# bedrock — Latest

**URL:** /c/bedrock/7
**Topics on this page:** 30

## [403 Error in WordPress (WooCommerce) admin with multiple "sites" (rest_cookie_invalid_nonce, Cookie check failed, api-fetch, wp-json)](/t/403-error-in-wordpress-woocommerce-admin-with-multiple-sites-rest-cookie-invalid-nonce-cookie-check-failed-api-fetch-wp-json/26524)

**Author:** @cawalle
**Last posted:** 2026-04-09T23:48:17Z

Hi everybody, 
the text has gotten a little longer, so thank you in advance for staying with me and taking your time! 
I am experiencing a problem of piling up 403 errors when in the WordPress backend, specifically the W&hellip;

---

## [.env and wp-config.php](/t/env-and-wp-config-php/30178)

**Author:** @chartreusecat
**Last posted:** 2026-04-07T14:34:43Z

Hi all, I am using Bedrock and need to deploy a plugin license key to shared hosting. 
I want to keep the license key in .env and read it from config/application.php. What I am missing is how Bedrock expects the config t&hellip;

---

## [WPML installation via Composer using private-composer-installer no longer works](/t/wpml-installation-via-composer-using-private-composer-installer-no-longer-works/30214)

**Author:** @leodudedev
**Last posted:** 2026-03-26T09:18:39Z

Hi everyone, 
I wanted to share that, as of recent tests, installing WPML via Composer using the private-composer-installer method no longer works. 
I was following the setup documented in this post: 
WPML + Composer on &hellip;

---

## [wordpress-core-installer v4.0.0 released](/t/wordpress-core-installer-v4-0-0-released/30249)

**Author:** @ben
**Last posted:** 2026-03-22T03:22:08Z

wordpress-core-installer v4.0.0 released 
Breaking Changes

Composer 2 is now required — Composer v1 reached EOL in October 2022 and is no longer supported. The composer-plugin-api and composer/composer constraints have &hellip;

---

## [wp-config v2.0.0-beta.1 released](/t/wp-config-v2-0-0-beta-1-released/30248)

**Author:** @ben
**Last posted:** 2026-03-21T17:23:32Z

wp-config v2.0.0-beta.1 released 
Breaking Changes

Fluent configuration API replaces the static Config::define()/Config::apply() approach
PHP 8.3+ is now required
env() string values are now coerced to native PHP types &hellip;

---

## [WP Packages Changelog GitHub Action](/t/wp-packages-changelog-github-action/29956)

**Author:** @ben
**Last posted:** 2026-03-19T19:07:45Z

WP Packages Changelog Action is a new GitHub action that will comment on any PRs that have a modified composer.json or composer.lock file, look for any WP Packages dependencies, and make a comment with the relevant chang&hellip;

---

## [bedrock 1.30.1 released](/t/bedrock-1-30-1-released/30245)

**Author:** @ben
**Last posted:** 2026-03-19T18:31:02Z

bedrock 1.30.1 released 
See roots.io/wp-composer-is-now-wp-packages

---

## [Introducing WP Sec Adv as a WP Packages Supplement](/t/introducing-wp-sec-adv-as-a-wp-packages-supplement/30238)

**Author:** @TangRufus
**Last posted:** 2026-03-26T17:59:32Z

During a job interview, the interviewer asked about my experiences using Composer in WordPress projects. Trying to be clever, I listed all the problems mixing Composer with WordPress ecosystem. 
Instead of using my 9-yea&hellip;

---

## [bedrock 1.30.0 released](/t/bedrock-1-30-0-released/30234)

**Author:** @ben
**Last posted:** 2026-03-16T12:33:53Z

bedrock 1.30.0 released 
Migrate from WPackagist to WP Composer
See: 

Introducing WP Composer as a WPackagist Replacement | Roots
https://wp-composer.com/
https://wp-composer.com/wp-composer-vs-wpackagist

Ref https://g&hellip;

---

## [bedrock 1.29.2 released](/t/bedrock-1-29-2-released/30227)

**Author:** @system
**Last posted:** 2026-03-11T22:05:42Z

bedrock 1.29.2 released 
WordPress 6.9.4

WordPress 6.9.2 and WordPress 6.9.3 were released yesterday, addressing 10 security issues and a bug that affected template file loading on a limited number of sites. 
The WordPr&hellip;

---

## [bedrock 1.29.1 released](/t/bedrock-1-29-1-released/30223)

**Author:** @system
**Last posted:** 2026-03-11T15:27:45Z

bedrock 1.29.1 released 
What’s Changed
Dependencies

:up_arrow: Bump roots/wordpress to v6.9.3 (#808)
:up_arrow: Bump roots/bedrock-autoloader to v1.1.0 (#809)

Add bedrock_autoloader_load_plugins filter to selectively &hellip;

---

## [Salt down?](/t/salt-down/30217)

**Author:** @Krooker
**Last posted:** 2026-03-11T13:53:48Z

It might be already known, but was just starting a new project, and found https://roots.io/salts.html is not working at the moment. 
So really hoping it is just me…

---

## [bedrock 1.29.0 released](/t/bedrock-1-29-0-released/30216)

**Author:** @system
**Last posted:** 2026-03-10T17:08:01Z

bedrock 1.29.0 released 
What’s Changed
Infrastructure

:up_arrow: Bump minimum PHP to 8.3 (#805)

New features

:white_check_mark: Add Pest testing scaffold (#806)
:sparkles: Add opt-in support for WP_DEVELOPMENT_MODE (#&hellip;

---

## [Premium Third Party Plugins](/t/premium-third-party-plugins/30171)

**Author:** @chartreusecat
**Last posted:** 2026-02-18T21:34:27Z

I’m having issues adding third party premium plugins. I’ll use the Yoast premium plugin as an example. 
Here’s their instructions: How to install Yoast SEO plugins for Wordpress using Composer • Yoast 
The instructions s&hellip;

---

## [bedrock 1.28.5 released](/t/bedrock-1-28-5-released/30140)

**Author:** @system
**Last posted:** 2026-02-04T15:47:14Z

bedrock 1.28.5 released 
What’s Changed

chore(deps): :up_arrow: bump wpackagist-theme/twentytwentyfive to v1.4 by @renovate[bot] in chore(deps): ⬆️ bump wpackagist-theme/twentytwentyfive to v1.4 by renovate[bot] · Pull &hellip;

---

## [Sync script & SSH access with Lima](/t/sync-script-ssh-access-with-lima/26927)

**Author:** @joshb
**Last posted:** 2026-01-14T00:28:34Z

Hey ya’ll… I found this: 
https://discourse.roots.io/t/tweaks-for-sync-script-with-trellis-and-lima/26715/2 
And attempting to connect to Lima without any luck. 
✅  Able to connect to production
❌  Unable to connect to d&hellip;

---

## [How do I rename public_html folder in Vagrant](/t/how-do-i-rename-public-html-folder-in-vagrant/30107)

**Author:** @risemj
**Last posted:** 2026-01-06T10:11:51Z

Good day all, 
Hopefully, someone will be able to help me with this question. 
I have setup Vagrant on Mac with docker. 
At the moment, the defualt installation folder wordpress whenever i provision a website is - public&hellip;

---

## [Bedrock on Windows: “Error establishing DB connection” triggered by parallel requests](/t/bedrock-on-windows-error-establishing-db-connection-triggered-by-parallel-requests/30087)

**Author:** @web.rodion
**Last posted:** 2025-12-22T08:48:25Z

I’m experiencing an issue with Bedrock on Windows (XAMPP/Laragon). 
Clean WordPress works perfectly, but Bedrock fails only when two parallel requests are made (for example: double-click navigation in wp-admin, or a page&hellip;

---

## [Bedrock .env file versus Trellis group_vars/**/vault.yml](/t/bedrock-env-file-versus-trellis-group-vars-vault-yml/28819)

**Author:** @visualasparagus
**Last posted:** 2025-12-04T20:04:02Z

I hope this is a simple question, but I am a little confused on whether I need to put enviroment variables in the .env file of Bedrock or in the group_vars  files under 
vault_wordpress_sites:
   environment:
      env:
&hellip;

---

## [bedrock 1.28.4 released](/t/bedrock-1-28-4-released/30064)

**Author:** @system
**Last posted:** 2025-12-03T17:51:49Z

bedrock 1.28.4 released 
What’s Changed

Composer: Add name to wpackagist repository by @tangrufus in Composer: Add `name` to wpackagist repository by tangrufus · Pull Request #790 · roots/bedrock · GitHub
Remove roave/s&hellip;

