Weekly field notes · 2026-08-10

WordPress Trend Report — 2026-08-10

WordPress 7.1 enters Release Candidate phase, introducing client-side media processing and responsive block styles, with final release scheduled for August 19,

Report settings

Weekly Summary

Article Inventory (19 articles)
  1. What’s new in Gutenberg 23.7? (05 August) (Make Core) — Gutenberg 23.7 introduces a renamed “Detach” button for the Gallery block’s dynamic mode, clarifying its function via an explanatory modal.
  2. WordPress 7.1 Release Candidate Phase (Make Core) — WordPress 7.1 has entered the Release Candidate phase, requiring double sign-off by two core committers for all trunk commits until the 7.1 branch is created.
  3. WordPress 7.1 Field Guide (Make Core) — WordPress 7.1 introduces client-side media processing APIs that enable supported image operations to occur in the browser before upload, reducing server load and improving upload performance.
  4. The notify_post_author filter now has the final say on post author notifications (Make Core) — WordPress 7.1 moves the comment approval check before the notify_post_author filter, making the filter’s return value definitive for whether a notification is sent.
  5. Filtering registered abilities with wp_get_abilities() in WordPress 7.1 (Make Core) — WordPress 7.1 adds an optional $args array to wp_get_abilities() for filtering registered abilities by category, namespace, or metadata.
  6. Responsive block styles and configurable viewports in WordPress 7.1 (Make Core) — WordPress 7.1 adds responsive style states for blocks, allowing Tablet and Mobile overrides via Global Styles or individual block attributes.
  7. Pseudo and custom style states in WordPress 7.1 (Make Core) — WordPress 7.1 extends pseudo state styling to all blocks via theme.json and block attributes, allowing hover, focus, active, and responsive nesting.
  8. A unified public exposure flag for Abilities in WordPress 7.1 (Make Core) — WordPress 7.1 introduces a unified public metadata flag for abilities to indicate external availability across REST API, MCP adapters, and AI agents.
  9. Miscellaneous Editor Changes in WordPress 7.1 (Make Core) — The Navigation block in WordPress 7.1 no longer forcefully propagates font-size to child blocks, resolving layout-breaking compounding issues with relative units in deeply nested menus.
  10. Dev Chat Agenda – August 4, 2026 (Make Core) — WordPress Dev Chat is scheduled for Tuesday, August 4, 2026, at 15:00 UTC in the #core channel on Make WordPress Slack.
  11. Defensive Data Design (Make Core) — This post outlines principles for designing WordPress data structures to be safe and secure as AI agents interact more with the platform.
  12. WordPress 7.0.3 release (WordPress.org News) — WordPress 7.0.3 is a security release containing multiple fixes for stored and reflected XSS vulnerabilities, privilege escalation on multisite networks, information disclosure in the Latest Comments block, slug enumeration, and server-side request forgery (SSRF) issues.
  13. WordPress 7.1 Release Candidate 1 (WordPress.org News) — WordPress 7.1 RC1 is available for testing with over 145 updates since Beta 4, including new Icons APIs, configurable speculative loading via environment variables, email notifications for @mentions in Notes, and shareable revision links.
  14. WordPress Speed Optimization Explained Layer by Layer (ACF Blog) — Effective WordPress speed optimization requires measuring real-user field data alongside lab results to identify which specific layer—hosting, database, caching, CDN, or browser—is causing bottlenecks.
  15. Best WordPress Hosting for Agencies (ACF Blog) — Agency hosting must prioritize site isolation, centralized portfolio management, and granular permissions over raw speed to handle multi-client operations efficiently.
  16. WordPress for Enterprise: What It Actually Takes (ACF Blog) — Enterprise WordPress is defined by operational requirements—traffic, security, governance, integrations, and incident response—rather than company size.
  17. ACF 6.8.7 Security Release (ACF Blog) — ACF 6.8.7 patches security vulnerabilities including server-side validation for Image/Gallery fields, HMAC authentication for acf_encrypt/acf_decrypt helpers, and restricted REST API responses for the User field.
  18. WordPress 7.1 RC, 7.0.3 Security Release, Block Runner, New Playground UI and more — Weekend Edition 372 (Gutenberg Times) — WordPress 7.0.3 patches twelve vulnerabilities, including a pre-auth XSS on the login screen and multisite privilege escalation, with backports reaching all supported branches down to 4.7.
  19. What’s new for developers? (August 2026) (WordPress Developer Blog) — WordPress 7.1 is scheduled for release on August 19, coinciding with WordCamp US in Phoenix, and the feature set is locked following RC2.

WordPress 7.1 has entered the Release Candidate phase, with RC1 available for testing and a final release scheduled for August 19, 2026. The feature set is locked following RC2, and the branching process has been delayed to early next week to avoid interfering with GitHub Actions improvements. WordPress 7.1 Release Candidate Phase WordPress 7.1 Release Candidate 1 What’s new for developers? (August 2026)

WordPress 7.1 introduces client-side media processing APIs that enable supported image operations to occur in the browser before upload, reducing server load and improving upload performance. The release also updates REST API endpoints to support image dimension validation, size-aware encoding quality selection, and sideloaded file registration for multiple image sizes. WordPress 7.1 Field Guide

WordPress 7.1 adds responsive style states for blocks, allowing Tablet and Mobile overrides via Global Styles or individual block attributes. These values generate media-query-scoped CSS on the frontend, with non-layout per-instance declarations marked !important to override defaults. Themes can customize breakpoint widths using the top-level settings.viewport, accepting px, em, or rem values. Only valid numeric lengths are accepted; CSS functions and percentages are ignored, and defaults apply if configurations are invalid or missing. Responsive block styles and configurable viewports in WordPress 7.1

