XSS risk: this is an HTML injection sink. Never pass unsanitized user input. Prefer useSetText for plain text, or sanitize with a trusted library (e.g. DOMPurify) before calling this function.
// Safe — trusted static markupuseSetHtml("#banner", "<strong>Hello</strong>");// Unsafe — do NOT do this with user content// useSetHtml("#out", userInput);
Changelog October 18, 2026
v6.13.0 Oct 18
🐛[x] 🐛 fix: update dates service to correctly handle datetime parsing with offsets
✨[x] 🚀 feat: update WordPress roles declaration and audit
✨[x] 🚀 feat: update examples and scripts with new WordPress API usage and comments
✨[x] 🚀 feat: update documentation and configuration files
✨[x] 🚀 feat(tests): add a, AccessCapabilitySchema and AccessResourceSchema
… and 1 more
v6.12.0 Oct 18
✨[x] 🚀 feat: add subject resolution and ownership management for sessions closes #6
📚[x] 📝 docs: align ADR-0004, ADR-0006 and guides with the shipped code
🐛[x] 🐛 fix(docs): correct AssistantService JSDoc to the real method name
✨[x] ♻️ refactor(core): move useCreateStorageSignal to infrastructure
🧪[x] 🧪 test(coverage): establish Vitest coverage baseline and reporting