Update Jetpack plugin from 13.8 to 13.8.1

wp-content/plugins/jetpack/CHANGELOG.md

@@ -2,8 +2,17 @@
 
 ### This is a list detailing changes for all Jetpack releases.
 
+## 13.8.1 - 2024-09-10
+
+### Bug Fixes
+- Contact Form: Prevent unexpected payload contents from causing fatal errors. [#39271]
+- General: Silence noisy warnings. [#39270] [#39272]
+- Jetpack AI: Update default_content filter to not enforce the second parameter type to prevent fatal errors. [#39276]
+- REST API: Fix missing requirement in admin-menu endpoint which could lead to a broken admin menu. [#39256]
+- Web Application Firewall: Prevent incorrect parsing of unsupported HTTP content types. [#39262]
+
 ## 13.8 - 2024-09-04
-### Major Enhancements
+### Major enhancements
 - Custom CSS: Remove feature in favor of WordPress core implementation. [#38865]
 - Embeds: Remove YouTube and Vimeo embeds in favor of WordPress core implementation. [#39096]
 - WordPress.com Toolbar: The feature has been removed. [#38804]

wp-content/plugins/jetpack/_inc/lib/core-api/wpcom-endpoints/class-wpcom-rest-api-v2-endpoint-admin-menu.php

@@ -6,6 +6,8 @@
  * @since 9.1.0
  */
 
+use Automattic\Jetpack\Status\Host;
+
 /**
  * Class WPCOM_REST_API_V2_Endpoint_Admin_Menu
  */
@@ -83,6 +85,9 @@ public function get_item_permissions_check( $request ) { // phpcs:ignore Generic
 	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.
 	 */
 	public function get_item( $request ) { // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter, VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
+		if ( ! ( new Host() )->is_wpcom_platform() ) {
+			require_once JETPACK__PLUGIN_DIR . 'jetpack_vendor/automattic/jetpack-masterbar/src/admin-menu/load.php';
+		}
 
 		// All globals need to be declared for menu items to properly register.
 		global $admin_page_hooks, $menu, $menu_order, $submenu, $_wp_menu_nopriv, $_wp_submenu_nopriv; // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable

wp-content/plugins/jetpack/composer.json

@@ -23,19 +23,19 @@
 		"automattic/jetpack-compat": "^3.0.2",
 		"automattic/jetpack-composer-plugin": "^2.0.3",
 		"automattic/jetpack-config": "^2.0.4",
-		"automattic/jetpack-connection": "^2.12.5",
+		"automattic/jetpack-connection": "^2.12.6",
 		"automattic/jetpack-constants": "^2.0.4",
 		"automattic/jetpack-device-detection": "^2.1.4",
 		"automattic/jetpack-error": "^2.0.3",
-		"automattic/jetpack-forms": "^0.32.13",
+		"automattic/jetpack-forms": "^0.32.13.1",
 		"automattic/jetpack-image-cdn": "^0.4.8",
 		"automattic/jetpack-import": "^0.8.7",
 		"automattic/jetpack-ip": "^0.2.3",
 		"automattic/jetpack-jitm": "^3.1.19",
 		"automattic/jetpack-licensing": "^2.0.7",
 		"automattic/jetpack-logo": "^2.0.4",
 		"automattic/jetpack-masterbar": "^0.8.1",
-		"automattic/jetpack-my-jetpack": "^4.34.0",
+		"automattic/jetpack-my-jetpack": "^4.34.1",
 		"automattic/jetpack-plugins-installer": "^0.4.2",
 		"automattic/jetpack-post-list": "^0.6.3",
 		"automattic/jetpack-publicize": "^0.51.0",
@@ -44,10 +44,10 @@
 		"automattic/jetpack-search": "^0.45.0",
 		"automattic/jetpack-stats": "^0.13.1",
 		"automattic/jetpack-stats-admin": "^0.21.1",
-		"automattic/jetpack-status": "^3.3.4",
+		"automattic/jetpack-status": "^3.3.5",
 		"automattic/jetpack-sync": "^3.9.0",
 		"automattic/jetpack-videopress": "^0.24.4",
-		"automattic/jetpack-waf": "^0.18.4",
+		"automattic/jetpack-waf": "^0.18.4.1",
 		"automattic/jetpack-wordads": "^0.3.29",
 		"automattic/woocommerce-analytics": "^0.1.8",
 		"scssphp/scssphp": "1.12.0"
@@ -94,7 +94,7 @@
 		"platform": {
 			"ext-intl": "0.0.0"
 		},
-		"autoloader-suffix": "f11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8",
+		"autoloader-suffix": "f11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8_1",
 		"allow-plugins": {
 			"automattic/jetpack-autoloader": true,
 			"automattic/jetpack-composer-plugin": true

wp-content/plugins/jetpack/jetpack.php

@@ -4,7 +4,7 @@
  * Plugin URI: https://jetpack.com
  * Description: Security, performance, and marketing tools made by WordPress experts. Jetpack keeps your site protected so you can focus on more important things.
  * Author: Automattic
- * Version: 13.8
+ * Version: 13.8.1
  * Author URI: https://jetpack.com
  * License: GPL2+
  * Text Domain: jetpack
@@ -34,7 +34,7 @@
 
 define( 'JETPACK__MINIMUM_WP_VERSION', '6.5' );
 define( 'JETPACK__MINIMUM_PHP_VERSION', '7.0' );
-define( 'JETPACK__VERSION', '13.8' );
+define( 'JETPACK__VERSION', '13.8.1' );
 
 /**
  * Constant used to fetch the connection owner token

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.12.6] - 2024-09-10
+### Removed
+- Removed throwing of warning if a given Jetpack options does not exist. [#39270]
+
 ## [2.12.5] - 2024-08-29
 ### Changed
 - Sync: Remove the checksum for active plugins if present when sync is not active, so it gets recalculated when sync gets activated [#39098]
@@ -1167,6 +1171,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Separate the connection library into its own package.
 
+[2.12.6]: https://github.com/Automattic/jetpack-connection/compare/v2.12.5...v2.12.6
 [2.12.5]: https://github.com/Automattic/jetpack-connection/compare/v2.12.4...v2.12.5
 [2.12.4]: https://github.com/Automattic/jetpack-connection/compare/v2.12.3...v2.12.4
 [2.12.3]: https://github.com/Automattic/jetpack-connection/compare/v2.12.2...v2.12.3

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/legacy/class-jetpack-options.php

@@ -231,8 +231,6 @@ private static function get_option_from_database( $name, $default = false ) {
 			}
 		}
 
-		trigger_error( sprintf( 'Invalid Jetpack option name: %s', esc_html( $name ) ), E_USER_WARNING ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_trigger_error -- Don't wish to change legacy behavior.
-
 		return $default;
 	}
 

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/src/class-package-version.php

@@ -12,7 +12,7 @@
  */
 class Package_Version {
 
-	const PACKAGE_VERSION = '2.12.5';
+	const PACKAGE_VERSION = '2.12.6';
 
 	const PACKAGE_SLUG = 'connection';
 

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-forms/CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.32.13.1] - 2024-09-10
+### Fixed
+- Contact Forms: Add checks for unexpected contents of textarea elements. [#39271]
+
 ## [0.32.13] - 2024-09-04
 ### Changed
 - Check for private and password-protected posts when handling the contact form submissions. [#39238]
@@ -647,6 +651,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Added a new jetpack/forms package [#28409]
 - Added a public load_contact_form method for initializing the contact form module. [#28416]
 
+[0.32.13.1]: https://github.com/automattic/jetpack-forms/compare/v0.32.13...v0.32.13.1
 [0.32.13]: https://github.com/automattic/jetpack-forms/compare/v0.32.12...v0.32.13
 [0.32.12]: https://github.com/automattic/jetpack-forms/compare/v0.32.11...v0.32.12
 [0.32.11]: https://github.com/automattic/jetpack-forms/compare/v0.32.10...v0.32.11

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-forms/src/class-jetpack-forms.php

@@ -15,7 +15,7 @@
  */
 class Jetpack_Forms {
 
-	const PACKAGE_VERSION = '0.32.13';
+	const PACKAGE_VERSION = '0.32.13.1';
 
 	/**
 	 * Load the contact form module.

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-forms/src/contact-form/class-contact-form.php

@@ -1102,8 +1102,13 @@ public function process_submission() {
 		}
 
 		if ( isset( $field_ids['textarea'] ) ) {
-			$field           = $this->fields[ $field_ids['textarea'] ];
-			$comment_content = trim( Contact_Form_Plugin::strip_tags( $field->value ) );
+			$field = $this->fields[ $field_ids['textarea'] ];
+
+			if ( is_string( $field->value ) ) {
+				$comment_content = trim( Contact_Form_Plugin::strip_tags( $field->value ) );
+			} else {
+				$field->value = '';
+			}
 		}
 
 		if ( isset( $field_ids['subject'] ) ) {

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-my-jetpack/CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.34.1] - 2024-09-10
+### Fixed
+- Jetpack AI: Fix default_content filter so it doesn't enforce parameter type. [#39276]
+
 ## [4.34.0] - 2024-09-02
 ### Changed
 - My Jetpack: show over quota notice and period usage counter for unlimited plans [#39129]
@@ -1687,6 +1691,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Created package
 
+[4.34.1]: https://github.com/Automattic/jetpack-my-jetpack/compare/4.34.0...4.34.1
 [4.34.0]: https://github.com/Automattic/jetpack-my-jetpack/compare/4.33.1...4.34.0
 [4.33.1]: https://github.com/Automattic/jetpack-my-jetpack/compare/4.33.0...4.33.1
 [4.33.0]: https://github.com/Automattic/jetpack-my-jetpack/compare/4.32.4...4.33.0

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-my-jetpack/src/class-initializer.php

@@ -42,7 +42,7 @@ class Initializer {
 	 *
 	 * @var string
 	 */
-	const PACKAGE_VERSION = '4.34.0';
+	const PACKAGE_VERSION = '4.34.1';
 
 	/**
 	 * HTML container ID for the IDC screen on My Jetpack page.

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-my-jetpack/src/products/class-jetpack-ai.php

@@ -648,9 +648,11 @@ public static function admin_enqueue_scripts() {
 	 * @param WP_Post $post The post object.
 	 * @return string
 	 */
-	public static function add_ai_block( $content, WP_Post $post ) {
+	public static function add_ai_block( $content, $post ) {
 		if ( isset( $_GET['use_ai_block'] ) && isset( $_GET['_wpnonce'] )
 			&& wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'ai-assistant-content-nonce' )
+			&& ! empty( $post )
+			&& ! is_wp_error( $post )
 			&& current_user_can( 'edit_post', $post->ID )
 			&& '' === $content
 		) {

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-status/CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.5] - 2024-09-10
+### Removed
+- Removed usage of _deprecated_function when deprecating Status::is_onboarding. [#39272]
+
 ## [3.3.4] - 2024-08-23
 ### Changed
 - Updated package dependencies. [#39004]
@@ -389,6 +393,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Packages: Introduce a status package
 
+[3.3.5]: https://github.com/Automattic/jetpack-status/compare/v3.3.4...v3.3.5
 [3.3.4]: https://github.com/Automattic/jetpack-status/compare/v3.3.3...v3.3.4
 [3.3.3]: https://github.com/Automattic/jetpack-status/compare/v3.3.2...v3.3.3
 [3.3.2]: https://github.com/Automattic/jetpack-status/compare/v3.3.1...v3.3.2

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-waf/CHANGELOG.md

@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.18.4.1] - 2024-09-10
+### Fixed
+- Ensure that request body is parsed correctly. [#39262]
+
 ## [0.18.4] - 2024-08-26
 ### Changed
 - Updated package dependencies. [#39004]
@@ -359,6 +363,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Core: do not ship .phpcs.dir.xml in production builds.
 
