Changes
- Update the offline builder's transitive
@xmldom/xmldomdependency to 0.8.15, addressing GHSA-6gmq-8vp8-gcm6 / Dependabot alert #11. - Harden imports and undo, category ownership and settings, background reconciliation, offline sync, and progress/reporting boundaries.
- Improve bulk-edit request ownership, editor timeout recovery, accessibility, and translation/catalog consistency.
- Refresh codebase navigation, documentation, and regression coverage.
Validation
- Full PHP regression: 2,506 tests, 61,791 assertions, 9 expected skips.
- Full browser inventory: 726 tests; 725 passed across the full run and isolated reruns, with one expected opt-in benchmark skip. Two initial Local navigation/admin-readiness timeouts passed unchanged in isolated reruns after concurrent Local testing ended.
- Targeted PHP checks: 142 tests / 1,667 assertions covering offline sync, import undo, category settings, and release tooling.
- Offline builder: clean dependency installation, 8 tests passed, zero npm audit vulnerabilities. Additional checks confirmed valid XML serialization, rejection of the malicious entity name, and a plist round-trip through the consuming dependency.
- Browser dependency audit: zero vulnerabilities. Changed PHP/JavaScript syntax checks, source/POT freshness, Turkish/German compiled full catalogs, context manifests, and documentation contracts passed.
- The release's tracked tree exactly matches tested dev commit
04c143dc2d38de0ad36c9481cfb6c0e75b82cde3. Packaged runtime assets and development-file exclusions were validated.
Use the attached language-learner-tools-6.7.34.zip for the stable WordPress package.