: Fix wrong block merging when pressing `delete` consecutively. ([38991](https://togithub.com/WordPress/gutenberg/pull/38991)) ##### Site Editor - Add site editor initial redirect error handling. ([38655](https://togithub.com/WordPress/gutenberg/pull/38655)) - Add template check to 'setPage' action. ([38656](https://togithub.com/WordPress/gutenberg/pull/38656)) - Adds additional check to guard against incompete presets. ([38902](https://togithub.com/WordPress/gutenberg/pull/38902)) - Limit template part slugs to Latin chars. ([38695](https://togithub.com/WordPress/gutenberg/pull/38695)) - Template List: Decode entities in record titles. ([38863](https://togithub.com/WordPress/gutenberg/pull/38863)) ##### Styles - Allow child classes to be called instead of the parents. ([38857](https://togithub.com/WordPress/gutenberg/pull/38857)) - Backport: Allow for classic themes using default presets. ([38701](https://togithub.com/WordPress/gutenberg/pull/38701)) - Fix global styles loading logic. ([38745](https://togithub.com/WordPress/gutenberg/pull/38745)) ##### Components - Fix unexpected dragging triggered on spinner buttons on hover in Safari. ([38840](https://togithub.com/WordPress/gutenberg/pull/38840)) - Show tooltip on toggle custom size in FontSizePicker. ([38985](https://togithub.com/WordPress/gutenberg/pull/38985)) ##### List View - Fix error triggering after duplicating a block making it unselectable. ([38760](https://togithub.com/WordPress/gutenberg/pull/38760)) - Fix UI broken due to error when deleting first item in canvas. ([38775](https://togithub.com/WordPress/gutenberg/pull/38775)) ##### CSS & Styling - Fix button width on Widgets Editor. ([38846](https://togithub.com/WordPress/gutenberg/pull/38846)) - Load block support styles in the `` for block themes. ([38750](https://togithub.com/WordPress/gutenberg/pull/38750)) - Change location of block support styles in ``. ([39164](https://togithub.com/WordPress/gutenberg/pull/39164)) - Reduce the margin of the block toolbar. ([38746](https://togithub.com/WordPress/gutenberg/pull/38746)) ##### Block Directory - Fix the block activation when metadata registered on server. ([38697](https://togithub.com/WordPress/gutenberg/pull/38697)) ##### Colors - Strip double # char on HexInput. ([38335](https://togithub.com/WordPress/gutenberg/pull/38335)) ##### Packages - Core Data: CanUser resolver always use the OPTIONS method. ([38901](https://togithub.com/WordPress/gutenberg/pull/38901)) - Dom: Avoid RangeError in findPrevious method. ([38961](https://togithub.com/WordPress/gutenberg/pull/38961)) ##### Apps - Fix Custom Palette colors and support multiple origins and theme cache issues. ([38417](https://togithub.com/WordPress/gutenberg/pull/38417)) ##### Accessibility - Adds aria-label to the search button, as accessibility enhancement. ([38136](https://togithub.com/WordPress/gutenberg/pull/38136)) - Avoid duplicate labels for "Save Draft" and "Save as pending" buttons. ([38776](https://togithub.com/WordPress/gutenberg/pull/38776)) - RichText: Reverse disableLineBreaks to determine aria-multiline state. ([38652](https://togithub.com/WordPress/gutenberg/pull/38652)) - TreeGrid: Add Home/End keys to jump to start/end of grid. ([38679](https://togithub.com/WordPress/gutenberg/pull/38679)) ##### Performance ##### CSS & Styling - Use `wp_unique_id()` instead of `uniqid()` to generate CSS class names. ([38891](https://togithub.com/WordPress/gutenberg/pull/38891)) ##### Experiments ##### New APIs in Core Data - Propose useEntityRecords (experimental). ([38782](https://togithub.com/WordPress/gutenberg/pull/38782)) - UseEntityRecord (experimental). ([38522](https://togithub.com/WordPress/gutenberg/pull/38522)) ##### Documentation ##### Handbook - Add documentation for deprecating styles. ([38540](https://togithub.com/WordPress/gutenberg/pull/38540)) - Add documentation about