Update wordpress monorepo to v25

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@wordpress/eslint-plugin (source)	^21.0.0 → ^25.0.0

---

Release Notes

WordPress/gutenberg (@​wordpress/eslint-plugin)

v25.4.0

Compare Source

v25.3.0

Compare Source

v25.2.0

Compare Source

New Features

• Added no-non-module-stylesheet-imports rule to prevent importing non-module stylesheets from JavaScript files (#​77984).

v25.1.0

Compare Source

New Features

• Added use-import-as rule to enforce configured aliases for selected named imports and direct unlock( privateApis ) destructuring (#​77389).
• Added no-unsafe-render-order rule to flag unsafe render-prop composition with VisuallyHidden and Link/Text (#​77428).

Enhancements

• Improved the Design System token lint rules to recognize CSS declaration strings more accurately, avoiding false bare-token reports for declarations while still flagging invalid token assignments and unknown token names (#​77384).
• Update use-recommended-components rule to prefer VisuallyHidden from @wordpress/ui over @wordpress/components (#​77575).

v25.0.0

Compare Source

Breaking Changes

• Upgraded to ESLint v10 with flat config format. The plugin now exports flat config arrays instead of eslintrc objects. Consumers must migrate from .eslintrc.* files to eslint.config.mjs. See the migration guide for details (#​76654).
• The minimum required ESLint version is now ^9.0.0 || ^10.0.0 (#​76654).
• Upgraded eslint-plugin-import to v2.31+ (wrapped with fixupPluginRules for flat config compatibility) (#​76654).
• Upgraded @typescript-eslint/* from v6 to v8 (via the unified typescript-eslint package) (#​76654).
• Replaced eslint-plugin-eslint-comments with @eslint-community/eslint-plugin-eslint-comments. Rule prefixes changed from eslint-comments/* to @eslint-community/eslint-comments/* (#​76654).

New Features

• Added @wordpress/eslint-plugin/eslintrc entry point — a compatibility wrapper for ESLint v9 consumers still using .eslintrc.* files. This is deprecated and will be removed in a future major version (#​76654).
• Configs are now exported as flat config arrays (e.g., wordpress.configs.recommended returns an array of config objects suitable for spreading into eslint.config.mjs) (#​76654).

Enhancements

• Disabled the jsx-a11y/heading-has-content rule in the recommended configuration, which reports many false positives when heading elements are passed via a render prop (#​77073).

v24.5.0

Compare Source

v24.4.0

Compare Source

New Features

• Added no-dom-globals-in-module-scope, no-dom-globals-in-constructor, no-dom-globals-in-react-cc-render, and no-dom-globals-in-react-fc rules to prevent DOM global usage in SSR-unsafe contexts, replacing the unmaintained eslint-plugin-ssr-friendly package (#​76508).
• Added use-recommended-components rule to encourage the use of recommended UI components in a WordPress environment (#​76222).
• Added no-unmerged-classname rule to flag components that set an explicit className while spreading rest props without destructuring and merging the incoming className (#​76458).

Enhancements

• The no-unknown-ds-tokens rule now reports bare --wpds-* tokens not wrapped in var(), which would silently miss build-time fallback injection.
• The no-setting-ds-tokens rule now checks all object property keys, not just those inside JSX style attributes (#​76212).

v24.3.0

Compare Source

New Features

• Added no-ds-tokens rule to disallow usage of Design System token CSS custom properties (--wpds-*).

Enhancements

• The no-unknown-ds-tokens rule now checks all string literals and template literals, not just JSX style attributes. It also reports dynamically constructed --wpds-* token names.

v24.2.0

Compare Source

v24.1.0

Compare Source

Enhancements

• The dependency-group rule now accepts an optional "never" mode to forbid dependency group comments.

v24.0.0

Compare Source

Breaking Changes

• Updated recommended ruleset to enforce import/no-unresolved for @wordpress/ packages. These packages were previously exempted from the rule. (#​72978)
• Removed default configuration of import/internal-regex to classify @wordpress/ packages as internal. From the perspective of an external consumer of this package, @wordpress/ packages should be considered external. (#​72978)

