diff --git a/chinese/wordpress-zh_CN/distinfo b/chinese/wordpress-zh_CN/distinfo index 873dc7844128..30abf234a575 100644 --- a/chinese/wordpress-zh_CN/distinfo +++ b/chinese/wordpress-zh_CN/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179784 -SHA256 (wordpress-6.9.1-zh_CN.tar.gz) = dc11cf7f2db6e7262f32db0e167ef3d2dc0309b9d50f63708747f87d7517b4ea -SIZE (wordpress-6.9.1-zh_CN.tar.gz) = 34328733 +TIMESTAMP = 1779418066 +SHA256 (wordpress-7.0-zh_CN.tar.gz) = 4588f0a11feddf1b0decce1ea52a37b9d8108bf0601dafb1b37d35e0874ea38e +SIZE (wordpress-7.0-zh_CN.tar.gz) = 36981209 diff --git a/chinese/wordpress-zh_TW/distinfo b/chinese/wordpress-zh_TW/distinfo index b919a31bf9f5..b0b4c873aaac 100644 --- a/chinese/wordpress-zh_TW/distinfo +++ b/chinese/wordpress-zh_TW/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179813 -SHA256 (wordpress-6.9.1-zh_TW.tar.gz) = 2f68a081710a6529f8d24f5a9f986f5e7d69f1690833d15d73f333d62bce9e79 -SIZE (wordpress-6.9.1-zh_TW.tar.gz) = 34325828 +TIMESTAMP = 1779418074 +SHA256 (wordpress-7.0-zh_TW.tar.gz) = 5a68f95d5b7e7e594288e739cfad0f7a96e7e81c837861234eba36f6bc461ecd +SIZE (wordpress-7.0-zh_TW.tar.gz) = 36968549 diff --git a/french/wordpress/distinfo b/french/wordpress/distinfo index 45ae23fb5a11..9cdf3a218124 100644 --- a/french/wordpress/distinfo +++ b/french/wordpress/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179827 -SHA256 (wordpress-6.9.1-fr_FR.tar.gz) = 740b90ca6ed783d3442b4764157718f185eab12d4f1f0dae09aeb936800de57c -SIZE (wordpress-6.9.1-fr_FR.tar.gz) = 34366406 +TIMESTAMP = 1779418079 +SHA256 (wordpress-7.0-fr_FR.tar.gz) = 41ef19dd0584a43e95b37ad24a9f565b3f82eeca7196db9ad2b8cd02761016c5 +SIZE (wordpress-7.0-fr_FR.tar.gz) = 37017439 diff --git a/german/wordpress/distinfo b/german/wordpress/distinfo index 1ae5d70bdb4e..345cc94d3f46 100644 --- a/german/wordpress/distinfo +++ b/german/wordpress/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179838 -SHA256 (wordpress-6.9.1-de_DE.tar.gz) = cbecc30634f93d6eddea4f694800fd35a9448f7f0ee093159293d1a8a12ae8bc -SIZE (wordpress-6.9.1-de_DE.tar.gz) = 34378191 +TIMESTAMP = 1779418088 +SHA256 (wordpress-7.0-de_DE.tar.gz) = 98f72a2554f352b3afae9b54c6da6d616125ea7081bbb412636abf518088d9e6 +SIZE (wordpress-7.0-de_DE.tar.gz) = 37022984 diff --git a/japanese/wordpress/distinfo b/japanese/wordpress/distinfo index 3bf0dfe7f8c7..453f9a568118 100644 --- a/japanese/wordpress/distinfo +++ b/japanese/wordpress/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179856 -SHA256 (wordpress-6.9.1-ja.tar.gz) = fb492dddac535600c19d97303081159366822d7de7b81f9f313a9a66bbffbe64 -SIZE (wordpress-6.9.1-ja.tar.gz) = 34370374 +TIMESTAMP = 1779418092 +SHA256 (wordpress-7.0-ja.tar.gz) = 64b6a3d1a81230bfa0fc6bf3fd97872b82ff3cdd81f657aa44e4c64a143ab5c8 +SIZE (wordpress-7.0-ja.tar.gz) = 37023016 diff --git a/russian/wordpress/distinfo b/russian/wordpress/distinfo index ee301434c773..951a2062d7a2 100644 --- a/russian/wordpress/distinfo +++ b/russian/wordpress/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179868 -SHA256 (wordpress-6.9.1-ru_RU.tar.gz) = 14dea21876ef713259aeb26f156145a061b533c7b69f762e21e0be277ed65260 -SIZE (wordpress-6.9.1-ru_RU.tar.gz) = 34520097 +TIMESTAMP = 1779418096 +SHA256 (wordpress-7.0-ru_RU.tar.gz) = 73c50be3ebe29147c41356939a8a67d98d746b4a03923466c8645e7f78954432 +SIZE (wordpress-7.0-ru_RU.tar.gz) = 37178591 diff --git a/www/wordpress/Makefile b/www/wordpress/Makefile index 6779e5eb39ac..0b6d6f4a5d32 100644 --- a/www/wordpress/Makefile +++ b/www/wordpress/Makefile @@ -1,70 +1,69 @@ PORTNAME= wordpress -PORTVERSION= 6.9.4 +DISTVERSION= 7.0 PORTREVISION?= 0 .ifndef WORDPRESS_LANG -DISTNAME= wordpress-6.9.1 PORTEPOCH= 1 MASTER_SITES= https://wordpress.org/ .else -DISTNAME= wordpress-6.9.1-${WORDPRESS_LANG} +DISTVERSIONSUFFIX= -${WORDPRESS_LANG} MASTER_SITES?= https://${WORDPRESS_LANG}.wordpress.org/ .endif CATEGORIES+= www MAINTAINER= delphij@FreeBSD.org COMMENT= State-of-the-art semantic personal publishing platform WWW= ${MASTER_SITES} LICENSE= GPLv2+ LICENSE_FILE= ${WRKSRC}/license.txt RUN_DEPENDS= ${PECL_PKGNAMEPREFIX}imagick>=2.2.2:graphics/pecl-imagick@${PHP_FLAVOR} USES= cpe php:web -.if ${PORTVERSION:N*.*.*} -CPE_VERSION= ${PORTVERSION}.0 +.if ${DISTVERSION:N*.*.*} +CPE_VERSION= ${DISTVERSION}.0 .endif .ifdef WORDPRESS_LANG PKGNAMESUFFIX= -${WORDPRESS_LANG} CPE_LANG= ${WORDPRESS_LANG} .endif USE_PHP= curl exif fileinfo filter ftp gd mysqli tokenizer xml zip zlib CONFLICTS_INSTALL= ??-wordpress NO_ARCH= yes NO_BUILD= yes SUB_FILES= pkg-message WRKSRC= ${WRKDIR}/${PORTNAME} PLIST= ${WRKDIR}/pkg-plist PORTDOCS= readme.html OPTIONS_DEFINE= DOCS .include pre-everything:: @${ECHO_CMD} "If you want to upgrade, you must read upgrade document." @${ECHO_CMD} "" . if !(defined(PACKAGE_BUILDING) || defined(BATCH)) @sleep 1 . endif pre-install: ${ECHO_CMD} '@owner www' > ${PLIST} ${ECHO_CMD} '@group www' >> ${PLIST} cd ${WRKSRC}/ && ${FIND} -s * -type f | ${SED} -e 's|^|%%WWWDIR%%/|' >> ${PLIST} ${ECHO_CMD} '@owner' >> ${PLIST} ${ECHO_CMD} '@group' >> ${PLIST} if [ ! -f ${WRKSRC}/wp-config-sample.php ]; then ${CP} \ ${WRKSRC}/wp-config.php.sample ${WRKSRC}/wp-config.php; fi do-install: ${INSTALL} -d -m 755 ${STAGEDIR}${WWWDIR}/ ${CP} -R ${WRKSRC}/ ${STAGEDIR}${WWWDIR}/ ${FIND} ${STAGEDIR}${WWWDIR}/ -type d -exec ${CHMOD} g+w {} \; do-install-DOCS-on: ${MKDIR} ${STAGEDIR}${DOCSDIR}/ cd ${WRKSRC}/ && ${INSTALL_DATA} ${PORTDOCS} ${STAGEDIR}${DOCSDIR}/ .include diff --git a/www/wordpress/distinfo b/www/wordpress/distinfo index e36b3c01a83f..fd205c274796 100644 --- a/www/wordpress/distinfo +++ b/www/wordpress/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770179751 -SHA256 (wordpress-6.9.1.tar.gz) = 85c8436998870e42a39ae7558b096d19d294a0cd2adb7c87ee764db973b01953 -SIZE (wordpress-6.9.1.tar.gz) = 27062929 +TIMESTAMP = 1779418059 +SHA256 (wordpress-7.0.tar.gz) = 530c8fdeb16fb0affdb53eb727b6a04bb8d166621c20029e389cabb01a0fa921 +SIZE (wordpress-7.0.tar.gz) = 29663483 diff --git a/www/wordpress/files/patch-6.9.1-to-6.9.4 b/www/wordpress/files/patch-6.9.1-to-6.9.4 deleted file mode 100644 index 9e5aa53c8598..000000000000 --- a/www/wordpress/files/patch-6.9.1-to-6.9.4 +++ /dev/null @@ -1,373 +0,0 @@ ---- wp-admin/about.php.orig 2026-02-03 17:29:37 UTC -+++ wp-admin/about.php -@@ -60,16 +60,81 @@ require_once ABSPATH . 'wp-admin/admin-header.php'; - - - --
-+
-
--

