WordPress 6.5.2 Maintenance and Security Release

Note: Due to an issue with the initial package, WordPress 6.5.1 was not released. 6.5.2 is the first minor release for WordPress 6.5.

This security and maintenance release features 2 bug fixes on Core12 bug fixes for the Block Editor, and 1 security fix.

Security backports were deployed for other major WordPress releases.

WordPress 6.5.2 is a short-cycle release. The next major release will be version 6.6 and is currently planned for 16 July 2024.

If you have any questions related to this release, please open a support ticket and we will be happy to assist.

Call for Testing: WordPress 6.5 Beta

WordPress 6.5 Beta is now available. This is the first beta released as part of the 6.5 development cycle and can be deployed to non-production environments in your WordPress VIP dashboard. WordPress 6.5 Beta 1 contains approximately 681 enhancements and 488 bug fixes for the editor, including about 229 tickets for WordPress 6.5 Core. The current target for the final release is March 26, 2024.

What is being added or changed?

This year’s first major release will add finesse and fine-tuning to how you control your site-building experience, with lots to explore specifically for developers. You’ll find more ways to manage your fonts and styles, notable upgrades to synced patterns, a collection of Site Editor and performance updates to help you get things done, and new ways to leverage design tools in Classic themes.

WordPress 6.5 will include breakthrough foundational APIs that will start to transform how you use blocks to build memorable experiences. This release invites you to dig into these early-stage frameworks, discover how you’d like to see them evolve, and have an impact on their future improvements and capabilities.

Some of the changes include:

  • Font Library: A new tool for managing typography across your site, allowing the installation and management of local and Google Fonts without coding.
  • Synced Patterns Upgrade: Enhanced synced patterns let you make specific content changes within a design template, perfect for recurring elements like testimonials or case studies.
  • Block and Custom Fields Connection: The new Block Bindings API enables connecting core block attributes to custom fields or other dynamic content, simplifying the use of custom fields.
  • Interactivity API: Integrated into Core, this API offers a standardized method for adding interactive front-end experiences to blocks, enhancing user engagement.
  • Enhanced Revisions: More detailed style revision history in the Site Editor, including time stamps and summaries of changes.
  • Classic Themes and Appearance Tools: Classic themes can now opt into appearance tools, providing access to design options like spacing, borders, typography, and color.
  • Design and Editing Improvements: New design tools and Site Editor updates streamline workflows and enhance creativity, including background images for Group blocks, aspect ratio for Cover blocks, and shadow support.
  • Data Views in Site Editor: New data views for organizing and managing site components, leading into the Admin Redesign project.
  • Plugin Dependencies: Improved management for plugins requiring other plugins, with a new header for required plugin slugs.
  • Performance Gains: Over 110 performance updates, significantly speeding up the editing experience.
  • Accessibility Improvements: More than 65 updates to enhance accessibility, focusing on contrast, focus, and element positioning.

Please refer to WordPress.org announcement for more details.

How to test the upgrade on a local environment

The quickest way to test locally is to use the VIP Local Development Environment.

To update an existing environment:

vip dev-env update -w=6.5 --slug=mytestsite

To create a new one:

vip dev-env create -w=6.5 --slug=mytestsite

How to test the upgrade on a VIP Platform environment

You can update your non-production environments by run the `trunk` version of WordPress from within the Software Management section of the VIP Dashboard or by running the vip config software update command with VIP-CLI. For example:

vip @mytestsite.production config software update wordpress trunk

WordPress 6.4.3 Maintenance & Security Release

WordPress 6.4.3, a security and maintenance release, has been pushed out to all VIP sites running WordPress 6.4.

This security and maintenance release features 5 bug fixes on Core16 bug fixes for the Block Editor, and 2 security fixes.

The security fixes have been back-ported to older versions of WordPress as well.

Have questions?

If you have any questions related to this release, please open a support ticket and we will be happy to assist.

PHP 8.3 Available on WordPress VIP

We are excited to announce the availability of PHP 8.3 on WordPress VIP. This version introduces a host of new features, improvements, and deprecations. Here are some of the key highlights:

  • Typed class constants, dynamic class constant fetch.
  • #[\Override] attribute for clearer method overriding. By adding the #[\Override] attribute to a method, PHP will ensure that a method with the same name exists in a parent class or in an implemented interface.
  • Deep-cloning of readonly properties. 
  • json_validate() function allows to check if a string is syntactically valid JSON, while being more efficient than json_decode().
  • The Random Extension that was added in PHP 8.2 was extended by a new method to generate random strings consisting of specific bytes only. This method allows the developer to easily generate random identifiers, such as domain names, and numeric strings of arbitrary length. Randomizer::getFloat() and Randomizer::nextFloat() methods were also added  to generate random floats in an unbiased fashion.

There are new classes, interfaces, and functions, along with deprecations and backward compatibility breaks. This release emphasizes improved type safety and syntax clarity. For more details, visit the PHP 8.3 Release Announcement.

Testing your application with PHP 8.3

It’s always a good idea to test your application code with every new release of PHP.

