Subject: CVS commit: pkgsrc/www/wordpress
From: Daniel Horecki
Date: 2024-02-28 00:09:39
Message id: 20240227230940.01CF7FA27@cvs.NetBSD.org

Log Message:
Update to version 6.4.3.

Changelog:

6.4.3:

WordPress 6.4.3 includes 5 bug fixes on Core, 16 bug fixes for the Block Editor, \ 
and 2 security fixes.

The security team would like to thank the following people for responsibly \ 
reporting vulnerabilities, and allowing them to be fixed in this release:

- m4tuto for finding a PHP File Upload bypass via Plugin Installer (requiring \ 
admin privileges).
- @_s_n_t of @pentestltd working with Trend Micro Zero Day Initiative for \ 
finding an RCE POP Chains vulnerability.
The 6.4.3 release was led by Sarah Norris, Joe McGill, and Aaron Jorbin.

6.4.2:

WordPress 6.4.2 fixes 7 Big fixes

#59819 - Change CSS align-item from start / end to flex-start / flex-end for \ 
full browser support
#59821 - Irrelevant comment for translators
#59847 - Since WordPress 6.4, the functions.php of a theme moved to a different \ 
location using register_theme_directory is no longer called
#59869 - Incorrect reference in docblock for _register_theme_block_patterns
#59882 - Expose serialized template content to callbacks registered to the \ 
`hooked_block_types` filter.
#59891 - Incorrect example for WP_HTML_Tag_Processor class
#59935 -  Site editor: logo
The security team addressed the following vulnerability in WordPress 6.4.2

- A Remote Code Execution vulnerability that is not directly exploitable in core;
  however, the security team feels that there is a potential for high severity
  when combined with some plugins, especially in multisite installations.
The 6.4.2 release was led by @jorbin.

6.4.1:

WordPress 6.4.1 fixes 4 regressions introduced in version 6.4.

Fixed Core tickets from trac:

#59830 - Administration: Typos in wp_admin_notice() arguments
#59837 - Categories are removed when bulk editing posts
#59842 - WordPress 6.4 wp_remote_get (cURL error 28: Operation timed out)
#59846 - Reinstate the wpdb::$use_mysqli property

The 6.4.1 release was lead by @jorbin and @hellofromtonya.

6.4:

- Meet Twenty Twenty-Four
  Experience site editing at its finest with Twenty Twenty-Four. This new
  multi-faceted default theme has been thoughtfully crafted with three distinct
  use cases in mind, from writers and artists to entrepreneurs. Save time and
  effort with its extensive collection of over 35 templates and patterns - and
  unlock a world of creative possibilities with a few tweaks.
  Twenty Twenty-Four's remarkable flexibility ensures an ideal fit for almost
  any type of site. Check it out in this demo.

- Let your writing flow
  New enhancements ensure your content creation journey is smooth. Find new
  keyboard shortcuts in List View, smarter list merging, and enhanced control
  over link settings. A cohesive toolbar experience for the Navigation, List,
  and Quote blocks lets you work efficiently with the tooling options you need.

- The Command Palette just got better
  First introduced in WordPress 6.3, the Command Palette is a powerful tool to
  quickly find what you need, perform tasks efficiently, and speed up your building
  workflow. Enjoy a refreshed design and new commands to perform block-specific
  actions in this release.

- Categorize and filter patterns
  Patterns are an excellent way to leverage the potential of blocks and simplify
  your site-building process. WordPress 6.4 allows you to organize them with
  custom categories. Plus, new advanced filtering in the Patterns section of
  the inserter makes finding all your patterns more intuitive.

- Get creative with more design tools
  Build beautiful and functional layouts with an expanded set of design tools.
  Play with background images in Group blocks for unique designs and maintain
  image dimensions consistent with placeholder aspect ratios. Do you want to add
  buttons to your Navigation block? Now you can do it conveniently without a \ 
line of code.

- Make your images stand out
  Enable lightbox functionality to let your site visitors enjoy full-screen,
  interactive images on click. Apply it globally or to specific images to
  customize the viewing experience.

- Rename Group blocks
  Set custom names for Group blocks to organize and distinguish areas of your
  content easily. These names will be visible in List View.

- Preview images in List View
  New previews for Gallery and Image blocks in List View let you visualize and
  locate where images on your content are at a glance.

- Share patterns across sites
  Need to use your custom patterns on another site? Import and export them as
  JSON files from the Site Editor’s patterns view.

- Introducing Block Hooks
  Block Hooks enables developers to automatically insert dynamic blocks at specific
  content locations, enriching the extensibility of block themes through plugins.
  While considered a developer tool, this feature is geared to respect your
  preferences and gives you complete control to add, dismiss, and customize
  auto-inserted blocks to your needs.

- Performance wins
  This release includes more than 100 performance-related updates for a faster and
  more efficient experience. Notable enhancements focus on template loading
  performance for themes (including Twenty Twenty-Four), usage of the script loading
  strategies "defer" and "async" in core, blocks, and \ 
themes, and optimization
  of autoloaded options.

- Accessibility highlights
  Every release is committed to making WordPress accessible to everyone.
  WordPress 6.4 brings several List View improvements and aria-label support for
  the Navigation block, among other highlights. The admin user interface includes
  enhancements to button placements, "Add New" menu items context, and \ 
Site Health
  spoken messages. Learn more about all the work aimed at improving accessibility
  in this post.

- Other notes of interest
  PHP 8.1 or 8.2 are recommended for use with WordPress 6.4. Find in-depth \ 
details on PHP support in this post.
  WordPress 6.4 disables attachment pages for new installations.

6.3:

- Do everything in the Site Editor
  WordPress 6.3 brings your content, templates, and patterns together in the
  Site Editor for the first time. Add pages, browse style variations, create
  synced patterns, and enjoy fine-tuned control over navigation menus. Spend
  less time switching across different site areas - so you can focus on what
  matters most. Creation to completion, all in one place.

- Preview Block themes
  Experience block themes before you switch and preview the Site Editor, with
  options to customize directly before committing to a new theme.

- Create and sync patterns
  Arrange blocks and save them to the 'My Patterns' section for use throughout
  your site. You can even specify whether to sync your patterns (previously
  referred to as "Reusable blocks") so that one change applies to all \ 
parts of
  your site. Or, utilize patterns as a starting point with the ability to customize
  each instance.

- Work faster with the Command Palette
  Switch to a specific template or open your editor preferences with a new tool
  that helps you quickly access expanded functionality. With simple keyboard
  shortcuts (mac+k on Mac or Ctrl+k on Windows), clicking the sidebar search icon
  in Site View, or clicking the Title Bar, get where you need to go and do what
  you need to do in seconds.

- Sharpen your designs with new tools
  New design controls bring more versatility for fine-tuning, starting with the
  ability to customize your captions from the Styles interface without coding.
  You can manage your duotone filters in Styles for supported blocks and pick from
  the options provided by your theme or disable them entirely. The Cover block
  gets added settings for text color, layout controls, and border options, making
  this powerful block even more handy.

- Track design changes with Style revisions
  With a new audit trail, you can now see how your site looked at a specific time.
  Visualize these revisions in a timeline and access a one-click option to
  restore prior styles.

- Annotate with the Footnotes block
  Footnotes add convenient annotations throughout your content.
  Now you can add and link footnotes for any paragraph.

- Show or hide content with the Details block
  Use the Details block to avoid spoiling a surprise, create an interactive Q&A
  section, or hide a long paragraph under a heading.

- Performance gets a boost
  WordPress 6.3 has 170+ performance updates, including defer and async support
  for the Scripts API and fetchpriority support for images. These improvements,
  along with block template resolution, image lazy-loading, and the emoji loader,
  can dramatically improve your website's perceived load time.

- Accessibility remains a core focus
  Incorporating more than 50 accessibility improvements across the platform,
  WordPress 6.3 is more accessible than ever. Improved labeling, optimized tab
  and arrow-key navigation, revised heading hierarchy, and new controls in
  the admin image editor allow those using assistive technologies to navigate
  more easily.

- Other highlights
  - Set aspect ratio on images
    Specify your aspect ratios and ensure design integrity, especially when \ 
using images in patterns.

  - Build your site distraction-free
    Distraction-free designing is now available in the Site Editor.

  - Rediscover the Top Toolbar
   A revamped Top Toolbar offers parent selectors for nested blocks, options \ 
when selecting multiple blocks, and an interface embedded into the title bar \ 
with new functionality in mind.

  - List View improvements
    Drag and drop to every content layer and delete any block you would like in \ 
the updated List View.

  - Build templates with Patterns
    Create unique patterns to jumpstart template creation with a new modal \ 
enabling access to pattern selection.

6.2:

- Meet  the reimagined Site Editor
  An updated interface gives you more control over your site editing experience.
  Explore full previews of your templates and template parts, then jump in and
  get to editing your site from wherever you choose.

- Manage your menu in more ways with the Navigation block
  A new sidebar experience makes it easier to edit your site's navigation.
  Add, remove, and reorder menu items faster—no matter how complex
  your menus are.

- Discover a smoother experience for the Block Inserter
  A refreshed design gives you more visibility and easier access to the content
  you need. Use the Media tab to drag and drop content from your existing Media
  Library quickly. Find patterns faster with a split view that lets you navigate
  categories and see previews all at once.

- Find the controls you want when you need them
  Your block settings sidebar is better organized with tabs for Settings and
  Styles. So the tools you need are easy to identify and access.

- Build faster with headers and footers for block themes
  Discover a new collection of header and footer patterns. Use them with any
  block theme as a quick, high-quality starting point for your site's templates.

- Explore Openverse media right from the Editor
  Openverse's library catalogs over 600 million free, openly licensed stock images
  and audio - and now it's directly integrated into the Editor.

- Focus on writing with Distraction Free mode
  For those times you want to be alone with your ideas. You can now hide all
  your panels and controls, leaving you free to bring your content to life.

- Experience the Site Editor, now out of beta
  Stable and ready for you to dive in and explore: 6.2 is your personal invitation
  to discover what the next generation of WordPress - and block themes - can do.

- Meet the new Style Book
  Get a complete overview of how every block in your site's library looks.
  All in one place, all at a glance.

- Copy and paste styles
  Perfect the design on one type of block, then copy and paste those styles to
  other blocks to get just the look you want.

- Custom CSS
  Power up your site any way you wish. Add CSS to your site, or your blocks,
  for another level of control over your site's look and feel.

- Sticky positioning
  Choose to keep top-level group blocks fixed to the top of a page as visitors \ 
scroll.

- Importing widgets
  Options to import your favorite widgets from Classic themes to Block themes.

- Local fonts in themes
  Default WordPress themes offer better privacy with Google Fonts now included.

Files:
RevisionActionfile
1.107modifypkgsrc/www/wordpress/Makefile
1.53modifypkgsrc/www/wordpress/PLIST
1.91modifypkgsrc/www/wordpress/distinfo