IP blocked from plugins.svn?

Per https://wordpress.slack.com/archives/C02QB8GMM/p1666717073063339 it looks like two wordfence IPs have been blocked from plugins.svn.wordpress.org – other svn.wordpress.org hosts are accessible.

It appears they had an automated release process go wrong, causing the IPs to be blocked.

See the above SlackSlack Slack is a Collaborative Group Chat Platform https://slack.com/. The WordPress community has its own Slack Channel at https://make.wordpress.org/chat/. thread for IPs and backstory.

cc @wfscottb

#svn #prio2

Redirect request: {ios,android,iphone}.wordpress.org

Per #meta6530 can we please update the redirects for these subdomains to use the WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. https://wordpress.org/ mobile landing page instead of the WordPress.comWordPress.com An online implementation of WordPress code that lets you immediately access a new WordPress environment to publish your content. WordPress.com is a private company owned by Automattic that hosts the largest multisite in the world. This is arguably the best place to start blogging if you have never touched WordPress before. https://wordpress.com/ landing page?

Diff form:

Index: wporg-redirects.conf
--- wporg-redirects.conf	(revision HEAD)
+++ wporg-redirects.conf	(working copy)
@@ -120,7 +120,5 @@ server {
 	server_name android.wordpress.org ios.wordpress.org iphone.wordpress.org;

-	rewrite ^/development/? https://apps.wordpress.org/contribute/ permanent;
-	rewrite ^/faq/? https://apps.wordpress.org/support/ permanent;
-	rewrite ^/(.*)$ https://apps.wordpress.org/$1 permanent;
+	return 301 https://wordpress.org/mobile/;

If wanted, we can move this redirect from nginxNGINX NGINX is open source software for web serving, reverse proxying, caching, load balancing, media streaming, and more. It started out as a web server designed for maximum performance and stability. In addition to its HTTP server capabilities, NGINX can also function as a proxy server for email (IMAP, POP3, and SMTP) and a reverse proxy and load balancer for HTTP, TCP, and UDP servers. https://www.nginx.com/. into PHPPHP PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. http://php.net/manual/en/intro-whatis.php..

#redirects #nginx #prio2


Relax rate limiting for downloads.wordpress.org/plugin-checksums/

It appears that the pluginPlugin A plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party checksum download endpoint has had some rate limiting added, which is affecting clients of that endpoint.

See https://github.com/wp-cli/checksum-command/issues/91
See https://wordpress.slack.com/archives/C02QB8GMM/p1659451832035669

The legitimate uses of the endpoint do result in the checksums of all plugins on a site being requested in a short period of time. I’m unsure if clients avoid requesting 404 urls or only 200’s.

#downloads #ratelimit #prio2

Email forwarder hosting@wordpress.org for HelpScout

Can we please have an email forwarder from hosting@wordpress.org to hosting@wordpress.helpscoutapp.com

Ref: https://meta.trac.wordpress.org/ticket/6226

#email #helpscout #prio2

Email forwarder reports@wordpress.org for HelpScout

Can we please have an email forwarder set up from reports@wordpress.org to wp-project-reports@mu.helpscoutapp.com.

This is for some upcoming code-of-conduct stuff. I’ve set up a mailbox on the helpscout side (this is in the WordCampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more./Foundation HS instance).

cc @angelasjin.

#email #helpscout #prio2

Commit for images/core/emoji Could I…

Commit for images/coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress./emoji

Could I get commit access for dotorg’s image/core/emoji directory to add me to the folks who can upload new emoji assets?

When twemoji updates to new versions, in addition to the Core patch (e.g. #55395-core ), we need to upload to assets for the CDN to distribute.

We can continue to do the past way of bugging folks with commit access, but I’ll be joining as an Emoji component maintainer and I already have partial commit access elsewhere.

cc: @desrosj

#emoji #cdn #dotorg-svn #prio2


Clear codex cache & lower cache TTL?

Per https://meta.trac.wordpress.org/ticket/6168 some codex pages have a cached header HTML + CSS which are incompatible with one another, causing a display mismatch.

While we’re migrating away from the Codex, it appears likely to remain for some time.

Can we please
1. Flush the codex cache
2. Lower the cache TTL, perhaps to a week or two, to avoid the need for future system requests?

#codex #cache #prio2

Update getinvolved@ email forwarder

Can we please update the forwarder for getinvolved@wordpress.org from support@wordcampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more. to get-involved-wordpress@mu.helpscoutapp.com


Not high-priority as I’ve got a forward in place on the Helpscout side until changed.

#email #helpscout #prio2

Deploy & Clear caches for: Planet & Codex


In r18253-dotorg I altered a feed url from httpHTTP HTTP is an acronym for Hyper Text Transfer Protocol. HTTP is the underlying protocol used by the World Wide Web and this protocol defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. to httpsHTTPS HTTPS is an acronym for Hyper Text Transfer Protocol Secure. HTTPS is the secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to. The 'S' at the end of HTTPS stands for 'Secure'. It means all communications between your browser and the website are encrypted. This is especially helpful for protecting sensitive data like banking information., which requires the planet cache to be cleared in order for feed updates to continue. I have not deployedDeploy Launching code from a local development environment to the production web server, so that it's available to visitors. this change yet to planet.
r18257-dotorg alters where planet gets it’s headerHeader The header of your site is typically the first thing people will experience. The masthead or header art located across the top of your page is part of the look and feel of your website. It can influence a visitor’s opinion about your content and you/ your organization’s brand. It may also look different on different screen sizes./footer from, using some new APIAPI An API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. endpoints, to fetch a new header/footer.

Tested & confirmed working on sandbox.

Please deployDeploy Launching code from a local development environment to the production web server, so that it's available to visitors. & clear Planet cache.


In r14081-deploy I altered the Codex header/footer curl script to pull from the same set of new API endpoints.

Tested & confirmed working on my sandbox.

Please deploy & clear the Codex cache.

#prio2 #codex #planet #deploy

Delete 2.9.5 tag at buddypress.svn.wordpress.org

A BuddyPress committer made a mistake in the 2.9.5 tag while back-porting a fix & performing a bunch of minor releases. I do not have the power to bypass the pre-commit hook:

Committing transaction...
svn: E165001: Commit failed (details follow):
svn: E165001: Commit blocked by pre-commit hook (exit code 1) with output:
Cannot commit to a tag.

If possible, may I please have this tag deleted: https://buddypress.svn.wordpress.org/tags/2.9.5

Bonus ask, may I please have the power to commit to tags on the BuddyPress & bbPressbbPress Free, open source software built on top of WordPress for easily creating forums on sites. https://bbpress.org. repositories (or have the restriction removed completely?) It happens rarely, but it’s an easy clean-up for me when it does.

IIRC, the original reason we’d added that hook many years ago was because we were using those tags for deployment to dotorg, but we switched to deployingDeploy Launching code from a local development environment to the production web server, so that it's available to visitors. from plugins.svn when we introduced build processes.