Changelog: VIP MU plugins [Staging]

Plugin Updated: http-concat

We’ve addressed a deprecation message Using ${var} in strings is deprecated, use {$var} instead.

https://github.com/Automattic/vip-go-mu-plugins/pull/4721

Jetpack AI Assistant

We’ve temporarily disabled Jetpack AI Assistant, we’ll re-instate it in the coming weeks.
If, for any reason, you wish to re-enable it, please drop the following snippet in a clients-mu-plugins

remove_filter( 'jetpack_set_available_extensions', 'vip_set_available_jetpack_extensions', 0 );

https://github.com/Automattic/vip-go-mu-plugins/pull/4722

Plugin Updated: Jetpack 12.4

We upgraded Jetpack to to Jetpack 12.4.

https://github.com/Automattic/vip-go-mu-plugins/pull/4738

Plugin Updated: Security

Previous refactor of security plugin unintentionally renamed action triggered on exceeded limit from login_limit_exceeded to login_exceeded. This change corrects back the rename of the action.

add_action( 'login_limit_exceeded', function() {
    // This action will be triggered again          
    ...
});

https://github.com/Automattic/vip-go-mu-plugins/pull/4703

Plugin Updated: VIP File Service

Use Image_CDN instead of the deprecated Jetpack_Photon for Jetpack 12.2+

https://github.com/Automattic/vip-go-mu-plugins/pull/4678

Disable “WP-Content Writable” test from Health Checks

WordPress 6.3 adds the ability for failed plugin and theme updates to be automatically rolled back. The feature requires a temp directory in wp-content/ to function.

As part of this feature, a new Health Check is added to ensure that the WordPress content directory is found and writable. On WPVIP updates are managed via GitHub and wp-content is read-only so this check will always fail with a critical error stating “Unable to Locate WordPress Content Directory”.

This change removes the update_temp_backup_writable check from the Health Checks page by default to avoid the confusing, and non-applicable critical health check warning.

https://github.com/Automattic/vip-go-mu-plugins/pull/4694

Disable “Available disk space” check added in WordPress 6.3

WordPress 6.3 adds a “Available disk space” check in the site health section. The check assumes self-managed and writeable filesystem. This check was disabled because it is not relevant on the WordPress VIP Platform and gives a bogus result.

https://github.com/Automattic/vip-go-mu-plugins/pull/4697

Plugin Updated: Jetpack

We updated the default Jetpack to 12.3

https://github.com/Automattic/vip-go-mu-plugins/pull/4645

Library updated: VIP Request Block

We’ve updated VIP Request Block library not run in WP-CLI context as that potentially may lead to inability to run CLI commands in case an expression evaluated to true in CLI context.

https://github.com/Automattic/vip-go-mu-plugins/pull/4640

Plugin Updated: VIP Helpers

Fixed a CSS bug in the non-prod bar that did not allow clicks to pass through to a portion of the application.

https://github.com/Automattic/vip-go-mu-plugins/pull/4646

Plugin Updated: Enterprise Search

We’ve disabled Settings Health Job for non-production environments to reduce the number of unnecessary operations in the cluster.

https://github.com/Automattic/vip-go-mu-plugins/pull/4651

Added high level method to enable VIP Integration Plugins

Added support to enable VIP Integration Plugins, starting with the VIP Block Data API plugin via the load_integration method.

https://github.com/Automattic/vip-go-mu-plugins/pull/4458

VaultPress Deprecation Preparations

Adds a mechanism to prevent loading VaultPress

https://github.com/Automattic/vip-go-mu-plugins/pull/4610

Plugin Updated: Security

We have a plugin that temporarily locks an account upon a certain number of failed login attempts as well as password recovery attempts.

This change changes defaults for the most common scenario of attempts from the same IP address from 5 failed attempts within 5 minutes to 3 failed attempts within 15 minutes. We also made the lock time 30 minutes.

We also made this plugin more configurable via filters. For example following configuration will change the behaviour to lock an account after 5 attempts within 2 minutes. The account then stays locked for 10 minutes.

add_filter( 'wpcom_vip_ip_username_login_threshold', fn() => 5 );
add_filter( 'wpcom_vip_invalid_login_window', fn() => MINUTE_IN_SECONDS * 2 );
add_filter( 'wpcom_vip_invalid_login_lock_period', fn() => MINUTE_IN_SECONDS * 10 );

https://github.com/Automattic/vip-go-mu-plugins/pull/4579

Plugin Updated: Query Monitor

Do not enable for non-prods by default.

Plugin Updated: Enterprise Search

Fix healing when inspect flag is passed into wp vip-search health validate-contents

Plugin Updated: VIP Init

Ensure HTTP_HOST is always set to prevent PHP warnings in wp_guess_url()

Plugin Updated: Enterprise Search

Fix type error when a callable passed to ep_weighting_configuration_for_search, ep_query_weighting_fields, ep_weighting_configuration, or ep_weighting_fields_for_post_type is not a method.

https://github.com/Automattic/vip-go-mu-plugins/pull/4561

Plugin Updated: Query Monitor APCu Cache

Fix broken markup when the APCu cache is not enabled.

https://github.com/Automattic/vip-go-mu-plugins/pull/4562

Plugin Updated: Enterprise Search

Add lock for vip_search_queue_sweeper cron job

Plugin Updated: Query Monitor

Only enable QM on non-production environments if admin bar is enabled

Plugin Updated: Jetpack

On non-production environments, we enforce blog_public option in a more robust way.

https://github.com/Automattic/vip-go-mu-plugins/pull/4494

Jetpack: Resync privacy settings for private JP sites

We want to resync the privacy settings for JP sites that have been marked as private (via the VIP_JETPACK_IS_PRIVATE constant), so we’re updating the option name that stores this state in order to cause these sites to re-sync.

https://github.com/Automattic/vip-go-mu-plugins/pull/4495

Plugin Updated: Private Sites

We respect other alternative methods for achieving privacy via plugins that also leverage blog_public option, but use other values than -1.

https://github.com/Automattic/vip-go-mu-plugins/pull/4512

Notice Updated: blog_public option

No longer show notice for sites with their blog_public option if -1 or privacy constant is set. Also updates messaging.

https://github.com/Automattic/vip-go-mu-plugins/pull/4520

Plugin Updated: Object Cache

Switched over all environments to using the new object cache drop-in. This drop-in utilizes the Memcached PHP extension, which has support for multiGet() operations that help reduce roundtrips and can notably speed up WordPress page load times.

https://github.com/Automattic/vip-go-mu-plugins/pull/4446

Added constant to enable the VIP Block Data API plugin

Added support to enable the VIP Block Data API plugin via the VIP_BLOCK_DATA_API_ENABLE constant.

https://github.com/Automattic/vip-go-mu-plugins/pull/4406

Add site-details endpoint.

We added another constant for switching over to the new site-details service when it’s ready.

https://github.com/Automattic/vip-go-mu-plugins/pull/4447

Plugin Updated: Enterprise Search

Fix fatal PHP message: Warning: Undefined property: Automattic\VIP\Search\Queue::$alerts in /var/www/wp-content/mu-plugins/search/includes/classes/class-queue.php on line 1140

https://github.com/Automattic/vip-go-mu-plugins/pull/4439

Plugin Updated: Query Monitor

We upgraded Query Monitor 3.10.1 to 3.12.1.

https://github.com/Automattic/vip-go-mu-plugins/pull/4383

Fix PHP warnings generated by cron data unavailable on dev-env

https://github.com/Automattic/vip-go-mu-plugins/pull/4396

Added “Application” section to Query Monitor “VIP” panel

https://github.com/Automattic/vip-go-mu-plugins/pull/4372

Use new QM_Data DTO.

https://github.com/Automattic/vip-go-mu-plugins/pull/4405

Plugin Updated: VIP Constants

Assign dbname property in define_db_constants()

https://github.com/Automattic/vip-go-mu-plugins/pull/4376

Plugin Updated: Wp_Cli_Db

WP-CLI: Unblock wp db tables command

https://github.com/Automattic/vip-go-mu-plugins/pull/4361

Plugin Updated: Enterprise Search

Add ability to deactivate in index version management

https://github.com/Automattic/vip-go-mu-plugins/pull/4379

Plugin Updated: Akismet

We upgraded Akismet 4.2.4 to Akismet 5.1.

https://github.com/Automattic/vip-go-mu-plugins/pull/4416

Function Updated: vip_strict_sanitize_username()

Return empty string if string not passed in

https://github.com/Automattic/vip-go-mu-plugins/pull/4417

Plugin Updated: Query Monitor

Add back “Environment” panel to Query Monitor

https://github.com/Automattic/vip-go-mu-plugins/pull/4373

Plugin Updated: Enteprise Search

Improved handling of async queue in scenarios where an index doesn’t exist yet.

https://github.com/Automattic/vip-go-mu-plugins/pull/4312

Plugin Updated: VIP Caching

Change wpcom_vip_get_page_by_title to use WP_Query if possible

https://github.com/Automattic/vip-go-mu-plugins/pull/4390

Drop-In Updated: Object Cache

Started using new object cache drop-in with wp_cache_get_multiple() support for develop environments.

https://github.com/Automattic/vip-go-mu-plugins/pull/4392

Add VIP_PARSELY_ENABLED constant and remove VIP_PARSELY_SKIP_LOAD constant

https://github.com/Automattic/vip-go-mu-plugins/pull/4342

Plugin Updated: Enterprise Search

Allow for query offloading while indexing is ongoing

https://github.com/Automattic/vip-go-mu-plugins/pull/4365

Fixed wp-parsely track info in self managed mode

https://github.com/Automattic/vip-go-mu-plugins/pull/4363

Plugin Updated: Enterprise Search

• Account for failed put_mapping call in add_version(): https://github.com/Automattic/vip-go-mu-plugins/pull/4291
• Add VIP_ELASTICSEARCH_DISABLED killswitch constant: https://github.com/Automattic/vip-go-mu-plugins/pull/4317
• Updates ElasticPress to include kill_sync() for all hooks in the SyncManager for post Indexable: https://github.com/Automattic/vip-go-mu-plugins/pull/4324
• Skip query integration if no active indexes present: https://github.com/Automattic/vip-go-mu-plugins/pull/4327

