Skip to content

Commit 7c245ce

Browse files
johnbillionjohnbillion
committed
Security: Cease support for WordPress 4.1 through 4.6.
Props desrosj, sirlouen, johnbillion. See #63595 git-svn-id: https://develop.svn.wordpress.org/trunk@60341 602fd350-edb4-49c9-b593-d223f7449a82
1 parent bc19232 commit 7c245ce

File tree

6 files changed

+9
-157
lines changed

6 files changed

+9
-157
lines changed

‎.github/workflows/reusable-phpunit-tests-v1.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
#
44
# A reusable workflow that runs the PHPUnit test suite with the specified configuration.
55
#
6-
# This workflow is used by branches 4.1 through 5.1.
6+
# This workflow is used by branches 4.7 through 5.1.
77
##
88
name: Run PHPUnit tests
99

‎.github/workflows/test-old-branches.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
branch: [
4848
'6.8', '6.7', '6.6', '6.5', '6.4', '6.3', '6.2', '6.1','6.0',
4949
'5.9', '5.8', '5.7', '5.6', '5.5', '5.4', '5.3', '5.2', '5.1', '5.0',
50-
'4.9', '4.8', '4.7', '4.6', '4.5', '4.4', '4.3', '4.2', '4.1'
50+
'4.9', '4.8', '4.7'
5151
]
5252
include:
5353
# PHP Compatibility testing was introduced in 5.5.

‎.github/workflows/upgrade-testing.yml‎

Lines changed: 6 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -172,67 +172,12 @@ jobs:
172172
new-version: ${{ inputs.new-version && inputs.new-version || 'latest' }}
173173
multisite: ${{ matrix.multisite }}
174174

175-
# Tests 4.x releases where the WordPress database version changed on the oldest and newest supported versions of PHP 7.
176-
#
177-
# The oldest version of WordPress receiving security updates should always be tested.
178-
upgrade-tests-wp-4x-php-7x-mysql:
179-
name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
180-
uses: ./.github/workflows/reusable-upgrade-testing.yml
181-
if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
182-
strategy:
183-
fail-fast: false
184-
matrix:
185-
os: [ 'ubuntu-24.04' ]
186-
php: [ '7.2', '7.4' ]
187-
db-type: [ 'mysql' ]
188-
db-version: [ '5.7', '8.4' ]
189-
wp: [ '4.1', '4.2', '4.3', '4.4', '4.5', '4.6', '4.7' ]
190-
multisite: [ false, true ]
191-
192-
exclude:
193-
# The PHP <= 7.3/MySQL 8.4 jobs currently fail due to mysql_native_password being disabled by default. See https://core.trac.wordpress.org/ticket/61218.
194-
- php: '7.2'
195-
db-version: '8.4'
196-
with:
197-
os: ${{ matrix.os }}
198-
php: ${{ matrix.php }}
199-
db-type: ${{ matrix.db-type }}
200-
db-version: ${{ matrix.db-version }}
201-
wp: ${{ matrix.wp }}
202-
new-version: ${{ inputs.new-version && inputs.new-version || 'latest' }}
203-
multisite: ${{ matrix.multisite }}
204-
205-
# Tests 4.x releases where the WordPress database version changed on the oldest and newest supported versions of PHP 8.
206-
#
207-
# The oldest version of WordPress receiving security updates should always be tested.
175+
# The oldest version of WordPress receiving security updates should always be tested against
176+
# the widest possible list of PHP/MySQL combinations.
208177
#
209-
# WordPress 4.6-4.9 are excluded from PHP 8+ testing because of the following fatal errors:
178+
# WordPress 4.7 is excluded from PHP 8+ testing because of the following fatal errors:
210179
# - Use of __autoload().
211180
# - array/string offset with curly braces.
212-
upgrade-tests-wp-4x-php-8x-mysql:
213-
name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
214-
uses: ./.github/workflows/reusable-upgrade-testing.yml
215-
if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
216-
strategy:
217-
fail-fast: false
218-
matrix:
219-
os: [ 'ubuntu-24.04' ]
220-
php: [ '8.0', '8.4' ]
221-
db-type: [ 'mysql' ]
222-
db-version: [ '5.7', '8.4' ]
223-
wp: [ '4.1', '4.2', '4.3', '4.4', '4.5' ]
224-
multisite: [ false, true ]
225-
with:
226-
os: ${{ matrix.os }}
227-
php: ${{ matrix.php }}
228-
db-type: ${{ matrix.db-type }}
229-
db-version: ${{ matrix.db-version }}
230-
wp: ${{ matrix.wp }}
231-
new-version: ${{ inputs.new-version && inputs.new-version || 'latest' }}
232-
multisite: ${{ matrix.multisite }}
233-
234-
# The oldest version of WordPress receiving security updates should always be tested against
235-
# the full list of PHP/MySQL combinations.
236181
upgrade-tests-oldest-wp-mysql:
237182
name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
238183
uses: ./.github/workflows/reusable-upgrade-testing.yml
@@ -241,10 +186,10 @@ jobs:
241186
fail-fast: false
242187
matrix:
243188
os: [ 'ubuntu-24.04' ]
244-
php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
189+
php: [ '7.2', '7.3', '7.4' ]
245190
db-type: [ 'mysql' ]
246191
db-version: [ '5.7', '8.0', '8.4', '9.3' ]
247-
wp: [ '4.1' ]
192+
wp: [ '4.7' ]
248193
multisite: [ false, true ]
249194

250195
exclude:
@@ -273,7 +218,7 @@ jobs:
273218
permissions:
274219
actions: read
275220
contents: read
276-
needs: [ upgrade-tests-recent-releases, upgrade-tests-wp-6x-mysql, upgrade-tests-wp-5x-php-7x-mysql, upgrade-tests-wp-5x-php-8x-mysql, upgrade-tests-wp-4x-php-7x-mysql, upgrade-tests-wp-4x-php-8x-mysql, upgrade-tests-oldest-wp-mysql ]
221+
needs: [ upgrade-tests-recent-releases, upgrade-tests-wp-6x-mysql, upgrade-tests-wp-5x-php-7x-mysql, upgrade-tests-wp-5x-php-8x-mysql, upgrade-tests-oldest-wp-mysql ]
277222
if: ${{ github.repository == 'WordPress/wordpress-develop' && github.event_name != 'pull_request' && always() }}
278223
with:
279224
calling_status: ${{ contains( needs.*.result, 'cancelled' ) && 'cancelled' || contains( needs.*.result, 'failure' ) && 'failure' || 'success' }}

‎.version-support-mysql.json‎

Lines changed: 0 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -182,47 +182,5 @@
182182
"5.5",
183183
"5.1",
184184
"5.0"
185-
],
186-
"4-6": [
187-
"5.7",
188-
"5.6",
189-
"5.5",
190-
"5.1",
191-
"5.0"
192-
],
193-
"4-5": [
194-
"5.7",
195-
"5.6",
196-
"5.5",
197-
"5.1",
198-
"5.0"
199-
],
200-
"4-4": [
201-
"5.7",
202-
"5.6",
203-
"5.5",
204-
"5.1",
205-
"5.0"
206-
],
207-
"4-3": [
208-
"5.7",
209-
"5.6",
210-
"5.5",
211-
"5.1",
212-
"5.0"
213-
],
214-
"4-2": [
215-
"5.7",
216-
"5.6",
217-
"5.5",
218-
"5.1",
219-
"5.0"
220-
],
221-
"4-1": [
222-
"5.7",
223-
"5.6",
224-
"5.5",
225-
"5.1",
226-
"5.0"
227185
]
228186
}

‎.version-support-php.json‎

Lines changed: 0 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -219,50 +219,5 @@
219219
"5.6",
220220
"7.0",
221221
"7.1"
222-
],
223-
"4-6": [
224-
"5.2",
225-
"5.3",
226-
"5.4",
227-
"5.5",
228-
"5.6",
229-
"7.0"
230-
],
231-
"4-5": [
232-
"5.2",
233-
"5.3",
234-
"5.4",
235-
"5.5",
236-
"5.6",
237-
"7.0"
238-
],
239-
"4-4": [
240-
"5.2",
241-
"5.3",
242-
"5.4",
243-
"5.5",
244-
"5.6",
245-
"7.0"
246-
],
247-
"4-3": [
248-
"5.2",
249-
"5.3",
250-
"5.4",
251-
"5.5",
252-
"5.6"
253-
],
254-
"4-2": [
255-
"5.2",
256-
"5.3",
257-
"5.4",
258-
"5.5",
259-
"5.6"
260-
],
261-
"4-1": [
262-
"5.2",
263-
"5.3",
264-
"5.4",
265-
"5.5",
266-
"5.6"
267222
]
268223
}

‎SECURITY.md‎

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,13 +32,7 @@ Full details of the WordPress Security Policy and the list of covered projects a
3232
| 4.9.x | Yes |
3333
| 4.8.x | Yes |
3434
| 4.7.x | Yes |
35-
| 4.6.x | Yes |
36-
| 4.5.x | Yes |
37-
| 4.4.x | Yes |
38-
| 4.3.x | Yes |
39-
| 4.2.x | Yes |
40-
| 4.1.x | Yes |
41-
| < 4.1.0 | No |
35+
| < 4.7.0 | No |
4236

4337
## Reporting a Vulnerability
4438

0 commit comments

Comments
 (0)