New Features

• Added no-setting-ds-tokens rule to disallow setting Design System token CSS custom properties (--wpds-*). (#​74325)
• Added no-unknown-ds-tokens rule to disallow unknown Design System tokens. (#​74325)
• Added components-no-missing-40px-size-prop rule to opt-in to the new 40px default size for components from the @wordpress/components package. (#​74611)
• Added components-no-unsafe-button-disabled rule to ensure that buttons from the @wordpress/components package are accessible when disabled. (#​74611)

Enhancements

• The dependency-group rule is not recommended anymore. (#​73616)

v23.0.0: 23.0.0

Compare Source

Changelog

Enhancements

Components

• @​wordpress/ui: Add global CSS defense module. (76783)
• Admin UI: Increase page header vertical padding. (77152)
• Admin UI: Update Page background color to surface-neutral. (76869)
• Autocomplete: Remove getAutoCompleterUI factory pattern. (77048)
• DataForm: Add min/max date range support for date and datetime fields. (77201)
• DataForm: Show tooltip in edit button in panel layout. (77024)
• DataForm: Support disabled controls. (77090)
• FormToggle: Update disabled styles. (77208)
• Media Upload Modal: Persist view configuration. (77288)
• Text: Remove UA margins. (76970)
• UI Text: Mark as recommended. (77044)
• UI/Dialog: Add explicit margin-inline-end rule to Title. (77334)
• UI: Update @base-ui/react from 1.3.0 to 1.4.0. (77308)
• UI: Use Text component for Badge typography. (77295)
• Use --wpds-cursor-control design token for interactive controls. (76786), (77259)
• @wordpress/ui: Add Popover. (76438)
• ui/AlertDialog: Better async confirm APIs, fully use base ui's AlertDialog. (76937)
• ui/Dialog: Update Header layout, refactor Title to use Text. (77161)
• ui: Expose container portal prop on all overlay Popup components. (77163)

Block Library

• Add context for next/previous enlarge image. (76967)
• Image block: Validate attachment ID exists before treating image as local. (77178)
• Search Block: Ensure color settings apply to input field when button is disabled. (77219)
• Tab Menu Item: Simplify active tab menu item style. (77195)
• Tabs: Remove sequential numbering from new tab labels. (77321)
• Use entity link title for link control preview. (77155)

Guidelines

• Guidelines CPT: Rename from "content guidelines" to "guidelines" (slug, classes, routes). (77147), (77223)
• Guidelines: Make the CPT type-aware. (77491)
• Improve guideline revision UX. (76560)
• Registers wp_guideline_type taxonomy. (77156)
• Update actions-section and import/export workflow. (76621)

Post Editor

• DataViews: Simplify defaultLayouts prop. (77232)
• RTC: Add filterable flag for meta box RTC compatibility. (76939)
• RTC: Change SyncConnectionModal to isSyncConnectionErrorHandled filter and drop IS_GUTENBERG_PLUGIN check. (76853)

Block Editor

• Display shortcuts for moving blocks via tooltips. (76992)
• Re-order spacing side controls when unlinked. (66317)

Connectors

• Update the AI plugin settings page slug we link to after activation. (77336)

DataViews

• Classify admin-ui and dataviews to components. (76959)

Global Styles

• Renamed focus visible label. (77292)

REST API

• Add date field in templates and template parts. (77134)

Media

• Media Modal Experiment: Set matching picker grid layout properties for when a user switches layouts. (77118)

Collaboration

• Backport: Improve validation and permission checks for WP_HTTP_Polling_Sync_Server. (76987)
• RTC: Add optional shouldSync function to entity sync configuration. (76947)
• RTC: Respect WP_ALLOW_COLLABORATION in Gutenberg for activation hook. (77084)

Site Editor

• Add Site Tagline and Site Title to Design > Identity panel. (76264)

Bug Fixes

Components

• Calendar: Fix disabled styles. (77138)
• Card: Set default foreground color on root. (77013)
• Checkbox: Fix disabled styles. (77132)
• DataForm: Remove text-transform from panel field labels. (77196)
• DataViews: Fix compact density clipping and remove top/bottom padding. (77054)
• Fix autocomplete overlapping trigger matching. (77018)
• FormTokenField: Fix disabled styles. (77137)
• RTC: Fix inline inserter reset on update sync. (76980)
• RadioControl: Add support for disabling radio group. (77127)
• Remove sandbox allow-same-origin for core/html blocks. (77212)
• TextArea: Add disabled styles. (77129)
• UI: Normalize render prop and ref forwarding patterns. (77160)

