chore: upgrade wordpress to 7.1.3 #1

Merged

trav merged 4 commits from upgrade-e360226 into main 2026-10-19 16:53:19 +00:00

Conversation 10 Commits 4 Files Changed 1

+1 -1

autonomic-bot commented 2026-08-21 03:49:36 +00:00

Owner

Copy Link

Copy Source

Recipe upgrade — wordpress 7.1.2 → 7.1.3

Patch bump of the WordPress app image (maintenance and security release, 2026-10-06). The
recipe version label is left untouched — the operator publishes after merge.

service	image	current	new	notes
app	wordpress	7.1.2	7.1.3	Docker official image, plain semver tag; abra found upgrades:["7.1.3"]
db	mariadb	13.0	13.0 (unchanged)	abra: "no new versions available … assuming 13.0 is the latest" — trusted, current
ftp (optional overlay)	atmoz/sftp	alpine	alpine (unchanged)	floating alpine tag; direct Docker Hub check shows alpine is the newest/current alpine variant — no clean newer pin

Upstream release notes: app wordpress 7.1.2→7.1.3: https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/
(db and ftp unchanged.)

Operator Action Required

• WordPress 7.1.3 is a security + maintenance release: 7 security fixes + 4 bug fixes; updating is recommended immediately.
  Fixes include a stored XSS on the Comments admin page (pending comments), a DoS in WP_Http::make_absolute_url(), a second-order SQL injection in the WXR export, an author-role post-sticky weakness, unauthenticated disclosure of comments on private & unpublished posts, XSS via Imgur embeds, and forgeable {status}_{type} hook params.
• No DB schema migration, no compose/config/env/volume changes — image-tag bump only.
• PHP requirement unchanged (official image ships PHP 8.3.x). Recipe README has no 7.1.3-specific instructions.

Recommended release command (operator, after merge)

abra recipe release wordpress -z

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Recipe upgrade — wordpress 7.1.2 → 7.1.3 Patch bump of the WordPress app image (maintenance **and security** release, 2026-10-06). The recipe version label is left untouched — the operator publishes after merge. | service | image | current | new | notes | |---------|-------|---------|-----|-------| | app | wordpress | 7.1.2 | **7.1.3** | Docker official image, plain semver tag; abra found `upgrades:["7.1.3"]` | | db | mariadb | 13.0 | 13.0 (unchanged) | abra: "no new versions available … assuming 13.0 is the latest" — trusted, current | | ftp (optional overlay) | atmoz/sftp | alpine | alpine (unchanged) | floating `alpine` tag; direct Docker Hub check shows `alpine` is the newest/current alpine variant — no clean newer pin | **Upstream release notes:** app wordpress 7.1.2→7.1.3: https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/ (db and ftp unchanged.) ### Operator Action Required - WordPress 7.1.3 is a **security + maintenance release**: 7 security fixes + 4 bug fixes; updating is recommended immediately. Fixes include a stored XSS on the Comments admin page (pending comments), a DoS in `WP_Http::make_absolute_url()`, a second-order SQL injection in the WXR export, an author-role post-sticky weakness, unauthenticated disclosure of comments on private & unpublished posts, XSS via Imgur embeds, and forgeable `{status}_{type}` hook params. - **No DB schema migration, no compose/config/env/volume changes** — image-tag bump only. - PHP requirement unchanged (official image ships PHP 8.3.x). Recipe README has no 7.1.3-specific instructions. ### Recommended release command (operator, after merge) `abra recipe release wordpress -z` Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants

autonomic-bot added 1 commit 2026-08-21 03:49:36 +00:00

chore: upgrade wordpress to 7.1.0 e36022601b

autonomic-bot requested review from trav 2026-08-21 03:49:36 +00:00

autonomic-bot requested review from notplants 2026-08-21 03:49:36 +00:00

autonomic-bot commented 2026-08-21 03:49:40 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-08-21 03:49:58 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — wordpress @ e3602260 ✅ passed → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1301

(summary card unavailable — see the run for details.) full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `wordpress` @ `e3602260` ✅ **passed** → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1301 _(summary card unavailable — see the run for details.)_ [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1301) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot added 1 commit 2026-09-11 07:33:22 +00:00

chore: upgrade wordpress to 7.1.0 5e46fa3fbb

autonomic-bot commented 2026-09-11 07:33:33 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-11 07:33:47 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — wordpress @ 5e46fa3f ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `wordpress` @ `5e46fa3f` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1358) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1358) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1358) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot added 1 commit 2026-09-18 08:03:45 +00:00

chore: upgrade wordpress to 7.1.0 c6e598d511

autonomic-bot commented 2026-09-18 08:03:53 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-09-18 08:04:00 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — wordpress @ c6e598d5 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `wordpress` @ `c6e598d5` ✅ **passed** [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1375) [](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1375) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1375) · [dashboard](https://ci.commoninternet.net/)

autonomic-bot changed title from chore: upgrade wordpress to 7.1.0 to chore: upgrade wordpress to 7.1.3 2026-10-09 03:26:18 +00:00

autonomic-bot added 1 commit 2026-10-09 03:26:19 +00:00

chore: upgrade wordpress to 7.1.3 a40f54587b

autonomic-bot commented 2026-10-09 03:26:27 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-09 03:26:28 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — wordpress @ a40f5458 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `wordpress` @ `a40f5458` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/49) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/49) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/49) · [dashboard](https://ci.autonomic.zone/)

autonomic-bot commented 2026-10-16 03:37:49 +00:00

Author

Owner

Copy Link

Copy Source

!testme

!testme

autonomic-bot commented 2026-10-16 03:37:56 +00:00

Author

Owner

Copy Link

Copy Source

🌻 cc-ci — wordpress @ a40f5458 ✅ passed

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `wordpress` @ `a40f5458` ✅ **passed** [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/65) [](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/65) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/65) · [dashboard](https://ci.autonomic.zone/)

trav merged commit 6a343f0f0e into main 2026-10-19 16:53:19 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

trav

notplants

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

aadil (Aadil Ayub) autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/wordpress#1