the `patterns` field of `theme.json`. ([38700](https://togithub.com/WordPress/gutenberg/pull/38700)) - Add more info about contextual patterns and pattern transformations. ([38809](https://togithub.com/WordPress/gutenberg/pull/38809)) - Add semantic patterns documentation. ([38778](https://togithub.com/WordPress/gutenberg/pull/38778)) - Clarify deprecations documentation. ([38683](https://togithub.com/WordPress/gutenberg/pull/38683)) - Fix hyperlink in block `Metadata` page. ([38941](https://togithub.com/WordPress/gutenberg/pull/38941)) - Improve point release documentation to include even more detail. ([38631](https://togithub.com/WordPress/gutenberg/pull/38631)) - Increase support for `experimental-link-color` until WordPress 5.9 is the minimum version. ([38711](https://togithub.com/WordPress/gutenberg/pull/38711)) - Group: Update block supports. ([38962](https://togithub.com/WordPress/gutenberg/pull/38962)) - Links changed for Developer.wordpress.org on block editor section. ([38841](https://togithub.com/WordPress/gutenberg/pull/38841)) - Removing comma so that the code snippet of `theme.json` represents standard JSON. ([38938](https://togithub.com/WordPress/gutenberg/pull/38938)) - `theme.json` Update version section docs to v2 ([38937](https://togithub.com/WordPress/gutenberg/pull/38937)) - Update Getting Started with more granular options. ([38682](https://togithub.com/WordPress/gutenberg/pull/38682)) ##### Block Library - Add instructions on how to add new core blocks to block-library. ([38868](https://togithub.com/WordPress/gutenberg/pull/38868)) ##### Components - FormFileUpload: Add Storybook stories. ([38734](https://togithub.com/WordPress/gutenberg/pull/38734)) - Storybook: Move experimental components to correct section. ([38640](https://togithub.com/WordPress/gutenberg/pull/38640)) - Storybook: Remove story for Typography Panel. ([38867](https://togithub.com/WordPress/gutenberg/pull/38867)) - wp-env: Document some caveats when using xdebug with VSCode. ([38882](https://togithub.com/WordPress/gutenberg/pull/38882)) ##### Code Quality ##### Block Library - Cover: Remove unnecessary `temporaryMinHeight`. ([38887](https://togithub.com/WordPress/gutenberg/pull/38887)) - Cover block: Update deprecated gradient fixture. ([38728](https://togithub.com/WordPress/gutenberg/pull/38728)) - Gallery: Register gallery in block_names dynamic block array. ([38689](https://togithub.com/WordPress/gutenberg/pull/38689)) - Navigation: Improve consistency of block hook. ([38705](https://togithub.com/WordPress/gutenberg/pull/38705)) - Navigation: Select dropdown encapsulation and further consolidation. ([38627](https://togithub.com/WordPress/gutenberg/pull/38627)) - Navigation: Update wp_kses usage to be consistent (use wp_kses_post). ([38732](https://togithub.com/WordPress/gutenberg/pull/38732)) - Post Navigation Link: Prefer kses to blanket esc_html on label. ([38696](https://togithub.com/WordPress/gutenberg/pull/38696)) - Remove data-controls mock from Image block RN tests. ([38852](https://togithub.com/WordPress/gutenberg/pull/38852)) ##### Components - Block Supports: Improve image block regex. ([38742](https://togithub.com/WordPress/gutenberg/pull/38742)) - Block Supports: Load Styles on `` backport to core. ([38880](https://togithub.com/WordPress/gutenberg/pull/38880)) - Context: Omit `as` prop in types. ([38844](https://togithub.com/WordPress/gutenberg/pull/38844)) - Core Data: Remove fallback for OPTIONS response headers in canUser resolver. ([38881](https://togithub.com/WordPress/gutenberg/pull/38881)) - Core Data: TypeScript definitions for entity records. ([38666](https://togithub.com/WordPress/gutenberg/pull/38666)) - Data: Normalize selector args when handling metadata selectors/actions. ([38945](https://togithub.com/WordPress/gutenberg/pull/38945)) - Edit Site: Migrate store to thunks. ([38812](https://togithub.com/WordPress/gutenberg/pull/38812)) - Icons: Deprecate duplicate icons. ([38849](https://togithub.com/WordPress/gutenberg/pull/38849)) - PostTrash: Call trashPost action with no arguments, rewrite to hooks. ([38615](https://togithub.com/WordPress/gutenberg/pull/38615)) ##### npm Packages - Packages: Automate cherry-picking to `trunk` commits created during publishing. ([38977](https://togithub.com/WordPress/gutenberg/pull/38977)) - Packages: Ensure that private packages do not update when publishing to npm. ([38946](https://togithub.com/WordPress/gutenberg/pull/38946)) ##### Tools ##### Testing - Add end-to-end test for merging paragraphs and soft line break afterwards. ([39009](https://togithub.com/WordPress/gutenberg/pull/39009)) - Post Visibility end-to-end test: Improve XPath selector to avoid reliance on DOM structure. ([38717](https://togithub.com/WordPress/gutenberg/pull/38717)) - Replace no-shadow eslint rule with [@typescript-eslint/no-shadow](https://togithub.com/typescript-eslint/no-shadow). ([38665](https://togithub.com/WordPress/gutenberg/pull/38665)) - Remove client ID from fixtures. ([38685](https://togithub.com/WordPress/gutenberg/pull/38685)) - Remove `originalContent` from fixtures. ([38638](https://togithub.com/WordPress/gutenberg/pull/38638)) - RichText: Add test for merging and then splitting paragraphs. ([39007](https://togithub.com/WordPress/gutenberg/pull/39007)) - Site Editor Tests: Use REST API to delete templates and template parts. ([38524](https://togithub.com/WordPress/gutenberg/pull/38524)) - TreeGrid: Add tests for callback functions. ([38942](https://togithub.com/WordPress/gutenberg/pull/38942)) ##### Build Tooling - Build separate full contributors list. ([38777](https://togithub.com/WordPress/gutenberg/pull/38777)) - Bump [@svgr/webpack](https://togithub.com/svgr/webpack) from ^5.5.0 to ^6.2.1 ([38866](https://togithub.com/WordPress/gutenberg/pull/38866)) - Generate full release contributors list in release changelog. ([38704](https://togithub.com/WordPress/gutenberg/pull/38704)) - Generate sourcemap for production plugin builds. ([33718](https://togithub.com/WordPress/gutenberg/pull/33718)) - Mobile: Improve npm clean scripts for react-native-editor. ([38752](https://togithub.com/WordPress/gutenberg/pull/38752)) - PWA: Fix URL query param issue. ([38755](https://togithub.com/WordPress/gutenberg/pull/38755)) - Scripts: Do not exit `build` when no entry found in `src` directory. ([38737](https://togithub.com/WordPress/gutenberg/pull/38737)) - Scripts: Fix Entry points are not detected in Windows OS. ([38781](https://togithub.com/WordPress/gutenberg/pull/38781)) - Scripts: Copy PHP files from `src` into `build`. ([38715](https://togithub.com/WordPress/gutenberg/pull/38715)) ##### Components - BaseControl: Refactor stories to use Controls. ([38741](https://togithub.com/WordPress/gutenberg/pull/38741)) - Migrate Post Template Delete button from `confirm()` to `ConfirmDialog`. ([37535](https://togithub.com/WordPress/gutenberg/pull/37535)) - Migrate the Post 'Switch to draft' button to `ConfirmDialog` component. ([37491](https://togithub.com/WordPress/gutenberg/pull/37491)) - Storybook: Ensure rerender for RTL switcher. ([38963](https://togithub.com/WordPress/gutenberg/pull/38963)) ##### Post Editor - Edit Post: Migrate store actions to thunks. ([36551](https://togithub.com/WordPress/gutenberg/pull/36551)) - Editor store: Remove a noop SETUP_EDITOR action. ([38622](https://togithub.com/WordPress/gutenberg/pull/38622)) - Migrate editor store to thunks. ([35929](https://togithub.com/WordPress/gutenberg/pull/35929)) ##### Styles - Allow to extend the `WP_Theme_JSON_Gutenberg` class. ([38671](https://togithub.com/WordPress/gutenberg/pull/38671)) - Global Styles: Fix PHP warning in WP_REST_Global_Styles_Controller. ([38888](https://togithub.com/WordPress/gutenberg/pull/38888)) - Update