CVS commit: pkgsrc/www/php-ja-wordpress

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Nov  4 15:54:56 UTC 2026

Modified Files:
        pkgsrc/www/php-ja-wordpress: Makefile PLIST distinfo

Log Message:
www/php-ja-wordpress: update to 7.0.8

7.0.8 (2026-10-28)

* An Editor+ stored cross-site scripting (XSS) issue in the personal data
  erasure requests screen reported by Anthropic

* A Contributor+ stored cross-site scripting (XSS) issue via whitespace in
  block delimiters reported by Rafie Muhammad (Awesome Motive, Inc.)

* An information disclosure issue exposing unpublished Customizer changes to
  unauthenticated visitors reported by Antonio Lorensius Silaban

* A hardening fix for unescaped usernames on the multisite Network Users
  screens reported by Anthropic

* A permissions issue letting custom roles that moderate comments read, edit
  and delete notes on posts they can’t edit reported by Ramon of the
  WordPress Security Team

* A race condition during core updates that could lead to remote code
  execution reported by Umut Bayram

* A Contributor+ issue in Interactivity API bindings that lets object
  elements load admin pages reported by rekter0

* A Contributor+ stored cross-site scripting (XSS) issue in Customizer
  selective refresh reported by Rafie Muhammad (Awesome Motive, Inc.)

* A Contributor+ stored cross-site scripting (XSS) issue via javascript:
  URLs in Interactivity API bindings reported by Luis Herranz and multiple
  independent reporters

* A Contributor+ stored cross-site scripting (XSS) issue in the labels of
  the Comments Pagination and Post Navigation Link blocks reported by Alex
  Concha of the WordPress Security Team

* An issue allowing post content to shadow Script Module data with a
  matching element ID reported by Weston Ruter

* A cross-site scripting (XSS) issue in the Categories block via format
  string injection reported by Ben Bidner

* A hardening fix for unsafe preg_replace() replacements in the Image and
  Playlist blocks reported by Ben Bidner of the WordPress Security Team

* A Contributor+ stored cross-site scripting (XSS) issue via Interactivity
  API event handler bindings reported by Jon Surrell

* An Author+ stored cross-site scripting (XSS) issue in the Interactivity
  Router via uploaded text files reported by Anas cherni

* A Contributor+ stored cross-site scripting (XSS) issue via prototype
  pollution in Interactivity API context namespaces reported by rekter0

* Contributor+ stored cross-site scripting (XSS) and denial of service
  issues in Interactivity API bindings reported by rekter0, Marcel Karlsson
  (whoismarcel), Jon Surrell and Alex Concha of the WordPress Security Team

* An update to the bundled root certificates due to the eMudhra revocation.


To generate a diff of this commit:
cvs rdiff -u -r1.40 -r1.41 pkgsrc/www/php-ja-wordpress/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/php-ja-wordpress/PLIST
cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/php-ja-wordpress/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/php-ja-wordpress/Makefile
diff -u pkgsrc/www/php-ja-wordpress/Makefile:1.40 pkgsrc/www/php-ja-wordpress/Makefile:1.41
--- pkgsrc/www/php-ja-wordpress/Makefile:1.40   Mon Oct 12 21:14:17 2026
+++ pkgsrc/www/php-ja-wordpress/Makefile        Wed Nov  4 15:54:56 2026
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.40 2026/10/12 21:14:17 wiz Exp $
+# $NetBSD: Makefile,v 1.41 2026/11/04 15:54:56 taca Exp $
 #
 # when updating this, please run 'PKG_DEVELOPER=1 make upload-distfiles'
 
 DISTNAME=              wordpress-${VERSION}-ja
 PKGNAME=               ${PHP_PKG_PREFIX}-ja-wordpress-${VERSION}
-VERSION=               7.0.7
+VERSION=               7.0.8
 CATEGORIES=            www
 MASTER_SITES=          https://ja.wordpress.org/
 

Index: pkgsrc/www/php-ja-wordpress/PLIST
diff -u pkgsrc/www/php-ja-wordpress/PLIST:1.20 pkgsrc/www/php-ja-wordpress/PLIST:1.21
--- pkgsrc/www/php-ja-wordpress/PLIST:1.20      Wed Aug 12 15:18:27 2026
+++ pkgsrc/www/php-ja-wordpress/PLIST   Wed Nov  4 15:54:56 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.20 2026/08/12 15:18:27 taca Exp $
+@comment $NetBSD: PLIST,v 1.21 2026/11/04 15:54:56 taca Exp $
 share/doc/ja-wordpress/license.txt
 share/doc/ja-wordpress/readme.html
 share/examples/ja-wordpress/ja-wordpress.conf
@@ -1130,144 +1130,6 @@ share/ja-wordpress/wp-content/themes/twe
 share/ja-wordpress/wp-content/themes/twentytwentythree/templates/search.html
 share/ja-wordpress/wp-content/themes/twentytwentythree/templates/single.html
 share/ja-wordpress/wp-content/themes/twentytwentythree/theme.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Italic.otf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Italic.ttf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Roman.otf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Roman.ttf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/dm-sans/DMSans-Bold.ttf
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/dm-sans/DMSans-BoldItalic.ttf
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/dm-sans/DMSans-Italic.ttf
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/dm-sans/DMSans-Regular.ttf
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/dm-sans/LICENSE.txt
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexMono-Bold.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexMono-BoldItalic.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexMono-Text.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexMono-TextItalic.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexSans-ExtraLight.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexSans-ExtraLightItalic.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexSans-Light.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/IBMPlexSans-LightItalic.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/ibm-plex/LICENSE.txt
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/inter/Inter.ttf
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/inter/LICENSE.txt
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/LICENSE.md
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/SourceSerif4Variable-Italic.otf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/SourceSerif4Variable-Italic.ttf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/SourceSerif4Variable-Roman.otf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/SourceSerif4Variable-Roman.ttf.woff2
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/bird-on-black.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/bird-on-gray.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/bird-on-green.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/bird-on-salmon.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/divider-black.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/divider-white.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/ducks.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-gray-a.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-gray-b.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-gray-c.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-salmon.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-transparent-a.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-transparent-b.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-transparent-c.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/flight-path-on-transparent-d.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/icon-binoculars.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/images/icon-bird.jpg
-share/ja-wordpress/wp-content/themes/twentytwentytwo/assets/videos/birds.mp4
-share/ja-wordpress/wp-content/themes/twentytwentytwo/contributing.txt
-share/ja-wordpress/wp-content/themes/twentytwentytwo/functions.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/block-patterns.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-about-title-logo.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-blog.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-default.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-logo.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-navigation-copyright.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-navigation.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-query-images-title-citation.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-query-title-citation.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-social-copyright.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/footer-title-tagline-social.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-divider-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-divider-light.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-featured-posts.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-image-with-caption.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-large-list-names.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-layered-images-with-duotone.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-list-events.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-pricing-table.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-subscribe.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-two-images-text.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-video-header-details.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-video-trailer.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/general-wide-image-intro-buttons.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-centered-logo-black-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-centered-logo.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-centered-title-navigation-social.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-default.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-image-background-overlay.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-image-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-large-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-logo-navigation-gray-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-logo-navigation-offset-tagline.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-logo-navigation-social-black-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-small-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-stacked.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-text-only-green-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-text-only-salmon-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-text-only-with-tagline-black-background.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-title-and-button.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-title-navigation-social.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/header-with-tagline.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/hidden-404.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/hidden-bird.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/hidden-heading-and-bird.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-large-image-and-buttons.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-links-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-links.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-media-left.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-media-right.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-simple-dark.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-about-solid-color.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-layout-image-and-text.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-layout-image-text-and-video.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-layout-two-columns.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-sidebar-blog-posts-right.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-sidebar-blog-posts.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-sidebar-grid-posts.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/page-sidebar-poster.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-default.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-grid.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-image-grid.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-irregular-grid.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-large-titles.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-simple-blog.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/inc/patterns/query-text-grid.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/index.php
-share/ja-wordpress/wp-content/themes/twentytwentytwo/package-lock.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/package.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/parts/footer.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/parts/header-large-dark.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/parts/header-small-dark.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/parts/header.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/readme.txt
-share/ja-wordpress/wp-content/themes/twentytwentytwo/screenshot.png
-share/ja-wordpress/wp-content/themes/twentytwentytwo/style.css
-share/ja-wordpress/wp-content/themes/twentytwentytwo/style.min.css
-share/ja-wordpress/wp-content/themes/twentytwentytwo/styles/blue.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/styles/pink.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/styles/swiss.json
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/404.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/archive.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/blank.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/home.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/index.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/page-large-header.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/page-no-separators.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/page.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/search.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/single-no-separators.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/templates/single.html
-share/ja-wordpress/wp-content/themes/twentytwentytwo/theme.json
 share/ja-wordpress/wp-cron.php
 share/ja-wordpress/wp-includes/ID3/getid3.lib.php
 share/ja-wordpress/wp-includes/ID3/getid3.php

Index: pkgsrc/www/php-ja-wordpress/distinfo
diff -u pkgsrc/www/php-ja-wordpress/distinfo:1.35 pkgsrc/www/php-ja-wordpress/distinfo:1.36
--- pkgsrc/www/php-ja-wordpress/distinfo:1.35   Wed Oct  7 15:52:13 2026
+++ pkgsrc/www/php-ja-wordpress/distinfo        Wed Nov  4 15:54:56 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.35 2026/10/07 15:52:13 taca Exp $
+$NetBSD: distinfo,v 1.36 2026/11/04 15:54:56 taca Exp $
 
-BLAKE2s (wordpress-7.0.7-ja.tar.gz) = f0821874866d05099363f01ea64c62d6d214351a5183e79452405f2ba06d0b49
-SHA512 (wordpress-7.0.7-ja.tar.gz) = 8e78a984eb20dbece1dec2b6b2d7aa0f85b17d72e399e1551b0c87cc6c0db305f0b9d8b8edd2a7786b91f3ec6dc953f413012fb33d9b237639b2857dede6cabb
-Size (wordpress-7.0.7-ja.tar.gz) = 36920800 bytes
+BLAKE2s (wordpress-7.0.8-ja.tar.gz) = 7bc08b11503e85a6d3c368da3108d7a16b6945fbbe687454250edef5ee7cf21e
+SHA512 (wordpress-7.0.8-ja.tar.gz) = 8fb1db927994636b2d2fdb049bb796e26b18522f0d5284c89dc2f086180a699b72a2e21ffbfddb924958f249c9270242bf26852d99589ef007b63aab1eadfecc
+Size (wordpress-7.0.8-ja.tar.gz) = 30807933 bytes