WordPress 3.1.3 is available now and is a security update for all previous versions. It contains the following security fixes and enhancements:

• Various security hardening by Alexander Concha.
• Taxonomy query hardening by John Lamansky.
• Prevent sniffing out user names of non-authors by using canonical redirects. Props Verónica Valeros.
• Media security fixes by Richard Lundeen of Microsoft, Jesse Ou of Microsoft, and Microsoft Vulnerability Research.
• Improves file upload security on hosts with dangerous security settings.
• Cleans up old WordPress import files if the import does not finish.
• Introduce “clickjacking” protection in modern browsers on admin and login pages.

Consult the change log for more details.

Download WordPress 3.1.3 or update automatically from the Dashboard → Updates menu in your site’s admin area.

WordPress 3.2 Beta 2 also available

In other news, our development of WordPress 3.2 development continues right on schedule. We released Beta 1 thirteen days ago, and today we’re putting out Beta 2 for your testing pleasure.

This is still beta software, so we don’t recommend that you use it on production sites. But if you’re a plugin developer, a theme developer, or a site administrator, you should be running this on your test environments and reporting any bugs you find. If you’re a WordPress user who wants to open your presents early, take advantage of WordPress’ famous 5-minute install and spin up a secondary test site. Let us know what you think!

The plan is to start putting out release candidates in early June, and to release WordPress 3.2 by the end of the month. The more you help us iron out issues during the beta period, the more likely we are to hit those dates. To misappropriate and mangle a quote from Mahatma Gandhi: “Be the punctuality you want to see in the WordPress.” In other words, test now!

Here are some of the things that changed since Beta 1:

• Google Chrome Frame is now supported in the admin, if you have it installed. This is especially useful for IE 6 users (remember, IE 6 is otherwise deprecated for the admin).
• The admin is less ugly in IE 7.
• The blue admin color scheme has caught up to the grey one, and is ready for testing.
• We are now bundling jQuery 1.6.1. You should test any JS that uses jQuery. WordPress JavaScript guru Andrew Ozz has a post with more info.

Download WordPress 3.2 Beta 2

WordPress News

It seems like just yesterday that we released WordPress 3.1, but it’s actually been almost three months. We’ve spent that time putting together a new release focused on performance improvements, and are ready for our first beta testers!

As always, this is software still in development and we don’t recommend that you run it on a production site — set up a test site just to play with the new version. If you break it (find a bug), please report it, and if you’re a developer, try to help us fix it.

If all goes well, we hope to release WordPress 3.2 by the end of June, though that is (again, as always) subject to change depending on how the beta period goes. The more help we get with testing and fixing bugs, the sooner we will be able to release the final version. If you want to be a beta tester, you should check out the Codex article on how to report bugs.

Here’s some of what’s new:

• Performance improvements like you wouldn’t believe. What’s that mean? Things are faster!
• Distraction-free Writing. The visual editor’s full-screen composing experience has gotten a major overhaul, and is now available from HTML mode, too. More than ever, WordPress allows you to focus on what matters most — your content.
• Admin UI Refresh. The last major redesign of the WordPress was in 2008. This isn’t a major redesign, just a little facelift to keep us feeling young. WordPress turns 8 later this month, you know.
• New Default Theme. Introducing Twenty Eleven, based on the popular Duster theme. Rotating header images, post format support, and more.
• Browse Happy. WordPress is made to work with modern browsers. If you visit your Dashboard using an outdated web browser, we’ll let you know there’s a newer version available.
• Admin Bar. We’ve added more links to the admin bar to make it even more useful.

Remember, if you find something you think is a bug, report it! You can bring it up in the alpha/beta forum, you can email it to the wp-testers list, or if you’ve confirmed that other people are experiencing the same bug, you can report it on the WordPress Core Trac. (I recommend starting in the forum or on the mailing list.)

Theme and plugin authors, if you haven’t been following the 3.2 development cycle, please start now so that you can update your themes and plugins to be compatible with the newest version of WordPress.

