By Greg Nowak. Last updated 2026-06-28.
WordPress 6.8 gives headless and decoupled teams a cleaner way to handle something that used to be awkward: getting menu data from WordPress into a custom front end.
That is useful. A React, Vue, Next.js, or other front-end application should not need hard-coded navigation, a copied config file, or a one-off endpoint just to render the primary menu. If WordPress is the content system, navigation usually belongs there too.
By Greg Nowak. Last updated 2026-06-27.
Robots.txt used to be a small technical SEO concern. Let Google in, keep the junk paths out, maybe block staging folders, and move on.
That is no longer enough. For publishers, ecommerce teams, SaaS companies, and knowledge-heavy business sites, crawler access is becoming a commercial permission layer. The same page can be used for ordinary search discovery, an AI answer, model training, real-time grounding, ad validation, or a user-triggered browsing request. Those are not the same business deal.
By Greg Nowak. Last updated 2026-06-26.
AI workflow pilots tend to get judged by the visible part of the workflow. Did the summary make sense? Did the CRM field update? Did the Slack message land in the right channel?
Those checks matter. But the more durable business risk often appears a few minutes earlier, when someone clicks Allow.
By Greg Nowak. Last updated 2026-06-26.
AI disclosure has moved out of the policy document and into the publishing workflow. In June 2026, the European Commission published its final Code of Practice on marking and labelling AI-generated content. The code is voluntary, but it is designed to support AI Act transparency obligations that apply from 2 August 2026. Google, meanwhile, is still taking a practical line: AI use is not automatically a search problem. Low-quality, unoriginal, ranking-first publishing is.
By Greg Nowak. Last updated 2026-06-24.
AI image generation is no longer sitting off to the side as an experimental design tool. OpenAI presents GPT-4o image generation as a practical visual communication system, with stronger prompt following, text rendering, photorealistic output, and conversational editing. Its image API documentation also frames image generation and editing as something teams can build directly into applications, using text and image inputs.
By Greg Nowak. Last updated 2026-06-24.
ChatGPT is edging into the same territory as the tools people already use to run office work. OpenAI's June 2026 updates point in that direction: scheduled tasks, connected-app permission controls, file storage in Library, active-session review, large-paste handling as attachments, and Lockdown Mode.
By Greg Nowak. Last updated 2026-06-24.
WordPress 6.8 brought speculative loading into core, which is a sensible win for perceived speed. The default is intentionally cautious: logged-out frontend users get conservative prefetching, and only when they have already started to click a link. That is a useful baseline. It is not a green light to prerender every page that matters commercially.
By Greg Nowak. Last updated 2026-06-23.
A model ID looks harmless. It sits in a config value, a backend call, a low-code workflow, or a script someone wrote to speed up reporting. But that small string is a live dependency on a vendor lifecycle.
If an internal assistant, chatbot, automation script, enrichment job, or reporting pipeline calls a specific model name directly, the integration is only as stable as that model's availability window. That is easy to miss until a retirement date is close, or until requests start failing.
By Greg Nowak. Last updated 2026-06-22.
Drupal's June 17, 2026 core security releases are a useful stress test for site operations. The release notes for Drupal 11.4.0-rc2 bundle five core security fixes, including a critical PHP object injection advisory, a server-side request forgery advisory, and an upstream dependency security update for guzzlehttp/psr7. For a site owner, the message is not simply: update Drupal. It is: can your team update Drupal quickly without guessing?
By Greg Nowak. Last updated 2026-06-21.
Vibe-coded features have a habit of looking finished before they are ready. An AI coding agent can turn a plain-language request into a branch, a diff, and a pull request quickly. For an agency team with deadlines stacking up, that speed is useful. It also creates a new weak point: the moment a generated pull request starts to feel like production work simply because it looks tidy in GitHub.
By Greg Nowak. Last updated 2026-06-20.
Public TLS certificate renewal used to be forgiving. A calendar reminder, a quick login, a renewal task once or twice a year. That was never ideal, but the margin was wide enough for many organisations to get away with it.
By Greg Nowak. Last updated 2026-06-19.
By Greg Nowak. Last updated 2026-08-18.
Agentic AI is software that can pursue an assigned goal, use tools, inspect the result, and decide what to do next. It might read documents, search approved sources, query business systems, update a record, or request human approval.
By Greg Nowak. Last updated 2026-06-18.
Support calendars are easy to treat as background noise until several of them start pointing at the same quarter. That is where many CMS hosts are now. PHP 8.1 has already reached end of life as of December 31, 2025. PHP 8.2 stays in security support only until December 31, 2026. WordPress now recommends PHP 8.3 or greater. Ubuntu 26.04 arrived in April 2026, and Ubuntu's LTS cycle gives infrastructure teams a natural point to review what should stay in production for years, not months.
By Greg Nowak. Last updated 2026-06-18.
Cloudflare's February 20, 2026 BYOIP outage is the kind of incident that should reset how customers think about resilience. In Cloudflare's own postmortem, the trigger was an internal change, not an attack, and the result was about 1,100 customer prefixes being withdrawn from the Internet for 6 hours and 7 minutes. If those prefixes front production traffic through CDN, Spectrum, Magic Transit, or egress, the business implication is plain: a capable provider can still leave you unreachable.
By Greg Nowak. Last updated 2026-06-18.
On May 19, 2026, Google said Search will expand agentic booking for local experiences and services, and that in select categories it will call businesses on a user's behalf in the U.S. this summer. That is more than another interface update. It moves your Google Business Profile, local landing pages, and phone setup closer to the point of sale.
By Greg Nowak. Last updated 2026-08-15.
Most permanent credentials were never meant to be permanent. A developer adds an API key to GitHub Actions, an agency creates a Cloudflare token for a deployment script, and the immediate problem is solved. Months later, the automation still works—but nobody can confidently say who owns the credential, where it is used, or how to replace it safely.
By Greg Nowak. Last updated 2026-06-17.
Apache HTTP Server 2.4.68, released on June 8, 2026, is officially described by the project as a security, feature, and bug-fix release, and Apache recommends it over all previous releases. On paper, that makes it a routine upgrade. In practice, the release says something more useful for operators: the risk in older Apache estates is often buried in years of inherited proxy rules, loaded modules, and assumptions about backends that nobody has reviewed end to end.
By Greg Nowak. Last updated 2026-06-17.
On June 4, 2026, Tom's Hardware reported that Cloudflare's latest figures put automated HTTP requests at 57.5% of traffic, versus 42.5% for humans. Strictly speaking, that figure is about bot traffic overall, not a clean AI-only subtotal. But if you run a website, the practical conclusion is the same: crawler policy is no longer something you can leave vague. Once bots become the majority condition on the web, you need a deliberate position on who can access your content, where, and on what terms.
By Greg Nowak. Last updated 2026-06-17.
On June 4, 2026, WordPress core published a call for testing for client-side media processing aimed at WordPress 7.1. That may sound like a technical upgrade tucked inside the editor, but it has real operational consequences. When an image is uploaded in the block editor, the browser can now decode, resize, and encode sub-sizes locally using the VIPS library running in WebAssembly, then send those results to the server. If the browser cannot handle that work, WordPress quietly falls back to the traditional server-side path.
