automattic/jetpack-connection

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/32404733068

Upstream-Ref: Automattic/jetpack@a40fd23

Added

• Error UI: Document displayable connection errors and identify cases where consumers should offer a support link. [#51360]

Fixed

• Terms of Service: Avoid a redundant per-request database query on sites without a persistent object cache. [#50965]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/32293173666

Upstream-Ref: Automattic/jetpack@ffc51ba

Changed

• Tracking: Sanitize the event name, event properties, user agent, IP address, and language recorded with Tracks events. [#51316]

Fixed

• Report errors from XML-RPC faults, which were invisible to the existing intake. We also remove invalid_signature from the displayable error codes as it is not actionable. [#51208]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/31812520945

Upstream-Ref: Automattic/jetpack@1f4a8d7

Fixed

• Account status: Do not report an account mismatch when the WordPress.com email and the site email differ only in letter case. [#51285]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/31717620581

Upstream-Ref: Automattic/jetpack@7b41c90

Security

• Connection: Leave another user's broken-token error out of the connection error data, so the reconnect CTA is no longer offered against a token it cannot restore. [#51034]

Changed

• Connection: Warn a secondary admin that reconnecting on the connection owner's behalf transfers ownership and disconnects every other user. [#51034]

Fixed

• Connection: Stop displaying connection owner errors that refer to a previous owner. [#51034]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/31616375175

Upstream-Ref: Automattic/jetpack@646a1ab

Fixed

• Report connection errors that happen while signing an outgoing request, record the specific reason the token could not be loaded, and store the request body hash with them. [#51116]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/31503680625

Upstream-Ref: Automattic/jetpack@4db00b2

Added

• Add a site data endpoint so plugins without the Jetpack plugin can read the WordPress.com site record. [#51057]
• Connection Health: Surface the blocked-request connection failure (host blocking WordPress.com requests) as a verified connection error with an admin notice, and re-check the connection daily on the heartbeat cron. [#51145]

Fixed

• Error Handler: Prevent a fatal error when a request runs during a plugin update and an older version of the Error_Handler class is already loaded. [#51173]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/31096702852

Upstream-Ref: Automattic/jetpack@d041791

Changed

• Error Handler: Standardize the stored connection error structure with explicit error type and direction fields. [#50992]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/30861081724

Upstream-Ref: Automattic/jetpack@db1322b

Changed

• Update dependencies. [#50674]

Committed via a GitHub action: https://github.com/Automattic/jetpack/actions/runs/30618747253

Upstream-Ref: Automattic/jetpack@18e8de8

Added

• Connection: Expose the connection-error audience (site/owner/user) to the Jetpack dashboard so error notices can be tailored to the viewer.

Changed

• Connection: Fetch connected user data from WordPress.com over REST instead of XML-RPC.

Fixed

• Connection: cache wpcom.getUser XML-RPC failures briefly in get_connected_user_data().

Added

• Show non-owner admins who needs to reconnect instead of a reconnect button when connection ownership is locked. [#50662]

Changed

• Update package dependencies. [#50751]

Changed

• Update dependencies. [#50674]

Changed

• Heartbeat: Report the site environment stats (WordPress/PHP versions, site configuration, etc.) for all connected sites. [#50006]
• Update dependencies. [#50551]
• Update package dependencies. [#50529]

Changed

• Internal updates.

Changed

• Route the is_usable_domain() IP check through Utils::ip_is_public(), so reserved and special-use ranges (CGNAT, link-local/cloud-metadata, multicast, and similar) are rejected consistently with the rest of the codebase. [#50175]

Changed

• Update package dependencies. [#50097] [#50183]

Changed

• Internal updates.

Changed

• Heartbeat: Report the missing connection owner and XML-RPC error stats for all connected sites. [#49922]

Changed

• Reduce per-request memory footprint on connected sites by deferring package version tracking to request shutdown. [#49803]

Changed

• Update package dependencies. [#49831]

Fixed

• Connection: Do not offer to reconnect when the site is blocking WordPress.com's connection test (e.g. firewall/WAF). [#49655]

Changed

• Update package dependencies. [#49691] [#49757]

Added

• Connectors: Surface Jetpack Safe Mode (Identity Crisis) state and resolution options in the connector card. [#49486]

Changed

• Update package dependencies. [#49631]

Fixed

• Connectors: Add cache-busting version to the connector card script module so updated assets are served after changes. [#49486]
• Identity Crisis: Fix confirming Safe Mode again after clearing it from the admin bar, which could silently fail when the safe_mode_confirmed option was stale in a persistent object cache. [#49486]
• Identity Crisis: Prevent the migrate (Update address) action from failing with a false "Could not delete sync error option" error when the sync_error_idc option is stale in cache. [#49486]

Changed

• Internal updates.

Added

• SSO: Validate user tokens during SSO login to detect and replace stale tokens after database migration. [#47567]

Changed

• Update package dependencies. [#49273]

Changed

• Update dependencies. [#48834]

Changed

• Internal updates.

Changed

• Internal updates.

Changed

• Internal updates.

