Skip to content

3.3.8 - #1273

Open
gabrielcld2 wants to merge 97 commits into
masterfrom
uat
Open

3.3.8#1273
gabrielcld2 wants to merge 97 commits into
masterfrom
uat

Conversation

dependabot Bot and others added 30 commits August 25, 2026 12:00
Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 6.0.1 to 7.2.2.
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.2.2)

---
updated-dependencies:
- dependency-name: webpack-cli
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [eslint](https://github.com/eslint/eslint) from 10.8.0 to 10.9.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.9.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [globals](https://github.com/sindresorhus/globals) from 16.5.0 to 17.11.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.5.0...v17.11.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Adds a PHPUnit harness that runs against the WordPress core test suite
that wp-env already mounts into its containers.

wp-env ships PHPUnit 10 globally, but the WP 7.0 core test suite calls
PHPUnit\Util\Test::parseTestMethodAnnotations(), which PHPUnit 10
removed. The suite therefore pins PHPUnit 9.6 and the Yoast polyfills as
plugin dev dependencies and runs vendor/bin/phpunit in the container.

Covers the Utils helpers plus Cloudinary CDN URL generation and image tag
attribute rebuilding. The URL path reads only the cloud name, cname and
private_cdn credentials, so the tests need no Cloudinary account and the
CI job needs no secrets.

Run locally with npm run env:start, then npm run test:unit.
Add WordPress unit testing with PHPUnit via wp-env
Bumps [dealerdirect/phpcodesniffer-composer-installer](https://github.com/Dealerdirect/phpcodesniffer-composer-installer) from 0.7.2 to 1.2.1.
- [Release notes](https://github.com/Dealerdirect/phpcodesniffer-composer-installer/releases)
- [Changelog](https://github.com/PHPCSStandards/composer-installer/blob/main/CHANGELOG.md)
- [Commits](PHPCSStandards/composer-installer@v0.7.2...v1.2.1)

---
updated-dependencies:
- dependency-name: dealerdirect/phpcodesniffer-composer-installer
  dependency-version: 1.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…hment's own orphan

PR #1182 treated any attachment with no locally-saved public_id as proof that a colliding
Cloudinary asset was an orphan from that same attachment's own crashed upload, and overwrote
it. That's wrong for a brand new attachment too, since it also has no public_id yet -- so a
fresh upload that happens to derive the same public_id as an unrelated, older asset (e.g.
WordPress reusing a filename across months) silently clobbers that older asset.

Only take the overwrite path when the existing asset's byte size also matches the local file,
which is true for a genuine orphan of this attachment's own upload but not for an unrelated
collision.

Fixes #1241
- Compare against the same file Api::upload() actually sends, not always the attached
  file. For images over big_image_size_threshold, get_attached_file() returns the
  "-scaled" copy while the upload itself sends the unscaled original via
  wp_get_original_image_path(), so the two sizes never matched and the #1182
  crash-recovery path silently stopped working for large images. Extracted the shared
  resolution into Media::get_upload_file_path(), used by both Api::upload() and the new
  check, instead of a third inline copy.
- Confirm with the response's etag (MD5 of the stored asset) once byte sizes already
  match, closing the remaining false-positive where two unrelated files coincidentally
  share a byte count.
- Log via Utils::log() when the check bails out for lack of a `bytes` field, so a future
  API response change doesn't silently resurrect the #1182 duplicate-per-cycle bug.
- Mark is_matching_existing_asset() @internal and narrow its docblock to the sync type it
  actually runs for.

Extends the test suite with the scaled-image and etag scenarios.
…lop/globals-17.11.0

Bump globals from 16.5.0 to 17.11.0
…lop/eslint-10.9.0

Bump eslint from 10.8.0 to 10.9.0
…lop/webpack-cli-7.2.2

Bump webpack-cli from 6.0.1 to 7.2.2
…dealerdirect/phpcodesniffer-composer-installer-1.2.1

Bump dealerdirect/phpcodesniffer-composer-installer from 0.7.2 to 1.2.1
Bumps [php-stubs/woocommerce-stubs](https://github.com/php-stubs/woocommerce-stubs) from 9.9.5 to 11.0.0.
- [Commits](php-stubs/woocommerce-stubs@v9.9.5...v11.0.0)

