Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
35 commits
Select commit Hold shift + click to select a range
df9a3ca
Reintroduce a Dependabot configuration file.
desrosj Apr 17, 2026
4b2b2b9
Add a workflow to create backport PRs.
desrosj Apr 17, 2026
15df6f3
Add workflow for testing backport PRs.
desrosj Apr 17, 2026
441c5bc
Exclude major versions from Dependabot PRs.
desrosj May 18, 2026
6ef19fd
Configure cooldown period in Dependabot.
desrosj May 21, 2026
851f0f3
Docs: Add design spec for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
3be3f1a
Build/Test Tools: Add Gutenberg Sync workflow skeleton and setup job.
desrosj Jun 26, 2026
88754e3
Build/Test Tools: Harden Gutenberg Sync setup job branch detection.
desrosj Jun 26, 2026
7549022
Build/Test Tools: Add trunk update job to Gutenberg Sync workflow.
desrosj Jun 26, 2026
1c16a4d
Build/Test Tools: Add strict mode to trunk SHA resolution step.
desrosj Jun 26, 2026
032674d
Build/Test Tools: Add version branch update job to Gutenberg Sync wor…
desrosj Jun 26, 2026
85701bf
Docs: Add implementation plan for Gutenberg SHA sync workflow.
desrosj Jun 26, 2026
9cb199d
Build/Test Tools: Harden Gutenberg Sync version branch changelog and …
desrosj Jun 26, 2026
8ef52e5
Build/Test Tools: Use a supported-branch env var and single-branch di…
desrosj Jun 26, 2026
95a420c
Build/Test Tools: Collapse Gutenberg Sync into a single manual-dispat…
desrosj Jun 26, 2026
ead8a06
Build/Test Tools: Drop the determine-branch step in favor of workflow…
desrosj Jun 26, 2026
0453015
Build/Test Tools: Make Gutenberg Sync run from a fork and PR back to …
desrosj Jun 29, 2026
bec06dc
Build/Test Tools: Check out Gutenberg via actions/checkout and drop t…
desrosj Jun 29, 2026
49a6db3
Build/Test Tools: Build the Gutenberg Sync PR body from a markdown te…
desrosj Jun 29, 2026
5123032
Build/Test Tools: Fill the PR body template in place and split out la…
desrosj Jun 29, 2026
264242a
Build/Test Tools: Split Gutenberg Sync into atomic steps and relocate…
desrosj Jun 29, 2026
e5f62c3
Build/Test Tools: Split Gutenberg Sync into separate trunk and versio…
desrosj Jun 29, 2026
34d9be4
Build/Test Tools: Extract the Gutenberg Sync publish logic into a reu…
desrosj Jun 29, 2026
275f2de
Build/Test Tools: Revert Gutenberg Sync to a single job with inline b…
desrosj Jun 29, 2026
6e7994b
Build/Test Tools: Output the Gutenberg Sync PR body to the job summar…
desrosj Jun 29, 2026
4a603cb
Reorganize logic into separate jobs.
desrosj Jun 29, 2026
8b77672
Build/Test Tools: Wire Gutenberg Sync data flow across the split jobs.
desrosj Jun 29, 2026
e0137bd
Reorganize further.
desrosj Jun 29, 2026
9970ab6
Build/Test Tools: Add a commit list, fold the release changelog into …
desrosj Jun 29, 2026
b9caa94
Build/Test Tools: Replace __OLD_SHA__ and fix the templated changelog…
desrosj Jun 29, 2026
576e056
Build/Test Tools: Reword the sync PR title/summary and fix title esca…
desrosj Jun 29, 2026
0f64aa2
Build/Test Tools: Fix the combined Gutenberg checkout and restrict th…
desrosj Jun 29, 2026
a7b8b98
Build/Test Tools: Quote the Gutenberg Sync branch input values.
desrosj Jun 29, 2026
8464bca
Update PR template.
desrosj Jun 29, 2026
dfad3ef
Bump qunit from 2.26.0 to 3.0.0
dependabot[bot] Oct 20, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
331 changes: 331 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,331 @@
# Configure Dependabot scanning.
version: 2

updates:
# Check for updates to GitHub Actions.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
github-actions:
applies-to: version-updates
update-types:
- minor
- patch

# Check for updates to Composer packages.
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
# These dependencies do not currently need to be managed with Dependabot.
- dependency-name: "squizlabs/php_codesniffer"
- dependency-name: "wp-coding-standards/wpcs"
- dependency-name: "phpcompatibility/php-compatibility"
- dependency-name: "yoast/phpunit-polyfills"
groups:
composer-packages:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "composer/ca-bundle"

# Monitor some npm dependencies for updates in groups.
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 50
cooldown:
default-days: 7
ignore:
- dependency-name: "@wordpress/*"
groups:
##
# Groups for updating devDependencies.
##

# Dependencies related to Playwright testing (E2E, performance).
tests-playwright:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*playwright*"
# Dependencies related to JavaScript testing with QUnit.
tests-qunit:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*qunit*"
- "sinon*"
# Dependencies related to CSS and SASS building and manilupating.
dev-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "autoprefixer"
# postcss and css related dependencies.
- "*css*"
- "*sass"
# Dependencies related to the Webpack build process.
dev-webpack:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*webpack*"
- "react-refresh"
- "source-map-loader"
# Dependencies related to the local Docker development environment.
dev-docker:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "dotenv*"
- "wait-on"
# Dependencies that do not fall into a specific grouping.
dev-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chalk"
- "check-node-version"
- "ink-docstrap"
- "install-changed"
- "matchdep"
- "uuid"
# Dependencies related to JavaScript minification.
dev-uglify:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*uglify*"
# All GruntJS related dependencies that do not relate to another group.
dev-grunt:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*grunt*"

##
# Groups for updating production dependencies.
##

# Dependencies related to jQuery and its ecosystem.
external-jquery:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "jquery*"
# Dependencies related to React and its ecosystem.
external-react:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "react*"
- "!react-refresh"
# Dependencies used for bundling polyfill libraries into WordPress.
external-polyfills:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "core-js-url-browser"
- "element-closest"
- "formdata-polyfill"
- "imagesloaded"
- "objectFitPolyfill"
- "polyfill-library"
- "regenerator-runtime"
- "whatwg-fetch"
- "wicg-inert"
# Dependencies related to the Masonry library.
external-masonry:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "masonry-layout"
# Dependencies that do not fall into a specific grouping.
external-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "backbone"
- "clipboard"
- "hoverintent"
- "json2php"
- "lodash"
- "moment"
- "underscore"

# Monitor npm dependencies within default themes.
- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyfive"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyfive-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentytwo"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentytwo-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "*css*"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwentyone"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwentyone-sass-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
- "!*stylelint*"
twentytwentyone-eslint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**eslint*"
twentytwentyone-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**stylelint*"
twentytwentyone-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "minimist"
- "npm-run-all"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentytwenty"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentytwenty-css:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
twentytwenty-stylelint:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "*stylelint*"
twentytwenty-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "concurrently"
- "@wordpress/scripts"

- package-ecosystem: "npm"
directory: "/src/wp-content/themes/twentynineteen"
schedule:
interval: "weekly"
open-pull-requests-limit: 50
cooldown:
default-days: 7
groups:
twentynineteen-css-sass:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "**browserslist*"
- "autoprefixer"
- "*css*"
- "*sass*"
twentynineteen-miscellaneous:
applies-to: version-updates
update-types:
- minor
- patch
patterns:
- "chokidar-cli"
- "npm-run-all"
24 changes: 24 additions & 0 deletions .github/template-gutenberg-sync-pr-body.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
This updates the pinned Gutenberg repository commit hash for `__BRANCH__` from `__OLD_SHA__` to `__NEW_SHA__`.

<details>
<summary>Changes</summary>

__COMMIT_LIST__

__SOURCE_LINE__

</details>

<details>
<summary>Changelog</summary>

__CHANGELOG__

</details>

**Note:** This pull request was created by the `gutenberg-sync.yml` workflow.

Trac ticket: Core-

---
**This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See [GitHub Pull Requests for Code Review](https://make.wordpress.org/core/handbook/contribute/git/github-pull-requests-for-code-review/) in the Core Handbook for more details.**
Loading
Loading