Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
e5ec054
Reintroduce a Dependabot configuration file.
desrosj Apr 17, 2026
42e5910
Add a workflow to create backport PRs.
desrosj Apr 17, 2026
4240dca
Add workflow for testing backport PRs.
desrosj Apr 17, 2026
6dfad35
Exclude major versions from Dependabot PRs.
desrosj May 18, 2026
bdf8f7a
Configure cooldown period in Dependabot.
desrosj May 21, 2026
e5b09ec
Docs: Add design spec for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
3b17dea
Build/Test Tools: Add Gutenberg Sync workflow skeleton and setup job.
desrosj Jun 26, 2026
58c8849
Build/Test Tools: Harden Gutenberg Sync setup job branch detection.
desrosj Jun 26, 2026
90049eb
Build/Test Tools: Add trunk update job to Gutenberg Sync workflow.
desrosj Jun 26, 2026
e8fa4d3
Build/Test Tools: Add strict mode to trunk SHA resolution step.
desrosj Jun 26, 2026
f98cff7
Build/Test Tools: Add version branch update job to Gutenberg Sync wor…
desrosj Jun 26, 2026
da39b0a
Docs: Add implementation plan for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
7e67d23
Build/Test Tools: Harden Gutenberg Sync version branch changelog and …
desrosj Jun 26, 2026
26d31a6
Build/Test Tools: Use a supported-branch env var and single-branch di…
desrosj Jun 26, 2026
73f6767
Build/Test Tools: Collapse Gutenberg Sync into a single manual-dispat…
desrosj Jun 26, 2026
574b645
Build/Test Tools: Drop the determine-branch step in favor of workflow…
desrosj Jun 26, 2026
85304f1
Build/Test Tools: Make Gutenberg Sync run from a fork and PR back to …
desrosj Jun 29, 2026
824b840
Build/Test Tools: Check out Gutenberg via actions/checkout and drop t…
desrosj Jun 29, 2026
a56e70f
Build/Test Tools: Build the Gutenberg Sync PR body from a markdown te…
desrosj Jun 29, 2026
d7f1ded
Build/Test Tools: Fill the PR body template in place and split out la…
desrosj Jun 29, 2026
be3ba3e
Build/Test Tools: Split Gutenberg Sync into atomic steps and relocate…
desrosj Jun 29, 2026
7abcfe1
Build/Test Tools: Split Gutenberg Sync into separate trunk and versio…
desrosj Jun 29, 2026
badfbd1
Build/Test Tools: Extract the Gutenberg Sync publish logic into a reu…
desrosj Jun 29, 2026
663c979
Build/Test Tools: Revert Gutenberg Sync to a single job with inline b…
desrosj Jun 29, 2026
94c965f
Build/Test Tools: Output the Gutenberg Sync PR body to the job summar…
desrosj Jun 29, 2026
a7cbbd5
Reorganize logic into separate jobs.
desrosj Jun 29, 2026
be903e4
Build/Test Tools: Wire Gutenberg Sync data flow across the split jobs.
desrosj Jun 29, 2026
32bebd7
Reorganize further.
desrosj Jun 29, 2026
22f089f
Build/Test Tools: Add a commit list, fold the release changelog into …
desrosj Jun 29, 2026
d436402
Build/Test Tools: Replace __OLD_SHA__ and fix the templated changelog…
desrosj Jun 29, 2026
c7a55e7
Build/Test Tools: Reword the sync PR title/summary and fix title esca…
desrosj Jun 29, 2026
7da6a27
Build/Test Tools: Fix the combined Gutenberg checkout and restrict th…
desrosj Jun 29, 2026
6cc9741
Build/Test Tools: Quote the Gutenberg Sync branch input values.
desrosj Jun 29, 2026
63e105c
Update PR template.
desrosj Jun 29, 2026
6b07723
Bump chalk from 5.6.2 to 6.0.0
dependabot[bot] Aug 5, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
331 changes: 331 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,331 @@
# Configure Dependabot scanning.
version: 2

updates:
# Check for updates to GitHub Actions.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
github-actions:
applies-to: version-updates
update-types:
- minor
- patch

# Check for updates to Composer packages.
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
# These dependencies do not currently need to be managed with Dependabot.
- dependency-name: "squizlabs/php_codesniffer"
- dependency-name: "wp-coding-standards/wpcs"
- dependency-name: "phpcompatibility/php-compatibility"
- dependency-name: "yoast/phpunit-polyfills"
groups:
composer-packages:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "composer/ca-bundle"

# Monitor some npm dependencies for updates in groups.
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
- dependency-name: "@wordpress/*"
groups:
##
# Groups for updating devDependencies.
##

# Dependencies related to Playwright testing (E2E, performance).
tests-playwright:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*playwright*"
# Dependencies related to JavaScript testing with QUnit.
tests-qunit:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*qunit*"
- "sinon*"
# Dependencies related to CSS and SASS building and manilupating.
dev-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "autoprefixer"
# postcss and css related dependencies.
- "*css*"
- "*sass"
# Dependencies related to the Webpack build process.
dev-webpack:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*webpack*"
- "react-refresh"
- "source-map-loader"
# Dependencies related to the local Docker development environment.
dev-docker:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "dotenv*"
- "wait-on"
# Dependencies that do not fall into a specific grouping.
dev-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chalk"
- "check-node-version"
- "ink-docstrap"
- "install-changed"
- "matchdep"
- "uuid"
# Dependencies related to JavaScript minification.
dev-uglify:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*uglify*"
# All GruntJS related dependencies that do not relate to another group.
dev-grunt:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*grunt*"

##
# Groups for updating production dependencies.
##

# Dependencies related to jQuery and its ecosystem.
external-jquery:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "jquery*"
# Dependencies related to React and its ecosystem.
external-react:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "react*"
- "!react-refresh"
# Dependencies used for bundling polyfill libraries into WordPress.
external-polyfills:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "core-js-url-browser"
- "element-closest"
- "formdata-polyfill"
- "imagesloaded"
- "objectFitPolyfill"
- "polyfill-library"
- "regenerator-runtime"
- "whatwg-fetch"
- "wicg-inert"
# Dependencies related to the Masonry library.
external-masonry:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "masonry-layout"
# Dependencies that do not fall into a specific grouping.
external-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "backbone"
- "clipboard"
- "hoverintent"
- "json2php"
- "lodash"
- "moment"
- "underscore"

# Monitor npm dependencies within default themes.
- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyfive"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyfive-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentytwo"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentytwo-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyone"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyone-sass-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
- "!*stylelint*"
twentytwentyone-eslint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**eslint*"
twentytwentyone-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**stylelint*"
twentytwentyone-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "minimist"
- "npm-run-all"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwenty"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwenty-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
twentytwenty-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*stylelint*"
twentytwenty-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "concurrently"
- "@wordpress/scripts"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentynineteen"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentynineteen-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
twentynineteen-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "npm-run-all"
24 changes: 24 additions & 0 deletions .github/template-gutenberg-sync-pr-body.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
This updates the pinned Gutenberg repository commit hash for `__BRANCH__` from `__OLD_SHA__` to `__NEW_SHA__`.

<details>
<summary>Changes</summary>

__COMMIT_LIST__

__SOURCE_LINE__

</details>

<details>
<summary>Changelog</summary>

__CHANGELOG__

</details>

**Note:** This pull request was created by the `gutenberg-sync.yml` workflow.

Trac ticket: Core-

---
**This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See [GitHub Pull Requests for Code Review](https://make.wordpress.org/core/handbook/contribute/git/github-pull-requests-for-code-review/) in the Core Handbook for more details.**
Loading
Loading