WordPress.org

Welcome!

The WordPress coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. development team builds WordPress! Follow this site for general updates, status reports, and the occasional code debate. There’s lots of ways to contribute:

Found a bugbug A bug is an error or unexpected result. Performance improvements, code optimization, and are considered enhancements, not defects. After feature freeze, only bugs are dealt with, with regressions (adverse changes from the previous version) being the highest priority.? Create a ticket in the bug tracker.

Want to contribute? Get started quickly with tickets marked as good first bugs for new contributors or join a bug scrub. There’s more on the reports page, like patches needing testing, and on feature projects page.

Other questions? Here is a detailed handbook for contributors, complete with tutorials.

A little over one year ago, a feature was rolled out allowing a GitHub account to be connected to a WordPress.org account.

In recent releases, the process of collecting props for non-WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. https://wordpress.org/ contributions (namely GutenbergGutenberg The Gutenberg project is the new Editor Interface for WordPress. The editor improves the process and experience of creating new content, making writing rich content much simpler. It uses ‘blocks’ to add richness rather than shortcodes, custom HTML etc. https://wordpress.org/gutenberg/) has been highly manual and error prone, occasionally resulting in contributors not receiving proper credit. Connecting your WordPress.org and GitHubGitHub GitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged be the repository owner. https://github.com/ accounts will allow automatic tooling to be built which reduces the burden on release teams to maintain a credit list.

When access is revoked for the “WordPress.org Profiles” application for a GitHub account, this is respected and the WordPress.org and GitHub profiles are unlinked. However, GitHub also expires application connections automatically that have not been used in over a year.

Because WordPress.org respects all access changes for this application, it has resulted in some profiles becoming unlinked. If you had previously connected your accounts, please check that your connection is still valid.

To check, visit your WordPress.org profile (https://profiles.wordpress.org/me/) and verify that your GitHub account is still listed. If you do not see a GitHub account listed, your connection has expired, been revoked, or one was never made.

Going forward, WordPress.org will now check that linked profiles are still up to date, haven’t been deleted, or suspended by GitHub more regularly regularly, and as a result the application connection will not go stale.

Props to @dd32 for investigating and fixing the issue, @cbringmann for proofreading.

#github

Weston Ruter 5:19 pm on May 10, 2021

@desrosj Hey, do you have more context for the permissions that the app asks for? The first one makes sense, but the second and third seem overly broad:
- Jonathan Desrosiers 6:08 pm on May 10, 2021
  
  Good question, @westonruter!
  
  @dd32 was the person that built out this feature, so he’ll be better suited to clarify why that level of access was chosen.
- Dion Hulse 2:18 am on May 11, 2021
  
  @westonruter Thanks for asking this, it’s a pretty common question and is mostly really badly worded GitHubGitHub GitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged be the repository owner. https://github.com/ authentication screen, a common complaint to many GitHub apps which don’t request a lot of access.
  
  The level of access requested is quite literally the most minimal access we can request be granted, read-only access to your public data, no access to anything else at all, but because we’re not asking for anything higher than that, GitHub just displays the standard warnings which don’t make much sense..
  verify your GitHub identity ($user)
  
  Know that you’re logged in as $user, and view any public email address. Private email addresses are not readable (That’s an additional permission we could request, but we don’t since we don’t need it)
  know which resources you can access
  
  We can list what you have access to, within the scope of the permissions requested (none), since we don’t request permission for repos/organisation/private repos/etc, we can only access whatever any other GitHub signed in user can see on your public profile.
  act on your behalf
  
  Make an APIAPI An API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways. request to api.github.com as you, and access things that you have granted us permission to access (which is nothing).
  This includes requesting your public profile once a month to ensure that the GitHub account still exists to ensure that GitHub doesn’t mark the connection as stale.
  
  Here’s an example of where GitHub’s support app requests more permission than us, and has the same awkwardness: https://github.community/t/why-does-this-forum-need-permission-to-act-on-my-behalf/120453
  
  Had we have used the ‘OAuth App’ instead of the recommended ‘GitHub App’ route, we’d have had the same access level but much clearer text.. unfortunately migrating to the OAuth option isn’t as straight forward, and would also limit any future additional integrations added to TracTrac An open source project by Edgewall Software that serves as a bug tracker and project management tool for WordPress./GitHub activity tracking.
  
  For transparency, here’s the permission configuration for the app, and here’s what the API actually returns for an authenticated user (me).
  - Weston Ruter 9:12 pm on May 12, 2021
    
    Thank you very much for the thorough explanation.

Comments are closed.

Welcome!

Communication

Expired GitHub and WordPress.org profile connections

Welcome!

Communication

Share this: