* New: Add notification badge to admin sidebar when a scheduled backup fails or is missed #1579
* Enh: Create staging sites with the Next-Gen engine again, now that the table prefix corruption that had it switched off is fixed. #5355
* Fix: Always store the WP STAGING settings as an array, so a stored object can no longer break saving, restoring or pushing. #5863
* Fix: Cancel only the Remote Sync pull the request verified, never a job that replaced it. #5797
* Fix: Clean up the temporary files and tables of a cancelled onboarding backup. #5796
* Fix: End a background cancellation that cannot be prepared cleanly instead of with a PHP error. #5797
* Fix: End a remote storage upload the provider refuses instead of retrying it on every request. #5822
* Fix: Generate temporary-login link IDs server-side with a secure random generator and throttle the login-link path, so links can no longer be guessed from a predictable timestamp or brute-forced. #5810
* Fix: Preserve WordPress metadata keys when cloning with the Next-Gen engine. #5354
* Fix: Prevent duplicate processing when running consecutive staging site pushes. (Pro) #5364
* Fix: Reject cloud storage OAuth callbacks that were not started from the plugin. #5809
* Fix: Reject nested legacy object payloads during search-replace and stop a rest_route parameter from bypassing the staging site login form. #5625
* Fix: Report MySQL as the database engine in usage analytics instead of leaving it undefined. #5508
* Fix: Report a pCloud upload that the remote refused as failed instead of finished. #5822
* Fix: Require administrator rights to complete Google Drive API authentication, so a low-privileged user can no longer trigger the OAuth token exchange. #5812
* Fix: Retry a backup upload the storage provider refused for rate limiting instead of failing it, and stop reporting a throttled Google Drive as a full one. #5848
* Fix: Safely handle custom excluded option names during Next-Gen cloning. #5354
* Fix: Show the backup creation offer in Free and Pro staging modals. #5775
* Fix: Stop BackgroundLogger showing a false "Something went wrong" error for background jobs that already finished successfully. #5777
* Fix: Stop a superseded push setup response from replacing the open push modal. #5874
* Fix: Stop the backup finalize step from writing an unsigned, corrupted backup after an interrupted request. #5374
* Fix: Stop the browser console error guard from failing E2E tests on console noise it does not own. #5853
* Fix: Stop the corner update-protection modal from swallowing clicks on the rest of the page. #5882
* Dev: Add PHP 8.5 to the fast tests suite. #5497
* Dev: Add a browsable, testable worktree. #5875
* Dev: Describe in the release docs what a rollback restores and what it leaves behind. #5840
* Dev: Extend work-on-issue and defer human review requests. #5865
* Dev: Extract the self-review rule into a review-own-diff skill the other skills invoke, and prove any deletion a review agent proposes against the merge-base. #5866
* Dev: Fail the guardrails when a file the standalone restorer bundles relies on a top-level import. #5818
* Dev: Prove the rest_route staging bypass over HTTP instead of against a stub of WordPress core. #5878
* Dev: Record in the PR workflow that Copilot reviews first and is answered before a human is asked. #5842
* Dev: Remove the ready-to-merge label when a review finds blocking issues. #5890
* Dev: Report any new direct read of the wpstg_settings option, so no reader can assume its stored shape unnoticed. #5835
* Dev: Run the release suite's cloud storage stage three PHP versions at a time instead of one, within the providers' documented rate limits. #5848
* Dev: Stop an unrelated label from cancelling the fast-tests run it was added beside. #5820
* Dev: Stop the fast tests label claiming a full pass on a two-version run. #5872
