All notable changes to the WordPress Operations Runbook template.
- Added a
Series reviewissue form so quarterly and pre-release cross-document alignment checks can be tracked explicitly. - Added a repo-local generated-artifact smoke validator and a dedicated
Validate Artifactsworkflow for PDF, EPUB, and DOCX outputs. - Added a Playwright-based PDF visual smoke test and dedicated workflow with committed baselines for critical page regions.
- Added a cross-format parity check so a small set of canonical phrases must remain present in the Markdown source and generated PDF, EPUB, and DOCX outputs.
- Corrected the example WordPress version placeholder to reflect WordPress 6.9.1 as the current stable release.
- Refactored the document-generation pipeline into explicit build, validate, and publish jobs so generated artifacts are validated before the bot commit step runs.
- Updated GitHub Action pins in the PDF visual validation workflow to Node 24-capable major versions to avoid runner deprecation warnings.
- Set a short PDF running header title so the customizable subtitle no longer appears in page headers.
- Hardened GitHub release automation and metrics validation by pinning action references to immutable commits.
- Documented the maintainer edit, verification, artifact-generation, release, and cross-document review workflow for this repository and its companion document series.
- Standardized license metadata on the canonical Creative Commons legal text and normalized in-repo references to
CC-BY-SA-4.0. - Added explicit repository health files (
CONTRIBUTING.md,CODE_OF_CONDUCT.md,SUPPORT.md,.gitattributes) and linked them from the README so the repo no longer relies on inherited defaults for contributor guidance. - Added a shared
Project Healthsection in the README and aligned contributor and AI-assisted editorial copy with the rest of the security-document series. - Bumped the canonical runbook frontmatter date/version to
March 21, 2026/3.1for the synchronized minor release.
- Reworked backup, restore, rollback, and deployment procedures to remove unsafe raw-datadir deletion, normalize backup paths and artifact formats, require known-good filesystem artifacts for rollback, and keep live plugin/theme updates out of deployment workflows.
- Expanded authentication guidance to cover privileged roles beyond single-site administrators, added a dedicated action-gated reauthentication / sudo-mode procedure, and clarified break-glass and application-password handling during recovery and incident response.
- Updated WordPress and PHP environment placeholders for the WordPress 7.0 release cycle, kept the PHP baseline at
8.3+with8.4staging validation guidance, clarified self-managed versus managed-hosting assumptions, and aligned glossary/operator terminology aroundDashboard,WP-Cron,Multisite, and related security terms. - Corrected WP-CLI post-status and term-deletion examples, removed invalid or misleading SMTP and
wp-config.phpexamples, fixed PHP package guidance, normalized Dashboard casing, and replaced hard-coded table-prefix examples where practical. - Added centered page numbering to
.github/pandoc/reference.docxso DOCX-derived PDF output includes footer page numbers through the shared generation pipeline. - Replaced the repo-local document-generation workflow with a caller to the shared reusable workflow in
ai-assisted-docs, keeping the primary markdown source and generated artifact names unchanged.
- Added missing inline
# WARNING:comments before 10 destructive WP-CLI commands across sections 4, 6, 8, 9, 10, and 11. Commands fixed:wp db import,wp search-replace(4 instances),wp post delete --force,wp comment delete --force,wp rewrite flush,wp plugin delete,wp user delete,wp db reset --yes,wp option update home/siteurl(2 instances). Caught by BDD cycle test againstwordpress-runbook-opsscenarios in ai-assisted-docs.
CHANGELOG.md— this file.docs/current-metrics.md— architectural fact counts with verification commands.
- Full document revision: restructured all 11 sections, standardized procedure schema (Metadata, Purpose, Prerequisites, Commands, Expected Output, Rollback, Verification, Escalate If), added lifecycle metadata tracking in Appendix E.
- Fixed all WP-CLI command validity issues identified in Phase 1 audit (nonexistent flags, incorrect subcommands).
- Added Emergency Quick-Reference Card.
- Added incident response lifecycle tracking (Appendix E).
- Added
[CUSTOMIZE: ...]placeholder format throughout. - Added plugin-dependent command annotation pattern.
- Generated DOCX, EPUB, and PDF outputs from Markdown source.
- Initial public release with 11 sections and 5 appendices.