wp_set_password() doesn't trigger a changed password notification

[henry.wright]

If wp_update_user() is used to update a user's password, a notification is sent to the user telling them their password has changed.

However, the same doesn't happen if wp_set_password() is used to update a user's password.

[henry.wright]

If wp_set_password() was rewritten to use the API, specifically wp_update_user(), then a notification would be sent. Thing is, it's a pluggable function. What's the policy on updating those things considering people could have their own implementation in a mu-plugins file?

[henry.wright]

41522.diff rewrites wp_set_password() so that it uses wp_update_user(). wp_update_user() will hash the password so 41522.diff also removes the use of wp_hash_password() from wp_set_password().