Devchat meeting summary – June 17th, 2020

@davidbaumwald led the chat on this agenda.

Highlighted/Need Feedback Blogblog (versus network, site) Posts

@davidbaumwald shared a few blog posts and announcements:

Meeting notes

@jeffpaul and @timothyblynjacobs called for particular attention to the Experimental Endpoints (REST APIREST API The REST API is an acronym for the RESTful Application Program Interface (API) that uses HTTP requests to GET, PUT, POST and DELETE data. It is how the front end of an application (think “phone app” or “website”) can communicate with the data store (think “database” or “file system”) https://developer.wordpress.org/rest-api/. team). It needs a decision, and it could use input from a variety of experienced reviewers who understand what’s at stake:

Other meeting notes:

Upcoming releases

WordPress 5.4.2

WordPress 5.4.2 shipped with the help of our amazing contributors). This version packs six security fixes and lots of bugbug A bug is an error or unexpected result. Performance improvements, code optimization, and are considered enhancements, not defects. After feature freeze, only bugs are dealt with, with regressions (adverse changes from the previous version) being the highest priority. fixes. More details about what is inside are on the version page.

@whyisjake took a moment to thank everyone that was part of the release team’s huge group of contributors, both on the security front and in bug fixing.

He also called special attention to the fact that the release team decided to backportbackport A port is when code from one branch (or trunk) is merged into another branch or trunk. Some changes in WordPress point releases are the result of backporting code from trunk to the release branch. the changes in how comments are handled to WordPress 5.1/5.2/5.3. See the related dev note for more.

As a reminder, the WordPress project’s security policy is publicly available on GitHub.

WordPress 5.5

WP 5.5 Release coordinator @whyisjake shared that betaBeta A pre-release of software that is given out to a large group of users to trial under real conditions. Beta versions have gone through alpha testing in-house and are generally fairly close in look, feel and function to the final product; however, design changes often occur as part of the process. 1 is roughly four weeks away, and there are still around 250 open tickets in the milestone.

Of special note is this GitHub project that the #core-editor team has been working on.

@davidbaumwald reported that he’s added the AccessibilityAccessibility Accessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility) scrubs to the Bug Scrub Schedule for 5.5.

The Accessibility team needs help and feedback on these tickets:

@marybaum announced that there’s a team assembled to work on the About page. @davidbaumwald has opened ticketticket Created for both bug reports and feature development on the bug tracker. #50416 to handle About page development.

Following up on her announcement, @marybaum suggested promoting WP 5.5 in the current version’s dashboard for a couple of weeks in the release-candidate period in a dashboard widgetWidget A WordPress Widget is a small block that performs a specific function. You can add these widgets in sidebars also known as widget-ready areas on your web page. WordPress widgets were originally created to provide a simple and easy-to-use way of giving design and structure control of the WordPress theme to the user..

@desrosj answered that if something is important enough to receive its own area on the dashboard of every site before it is released, the best way to do that would be in a post on the News blog.

Components check-in and status updates

@flixos90 asked the Media team for feedback on #50367.

@timothyblynjacobs would like feedback on a possible batch-processing endpoint for the REST API: #50244, on the particulars of the patchpatch A special text file that describes changes to code, by identifying the files and lines which are added, removed, and altered. It may also be referred to as a diff. A patch can be applied to a codebase for testing. and on the ergonomics of it.

@mikeschroder requested feedback on whether (and what) filters would be helpful for opcode cache invalidation: #36455.

Open Floor

@paaljoachim pointed out ticket #16020, which aims to introduce custom avatars for user profiles. The ticket has a patch; it needs review and final validation from the coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. team.

@enrico.sorcinelli called the group’s attention to ticket #21676, and @sergeybiryukov confirmed that ticket is already on his review list.

#5-4-2, #5-5, #core, #summary

Devchat meeting summary – June 10th, 2020

@whyisjake led the chat on this agenda.

Highlighted/Need Feedback Blogblog (versus network, site) Posts

@whyisjake shared a few blog posts and announcements:

Upcoming releases

WordPress 5.4.2

WordPress 5.4.2 was planned to be released Wednesday 10th after the devchat (and successfully shipped with the help of our amazing contributors). This version includes six security fixes and many bugbug A bug is an error or unexpected result. Performance improvements, code optimization, and are considered enhancements, not defects. After feature freeze, only bugs are dealt with, with regressions (adverse changes from the previous version) being the highest priority. fixes. More details about what is inside can be found on the version page.

WordPress 5.5

@pbiron reminded that three feature plugins will be included in WordPress 5.5. Lazy loading of images, themes, and plugins, auto-updates, and XML sitemaps.

Some tickets for enhancements/features will need some help, testing, or feedbacks before 5.5 BetaBeta A pre-release of software that is given out to a large group of users to trial under real conditions. Beta versions have gone through alpha testing in-house and are generally fairly close in look, feel and function to the final product; however, design changes often occur as part of the process. 1 (targeted date: July 7th, 2020): #40351, #41750, #33161, #47456, #43738.

@audrasjb mentioned some other tickets on which the AccessibilityAccessibility Accessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility) team needs help and feedback. #49459 and #49651 need Editor team feedback and #30155, #47120 and #48170 will need feedback and expertise from the Media team.

@paaljoachim said he’s working on #16020 and would need some feedback on it.

Open Floor

@enricosorcinelli mentioned that #21676 got some new attentions, and could be a possible candidate to ship in 5.5.

@adamsilverstein reminded the group that the #core-js team is looking for an additional person to help run the weekly JavascriptJavaScript JavaScript or JS is an object-oriented computer programming language commonly used to create interactive effects within web browsers. WordPress makes extensive use of JS for a better user experience. While PHP is executed on the server, JS executes within a user’s browser. https://www.javascript.com/. chat. The chats take place Tuesday at UTC-06:00 in #core-js. Feel free to say in the channel in the next meeting if you’re interested in that.

@justinahinon said that he reached out to people interested in helping on hosting APAC devchats proposed here. There is a plan to discuss in the #core channel about the outcomes of the meetings and a possible schedule (a note about that will be published soon on Make/CoreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. blog).

Related to that, @yvettesonneveld shared what they have been doing for marketing coffee breaks and that was very helpful in recruiting and retaining contributors. Updates for this can be found here.

@jeffpaul proposed some additions to the Releasing Major Version and Glossary handbooks. These additions are about the early ticketticket Created for both bug reports and feature development on the bug tracker. definition and how they are handled during the release process. This is a result of discussions at WCEU Contributor DayContributor Day Contributor Days are standalone days, frequently held before or after WordCamps but they can also happen at any time. They are events where people get together to work on various areas of https://make.wordpress.org/ There are many teams that people can participate in, each with a different focus. https://2017.us.wordcamp.org/contributor-day/ https://make.wordpress.org/support/handbook/getting-started/getting-started-at-a-contributor-day/. and received helpful feedback from @davidb, @desrosj, and @joemcgill. Some contributors had a discussion about that, and you can rollback to here to follow.

@enricosorcinelli reminded that they are some tickets that have been milestoned for each release since 5.0 but hadn’t received any attention in their life cycle. These are #43516, #43517.

This closed the devchat discussions to leave room for WordPress 5.4.2 release party.

#5-4-2, #5-5, #summary

WordPress 5.4.2: Prevent unmoderated comments from search engine indexation

WordPress 5.1 previously added the possibility to show the “awaiting moderation” message on comments list when comment cookies are disabled. Indeed, this changeset included a hash in the redirect URLURL A specific web address of a website or web page on the Internet, such as a website’s URL www.wordpress.org, allowing the website to identify that a preview of the moderated comment should be displayed. By providing an hash in the URL when users did not consent to cookies, the changeset also provided a way to spammers to share an URL that actually contain their messages, and this URL was potentially indexable by search engines.

In WordPress 5.4.2, after a comment is submitted, only a brief window will be available to publicly see the awaiting moderation comment on the website. This change prevents search engines from indexing URLs that may contain spammy messages.

Here is the full list of changes:

  • Remove unapproved comments preview after 1 minute to avoid public access through the moderation hash.
  • Only pass querystring parameters if the user did not consent to cookies, otherwise they are not required.
  • For requests with the unapproved and moderation hash querystring parameters, Expires and Cache-Control HTTPHTTP HTTP is an acronym for Hyper Text Transfer Protocol. HTTP is the underlying protocol used by the World Wide Web and this protocol defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. headers of 60 seconds are added for CDN and other cache hinting services.
  • Only display the requested comment if the querystring parameters are included in the request.
  • Hide the reply button on unapproved comment if it is displayed due to the moderation hash.

This is not considered as a security issuesecurity issue A security issue is a type of bug that can affect the security of WordPress installations. Specifically, it is a report of a bug that you have found in the WordPress core code, and that you have determined can be used to gain some level of access to a site running WordPress that you should not have.. Those changes were discussed publicly on Trac and milestoned to WordPress 5.4.2 point releaseMinor Release A set of releases or versions having the same minor version number may be collectively referred to as .x , for example version 5.2.x to refer to versions 5.2, 5.2.1, 5.2.3, and all other versions in the 5.2 (five dot two) branch of that software. Minor Releases often make improvements to existing features and functionality. few weeks ahead of the release date.

