Add contributor acknowledgement system

.github/workflows/update-contributors.yml

@@ -0,0 +1,70 @@
+name: Update Contributors
+
+on:
+  # Manual trigger for release process
+  workflow_dispatch:
+    inputs:
+      update_output_files:
+        description: 'Update output files (readme.txt, CONTRIBUTORS.md, docs page)'
+        required: false
+        default: 'true'
+        type: choice
+        options:
+          - 'true'
+          - 'false'
+
+# Disable permissions for all available scopes by default
+# Any needed permissions should be configured at the job level
+permissions: {}
+
+jobs:
+  # This job runs manually during release process to update contributor data and output files
+  update-contributor-list:
+    name: Update contributor list
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          persist-credentials: true
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.4'
+          tools: composer:v2
+
+      - name: Install dependencies
+        run: composer install --no-progress --prefer-dist --no-interaction
+
+      - name: Run contributor backfill
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if [ "${{ inputs.update_output_files }}" = "true" ]; then
+            php bin/backfill-contributors.php --validate
+          else
+            php bin/backfill-contributors.php --validate --skip-output
+          fi
+
+      - name: Check for changes
+        id: check-changes
+        run: |
+          if ! git diff --quiet -- bin/contributors.json readme.txt CONTRIBUTORS.md docs/contributing/contributors.md 2>/dev/null; then
+            echo "changes=true" >> $GITHUB_OUTPUT
+          else
+            echo "changes=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Commit and push changes
+        if: steps.check-changes.outputs.changes == 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add bin/contributors.json readme.txt CONTRIBUTORS.md docs/contributing/contributors.md
+          git commit -m "Update contributor list"
+          git push

.phpcs.xml.dist

@@ -28,6 +28,20 @@
 		<!-- file_get_contents is safe for reading local plugin files bundled with the plugin. -->
 	</rule>
 
+	<!-- Test files can use direct filesystem functions and development functions -->
+	<rule ref="WordPress.WP.AlternativeFunctions">
+		<exclude-pattern>/tests/</exclude-pattern>
+	</rule>
+	<rule ref="WordPress.PHP.DevelopmentFunctions">
+		<exclude-pattern>/tests/</exclude-pattern>
+	</rule>
+
+	<!-- Contributor scripts use error silencing for external API calls -->
+	<rule ref="WordPress.PHP.NoSilencedErrors.Discouraged">
+		<exclude-pattern>/bin/backfill-contributors\.php$</exclude-pattern>
+		<exclude-pattern>/bin/contributors-functions\.php$</exclude-pattern>
+	</rule>
+
 	<rule ref="WordPress.Security.EscapeOutput">
 		<properties>
 			<property name="customEscapingFunctions" type="array">

CONTRIBUTORS.md

@@ -0,0 +1,32 @@
+# Contributors
+
+Thank you to all the contributors who have helped make Secure Custom Fields better.
+
+This file is automatically generated from the contributor acknowledgement system.
+Contributors are recognized for their commits, code reviews, issue reports, and comments.
+
+| WordPress.org Username | GitHub Username | Display Name |
+| ---------------------- | --------------- | ------------ |
+| [@bernhard-reiter](https://profiles.wordpress.org/bernhard-reiter) | [@ockham](https://github.com/ockham) |  |
+| [@bjorsch](https://profiles.wordpress.org/bjorsch) | [@anomiex](https://github.com/anomiex) |  |
+| [@cbravobernal](https://profiles.wordpress.org/cbravobernal) | [@cbravobernal](https://github.com/cbravobernal) |  |
+| [@gziolo](https://profiles.wordpress.org/gziolo) | [@gziolo](https://github.com/gziolo) |  |
+| [@haseebnawaz298](https://profiles.wordpress.org/haseebnawaz298) | [@haseebnawaz298](https://github.com/haseebnawaz298) |  |
+| [@jacobodonnell](https://profiles.wordpress.org/jacobodonnell) | [@jacobodonnell](https://github.com/jacobodonnell) |  |
+| [@jamieburchell](https://profiles.wordpress.org/jamieburchell) | [@jamieburchell](https://github.com/jamieburchell) |  |
+| [@kraftbj](https://profiles.wordpress.org/kraftbj) | [@kraftbj](https://github.com/kraftbj) |  |
+| [@mcsf](https://profiles.wordpress.org/mcsf) | [@mcsf](https://github.com/mcsf) |  |
+| [@mr2p](https://profiles.wordpress.org/mr2p) | [@Mr2P](https://github.com/Mr2P) |  |
+| [@paulkevan](https://profiles.wordpress.org/paulkevan) | [@pkevan](https://github.com/pkevan) |  |
+| [@priethor](https://profiles.wordpress.org/priethor) | [@priethor](https://github.com/priethor) |  |
+| [@racmanuel](https://profiles.wordpress.org/racmanuel) | [@racmanuel](https://github.com/racmanuel) |  |
+| [@trajche](https://profiles.wordpress.org/trajche) | [@trajche](https://github.com/trajche) |  |
+| [@yanmetelitsa](https://profiles.wordpress.org/yanmetelitsa) | [@YanMetelitsa](https://github.com/YanMetelitsa) |  |
+| [@youknowriad](https://profiles.wordpress.org/youknowriad) | [@youknowriad](https://github.com/youknowriad) |  |
+|  | [@cyberwani](https://github.com/cyberwani) |  |
+|  | [@DAnn2012](https://github.com/DAnn2012) |  |
+|  | [@duanestorey](https://github.com/duanestorey) |  |
+|  | [@gareins](https://github.com/gareins) |  |
+|  | [@j-hoffmann](https://github.com/j-hoffmann) |  |
+|  | [@justwhocares](https://github.com/justwhocares) |  |
+|  | [@robertdevore](https://github.com/robertdevore) |  |