Changed

• Update dependencies. [#48834]

Changed

• Connectors: Disable the ability to connect/disconnect from the Connectors card while the site is in offline mode. [#49305]

Added

• Connection: Migrate connection/test and connection/test-wpcom REST endpoints from Jetpack plugin. [#49198]

Changed

• Exclude additional unneeded files from the Composer package. [#49014]
• Jetpack Connection Health: Migrate tests from Jetpack plugin to Connection package. [#47837]
• Users List: Use dynamic connector logo and tooltip based on connected plugin families. [#49093]

Added

• Abilities: Opt jetpack/get-connection-status into the MCP tool surface (meta.mcp public tool). [#49113]
• Abilities API: Add jetpack/get-connection-status read ability. [#48735]

Changed

• Abilities: Align the shared jetpack ability-category description with the Jetpack plugin's registrar so the visible text is consistent regardless of which subpackage registers first. [#48735]
• Abilities: Point jetpack/get-connection-status registration_url at the WP 7.0+ Connectors screen when available. [#48735]
• Abilities: Rename jetpack/get-connection-status site_connected output field to site_registered to match site-registration terminology. [#48735]
• Abilities: Tighten jetpack/get-connection-status permission to current_user_can( 'jetpack_admin_page' ). [#48735]

Added

• Connection: Signal to Calypso that the site already has a connection owner so the authorize page can show appropriate content for secondary user connections. [#48904]

Changed

• Connection: Show the Jetpack icon beside the Connected label in the WordPress.com account column on the Users screen. [#48951]
• Connectors: Show shorter, role-appropriate connect prompt for secondary user connections when the site already has a connection owner. [#48904]
• Update package dependencies. [#48405]

Fixed

• Phan: Address PhanPluginDuplicateConditionalNullCoalescing violations. [#48887]

Changed

• Internal updates.

Changed

• Connection: Include the comma-separated list of connection-using plugin slugs on every authorize URL, not only those built by the connectors card flow. [#48713]
• Update dependencies. [#48778]

Changed

• Update dependencies. [#46383]

Added

• Connector: Forward from and plugins parameters to the register and authorize_url REST endpoints, and expose connectedPlugins to the connectors card before registration. [#48318]

Changed

• Internal: No longer require automattic/jetpack-changelogger as a per-project dev dependency. [#48225]

Fixed

• Connector card: Fix description padding not reserving space in Chrome, reset connecting state on back-button navigation, use text label instead of busy stripes on link-style disconnect button. [#48482]
• Connector card: Honor redirect parameter after already-authorized webhook. [#48482]
• SSO: Render the single sign-on login button on the recovery mode landing page. [#48340]

Added

• Connectors: Add jetpack_connection_plugin_logos filter to allow third-party plugins to register a custom SVG logo on the Connectors card. [#48146]

Changed

• Document jpTracksContext as intentional minimal Tracks-specific global. [#48096]
• Rebrand connector to Jetpack connection. [#48146]

Fixed

• Populate blog_id in JetpackScriptData and jpTracksContext so Tracks events include blog_id. [#48096]

Changed

• Update package dependencies. [#48106]

Added

• Add hooks for external storage provider registration: jetpack_external_storage_init fires before the first storage read, and jetpack_external_storage_provider_registered fires after a provider is registered (invalidating cached connection status). [#48022]

Fixed

• Ensure connector card modals and links are accessible. [#47969]

Changed

• Update dependencies. [#46383]

Changed

• Update package dependencies. [#47890] [#47998]

Added

• Add SSO details to the Connection details card. [#47861]
• Add WordPress.com connector card for the WP 7.0+ Settings > Connectors screen with connection details and disconnect support. [#47792]
• Connection: Display inline error notices for site registration, authorization, and disconnect failures in the WordPress.com Connectors card. [#47865]

Changed

• Connector card: Prevent site disconnection and owner account unlinking on Wordpress.com and VIP sites. [#47862]

Fixed

• Connection Details: Fix layout of the connection details modal to properly handle varying URL lengths and screen sizes. [#47879]
• Fix connection flow in connector card when using Gutenberg and ensure modals always show on disconnection. [#47902]
• Update Woo logo on connector card. [#47884]

Changed

• Replace transient-based SSO broker URL storage with a constant-based approach gated by a WordPress.com authorization signal, and fall back to WordPress.com SSO when the referrer is a WordPress.com domain. [#47630]
• Update package dependencies. [#47818]

Fixed

• Fixed SSO login conflict with Two-Factor plugin 0.15.0+ that caused a redundant local 2FA prompt after completing WordPress.com 2FA. [#47306]

Changed

• Update package dependencies. [#47684]

Changed

• Update dependencies. [#47472]

Changed

• Update package dependencies. [#47496]

Changed

• Update dependencies. [#46383]

Changed

• Update package dependencies. [#47300]

Removed

• Remove deprecated methods and attributes. [#47251]

Changed

• Update package dependencies. [#47173]

Added

• Add maybe_add_origin_site_id method to the Urls class. [#46783]

Changed

• Update package dependencies. [#47099]

Changed

• Move IDC stats from Jetpack plugin to connection package. [#46967]
• Update package dependencies. [#47002]

Changed

• Update package dependencies. [#46936]

Changed

• Update dependencies. [#46383]

Changed

• Remove error handling methods for external storage and add host agnostic error reporting. [#46646]
• Update package dependencies. [#46854]

Changed

• Update dependencies. [#46383]

Added

• IDC: Preserve re-validation parameters when new idc error is created. [#46613]

Changed

• Update package dependencies. [#46647]

Changed

• Update package dependencies. [#46552]

Changed

• Add transients to prevent excessive remote calls. [#46503]