2026-10-30 – Make WordPress Core

One major change landed this week: the notification repository is now scoped per user, laying the groundwork for the REST API The REST API is an acronym for the RESTful Application Program Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front end of an application (think “phone app” or “website”) can communicate with the data store (think “database” or “file system”)
https://developer.wordpress.org/rest-api/. In addition, we merged a README note and four Dependabot bumps. A batch of community PRs (fixes, tooling, and PHP The web scripting language in which WordPress is primarily architected. WordPress requires PHP 7.4 or higher test-matrix updates) is open and waiting for review.

Highlights

• Notification repository is now user-scoped (#626, elphizu). The Notification_Repository interface was rewritten so every lookup takes a user_id. find_by_id() now finds a message by its message ID for a specific user, and new find_by_user() and count_by_user() methods support filtering by status, channel, context, after/before (for polling), expiry and pagination. The wpdb implementation was updated to match, the legacy interface-notification.php was removed, and new PHPUnit coverage was added. Users can now only reach their own notifications through the repository, and the REST layer gets what it needs for listing and totals (X-WP-Total).
• README note about the demo code plugin A plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party. (#648, jonathanbossenger), pointing contributors to the demo plugin.

Exploring a design for Feature Notifications

On 2026-10-29, @poligilad published a post Exploring a design for Feature Notifications. Contributors are encouraged to read the post and share their feedback in the comments.

Merged pull requests

Fixes

• #626 fix: make notification repository user-scoped (elphizu)

Docs

• #648 Adding a note to the readme about the demo code plugin (jonathanbossenger)

Dependency updates

All patch A special text file that describes changes to code, by identifying the files and lines which are added, removed, and altered. It may also be referred to as a diff. A patch can be applied to a codebase for testing.-level npm bumps from Dependabot, merged 2026-10-23:

Still open from Dependabot: #647 eslint 10.4.0 → 10.13.0, and #654 fast-uri 3.1.8 → 3.1.9.

In progress

Opened this week

• #649 add modern php versions to testsuite (masteradhoc)
• #652 fix(channel-registry): guard title key with array_key_exists() like other optional args (hmbashar)
• #653 fix(base-image): guard json_unserialize() against invalid A resolution on the bug tracker (and generally common in software development, sometimes also notabug) that indicates the ticket is not a bug, is a support request, or is generally invalid. JSON JSON, or JavaScript Object Notation, is a minimal, readable format for structuring data. It is used primarily to transmit data between a server and web application, as an alternative to XML. input (hmbashar)

Open and updated this week (none are drafts)

• #644 REST: Add missing text domain and fix typos in REST API controller strings (devmuhib009)
• #637 fix(database): add schema v2 tables (faisalahammad)
• #633 fix: convert notification store to thunks (KhushalSainS)
• #632 Tooling: Fix the test:php, php-install, lint:css and docGen npm scripts (huzaifaalmesbah)
• #628 GitHub GitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged by the repository owner. https://github.com/: Add a Props Bot workflow (huzaifaalmesbah)
• #627 Model: Handle dates in UTC in Serde and the message factory (huzaifaalmesbah)
• #625 GitHub: Update the pull request template (huzaifaalmesbah)
• #624 Framework: Store one Factory instance per subclass (huzaifaalmesbah)
• #552 Types: add return type declaration to jsonSerialize methods (SirLouen)

Closed without merging

• #383 Update wp-env and add useful script commands (Sephsekla), a 2023 draft
• #568 npm: bump form-data from 4.0.5 to 4.0.6 (Dependabot)

#feature-notifications