Note to developers: WordPress is built by the contributions of hundreds of developers. If you’d like to see this release come out on time, I encourage you to pitch in. Even if you don’t have time to do testing on the beta version, you could help us by contributing a fix for one of the many bugs we already know about.

Download WordPress 3.2 Beta 1

WordPress News

It’s that time in the release cycle again, when all the features are basically done, and we’re just squashing bugs. To the brave of heart and giving of soul: Won’t you help us test the new version of WordPress? As always, this is software still in development and we don’t recommend that you run it on your normal live site — set up a test site just to play with the new version. If you break it (find a bug), report it, and if you’re a developer, try to help us fix it. (Especially you U.S. types who are taking a long weekend for Thanksgiving! )

If all goes well, we hope to release WordPress 3.1 to the world at large by the end of the year, though that is (as always) subject to change/dependent on how the beta period goes. The more help we get with testing and fixing bugs, the sooner we will be able to release the final version.

If you want to be a beta tester, you should check out the Codex article on how to report bugs. Some of the new features to check out include:

• Post Formats (#14746)
• Theme Search (#14936)
• Internal Linking (#11420)
• Admin Bar (#14772)
• Ajaxified Admin (#14579)
• Updated Tiny MCE (#12574)
• Multi-taxonomy Queries (#12891)
• Custom Post Type Index Pages (#13818)
• Admin CSS Cleanup (#14770)
• User Admin (#14696)
• Network Admin (#14435)
• Password Reset Redux (#5919)

There are also some known issues: things that aren’t *quite* finished, but that weren’t worth holding up the beta release. They will be fixed before 3.1 is released for general use. Note that as things get fixed, the beta release will update nightly. What you should know:

• Fatal error: Call to a member function is_page() on a non-object in /wp-includes/query.php. is_page() may be any conditional tag. This issue occurs when a theme or plugin is doing something wrong. Some code is checking the value of a conditional tag before we actually set up the Query, which means they don’t work yet. In 3.0, they silently failed and always returned false. In 3.1 Beta 1, this is throwing a fatal error. This will be handled in the final release, so use this opportunity to fix your plugins. (#14729)
• All known issues slated for fixing before launch are listed in Trac. Please check this list to see if a bug is already on the list before reporting it.

Remember, if you find something you think is a bug, report it! You can bring it up in the alpha/beta forum, you can email it to the wp-testers list, or if you’ve confirmed that other people are experiencing the same bug, you can report it on the WordPress Core Trac. (I recommend starting in the forum or on the mailing list.)

Theme and plugin authors, if you haven’t been following the 3.1, please start now so that you can update your themes and plugins to be compatible with the newest version of WordPress.

Note to developers: WordPress is built by the contributions of hundreds of developers. If you’d like to see this release come out on time, I encourage you to pitch in. Even if you don’t have time to do testing on the beta version, you could help us by contributing a fix for one of the many bugs we already know about.

To those of you in the U.S., have a lovely long holiday weekend, and if you’re looking for something to occupy your post-turkey hours, we hope you’ll take the beta for a spin!

Download WordPress 3.1 Beta 1

WordPress News

Haikus from Jane on her 39th birthday:

Practice makes perfect
is what they say about things,
but sometimes it’s not.

In this case it is
not practice but refinement,
and then more testing.

You can help WordPress!
Now: 3.1, beta 2
is here; needs testing.

But! Remember this:
Only install on test sites,
as YMMV.

The second beta of WordPress 3.1 is now available!

For things to test, please review our Beta 1 release announcement. A list of known issues can be found on our bug tracker.

Already have a test install that you want to switch over to the beta? Try the beta tester plugin. Please test 3.1 on a test site, not on your live site, as interactions with plugins that haven’t been updated may be unpredictable, and we can’t predict (see how that works?) whether something will break or not… that’s why we’re asking people to help us test everything!

Testers, don’t forget to use the wp-testers mailing list to discuss bugs you encounter. Plugin and theme authors, please test your plugins for compatibility.

Download the WordPress 3.1 Beta 2 now.

WordPress News