Changelog: VIP MU plugins [Production]

Added

• wp vip security unban ip and wp vip security unban user commands to allow for self-serve user unlock

Changed

• Updated Akismet to 5.6.
• Moved the tooling for purging page cache from a widget to its own screen in the VIP navigation menu group and improved guardrails against accidental purges.

Added

• WordPress Dashboard widget to clear edge cache (origin responses, VIP File Service uploads, static assets)

Fixed

• Hardening: improve security of wpcom_vip_get_user_profile()
• Update TRUE_CLIENT_IP check to also encompass HTTP_CF_CONNECTING_IP

Changed

• Application telemetry now uses plain email addresses (instead of hashed values) to identify visitors
• The Purge Page Cache button in the admin bar is now available to users with the edit_others_posts capability, such as the Editor and Administrator roles.

Added

• WordPress Dashboard widget to clear edge cache (origin responses, VIP File Service uploads, static assets)

Changed

• Application telemetry now uses plain email addresses (instead of hashed values) to identify visitors

Changed

• Jetpack: Updates to latest version 15.5 for WordPress 6.8+ applications

Fixed

• Two Factor: OTP Authentication URL is rendered correctly.
• Converted inline scripts into external components to allow for Content-Security-Policy without unsafe-inline.
• Exit after redirect in Two Factor

Added

• Email address is now included in Pendo visitor telemetry data

Fixed

• The vip-real-time-collaboration integration loading issues.

Changed

• Updated the Two Factor plugin from 0.13.0 to 0.14.2

Fixed

• Enterprise Search: Fix get-indexes –active=true to properly retrieve term indexes in MS environments
• An intermittently failing test related to telemetry integration.
• The vip-real-time-collaboration integration loading issues.

Changed

• Added double-write support for Elasticsearch migrations to continue mirroring writes to ES7 after upgrading to ES8, enabling safe rollbacks during the post-migration window
• Update vip-real-time-collaboration to version 0.2 and Gutenberg to version 22.4.1-f48ad9c.
• Updated Gutenberg version string for the Real-Time Collaboration integration

Added

• Automatically enable Two-Factor Email authentication when creating VIP support users via WP-CLI
• Add support for staged roll-out of the Real-Time Collaboration integration

Changed

• Enterprise Search: Disallow use of ngram filters in mapping
• Enterprise Search: Only active indices get healed
• Added additional checks before the inclusion of an admin-facing telemetry library.

Fixed

• Enterprise Search: Fix CLI command wp vip-search get-index-settings

Fixed

• Enterprise Search: Fixes PHP 8 Warning: Undefined array key “image/svg+xml” when requesting media endpoint
• Fixes active parameter in vip-search get-indexes command to have a high limit instead of default 100

Changed

• Dynamically load the latest version of the VIP Block Data API and VIP Governance plugins
• Updated the wp-parsely submodule (used for local development environments) to version 3.22.0.
• Updated the default version of wp-parsely from 3.21 to 3.22.
• Jetpack: Update to latest version 15.4
• Enterprise Search: Only active indices get healed

Fixed

• Fixes active parameter in vip-search get-indexes command to have a high limit instead of default 100

Changed

• Query Monitor: Update to 3.20.2
• Search: Fix race condition causing duplicate key errors in the search index queue by adding a status WHERE condition to prevent concurrent updates of the same job.

Changed

• Updated the wp-parsely submodule (used for local development environments) to version 3.21.2.

Added

• Added wpvip_get_app_name, wpvip_get_app_environment, and wpvip_get_app_alias helper functions, which return the application name, app environment and full alias. E.g. example, develop and example.develop respectively

Fixed

• Enterprise Search: prevent parse_query hooks from corrupting CLI wp vip-search health validate-counts

Changed

• Search: Disable query logging during CLI contexts to prevent memory leaks

Changed

• Updated Rewrite Rules Inspector from 1.4.0 to 1.5.1.

Fixed

• Search Dev Tools now correctly shows the version when the migration is not in progress.
• Improve support for reverse proxies when checking if a request is coming from a Jetpack server.
• Search Dev Tools incorrectly identifying ES version when version is 8 but the migration mode is still enabled.

Added

• Added API to mark a file path/mask as local, effectively skipping upload to VIP File Service

Updated

• Jetpack 15.1

Changed

• Updated the default version of wp-parsely from 3.20 to 3.21.
• Updated the wp-parsely submodule (used for local development environments) to version 3.21.1.
• Updated Query Monitor from 3.18.0 to 3.20.0. This fixes some invalid HTML, resolves a JavaScript global object clash, and improves compatibility with PHP 8.5.

Added

• Search Dev Tools: show current version of Elasticsearch in-use.

Removed

• Search Dev Tools: remove algorithm version
• Query Monitor – add ES version to VIP panel

Fixed

• Improved stability during metrics collection in the Prometheus internal plugin.
• Flush operation on files open in read-only mode does not generate warnings.

Changed

• Release Integrations API publicly.
• Updated the wp-parsely submodule (used for local development environments) to version 3.20.8.
• Per-request and per-session ES migration testing is not limited to admin users anymore

Updated

• Default Jetpack version to 15.0

Fixed

• PHP 8.4 compatibility issues

Added

• Support for Twilio’s Verify for SMS 2FA (restricted)

Added

• Use Twilio Verify for 2FA via SMS for Qatar numbers
• Support for Twilio’s Verify for SMS 2FA (restricted)

Added

• Add support for Real-Time Collaboration integration.

Update wp-parsely submodule to version 3.20.7

We updated the wp-parsely submodule (used for local development environments) to version 3.20.7.