Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
3e83f34
Reintroduce a Dependabot configuration file.
desrosj Apr 17, 2026
9d31fde
Add a workflow to create backport PRs.
desrosj Apr 17, 2026
529b776
Add workflow for testing backport PRs.
desrosj Apr 17, 2026
22fb5c6
Exclude major versions from Dependabot PRs.
desrosj May 18, 2026
3ab146f
Configure cooldown period in Dependabot.
desrosj May 21, 2026
5fc9e38
Docs: Add design spec for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
577ba7b
Build/Test Tools: Add Gutenberg Sync workflow skeleton and setup job.
desrosj Jun 26, 2026
f62ea50
Build/Test Tools: Harden Gutenberg Sync setup job branch detection.
desrosj Jun 26, 2026
9c99306
Build/Test Tools: Add trunk update job to Gutenberg Sync workflow.
desrosj Jun 26, 2026
27dc01c
Build/Test Tools: Add strict mode to trunk SHA resolution step.
desrosj Jun 26, 2026
d83a2a8
Build/Test Tools: Add version branch update job to Gutenberg Sync wor…
desrosj Jun 26, 2026
5362b31
Docs: Add implementation plan for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
54f1924
Build/Test Tools: Harden Gutenberg Sync version branch changelog and …
desrosj Jun 26, 2026
ed8124f
Build/Test Tools: Use a supported-branch env var and single-branch di…
desrosj Jun 26, 2026
e2e129f
Build/Test Tools: Collapse Gutenberg Sync into a single manual-dispat…
desrosj Jun 26, 2026
417905a
Build/Test Tools: Drop the determine-branch step in favor of workflow…
desrosj Jun 26, 2026
203fbe0
Build/Test Tools: Make Gutenberg Sync run from a fork and PR back to …
desrosj Jun 29, 2026
5bfeef3
Build/Test Tools: Check out Gutenberg via actions/checkout and drop t…
desrosj Jun 29, 2026
82e5eb8
Build/Test Tools: Build the Gutenberg Sync PR body from a markdown te…
desrosj Jun 29, 2026
aed40cf
Build/Test Tools: Fill the PR body template in place and split out la…
desrosj Jun 29, 2026
beac822
Build/Test Tools: Split Gutenberg Sync into atomic steps and relocate…
desrosj Jun 29, 2026
5602277
Build/Test Tools: Split Gutenberg Sync into separate trunk and versio…
desrosj Jun 29, 2026
969f6cb
Build/Test Tools: Extract the Gutenberg Sync publish logic into a reu…
desrosj Jun 29, 2026
39ac88e
Build/Test Tools: Revert Gutenberg Sync to a single job with inline b…
desrosj Jun 29, 2026
affe1d9
Build/Test Tools: Output the Gutenberg Sync PR body to the job summar…
desrosj Jun 29, 2026
91bfd1e
Reorganize logic into separate jobs.
desrosj Jun 29, 2026
e331e2d
Build/Test Tools: Wire Gutenberg Sync data flow across the split jobs.
desrosj Jun 29, 2026
9b89a59
Reorganize further.
desrosj Jun 29, 2026
b0fd7d9
Build/Test Tools: Add a commit list, fold the release changelog into …
desrosj Jun 29, 2026
319bdca
Build/Test Tools: Replace __OLD_SHA__ and fix the templated changelog…
desrosj Jun 29, 2026
2425364
Build/Test Tools: Reword the sync PR title/summary and fix title esca…
desrosj Jun 29, 2026
39afd36
Build/Test Tools: Fix the combined Gutenberg checkout and restrict th…
desrosj Jun 29, 2026
b80de49
Build/Test Tools: Quote the Gutenberg Sync branch input values.
desrosj Jun 29, 2026
3f1e733
Update PR template.
desrosj Jun 29, 2026
822f12c
Tests: Stop using the deprecated expectError()/expectErrorMessage() P…
desrosj Aug 16, 2026
d0898fe
Tests: Replace PHPUnit's `expectWarning()`/`expectWarningMessage()` w…
desrosj Aug 16, 2026
7ed064e
Tests: Replace `expectNotice()`/`expectNoticeMessage()` with `set_err…
desrosj Aug 16, 2026
8e73fd6
Tests: Replace `expectDeprecation()` with native PHP error handling.
desrosj Aug 16, 2026
0e786dc
Merge branch 'trunk' into fix/phpunit-deprecated-notices
desrosj Aug 16, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
331 changes: 331 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,331 @@
# Configure Dependabot scanning.
version: 2

updates:
# Check for updates to GitHub Actions.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
github-actions:
applies-to: version-updates
update-types:
- minor
- patch

