Title: Dev Chat Summary, May 17, 2023 Author: Abha Thakor Published: May 19, 2023 Last modified: May 24, 2023 --- [ ](https://profiles.wordpress.org/webcommsat/) [Abha Thakor](https://profiles.wordpress.org/webcommsat/) 9:33 pm _on_ May 19, 2023 Tags: [6-3 ( 70 )](https://make.wordpress.org/core/tag/6-3/), [6-4 ( 78 )](https://make.wordpress.org/core/tag/6-4/), [6.2.1 ( 3 )](https://make.wordpress.org/core/tag/6-2-1/), [dev chat ( 932 )](https://make.wordpress.org/core/tag/dev-chat/), [forums ( 2 )](https://make.wordpress.org/core/tag/forums/), [meeting ( 405 )](https://make.wordpress.org/core/tag/meeting/), [summary ( 981 )](https://make.wordpress.org/core/tag/summary/), [WCEU ( 6 )](https://make.wordpress.org/core/tag/wceu/)    # Dev Chat Summary, May 17, 2023 The WordPress Developers Chat meeting took place on [ 2023-05-17 at 20:00 UTC ](https://www.timeanddate.com/worldclock/fixedtime.html?iso=20230517T2000) in the [core](https://wordpress.slack.com/messages/core/) channel of [Make WordPress Slack](https://make.wordpress.org/chat/). ## Key Links * [Start](https://wordpress.slack.com/archives/C02RQBWTW/p1683748821238729) of the Dev Chat on SlackSlack Slack is a Collaborative Group Chat Platform [https://slack.com/](https://slack.com/). The WordPress community has its own Slack Channel at [https://make.wordpress.org/chat/](https://make.wordpress.org/chat/), facilitated by [@webcommsat](https://profiles.wordpress.org/webcommsat/). * [Dev Chat Agenda May 10, 2023](https://make.wordpress.org/core/2023/05/16/dev-chat-agenda-may-17-2023/), courtesy [@webcommsat](https://profiles.wordpress.org/webcommsat/). * Last meeting summary: [Dev Chat Summary, May 10, 2023](https://make.wordpress.org/core/2023/05/11/dev-chat-summary-may-10-2023/). ## Announcements * [WordPress 6.2.1 Maintenance and Security Release](https://wordpress.org/news/2023/05/wordpress-6-2-1-maintenance-security-release/) went live on May 16, 2023. Thank you everyone who helped make this happen! ## Highlighted Posts * [Proposal: Retiring Older Default Themes](https://make.wordpress.org/core/2023/05/16/proposal-retiring-older-default-themes/): This post summarizes the current state of bundled themes in WordPress before proposes new support states for bundled themes. It also raises two potential ways to decrease the total number of themes receiving regular updates. Thanks to [@desrosj](https://profiles.wordpress.org/desrosj/) and everyone who contributed to this post. * [Command Center: Request for feedback](https://make.wordpress.org/core/2023/05/17/command-center-request-for-feedback/): Check it out and give your feedback on the UXUX User experience and APIAPI An API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. for this feature. ## Release Updates The next major releasemajor release A release, identified by the first two numbers( 3.6), which is the focus of a full release cycle and feature development. WordPress uses decimaling count for major release versions, so 2.8, 2.9, 3.0, and 3.1 are sequential and comparable in scope. is 6.3. ### 6.2.1 Minor ReleaseMinor Release A set of releases or versions having the same minor version number may be collectively referred to as .x , for example version 5.2.x to refer to versions 5.2, 5.2.1, 5.2.3, and all other versions in the 5.2 (five dot two) branch of that software. Minor Releases often make improvements to existing features and functionality. Discussion [@audrasjb](https://profiles.wordpress.org/audrasjb/) provided a summary of the recent 6.2.1 release, which included security patches from 4.1.x through 6.2. One fix in particular led to an issue with utilizing shortcodes in templates. The problem was being actively discussed by the Security Editor team, who began plans for a quick follow-up patchpatch A special text file that describes changes to code, by identifying the files and lines which are added, removed, and altered. It may also be referred to as a **diff**. A patch can be _applied_ to a codebase for testing. to address the issue. See this related ticketticket Created for both bug reports and feature development on the bug tracker.: [#58333: WordPress 6.2.1 Shortcodes some shortcode no longer works!](https://core.trac.wordpress.org/ticket/58333). [@nekojonez](https://profiles.wordpress.org/nekojonez/) indicated