Changeset 63587

Timestamp:

09/10/2026 04:37:59 PM (less than one hour ago)

Author:

adamsilverstein

Message:

General: Bump the pinned hash for Gutenberg to dd294ab.

This updates the pinned commit hash of the Gutenberg repository from 943e0d825bb66ba582e9a10d32743cbb136de460 to dd294ab86ceaf9f3d7d42a09b78f399238ce8826 and merges cherry-picked changes to the wp/7.1 branch into the 7.1.1 release. Only the editor and upload-media package hashes changed in the regenerated manifest.

A full list of changes included in this commit can be found on GitHub:
​https://github.com/WordPress/gutenberg/compare/943e0d825bb66ba582e9a10d32743cbb136de460...dd294ab86ceaf9f3d7d42a09b78f399238ce8826

The following commits are included:

• useViewConfig: don't request the view config twice (​https://github.com/WordPress/gutenberg/pull/82183)
• Framework: Update Node.js to v24 LTS and npm to v11 (​https://github.com/WordPress/gutenberg/pull/82635)
• Block Editor: Add translator context to pseudo-state labels (​https://github.com/WordPress/gutenberg/pull/81770)
• Fix: Post Editor: 403 on /wp/v2/settings at boot for users without manage_options cap (​https://github.com/WordPress/gutenberg/pull/81813)
• Media: Refuse a multi-file drop on a placeholder that takes one file (​https://github.com/WordPress/gutenberg/pull/82046)
• List: outdent an empty middle item without adding an item (​https://github.com/WordPress/gutenberg/pull/82011)
• Accordion Panel: Reset padding-block when panel is hidden (​https://github.com/WordPress/gutenberg/pull/81782)
• List View: Don't focus the last Table cell on keyboard activation (​https://github.com/WordPress/gutenberg/pull/81964)
• Media: Stop claiming "Upload complete" when upload failed (​https://github.com/WordPress/gutenberg/pull/81397)
• Media: keep indexed PNG sub-sizes indexed (​https://github.com/WordPress/gutenberg/pull/81884)
• Image block cropping: Sync image size and link destination settings (​https://github.com/WordPress/gutenberg/pull/82316)
• Gallery block: Fix 'Crop images to fit' broken in editor (​https://github.com/WordPress/gutenberg/pull/82318)
• Pages: require authentication and a capability to render generated standalone pages (​https://github.com/WordPress/gutenberg/pull/82254)
• Media Utils: Preserve arrays in multipart form data (​https://github.com/WordPress/gutenberg/pull/82353)
• wp-env: Fix Docker build errors with Debian Bullseye repositories (​https://github.com/WordPress/gutenberg/pull/82478)
• Query Loop: Fall back to post when the query has no postType (​https://github.com/WordPress/gutenberg/pull/82465)
• Block Supports: Bail early in state styles when a block has no style attribute (​https://github.com/WordPress/gutenberg/pull/81908)
• Fix: Restore layout styles for block style variations (​https://github.com/WordPress/gutenberg/pull/82335)
• CI: Unify the automation comments into a single PR comment (​https://github.com/WordPress/gutenberg/pull/82249)
• Editor: Store the finalize response as the attachment record (​https://github.com/WordPress/gutenberg/pull/81947)
• Media: Only blame the browser's codecs when HEIC really cannot be decoded (​https://github.com/WordPress/gutenberg/pull/82265)

The PHP changes carried by three of those pull requests do not travel through the package build and are already on the branch.

Follow-up to [63319], [63489], [63547], [63572].
Reviewed by jorbin.

Props andraganescu, wildworks.
Fixes #66037.

Location:

branches/7.1

Files:

• package.json (modified) (1 diff)
• src/wp-includes/assets/script-loader-packages.php (modified) (7 diffs)
• src/wp-includes/assets/script-modules-packages.php (modified) (1 diff)
• src/wp-includes/build/pages/font-library/page.php (modified) (1 diff)
• src/wp-includes/build/pages/options-connectors/page.php (modified) (1 diff)

branches/7.1/package.json

@@ -8 +8 @@
         },
         "gutenberg": {
-                "sha": "943e0d825bb66ba582e9a10d32743cbb136de460",
+                "sha": "dd294ab86ceaf9f3d7d42a09b78f399238ce8826",
                 "ghcrRepo": "WordPress/gutenberg/gutenberg-wp-develop-build"
         },

branches/7.1/src/wp-includes/assets/script-loader-packages.php

@@ -105 +105 @@
                         'wp-warning'
                 ),
-                'version' => 'd3cbb2c45b145b27a5cf'
+                'version' => '37e58da384b2558bd479'
         ),
         'block-library.js' => array(
@@ -151 +151 @@
                         )
                 ),
-                'version' => '2e80403676c10cc0a473'
+                'version' => '00e6e2a44788af201f35'
         ),
         'block-serialization-default-parser.js' => array(
@@ -403 +403 @@
                         )
                 ),
-                'version' => 'a7750dea8d5c880ddf33'
+                'version' => 'a6cb1641d13f718c01bd'
         ),
         'edit-site.js' => array(
@@ -453 +453 @@
                         )
                 ),
-                'version' => '638e98d0061f4b9f1efb'
+                'version' => '008f89f2cb2ad17a5947'
         ),
         'edit-widgets.js' => array(
@@ -544 +544 @@
                         )
                 ),
-                'version' => '2cd3b932f41a420d5904'
+                'version' => 'af070cfff88093363220'
         ),
         'element.js' => array(
@@ -664 +664 @@
                         'wp-warning'
                 ),
-                'version' => 'b8bf604c1cc119e63ee6'
+                'version' => '07c1c94f9b21baa97a96'
         ),
         'notices.js' => array(
@@ -882 +882 @@
                         )
                 ),
-                'version' => 'f7174b0617bcd68e57c3'
+                'version' => 'a2c026d433c295fd5145'
         ),
         'url.js' => array(

branches/7.1/src/wp-includes/assets/script-modules-packages.php

@@ -361 +361 @@
                         
                 ),
-                'version' => '685442d334b2d3e70832'
+                'version' => '7e33cd8c4128731126e8'
         ),
         'workflow/index.js' => array(

branches/7.1/src/wp-includes/build/pages/font-library/page.php

@@ -311 +311 @@
         // phpcs:ignore WordPress.Security.NonceVerification.Recommended
         if ( isset( $_GET['page'] ) && 'font-library' === $_GET['page'] ) {
+                // The page renders outside the menu page callback flow, so it must
+                // enforce authentication and capability checks itself. Without this,
+                // any admin entry point firing `admin_init` (such as admin-post.php,
+                // which serves logged-out requests) would render the page for
+                // unauthenticated visitors.
+                if ( ! is_user_logged_in() ) {
+                        auth_redirect();
+                }
+
+                if ( ! current_user_can( 'edit_theme_options' ) ) {
+                        wp_die(
+                                __( 'Sorry, you are not allowed to access this page.' ),
+                                403
+                        );
+                }
+
                 wp_font_library_render_page();
                 exit;

branches/7.1/src/wp-includes/build/pages/options-connectors/page.php

@@ -311 +311 @@
         // phpcs:ignore WordPress.Security.NonceVerification.Recommended
         if ( isset( $_GET['page'] ) && 'options-connectors' === $_GET['page'] ) {
+                // The page renders outside the menu page callback flow, so it must
+                // enforce authentication and capability checks itself. Without this,
+                // any admin entry point firing `admin_init` (such as admin-post.php,
+                // which serves logged-out requests) would render the page for
+                // unauthenticated visitors.
+                if ( ! is_user_logged_in() ) {
+                        auth_redirect();
+                }
+
+                if ( ! current_user_can( 'manage_options' ) ) {
+                        wp_die(
+                                __( 'Sorry, you are not allowed to access this page.' ),
+                                403
+                        );
+                }
+
                 wp_options_connectors_render_page();
                 exit;