Block Library

• Cover block: Fix embed video background Error 153 in editor. (76904)
• Fix overflow of highlighted white-space in Code Block. (77085)
• Image block: Hide drag handles while an upload is in progress. (77121)
• Paragraph: Prevent onEnter splitting of parent block when insertion of that block type is not allowed. (77291)
• Post Author Biography: Preserve occurrence of white spaces. (71133)
• RTC: Core/cover block minor compatibility fixes. (76916)
• Search block: Match behavior of global styling for border and color with local styling (inspector controls) to remove inconsistency. (77060)
• Search block: Derive 'isSearchFieldHidden' value. (77082)
• Separator Block: Apply default block variation when inserting via --- shortcut. (77135)
• Upload external media: Ensure notice only fires once. (77218)

Block Editor

• Fix SyntaxError in Autocompleter UI when pasting matching content. (76961)
• LinkPicker: Decode HTML entities in link preview title. (77170)
• Prevent Enter key from inserting paragraphs in contentOnly sections. (76989)
• RTC: Fix "Edit as HTML" content reset during collaboration. (77043)
• Writing Flow: Fix format toolbar not appearing when selecting text from block edge. (77136)
• contentOnly template lock: Fix block insertion and removal rules. (77119)
• Fix numeric value clearing in preset input controls. (77139)

Guidelines

• Guidelines CPT: Skip registration when post type already exists. (77486)

Data Layer

• Core Data: Fix 'useEntityProp' for raw attributes. (77120)
• Core Data: Fix incorrect pagination for non-paginated entities. (76406)
• RTC: Fix core/table cell merging. (76913)
• RTC: Fix orphaned meta causing dirty editor state. (77529)
• RTC: Improve array attribute stability when structural changes occur. (77164)
• getMergedItemsIds: Receive full page bigger than perPage. (77262)

Connectors

• Account for mu-plugins when resolving plugin.file status. (76994)
• Don't clobber third-party custom render in registerDefaultConnectors. (77116)
• Hide Akismet unless already installed. (76962)
• Replace speak() with notice store for state changes. (77174)
• Update help text from 'reset' to 'manage'. (76963)

Post Editor

• Fields: Fix postContentInfoField when there are edits. (76901)
• Fix: Restore editor canvas padding in classic themes. (76864)
• RTC: Fix button flickering on retry dialog. (77234)
• RTC: Predefined retry schedules for disconnect dialog, make more lenient. (76966)
• Revision: Fix 'Show changes' button reset state. (77122)

Collaboration

• Fix failing 'WP_HTTP_Polling_Sync_Server' unit test. (77025)
• RTC: Fix disconnect dialog due to uneditable entity. (77242)
• RTC: Isolate sync update failures to prevent full disconnect. (76968)

Global Styles

• Fix duotone filter not applying on style variation switch. (77229)
• Global Styles Revisions: Fix footer overflow. (77103)

DataViews

• Fix Gutenberg_REST_View_Config_Controller_7_1 PHP warnings. (77290)

Patterns

• Fix custom category in site editor not displaying pattern actions. (77251)

Media

• MediaEdit: Handle '*' wildcard in validateMimeType. (77168)

Client Side Media

• Use image.copyMemory() for batch thumbnail generation. (76979)

Accessibility

Components

• ValidatedRangeControl: Fix aria-label rendered as [object Object]. (77042)

Performance

Post Editor

• Autocompleters: Move and improve links search. (76995)

Client Side Media

• Add performance metrics for client-side media processing. (76792)

Experiments

Post Editor

• Add revisions panel to templates, template parts and patterns. (77008)

