John Blackbourn

🐞 bcrypt implementation causes user password to get incorrectly overwritten

3

### Expected behavior Hi folks, I'm working on implementing the switch to using bcrypt for password hashing in WordPress core and somebody pointed out that ClassicPress made the switch in...

Fixes #94 ## Concerns * If a user switches into an account and then goes on holiday for a week, other users who attempt to switch into the account will...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@actions-sast` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/34 for more details. This is an automated PR created by [the Test...

From https://x.com/snim2/status/1846315377929732278 > Does it warn about deprecations? Not sure if it makes sense for this extension, and quite how it would be done, but I like the idea.

False positive about a vulnerable action version number

1

**Describe the bug** I'm getting the following error for a workflow that uses `actions/download-artifact@v4`: ``` The workflow or action depends on a GitHub Action with known vulnerabilities. ``` Reading https://github.com/advisories/GHSA-cxww-7g56-2vh6...

srcset and sizes attributes missing from the featured image meta box

5

**Describe the bug** When setting a featured image with the classic editor, the image in the meta box contains `srcset` and `sizes` attributes which means the potentially very large original...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@dependabot/github_actions/github-actions-694872dfd1` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/77 for more details. This is an automated PR created by [the Test...

This PR updates [Plugin Infrastructure](https://github.com/johnbillion/plugin-infrastructure) to `johnbillion/plugin-infrastructure@dependabot/github_actions/github-actions-694872dfd1` for testing purposes. This PR should not be merged. See https://github.com/johnbillion/plugin-infrastructure/pull/77 for more details. This is an automated PR created by [the Test...