+[0.18.4.1]: https://github.com/Automattic/jetpack-waf/compare/v0.18.4...v0.18.4.1
 [0.18.4]: https://github.com/Automattic/jetpack-waf/compare/v0.18.3...v0.18.4
 [0.18.3]: https://github.com/Automattic/jetpack-waf/compare/v0.18.2...v0.18.3
 [0.18.2]: https://github.com/Automattic/jetpack-waf/compare/v0.18.1...v0.18.2

wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-waf/src/class-waf-request.php

@@ -334,17 +334,21 @@ public function get_get_vars() {
 	 * @return array{string, scalar}[]
 	 */
 	public function get_post_vars() {
+		$content_type = $this->get_header( 'content-type' );
 		if ( ! empty( $_POST ) ) {
+			// If $_POST is populated, use it.
 			return flatten_array( $_POST );
-		} elseif ( strpos( $this->get_header( 'content-type' ), 'application/json' ) !== false ) {
+		} elseif ( strpos( $content_type, 'application/json' ) !== false ) {
 			// Attempt to decode JSON requests.
 			$decoded_json = json_decode( $this->get_body(), true ) ?? array();
 			return flatten_array( $decoded_json, 'json', true );
-		} else {
-			// Attempt to retrieve all parameters when method used isn't POST
-			$body = $this->get_body();
-			parse_str( $body, $params );
+		} elseif ( strpos( $content_type, 'application/x-www-form-urlencoded' ) !== false ) {
+			// Attempt to decode url-encoded data
+			parse_str( $this->get_body(), $params );
 			return flatten_array( $params );
+		} else {
+			// Don't try to parse any other content types
+			return array();
 		}
 	}
 

wp-content/plugins/jetpack/jetpack_vendor/i18n-map.php

@@ -42,7 +42,7 @@
     ),
     'jetpack-connection' => array(
       'path' => 'jetpack_vendor/automattic/jetpack-connection',
-      'ver' => '2.12.5',
+      'ver' => '2.12.6',
     ),
     'jetpack-explat' => array(
       'path' => 'jetpack_vendor/automattic/jetpack-explat',
@@ -78,7 +78,7 @@
     ),
     'jetpack-my-jetpack' => array(
       'path' => 'jetpack_vendor/automattic/jetpack-my-jetpack',
-      'ver' => '4.34.0',
+      'ver' => '4.34.1',
     ),
     'jetpack-password-checker' => array(
       'path' => 'jetpack_vendor/automattic/jetpack-password-checker',

wp-content/plugins/jetpack/readme.txt

@@ -1,7 +1,7 @@
 === Jetpack - WP Security, Backup, Speed, & Growth ===
 Contributors: automattic, adamkheckler, adrianmoldovanwp, aduth, akirk, allendav, alternatekev, andy, annamcphee, annezazu, apeatling, arcangelini, arsihasi, azaozz, barry, batmoo, beaulebens, bindlegirl, biskobe, bjorsch, blobaugh, brbrr, brileyhooper, cainm, cena, cfinke, cgastrell, chaselivingston, chellycat, clickysteve, csonnek, danielbachhuber, daniloercoli, davoraltman, delawski, designsimply, dkmyta, dllh, drawmyface, dsmart, dun2mis, dzver, ebinnion, egregor, eliorivero, enej, eoigal, erania-pinnera, ethitter, fgiannar, gcorne, georgestephanis, gibrown, goldsounds, hew, hugobaeta, hypertextranch, iammattthomas, iandunn, joen, jblz, jeffgolenski, jeherve, jenhooks, jenia, jessefriedman, jgs, jkudish, jmdodd, joanrho, johnjamesjacoby, jshreve, kbrownkd, keoshi, koke, kraftbj, lancewillett, leogermani, lhkowalski, lschuyler, macmanx, martinremy, matt, mattwiebe, matveb, maverick3x6, mcsf, mdawaffe, mdbitz, MichaelArestad, migueluy, miguelxavierpenha, mikeyarce, mkaz, nancythanki, nickmomrik, njweller, nunyvega, obenland, oskosk, pento, professor44, rachelsquirrel, rdcoll, renatoagds, retrofox, richardmtl, richardmuscat, robertbpugh, roccotripaldi, ryancowles, samhotchkiss, samiff, scarstocea, scottsweb, sdixon194, sdquirk, sermitr, simison, stephdau, thehenridev, tmoorewp, tyxla, Viper007Bond, westi, williamvianas, wpkaren, yoavf, zinigor
 Tags: Security, backup, malware, scan, performance
-Stable tag: 13.8
+Stable tag: 13.8.1
 Requires at least: 6.5
 Requires PHP: 7.0
 Tested up to: 6.6
@@ -326,31 +326,14 @@ Jetpack Backup can do a full website migration to a new host, migrate theme file
 