Global Styles code to continue adding settings & styles. ([38883](https://togithub.com/WordPress/gutenberg/pull/38883)) ##### Block Library - Change Gallery block code ownership. ([38722](https://togithub.com/WordPress/gutenberg/pull/38722)) #### First time contributors The following PRs were merged by first time contrbutors: - [@Alex-Kostov](https://togithub.com/Alex-Kostov): Fix for widget customizer panel,. ([38746](https://togithub.com/WordPress/gutenberg/pull/38746)) - [@HasnainAshfaq](https://togithub.com/HasnainAshfaq): Version section update. ([38937](https://togithub.com/WordPress/gutenberg/pull/38937)) - [@mjstoney](https://togithub.com/mjstoney): (Issue [#38390](https://togithub.com/WordPress/gutenberg/issues/38390)) Fixed CSS position property to fix button width. ([38846](https://togithub.com/WordPress/gutenberg/pull/38846)) - [@razwan](https://togithub.com/razwan): Add resolvePoint prop to FocalPointPicker component to allow updating value while dragging. ([38247](https://togithub.com/WordPress/gutenberg/pull/38247)) - [@sanzeeb3](https://togithub.com/sanzeeb3): Fix hyperlink in block `Metadata` page. ([38941](https://togithub.com/WordPress/gutenberg/pull/38941)) - [@Sisanu](https://togithub.com/Sisanu): Adds aria-label to the search button, as accessibility enhancement. ([38136](https://togithub.com/WordPress/gutenberg/pull/38136)) #### Contributors The following contributors merged PRs in this release: [@aaronrobertshaw](https://togithub.com/aaronrobertshaw) [@adamziel](https://togithub.com/adamziel) [@ajlende](https://togithub.com/ajlende) [@Alex-Kostov](https://togithub.com/Alex-Kostov) [@alexstine](https://togithub.com/alexstine) [@andrewserong](https://togithub.com/andrewserong) [@annezazu](https://togithub.com/annezazu) [@audrasjb](https://togithub.com/audrasjb) [@bph](https://togithub.com/bph) [@c4rl0sbr4v0](https://togithub.com/c4rl0sbr4v0) [@chad1008](https://togithub.com/chad1008) [@ciampo](https://togithub.com/ciampo) [@DAreRodz](https://togithub.com/DAreRodz) [@delowardev](https://togithub.com/delowardev) [@dmsnell](https://togithub.com/dmsnell) [@ellatrix](https://togithub.com/ellatrix) [@fluiddot](https://togithub.com/fluiddot) [@geriux](https://togithub.com/geriux) [@getdave](https://togithub.com/getdave) [@glendaviesnz](https://togithub.com/glendaviesnz) [@gziolo](https://togithub.com/gziolo) [@HasnainAshfaq](https://togithub.com/HasnainAshfaq) [@jasmussen](https://togithub.com/jasmussen) [@jeherve](https://togithub.com/jeherve) [@jorgefilipecosta](https://togithub.com/jorgefilipecosta) [@jsnajdr](https://togithub.com/jsnajdr) [@KevinBatdorf](https://togithub.com/KevinBatdorf) [@MaggieCabrera](https://togithub.com/MaggieCabrera) [@Mamaduka](https://togithub.com/Mamaduka) [@mchowning](https://togithub.com/mchowning) [@michalczaplinski](https://togithub.com/michalczaplinski) [@mirka](https://togithub.com/mirka) [@mjstoney](https://togithub.com/mjstoney) [@mkevins](https://togithub.com/mkevins) [@ndiego](https://togithub.com/ndiego) [@noahtallen](https://togithub.com/noahtallen) [@ntsekouras](https://togithub.com/ntsekouras) [@oandregal](https://togithub.com/oandregal) [@ocean90](https://togithub.com/ocean90) [@PatelUtkarsh](https://togithub.com/PatelUtkarsh) [@ramonjd](https://togithub.com/ramonjd) [@razwan](https://togithub.com/razwan) [@ryanwelcher](https://togithub.com/ryanwelcher) [@sanzeeb3](https://togithub.com/sanzeeb3) [@Sisanu](https://togithub.com/Sisanu) [@stokesman](https://togithub.com/stokesman) [@t-hamano](https://togithub.com/t-hamano) [@talldan](https://togithub.com/talldan) [@twstokes](https://togithub.com/twstokes) [@webmandesign](https://togithub.com/webmandesign) [@westonruter](https://togithub.com/westonruter) [@youknowriad](https://togithub.com/youknowriad)WordPress/gutenberg (@wordpress/blocks)