that the issue only happens with FSE themes, confirming that their non-FSE themes were unaffected. [@audrasjb](https://profiles.wordpress.org/audrasjb/) agreed that it only affected template blocks [used in FSE themes]. [@pbiron](https://profiles.wordpress.org/pbiron/) added that shortcodeShortcode A shortcode is a placeholder used within a WordPress post, page, or widget to insert a form or function generated by a plugin in a specific location on your site. blocks used in blockBlock Block is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience. theme template parts remained functional. [@nekojonez](https://profiles.wordpress.org/nekojonez/) also mentioned concern that the new issue may cause users and members of the WordPress community to get the impression that shortcodes would no longer be supported, and referenced a discussion in [#forums](https://make.wordpress.org/core/tag/forums/) that could be taken out of context in support of this misunderstanding. [@ipstenu](https://profiles.wordpress.org/ipstenu/) provided a link to the [discussion](https://wordpress.slack.com/archives/C02RQC6RW/p1684277630734209), and indicated that this was a breaking change that did not include a notification to users beforehand. She suggested that the [release post](https://wordpress.org/news/2023/05/wordpress-6-2-1-maintenance-security-release/) could have been more clear as to why shortcode support in block templates was removed. [@nekojonez](https://profiles.wordpress.org/nekojonez/) expressed agreement about wishing for more clarity in the post. [@nekojonez](https://profiles.wordpress.org/nekojonez/) noted that workarounds existed for the issue, and might be shared with clear “use as your own risk” language. [@pbiron](https://profiles.wordpress.org/pbiron/) explained that one of the options was to move the shortcode block into a template part, and for the template part to replace the original shortcode block used in the template. He added [a comment to the ticket](https://core.trac.wordpress.org/ticket/58333#comment:41) explaining this. [@webcommsat](https://profiles.wordpress.org/webcommsat/) asked [@audrasjb](https://profiles.wordpress.org/audrasjb/) if the post could be updated with information about the workaround. [@azaozz](https://profiles.wordpress.org/azaozz/) asked if the workarounds “revert” the security fix, and [@audrasjb](https://profiles.wordpress.org/audrasjb/) confirmed that yes, they rewrite the logic and re-introduce the security issuesecurity issue A security issue is a type of bug that can affect the security of WordPress installations. Specifically, it is a report of a bug that you have found in the WordPress core code, and that you have determined can be used to gain some level of access to a site running WordPress that you should not have.. [@psdtohtmlguru](https://profiles.wordpress.org/psdtohtmlguru/) indicated that the pluginPlugin A plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress. org Plugin Directory [https://wordpress.org/plugins/](https://wordpress.org/plugins/) or can be cost-based plugin from a third-party.-based workaround impacted performance on complex templates, and asked for a link to the security fix ticket. [@audrasjb](https://profiles.wordpress.org/audrasjb/) shared a link to the commit, but pointed out the ticket was in Hackerone and not visible to the public. [@francina](https://profiles.wordpress.org/francina/) also noted that security fixes are not disclosed publicly, and JB provided a supporting link to the [Core Handbook’s security FAQ](https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/). [@nekojonez](https://profiles.wordpress.org/nekojonez/) expressed worry that not knowing details of the security flaw may put into question the safety of non-FSE theme shortcode use, and asked for more communication on it. [@pbiron](https://profiles.wordpress.org/pbiron/) added that it was strange the vulnerability would affect shortcode usage directly in a template, but not in a template part of post content. [@ndiego](https://profiles.wordpress.org/ndiego/) asked if anyone could share why shortcodes behaved differently between these usages, and [@timothyblynjacobs](https://profiles.wordpress.org/timothyblynjacobs/) suggested the discussion