WooCommerce’s PHP 8.1 deadline, WordPress SVG icons and more

WordPress 7.2 swaps Dashicons for SVG icons in the admin

WordPress 7.2 replaces the old Dashicons font in the admin bar and admin menu. The icons are now inline SVGs from the @wordpress/icons package. Most plugins need no changes.

Plugins or themes that recolour, hide or replace core icons with ::before must update their CSS. They should also target .ab-icon or the SVG inside div.wp-menu-image. Developers get new tools too. add_menu_page() and register_post_type() accept icon names like core-admin/pin, and old dashicons-* values still work.

Why it matters If you styled the admin for a client, check it on the 7.2 beta now. A missing icon is easy to fix before release day.

I like this change. SVG icons look sharper and load without an extra font file.

Read the full dev note on Make WordPress

Shopify now shows each app’s access and security in the admin

Shopify has added app security details to Settings > Apps. The list shows each app’s latest activity and flags security issues that may need attention. Each app’s page shows its access, its permissions and its activity in one place.

Sensitive permissions get a label. You can also see if an app uses expiring access tokens and enforced IP restrictions.

Why it matters Old apps with wide access are a real risk for a store. Now you can spot them in a minute and remove the ones you no longer use.

I would do this check today. It is a five-minute job with a big payoff.

Read the full update on the Shopify changelog

Google explains how 301 and 302 redirects pass ranking signals

Google’s Gary Illyes and Cherry Prommawin have explained redirects in plain words. A 301 passes all the ranking signals of the old page to the new URL, and the new URL becomes the canonical. A 302 does not pass signals, and Google keeps the old URL in results.

The 308 and 307 codes are the modern versions of 301 and 302. A 307 also keeps form data sent with POST. Google prefers redirects done on the server over JavaScript or meta refresh.

Why it matters A 302 left behind after a site move can hold back your new pages. Check your redirects and use 301 for anything permanent.

This ties in with my guide to canonical URLs and duplicate pages.

Read the full story on Search Engine Journal

Google throttles result links, and rank trackers show odd data

DataForSEO and Serper say Google now limits how fast its “goto” result links can be followed. Throttled links show a “Continue” page with waits of up to 120 seconds. The limit applies to each results page, not to each IP or search.

It was first flagged on 30 October. Some rank data may store Google’s redirect URLs instead of the real site URLs. Google has not confirmed the change.

Why it matters If your tracker shows a sudden drop for some URLs since late October, check the stored URLs first. It may be a data problem, not a ranking problem.

Read the full story on Search Engine Journal

Google’s Gemini Omni 1.2 Flash makes video 30% cheaper

Google has released Gemini Omni 1.2 Flash, a video model on the Gemini API and Vertex AI. It costs $0.07 per second at 720p, which Google says is 30% less than Omni 1.1. Clips can now run from 3 to 15 seconds, up from 10 seconds before.

You draft at 360p or 720p, then upscale to 1080p or 4K. It takes reference images, short motion clips and audio cues, and you can edit over several turns. It is also in Flow, Google Vids and Google Ads, with a SynthID watermark on every clip.

Why it matters A 15-second product clip now costs about a dollar at 720p. That puts video within reach of small shops.

My advice: try it for a product loop on your home page, but keep the file small so the page stays fast.

Read the full announcement on the Google blog

Mistral Studio lets companies build and host AI agents and apps

Mistral has launched Studio, a platform for building AI agents, workflows and apps. Agents get skills, code sandboxes, subagents and hooks. Workflows can mix fixed rules, agent reasoning and human approval steps.

You can deploy to Mistral’s cloud, your own private cloud or your own servers. A Mistral MCP server lets coding agents deploy with one command. It is live at console.mistral.ai, and the page lists no prices.

Why it matters It is one more choice for teams that want AI agents but must keep data on their own servers.

Read the full announcement on Mistral

OpenAI’s GPT-6 Cyber found 81 Firefox bugs, OpenAI says

OpenAI has a new model called GPT-6 Cyber, built from GPT-6 Astra for security work. Only approved “Daybreak Red” users can use it. People need an invitation, identity checks and a physical security key.

OpenAI says the model found at least 81 new Firefox vulnerabilities. The bugs were reported and patched, according to CyberScoop. OpenAI also lists small gains over Astra on security tests.

Why it matters AI now finds bugs faster than ever, so browser and plugin updates will keep coming fast. Keep auto-updates on.

Read the full story on CyberScoop

Node.js 27 alpha brings V8 15.6, and old saved data can break

The Node.js team has listed the V8 changes coming in Node.js 27. V8 jumps from 14.6 to 15.6. New features include Math.sumPrecise() and Iterator.zip.

Some changes can break code. Data made with v8.serialize() or structuredClone() uses a new format that Node.js 26 cannot read. Array.prototype.sort uses a new method, and heap snapshots now include full source code. Machines with 8 GB of memory get a 4 GB heap by default, up from 2 GB.

Why it matters Test Node.js 27 before you upgrade if you share saved data between servers. Treat heap snapshots as private files too. Node.js security releases are also due on Wednesday 11 November.

Read the full post on the Node.js blog

GitHub tests a new pull request Overview page

GitHub has a new Overview page for pull requests in public preview. Click “Try the Overview page” in the pull request header to turn it on. The same menu takes you back.

Merge status and next steps now sit at the top. The new merge box uses less than half the space. You can filter comments by All, Unresolved or Mine, and sort newest first.

Why it matters Busy pull requests get easier to read. “Unresolved” alone will save reviewers a lot of scrolling.

Read the full update on the GitHub changelog

Vercel Schedules replaces Cron Jobs, now in public beta

Vercel has launched Vercel Schedules in public beta on all plans. It runs tasks on a schedule or once, in production, preview or custom environments. You can turn schedules on or off, or run them now, without a redeploy.

A scheduled function becomes private, so only Vercel’s scheduler can call it. Pro and Enterprise pay $5 per million runs. Hobby includes 5,000 runs a month. Old Cron Jobs keep working, and there is a guide to move them.

Why it matters Private scheduled functions close a common gap. Before, anyone who found a cron URL could call it.

My advice: move your cron jobs over once it leaves beta.

Read the full update on the Vercel changelog

YouTube’s big app redesign removes the Subscriptions tab

YouTube is rolling out a redesigned app on Android, and many iPhone users see it too. The Subscriptions tab is gone. Your subscriptions now sit behind a swipe on the new Home tab. The new layout puts Shorts and creating videos first.

9to5Google calls it the biggest change to the app in about ten years. Early reactions are very negative.

Why it matters If you post videos for your business, fewer people may see them through Subscriptions. Shorts and search look more important than ever.

Read the full story on 9to5Google