Skip to content

Release 9.0.0#3392

Merged
pfefferle merged 4 commits into
trunkfrom
release/9.0.0
Jun 11, 2026
Merged

Release 9.0.0#3392
pfefferle merged 4 commits into
trunkfrom
release/9.0.0

Conversation

@pfefferle

@pfefferle pfefferle commented Jun 10, 2026

Copy link
Copy Markdown
Member

Release version 9.0.0.

The 9.0.0 version bump missed three spots: the posts-and-replies and stats
block.json versions (source and built), and the _doing_it_wrong() version in
Options::resolve_distribution_mode(). Set them all to 9.0.0.
Add the FEP-8fcf followers-sync authority fix (#3390) and the Site
Health wp_safe_remote_get hardening (#3391) to the 9.0.0 Security
section in readme.txt and CHANGELOG.md, and remove their now-consolidated
changelog entry files.
Copilot AI review requested due to automatic review settings June 10, 2026 18:58
@pfefferle pfefferle self-assigned this Jun 10, 2026
@pfefferle pfefferle requested a review from a team June 10, 2026 18:58
@github-actions github-actions Bot added [Block] Federated reply Respond to posts, notes, videos, and other content on the fediverse. [Block] Follow Me [Block] Followers [Block] Reactions [Block] Remote Reply aka "Reply on the Fediverse", in the comment list [Feature] Reactions [Feature] REST API [Feature] Signature [Feature] WP Admin [Focus] Editor Changes to the ActivityPub experience in the block editor labels Jun 10, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Prepares the ActivityPub 9.0.0 release by updating plugin/block versions, finalizing “@SInCE” annotations, and folding pending changelogger entries (including the two security fixes mentioned in the PR description) into the published changelogs.

Changes:

  • Bump plugin and block version metadata to 9.0.0.
  • Update PHPDoc @since / version strings from unreleased to 9.0.0 for features shipping in this release.
  • Publish the 9.0.0 entries in readme.txt / CHANGELOG.md and remove the now-redundant .github/changelog/* entry files.

Reviewed changes

Copilot reviewed 70 out of 70 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/stats/block.json Block metadata version bumped to 9.0.0.
src/reply/block.json Block metadata version bumped to 9.0.0.
src/remote-reply/block.json Block metadata version bumped to 9.0.0.
src/reactions/block.json Block metadata version bumped to 9.0.0.
src/posts-and-replies/block.json Block metadata version bumped to 9.0.0.
src/following/block.json Block metadata version bumped to 9.0.0.
src/followers/block.json Block metadata version bumped to 9.0.0.
src/follow-me/block.json Block metadata version bumped to 9.0.0.
src/extra-fields/block.json Block metadata version bumped to 9.0.0.
readme.txt Stable tag bumped to 9.0.0; changelog/upgrade notice updated for 9.0.0.
includes/wp-admin/class-advanced-settings-fields.php @since updated to 9.0.0 for Distribution Mode field.
includes/signature/interface-http-signature.php @since updated to 9.0.0 for keyId-returning signature verification.
includes/signature/class-http-signature-draft.php @since updated to 9.0.0 for keyId-returning signature verification.
includes/signature/class-http-message-signature.php @since updated to 9.0.0 for keyId-returning signature verification.
includes/rest/trait-verification.php @since updated to 9.0.0 for $key_id binding behavior.
includes/rest/oauth/class-clients-controller.php @since updated to 9.0.0 for Retry-After rate-limit response helper.
includes/rest/oauth/class-authorization-controller.php @since updated to 9.0.0 for Retry-After rate-limit response helper.
includes/rest/class-server.php @since updated to 9.0.0 for keyId-derived actor injection hardening.
includes/oauth/class-scope.php @since tags updated to 9.0.0 for scope normalization/aliases.
includes/functions-post.php @since updated to 9.0.0 for is_post_federated() helper.
includes/class-signature.php @since tags updated to 9.0.0 for keyId-returning verification and related helper behavior.
includes/class-options.php @since tags updated to 9.0.0 for Distribution Mode option handling and _doing_it_wrong() version string.
includes/class-blurhash.php @since tag updated to 9.0.0 for Blurhash feature.
includes/class-blurhash-encoder.php @since tag updated to 9.0.0 for Blurhash encoder feature.
includes/activity/extended-object/class-feature-authorization.php @since tag updated to 9.0.0 for Feature Authorization support.
includes/activity/class-actor.php @since tag updated to 9.0.0 for Feature Authorization-related actor behavior.
CHANGELOG.md Adds 9.0.0 release notes and compare link.
activitypub.php Plugin header version + ACTIVITYPUB_PLUGIN_VERSION bumped to 9.0.0.
.github/changelog/update-tanstack-history-clean Removed (entry folded into 9.0.0 changelog).
.github/changelog/swicg-basic-profile-token-fields Removed (entry folded into 9.0.0 changelog).
.github/changelog/swicg-basic-profile-scope-aliases Removed (entry folded into 9.0.0 changelog).
.github/changelog/remove-deprecations-7-0-to-7-4 Removed (entry folded into 9.0.0 changelog).
.github/changelog/oauth-rate-limit-retry-after Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-stream-follower-fatal Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-signature-request-target-query Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-signature-keyid-binding Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-reply-block-feed-rendering Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-remote-follow-rate-limit Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-quote-stamp-meta-key Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-outbox-stream-scope Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-outbox-owner-check Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-oauth-introspect-scope Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-nodeinfo-discovery-deprecation Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-media-text-block-attachments Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-inbox-actor-from-key-id Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-inbound-activity-actor-binding Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-health-check-safe-remote-get Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-getting-started-video-embed Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-followers-sync-authority-binding Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-comment-federation-parent-state Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-classic-editor-duplicate-metabox Removed (entry folded into 9.0.0 changelog).
.github/changelog/fix-accept-actor-binding Removed (entry folded into 9.0.0 changelog).
.github/changelog/feature-collections-consent Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-soft-delete-draft-pending-private Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-quote-notification-link Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-jsonld-blurhash-term Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-fediverse-deletion-warning Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-blurhash-encoder-hardening Removed (entry folded into 9.0.0 changelog).
.github/changelog/add-blurhash Removed (entry folded into 9.0.0 changelog).
.github/changelog/3044-from-description Removed (entry folded into 9.0.0 changelog).
build/stats/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/reply/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/remote-reply/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/reactions/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/posts-and-replies/index.js Generated asset: bundled block code updated for 9.0.0 (not reviewed).
build/posts-and-replies/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/following/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/followers/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/follow-me/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).
build/extra-fields/block.json Generated asset: block metadata version bumped to 9.0.0 (not reviewed).

@pfefferle pfefferle requested a review from jeherve June 11, 2026 08:19
@pfefferle pfefferle merged commit 375d470 into trunk Jun 11, 2026
12 checks passed
@pfefferle pfefferle deleted the release/9.0.0 branch June 11, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Block] Federated reply Respond to posts, notes, videos, and other content on the fediverse. [Block] Follow Me [Block] Followers [Block] Reactions [Block] Remote Reply aka "Reply on the Fediverse", in the comment list [Feature] Reactions [Feature] REST API [Feature] Signature [Feature] WP Admin [Focus] Editor Changes to the ActivityPub experience in the block editor Release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants