2.8.3

Changed

• Only allow images that were uploaded by the same user be used when setting the avatar via a REST request (props @dkotter, @justus12337, @faisal-alvi via #317).

Fixed

• Only allow image files to be set as the avatar in REST requests (props @dkotter, @justus12337, @faisal-alvi via #317).

Security

• Bump @10up/cypress-wp-utils from 0.2.0 to 0.4.0, @sentry/node from 6.19.7 to 8.38.0, @wordpress/env from 9.2.0 to 10.11.0, cypress from 13.2.0 to 13.15.2, cypress-mochawesome-reporter from 3.6.0 to 3.8.2, puppeteer-core from 23.3.0 to 23.8.0 (props @dkotter via #319).

---

Full Changelog: 2.8.2...2.8.3
View closed items in the milestone.