 
 == Changelog ==
-### 13.8 - 2024-09-04
-#### Major Enhancements
-- Custom CSS: Remove feature in favor of WordPress core implementation.
-- Embeds: Remove YouTube and Vimeo embeds in favor of WordPress core implementation.
-- WordPress.com Toolbar: The feature has been removed.
-
-#### Enhancements
-- Admin Menu: Update order of Jetpack sub-menu items.
-- AI Assistant: Add spelling mistakes check for English language.
-- Newsletters: Add the plugin icon to the Block Editor header, with a dedicated sidebar with an email preview feature.
-- Social: Display Fediverse creator meta tag when a post has an active Mastodon connection.
-
-#### Improved compatibility
-- Sharing Block: Improve performance when hooking the block into single post templates.
-- Tiled Galleries: Defer loading of the Tiled Gallery script for improved performance.
-
-#### Bug fixes
-- AI Assistant: Disable Write Brief for free plan users when AI Assistant block is disabled.
-- AMP: Avoid fatal errors when using Jetpack's classic slideshows on a site where Jetpack blocks are disabled.
-- Blocks: Ensure the stylesheets for Contact Info and Payment Button blocks are loaded correctly.
-- Blocks: Fix the editor freeze after inserting a pattern with the Donations block.
-- Mailchimp Block: Do not attempt to fetch groups when a site is not connected to Mailchimp yet.
-- REST API: Avoid PHP warnings in the comment endpoint when the parent comment does not exist.
-- Social Icons Widget: Ensure the social network icons display correctly.
-- Subscriptions: Prevent the subscribe modal from automatically turning on when discussion settings are saved.
+### 13.8.1 - 2024-09-10
+
+#### Bug Fixes
+- Contact Form: Prevent unexpected payload contents from causing fatal errors.
+- General: Silence noisy warnings.
+- Jetpack AI: Update default_content filter to not enforce the second parameter type to prevent fatal errors.
+- REST API: Fix missing requirement in admin-menu endpoint which could lead to a broken admin menu.
+- Web Application Firewall: Prevent incorrect parsing of unsupported HTTP content types.
 
 --------
 

wp-content/plugins/jetpack/vendor/autoload.php

@@ -22,4 +22,4 @@
 
 require_once __DIR__ . '/composer/autoload_real.php';
 
-return ComposerAutoloaderInitf11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8::getLoader();
+return ComposerAutoloaderInitf11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8_1::getLoader();

wp-content/plugins/jetpack/vendor/autoload_packages.php

@@ -5,7 +5,7 @@
  * @package automattic/jetpack-autoloader
  */
 
-namespace Automattic\Jetpack\Autoloader\jpf11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8\al3_0_10;
+namespace Automattic\Jetpack\Autoloader\jpf11009ded9fc4592b6a05b61ce272b3c_jetpackⓥ13_8_1\al3_0_10;
 
  // phpcs:ignore