wp-updates

Shared, self-hosted update channel for the wordpress org's WordPress projects. It is the counterpart to ee-extensions/foh-updates: a plain, public repo that hosts the update manifests and release payloads that WordPress installs pull from.

What lives here

Each managed project gets:

• {slug}.json — the PUC-compatible JSON manifest (at minimum version and download_url; every other PUC field is optional and enriches the Updates screen / "View details" modal).
• {slug}/ — a directory for that project's release assets (zips, icons, banners, screenshots) referenced by its manifest.

These files are not hand-edited: each project's release CI publishes its manifest and zip here on release.

manifest-updater is the first resident (manifest-updater.json + manifest-updater/). The channel can host many projects side by side, exactly like ee-extensions/foh-updates does.

How it's consumed

Projects opt in through their WordPress Update URI: header, pointing at this repo's raw manifest URL with a #manifest-updater.json fragment, e.g.:

Update URI: https://gitea.mulligan.casa/wordpress/wp-updates/raw/branch/main/manifest-updater.json#manifest-updater.json

The network-activated manifest-updater plugin reads that header, fetches the manifest from here, and surfaces the update through WordPress's native Plugins / Updates screens.

Must remain public

Installed sites fetch manifests and release payloads over unauthenticated raw/branch/main/... URLs. This repository must stay public — making it private breaks self-updates for every project that points its Update URI: here.