Skip to content

⬆️ Bump roots/wordpress to v7.0.2#292

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rootswordpress
Open

⬆️ Bump roots/wordpress to v7.0.2#292
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rootswordpress

Conversation

@renovate

@renovate renovate Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
roots/wordpress (source) 7.07.0.2 age confidence

Release Notes

roots/wordpress (roots/wordpress)

v7.0.2: Version 7.0.2

Compare Source

Sourced from WordPress.org Documentation.

Summary

Security updates

This release features several security fixes. Because this is a security release, it is recommended that you update your sites immediately.
The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:

  • A facilitated SQL injection issue reported by as a team by TF1T, dtro, and haongo
  • A REST API batch-route confusion and SQL injection issue leading to Remote Code Execution reported by Adam Kues at Assetnote / Searchlight Cyber

As a courtesy, these fixes are available in affected branches of WordPress to eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported.

v7.0.1: Version 7.0.1

Compare Source

Sourced from WordPress.org Documentation.

Summary

This release was led by Aaron Jorbin, Brian Haas, Carlos Bravo and Estela Rueda.

This minor release includes fixes for 31 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress including the block editor, mail, and classic themes.

For a full list of bug fixes, please refer to the release candidate announcement.


Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title ⬆️ Bump roots/wordpress to v7.0.1 ⬆️ Bump roots/wordpress to v7.0.2 Jul 17, 2026
@renovate
renovate Bot force-pushed the renovate/rootswordpress branch from 330a9dd to 28d8e41 Compare July 17, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants