Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
7ca9b56
Reintroduce a Dependabot configuration file.
desrosj Apr 17, 2026
2c95eda
Add a workflow to create backport PRs.
desrosj Apr 17, 2026
79ef841
Add workflow for testing backport PRs.
desrosj Apr 17, 2026
88ae9bc
Exclude major versions from Dependabot PRs.
desrosj May 18, 2026
b5f633e
Configure cooldown period in Dependabot.
desrosj May 21, 2026
4f4b61b
Docs: Add design spec for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
46ca998
Build/Test Tools: Add Gutenberg Sync workflow skeleton and setup job.
desrosj Jun 26, 2026
247082b
Build/Test Tools: Harden Gutenberg Sync setup job branch detection.
desrosj Jun 26, 2026
857652e
Build/Test Tools: Add trunk update job to Gutenberg Sync workflow.
desrosj Jun 26, 2026
795ec7a
Build/Test Tools: Add strict mode to trunk SHA resolution step.
desrosj Jun 26, 2026
fa81b05
Build/Test Tools: Add version branch update job to Gutenberg Sync wor…
desrosj Jun 26, 2026
afb8cfd
Docs: Add implementation plan for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
fdc3543
Build/Test Tools: Harden Gutenberg Sync version branch changelog and …
desrosj Jun 26, 2026
5eae9e4
Build/Test Tools: Use a supported-branch env var and single-branch di…
desrosj Jun 26, 2026
6e4b86b
Build/Test Tools: Collapse Gutenberg Sync into a single manual-dispat…
desrosj Jun 26, 2026
41f5705
Build/Test Tools: Drop the determine-branch step in favor of workflow…
desrosj Jun 26, 2026
c2ea595
Build/Test Tools: Make Gutenberg Sync run from a fork and PR back to …
desrosj Jun 29, 2026
bade6ba
Build/Test Tools: Check out Gutenberg via actions/checkout and drop t…
desrosj Jun 29, 2026
e4bd373
Build/Test Tools: Build the Gutenberg Sync PR body from a markdown te…
desrosj Jun 29, 2026
6abe5d7
Build/Test Tools: Fill the PR body template in place and split out la…
desrosj Jun 29, 2026
31ae1f3
Build/Test Tools: Split Gutenberg Sync into atomic steps and relocate…
desrosj Jun 29, 2026
9275283
Build/Test Tools: Split Gutenberg Sync into separate trunk and versio…
desrosj Jun 29, 2026
532f566
Build/Test Tools: Extract the Gutenberg Sync publish logic into a reu…
desrosj Jun 29, 2026
9b4c992
Build/Test Tools: Revert Gutenberg Sync to a single job with inline b…
desrosj Jun 29, 2026
f31965f
Build/Test Tools: Output the Gutenberg Sync PR body to the job summar…
desrosj Jun 29, 2026
b64d163
Reorganize logic into separate jobs.
desrosj Jun 29, 2026
337da76
Build/Test Tools: Wire Gutenberg Sync data flow across the split jobs.
desrosj Jun 29, 2026
579d385
Reorganize further.
desrosj Jun 29, 2026
2586026
Build/Test Tools: Add a commit list, fold the release changelog into …
desrosj Jun 29, 2026
416ef71
Build/Test Tools: Replace __OLD_SHA__ and fix the templated changelog…
desrosj Jun 29, 2026
21ee2a8
Build/Test Tools: Reword the sync PR title/summary and fix title esca…
desrosj Jun 29, 2026
1815e2c
Build/Test Tools: Fix the combined Gutenberg checkout and restrict th…
desrosj Jun 29, 2026
d72ae3f
Build/Test Tools: Quote the Gutenberg Sync branch input values.
desrosj Jun 29, 2026
1d540aa
Update PR template.
desrosj Jun 29, 2026
f8b6b69
Update phpstan/phpstan requirement from 2.2.5 to 2.2.6
dependabot[bot] Aug 4, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
331 changes: 331 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,331 @@
# Configure Dependabot scanning.
version: 2

updates:
# Check for updates to GitHub Actions.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
github-actions:
applies-to: version-updates
update-types:
- minor
- patch

# Check for updates to Composer packages.
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
# These dependencies do not currently need to be managed with Dependabot.
- dependency-name: "squizlabs/php_codesniffer"
- dependency-name: "wp-coding-standards/wpcs"
- dependency-name: "phpcompatibility/php-compatibility"
- dependency-name: "yoast/phpunit-polyfills"
groups:
composer-packages:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "composer/ca-bundle"

# Monitor some npm dependencies for updates in groups.
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
- dependency-name: "@wordpress/*"
groups:
##
# Groups for updating devDependencies.
##

# Dependencies related to Playwright testing (E2E, performance).
tests-playwright:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*playwright*"
# Dependencies related to JavaScript testing with QUnit.
tests-qunit:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*qunit*"
- "sinon*"
# Dependencies related to CSS and SASS building and manilupating.
dev-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "autoprefixer"
# postcss and css related dependencies.
- "*css*"
- "*sass"
# Dependencies related to the Webpack build process.
dev-webpack:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*webpack*"
- "react-refresh"
- "source-map-loader"
# Dependencies related to the local Docker development environment.
dev-docker:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "dotenv*"
- "wait-on"
# Dependencies that do not fall into a specific grouping.
dev-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chalk"
- "check-node-version"
- "ink-docstrap"
- "install-changed"
- "matchdep"
- "uuid"
# Dependencies related to JavaScript minification.
dev-uglify:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*uglify*"
# All GruntJS related dependencies that do not relate to another group.
dev-grunt:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*grunt*"

##
# Groups for updating production dependencies.
##

# Dependencies related to jQuery and its ecosystem.
external-jquery:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "jquery*"
# Dependencies related to React and its ecosystem.
external-react:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "react*"
- "!react-refresh"
# Dependencies used for bundling polyfill libraries into WordPress.
external-polyfills:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "core-js-url-browser"
- "element-closest"
- "formdata-polyfill"
- "imagesloaded"
- "objectFitPolyfill"
- "polyfill-library"
- "regenerator-runtime"
- "whatwg-fetch"
- "wicg-inert"
# Dependencies related to the Masonry library.
external-masonry:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "masonry-layout"
# Dependencies that do not fall into a specific grouping.
external-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "backbone"
- "clipboard"
- "hoverintent"
- "json2php"
- "lodash"
- "moment"
- "underscore"

# Monitor npm dependencies within default themes.
- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyfive"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyfive-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentytwo"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentytwo-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyone"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyone-sass-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
- "!*stylelint*"
twentytwentyone-eslint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**eslint*"
twentytwentyone-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**stylelint*"
twentytwentyone-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "minimist"
- "npm-run-all"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwenty"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwenty-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
twentytwenty-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*stylelint*"
twentytwenty-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "concurrently"
- "@wordpress/scripts"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentynineteen"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentynineteen-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
twentynineteen-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "npm-run-all"
24 changes: 24 additions & 0 deletions .github/template-gutenberg-sync-pr-body.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
This updates the pinned Gutenberg repository commit hash for `__BRANCH__` from `__OLD_SHA__` to `__NEW_SHA__`.

<details>
<summary>Changes</summary>

__COMMIT_LIST__

__SOURCE_LINE__

</details>

<details>
<summary>Changelog</summary>

__CHANGELOG__

</details>

**Note:** This pull request was created by the `gutenberg-sync.yml` workflow.

Trac ticket: Core-

---
**This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See [GitHub Pull Requests for Code Review](https://make.wordpress.org/core/handbook/contribute/git/github-pull-requests-for-code-review/) in the Core Handbook for more details.**
Loading
Loading