WordPress Release: 4.0.17

TL;DR

WordPress 4.0.17 Release

This maintenance release primarily focuses on improving the testing infrastructure and fixing a critical bug in audio/video handling. The most significant user-facing fix addresses an issue where audio and video files could be corrupted when processing ID3 tag data. Most changes are related to test suite improvements and removing failing tests to ensure better CI performance and reliability.

Highlight of the Release

• Fixed critical bug in audio/video functions that could corrupt media files when processing ID3 tag data
• Significant improvements to the testing infrastructure for better development workflow
• Removed failing and outdated tests to improve CI reliability

Migration Guide

No migration steps are required for this maintenance release. This is a standard update that can be applied through the WordPress dashboard or via manual update.

Upgrade Recommendations

It is recommended that all WordPress 4.0.x sites upgrade to version 4.0.17, especially those that utilize audio and video content. The fix for ID3 tag data handling prevents potential corruption of media files, which is an important improvement for sites with multimedia content.

This update can be safely applied to all WordPress 4.0.x installations and should not cause any compatibility issues with existing themes or plugins.

Bug Fixes

• Media Handling: Fixed a critical bug where running wp_kses_post_deep() on ID3 tag data could corrupt blob data in audio and video files (#40075, #40085)

• Test Infrastructure: Fixed various failing tests across multiple components:

  • Updated YouTube embed tests to account for YouTube's switch to HTTPS-only
  • Fixed tests that were failing due to PHP notices
  • Addressed issues with assertTag() deprecation in PHPUnit 4.2
  • Updated tests to use HTTPS URLs for wordpress.com assets

New Features

No significant new features were added in this maintenance release. This update focuses primarily on bug fixes and testing infrastructure improvements.

Security Updates

No specific security fixes were included in this release. However, keeping WordPress updated to the latest version is always recommended as a security best practice.

Performance Improvements

• Testing Infrastructure:
  • Disabled Xdebug when testing on Travis CI to increase performance
  • Trimmed the test matrix on Travis to speed up the 4.0 branch build
  • Removed PHP 5.3 and 5.4 jobs from the test matrix
  • Optimized the order in which Travis jobs run
  • Added caching for node_modules directory in Travis CI
  • Skipped time-sensitive tests when not on trunk branch

Impact Summary

WordPress 4.0.17 is primarily a maintenance release focused on fixing a critical bug in media handling and improving the testing infrastructure. The most significant impact is for sites that use audio and video content, as this release fixes an issue where ID3 tag data processing could corrupt media files.

For end users, this update provides more reliable media handling without introducing any breaking changes. For developers, the improvements to the testing infrastructure offer a more stable development environment with better CI performance.

Most of the changes in this release are "under the hood" and won't be directly visible to typical WordPress users, but they contribute to the overall stability and reliability of the platform. The release demonstrates WordPress's commitment to maintaining older branches with critical bug fixes while improving the development workflow.