2023-10-18 - Weekly Hosting Meeting

[javiercasares]

Hosting Team meeting agenda 2023-10-18

EXCERPT:

PUBLIC AGENDA URL:
->

PUBLIC SUMMARY URL (if needed):
->

Agenda

WordPress Community

• WordPress 6.3
• WordPress 6.4
• WP-CLI 2.9.0

Hosting Team Time

• PHP Compatibility
• Hosting Team Representatives 2024
• Font Library Updates
• Make/Team Dashboards
• Events / Contributor Days

Open Floor

• Anything not in the agenda

Meeting

/here [meeting type="hosting"] Who's here to chat about hosting?

👋 Hello! This is the weekly meeting for the WordPress.org Hosting Team, who works with hosts and developers to help improve the WordPress user experience. This is a great time to ask any questions you may have, or visit Make/Hosting for more info.

🥇 If you participate in the Five for the Future program, drop your WordPress.org username in a thread here 👉

🤗 If you're new here, welcome! You are welcome to introduce yourself if you like.

Agenda

··· Here is the agenda for this meeting ···

[...] Use the agenda above [...]

Would anyone like to add to or change any items on the agenda?

OK, let's get started with the WordPress Community news.

WordPress Community

··· WordPress 6.3 ···

WordPress 6.3.2

This security and maintenance release features 19 bug fixes on Core, 22 bug fixes for the Block Editor, and 8 security fixes.

Security updates included in this release

The security team would like to thank the following people for responsibly reporting vulnerabilities, and allowing them to be fixed in this release:

• Marc Montpas of Automattic for finding a potential disclosure of user email addresses.
• Marc Montpas of Automattic for finding an RCE POP Chains vulnerability.
• Rafie Muhammad and Edouard L of Patchstack along with a WordPress commissioned third-party audit for each independently identifying a XSS issue in the post link navigation block.
• Jb Audras of the WordPress Security Team and Rafie Muhammad of Patchstack for each independently discovering an issue where comments on private posts could be leaked to other users.
• John Blackbourn (WordPress Security Team), James Golovich, J.D Grimes, Numan Turle, WhiteCyberSec for each independently identifying a way for logged-in users to execute any shortcode.
• mascara7784 and a third-party security audit for identifying a XSS vulnerability in the application password screen.
• Jorge Costa of the WordPress Core Team for identifying XSS vulnerability in the footnotes block.
• s5s and raouf_maklouf for independently identifying a cache poisoning DoS vulnerability.

··· WordPress 6.4 ···

WordPress 6.4 Beta 1
WordPress 6.4 Beta 2
WordPress 6.4 Beta 3
WordPress 6.4 Beta 4
[WordPress 6.4 RC 1]
Help Test WordPress 6.4
Bug bounty for WordPress 6.4 Beta

WordPress 6.4 RC1 is now ready for download and testing!

The WordPress 6.4 release is brought to you by an underrepresented gender release squad to increase participation of and partnership with those who identify as gender-underrepresented in the WordPress open-source project.

wp core update --version=6.4-rc1

Remember to Test and Report, and look for Bugs.

Ok, let's move on to Hosting Team time.

··· WP-CLI 2.9.0 ···

The v2.9.0 release of WP-CLI is scheduled to be published on Wednesday, October 25th 2023.

In addition to numerous bug fixes and enhancements, this release is also expected to address the last known compatibility issues with PHP 8.2 and the upcoming WordPress 6.4 version.

Hosting Team Time!

··· PHP Compatibility ···

WordPress 6.3 PHP Compatibility

After last week's post, we are going to prepare one similar for WordPress 6.4.

Everything is ready, pending the PHP 8.0 and PHP 8.1 compatibility.

Not for review, yet, because of that, but here's the document (if anyone wants to add/remove something.

https://make.wordpress.org/hosting/?p=98497&preview=1&_ppp=e7f2057887

··· Hosting Team Reps for 2024 ···

We're nearing the end of the year 2023. This means it the time of the year again to think about the Hosting Team Reps for the next year. In the upcoming weeks, we will open the call for nominees, followed by the voting process for the team reps. More information about the team reps is documented on make.wordpress.org

We will base the calling on this Team Reps document. So we can modify the actual proposal if needed.

··· Events / Contributor Day ···

Heads up, some events are coming down the pipeline along with some Contributor Days with a planned Hosting Table to participate in:

• 2023-10-19, WordCamp Germany, Gerolstein (Germany) led by @pfefferle and @Crixu
• 2023-10-22, WordCamp Seville, Seville (Spain)
• 2023-11-05, WordCamp San Jose, San Jose (Costa Rica)
• 2023-11-05, WordCamp Madrid, Madrid (Spain)

Is anyone going to another WordCamp and wants to lead a Hosting Table?

Open Floor

Ok, if nothing else, let's move on to ··· Open Floor ···. Folks are welcome to bring any topic up for discussion at this time.

...

Goodbye

Okay, we’re out of time for today, let’s close out this meeting.

You are welcome to continue the conversation here in the #hosting channel or on Make/Hosting, at any time.

Here are the team's upcoming meetings:

• 2023-10-18 at 18:00 UTC
• 2023-10-25 at 09:00 UTC
• 2023-10-25 at 18:00 UTC

Thank you all for joining and for your contributions to WordPress!

Hope you have a wonderful rest of your week! [/meeting]