---

## [Best Practice: Adding Gravity Forms (and other plugins)](/t/best-practice-adding-gravity-forms-and-other-plugins/5320)

**Author:** @masoninthesis
**Last posted:** 2025-10-22T13:55:48Z

Hey guys, 
I’ve found a couple different methods for adding private repos or paid plugins to composer. I thought I’d ask your guys’ preferred method before doing anything. 
Here’s the method I’m planning on trying first.&hellip;

---

## [bedrock 1.28.3 released](/t/bedrock-1-28-3-released/29955)

**Author:** @system
**Last posted:** 2025-09-30T20:05:37Z

bedrock 1.28.3 released 
What’s Changed

:up_arrow: WordPress 6.8.3 by @retlehs in ⬆️ WordPress 6.8.3 by retlehs · Pull Request #784 · roots/bedrock · GitHub
:up_arrow: Twenty Twenty-Five to v1.3 in https://github.com/ro&hellip;

---

## [New guide for converting WordPress sites to Bedrock](/t/new-guide-for-converting-wordpress-sites-to-bedrock/29942)

**Author:** @ben
**Last posted:** 2025-09-24T16:29:27Z

:information_source: We’ve got a new guide published that shows how to convert traditional WordPress sites to Bedrock with @MWDelaney’s Lithify plugin:

---

## [bedrock 1.28.2 released](/t/bedrock-1-28-2-released/29789)

**Author:** @system
**Last posted:** 2025-07-28T14:45:19Z

bedrock 1.28.2 released 
What’s Changed

:up_arrow: Bump roots/wordpress to v6.8.2 (https://github.com/roots/bedrock/pull/776)

---

## [Help with Housebuilder Pro plugin](/t/help-with-housebuilder-pro-plugin/29773)

**Author:** @tomlewis
**Last posted:** 2025-07-22T15:18:52Z

Hi there, 
I am using the third party plugin - Housebuilder Pro - on a staging website for a new project. This plugin defines custom post types and API routes for the external provider to be able to create new properties&hellip;

---

## [Using the ACF Pro official install method with Bedrock/Trellis](/t/using-the-acf-pro-official-install-method-with-bedrock-trellis/25436)

**Author:** @strarsis
**Last posted:** 2025-07-22T08:18:10Z

Bedrock

For development, use an auth.json file in the Bedrock project folder – but it should not be committed to the repository, but rather added to .gitignore as it is a secret (the ACF PRO license), similar to the .en&hellip;

---

## [Beware, Composer will install WooCommerce v10 prematurely right now](/t/beware-composer-will-install-woocommerce-v10-prematurely-right-now/29732)

**Author:** @ben
**Last posted:** 2025-07-09T15:51:17Z

:warning: Heads up, composer require wpackagist-plugin/woocommerce gets you a bad release right now (10.0.1 ) 


https://wordpress.org/plugins/woocommerce/ shows the actual latest version (9.9.5 ) — to grab the correct v&hellip;

---

## [Repeat login for Wordpress Multisite](/t/repeat-login-for-wordpress-multisite/29714)

**Author:** @RickTrybes
**Last posted:** 2025-06-30T15:47:17Z

I have a bedrock installation for a Wordpress Multisite. In the Multisite i currently use 2 different domains, example: 

example.com
test.shop.com

When I switch between the two different sites, Wordpress keeps asking m&hellip;

---

## [Subfolder network / multisite setup](/t/subfolder-network-multisite-setup/29670)

**Author:** @mrtaston
**Last posted:** 2025-06-17T09:35:40Z

I’m not entirely sure how to ask this without this being an incredibly vague general question! We are running local environments on Laravel Valet, using Bedrock to run WordPress. We are attempting to set up a network / m&hellip;

---

## [WordPress login](/t/wordpress-login/29626)

**Author:** @Yagnik
**Last posted:** 2025-05-22T12:30:50Z

I’ve set up WordPress using Bedrock, and I noticed that when I log in to wp-admin from a different browser using the same credentials, the previous session is logged out automatically. I’m trying to understand where this&hellip;