Skip to content

chore: update wordpress version image and files and folders permissions#145

Open
timothygachengo wants to merge 2 commits into
mainfrom
task/update-wordpress-image
Open

chore: update wordpress version image and files and folders permissions#145
timothygachengo wants to merge 2 commits into
mainfrom
task/update-wordpress-image

Conversation

@timothygachengo

Copy link
Copy Markdown
Contributor

Description

Update Wordpress image to fix the Wp2Shell vulnerability

Type of change

  • Bug fix (fix:)
  • New feature (feat:)
  • Breaking change (BREAKING CHANGE:)
  • Refactor / chore (refactor: / chore:)
  • Documentation update (docs:)

Affected package(s)

  • @devgateway/dvz-wp-commons
  • @devgateway/create-wp-customizer
  • @devgateway/upgrade-wp-customizer
  • plugins/wp-react-blocks-plugin
  • plugins/wp-react-custom-api
  • plugins/wp-react-custom-rest-menu
  • Other plugin / theme / Docker (no changeset needed)

Checklist

  • PR title follows Conventional Commits format
  • pnpm build passes locally
  • No hardcoded credentials, internal URLs, client names, or PII introduced
  • Any new dependency has a GPL-2.0-or-later-compatible license (MIT, BSD, Apache-2.0, ISC are all compatible)

Copilot AI review requested due to automatic review settings July 21, 2026 13:16

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the WordPress runtime image used by this project to address the Wp2Shell vulnerability, and adds a step in the container build to adjust WordPress filesystem ownership/permissions.

Changes:

  • Bump the runtime base image from wordpress:6.9.1-fpm-alpine to wordpress:7.0.2-fpm-alpine.
  • Add a build-time chown/chmod step intended to normalize WordPress file and directory permissions.

Comment thread Dockerfile Outdated
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants