From e39bbbac9a57c00ecc1d05f920ef989c11333524 Mon Sep 17 00:00:00 2001
From: "K. Adam White" <kadamwhite@users.noreply.github.com>
Date: Mon, 22 Jun 2026 16:42:18 -0400
Subject: [PATCH 1/3] Fix false-positive escaping warning on
 get_block_wrapper_attributes

---
 HM-Minimum/ruleset.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/HM-Minimum/ruleset.xml b/HM-Minimum/ruleset.xml
index ff5906da..591b5614 100644
--- a/HM-Minimum/ruleset.xml
+++ b/HM-Minimum/ruleset.xml
@@ -71,6 +71,7 @@
 				<element value="paginate_links" />
 				<element value="get_the_title" />
 				<element value="get_post_gallery" /> <!-- with param 2 set to true, the default -->
+				<element value="get_block_wrapper_attributes" /> <!-- uses safecss_filter_attr and esc_attr internally -->
 			</property>
 		</properties>
 

From 51d379a367b703a31731de44f9c22a65a0ac6d62 Mon Sep 17 00:00:00 2001
From: "K. Adam White" <kadamwhite@users.noreply.github.com>
Date: Mon, 22 Jun 2026 16:46:34 -0400
Subject: [PATCH 2/3] Add changelog entry for permitting
 get_block_wrapper_attributes

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 726c553a..35ca1249 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## Next Patch
+
+- Do not flag get_block_wrapper_attributes as an escaping risk, this is a false positive as function escapes internally #340
+
 ## 2.2.0 (June 22, 2026)
 
 - Adds official support for single-file must-use plugins when appropriate by relaxing side-effect and file name restrictions on direct children of mu-plugins/ and client-mu-plugins/ #337

From 9a5a9cfde5f7ffd95a569586a07b9d4b6d70c1b2 Mon Sep 17 00:00:00 2001
From: "K. Adam White" <kadamwhite@users.noreply.github.com>
Date: Mon, 22 Jun 2026 16:47:51 -0400
Subject: [PATCH 3/3] Add "next" comment heading to changelog

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 35ca1249..1046ad7d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## Next Patch
+<!-- Next -->
 
 - Do not flag get_block_wrapper_attributes as an escaping risk, this is a false positive as function escapes internally #340