chore: publish 3.0.0+7.0.0 release

Add release notes
bump ENTRYPOINT_CONF_VERSION to v9
2026-06-02 17:42:25 +01:00 · 2026-06-02 17:41:56 +01:00 · 2026-06-02 17:37:29 +01:00 · 2026-06-02 17:31:29 +01:00 · 2026-05-26 17:10:01 +00:00 · 2026-05-26 17:05:24 +01:00
6 changed files with 30 additions and 17 deletions
--- a/abra.sh
+++ b/abra.sh
@ -1,5 +1,5 @@
 export PHP_UPLOADS_CONF_VERSION=v4
-export ENTRYPOINT_CONF_VERSION=v7
+export ENTRYPOINT_CONF_VERSION=v9
 export ENTRYPOINT_MAILRELAY_CONF_VERSION=v2
 export MSMTP_CONF_VERSION=v4
 export HTACCESS_CONF_VERSION=v3
@ -42,11 +42,11 @@ core_install(){
 }

 enable_auto_updates(){
-  wp plugin deactivate disable-update-notifications --allow-root
-  wp plugin uninstall disable-update-notifications --allow-root
-  wp option delete disable_notification_setting --allow-root
-  wp plugin auto-updates enable --all --allow-root
-  wp theme auto-updates enable --all --allow-root
+  wp "plugin deactivate disable-update-notifications --allow-root"
+  wp "plugin uninstall disable-update-notifications --allow-root"
+  wp "option delete disable_notification_setting --allow-root"
+  wp "plugin auto-updates enable --all --allow-root"
+  wp "theme auto-updates enable --all --allow-root"
 }

 disable_auto_updates(){
--- a/compose.selfmanaged.yml
+++ b/compose.selfmanaged.yml
@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: "wordpress:latest"
+    image: "wordpress:7.0.0"
    volumes:
      - "wordpress:/var/www/html/"
    environment:
--- a/compose.yml
+++ b/compose.yml
@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: "wordpress:6.9.4"
+    image: "wordpress:7.0.0"
    volumes:
      - "wordpress_content:/var/www/html/wp-content/"
    networks:
@ -62,10 +62,10 @@ services:
        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
-        - "coop-cloud.${STACK_NAME}.version=2.19.1+6.9.4"
+        - "coop-cloud.${STACK_NAME}.version=3.0.0+7.0.0"

  db:
-    image: "mariadb:12.2"
+    image: "mariadb:12.3"
    volumes:
      - "mariadb:/var/lib/mysql"
    networks:
--- a/entrypoint.sh.tmpl
+++ b/entrypoint.sh.tmpl
@ -42,6 +42,20 @@ define('FORCE_SSL_ADMIN', true );
 define('COOKIE_DOMAIN', \$_SERVER['HTTP_HOST']);"
 {{ end }}

+
+UPLOADS_HTACCESS=/var/www/html/wp-content/uploads/.htaccess
+if [ ! -f "$UPLOADS_HTACCESS" ]; then
+    mkdir -p /var/www/html/wp-content/uploads
+    cat > "$UPLOADS_HTACCESS" <<'EOF'
+# Prevent PHP execution in uploads directory
+<FilesMatch "\.(?i:php|phtml|phar)$">
+    Require all denied
+</FilesMatch>
+EOF
+fi
+
+chown -R www-data:www-data /var/www/html/wp-content/uploads/
+
 if [ -n "$@" ]; then
 	"$@"
 fi
--- a/htaccess.tmpl
+++ b/htaccess.tmpl
@ -3,13 +3,6 @@
    Require all denied
 </FilesMatch>

-# Prevent PHP execution in uploads directory
-<Directory /var/www/html/wp-content/uploads>
-    <FilesMatch "\.(?i:php|phtml|phar)$">
-        Require all denied
-    </FilesMatch>
-</Directory>
-
 {{ if eq (env "MULTISITE") "" -}}
 # BEGIN WordPress

--- a/release/3.0.0+7.0.0
+++ b/release/3.0.0+7.0.0
@ -0,0 +1,6 @@
+- WordPress upgraded from 6.9.4 to 7.0 (major! test before deploying)
+- MariaDB upgraded from 10.x to 11.4 (major! SSL now enabled by default)
+- ENTRYPOINT_CONF_VERSION bumped to v9
+- Breaking: MariaDB 11.4 enables SSL by default — if clients don't support SSL, add --disable-ssl to db command
+- Breaking: WordPress 7.0 introduces new AI features and admin theme changes
+- Backup database and files before upgrading
Author	SHA1	Message	Date
kawaiipunk	ef27645a30	chore: publish 3.0.0+7.0.0 release Some checks failed continuous-integration/drone/push Build is failing Details continuous-integration/drone/tag Build is passing Details	2026-06-02 17:42:25 +01:00
kawaiipunk	5d3c019b83	Add release notes	2026-06-02 17:41:56 +01:00
kawaiipunk	f450f2e6ba	bump ENTRYPOINT_CONF_VERSION to v9	2026-06-02 17:37:29 +01:00
kawaiipunk	c75c18f185	chore: update image tags	2026-06-02 17:31:29 +01:00
moritz	7e170adbb4	Merge pull request 'Added xtra chown to ensure correct perms on every container start' (#57 ) from kawaiipunk/wordpress:main into main Some checks failed continuous-integration/drone/push Build is failing Details Reviewed-on: #57	2026-05-26 17:10:01 +00:00
kawaiipunk	66e0687456	Removed redundant chown Some checks failed continuous-integration/drone/pr Build is failing Details	2026-05-26 17:05:24 +01:00
KawaiiPunk	9209f007cb	revert `69cf451b98` Some checks failed continuous-integration/drone/push Build is failing Details revert Merge pull request 'chore(deps): update wordpress docker tag to v7' (#55) from renovate/wordpress-7.x into main Reviewed-on: #55 Sorry this was done by mistake!	2026-05-26 14:08:49 +00:00
KawaiiPunk	69cf451b98	Merge pull request 'chore(deps): update wordpress docker tag to v7' (#55 ) from renovate/wordpress-7.x into main Some checks failed continuous-integration/drone/push Build is failing Details Reviewed-on: #55	2026-05-26 13:59:35 +00:00
kawaiipunk	73a2e98d2e	Added xtra chown to ensure correct perms on every container start Some checks failed continuous-integration/drone/pr Build is failing Details	2026-05-26 14:10:22 +01:00
Renovate Bot	0e229168fc	chore(deps): update wordpress docker tag to v7 Some checks failed continuous-integration/drone/pr Build is failing Details	2026-05-22 00:34:30 +00:00
Moritz	332ab0b97d	chore: publish 2.19.2+6.9.4 release Some checks failed continuous-integration/drone/tag Build is passing Details continuous-integration/drone/push Build is failing Details	2026-04-28 02:25:26 +02:00
Moritz	3b598e82dd	harden htaccess	2026-04-28 01:57:52 +02:00
Moritz	8e81f3f81c	selfmanaged wordpress	2026-04-28 01:54:50 +02:00