6.2.16

Changes since 6.2.15

• ⬆️ Vanilla WordPress 7.1.4
• PHP:
  • ⭐️ WordPress core can be installed in the wp subdirectory of the web root with wp-content next to it, as in Roots Bedrock. When wp/wp-settings.php exists, the generated configuration points WP_SITEURL to /wp and WP_CONTENT_DIR and WP_CONTENT_URL to the web root's wp-content, so Composer can update core without deleting themes and plugins. The cache-clear action finds core in either place. Projects with core in the web root are unchanged
  • ⭐️ New WP_DISALLOW_FILE_MODS and WP_AUTOMATIC_UPDATER_DISABLED variables set DISALLOW_FILE_MODS and AUTOMATIC_UPDATER_DISABLED, for code deployed as an image that cannot be changed from wp-admin
  • 📜 PHP-FPM now gives running requests up to 20 seconds to finish when the container stops. Set PHP_FPM_PROCESS_CONTROL_TIMEOUT to change the limit, or 0 for the previous behavior
  • 🐞 Fixed the OpenSSH password authentication bypass. Password logins are off by default; update promptly if you set SSHD_PASSWORD_AUTHENTICATION=yes
• ⭐️ Added Valkey 9.1 (9.1.3) as the default Valkey version
• ⬆️ Valkey 9.0.7, 8.1.11, 8.0.12, 7.2.15
• ⬆️ Redis 8.6.8, 8.4.8, 8.2.11, 7.4.12
• ⬆️ Solr 10.1.0
• Adminer:
  • ⬆️ Adminer 6.3.0
  • 📜 The image is now built on the Alpine-based wodby/php 8.4 image with Apache instead of the Debian-based official PHP image. Port 80, the ADMINER_* variables, designs, plugins and PHP limits work as before. If you extend the image, install packages with apk instead of apt
• ⬆️ Node.js 26.13.0, 24.22.2
• 🏔️ Alpine Linux security updates (3.24.4, 3.23.8, 3.22.8 and 3.21.10) for MariaDB, Nginx, Apache, Redis, OpenSMTPD and Memcached