Plugin Updated: Query Monitor

Fix PHP error Uncaught TypeError: usort(): Argument #1 ($array) must be of type array, null given in /var/www/wp-content/mu-plugins/qm-plugins/qm-alloptions/class-qm-collector-alloptions.php:38

https://github.com/Automattic/vip-go-mu-plugins/pull/4298

Plugin Updated: Two-Factor

We upgraded Two-Factor to 0.8.1

https://github.com/Automattic/vip-go-mu-plugins/pull/4307

ll/4325

Plugin Updated: Enterprise Search

• Remove automatic swapping in cron job to rebuild index with incorrect number of shards: https://github.com/Automattic/vip-go-mu-plugins/pull/4283
• wp vip-search index --using-versions will ask to confirm the index version switch unless --skip-confirm is passed: https://github.com/Automattic/vip-go-mu-plugins/pull/4294
• Disable VIP-specific hooks ElasticPress\Indexable\Post\SyncManager::tear_down(): https://github.com/Automattic/vip-go-mu-plugins/pull/4311

Fixed error in the “widget updated” event

We fixed a fatal error that could occur in the “widget updated” event when attempting to save a custom widget.

https://github.com/Automattic/vip-go-mu-plugins/pull/4306

Plugin Updated: VIP Client mu-plugins

Do not load client mu-plugins while WordPress is being installed.

https://github.com/Automattic/vip-go-mu-plugins/pull/4247

Plugin Updated: Enterprise Search

Add CLI wp vip-search health rate-limits for rate limiting information

https://github.com/Automattic/vip-go-mu-plugins/pull/4240

Plugin Updated: Feature

Add is_disabled_by_ids()

https://github.com/Automattic/vip-go-mu-plugins/pull/4263

Plugin Updated: Enterprise Search

Added CLI command stop-validate-contents to stop any validate_contents processing.

https://github.com/Automattic/vip-go-mu-plugins/pull/4244

Plugin Updated: Enterprise Search

Bugfixes for elasticpress-next:

• ep_index_meta option will no longer be autoloaded
• ep_index_meta option will have a limit (50) in storing indexing errors
• facets will work without search term

https://github.com/Automattic/vip-go-mu-plugins/pull/4264

Non-production sticker placement updated

Shift sticker “non-production” so it doesn’t block modal after post is updated

https://github.com/Automattic/vip-go-mu-plugins/pull/4269

Plugin Updated: Enterprise Search

Fix PHP warning for “wp vip-search get-index-settings”

https://github.com/Automattic/vip-go-mu-plugins/pull/4277

Plugin Updated: Enterprise Search

Add timestamp to wp vip-search get-last-indexed-post-id

https://github.com/Automattic/vip-go-mu-plugins/pull/4266

Plugin Updated: Enterprise Search

Add CLI command wp vip-search queue info

https://github.com/Automattic/vip-go-mu-plugins/pull/4231

Caching function updated

Changed the cache key & group for wpcom_vip_get_page_by_path() to avoid unbuo

https://github.com/Automattic/vip-go-mu-plugins/pull/4217

Plugin Updated: Search Dev Tools

If being rate limited, differentiate between two different types: “search” or “indexing”

https://github.com/Automattic/vip-go-mu-plugins/pull/4238

Sticker Added: Non-production

Non-production sticker has been added to all non-production environments for users with edit_posts cap. Return false on vip_show_non_prod_bar filter to disable.

https://github.com/Automattic/vip-go-mu-plugins/pull/4177

Plugin Updated: VIP Helpers

Updated VIP redirect helper functions to account for being used in client-mu-plugins.

https://github.com/Automattic/vip-go-mu-plugins/pull/4230

Library Updated: Feature

We’ve introduced an API to get the bucket the current site is in for %-based feature rollouts.

https://github.com/Automattic/vip-go-mu-plugins/pull/4206

Plugin Updated: VaultPress

Stop loading VaultPress plugin by default for all VIP environments

https://github.com/Automattic/vip-go-mu-plugins/pull/4246

Plugin Updated: Enterprise Search

Fix accuracy of wp vip-search health validate-counts for the users feature on multi-sites.

https://github.com/Automattic/vip-go-mu-plugins/pull/4198

Plugin Updated: Feature

• Adds two new functions is_enabled_by_env() and get_features()
• is_enabled() will take into account if the feature is also enabled on an ID-basis or env-basis
• Adds wp vip-feature CLI commands to check the status of a feature

https://github.com/Automattic/vip-go-mu-plugins/pull/4191

Plugin Updated: Jetpack

Jetpack 11.9 is now the default version for non-pinned applications.

https://github.com/Automattic/vip-go-mu-plugins/pull/4205

Plugin Updated: VaultPress

Stop loading VaultPress plugin by default for non-production VIP environments

https://github.com/Automattic/vip-go-mu-plugins/pull/4183