WordPress 6.9 makes HTTPS the default in esc_url()
WordPress 6.9 finally makes HTTPS the default in esc_url() and esc_url_raw() when no scheme is given, as long as ‘https’ comes first in the $protocols array. No more str_replace hacks.
Category: Core Updates
WordPress plugin security now runs on automated checks
WordPress.org has started running the Plugin Check tool on every plugin update, new and existing. A look at what the automated scans catch and how to run the same checks before you upload.
Gutenberg 22.1 adds a tabs block and a better HTML block
Gutenberg 22.1 ships a native tabs block and an HTML block that can carry its own CSS and JavaScript. Here is what that means for custom code and how it cuts down on extra plugins.
How the WordPress 6.9 Abilities API affects custom roles
A client’s custom roles suddenly locked users out after WordPress 6.9 shipped its Abilities API. The fix was to register capabilities and map_meta_cap the way core now expects, not to brute-force add_cap calls.
Border radius presets in theme.json for WordPress 6.9
WordPress 6.9 adds border radius presets to theme.json. Define a set of radius options in your theme, and content editors pick from them instead of typing arbitrary pixel values.
How to read WordPress Core’s monthly reports
A practical look at the monthly WordPress Core reports: what releases, component activity, and contributor counts actually signal, and how to turn them into decisions for your own projects.
PHP 8.5 on WordPress 6.9 without breaking your live site
A PHP 8.5 update took down a client’s WooCommerce store. Here is what beta support really means on WordPress 6.9, and how to test the upgrade on staging before it hits your live site.
Registering WordPress AI abilities with categories
Notes on registering custom WordPress AI abilities now that categories are required, with a CRM example and why categorizing keeps integrations manageable.
How WordPress 6.9 fixes query cache bloat
Why heavily updated WordPress sites bloat their object cache, and how 6.9’s consistent cache keys for query groups fix it, with a WooCommerce case and sample code.
What the WordPress AI Abilities API means for 6.9
My honest read on the WordPress AI Abilities API coming in 6.9, and why I tell clients to build on the core API instead of bolting on a beta library that breaks every update.