was getting too deep for now. [@psdtohtmlguru](https://profiles.wordpress.org/psdtohtmlguru/) asked for confirmation that shortcodes in templates don’t work, but that shortcodes in post content would continue to work. [@nekojonez](https://profiles.wordpress.org/nekojonez/) indicated the need to await further updates from the security and editor teams, suggesting a clarification post in the meantime. [@timothyblynjacobs](https://profiles.wordpress.org/timothyblynjacobs/) and [@audrasjb](https://profiles.wordpress.org/audrasjb/) agreed, with Timothy suggesting the post primarily clarify that the security team is aware of and discussing solutions to the issue. [@azaozz](https://profiles.wordpress.org/azaozz/) recommended that shortcodes should not be used in templates, due to performance issues on top of the security concerns. Several attendees responded [in the thread](https://wordpress.slack.com/archives/C02RQBWTW/p1684355604343709) explaining that shortcodes were beneficial for numerous reasons, and [@asafm7](https://profiles.wordpress.org/asafm7/) shared their particular use case. _[Editor’s Summary: From this long thread the impression is that regardless of security or performance implications, shortcodes are currently a valuable content mechanism that does not yet have a clear replacement for all use cases.]_ ### 6.4 Q&A [@francina](https://profiles.wordpress.org/francina/) asked for an informal Q&A session around WordPress 6.4, details of which can be found in [this Slack thread](https://wordpress.slack.com/archives/C051Z1SKBDZ/p1683910470357619). [@karmatosed](https://profiles.wordpress.org/karmatosed/) asked if there was a list of questions for the call, to provide preparation time to address them. [@estelaris](https://profiles.wordpress.org/estelaris/) responded with a link to the spreadsheet ([see comment](https://wordpress.slack.com/archives/C02RQBWTW/p1684355836194789)) where more questions could be added. Francesca clarified that the Q&A would be informal and occur on Zoom. [@jeffpaul](https://profiles.wordpress.org/jeffpaul/) asked about the possibility of two sessions to accommodate timezone differences, the idea which was seconded by Tammie. Francesca agreed to make the calls more formal, and to post about it in make/coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress.. ## Maintainers: Component Help Requests ### wp.zip Domain [@francina](https://profiles.wordpress.org/francina/) proposed that the https:// wp.zip domain redirect to the latest WordPress release ZIP file — [@sergeybiryukov](https://profiles.wordpress.org/sergeybiryukov/) asked if [https://wordpress.org/latest.zip](https://wordpress.org/latest.zip) was the suggestion — rather than the WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. [https://wordpress.org/](https://wordpress.org/) homepage where it currently leads. [@pbiron](https://profiles.wordpress.org/pbiron/) suggested opening a ticket in [Meta Trac](https://meta.trac.wordpress.org), and proposed that [https://wordpress.org/download/](https://wordpress.org/download/) might be preferable to avoid user confusion/concern that might result from a link leading to an automatic download. [@webcommsat](https://profiles.wordpress.org/webcommsat/) agreed that avoiding automatic downloads would be better for accessibilityAccessibility Accessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility). ### 6.3 Tickets [@oglekler](https://profiles.wordpress.org/oglekler/) shared two tickets that could be moved into the 6.3 milestone, which had been tested: * [#31635: Bulk Edit -> Publish should publish scheduled posts](https://core.trac.wordpress.org/ticket/31635) * [#57947: Publishing draft posts via Bulk Edit should publish them with the current date](https://core.trac.wordpress.org/ticket/57947) [@webcommsat](https://profiles.wordpress.org/webcommsat/) called for help testing the patches, and reiterated adding test results to tickets for visibility. ## Open Floor ### WordCampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. 