VIP Platform Changelog

Plugin Updated: http-concat

We’ve addressed a deprecation message Using ${var} in strings is deprecated, use {$var} instead.

https://github.com/Automattic/vip-go-mu-plugins/pull/4721

Jetpack AI Assistant

We’ve temporarily disabled Jetpack AI Assistant, we’ll re-instate it in the coming weeks.
If, for any reason, you wish to re-enable it, please drop the following snippet in a clients-mu-plugins

remove_filter( 'jetpack_set_available_extensions', 'vip_set_available_jetpack_extensions', 0 );

https://github.com/Automattic/vip-go-mu-plugins/pull/4722

Plugin Updated: Jetpack 12.4

We upgraded Jetpack to to Jetpack 12.4.

https://github.com/Automattic/vip-go-mu-plugins/pull/4738

Plugin Updated: Security

Previous refactor of security plugin unintentionally renamed action triggered on exceeded limit from login_limit_exceeded to login_exceeded. This change corrects back the rename of the action.

add_action( 'login_limit_exceeded', function() {
    // This action will be triggered again          
    ...
});

https://github.com/Automattic/vip-go-mu-plugins/pull/4703

Plugin Updated: VIP File Service

Use Image_CDN instead of the deprecated Jetpack_Photon for Jetpack 12.2+

https://github.com/Automattic/vip-go-mu-plugins/pull/4678

Disable “WP-Content Writable” test from Health Checks

WordPress 6.3 adds the ability for failed plugin and theme updates to be automatically rolled back. The feature requires a temp directory in wp-content/ to function.

As part of this feature, a new Health Check is added to ensure that the WordPress content directory is found and writable. On WPVIP updates are managed via GitHub and wp-content is read-only so this check will always fail with a critical error stating “Unable to Locate WordPress Content Directory”.

This change removes the update_temp_backup_writable check from the Health Checks page by default to avoid the confusing, and non-applicable critical health check warning.

https://github.com/Automattic/vip-go-mu-plugins/pull/4694

Disable “Available disk space” check added in WordPress 6.3

WordPress 6.3 adds a “Available disk space” check in the site health section. The check assumes self-managed and writeable filesystem. This check was disabled because it is not relevant on the WordPress VIP Platform and gives a bogus result.

https://github.com/Automattic/vip-go-mu-plugins/pull/4697

Plugin Updated: Jetpack

We updated the default Jetpack to 12.3

https://github.com/Automattic/vip-go-mu-plugins/pull/4645

Library updated: VIP Request Block

We’ve updated VIP Request Block library not run in WP-CLI context as that potentially may lead to inability to run CLI commands in case an expression evaluated to true in CLI context.

https://github.com/Automattic/vip-go-mu-plugins/pull/4640

Plugin Updated: VIP Helpers

Fixed a CSS bug in the non-prod bar that did not allow clicks to pass through to a portion of the application.

https://github.com/Automattic/vip-go-mu-plugins/pull/4646

Plugin Updated: Enterprise Search

We’ve disabled Settings Health Job for non-production environments to reduce the number of unnecessary operations in the cluster.

https://github.com/Automattic/vip-go-mu-plugins/pull/4651

Added high level method to enable VIP Integration Plugins

Added support to enable VIP Integration Plugins, starting with the VIP Block Data API plugin via the load_integration method.

https://github.com/Automattic/vip-go-mu-plugins/pull/4458

VaultPress Deprecation Preparations

Adds a mechanism to prevent loading VaultPress

https://github.com/Automattic/vip-go-mu-plugins/pull/4610

Plugin Updated: Security

We have a plugin that temporarily locks an account upon a certain number of failed login attempts as well as password recovery attempts.

This change changes defaults for the most common scenario of attempts from the same IP address from 5 failed attempts within 5 minutes to 3 failed attempts within 15 minutes. We also made the lock time 30 minutes.

We also made this plugin more configurable via filters. For example following configuration will change the behaviour to lock an account after 5 attempts within 2 minutes. The account then stays locked for 10 minutes.

add_filter( 'wpcom_vip_ip_username_login_threshold', fn() => 5 );
add_filter( 'wpcom_vip_invalid_login_window', fn() => MINUTE_IN_SECONDS * 2 );
add_filter( 'wpcom_vip_invalid_login_lock_period', fn() => MINUTE_IN_SECONDS * 10 );

https://github.com/Automattic/vip-go-mu-plugins/pull/4579