---
updated-dependencies:
- dependency-name: php-stubs/woocommerce-stubs
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…php-stubs/woocommerce-stubs-11.0.0

Bump php-stubs/woocommerce-stubs from 9.9.5 to 11.0.0
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 29.15.2 to 29.16.1.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.15.2...v29.16.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-version: 29.16.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 16.4.0 to 17.3.0.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.4.0...v17.3.0)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [npm-run-all2](https://github.com/bcomnes/npm-run-all2) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/bcomnes/npm-run-all2/releases)
- [Changelog](https://github.com/bcomnes/npm-run-all2/blob/master/CHANGELOG.md)
- [Commits](bcomnes/npm-run-all2@v9.0.2...v9.0.3)

---
updated-dependencies:
- dependency-name: npm-run-all2
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [yoast/phpunit-polyfills](https://github.com/Yoast/PHPUnit-Polyfills) from 1.1.5 to 4.0.0.
- [Release notes](https://github.com/Yoast/PHPUnit-Polyfills/releases)
- [Changelog](https://github.com/Yoast/PHPUnit-Polyfills/blob/4.x/CHANGELOG.md)
- [Commits](Yoast/PHPUnit-Polyfills@1.1.5...4.0.0)

---
updated-dependencies:
- dependency-name: yoast/phpunit-polyfills
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…updates

Bumps the wordpress group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@wordpress/api-fetch](https://github.com/WordPress/gutenberg/tree/HEAD/packages/api-fetch) | `7.48.1` | `7.53.0` |
| [@wordpress/block-editor](https://github.com/WordPress/gutenberg/tree/HEAD/packages/block-editor) | `15.21.1` | `16.2.0` |
| [@wordpress/browserslist-config](https://github.com/WordPress/gutenberg/tree/HEAD/packages/browserslist-config) | `6.51.0` | `6.53.0` |
| [@wordpress/components](https://github.com/WordPress/gutenberg/tree/HEAD/packages/components) | `37.0.0` | `39.0.0` |
| [@wordpress/e2e-test-utils-playwright](https://github.com/WordPress/gutenberg/tree/HEAD/packages/e2e-test-utils-playwright) | `1.51.0` | `1.53.0` |
| [@wordpress/element](https://github.com/WordPress/gutenberg/tree/HEAD/packages/element) | `6.46.0` | `8.5.0` |
| [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) | `10.39.0` | `11.13.0` |
| [@wordpress/eslint-plugin](https://github.com/WordPress/gutenberg/tree/HEAD/packages/eslint-plugin) | `25.7.0` | `25.9.0` |
| [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) | `33.0.0` | `34.1.0` |



Updates `@wordpress/api-fetch` from 7.48.1 to 7.53.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/api-fetch/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/api-fetch@7.53.0/packages/api-fetch)

Updates `@wordpress/block-editor` from 15.21.1 to 16.2.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/block-editor/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/block-editor@16.2.0/packages/block-editor)

Updates `@wordpress/blocks` from 15.24.0 to 15.26.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/blocks/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/blocks@15.26.0/packages/blocks)

Updates `@wordpress/browserslist-config` from 6.51.0 to 6.53.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/browserslist-config/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/browserslist-config@6.53.0/packages/browserslist-config)

Updates `@wordpress/components` from 37.0.0 to 39.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/components/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/components@39.0.0/packages/components)

Updates `@wordpress/data` from 10.51.0 to 10.53.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/data/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/data@10.53.0/packages/data)

Updates `@wordpress/e2e-test-utils-playwright` from 1.51.0 to 1.53.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/e2e-test-utils-playwright/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/e2e-test-utils-playwright@1.53.0/packages/e2e-test-utils-playwright)

Updates `@wordpress/element` from 6.46.0 to 8.5.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/element/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/element@8.5.0/packages/element)

Updates `@wordpress/env` from 10.39.0 to 11.13.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/env@11.13.0/packages/env)

Updates `@wordpress/eslint-plugin` from 25.7.0 to 25.9.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/eslint-plugin@25.9.0/packages/eslint-plugin)

Updates `@wordpress/hooks` from 4.52.0 to 4.53.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/hooks/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/hooks@4.53.0/packages/hooks)

Updates `@wordpress/i18n` from 6.24.0 to 6.26.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/i18n/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/i18n@6.26.0/packages/i18n)

Updates `@wordpress/scripts` from 33.0.0 to 34.1.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@34.1.0/packages/scripts)

---
updated-dependencies:
- dependency-name: "@wordpress/api-fetch"
  dependency-version: 7.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/block-editor"
  dependency-version: 16.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/blocks"
  dependency-version: 15.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/browserslist-config"
  dependency-version: 6.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/components"
  dependency-version: 39.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/data"
  dependency-version: 10.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/e2e-test-utils-playwright"
  dependency-version: 1.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/element"
  dependency-version: 8.5.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/env"
  dependency-version: 11.13.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/eslint-plugin"
  dependency-version: 25.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/hooks"
  dependency-version: 4.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/i18n"
  dependency-version: 6.26.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/scripts"
  dependency-version: 34.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
...

Signed-off-by: dependabot[bot] <support@github.com>
- vip:// paths: skip the etag/md5 hash and rely on byte size alone. Hashing a VIP
  stream-wrapper path pulls the whole object over the network, and a failed read
  returns false rather than throwing -- which the etag check would misread as a
  content mismatch, reintroducing the #1182 duplicate-per-cycle bug on VIP specifically.
- Media::get_upload_file_path(): corrected @return to string|false, matching the
  underlying get_attached_file()/wp_get_original_image_path() core functions.
- Byte/etag equality alone isn't ownership: two unrelated attachments can hold
  byte-identical files that derive the same public ID. Added is_solely_linked_to(),
  mirroring the guard Delete_Sync::delete_asset() already uses, so the overwrite path
  now also requires that no other attachment is already tracked as linked to the
  public ID before treating a collision as this attachment's own orphan.

Extends the test suite with the ownership-conflict, vip://, and missing-public_id
scenarios (29 tests).
…-overwrite

Fix: don't overwrite an unrelated Cloudinary asset on public ID collision
dependabot Bot and others added 30 commits September 15, 2026 10:44
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.61.0 to 1.63.0.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.63.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
remove_global_hooks() alone only fixes directory/domain negotiation
mode, where WPML separately hooks core's rest_url filter to re-insert
the language after the full URL is built. In parameter mode
(WPML_Lang_Parameter_Filters), nothing does that, so the cleaned URL
was missing ?lang= entirely - not just for the sync loopback, but for
every Utils::rest_url() consumer (asset fetch/save, cache purge,
analytics, UI state), silently running them under the default
language's context. wpml_permalink is WPML's documented API for
exactly this and is idempotent across all three negotiation modes.

Also wraps the hook removal in try/finally so a thrown exception can't
leave WPML's URL filters permanently disabled for the rest of the
request, and guards the undocumented remove_global_hooks/
add_global_hooks methods with method_exists().

Addresses review feedback on PR #1281.
Bumps [php-stubs/woocommerce-stubs](https://github.com/php-stubs/woocommerce-stubs) from 11.0.0 to 11.1.0.
- [Commits](php-stubs/woocommerce-stubs@v11.0.0...v11.1.0)

---
updated-dependencies:
- dependency-name: php-stubs/woocommerce-stubs
  dependency-version: 11.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) from 2.2.12 to 2.2.13.
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
The local environment ran on plain HTTP, which hid behaviour that only
appears under TLS: is_ssl() picks the delivery URL scheme, auth cookies
only get the Secure flag over HTTPS, and the admin enforces
FORCE_SSL_ADMIN. Those differences surfaced only in production.

Add an nginx proxy that terminates TLS in front of wp-env, using a
certificate issued by a locally generated CA. Host names resolve through
public wildcard DNS, so no /etc/hosts entry is needed, and the proxy
binds the standard ports so no port number leaks into generated URLs.

Loopback REST requests verify the certificate rather than skipping the
check, so they exercise the same path as production.

CI keeps running over plain HTTP through .wp-env.ci.json, because
runners have no local CA and no proxy container.
Fix media uploaded in a non-default WPML language never finishing sync
…lop/globals-17.12.0

chore(deps-dev): bump globals from 17.11.0 to 17.12.0
…lop/codemirror/state-6.7.4

chore(deps): bump @codemirror/state from 6.7.1 to 6.7.4
…lop/playwright/test-1.63.0

chore(deps-dev): bump @playwright/test from 1.61.0 to 1.63.0
…lop/lint-staged-17.5.0

chore(deps-dev): bump lint-staged from 17.3.0 to 17.5.0
…phpstan/phpstan-2.2.13

chore(deps-dev): bump phpstan/phpstan from 2.2.12 to 2.2.13
…php-stubs/woocommerce-stubs-11.1.0

chore(deps-dev): bump php-stubs/woocommerce-stubs from 11.0.0 to 11.1.0
Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) from 2.2.13 to 2.2.14.
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the wordpress group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@wordpress/api-fetch](https://github.com/WordPress/gutenberg/tree/HEAD/packages/api-fetch) | `7.54.0` | `7.55.0` |
| [@wordpress/block-editor](https://github.com/WordPress/gutenberg/tree/HEAD/packages/block-editor) | `17.0.0` | `17.1.0` |
| [@wordpress/blocks](https://github.com/WordPress/gutenberg/tree/HEAD/packages/blocks) | `15.27.0` | `16.0.0` |
| [@wordpress/browserslist-config](https://github.com/WordPress/gutenberg/tree/HEAD/packages/browserslist-config) | `6.54.0` | `6.55.0` |
| [@wordpress/components](https://github.com/WordPress/gutenberg/tree/HEAD/packages/components) | `40.0.0` | `40.1.0` |
| [@wordpress/data](https://github.com/WordPress/gutenberg/tree/HEAD/packages/data) | `10.54.0` | `10.55.0` |
| [@wordpress/e2e-test-utils-playwright](https://github.com/WordPress/gutenberg/tree/HEAD/packages/e2e-test-utils-playwright) | `1.54.0` | `2.0.0` |
| [@wordpress/element](https://github.com/WordPress/gutenberg/tree/HEAD/packages/element) | `8.6.0` | `8.7.0` |
| [@wordpress/env](https://github.com/WordPress/gutenberg/tree/HEAD/packages/env) | `11.14.0` | `11.15.0` |
| [@wordpress/eslint-plugin](https://github.com/WordPress/gutenberg/tree/HEAD/packages/eslint-plugin) | `25.10.0` | `26.0.0` |
| [@wordpress/hooks](https://github.com/WordPress/gutenberg/tree/HEAD/packages/hooks) | `4.54.0` | `4.55.0` |
| [@wordpress/i18n](https://github.com/WordPress/gutenberg/tree/HEAD/packages/i18n) | `6.27.0` | `6.28.0` |
| [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts) | `34.2.0` | `35.0.0` |


Updates `@wordpress/api-fetch` from 7.54.0 to 7.55.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/api-fetch/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/api-fetch@7.55.0/packages/api-fetch)

Updates `@wordpress/block-editor` from 17.0.0 to 17.1.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/block-editor/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/block-editor@17.1.0/packages/block-editor)

Updates `@wordpress/blocks` from 15.27.0 to 16.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/blocks/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/blocks@16.0.0/packages/blocks)

Updates `@wordpress/browserslist-config` from 6.54.0 to 6.55.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/browserslist-config/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/browserslist-config@6.55.0/packages/browserslist-config)

Updates `@wordpress/components` from 40.0.0 to 40.1.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/components/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/components@40.1.0/packages/components)

Updates `@wordpress/data` from 10.54.0 to 10.55.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/data/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/data@10.55.0/packages/data)

Updates `@wordpress/e2e-test-utils-playwright` from 1.54.0 to 2.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/e2e-test-utils-playwright/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/e2e-test-utils-playwright@2.0.0/packages/e2e-test-utils-playwright)

Updates `@wordpress/element` from 8.6.0 to 8.7.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/element/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/element@8.7.0/packages/element)

Updates `@wordpress/env` from 11.14.0 to 11.15.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/env/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/env@11.15.0/packages/env)

Updates `@wordpress/eslint-plugin` from 25.10.0 to 26.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/eslint-plugin@26.0.0/packages/eslint-plugin)