# Check for updates to Composer packages.
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
# These dependencies do not currently need to be managed with Dependabot.
- dependency-name: "squizlabs/php_codesniffer"
- dependency-name: "wp-coding-standards/wpcs"
- dependency-name: "phpcompatibility/php-compatibility"
- dependency-name: "yoast/phpunit-polyfills"
groups:
composer-packages:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "composer/ca-bundle"

# Monitor some npm dependencies for updates in groups.
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
- dependency-name: "@wordpress/*"
groups:
##
# Groups for updating devDependencies.
##

# Dependencies related to Playwright testing (E2E, performance).
tests-playwright:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*playwright*"
# Dependencies related to JavaScript testing with QUnit.
tests-qunit:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*qunit*"
- "sinon*"
# Dependencies related to CSS and SASS building and manilupating.
dev-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "autoprefixer"
# postcss and css related dependencies.
- "*css*"
- "*sass"
# Dependencies related to the Webpack build process.
dev-webpack:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*webpack*"
- "react-refresh"
- "source-map-loader"
# Dependencies related to the local Docker development environment.
dev-docker:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "dotenv*"
- "wait-on"
# Dependencies that do not fall into a specific grouping.
dev-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chalk"
- "check-node-version"
- "ink-docstrap"
- "install-changed"
- "matchdep"
- "uuid"
# Dependencies related to JavaScript minification.
dev-uglify:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*uglify*"
# All GruntJS related dependencies that do not relate to another group.
dev-grunt:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*grunt*"

##
# Groups for updating production dependencies.
##

# Dependencies related to jQuery and its ecosystem.
external-jquery:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "jquery*"
# Dependencies related to React and its ecosystem.
external-react:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "react*"
- "!react-refresh"
# Dependencies used for bundling polyfill libraries into WordPress.
external-polyfills:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "core-js-url-browser"
- "element-closest"
- "formdata-polyfill"
- "imagesloaded"
- "objectFitPolyfill"
- "polyfill-library"
- "regenerator-runtime"
- "whatwg-fetch"
- "wicg-inert"
# Dependencies related to the Masonry library.
external-masonry:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "masonry-layout"
# Dependencies that do not fall into a specific grouping.
external-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "backbone"
- "clipboard"
- "hoverintent"
- "json2php"
- "lodash"
- "moment"
- "underscore"

# Monitor npm dependencies within default themes.
- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyfive"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyfive-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentytwo"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentytwo-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyone"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyone-sass-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
- "!*stylelint*"
twentytwentyone-eslint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**eslint*"
twentytwentyone-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**stylelint*"
twentytwentyone-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "minimist"
- "npm-run-all"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwenty"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwenty-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
twentytwenty-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*stylelint*"
twentytwenty-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "concurrently"
- "@wordpress/scripts"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentynineteen"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentynineteen-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
twentynineteen-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "npm-run-all"
24 changes: 24 additions & 0 deletions .github/template-gutenberg-sync-pr-body.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
This updates the pinned Gutenberg repository commit hash for `__BRANCH__` from `__OLD_SHA__` to `__NEW_SHA__`.

<details>
<summary>Changes</summary>

__COMMIT_LIST__

__SOURCE_LINE__

</details>

<details>
<summary>Changelog</summary>

__CHANGELOG__

</details>

**Note:** This pull request was created by the `gutenberg-sync.yml` workflow.

Trac ticket: Core-

---
**This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See [GitHub Pull Requests for Code Review](https://make.wordpress.org/core/handbook/contribute/git/github-pull-requests-for-code-review/) in the Core Handbook for more details.**
Loading
Loading