Documentation

• Add missing documentation in collaboration.php. (77173)
• Autocomplete: Clarify 'isDebounced' setting limitation. (77062)
• Docs: Add README for DatePicker and TimePicker Components. (70365)
• Editor: Fix 'selectedNote' action JSDoc. (77080)
• Eslint: Suggest alternative in no-setting-ds-tokens rule. (77154)
• Fix: A sentence has no ending punctuation in README.md file. (77027)
• HStack, VStack: Mark as not recommended for use. (77041)
• Improve CSS setup instructions in package readmes. (76975)
• Storybook: Enable theming toolbar for wp-components. (77038)
• Storybook: Fix "Default" cursor option in theming toolbar. (77037)
• UI/Tooltip: Add usage guidelines documentation. (77158)
• UI: Use Link component in details story example. (76997)
• iAPI Docs: Fix typos, code errors, and inaccuracies in the documentation. (76636)
• ui/docs: Add additional global css setup instructions. (77228)

Code Quality

• TypeScript: Migrate a11y package to TS. (70680)

Components

• Add .scss files to CSS module linting. (77140)
• Block Directory: Use --wpds-cursor-control design token. (77330)
• Autocomplete: Refactor useAutocomplete to use useReducer. (77020)
• BoxControl: Remove unused state for icon side. (77143)
• Build Tools: Update TypeScript to 6.0.2. (77010)
• Button: Remove obsolete Safari + VoiceOver workaround. (77107)
• Button: Remove unused Storybook stylesheet. (77031)
• Dataviews: Remove unneeded ref callbacks. (77179)
• Extract the autocomplete matcher into a separate function. (76957)
• FormTokenField: Remove unnecessary styles. (77263)
• Textarea: Remove unnecessary styles. (77221)
• Theme: Rename typography tokens to use "typography" prefix. (76912)
• Update React function names for better ESLint detection. (77148)
• i18n: Make sprintf return FormattedText for type-safe createInterpolateElement. (76974)
• ui/Card: Remove redundant margin reset from Card.Title. (77187)
• ui/VisuallyHidden: Standardize composition pattern. (77190)

Block Editor

• Block Editor store: Refactor controlledInnerBlocks to Set. (77094)
• Global Styles: Move pseudo-state slicing logic into useStyle hook. (77104)
• BlockMover: Remove unused disabled button props. (76993)
• Extract getElementCSSRules from useBlockProps. (77327)
• updateBlockListSettings: Convert state to Map, do all updates in one action. (46392)

Post Editor

• BlockStyleVariationOverridesWithConfig: Change name and fix lint errors. (77130)
• ESLint plugin: Disable jsx-a11y/heading-has-content. (77073)
• Edit Post: Fix warning in 'useMetaBoxInitialization' hook. (77311)
• RTC: Store metaboxes RTC-compatible flag on location entries. (77361)
• Revisions: Simplify fetching. (77086)

Block Library

• Tabs: Simplify anchor handling. (77189)
• TypeScript: Migrate packages/list-reusable-blocks package to TypeScript. (70518)
• TypeScript: Migrate viewport package. (71118)

Data Layer

• Remove remaining esModuleInterop usage. (77095)
• Blocks: Convert blocks package to TypeScript. (76312)

Guidelines

• Remove jsxRuntime pragma. (77255)

Icons

• Override WP_Icons_Registry singleton with Gutenberg icons registry. (76455)

Annotations

• TypeScript: Migrate annotations package to TS. (70602)

Tools

Testing

• Autocomplete: Fix flaky end-to-end tests. (77322)
• E2E Tests: Ensure artifacts generate correctly and remove unnecessary artifacts. (77093)
• Fix page.waitForFunction call arguments in e2e tests. (77300)
• Guidelines: Add end-to-end tests based on the Settings page testing instructions. (77192)
• Remove 'Home' and 'End' key usage from Navigation tests. (77102)
• Restore original template registration tests alongside activation variants. (77068)
• Tests: Auto-fix some new 'eslint-plugin-playwright' warnings. (77314)
• Tests: Fix workspace test scripts (wp-env not found, argument forwarding). (77055), (77083)

Build Tooling

• Add iteration issue template. (77113)
• Build: Fix glob ignore patterns in dot-prefixed directories. (75114)
• Convert directories in test/ to workspaces. (74684)
• Env: Fix loopback requests when running on non-default ports. (77057)
• Fix lint-staged API documentation path. (77203)
• Resolve package-lock.json inconsistency for @​babel/eslint-parser. (77256)
• Storybook: Fix end-to-end subpath exports and add CI build smoke test. (77034)
• Refactor: Migrate bin/api-docs to tools/api-docs as workspace @wordpress/api-docs-generator. (77019)
• Upgrade ESLint to v10. (76654)

