The VIP Platform Changelog includes updates made to the functionality and behavior of the platform's tooling (i.e. VIP Dashboard, VIP-CLI), VIP MU plugins, VIP File System, caching layers, and other underlying architecture and software.
14 July 2026
17:13:52 GMT+0000
Added
- (Enterprise Search) Add filters in User’s query_db method
- (Enterprise Search) Add support of include, lower_limit_object_id, and upper_limit_object_id for User Indexable
- (Enterprise Search) Add a more detailed stack trace into the Search Dev Tools query log
Fixed
- (Enterprise Search) Fix ordering user queries by meta key/value
07 July 2026
17:40:21 GMT+0000
Added
- (Enterprise Search) Add filters in User’s query_db method
- (Enterprise Search) Add support of include, lower_limit_object_id, and upper_limit_object_id for User Indexable
- (Enterprise Search) Add a more detailed stack trace into the Search Dev Tools query log
Fixed
- (Enterprise Search) Fix ordering user queries by meta key/value
07 July 2026
15:02:26 GMT+0000
Fixed
- Fixed the “Read more” documentation link on the Secure MCP log pages to point to the Secure MCP documentation instead of the general audit log docs.
06 July 2026
18:05:04 GMT+0000
Added
- Added new
vip defensive-mode commands to enable, disable, and configure defensive mode for an environment.
- Added step-up verification support for protected actions, including automatic retry after verification succeeds.
Changed
- Non-interactive runs now fail fast when step-up verification is required, unless you explicitly opt in to wait with
--rechallenge-wait or VIP_RECHALLENGE_WAIT=1.
- Production defensive-mode mutations in non-interactive workflows now require explicit confirmation bypass via
--skip-confirmation.
- Dev-env: Limit
vip-dev-env.yml.ejs to plain YAML with <%= configDir %> substitution.
Fixed
- Login and logout now clear cached elevated permissions to prevent reuse across account switches on the same machine.
02 July 2026
14:35:08 GMT+0000
Fixed
- Fixed Safe Publish config loading on multisite so site-level and network-site-level settings are available together.
Removed
- WP-CLI: Removed the already-disabled Async_Scheduler_Command class
Changed
- Secure MCP: MCP requests whose authenticated email does not match a WordPress user now return a
401 error instead of silently declining authentication.
02 July 2026
13:59:32 GMT+0000
Changed
- Secure MCP: MCP requests whose authenticated email does not match a WordPress user now return a
401 error instead of silently declining authentication.
01 July 2026
11:26:27 GMT+0000
Fixed
- Secure storage may be unavailable even if the keychain provider successfully initializes.
30 June 2026
17:55:46 GMT+0000
Fixed
- Fixed Safe Publish config loading on multisite so site-level and network-site-level settings are available together.
Removed
- WP-CLI: Removed the already-disabled Async_Scheduler_Command class
30 June 2026
17:53:11 GMT+0000
Changed
- WP Memcached: Updates version
30 June 2026
17:40:39 GMT+0000
Fixed
- Fixed an error that could prevent editing existing organization notifications.
29 June 2026
23:19:18 GMT+0000
Fixed
- Fixed an error that prevented the WP-CLI logs page from loading when the command history contained an errored command.
26 June 2026
19:31:14 GMT+0000
Fixed
- Fixed Tollbit integration domain rows so
www. domains show the configured domain separately from the normalized Tollbit DNS target.
26 June 2026
07:06:19 GMT+0000
Fixed
- Fixed the Agentforce organization search empty-state copy.
25 June 2026
22:05:47 GMT+0000
Fixed
- Fixed Tollbit integration domain rows so
www. domains show the configured domain separately from the normalized Tollbit DNS target.
24 June 2026
21:48:25 GMT+0000
Fixed
vip wp: Fixed a crash (ERR_USE_AFTER_CLOSE) on Node.js 24 when a websocket reconnect occurred during a long-running non-interactive command.
23 June 2026
16:21:30 GMT+0000
Changed
- WP Memcached: Updates version
23 June 2026
01:37:00 GMT+0000
v4.0.8
Fixed
- “Request content length mismatch” error on file uploads.
22 June 2026
20:25:37 GMT+0000
Fixed
- Fixed file uploads failing with “Response body object should not be disturbed or locked” when an upload request was retried, and ensured retries re-stream the file instead of reusing a consumed stream.
22 June 2026
16:57:58 GMT+0000
Changed
- Safe Publish multisite environments now configure connected site URL and sync mode per network site.
Fixed
- Fixed Basic Auth validation and clearing behavior for Safe Publish configuration.
- Fixed password reveal button alignment in password inputs.
19 June 2026
12:20:56 GMT+0000
Fixed
- Fixed the environment type badge being hidden in the breadcrumb on mobile viewports when viewing app sub-pages.