WordPress 7.1 extends pseudo state styling to all blocks via theme.json and block attributes, allowing hover, focus, active, and responsive nesting. Custom states are introduced for theme.json-only use on navigation links to style the current menu item using a -current prefix. Developers can disable state editing globally via the block_states_editing_enabled editor setting, which hides related UI controls. Pseudo and custom style states in WordPress 7.1

WordPress 7.0.3 is a security release containing multiple fixes for stored and reflected XSS vulnerabilities, privilege escalation on multisite networks, information disclosure in the Latest Comments block, slug enumeration, and server-side request forgery (SSRF) issues. Immediate updates are recommended for all sites to mitigate these risks, with backports available for branches through 4.7. WordPress 7.0.3 release WordPress 7.1 RC, 7.0.3 Security Release, Block Runner, New Playground UI and more — Weekend Edition 372

WordPress Dev Chat is scheduled for Tuesday, August 4, 2026, at 15:00 UTC in the #core channel on Make WordPress Slack. Dev Chat Agenda – August 4, 2026

Developer Implications

WordPress 7.1 is scheduled for release on August 19, 2026. Test on non-production environments using the Beta Tester plugin, direct download, WP-CLI, or WordPress Playground. The final release is scheduled for August 19, 2026; test on non-production environments using the Beta Tester plugin, direct download, WP-CLI, or WordPress Playground. WordPress 7.1 Release Candidate Phase WordPress 7.1 Release Candidate 1 What’s new for developers? (August 2026)

WordPress 7.1 moves the comment approval check before the notify_post_author filter, making the filter’s return value definitive for whether a notification is sent. The notify_post_author filter now has the final say on post author notifications

WordPress 7.1 adds an optional $args array to wp_get_abilities() for filtering registered abilities by category, namespace, or metadata. Two new filters, wp_get_abilities_item_include and wp_get_abilities_result, allow plugins to modify ability retrieval logic. Filtering registered abilities with wp_get_abilities() in WordPress 7.1

WordPress 7.0.3 patches twelve vulnerabilities, including a pre-auth XSS on the login screen and multisite privilege escalation, with backports reaching all supported branches down to 4.7. Immediate updates are recommended for all sites to mitigate these risks, with backports available for branches through 4.7. WordPress 7.0.3 release WordPress 7.1 RC, 7.0.3 Security Release, Block Runner, New Playground UI and more — Weekend Edition 372

WordPress 7.1 introduces a unified public exposure flag for Abilities to indicate external availability across REST API, MCP adapters, and AI agents. This eliminates the need for redundant channel-specific flags while preserving granular control via null-coalescing precedence where explicit settings override the default. A unified public exposure flag for Abilities in WordPress 7.1

ACF 6.8.7 patches security vulnerabilities including server-side validation for Image/Gallery fields, HMAC authentication for acf_encrypt/acf_decrypt helpers, and restricted REST API responses for the User field. ACF 6.8.7 Security Release

Effective WordPress speed optimization requires measuring real-user field data alongside lab results to identify which specific layer—hosting, database, caching, CDN, or browser—is causing bottlenecks. WordPress Speed Optimization Explained Layer by Layer

Agency hosting must prioritize site isolation, centralized portfolio management, and granular permissions over raw speed to handle multi-client operations efficiently. Best WordPress Hosting for Agencies

Enterprise WordPress is defined by operational requirements—traffic, security, governance, integrations, and incident response—rather than company size. WordPress for Enterprise: What It Actually Takes

This post outlines principles for designing WordPress data structures to be safe and secure as AI agents interact more with the platform. Defensive Data Design

Since Last Report

  • New topic: What’s new in Gutenberg 23.7? (05 August) (Make Core) — Gutenberg 23.7 introduces a renamed “Detach” button for the Gallery block’s dynamic mode, clarifying its function via an explanatory modal.
  • New topic: WordPress 7.1 Release Candidate Phase (Make Core) — WordPress 7.1 has entered the Release Candidate phase, requiring double sign-off by two core committers for all trunk commits until the 7.1 branch is created.
  • New topic: WordPress 7.1 Field Guide (Make Core) — WordPress 7.1 introduces client-side media processing APIs that enable supported image operations to occur in the browser before upload, reducing server load and improving upload performance.

What I'm Watching

The WordPress 7.1 Field Guide is out and provides the best way for folks to get familiar with what is going to be a part of the upcoming 7.1 release. The 7.1 release is targeted for August 19th, which is not too far away!

Check out the #dev-note on: Responsive block styles and configurable viewports in WordPress 7.1.

HumanMade, the enterprise WordPress agency has released Block Runner - "A CLI to turn generated HTML into valid WordPress blocks." This will likely become a critical part of the developer toolset and help alleviate many of the pain points of migrating HTML to blocks at scale.

Thanks for reading and please give us a star on GitHub!

Source Articles

Make Core

WordPress.org News

ACF Blog

Gutenberg Times

WordPress Developer Blog

Build Notes

  • Articles analyzed: 19
  • Sources: Make Core, WordPress.org News, ACF Blog, Gutenberg Times, WordPress Developer Blog
  • Model: openai-compatible/prism-ml/bonsai-27b
  • Tokens: 21543 prompt + 3320 completion
  • Estimated cost: $0.00 (local model)
  • Review time: ~21 minutes