However, given the inconvenience caused by this issue, the WordPress coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. team decided to exceptionally backportbackport A port is when code from one branch (or trunk) is merged into another branch or trunk. Some changes in WordPress point releases are the result of backporting code from trunk to the release branch. those changes to each affected branchbranch A directory in Subversion. WordPress uses branches to store the latest development code for each major release (3.9, 4.0, etc.). Branches are then updated with code for any minor releases of that branch. Sometimes, a major version of WordPress and its minor versions are collectively referred to as a "branch", such as "the 4.0 branch". of WordPress, from WP 5.1 to WP 5.4.

For reference, see the related TracTrac An open source project by Edgewall Software that serves as a bug tracker and project management tool for WordPress. ticketticket Created for both bug reports and feature development on the bug tracker.: #49956

#5-4-2, #dev-notes

WordPress 5.4.2 RC 1

WordPress 5.4.2 Release Candidaterelease candidate One of the final stages in the version release cycle, this version signals the potential to be a final release to the public. Also see alpha (beta). 1 (RCrelease candidate One of the final stages in the version release cycle, this version signals the potential to be a final release to the public. Also see alpha (beta). 1) is now available for testing!

There are two ways to test the WordPress 5.4.2 release candidate: try the WordPress Beta Tester pluginPlugin A plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party (you’ll want to select the point releaseMinor Release A set of releases or versions having the same minor version number may be collectively referred to as .x , for example version 5.2.x to refer to versions 5.2, 5.2.1, 5.2.3, and all other versions in the 5.2 (five dot two) branch of that software. Minor Releases often make improvements to existing features and functionality. nightlies option), or you can download the release candidate here (zip).

What’s in this release candidate?

5.4.2 Release Candidate 1 features 20 bug and regression fixes on both coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. and default themes.

WordPress Core updates

  • #49956 – Spammers able to share unmoderated comments
  • #49749 – Registering rest routes with a slash-prefixed namespace give inconsistent results
  • #49798 – Default WordPress favicon in dark mode browsers
  • #49808 – WordPress 5.4: Deprecated: tag_row_actions is deprecated since version 3.0.0
  • #50121 – About page: correcting the order of headings
  • #50131 – Absent custom favicon triggers wp-adminadmin (and super admin) .htaccess/.htpasswd prompt on frontend in FIrefox
  • #49353 – button padding issue in edit plug on small device

Theme updates

The following updates were made to the default themes. You will not receive these updates if updating using the WordPress Beta Tester plugin. You must download the RC 1 package directly.

  • #37926 – Twenty Eleven & Twenty Twelve: Dropdown categoryCategory The 'category' taxonomy lets you group posts / content together that share a common bond. Categories are pre-defined and broad ranging. widgetWidget A WordPress Widget is a small block that performs a specific function. You can add these widgets in sidebars also known as widget-ready areas on your web page. WordPress widgets were originally created to provide a simple and easy-to-use way of giving design and structure control of the WordPress theme to the user. exceeds parent div when strings are long enough
  • #45865 – Twenty Nineteen: Consider decreasing the font size for widget titles
  • #48803 – Twenty Twenty: Custom post typeCustom Post Type WordPress can hold and display many different types of content. A single item of such a content is generally called a post, although post is also a specific post type. Custom Post Types gives your site the ability to have templated posts, to simplify the concept. that doesn’t support author, shows author
  • #48916 – Twenty Twenty: anchor links don’t work in mobile menu
  • #49088 – Twenty Twenty: Add icon for g.page links (Google business profile)
  • #49316 – Twenty Twenty missed license for images.
  • #49320 – Twenty Twenty: aligncenter>figcaption missing text-align: center; feature
  • #49322 – Twenty Twenty: Submenu items disappear underneath the Cover blockBlock Block is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience.
  • #49435 – Twenty Twenty: inconsistent top and bottom margins for .alignwide and .alignfull on Chrome vs Safari (cross browser issue)
  • #49699 – Twenty Nineteen: Center- and right-aligned heading accents appear broken
  • #49793 – Twenty Twenty: Images in list blocks are not positioned correctly
  • #49893 – TwentyTwenty: TikTok and ResearchGate Social Icons
  • #49932 – Small Typo in Twenty-Twenty

What’s next?

Committers: The dev-reviewed workflow (double committercommitter A developer with commit access. WordPress has five lead developers and four permanent core developers with commit access. Additionally, the project usually has a few guest or component committers - a developer receiving commit access, generally for a single release cycle (sometimes renewed) and/or for a specific component. sign-off) still applies when making any changes to the 5.4 branchbranch A directory in Subversion. WordPress uses branches to store the latest development code for each major release (3.9, 4.0, etc.). Branches are then updated with code for any minor releases of that branch. Sometimes, a major version of WordPress and its minor versions are collectively referred to as a "branch", such as "the 4.0 branch"..