### [`v12.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/blocks/CHANGELOG.md#12160-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/blocks@12.15.0...@wordpress/blocks@12.16.0)WordPress/gutenberg (@wordpress/components)
### [`v25.5.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/components/CHANGELOG.md#2550-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/components@25.4.0...@wordpress/components@25.5.0) ##### New Feature - Add a new `ProgressBar` component. ([#53030](https://togithub.com/WordPress/gutenberg/pull/53030)). ##### Enhancements - `ColorPalette`, `BorderControl`: Don't hyphenate hex value in `aria-label` ([#52932](https://togithub.com/WordPress/gutenberg/pull/52932)). - `MenuItemsChoice`, `MenuItem`: Support a `disabled` prop on a menu item ([#52737](https://togithub.com/WordPress/gutenberg/pull/52737)). - `TabPanel`: Introduce a new version of `TabPanel` with updated internals and improved adherence to ARIA guidance on `tabpanel` focus behavior while maintaining the same functionality and API surface.([#52133](https://togithub.com/WordPress/gutenberg/pull/52133)). ##### Bug Fix - `Modal`: Fix loss of focus when clicking outside ([#52653](https://togithub.com/WordPress/gutenberg/pull/52653)).WordPress/gutenberg (@wordpress/compose)
### [`v6.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/compose/CHANGELOG.md#6160-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/compose@6.15.0...@wordpress/compose@6.16.0)WordPress/gutenberg (@wordpress/data)
### [`v9.9.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/data/CHANGELOG.md#990-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/data@9.8.0...@wordpress/data@9.9.0) ##### Bug Fix - Update the type definitions for dispatched actions by accounting for Promisified return values and thunks. Previously, a dispatched action's return type was the same as the return type of the original action creator, which did not account for how dispatch works internally. (Plain actions get wrapped in a Promise, and thunk actions ultimately resolve to the innermost function's return type). - Update the type definition for dispatch() to handle string store descriptors correctly.WordPress/gutenberg (@wordpress/element)
### [`v5.16.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/element/CHANGELOG.md#5160-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/element@5.15.0...@wordpress/element@5.16.0)WordPress/gutenberg (@wordpress/i18n)
### [`v4.39.0`](https://togithub.com/WordPress/gutenberg/blob/HEAD/packages/i18n/CHANGELOG.md#4390-2023-08-10) [Compare Source](https://togithub.com/WordPress/gutenberg/compare/@wordpress/i18n@4.38.0...@wordpress/i18n@4.39.0)cure53/DOMPurify (dompurify)
### [`v3.0.5`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.5): DOMPurify 3.0.5 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.4...3.0.5) - Fixed a licensing issue spotted and reported by [@george-thomas-hill](https://togithub.com/george-thomas-hill) - Updated several build and test dependencies ### [`v3.0.4`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.4): DOMPurify 3.0.4 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.3...3.0.4) - Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks [@leeN](https://togithub.com/leeN) - Fixed a typo with `shadowrootmod` which should be `shadowrootmode`, thanks [@masatokinugawa](https://togithub.com/masatokinugawa) ### [`v3.0.3`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.3): DOMPurify 3.0.3 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.2...3.0.3) - Added new `TRUSTED_TYPES_POLICY` configuration option, thanks [@dejang](https://togithub.com/dejang) - Added `feDropShadow` to the SVG filter allow-list, thanks [@SelfMadeSystem](https://togithub.com/SelfMadeSystem) ### [`v3.0.2`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.2): DOMPurify 3.0.2 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.1...3.0.2) - Fixed an issue with `ALLOWED_URI_REGEXP` not being reset, thanks [@mukilane](https://togithub.com/mukilane) - Added `mprescripts` tag to allowed MathML elements, thanks [@duyhai94](https://togithub.com/duyhai94) - Added SMS URI scheme to allowed URI schemes, tanks [@Kiwka](https://togithub.com/Kiwka) - Updated supported browser versions for nicer code and smaller size, thanks [@buzinas](https://togithub.com/buzinas)nodejs/node (node)
### [`v16.20.2`](https://togithub.com/nodejs/node/releases/tag/v16.20.2): 2023-08-09, Version 16.20.2 'Gallium' (LTS), @RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v16.20.1...v16.20.2) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - [CVE-2023-32002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32002): Policies can be bypassed via Module.\_load (High) - [CVE-2023-32006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32006): Policies can be bypassed by module.constructor.createRequire (Medium) - [CVE-2023-32559](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32559): Policies can be bypassed via process.binding (Medium) - OpenSSL Security Releases - [OpenSSL security advisory 14th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000264.html). - [OpenSSL security advisory 19th July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000265.html). - [OpenSSL security advisory 31st July](https://mta.openssl.org/pipermail/openssl-announce/2023-July/000267.html) More detailed information on each of the vulnerabilities can be found in [August 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/august-2023-security-releases/) blog post. ##### Commits - \[[`40c3958a5a`](https://togithub.com/nodejs/node/commit/40c3958a5a)] - **deps**: update archs files for OpenSSL-1.1.1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`a9ac9da89a`](https://togithub.com/nodejs/node/commit/a9ac9da89a)] - **deps**: fix openssl crypto clean (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`362d4c7494`](https://togithub.com/nodejs/node/commit/362d4c7494)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1v (RafaelGSS) [#49043](https://togithub.com/nodejs/node/pull/49043) - \[[`d8ccfe9ad4`](https://togithub.com/nodejs/node/commit/d8ccfe9ad4)] - **policy**: handle Module.constructor and main.extensions bypass (RafaelGSS) [nodejs-private/node-private#445](https://togithub.com/nodejs-private/node-private/pull/445) - \[[`242aaa0caa`](https://togithub.com/nodejs/node/commit/242aaa0caa)] - **policy**: disable process.binding() when enabled (Tobias Nießen) [nodejs-private/node-private#459](https://togithub.com/nodejs-private/node-private/pull/459) ### [`v16.20.1`](https://togithub.com/nodejs/node/releases/tag/v16.20.1): 2023-06-20, Version 16.20.1 'Gallium' (LTS), @RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v16.20.0...v16.20.1) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High) - [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) - [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium) - [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium) - [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium) - OpenSSL Security Releases - [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt). - [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt). - [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt) - c-ares vulnerabilities: - [GHSA-9g78-jv2r-p7vc](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc) - [GHSA-8r8p-23f3-64c2](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2) - [GHSA-54xr-f67r-4pc4](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4) - [GHSA-x6mf-cxr9-8q6v](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v) More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post. ##### Commits - \[[`5a92ea7a3b`](https://togithub.com/nodejs/node/commit/5a92ea7a3b)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen) - \[[`5df04e893a`](https://togithub.com/nodejs/node/commit/5df04e893a)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#48156](https://togithub.com/nodejs/node/pull/48156) - \[[`c171cbd124`](https://togithub.com/nodejs/node/commit/c171cbd124)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#48115](https://togithub.com/nodejs/node/pull/48115) - \[[`155d3aac02`](https://togithub.com/nodejs/node/commit/155d3aac02)] - **deps**: update archs files for OpenSSL-1.1.1u+quic (RafaelGSS) [#48369](https://togithub.com/nodejs/node/pull/48369) - \[[`8d4c8f8ebe`](https://togithub.com/nodejs/node/commit/8d4c8f8ebe)] - **deps**: upgrade openssl sources to OpenSSL\_1\_1\_1u (RafaelGSS) [#48369](https://togithub.com/nodejs/node/pull/48369) - \[[`1a5c9284eb`](https://togithub.com/nodejs/node/commit/1a5c9284eb)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://togithub.com/nodejs-private/node-private/pull/426) - \[[`e42ff4b018`](https://togithub.com/nodejs/node/commit/e42ff4b018)] - **http**: disable request smuggling via empty headers (Paolo Insogna) [nodejs-private/node-private#429](https://togithub.com/nodejs-private/node-private/pull/429) - \[[`10042683c8`](https://togithub.com/nodejs/node/commit/10042683c8)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://togithub.com/nodejs-private/node-private/pull/408) - \[[`a6f4e87bc9`](https://togithub.com/nodejs/node/commit/a6f4e87bc9)] - **policy**: handle mainModule.\__proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://togithub.com/nodejs-private/node-private/pull/416) - \[[`b77000f4d7`](https://togithub.com/nodejs/node/commit/b77000f4d7)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#47851](https://togithub.com/nodejs/node/pull/47851) ### [`v16.20.0`](https://togithub.com/nodejs/node/releases/tag/v16.20.0): 2023-03-29, Version 16.20.0 'Gallium' (LTS), @BethGriggs [Compare Source](https://togithub.com/nodejs/node/compare/v16.19.1...v16.20.0) ##### Notable Changes - **deps:** - update undici to 5.20.0 (Node.js GitHub Bot) [#46711](https://togithub.com/nodejs/node/pull/46711) - update c-ares to 1.19.0 (Michaël Zasso) [#46415](https://togithub.com/nodejs/node/pull/46415) - upgrade npm to 8.19.4 (npm team) [#46677](https://togithub.com/nodejs/node/pull/46677) - update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](https://togithub.com/nodejs/node/pull/46842) - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](https://togithub.com/nodejs/node/pull/44376) ##### Commits - \[[`de6dd67790`](https://togithub.com/nodejs/node/commit/de6dd67790)] - **crypto**: avoid hang when no algorithm available (Richard Lau) [#46237](https://togithub.com/nodejs/node/pull/46237) - \[[`4617512788`](https://togithub.com/nodejs/node/commit/4617512788)] - **crypto**: ensure auth tag set for chacha20-poly1305 (Ben Noordhuis) [#46185](https://togithub.com/nodejs/node/pull/46185) - \[[`24972164fc`](https://togithub.com/nodejs/node/commit/24972164fc)] - **deps**: update undici to 5.20.0 (Node.js GitHub Bot) [#46711](https://togithub.com/nodejs/node/pull/46711) - \[[`85f88c6a8d`](https://togithub.com/nodejs/node/commit/85f88c6a8d)] - **deps**: V8: cherry-pick [`90be99f`](https://togithub.com/nodejs/node/commit/90be99fab31c) (Michaël Zasso) [#46646](https://togithub.com/nodejs/node/pull/46646) - \[[`b4ebe6d47b`](https://togithub.com/nodejs/node/commit/b4ebe6d47b)] - **deps**: update c-ares to 1.19.0 (Michaël Zasso) [#46415](https://togithub.com/nodejs/node/pull/46415) - \[[`56cbc7fdda`](https://togithub.com/nodejs/node/commit/56cbc7fdda)] - **deps**: V8: cherry-pick [`c2792e5`](https://togithub.com/nodejs/node/commit/c2792e58035f) (Jiawen Geng) [#44961](https://togithub.com/nodejs/node/pull/44961) - \[[`7af9bdb31e`](https://togithub.com/nodejs/node/commit/7af9bdb31e)] - **deps**: upgrade npm to 8.19.4 (npm team) [#46677](https://togithub.com/nodejs/node/pull/46677) - \[[`962a7471b5`](https://togithub.com/nodejs/node/commit/962a7471b5)] - **deps**: