[dknauss]

Bumps the version to 1.19.0 in bibliography-builder.php, readme.txt (Stable tag), package.json, package-lock.json, and block.json. It dates the changelog section, adds a readme.txt changelog entry and upgrade notice, adds the README highlight, and updates the release baseline in .planning/STATE.md.

Merging this releases 1.19.0: release.yml tags the version, publishes the GitHub Release from the CHANGELOG section, and deploys to WordPress.org.

What's in it:

• In-text and margin citations with locators and Update citations (Add in-text and margin citations #256).
• Annotated bibliographies (Add annotated bibliographies #258).
• h-cite microformats for each entry (Mark bibliography entries as h-cite microformats #257).
• Yoast SEO: full citation records in the graph, and the context fix (Read the post from Yoast's context when adding citations #252, Put full citation records into Yoast SEO's graph #254).
• Also: RIS J2 journal abbreviations, Harvard sentence case, and the demo example (Demo: in-text citations and annotations #259).

Pre-release check: the build of this code (main plus #252 and #254) has run on m.arginalia.com since this morning. All 26 entries render with h-cite and the JSON-LD is intact. In a local copy of the site's largest post, all 61 blocks load as valid. A gloss with a Cite link is live there.

---

Generated by Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.68%. Comparing base (baecb72) to head (8cc1122).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #260   +/-   ##
=========================================
  Coverage     88.68%   88.68%           
  Complexity       67       67           
=========================================
  Files           102      102           
  Lines         10989    10989           
  Branches        962      962           
=========================================
  Hits           9746     9746           
  Misses          445      445           
  Partials        798      798           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dknauss]

Development dependency audit: failing, not caused by this PR, no fix available yet.

The manually run Dependency audit failed its Development dependency audit job on a new advisory, GHSA-gcqx-w48m-w2h4 (deepmerge mergeObject() prototype poisoning, moderate). deepmerge reaches the tree only through dev and build tooling (@svgr/webpack, @wordpress/eslint-plugin, jest, and the @wordpress/* editor packages that the build treats as externals). The Production dependency audit job passed, and the workflow as a whole reports success.

This PR changes only version strings and the changelog, and the scheduled audit on main passed on November 2, so the advisory is new, not something this release introduced. deepmerge's latest release is still 4.3.1 (2023), so an overrides entry has nothing to pin to yet. I'll add one once a patched version is published. No re-run, since it would fail the same way until then.

🤖 Generated with Claude Code

https://claude.ai/code/session_01WPtgA1cnwP9mYKwaWniaFS

---

Generated by Claude Code