Changeset 60341

Timestamp:

06/23/2025 06:26:45 PM (5 months ago)

Author:

johnbillion

Message:

Security: Cease support for WordPress 4.1 through 4.6.

Props desrosj, sirlouen, johnbillion.

See #63595

Location:

trunk

Files:

• .github/workflows/reusable-phpunit-tests-v1.yml (modified) (1 diff)
• .github/workflows/test-old-branches.yml (modified) (1 diff)
• .github/workflows/upgrade-testing.yml (modified) (3 diffs)
• .version-support-mysql.json (modified) (1 diff)
• .version-support-php.json (modified) (1 diff)
• SECURITY.md (modified) (1 diff)

trunk/.github/workflows/reusable-phpunit-tests-v1.yml

@@ -4 +4 @@
 # A reusable workflow that runs the PHPUnit test suite with the specified configuration.
 #
-# This workflow is used by branches 4.1 through 5.1.
+# This workflow is used by branches 4.7 through 5.1.
 ##
 name: Run PHPUnit tests

trunk/.github/workflows/test-old-branches.yml

@@ -48 +48 @@
             '6.8', '6.7', '6.6', '6.5', '6.4', '6.3', '6.2', '6.1','6.0',
             '5.9', '5.8', '5.7', '5.6', '5.5', '5.4', '5.3', '5.2', '5.1', '5.0',
-            '4.9', '4.8', '4.7', '4.6', '4.5', '4.4', '4.3', '4.2', '4.1'
+            '4.9', '4.8', '4.7'
         ]
         include:

trunk/.github/workflows/upgrade-testing.yml

@@ -173 +173 @@
       multisite: ${{ matrix.multisite }}
 
-  # Tests 4.x releases where the WordPress database version changed on the oldest and newest supported versions of PHP 7.
+  # The oldest version of WordPress receiving security updates should always be tested against
+  # the widest possible list of PHP/MySQL combinations.
   #
-  # The oldest version of WordPress receiving security updates should always be tested.
-  upgrade-tests-wp-4x-php-7x-mysql:
-    name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
-    uses: ./.github/workflows/reusable-upgrade-testing.yml
-    if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ 'ubuntu-24.04' ]
-        php: [ '7.2', '7.4' ]
-        db-type: [ 'mysql' ]
-        db-version: [ '5.7', '8.4' ]
-        wp: [ '4.1', '4.2', '4.3', '4.4', '4.5', '4.6', '4.7' ]
-        multisite: [ false, true ]
-
-        exclude:
-          # The PHP <= 7.3/MySQL 8.4 jobs currently fail due to mysql_native_password being disabled by default. See https://core.trac.wordpress.org/ticket/61218.
-          - php: '7.2'
-            db-version: '8.4'
-    with:
-      os: ${{ matrix.os }}
-      php: ${{ matrix.php }}
-      db-type: ${{ matrix.db-type }}
-      db-version: ${{ matrix.db-version }}
-      wp: ${{ matrix.wp }}
-      new-version: ${{ inputs.new-version && inputs.new-version || 'latest' }}
-      multisite: ${{ matrix.multisite }}
-
-  # Tests 4.x releases where the WordPress database version changed on the oldest and newest supported versions of PHP 8.
-  #
-  # The oldest version of WordPress receiving security updates should always be tested.
-  #
-  # WordPress 4.6-4.9 are excluded from PHP 8+ testing because of the following fatal errors:
+  # WordPress 4.7 is excluded from PHP 8+ testing because of the following fatal errors:
   # - Use of __autoload().
   # - array/string offset with curly braces.
-  upgrade-tests-wp-4x-php-8x-mysql:
-    name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
-    uses: ./.github/workflows/reusable-upgrade-testing.yml
-    if: ${{ github.repository == 'WordPress/wordpress-develop' || ( github.event_name == 'pull_request' && github.actor != 'dependabot[bot]' ) }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ 'ubuntu-24.04' ]
-        php: [ '8.0', '8.4' ]
-        db-type: [ 'mysql' ]
-        db-version: [ '5.7', '8.4' ]
-        wp: [ '4.1', '4.2', '4.3', '4.4', '4.5' ]
-        multisite: [ false, true ]
-    with:
-      os: ${{ matrix.os }}
-      php: ${{ matrix.php }}
-      db-type: ${{ matrix.db-type }}
-      db-version: ${{ matrix.db-version }}
-      wp: ${{ matrix.wp }}
-      new-version: ${{ inputs.new-version && inputs.new-version || 'latest' }}
-      multisite: ${{ matrix.multisite }}
-
-  # The oldest version of WordPress receiving security updates should always be tested against
-  # the full list of PHP/MySQL combinations.
   upgrade-tests-oldest-wp-mysql:
     name: ${{ matrix.wp }} to ${{ inputs.new-version && inputs.new-version || 'latest' }}
@@ -242 +187 @@
       matrix:
         os: [ 'ubuntu-24.04' ]
-        php: [ '7.2', '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4' ]
+        php: [ '7.2', '7.3', '7.4' ]
         db-type: [ 'mysql' ]
         db-version: [ '5.7', '8.0', '8.4', '9.3' ]
-        wp: [ '4.1' ]
+        wp: [ '4.7' ]
         multisite: [ false, true ]
 
@@ -274 +219 @@
       actions: read
       contents: read
-    needs: [ upgrade-tests-recent-releases, upgrade-tests-wp-6x-mysql, upgrade-tests-wp-5x-php-7x-mysql, upgrade-tests-wp-5x-php-8x-mysql, upgrade-tests-wp-4x-php-7x-mysql, upgrade-tests-wp-4x-php-8x-mysql, upgrade-tests-oldest-wp-mysql ]
+    needs: [ upgrade-tests-recent-releases, upgrade-tests-wp-6x-mysql, upgrade-tests-wp-5x-php-7x-mysql, upgrade-tests-wp-5x-php-8x-mysql, upgrade-tests-oldest-wp-mysql ]
     if: ${{ github.repository == 'WordPress/wordpress-develop' && github.event_name != 'pull_request' && always() }}
     with:

trunk/.version-support-mysql.json

@@ -183 +183 @@
         "5.1",
         "5.0"
-    ],
-    "4-6": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
-    ],
-    "4-5": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
-    ],
-    "4-4": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
-    ],
-    "4-3": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
-    ],
-    "4-2": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
-    ],
-    "4-1": [
-        "5.7",
-        "5.6",
-        "5.5",
-        "5.1",
-        "5.0"
     ]
 }

trunk/.version-support-php.json

@@ -220 +220 @@
         "7.0",
         "7.1"
-    ],
-    "4-6": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6",
-        "7.0"
-    ],
-    "4-5": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6",
-        "7.0"
-    ],
-    "4-4": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6",
-        "7.0"
-    ],
-    "4-3": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6"
-    ],
-    "4-2": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6"
-    ],
-    "4-1": [
-        "5.2",
-        "5.3",
-        "5.4",
-        "5.5",
-        "5.6"
     ]
 }

trunk/SECURITY.md

@@ -33 +33 @@
 | 4.8.x   | Yes       |
 | 4.7.x   | Yes       |
-| 4.6.x   | Yes       |
-| 4.5.x   | Yes       |
-| 4.4.x   | Yes       |
-| 4.3.x   | Yes       |
-| 4.2.x   | Yes       |
-| 4.1.x   | Yes       |
-| < 4.1.0 | No        |
+| < 4.7.0 | No        |
 
 ## Reporting a Vulnerability