Skip to content

Release 0.5.0 - #21

Merged
ericmann merged 4 commits into
mainfrom
release-0.5.0
Nov 10, 2026
Merged

ericmann merged 4 commits into
mainfrom
release-0.5.0

Conversation

@ericmann

@ericmann ericmann commented Nov 10, 2026 •

Copy link
Copy Markdown
Owner

Releases 0.5.0. Stacked on #20: merge that first, and this retargets to main.

  • secrets-api.php declares 0.5.0, and SECURITY.md and docs/spec/scope.md say so.
  • docs/changelog/0-5-0.md opens with "Before you update": WP_SECRETS_KEY is required (with the steps for a site that stored secrets under the salt fallback), and a drop-in changes implements to extends, because the old form is a fatal error. Then the "Ported from core" table, r65272 through r65390 with props, the three core-only changes (r65374, part of r65375, r65389), and the core PRs still in review.

After merge: a signed v0.5.0 tag, which publishes the docs through docs-publish.yml, and a GitHub release with the changelog as its notes.

src/ follows core trunk through r65378: the root key survives a failed read,
secret values and key material stay out of stack traces, a secret name can't
end in a newline, and the drop-in can set its overrides as plain variables. The
changelog cross-links each ported changeset and the core tickets still in
review.
0.5.0 now carries r65385 and r65390, so the changelog opens with what to do
before updating: define WP_SECRETS_KEY, moving secrets stored under the salt
fallback first, and change a drop-in's `implements` to `extends`, since the old
form is a fatal error. The ported table runs through r65390, and r65389 joins
the core-only changes. The in-review table is down to 15881 and 15329.
@ericmann
ericmann changed the base branch from core-r65378 to main November 10, 2026 16:34
@ericmann
ericmann merged commit b540d10 into main Nov 10, 2026
17 of 30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant