Skip to content
New Pull Request Guidance

Remove renovate.json, unused: Dependabot updates the dependencies #43

Sign in to view logs

Remove renovate.json, unused: Dependabot updates the dependencies

Remove renovate.json, unused: Dependabot updates the dependencies #43

Workflow file for this run

.github/workflows/new-pull-request.yml at 48b6c07
# This workflow automatically posts a guidance comment on new pull requests.

Check warning on line 1 in .github/workflows/new-pull-request.yml

View workflow run for this annotation

GitHub Actions / New Pull Request Guidance

Workflow execution policy warning (evaluate mode) 

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# It welcomes contributors and provides a brief message to acknowledge their
# contribution to EngineScript Site Optimizer.
# The workflow is triggered whenever a new pull request is opened.
name: New Pull Request Guidance
on:
# pull_request_target is used only so the workflow can post this static
# guidance comment on forked PRs. Do not add checkout, build, or script steps
# here because this event has access to repository-scoped credentials.
# No step checks out or runs code from the pull request; the job only reads the event.
pull_request_target: # zizmor: ignore[dangerous-triggers]
types: [opened]
permissions: {}
env:
PLUGIN_SLUG: enginescript-site-optimizer
jobs:
guide:
runs-on: ubuntu-latest
# Explicitly define permissions required by the job
permissions:
pull-requests: write
steps:
- name: Post guidance comment on new PR
uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
with:
issue-number: ${{ github.event.pull_request.number }}
body: |
Thanks for contributing to EngineScript Site Optimizer!
**Before we review:**
- [ ] Have you tested your changes with WordPress 7.0+?
- [ ] Are your changes compatible with PHP 8.3+?
- [ ] Have you followed WordPress coding standards?
- [ ] Did you update the CHANGELOG.md if needed?
**Security Reminder**
This plugin stores per-site settings and emits browser resource hints, so please ensure:
- All user input is properly sanitized
- All output is properly escaped
- No security vulnerabilities are introduced
We'll review your PR soon.