update corepack to 0.17.0 (Node.js GitHub Bot) [#46842](https://togithub.com/nodejs/node/pull/46842) - \[[`748bc96e35`](https://togithub.com/nodejs/node/commit/748bc96e35)] - **deps**: update corepack to 0.16.0 (Node.js GitHub Bot) [#46710](https://togithub.com/nodejs/node/pull/46710) - \[[`a467782499`](https://togithub.com/nodejs/node/commit/a467782499)] - **deps**: update corepack to 0.15.3 (Node.js GitHub Bot) [#46037](https://togithub.com/nodejs/node/pull/46037) - \[[`1913b6763d`](https://togithub.com/nodejs/node/commit/1913b6763d)] - **deps**: update corepack to 0.15.2 (Node.js GitHub Bot) [#45635](https://togithub.com/nodejs/node/pull/45635) - \[[`809371a15f`](https://togithub.com/nodejs/node/commit/809371a15f)] - **module**: require.resolve.paths returns null with node schema (MURAKAMI Masahiko) [#45147](https://togithub.com/nodejs/node/pull/45147) - \[[`086bb2f8d4`](https://togithub.com/nodejs/node/commit/086bb2f8d4)] - ***Revert*** "**src**: let http2 streams end after session close" (Rich Trott) [#46721](https://togithub.com/nodejs/node/pull/46721) - \[[`6a01d39120`](https://togithub.com/nodejs/node/commit/6a01d39120)] - **(SEMVER-MINOR)** **src**: add support for externally shared js builtins (Michael Dawson) [#44376](https://togithub.com/nodejs/node/pull/44376) - \[[`d081032a60`](https://togithub.com/nodejs/node/commit/d081032a60)] - **test**: fix test-net-connect-reset-until-connected (Vita Batrla) [#46781](https://togithub.com/nodejs/node/pull/46781) - \[[`efe1be47ec`](https://togithub.com/nodejs/node/commit/efe1be47ec)] - **test**: skip test depending on `overlapped-checker` when not available (Antoine du Hamel) [#45015](https://togithub.com/nodejs/node/pull/45015) - \[[`fc47d58abe`](https://togithub.com/nodejs/node/commit/fc47d58abe)] - **test**: remove cjs loader from stack traces (Geoffrey Booth) [#44197](https://togithub.com/nodejs/node/pull/44197) - \[[`cf76d0790d`](https://togithub.com/nodejs/node/commit/cf76d0790d)] - **test**: fix WPT title when no META title is present (Filip Skokan) [#46804](https://togithub.com/nodejs/node/pull/46804) - \[[`0d1485b924`](https://togithub.com/nodejs/node/commit/0d1485b924)] - **test**: fix default WPT titles (Filip Skokan) [#46778](https://togithub.com/nodejs/node/pull/46778) - \[[`088e9cde3d`](https://togithub.com/nodejs/node/commit/088e9cde3d)] - **test**: add WPTRunner support for variants and generating WPT reports (Filip Skokan) [#46498](https://togithub.com/nodejs/node/pull/46498) - \[[`908c4dff44`](https://togithub.com/nodejs/node/commit/908c4dff44)] - **test**: mark test-crypto-key-objects flaky on Linux (Richard Lau) [#46684](https://togithub.com/nodejs/node/pull/46684) - \[[`768e56227e`](https://togithub.com/nodejs/node/commit/768e56227e)] - **tools**: make `utils.SearchFiles` deterministic (Bruno Pitrus) [#44496](https://togithub.com/nodejs/node/pull/44496) ### [`v16.19.1`](https://togithub.com/nodejs/node/releases/tag/v16.19.1): 2023-02-16, Version 16.19.1 'Gallium' (LTS), @richardlau [Compare Source](https://togithub.com/nodejs/node/compare/v16.19.0...v16.19.1) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - **[CVE-2023-23918](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23918)**: Node.js Permissions policies can be bypassed via process.mainModule (High) - **[CVE-2023-23919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23919)**: Node.js OpenSSL error handling issues in nodejs crypto library (Medium) - **[CVE-2023-23920](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23920)**: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low) Fixed by an update to undici: - **[CVE-2023-23936](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23936)**: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium) - SeeConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.