Make WordPress Core

Opened 12 months ago

Last modified 12 months ago

#58214 new defect (bug)

Plugin authors should not be able to delete tags from SVN repository

Reported by: rkaiser0324's profile rkaiser0324 Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Plugins Keywords:
Focuses: Cc:

Description

On https://developer.wordpress.org/plugins/wordpress-org/how-to-use-subversion/#delete-old-versions it notes that plugin developers may choose to delete from the SVN repository old tagged versions. I think that allowing plugin authors to rewrite history of production releases is a bad thing for WordPress to allow, much less suggest in the docs. The reason is that you may be relying on those older versions in your WordPress installation so a clean build might break without warning. E.g., if you are using wpackagist for dependency managementd, this can happen: https://github.com/outlandishideas/wpackagist/issues/497 . Since tags represent actual production releases (per the first link) WordPress should not allow tags to be deleted from the repository (or any other history to be rewritten for that matter if that's a thing in SVN), going forward.

Change History (1)

This ticket was mentioned in Slack in #docs by rkaiser0324. View the logs.


12 months ago

Note: See TracTickets for help on using tickets.