Updates `@wordpress/hooks` from 4.54.0 to 4.55.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/hooks/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/hooks@4.55.0/packages/hooks)

Updates `@wordpress/i18n` from 6.27.0 to 6.28.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/i18n/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/i18n@6.28.0/packages/i18n)

Updates `@wordpress/scripts` from 34.2.0 to 35.0.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@35.0.0/packages/scripts)

---
updated-dependencies:
- dependency-name: "@wordpress/api-fetch"
  dependency-version: 7.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/block-editor"
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/blocks"
  dependency-version: 16.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/browserslist-config"
  dependency-version: 6.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/components"
  dependency-version: 40.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/data"
  dependency-version: 10.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/e2e-test-utils-playwright"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/element"
  dependency-version: 8.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/env"
  dependency-version: 11.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/eslint-plugin"
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
- dependency-name: "@wordpress/hooks"
  dependency-version: 4.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/i18n"
  dependency-version: 6.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: wordpress
- dependency-name: "@wordpress/scripts"
  dependency-version: 35.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: wordpress
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 17.5.0 to 17.5.1.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.5.0...v17.5.1)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [cssnano](https://github.com/cssnano/cssnano) from 7.1.9 to 9.0.4.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@9.0.4)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Three problems found in review of the HTTPS proxy scripts.

Container lookup matched on a name pattern, but wp-env derives its
Compose project name from a hash of the config path, so the pattern was
loose enough to match other projects. The scripts edited /etc/hosts and
the certificate store of an unrelated container. Identify containers by
the bind mount of this repository instead.

sed -i cannot write /etc/hosts, because Docker bind-mounts it and sed
works by renaming a temporary file over the target. The failure was
discarded, so stale host entries accumulated while the script reported
success. Filter through a temporary file and copy the contents back.

Upstream ports were hard-coded, so a developer using wp-env's supported
port overrides got an nginx upstream error. Read the port from the
environment, then the config files, then fall back to the defaults.
The unit job installed @wordpress/env on its own into a scratch prefix
to avoid a full npm ci. That install resolved dependency ranges fresh
against npm rather than obeying package-lock.json, so the job depended
on whatever upstream had published that day.

A broken @wp-playground/cli 3.1.55 release, pulled in transitively by
@wordpress/env, pinned a @php-wasm/node-8-1 version that was never
published. Every run of the job failed while the lockfile-based jobs
were unaffected.

Use npm ci, which installs the locked tree and cannot break because of
a third-party release. Its postinstall hook also runs composer install,
so the separate Composer step is no longer needed. Enable npm caching,
which this job alone was missing and which explains the slow npm ci
timings that motivated the original workaround.

Also stop exporting NODE_EXTRA_CA_CERTS unconditionally for e2e runs.
CI has no certificate, so Node logged "Ignoring extra certs" on every
run; a small wrapper now sets it only when the file exists.
…phpstan/phpstan-2.2.14

chore(deps-dev): bump phpstan/phpstan from 2.2.13 to 2.2.14
…lop/wordpress-0ec5f3298c

chore(deps-dev): bump the wordpress group with 13 updates
…lop/lint-staged-17.5.1

chore(deps-dev): bump lint-staged from 17.5.0 to 17.5.1
…lop/cssnano-9.0.4

chore(deps-dev): bump cssnano from 7.1.9 to 9.0.4
Bumps [webpack](https://github.com/webpack/webpack) from 5.109.0 to 5.111.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.109.0...v5.111.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…lop/webpack-5.111.0

chore(deps-dev): bump webpack from 5.109.0 to 5.111.1
PR review found two places that still assumed the default ports after
this branch made them configurable.

The Apache listener was hard-coded to 8888, so with a custom port
wp-env published one port while Apache opened another and loopback
requests failed. It now uses the resolved port from config.sh.

The URL filter matched a literal 8888 or 8889, so a custom port stayed
in every generated URL. It now derives the public origin from
WP_CONTENT_URL, which wp-env never rewrites, and replaces whatever port
is present. It also leaves URLs on other hosts untouched, which the
previous pattern did not guard against.
feat(env): Serve local wp-env over HTTPS

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants