[dependabot]

Bumps the wordpress-packages group with 6 updates in the / directory:

Package	From	To
@wordpress/interactivity	6.56.0	8.0.0
@wordpress/babel-preset-default	8.56.0	10.0.0
@wordpress/browserslist-config	6.56.0	7.0.0
@wordpress/env	11.16.0	12.0.0
@wordpress/eslint-plugin	27.0.0	28.0.0
@wordpress/scripts	36.0.0	37.0.0

Updates @wordpress/interactivity from 6.56.0 to 8.0.0

Changelog

Sourced from @​wordpress/interactivity's changelog.

8.0.0 (2026-10-20)

Breaking Changes

• Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

Enhancements

• data-wp-html keeps the element's server-rendered content when its value is { "wpServerHtml": true }, the stand-in for an asDangerousHTML() value in the page's data, whether it comes from state, context or a data-wp-each item (#84889).
• Speed up hydration by only parsing object-like directive values as JSON and reading attributes with getAttributeNames() (#81699).

Bug Fixes

• Reject malformed Interactivity directive names whose text after data-wp- begins with a hyphen, including offset-zero -- forms that would create an empty prefix, aligning client-side validation with WordPress Core (#81023).
• data-wp-html now follows its value on every update and after navigation: tokens render, pending values keep the content, anything else empties the element. Throwing getters and functions no longer break rendering. (#84652).
• data-wp-html is ignored, with a warning, when combined with data-wp-text, data-wp-each or data-wp-router-region on the same element. (#84652).
• Interactive islands inside server-rendered data-wp-each-child items are no longer hydrated twice. (#84652).
• Functions called from directive values restore the caller's scope when they throw. (#84652).

Internal

• Publish only runtime files, dropping tsconfig.json, tsconfig.build.json, tsconfig.build.tsbuildinfo and the test files from the package (#84164).

7.0.0 (2026-10-07)

Breaking Changes

• Remove the data-wp-ignore directive. An element carrying it is now hydrated like any other element, and a warning is shown in development mode. Remove the attribute. (#84098)
• Remove support for two-hyphen unique IDs, such as data-wp-watch--id or data-wp-on--click--id. Use three hyphens instead, such as data-wp-watch---id or data-wp-on--click---id. data-wp-watch, data-wp-init, and data-wp-run now skip directives with a suffix, and data-wp-on, data-wp-on-window, and data-wp-on-document now use the whole text after -- as the event name. Both show a warning in development mode. The deprecated data-wp-on-async directives are unchanged. (#84098)
• Applying ! to a function in a directive value, such as data-wp-bind--hidden="!actions.isOpen", no longer calls the function: the value resolves to undefined, with a warning in development mode. Use derived state defined with a getter instead. Negating values and getters is unchanged. (#84098)
• The evaluate function passed to directive callbacks now accepts only the directive entry. Additional arguments, which were only forwarded to negated functions, are no longer accepted. (#84098)

New Features

• Add the data-wp-html directive and asDangerousHTML() for rendering explicitly trusted HTML from reactive state. (#83092)

Enhancements

• getConfig accepts a type parameter describing the config it returns, like getContext does, so consumers can read typed config values. It defaults to any, so existing calls are unaffected (#71692).

Bug Fixes

• Run watch() callbacks without a directive scope. A callback passed to watch() no longer inherits the scope of the action or callback that called watch(), so getContext() and getElement() throw inside it, as they already did when watch() was called outside any scope. (#83280)

Internal

• Add afterNextFrame, getScope, and parseDirectiveValue to the privateApis bundle. @wordpress/interactivity-router uses the scheduling and scope seams to publish navigation lifecycle state, while the shared directive-value interpretation keeps the directive runtime, page preparation, and initiator attribution consistent. (#83280)

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view

Updates @wordpress/babel-preset-default from 8.56.0 to 10.0.0

Changelog

Sourced from @​wordpress/babel-preset-default's changelog.

10.0.0 (2026-10-20)

Breaking Changes

• Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

Enhancements

• Add list of included polyfills to header comment when generating the bundle (#84835)

9.0.0 (2026-10-07)

Breaking Changes

• Upgrade React to v19 (#83941).

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view

Updates @wordpress/browserslist-config from 6.56.0 to 7.0.0

Changelog

Sourced from @​wordpress/browserslist-config's changelog.

7.0.0 (2026-10-20)

Breaking Changes

• Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

6.57.0 (2026-10-07)

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view

Updates @wordpress/env from 11.16.0 to 12.0.0

Changelog

Sourced from @​wordpress/env's changelog.

12.0.0 (2026-10-20)

Breaking Changes

• Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

Bug Fixes

• Download the PHPUnit test library for a WordPress alpha, beta or RC version from its X.Y branch of WordPress/wordpress-develop when that branch exists, instead of always from trunk. A maintenance branch between point releases, such as 7.1.4-alpha, no longer gets trunk's tests, which can depend on code only trunk has. A release falls back to its X.Y branch when its tag does not exist yet. Cached test libraries now also update to the fetched version instead of staying on the first one downloaded (#84758).

11.17.0 (2026-10-07)

New Features

• Add a mariadbVersion option and WP_ENV_MARIADB_VERSION environment variable to choose the MariaDB version used by the Docker runtime, including versions older than 10.4 (#83751).
• Explain why wp-env start fails when a database was last used by a newer MariaDB version, which MariaDB cannot downgrade from (#83751).
• Stop wp-env start with an error naming the image when an image cannot be pulled and is not available locally, such as a mariadbVersion that does not exist, instead of reporting that cached images will be used (#83751).
• Make wp db commands, and so wp-env reset, work with a mariadbVersion older than 11.4. The MariaDB client in the CLI image requires TLS, which those servers do not offer, so the CLI image now runs the client without verifying the server certificate, as WP-CLI does from db-command 3.0 (#83751).

Bug Fixes

• Reject a phpVersion or WP_ENV_PHP_VERSION that is not only a version number, such as 8.2-apache or abc8, instead of failing later because the Docker image does not exist (#83751).
• Pass -T to docker compose exec when stdin is not a terminal, so commands run from a Git hook, which has a TTY on stdout but not on stdin, no longer fail with "cannot attach stdin to a TTY-enabled container" (#78374).

Internal

• Update @wp-playground/cli to 3.1.56, which replaces the fs-ext optional dependency, compiled with node-gyp at install time, with fs-ext-extra-prebuilt, which ships prebuilt binaries and works without running install scripts (#84012).
• Update simple-git to v4, which has better TypeScript support (#84137).

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view

Updates @wordpress/eslint-plugin from 27.0.0 to 28.0.0

Changelog

Sourced from @​wordpress/eslint-plugin's changelog.

28.0.0 (2026-10-20)

Breaking Changes

• Raise the minimum required Node.js version to >=22.13.0, for stable require(esm) support (#84313).

Enhancements

• use-recommended-components: Recommend useEnableWpCompatOverlaySlot from @wordpress/ui (#84305).
• use-recommended-components: Recommend Notice from @wordpress/ui instead of Tip from @wordpress/components (#84197).
• use-recommended-components: Recognize Avatar from @wordpress/ui as use-with-caution. (#84145)

Bug Fixes

• use-recommended-components: Require allowUseWithCaution for ControlWithError, ValidatedInputControl, and ValidatedTextareaControl from @wordpress/ui, matching their Storybook status (#84319).

Internal

• Remove the unused @eslint-community/eslint-plugin-eslint-comments dependency (#85102).

27.1.0 (2026-10-07)

New Features

• use-recommended-components: Add an allowUseWithCaution option that allows @wordpress/ui components marked "Use with caution" (#83536).

Enhancements

• use-recommended-components: Recommend Switch and SwitchControl from @wordpress/ui, and flag FormToggle and ToggleControl from @wordpress/components (#84097).
• test-unit: Allow generated titles passed through variables with vitest/valid-title's allowArguments option (#83995).
• use-recommended-components: Recommend Progress from @wordpress/ui and flag ProgressBar from @wordpress/components. (#84021)
• use-recommended-components: Recognize the new @wordpress/ui Meter as use-with-caution. (#83855)
• use-recommended-components: Recommend Checkbox, CheckboxControl, and CheckboxGroup from @wordpress/ui, and flag CheckboxControl from @wordpress/components (#83771).
• use-recommended-components: Recommend Radio, RadioGroup, and RadioGroupControl from @wordpress/ui, and flag RadioControl from @wordpress/components (#83872).
• use-recommended-components: Update the "Use with caution" entry from LinkButton to ButtonLink to match the renamed @wordpress/ui component (#83789).
• Update use-recommended-components rule to mark Notice from @wordpress/ui as recommended, and to prefer it over @wordpress/components Notice (#82685).
• use-recommended-components: Recognize the new @wordpress/ui Progress as use-with-caution. (#83781)
• Update use-recommended-components rule to prefer Badge from @wordpress/ui over the private @wordpress/components Badge. (#82379)

Bug Fixes

• Update typescript-eslint to ^8.70.1, whose peer range includes TypeScript 6.0 (#83754).

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view

Updates @wordpress/scripts from 36.0.0 to 37.0.0

Changelog

Sourced from @​wordpress/scripts's changelog.

37.0.0 (2026-10-20)

Breaking Changes

• Update the bundled webpack-dev-server from ^5.2.1 to ^6.0.0 and @pmmmwh/react-refresh-webpack-plugin from ^0.5.11 to ^0.6.3. Custom devServer configs need migrating: SockJS is removed, so drop webSocketServer: 'sockjs' and client.webSocketTransport: 'sockjs' to use the default ws; the proxy bypass option is removed in favor of http-proxy-middleware's context or router; custom middleware runs on Express 5; and getFilenameFromUrl() is now asynchronous. See the webpack-dev-server 6.0.0 release notes (#84674).

Enhancements

• test-e2e and test-playwright: Add a --wp-env-config option for the custom config file that the environment for the tests is started from with wp-env --config, such as .wp-env.test.json. When WP_BASE_URL is not set, the tests run on the port from that file merged with its override file, such as .wp-env.test.override.json, and any WP_ENV_* environment variables (#84654).

Bug Fixes

• test-e2e and test-playwright: When WP_BASE_URL is not set and the wp-env config disables the tests environment with "testsEnvironment": false, run the tests on the port of the development environment instead of falling back to http://localhost:8889, which may belong to another project's environment (#84654).

36.1.0 (2026-10-07)

Enhancements

• lint-js: Allow unit-test titles passed through variables (#83995).

Bug Fixes

• Add the stylelint-scss dependency, a peer of @wordpress/stylelint-config (#83765).
• build, start and lint-pkg-json: Resolve the default browserslist and npm-package-json-lint configs when dependencies are not hoisted to the project root (npm install-strategy=linked, pnpm). lint-pkg-json now defaults to config/npmpackagejsonlint.js; config/npmpackagejsonlint.json stays for projects that reference it (#83902).
• lint-js, lint-style and lint-md-docs: a file passed right after --fix is now treated as a file instead of that flag's value, so only the listed files get processed. Same for --require-pragma in format (#83521).

Commits

• 8d30f92 chore(release): publish
• e7922b3 Update changelog files
• e4d93b0 Merge changes published in the Gutenberg plugin "release/24.3" branch
• fa4301b Update changelog files
• 5c222d1 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 2555c8d Update changelog files
• 558d1e6 Merge changes published in the Gutenberg plugin "release/24.3" branch
• 12441e2 chore(release): publish
• 36c194f Update changelog files
• 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
• See full diff in compare view