-+

-

- Version %s addressed some security issues.' ), -+ '6.9.4' -+ ); -+ ?> -+ the release notes.' ), -+ sprintf( -+ /* translators: %s: WordPress version. */ -+ esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ), -+ sanitize_title( '6.9.4' ) -+ ) -+ ); -+ ?> -+

-+

-+ Version %1$s addressed %2$s bug.', - 'Version %1$s addressed %2$s bugs.', -+ 1 -+ ), -+ '6.9.3', -+ 1 -+ ); -+ ?> -+ the release notes.' ), -+ sprintf( -+ /* translators: %s: WordPress version. */ -+ esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ), -+ sanitize_title( '6.9.3' ) -+ ) -+ ); -+ ?> -+

-+

-+ Version %s addressed some security issues.' ), -+ '6.9.2' -+ ); -+ ?> -+ the release notes.' ), -+ sprintf( -+ /* translators: %s: WordPress version. */ -+ esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ), -+ sanitize_title( '6.9.2' ) -+ ) -+ ); -+ ?> -+

-+

-+ Version %1$s addressed %2$s bug.', -+ 'Version %1$s addressed %2$s bugs.', - 49 - ), - '6.9.1', -@@ -78,9 +143,9 @@ require_once ABSPATH . 'wp-admin/admin-header.php'; - ?> - the release notes.' ), -- sprintf( -+ /* translators: %s: HelpHub URL. */ -+ __( 'For more information, see the release notes.' ), -+ sprintf( - /* translators: %s: WordPress version. */ - esc_url( __( 'https://wordpress.org/support/wordpress-version/version-%s/' ) ), - sanitize_title( '6.9.1' ) ---- wp-admin/includes/class-walker-nav-menu-checklist.php.orig 2025-05-01 19:26:29 UTC -+++ wp-admin/includes/class-walker-nav-menu-checklist.php -@@ -116,11 +116,11 @@ class Walker_Nav_Menu_Checklist extends Walker_Nav_Men - $output .= ''; - $output .= ''; - $output .= ''; -- $output .= ''; -+ $output .= ''; - $output .= ''; - $output .= ''; -- $output .= ''; -- $output .= ''; -- $output .= ''; -+ $output .= ''; -+ $output .= ''; -+ $output .= ''; - } - } ---- wp-admin/includes/class-walker-nav-menu-edit.php.orig 2025-05-01 19:26:29 UTC -+++ wp-admin/includes/class-walker-nav-menu-edit.php -@@ -203,13 +203,13 @@ class Walker_Nav_Menu_Edit extends Walker_Nav_Menu { -

- -

-

- -

-

-@@ -222,20 +222,20 @@ class Walker_Nav_Menu_Edit extends Walker_Nav_Menu { -

- -

-

- -

-
-

- -

---- wp-admin/includes/file.php.orig 2025-06-14 05:04:28 UTC -+++ wp-admin/includes/file.php -@@ -1901,6 +1901,11 @@ function _unzip_file_pclzip( $file, $to, $needed_dirs - continue; - } - -+ // Don't extract invalid files: -+ if ( 0 !== validate_file( $file['filename'] ) ) { -+ continue; -+ } -+ - $uncompressed_size += $file['size']; - - $needed_dirs[] = $to . untrailingslashit( $file['folder'] ? $file['filename'] : dirname( $file['filename'] ) ); ---- wp-includes/ID3/getid3.lib.php.orig 2025-11-24 18:38:31 UTC -+++ wp-includes/ID3/getid3.lib.php -@@ -13,9 +13,9 @@ if (!defined('GETID3_LIBXML_OPTIONS') && defined('LIBX - - if (!defined('GETID3_LIBXML_OPTIONS') && defined('LIBXML_VERSION')) { - if (LIBXML_VERSION >= 20621) { -- define('GETID3_LIBXML_OPTIONS', LIBXML_NOENT | LIBXML_NONET | LIBXML_NOWARNING | LIBXML_COMPACT); -+ define('GETID3_LIBXML_OPTIONS', LIBXML_NONET | LIBXML_NOWARNING | LIBXML_COMPACT); - } else { -- define('GETID3_LIBXML_OPTIONS', LIBXML_NOENT | LIBXML_NONET | LIBXML_NOWARNING); -+ define('GETID3_LIBXML_OPTIONS', LIBXML_NONET | LIBXML_NOWARNING); - } - } - ---- wp-includes/class-wp-block-patterns-registry.php.orig 2025-10-06 11:31:33 UTC -+++ wp-includes/class-wp-block-patterns-registry.php -@@ -173,12 +173,23 @@ final class WP_Block_Patterns_Registry { - } else { - $patterns = &$this->registered_patterns; - } -- if ( ! isset( $patterns[ $pattern_name ]['content'] ) && isset( $patterns[ $pattern_name ]['filePath'] ) ) { -+ -+ $file_path = $patterns[ $pattern_name ]['filePath'] ?? ''; -+ $is_stringy = is_string( $file_path ) || ( is_object( $file_path ) && method_exists( $file_path, '__toString' ) ); -+ $pattern_path = $is_stringy ? realpath( (string) $file_path ) : null; -+ if ( -+ ! isset( $patterns[ $pattern_name ]['content'] ) && -+ is_string( $pattern_path ) && -+ ( str_ends_with( $pattern_path, '.php' ) || str_ends_with( $pattern_path, '.html' ) ) && -+ is_file( $pattern_path ) && -+ is_readable( $pattern_path ) -+ ) { - ob_start(); - include $patterns[ $pattern_name ]['filePath']; - $patterns[ $pattern_name ]['content'] = ob_get_clean(); - unset( $patterns[ $pattern_name ]['filePath'] ); - } -+ - return $patterns[ $pattern_name ]['content']; - } - ---- wp-includes/class-wp-http-ixr-client.php.orig 2022-09-12 15:47:14 UTC -+++ wp-includes/class-wp-http-ixr-client.php -@@ -89,7 +89,7 @@ class WP_HTTP_IXR_Client extends IXR_Client { - echo '
' . htmlspecialchars( $xml ) . "\n
\n\n"; - } - -- $response = wp_remote_post( $url, $args ); -+ $response = wp_safe_remote_post( $url, $args ); - - if ( is_wp_error( $response ) ) { - $errno = $response->get_error_code(); ---- wp-includes/html-api/class-wp-html-tag-processor.php.orig 2025-12-04 07:58:36 UTC -+++ wp-includes/html-api/class-wp-html-tag-processor.php -@@ -4680,4 +4680,13 @@ class WP_HTML_Tag_Processor { - * @since 6.7.0 - */ - const TEXT_IS_WHITESPACE = 'TEXT_IS_WHITESPACE'; -+ -+ /** -+ * Wakeup magic method. -+ * -+ * @since 6.9.2 -+ */ -+ public function __wakeup() { -+ throw new \LogicException( __CLASS__ . ' should never be unserialized' ); -+ } - } ---- wp-includes/interactivity-api/class-wp-interactivity-api.php.orig 2025-11-10 22:24:34 UTC -+++ wp-includes/interactivity-api/class-wp-interactivity-api.php -@@ -1032,6 +1032,20 @@ final class WP_Interactivity_API { - return; - } - -+ // Skip if the suffix is an event handler. -+ if ( str_starts_with( $entry['suffix'], 'on' ) ) { -+ _doing_it_wrong( -+ __METHOD__, -+ sprintf( -+ /* translators: %s: The directive, e.g. data-wp-on--click. */ -+ __( 'Binding event handler attributes is not supported. Please use "%s" instead.' ), -+ esc_attr( 'data-wp-on--' . substr( $entry['suffix'], 2 ) ) -+ ), -+ '6.9.2' -+ ); -+ continue; -+ } -+ - $result = $this->evaluate( $entry ); - - if ( ---- wp-includes/js/wp-util.js.orig 2022-09-20 03:52:10 UTC -+++ wp-includes/js/wp-util.js -@@ -36,10 +36,11 @@ window.wp = window.wp || {}; - }; - - return function ( data ) { -- if ( ! document.getElementById( 'tmpl-' + id ) ) { -+ var el = document.querySelector( 'script#tmpl-' + id ); -+ if ( ! el ) { - throw new Error( 'Template not found: ' + '#tmpl-' + id ); - } -- compiled = compiled || _.template( $( '#tmpl-' + id ).html(), options ); -+ compiled = compiled || _.template( $( el ).html(), options ); - return compiled( data ); - }; - }); ---- wp-includes/js/wp-util.min.js.orig 2025-02-06 17:27:26 UTC -+++ wp-includes/js/wp-util.min.js -@@ -1,2 +1,2 @@ - /*! This file is auto-generated */ --window.wp=window.wp||{},function(s){var t="undefined"==typeof _wpUtilSettings?{}:_wpUtilSettings;wp.template=_.memoize(function(e){var n,a={evaluate:/<#([\s\S]+?)#>/g,interpolate:/\{\{\{([\s\S]+?)\}\}\}/g,escape:/\{\{([^\}]+?)\}\}(?!\})/g,variable:"data"};return function(t){if(document.getElementById("tmpl-"+e))return(n=n||_.template(s("#tmpl-"+e).html(),a))(t);throw new Error("Template not found: #tmpl-"+e)}}),wp.ajax={settings:t.ajax||{},post:function(t,e){return wp.ajax.send({data:_.isObject(t)?t:_.extend(e||{},{action:t})})},send:function(a,t){var e,n;return _.isObject(a)?t=a:(t=t||{}).data=_.extend(t.data||{},{action:a}),t=_.defaults(t||{},{type:"POST",url:wp.ajax.settings.url,context:this}),(e=(n=s.Deferred(function(n){t.success&&n.done(t.success),t.error&&n.fail(t.error),delete t.success,delete t.error,n.jqXHR=s.ajax(t).done(function(t){var e;"1"!==t&&1!==t||(t={success:!0}),_.isObject(t)&&!_.isUndefined(t.success)?(e=this,n.done(function(){a&&a.data&&"query-attachments"===a.data.action&&n.jqXHR.hasOwnProperty("getResponseHeader")&&n.jqXHR.getResponseHeader("X-WP-Total")?e.totalAttachments=parseInt(n.jqXHR.getResponseHeader("X-WP-Total"),10):e.totalAttachments=0}),n[t.success?"resolveWith":"rejectWith"](this,[t.data])):n.rejectWith(this,[t])}).fail(function(){n.rejectWith(this,arguments)})})).promise()).abort=function(){return n.jqXHR.abort(),this},e}}}(jQuery); -\ No newline at end of file -+window.wp=window.wp||{},function(r){var t="undefined"==typeof _wpUtilSettings?{}:_wpUtilSettings;wp.template=_.memoize(function(a){var n,s={evaluate:/<#([\s\S]+?)#>/g,interpolate:/\{\{\{([\s\S]+?)\}\}\}/g,escape:/\{\{([^\}]+?)\}\}(?!\})/g,variable:"data"};return function(t){var e=document.querySelector("script#tmpl-"+a);if(e)return(n=n||_.template(r(e).html(),s))(t);throw new Error("Template not found: #tmpl-"+a)}}),wp.ajax={settings:t.ajax||{},post:function(t,e){return wp.ajax.send({data:_.isObject(t)?t:_.extend(e||{},{action:t})})},send:function(n,t){var e,a;return _.isObject(n)?t=n:(t=t||{}).data=_.extend(t.data||{},{action:n}),t=_.defaults(t||{},{type:"POST",url:wp.ajax.settings.url,context:this}),(e=(a=r.Deferred(function(a){t.success&&a.done(t.success),t.error&&a.fail(t.error),delete t.success,delete t.error,a.jqXHR=r.ajax(t).done(function(t){var e;"1"!==t&&1!==t||(t={success:!0}),_.isObject(t)&&!_.isUndefined(t.success)?(e=this,a.done(function(){n&&n.data&&"query-attachments"===n.data.action&&a.jqXHR.hasOwnProperty("getResponseHeader")&&a.jqXHR.getResponseHeader("X-WP-Total")?e.totalAttachments=parseInt(a.jqXHR.getResponseHeader("X-WP-Total"),10):e.totalAttachments=0}),a[t.success?"resolveWith":"rejectWith"](this,[t.data])):a.rejectWith(this,[t])}).fail(function(){a.rejectWith(this,arguments)})})).promise()).abort=function(){return a.jqXHR.abort(),this},e}}}(jQuery); -\ No newline at end of file ---- wp-includes/kses.php.orig 2025-10-22 21:02:35 UTC -+++ wp-includes/kses.php -@@ -2201,8 +2201,8 @@ function wp_kses_normalize_entities( $content, $contex - * - * Here, each input is normalized to an appropriate output. - */ -- $content = preg_replace_callback( '/&#(0*[0-9]{1,7});/', 'wp_kses_normalize_entities2', $content ); -- $content = preg_replace_callback( '/&#[Xx](0*[0-9A-Fa-f]{1,6});/', 'wp_kses_normalize_entities3', $content ); -+ $content = preg_replace_callback( '/&#(0*[1-9][0-9]{0,6});/', 'wp_kses_normalize_entities2', $content ); -+ $content = preg_replace_callback( '/&#[Xx](0*[1-9A-Fa-f][0-9A-Fa-f]{0,5});/', 'wp_kses_normalize_entities3', $content ); - if ( 'xml' === $context ) { - $content = preg_replace_callback( '/&([A-Za-z]{2,8}[0-9]{0,2});/', 'wp_kses_xml_named_entities', $content ); - } else { ---- wp-includes/media.php.orig 2025-12-01 14:29:25 UTC -+++ wp-includes/media.php -@@ -4570,7 +4570,7 @@ function wp_prepare_attachment_for_js( $attachment ) { - - if ( $attachment->post_parent ) { - $post_parent = get_post( $attachment->post_parent ); -- if ( $post_parent ) { -+ if ( $post_parent && current_user_can( 'read_post', $attachment->post_parent ) ) { - $response['uploadedToTitle'] = $post_parent->post_title ? $post_parent->post_title : __( '(no title)' ); - $response['uploadedToLink'] = get_edit_post_link( $attachment->post_parent, 'raw' ); - } ---- wp-includes/nav-menu.php.orig 2024-08-05 19:00:19 UTC -+++ wp-includes/nav-menu.php -@@ -514,7 +514,7 @@ function wp_update_nav_menu_item( $menu_id = 0, $menu_ - } - } - -- if ( wp_unslash( $args['menu-item-title'] ) === wp_specialchars_decode( $original_title ) ) { -+ if ( wp_unslash( $args['menu-item-title'] ) === $original_title ) { - $args['menu-item-title'] = ''; - } - ---- wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php.orig 2025-11-25 01:22:32 UTC -+++ wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php -@@ -560,6 +560,14 @@ class WP_REST_Comments_Controller extends WP_REST_Cont - } - } - -+ if ( $is_note && ! empty( $request['post'] ) && ! current_user_can( 'edit_post', (int) $request['post'] ) ) { -+ return new WP_Error( -+ 'rest_cannot_create_note', -+ __( 'Sorry, you are not allowed to create notes for this post.' ), -+ array( 'status' => rest_authorization_required_code() ) -+ ); -+ } -+ - $edit_cap = $is_note ? array( 'edit_post', (int) $request['post'] ) : array( 'moderate_comments' ); - if ( isset( $request['status'] ) && ! current_user_can( ...$edit_cap ) ) { - return new WP_Error( ---- wp-includes/template-loader.php.orig 2025-10-15 17:14:39 UTC -+++ wp-includes/template-loader.php -@@ -111,8 +111,15 @@ if ( wp_using_themes() ) { - * - * @param string $template The path of the template to include. - */ -- $template = apply_filters( 'template_include', $template ); -- if ( $template ) { -+ $template = apply_filters( 'template_include', $template ); -+ $is_stringy = is_string( $template ) || ( is_object( $template ) && method_exists( $template, '__toString' ) ); -+ $template = $is_stringy ? realpath( (string) $template ) : null; -+ if ( -+ is_string( $template ) && -+ ( str_ends_with( $template, '.php' ) || str_ends_with( $template, '.html' ) ) && -+ is_file( $template ) && -+ is_readable( $template ) -+ ) { - /** - * Fires immediately before including the template. - * ---- wp-includes/version.php.orig 2026-02-03 17:29:37 UTC -+++ wp-includes/version.php -@@ -16,7 +16,7 @@ - * - * @global string $wp_version - */ --$wp_version = '6.9.1'; -+$wp_version = '6.9.4'; - - /** - * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.