Merge pull request #5691 from Automattic/staging

Production release v20240702.0

.github/actions/run-wp-tests/action.yml

@@ -61,7 +61,7 @@ runs:
         fi
 
     - name: Set up PHP
-      uses: shivammathur/setup-php@2.30.5
+      uses: shivammathur/setup-php@2.31.0
       with:
         coverage: ${{ steps.coverage.outputs.coverage }}
         ini-values: ${{ steps.coverage.outputs.ini }}

.github/workflows/changelog-summary-prod.yml

@@ -25,7 +25,7 @@ jobs:
           egress-policy: audit
 
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Retrieve tags
         run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
@@ -50,7 +50,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: softprops/[email protected].5
+      - uses: softprops/[email protected].6
         with:
           generate_release_notes: true
           tag_name: ${{ steps.id-generator.outputs.id }}
@@ -61,7 +61,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Setup PHP
         uses: shivammathur/[email protected]

.github/workflows/changelog-summary-staging.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Setup PHP
         uses: shivammathur/[email protected]

.github/workflows/ci.yml

@@ -36,6 +36,8 @@ jobs:
           - { wp: 6.2.x,   ms: 'yes', jp: 'yes', php: '8.1', phpunit: '' }
           - { wp: 6.3.x,   ms: 'no',  jp: 'yes', php: '8.1', phpunit: '' }
           - { wp: 6.3.x,   ms: 'yes', jp: 'yes', php: '8.1', phpunit: '' }
+          - { wp: 6.4.x,   ms: 'no',  jp: 'yes', php: '8.1', phpunit: '' }
+          - { wp: 6.4.x,   ms: 'yes', jp: 'yes', php: '8.1', phpunit: '' }
           - { wp: latest,  ms: 'no',  jp: 'yes', php: '8.1', phpunit: '', coverage: 'yes' }
           - { wp: latest,  ms: 'yes', jp: 'yes', php: '8.1', phpunit: '', coverage: 'yes' }
           - { wp: nightly, ms: 'no',  jp: 'yes', php: '8.1', phpunit: '' }
@@ -62,7 +64,7 @@ jobs:
           MYSQL_DATABASE: wordpress_test
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: recursive
 

.github/workflows/codeql-analysis.yml

@@ -29,7 +29,7 @@ jobs:
           - javascript
     steps:
       - name: Checkout repository
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/[email protected]

.github/workflows/core-tests.yml

@@ -42,14 +42,14 @@ jobs:
           echo "PHP_FPM_GID=$(id -g)" >> "${GITHUB_ENV}"
 
       - name: Checkout WordPress
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           repository: wordpress/wordpress-develop
           path: wordpress
           ref: ${{ steps.version.outputs.latest }}
 
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: recursive
           path: wordpress/src/wp-content/mu-plugins

.github/workflows/coverage-develop.yml

@@ -36,7 +36,7 @@ jobs:
           MYSQL_DATABASE: wordpress_test
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: recursive
 

.github/workflows/dependency-review.yml

@@ -22,7 +22,7 @@ jobs:
             github.com:443
 
       - name: Check out the source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Review dependencies
         uses: actions/[email protected]

.github/workflows/deploy.yml

@@ -22,19 +22,19 @@ jobs:
       contents: write
     steps:
       - name: Check out the source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: recursive
           path: ${{ env.SOURCE_REPO_PATH }}
 
       - name: Check out Automattic/vip-go-mu-plugins-ext
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           repository: Automattic/vip-go-mu-plugins-ext
           path: ${{ env.EXT_REPO_PATH }}
 
       - name: Check out Automattic/vip-go-mu-plugins-built
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           repository: Automattic/vip-go-mu-plugins-built
           path: ${{ env.TARGET_REPO_PATH }}

.github/workflows/e2e.yml

@@ -68,7 +68,7 @@ jobs:
             wordpress.org:443
 
       - name: Check out repository code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: true
 
@@ -131,7 +131,7 @@ jobs:
           egress-policy: audit
 
       - name: Check out repository code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Setup Node
         uses: actions/[email protected]

.github/workflows/lint.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Set up PHP
         uses: shivammathur/[email protected]
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
 
       - name: Setup Node
         uses: actions/[email protected]

.github/workflows/parsely.yml

@@ -50,7 +50,7 @@ jobs:
           MYSQL_DATABASE: wordpress_test
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           submodules: recursive
 

.github/workflows/search-dev-tools.yml

@@ -22,7 +22,7 @@ jobs:
       contents: write
     steps:
       - name: Check out source code
-        uses: actions/[email protected].6
+        uses: actions/[email protected].7
         with:
           token: ${{ secrets.WPCOM_VIP_BOT_TOKEN }}
 

.github/workflows/search-e2e.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/[email protected].6
+      uses: actions/[email protected].7
       with:
         submodules: recursive
 

composer.json

@@ -6,7 +6,7 @@
         "erusev/parsedown": "1.7.4",
         "dms/phpunit-arraysubset-asserts": "0.5.0",
         "yoast/phpunit-polyfills": "2.0.1",
-        "johnpbloch/wordpress-core": "6.5.3",
+        "johnpbloch/wordpress-core": "6.5.5",
         "wp-phpunit/wp-phpunit": "6.5.4",
         "wp-cli/wp-cli": "2.10.0"
     },

files/class-vip-filesystem.php

@@ -174,7 +174,7 @@ public function filter_upload_dir( $params ) {
 	 * @param  string[]  An array of data for a single file.
 	 */
 	public function filter_validate_file( $file ) {
-		$file_name   = $file['name'];
+		$file_name   = rawurlencode( $file['name'] );
 		$upload_path = trailingslashit( $this->get_upload_path() );
 		$file_path   = $upload_path . $file_name;