[wp-trac] [WordPress Trac] #48850: Plugins Screen: introduce "Automatic updates" column / option
WordPress Trac
noreply at wordpress.org
Thu Feb 6 21:10:11 UTC 2020
#48850: Plugins Screen: introduce "Automatic updates" column / option
-------------------------------------+-------------------------------------
Reporter: jeherve | Owner: audrasjb
Type: feature request | Status: accepted
Priority: normal | Milestone: 5.4
Component: Plugins | Version: 3.7
Severity: normal | Resolution:
Keywords: has-patch needs-testing | Focuses: administration,
has-screenshots dev-feedback | multisite
needs-dev-note needs-design |
-------------------------------------+-------------------------------------
Comment (by peterwilsoncc):
@desrosj I've taken a quick look at [attachment:"48850.12.diff"], here are
my notes.
* If `WP_AUTO_UPDATE_PLUGINS === false`, `should_update_to_version()`
should return early and never hit the filter. This will prevent developers
overriding the site owner's hard coded choice.
* For plugins that use semantic versioning and therefore may have breaking
changes between versions (such as WooCommerce), do we need to modify the
.org API to return `offer_minor` and `offer_patch` to allow for the plugin
additional control over how it may be auto updated
* To prevent `malicious-plugin` from messing what's offerer to `good-
honest-plugins`, do we need to use PHP Reflections to limit filters
running on the the plugin to the plugin itself. This is super complex I
know but keep in mind the offered file can be changed from wp.org to
malicious.org via filters. This is perhaps a topic for another time.
Generally, if `WP_AUTO_UPDATE_PLUGINS === false` and sites using version
control then the auto-updates UI ought not be displayed.
Sorry for the lateness of my notes on the ticket. I do agree with the
comment above that this is probably too late for 5.4, unfortunately given
everyones hard work. Could it be released as a feature plugin between 5.4
and 5.5?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/48850#comment:90>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list