Baby Yoda

Jetpack receives a forced update

ByDavid Bisset Posted on Updated on

Tony Perez took a deeper dive into what happened and shared the community feedback he received:

  • The Meta/Security team with the WordPress Foundation made the decision to push the update — not Automattic or Jetpack.
  • It’s important to differentiate between Auto-updates and Forced Updates. WordPress 5.5 introduced auto-updates, but forced updates are different. They have always been in the WordPress platform for emergencies.

John Jacoby on Twitter firmly stated that “Jetpack did not disobey user settings. It cannot and did not update or heal itself.”

I agree with Tony: forced updates are “especially dangerous when put into the hands of a bad actor.” But perhaps for now, the risks are outweighed by the benefits. Either way, if documentation or explanations about “Forced Updates” exist on the official WordPress.org site, I haven’t seen them. This seems like an important thing to explain well for the community.

Similar Posts

Plugin repo and frameworks

ByBrian Krogsgard

There’s a newly clarified policy on Make Plugins from Mika Epstein where she says that developer frameworks are no longer going to be approved for the plugin repo. Plugins like CMB2, Advanced Custom Fields and others that may be dependencies of other plugins, and are not feature plugins of their own, would theoretically not be allowed. However,…

Post Status Excerpt (No. 48) — Running a WordPress Business
| | | |

Post Status Excerpt (No. 48) — Running a WordPress Business

ByDavid Bisset

When — and what — should you outsource to SaaS and open source? Learn this an more from Dave Rodenbaugh, founder of Recapture.io.

Properly using wp_reset_postdata(), wp_reset_query() and variable naming in queries

ByBrian Krogsgard

Understanding how to alter the main query and how to create custom queries in WordPress are two essentials for WordPress developers. You should familiarize yourself with a few things right away: What is the WP_Query class, including creating new custom queries for secondary loops Never use query_posts() Alter queries with the pre_get_posts hook You also…

Licensing matters

ByBrian Krogsgard

There’s a popular WordPress vulnerability scanner called WPScan. To validate its popularity: it has over 1,800 commits, 750 stars, and 165 forks on Github. The scanner is used by a lot of security folks, as well as other service and product vendors. The plugin has historically been split license, sort-of, between GPL and some kind…

What is a WordPress theme anyway? — Draft podcast
| |

What is a WordPress theme anyway? — Draft podcast

ByKatie Richards

In this episode, Joe and Brian discuss WordPress themes, the functionality people put into them, and the challenges that face the WordPress ecosystem with the current state of theming.

|

ThemeForest authors can now ditch support for Internet Explorer 8

ByBrian Krogsgard

ThemeForest announced that authors can opt not to support Internet Explorer 8, citing the widespread adoption of Windows 8 and jQuery 2.0 dropping support for the old browser. We’re finally entering an era of only modern web browsers.