John Blackbourn

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `actions-sast`. See https://github.com/johnbillion/plugin-infrastructure/pull/34. This is an automated PR created by [the Test Plugins workflow](https://github.com/johnbillion/plugin-infrastructure/actions/workflows/test-plugins.yml).

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `actions-sast`. See https://github.com/johnbillion/plugin-infrastructure/pull/34. This is an automated PR created by [the Test Plugins workflow](https://github.com/johnbillion/plugin-infrastructure/actions/workflows/test-plugins.yml).

#21022 Switch to using bcrypt for hashing passwords and security keys

2

Latest approach to switching from phpass to bcrypt via the native PHP password hashing functions. This covers: * User passwords * User password reset keys * User request keys *...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...

E_STRICT is deprecated in PHP 8.4

3

### Bug report The `E_STRICT` constant is deprecated in PHP 8.4 but PHPStan doesn't yet trigger an error when it's used unconditionally. Refs: * https://3v4l.org/qfNga/rfc#vgit.master * https://wiki.php.net/rfc/deprecations_php_8_4#remove_e_strict_error_level_and_deprecate_e_strict_constant * https://github.com/PHPCompatibility/PHPCompatibility/pull/1772 ###...

🐞 bcrypt implementation causes user password to get incorrectly overwritten

3

### Expected behavior Hi folks, I'm working on implementing the switch to using bcrypt for password hashing in WordPress core and somebody pointed out that ClassicPress made the switch in...

Fixes #94 ## Concerns * If a user switches into an account and then goes on holiday for a week, other users who attempt to switch into the account will...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...