󠀁[Learn more](https://central.wordcamp.org/about/)󠁿. Europe 2023 [@webcommsat](https://profiles.wordpress.org/webcommsat/) called for updating Core and Core Test information for Contributor DayContributor Day Contributor Days are standalone days, frequently held before or after WordCamps but they can also happen at any time. They are events where people get together to work on various areas of [https://make.wordpress.org/](https://make.wordpress.org/) There are many teams that people can participate in, each with a different focus. [https://make.wordpress.org/support/handbook/getting-started/getting-started-at-a-contributor-day/](https://make.wordpress.org/support/handbook/getting-started/getting-started-at-a-contributor-day/), thanking [@estelaris](https://profiles.wordpress.org/estelaris/) for gathering the info. Estela emphasized the need to email the info to first-time contributors by Friday, 19 May. [@webcommsat](https://profiles.wordpress.org/webcommsat/) also asked for volunteers to facilitate the Core tables at the event. Both [@oglekler](https://profiles.wordpress.org/oglekler/) and [@sergeybiryukov](https://profiles.wordpress.org/sergeybiryukov/) expressed interest. [@webcommsat](https://profiles.wordpress.org/webcommsat/) asked [@estelaris](https://profiles.wordpress.org/estelaris/) if there was to be a table to assist contributors in setting up local environments, noting that a dedicated table has worked well before. Estela confirmed there would be a table, but that emails to first-time contributors could help ensure they are better prepared, particularly with software downloads. [@webcommsat](https://profiles.wordpress.org/webcommsat/) also noted the emails could include the date/time for upcoming new contributor meetings. [@webcommsat](https://profiles.wordpress.org/webcommsat/) said they were reviewing Contributor Day info from WC Asia that should be added to the Core Handbook, noting that it was also being added to the Make Teams introduction document ([link provided by @estelaris](https://wordpress.slack.com/archives/C02RQBWTW/p1684357115121639)). [@webcommsat](https://profiles.wordpress.org/webcommsat/) asked that Contributor Day attendees share in this post’s comments if they would be able to help at a Core table. [@estelaris](https://profiles.wordpress.org/estelaris/) indicated that there would be approximately six tables dedicated to the Core team, and [@desrosj](https://profiles.wordpress.org/desrosj/) asked which Core focus area had been identified for each table. Estela referred to the introduction document, and that nothing in particular had been mentioned. Jonathan would review the document and try to find other teams to collaborate with. Finally, [@webcommsat](https://profiles.wordpress.org/webcommsat/) noted that tickets were still available for both the conference and Contributor Day. ## Next Meeting The next meeting will be on [May 24, 2023 at 20:00 UTC](https://www.timeanddate.com/worldclock/fixedtime.html?iso=20230524T2000). Are you interested in helping draft Dev Chat summaries? Volunteer at the start of the next meeting on the [`#core` Slack channel](https://wordpress.slack.com/archives/C02RQBWTW). _Props [@ironprogrammer](https://profiles.wordpress.org/ironprogrammer/) for co- authoring and [@audrasjb](https://profiles.wordpress.org/audrasjb/) for peer review of this summary._ [#6-3](https://make.wordpress.org/core/tag/6-3/), [#6-4](https://make.wordpress.org/core/tag/6-4/), [#6-2-1](https://make.wordpress.org/core/tag/6-2-1/), [#dev-chat](https://make.wordpress.org/core/tag/dev-chat/), [#meeting](https://make.wordpress.org/core/tag/meeting/), [#summary](https://make.wordpress.org/core/tag/summary/), [#wceu](https://make.wordpress.org/core/tag/wceu/) ### Share this: * [ Threads ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=threads) * [ Mastodon ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=mastodon) * [ Bluesky ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=bluesky) * [ X ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=x) * [ Facebook ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=facebook) * [ LinkedIn ](https://make.wordpress.org/core/2023/05/19/dev-chat-summary-may-17-2023/?share=linkedin) # Post navigation [← WP Feature Notifications Meeting Notes: 2023-05-17](https://make.wordpress.org/core/2023/05/19/wp-feature-notifications-meeting-notes-2023-05-17/) [What’s new in Gutenberg 15.8? (May 17) →](https://make.wordpress.org/core/2023/05/20/whats-new-in-gutenberg-15-8-may-17/)