Skip to content

Release v1.16.2 Changes - #185

Merged
XjSv merged 17 commits into
mainfrom
develop
Oct 5, 2026
Merged

Release v1.16.2 Changes#185
XjSv merged 17 commits into
mainfrom
develop

Conversation

@XjSv

@XjSv XjSv commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner
  • Escape the [cooked-timer] description in the data-desc attribute to prevent stored XSS (CVE-2026-77829).
  • Added include_ids attribute to cooked-related-recipes shortcode to display related recipes by specific IDs.
  • Fixed a bug where if cooking time is a string a fatal error is thrown.

webbrain-one and others added 17 commits September 11, 2026 06:32
@webbrain-one
docs: improve README
c27bbab
@mgiannopoulos24
Package updates and PHPCS fixes.
e11887b
@dependabot
Bump @wordpress/e2e-test-utils-playwright from 1.54.0 to 2.0.0
ab8983f 
Bumps [@wordpress/e2e-test-utils-playwright](https://github.com/WordPress/gutenberg/tree/HEAD/packages/e2e-test-utils-playwright) from 1.54.0 to 2.0.0.
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/e2e-test-utils-playwright/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/e2e-test-utils-playwright@2.0.0/packages/e2e-test-utils-playwright)

---
updated-dependencies:
- dependency-name: "@wordpress/e2e-test-utils-playwright"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump bestzip from 3.1.0 to 4.0.0
01f4570 
Bumps [bestzip](https://github.com/nfriedly/node-bestzip) from 3.1.0 to 4.0.0.
- [Changelog](https://github.com/nfriedly/node-bestzip/blob/master/CHANGELOG.md)
- [Commits](nfriedly/node-bestzip@v3.1.0...v4.0.0)

---
updated-dependencies:
- dependency-name: bestzip
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@mgiannopoulos24
Change PHP version to 7.4 and update afterStart script
5541f53
@mgiannopoulos24
Update i18n scripts for compatibility with ddev
2d86951
@mgiannopoulos24
Change afterStart script to use wp-env run cli
b52e1c8
@XjSv
Merge pull request #177 from XjSv/dependabot/npm_and_yarn/develop/wor…
dd97da7 
…dpress/e2e-test-utils-playwright-2.0.0

Bump @wordpress/e2e-test-utils-playwright from 1.54.0 to 2.0.0
@XjSv
Merge pull request #178 from XjSv/dependabot/npm_and_yarn/develop/bes…
0cfc318 
…tzip-4.0.0

Bump bestzip from 3.1.0 to 4.0.0
@XjSv
Merge pull request #174 from webbrain-one/webbrain/readme-improvement
27974fb 
docs: improve README
@XjSv
Merge branch 'develop' into chore/phpcs-fixes
9dd7d63
@XjSv
Merge pull request #176 from mgiannopoulos24/chore/phpcs-fixes
036097d 
Package updates and PHPCS fixes.
@XjSv
Added include_ids to cooked-related-recipes shortcode
47787d2 
Also fixed bug where if cooking time is a string a fetal error is thrown.
@XjSv
Updated tests
41e944b
@XjSv
Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-…
c8a6812 
…timer] Shortcode Content
@XjSv
Updated release notes
5dd52a6
@XjSv
Updated contributors
f71c257
@XjSv XjSv self-assigned this Oct 5, 2026
@XjSv XjSv added bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request security Security vulnerability labels Oct 5, 2026
@XjSv
XjSv merged commit 150f2e6 into main Oct 5, 2026
34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@XjSv XjSv

Labels

bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request security Security vulnerability

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@XjSv @webbrain-one @mgiannopoulos24