The official 5.4.2 release is still scheduled for Wednesday, June 10, 2020. Happy Testing!

#5-4-2, #minor-releases

Devchat meeting summary – May 20, 2020

@francina facilitated the chat on this agenda.
Meeting recap by @audrasjb and @marybaum.

Full meeting transcript on Slack

Announcements

Just a few hours before the chat, the hardworking team behind the plugins and themes auto-updates feature committed it to Core! Congrats to all!

Check out this related ticketticket Created for both bug reports and feature development on the bug tracker. that adds Help Tabs text to update-core, themes and plugins WP-Adminadmin (and super admin) screens: #50215

If you’d like to be part of the Full Site Editing outreach experiment, the sign-up deadline is now May 22. @chanthaboune noted that’s just to show interest, not a commitment yet.

Highlighted posts

Upcoming releases

WordPress 5.5

The next major releasemajor release A release, identified by the first two numbers (3.6), which is the focus of a full release cycle and feature development. WordPress uses decimaling count for major release versions, so 2.8, 2.9, 3.0, and 3.1 are sequential and comparable in scope. of WordPress is in active development (Alpha cycle).

@francina noted the team is not quite complete, but it’s confirmed that @matt will return as release leadRelease Lead The community member ultimately responsible for the Release.@davidbaumwald as co-lead in the role of Triagetriage The act of evaluating and sorting bug reports, in order to decide priority, severity, and other factors. PM and @sergeybiryukov as Core tech lead. The 5.5 team will also mentor the 5.6 team.

WordPress 5.4.2

@audrasjb shared that there are 20 tickets in the milestone. Of those, 17 are closed as fixed.

@whyisjake leads this point releaseMinor Release A set of releases or versions having the same minor version number may be collectively referred to as .x , for example version 5.2.x to refer to versions 5.2, 5.2.1, 5.2.3, and all other versions in the 5.2 (five dot two) branch of that software. Minor Releases often make improvements to existing features and functionality., and the group firmed plans for a release candidaterelease candidate One of the final stages in the version release cycle, this version signals the potential to be a final release to the public. Also see alpha (beta). on June 3 and a final release June 10.

Components check-in and status updates

@whyisjake was exuberant that the core team was able to merge the auto-updates code today. This is going to do a great deal to help people stay on top of updates for a safer WordPress ecosystem.

The merge is just the latest significant step toward the master plan for 2020. Lazy-loading of images merged a few weeks ago, and XML sitemaps is making great progress as well.

On the accessibilityAccessibility Accessibility (commonly shortened to a11y) refers to the design of products, devices, services, or environments for people with disabilities. The concept of accessible design ensures both “direct access” (i.e. unassisted) and “indirect access” meaning compatibility with a person’s assistive technology (for example, computer screen readers). (https://en.wikipedia.org/wiki/Accessibility) side, @audrasjb shared that most of the accessibility team’s main projects for 5.5 are moving forward. Alternate views for posts, users, and comments lists should be ready for review soon.

@johnbillion wanted to note that weekly meetings for Multisitemultisite Used to describe a WordPress installation with a network of multiple blogs, grouped by sites. This installation type has shared users tables, and creates separate database tables for each blog (wp_posts becomes wp_0_posts). See also network, blog, site have restarted, on Tuesdays at 17:00 UTC in #core-multisite. Come join them!

In Site Health, @clorith pointed out that the Theme Review Team has implemented requirements for PHPPHP The web scripting language in which WordPress is primarily architected. WordPress requires PHP 7.4 or higher headers in themes. That move should push users in the right direction for updates.

As well, the Site Health component team has had discussions with hosting about bumping the version for Servehappy dashboard nags.

Open floor

@dlh wanted to highlight #48416. He recently encountered a use for it again. If you’re interested in the taxonomyTaxonomy A taxonomy is a way to group things together. In WordPress, some common taxonomies are category, link, tag, or post format. https://codex.wordpress.org/Taxonomies#Default_Taxonomies. component, please give it a look.

@sippis reminded everyone to register for WCEU 2020 Online Contributor DayContributor Day Contributor Days are standalone days, frequently held before or after WordCamps but they can also happen at any time. They are events where people get together to work on various areas of https://make.wordpress.org/ There are many teams that people can participate in, each with a different focus. https://2017.us.wordcamp.org/contributor-day/ https://make.wordpress.org/support/handbook/getting-started/getting-started-at-a-contributor-day/., which is Thursday, June 4, 2020 at 13:00 UTC. If you don’t register, you won’t get the emails you’ll need in advance, so don’t forget to register.

#5-4-2, #5-5, #dev-chat, #feature-autoupdates, #fse, #summary, #wceu, #wceu-2020