Data Layer

• Fix pre-existing lint errors across the codebase. (77002)
• Remove unused catch block variables across the codebase. (76969)

First-time contributors

The following PRs were merged by first-time contributors:

• @​DarkMatter-999: Fix numeric value clearing in preset input controls. (77139)
• @​dkotter: Update the AI plugin settings page slug we link to after activation. (77336)
• @​dpmehta: Search block: Match behavior of global styling for border and color with local styling (inspector controls) to remove inconsistency. (77060)
• @​mehrazmorshed: Fix: A sentence has no ending punctuation in README.md file. (77027)
• @​prachigarg19: Fix duotone filter not applying on style variation switch. (77229)
• @​samvaidya: Image block: Validate attachment ID exists before treating image as local. (77178)
• @​sandipr942: Added missing documentation in collaboration.php. (77173)
• @​superdav42: Connectors: Don't clobber third-party custom render in registerDefaultConnectors. (77116)

Contributors

The following contributors merged PRs in this release:

@​adamsilverstein @​Adi-ty @​aduth @​alecgeatches @​andrewserong @​annezazu @​aswasif007 @​BugReportOnWeb @​CGastrell @​chriszarate @​ciampo @​coderGtm @​DAreRodz @​DarkMatter-999 @​dinhtungdu @​dkotter @​dpmehta @​ellatrix @​gziolo @​hbhalodia @​iamchughmayank @​Infinite-Null @​ingeniumed @​jameskoster @​jeryj @​jorgefilipecosta @​jsnajdr @​kushagra-goyal-14 @​madhusudhand @​MaggieCabrera @​Mamaduka @​manzoorwanijk @​mehrazmorshed @​mirka @​nerrad @​ntsekouras @​oandregal @​prachigarg19 @​R1shabh-Gupta @​ramonjd @​samvaidya @​sandipr942 @​scruffian @​shail-mehta @​Shekhar0109 @​shrivastavanolo @​superdav42 @​Swanand01 @​t-hamano @​talldan @​tyxla @​USERSATOSHI @​yashjawale @​yogeshbhutkar

v22.22.0

Compare Source

v22.21.0

Compare Source

Enhancements

• Disabled import/no-unresolved, import/default, and import/named checks for TypeScript files when TypeScript is installed, since these issues are already checked by TypeScript.
• Improved resolution behavior to support modern package export semantics by updating default import resolver to eslint-import-resolver-typescript, including for non-TypeScript files.

v22.20.0

Compare Source

v22.19.1

Compare Source

v22.19.0

Compare Source

v22.18.0

Compare Source

v22.17.0

Compare Source

v22.16.0

Compare Source

v22.15.0

Compare Source

v22.14.0

Compare Source

v22.13.0

Compare Source

Enhancements

• Added stricter ESLint checks for translator comments.
• Supports unnamed (%s, %d, %f), positional (%1$s, etc.) and named placeholders.
• Flags missing and extra/outdated placeholders.

v22.12.0

Compare Source

v22.11.0

Compare Source

v22.10.0

Compare Source

v22.9.0

Compare Source

v22.8.0

Compare Source

v22.7.0

Compare Source

v22.6.0

Compare Source

v22.5.1

Compare Source

v22.5.0

Compare Source

v22.4.0

Compare Source

v22.3.0

Compare Source

v22.2.0

Compare Source

v22.1.1

Compare Source

v22.1.0

Compare Source

v22.0.0

Compare Source

Breaking Changes

• The minimum required TypeScript version changed to 5 (#​67461)

v21.6.0

Compare Source

v21.5.0

Compare Source

v21.4.0

Compare Source

v21.3.0

Compare Source

v21.2.0

Compare Source

v21.1.2

Compare Source

v21.1.1: 21.1.1

Compare Source

Changelog

Bug Fixes

Media

• Media library modal: Fix plugin incompatibilities with MediaUpload filter. (70648)

Contributors

The following contributors merged PRs in this release:

@​talldan

v21.1.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​wordpress/​eslint-plugin@​25.4.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report