Skip to content

fix(faustwp): restore wordpress.org as plugin update channel#2389

Merged
josephfusco merged 1 commit into
canaryfrom
fix/faustwp-restore-wp-org-updates
Jun 3, 2026
Merged

fix(faustwp): restore wordpress.org as plugin update channel#2389
josephfusco merged 1 commit into
canaryfrom
fix/faustwp-restore-wp-org-updates

Conversation

@josephfusco

Copy link
Copy Markdown
Member

Summary

Removes the Update URI: false header from faustwp.php so WordPress checks wordpress.org for faustwp plugin updates. The header was added in #1964 (2024-10) alongside the embedded PluginUpdater; restoring the default behaviour makes wordpress.org the canonical update channel.

Includes a changeset crediting ParkHyunWoo (@hwpark6804-gif) for the 1.8.8 security fix reported via Patchstack (GHSA-q6pm-r77q-qcv3).

Scope

  • Affects future installs and reinstalls.
  • Sites already running 1.8.0 retain Update URI: false in their installed faustwp.php until they update to a version shipped after this change. Reaching those sites still requires either the PluginUpdater endpoint or a manual install.

Test plan

  • After merge, the regenerated Version Packages PR bumps @faustwp/wordpress-plugin to 1.8.9.
  • On release, verify the published faustwp.php on wordpress.org SVN does not contain Update URI:.
  • On a fresh WordPress install of faustwp from wordpress.org, confirm the standard plugin update flow detects updates.

@josephfusco josephfusco requested a review from a team as a code owner June 3, 2026 17:22
@changeset-bot

changeset-bot Bot commented Jun 3, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 50fcc97

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@faustwp/wordpress-plugin Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

📦 Next.js Bundle Analysis for @faustwp/getting-started-example

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

@josephfusco josephfusco merged commit 139479d into canary Jun 3, 2026
16 checks passed
@josephfusco josephfusco deleted the fix/faustwp-restore-wp-org-updates branch June 3, 2026 17:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant