It looks like the AI MCP is going to be integrated into core. There is some discussion about this.

WP_KSES() Sanitizes HTML. It was developed over time and is something of a “coral reef” build up of checks, but it was developed before HTML 5. Now it is being rewritten to simplify and modernize it.

This is a behind the scenes outline of the process of a WordPress security release by a member of the security team, John Blackbourn. He suggests that the process is robust and transparent enough that we can manage the releases with confidence.

WordPress Paid Out More Than $90,000 in bug bounties in the last 90 days. I could be naive, but my hope is that these security fixes will tamper off over time as the code base is hardened.

There are 7 security fixes and 4 bug fixes. Because it is a security release it is recommended to update sites immediately.

This review of the challenges and possible solutions to collaborative editing in WordPress explains why the feature was removed from 7.0 and talks about some experimental solutions.

Core is moving away from naming themes by year. This one is supposed to be a minimalistic blog theme that is easily customizable.

The WordPress security team received 773 reports of security vulnerabilities in August, up from around 20-30 a month last year. The team starts to put some new limitations on what they will accepts via the HackerOne disclosure program.

This article from The Repository provides information about the new Accessibility Lab plugin, which will be a testing ground for accessibility changes before they are added to core.