WordPress VIP recommends that you use several methods to prepare for a PHP upgrade.

Scan your codebase for incompatibilities

Review the WordPress VIP documentation “Prepare application code for a PHP version upgrade” guide and perform the scan.

Test with the VIP Local Development Environment

We recommend using the VIP Local Development Environment to test your application code locally.

Create a new environment with PHP 8.3: 

vip dev-env create --slug=mytestsite --php=8.3

Or update an existing local environment with PHP 8.3: 

vip dev-env update --slug=mytestsite --php=8.3

Test with a non-production VIP Platform environment

To update your non-production environments to PHP 8.3, either use the Software Management feature in the VIP Dashboard, or run the vip config software update command with VIP-CLI. For example:

vip @mytestsite.testing config software update php 8.3


Please Note: Currently, our minimum supported version is 8.1. Security support for 8.1 ends on November 25, 2024. WordPress VIP will be looking to begin updating environments that are not on 8.2 or higher, up to 30 days prior to this date. A formal timeline will be shared in January 2024.

WordPress 6.4.2 Maintenance & Security Release

WordPress 6.4.2, a security and maintenance release, has been pushed out to all VIP sites running WordPress 6.4.

This minor release features 7 bug fixes and 1 security fix in Core. One of the issues fixed includes stylesheet and theme directories returning incorrect results sometimes.

Have questions?

If you have any questions related to this release, please open a support ticket and we will be happy to assist.

New Release: VIP-CLI 2.32.1

VIP-CLI 2.32.1 is now available.

v2.32.1 contains a hotfix for an issue that may prevent VIP Local Development instances from starting up after updating to Docker Desktop v 4.21.0 / Docker Compose v2.19.0.

v2.32.0 contains the following features/improvements:

Please run npm i -g @automattic/vip to get the latest improvements. You can find the detailed installation / update instructions on WordPress VIP Documentation site.

If you have any questions, please feel free to reach out, and we will be happy to help.

PHP 8.2 Available on WordPress VIP

We are excited to announce the availability of PHP 8.2 on WordPress VIP. This version introduces a host of new features, improvements, and deprecations. Here are some of the key highlights.

New features

Readonly Classes: PHP 8.2 introduces the concept of readonly classes. This allows you to define classes where certain properties are read-only and cannot be changed after they are set in the constructor.

Disjunctive Normal Form (DNF) Types: DNF types allow us to combine union and intersection types, following a strict rule: when combining union and intersection types, intersection types must be grouped with brackets.

Allow null, false, and true as stand-alone types: In PHP 8.2, null, false, and true can be used as stand-alone types. This allows for more precise type declarations in your code.

New “Random” extension: The “random” extension provides a new object-oriented API to random number generation. Instead of relying on a globally seeded random number generator (RNG) using the Mersenne Twister algorithm, the object-oriented API provides several classes (“Engine”s) providing access to modern algorithms that store their state within objects to allow for multiple independent seedable sequences.

Constants in traits: PHP 8.2 allows you to define constants in traits. However, you cannot access the constant through the name of the trait, but, you can access the constant through the class that uses the trait.

Deprecations and backward incompatible changes

  • Deprecated dynamic properties: The creation of dynamic properties is deprecated, unless the class opts in by using the #[\AllowDynamicProperties] attribute. stdClass allows dynamic properties. Usage of the __get()/__set() magic methods is not affected by this change. 
  • Deprecated ${} string style interpolation
  • Deprecated utf8_encode and utf8_decode functions.

Additional information about deprecations and the full list of backward incompatible changes can be reviewed on the PHP.net website.

More detailed information about all of the changes in PHP 8.2 is available in the official PHP 8.2 release notes.

Testing your application with PHP 8.2

It’s always a good idea to test your application code with every new release of PHP.

WordPress VIP recommends that you use several methods to prepare for a PHP upgrade.

Scan your codebase for incompatibilities

Review the WordPress VIP documentation “Prepare application code for a PHP version upgrade” guide and perform the scan.

Test with the VIP Local Development Environment

We recommend using the VIP Local Development Environment to test your application code locally.

Create a new environment with PHP 8.2: 

vip dev-env create --slug=mytestsite --php=8.2

Or update an existing local environment with PHP 8.2: 

vip dev-env update --slug=mytestsite --php=8.2
An example of VIP-CLI command to create a new environment

Test with a non-production VIP Platform environment

To update your non-production environments to PHP 8.2, either use the Software Management feature in the VIP Dashboard, or run the vip config software update command with VIP-CLI. For example:

vip @mytestsite.testing config software update php 8.2
Software Management - PHP screen
An example of CLI comand to update the local dev env

Call for Testing: WordPress 6.3 Beta

WordPress 6.3 Beta is now available. This is the first beta released as part of the 6.3 development cycle and can be deployed to non-production environments in your WordPress VIP dashboard. The release contains more than 500 new features and enhancements and 400+ bug fixes. The current target for the final release is August 8, 2023.

What is being added or changed?

Performance

  • More than 170 performance-related updates, including adding defer and async support to the WP Scripts API and fetchpriority support for images.
  • Optimizations were made to block template resolution, image lazy-loading, and the emoji loader, all of which benefit LCP performance.
  • Improved support for PHP versions 8.0, 8.1, and 8.2.

Site Editor

  • Expansion to include navigating and editing pages, styles, templates, and content.
  • The unified site editing experience will include a distraction-free mode, enhanced navigation, and an improved loading experience.
  • Ability to preview a block theme and adjust your site before activating the new theme.
  • Style revisions so you can toggle between and preview different saved styles.
  • A new Command Palette, enabling users to context switch and perform actions quickly across different sections of the site editing experience.

Blocks

  • New blocks for details and footnotes.
  • Updates for better handling of image aspect ratios and improved fallback states.
  • Spacer blocks now include presets, and the cover block gets updates for managing text colors and layout support.

Patterns and Design

  • Reusable blocks have been renamed to synced patterns.
  • A new option allows you to assign patterns to templates, adding the ability to have starter patterns to speed up the creation process.
  • Site creators can now easily create, save, and manage custom synced and unsynced patterns, as well as browse a directory of curated patterns.
  • The duotone filter and captions can now be edited in the Styles interface.

Usability

  • Toolbar updates, updated template descriptions, enhanced list view drag-and-drop, improved padding and margin controls, and a new area for managing patterns (including reusable blocks, now called synced patterns.)
  • Link control receives some updates.

Accessibility

  • Over 50 accessibility improvements across the platform.
  • Improved labeling, optimized tab and arrow-key navigation, revised heading hierarchy, and new controls in the admin image editor.
  • The login form, installation steps, and list tables (for sorting and selection) have all been updated.

How to test the upgrade on a local environment

The quickest way to test locally is to use the VIP Local Development Environment.

To update an existing environment:

vip dev-env update -w=6.3 --slug=mytestsite

To create a new one:

vip dev-env create -w=6.3 --slug=mytestsite

How to test the upgrade on a VIP Platform environment

You can update your non-production environments by run the `trunk` version of WordPress from within the Software Management section of the VIP Dashboard or by running the vip config software update command with VIP-CLI. For example:

vip @mytestsite.production config software update wordpress trunk

WordPress 6.2.1 Maintenance and Security Release

WordPress 6.2.1, a maintenance and security release, has been pushed out to all VIP sites running WordPress 6.2. The security patches have also been back-ported to sites running older WordPress versions.

This minor release features 20 bug fixes in Core and 10 bug fixes for the block editor. You can review a summary of the maintenance updates in this release by reading the Release Candidate announcement.

Have questions?

If you have any questions related to this release, please open a support ticket and we will be happy to assist.

Call for Testing: Jetpack 11.6 Beta

Jetpack 11.6 is available now and the download link is available here.

Jetpack 11.6 will be deployed to VIP on Thursday, December 8, 2022*. The upgrade is expected to be performed at 17:00 UTC (1:00PM ET).

*This deployment date and time are subject to change if issues are discovered during testing of the Jetpack release.

A full list of changes is available in the commit log.

What is being added or changed?

Enhancements

  • Editor: adds an experimental editor extension that displays a placeholder blogging prompt when starting a new post.
  • Form Block: update design for Feedback table in WP Admin.
  • Form Block: add a new form variation and template for a Salesforce Lead form.
  • Form Block: enable editing placeholders on form input fields.
  • Form Block: feedback export function is now integrated with the feedback table filters
  • Form Block: move the ‘check for spam’ button to below the responses table on the feedback page in WP Admin.
  • Form Block: improve the styling and formatting of the form submission page after a form block is submitted.
  • Form Block: updates Form block placeholder to include pattern selection modal
  • Form Block: updates Form block to allow layout blocks
  • Form Block: updates URL validitity check
  • Pre-Publish Panel: split out the email subscribers & social followers count in the pre-publish panel.
  • SEO: add a ‘noindex’ checkbox for posts and pages.
  • SEO: add a per post/page HTML title option.
  • Stats: add stats option enable_calypso_stats to allow users to enable the new Calypso Stats experience
  • Stats: conditionally load the new Calypso Stats package
  • VideoPress: detect if the video has a vtt chapters file
  • VideoPress: adds VideoPress feedback link to the VideoPress block.
  • WordAds: add US Privacy support for additional states (Colorado, Connecticut, Utah, and Virginia).

Improved compatibility

Improves compatibility with the Jetpack Protect standalone plugin.

Bug fixes

  • Dashboard: fixes issue where default icon would be empty
  • SSO: fix setting toggle inconsistency.
  • Stats: stop stats loading indefinitely when a hashtag exists
  • Widget Visibility: fix error with WooCommerce Product Categories block

What do I need to do?

We recommend the below:

  1. Installing the release on your non-production sites using these instructions.
  2. Running through the testing flows outlined in the Jetpack Testing Guide.

As you’re testing, there are a few things to keep in mind:

Questions?

If you have any questions, related to this release, please open a support ticket and we will be happy to assist.