Maintain dependencies, CI, tests, and repository hygiene

.eslintrc

@@ -2,12 +2,6 @@
     "extends": [
         "plugin:@wordpress/eslint-plugin/recommended"
     ],
-    "plugins": [
-        "jest"
-    ],
-    "env": {
-        "jest/globals": true
-    },
     "settings": {
         "import/resolver": {
             "typescript": {

.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 4
+    groups:
+      npm-production:
+        applies-to: version-updates
+        dependency-type: production
+      npm-development:
+        applies-to: version-updates
+        dependency-type: development
+
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 4
+    groups:
+      composer-production:
+        applies-to: version-updates
+        dependency-type: production
+      composer-development:
+        applies-to: version-updates
+        dependency-type: development

.github/workflows/be-linting.yml

@@ -2,21 +2,47 @@ name: Linting (Browser extension)
 
 on:
   pull_request:
-    types: [ opened, synchronize ]
+  push:
+    branches:
+      - trunk
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 
 jobs:
   lint:
     runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: .nvmrc
+          cache: npm
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci
+
+      - name: Lint JavaScript and styles
+        run: npm run lint
+
+      - name: Generate schema and type-check
+        run: npm run type-check
+
+      - name: Build Firefox production extension
+        run: npm run build:production:firefox
+
+      - name: Build Chrome production extension
+        run: npm run build:production:chrome
 
-      - name: Lint js
-        run: npm run lint:js
+      - name: Validate packaged manifest references
+        run: npm run validate:extension-builds
 
-      - name: Lint styles
-        run: npm run lint:style
+      - name: Lint Firefox extension
+        run: npm run lint:extension:firefox

.github/workflows/wp-linting.yml

@@ -4,19 +4,31 @@ on:
   pull_request:
     types: [ opened, synchronize ]
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   phpcs:
-    name: phpcs
+    name: PHPCS PHP ${{ matrix.php }}
     runs-on: ubuntu-latest
 
+    strategy:
+      fail-fast: false
+      matrix:
+        php: [ '8.3', '8.4' ]
+
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
 
       - name: Install PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3'
+          php-version: ${{ matrix.php }}
           coverage: 'none'
           tools: composer, cs2pr
 

.github/workflows/wp-tests.yml

@@ -4,14 +4,21 @@ on:
     pull_request:
         types: [ opened, synchronize ]
 
+permissions:
+    contents: read
+
+concurrency:
+    group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+    cancel-in-progress: true
+
 jobs:
     phpunit:
         name: PHPUnit ${{ matrix.php }}
         runs-on: ubuntu-latest
 
         services:
             mysql:
-                image: mysql:5.7
+                image: mysql:8.0
                 ports:
                     - 3306/tcp
                 env:
@@ -26,14 +33,17 @@ jobs:
         strategy:
             fail-fast: false
             matrix:
-                php: [ '8.3' ]
+                php: [ '8.3', '8.4' ]
 
         steps:
             -   name: Check out Git repository
                 uses: actions/checkout@v4
 
-            -   name: Setup npm
+            -   name: Setup Node.js
                 uses: actions/setup-node@v4
+                with:
+                    node-version-file: .nvmrc
+                    cache: npm
 
             -   name: Setup PHP
                 uses: shivammathur/setup-php@v2
@@ -42,19 +52,43 @@ jobs:
                     coverage: 'none'
                     tools: composer
 
-            -   name: Install dependencies
+            -   name: Install locked Composer dependencies
                 uses: ramsey/composer-install@v2
                 with:
                     composer-options: "--no-progress --no-ansi --no-interaction"
 
+            -   name: Audit locked Composer dependencies
+                run: composer audit --locked --no-interaction
+
+            -   name: Install Node dependencies
+                run: npm ci
+
             -   name: Build schema.json
-                run: npm install && npm run build:schema
+                run: npm run build:schema
 
             -   name: Install Subversion
                 run: sudo apt-get update && sudo apt-get install --no-install-recommends --yes subversion
 
+            -   name: Resolve latest stable WordPress version
+                id: wordpress
+                run: |
+                    wordpress_version="$(curl --fail --silent --show-error https://api.wordpress.org/core/version-check/1.7/ | jq -er '.offers[0].version')"
+                    if [[ ! "$wordpress_version" =~ ^[0-9]+\.[0-9]+(\.[0-9]+)?$ ]]; then
+                        echo "Unexpected WordPress version: $wordpress_version" >&2
+                        exit 1
+                    fi
+                    echo "version=$wordpress_version" >> "$GITHUB_OUTPUT"
+
             -   name: Install WordPress test setup
-                run: bash tests/bin/install-wp-tests.sh wordpress_test root password 127.0.0.1:${{ job.services.mysql.ports[3306] }} latest
+                env:
+                    WORDPRESS_VERSION: ${{ steps.wordpress.outputs.version }}
+                run: bash tests/bin/install-wp-tests.sh wordpress_test root password 127.0.0.1:${{ job.services.mysql.ports['3306'] }} "$WORDPRESS_VERSION"
+
+            -   name: Verify installed WordPress version
+                env:
+                    WORDPRESS_VERSION: ${{ steps.wordpress.outputs.version }}
+                run: >-
+                    php -r "require '/tmp/wordpress/wp-includes/version.php'; exit( \$wp_version === getenv( 'WORDPRESS_VERSION' ) ? 0 : 1 );"
 
             -   name: Setup problem matchers for PHPUnit
                 run: echo "::add-matcher::${{ runner.tool_cache }}/phpunit.json"

.gitignore

@@ -6,3 +6,5 @@ schema/schema.json
 
 .phpunit.result.cache
 src/plugin/schema.json
+/backup.sql
+/backup-*.sql

.nvmrc

@@ -0,0 +1 @@
+24

.wp-env.json

@@ -1,11 +1,6 @@
 {
-  "core": "WordPress/WordPress#6.6.2",
-  "phpVersion": "8.3",
-  "env": {
-    "tests": {
-      "phpVersion": "8.3"
-    }
-  },
+  "core": null,
+  "phpVersion": "8.4",
   "plugins": [ "./src/plugin" ],
   "mappings": {
     "wp-content/phpunit.xml.dist": "./phpunit.xml.dist",