merge with trunk

Author: crodriguezbrito

.github/dependabot.yml

@@ -4,7 +4,7 @@ updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
-    target-branch: "develop"
+    target-branch: "trunk"
     allow:
       - dependency-type: direct
     schedule:
@@ -14,11 +14,12 @@ updates:
       include: "scope"
     labels:
       - "dependencies"
+      - "workflows"
 
   # Maintain dependencies for npm
   - package-ecosystem: "npm"
     directory: "/"
-    target-branch: "develop"
+    target-branch: "trunk"
     allow:
       - dependency-type: direct
     schedule:
@@ -31,17 +32,11 @@ updates:
     labels:
       - "dependencies"
       - "javascript"
-    registries:
-      npm-github:
-        type: npm-registry
-        url: https://npm.pkg.github.com
-        token: ${{ secrets.NEWFOLD_ACCESS_TOKEN }}
-        replaces-base: true
 
   # Maintain dependencies for Composer
   - package-ecosystem: "composer"
     directory: "/"
-    target-branch: "develop"
+    target-branch: "trunk"
     schedule:
       interval: "daily"
     allow:

.github/scripts/set-version-bump.js

@@ -2,32 +2,48 @@ const fs = require( 'fs' );
 const path = require( 'path' );
 const semver = require( 'semver' );
 const packagefile = path.resolve( __dirname, '../../package.json' );
-const pluginfile = path.resolve( __dirname, '../../bootstrap.php' );
+const pluginfile = path.resolve(
+	__dirname,
+	'../../bootstrap.php'
+);
 
 if ( fs.existsSync( packagefile ) && fs.existsSync( pluginfile ) ) {
-    const packageData = require( packagefile );
-    const currentVersion = packageData.version;
-    let type = process.argv[ 2 ];
-    if ( ! [ 'major', 'minor', 'patch' ].includes( type ) ) {
-        type = 'patch';
-    }
+	const packageData = require( packagefile );
+	const currentVersion = packageData.version;
+	let type = process.argv[ 2 ];
+	if ( ! [ 'major', 'minor', 'patch' ].includes( type ) ) {
+		type = 'patch';
+	}
 
-    const newVersion = semver.inc( packageData.version, type );
-    packageData.version = newVersion;
-    fs.writeFileSync( packagefile, JSON.stringify( packageData, null, 4 ) );
+	const newVersion = semver.inc( packageData.version, type );
+	packageData.version = newVersion;
 
-    fs.readFile( pluginfile, 'utf8', function ( err, data ) {
-        if ( err ) {
-            return console.log( err );
-        }
-        const result = data.replaceAll( currentVersion, newVersion );
+	// update version in package file
+	fs.writeFileSync( packagefile, JSON.stringify( packageData, null, 2 ) );
 
-        fs.writeFile( pluginfile, result, 'utf8', function ( err ) {
-            if ( err ) {
-                return console.log( err );
-            }
-        } );
-    } );
+	fs.readFile( pluginfile, 'utf8', function ( err, data ) {
+		if ( err ) {
+			return console.log( err );
+		}
+		const result = data.replaceAll( currentVersion, newVersion );
 
-    console.log( 'Version updated', currentVersion, '=>', newVersion );
+		// update version in php file
+		fs.writeFile( pluginfile, result, 'utf8', function ( err ) {
+			if ( err ) {
+				return console.log( err );
+			}
+		} );
+	} );
+
+	const output = {
+		oldVersion: currentVersion,
+		newVersion: newVersion,
+		level: type,
+		message: `Version updated from ${ currentVersion } to ${ newVersion }`,
+	}
+	console.log( JSON.stringify( output ) );
+} else {
+	console.log( JSON.stringify( {
+		message: 'Version update error. A file was not found.',
+	} ) );
 }

.github/workflows/brand-plugin-test.yml

@@ -29,7 +29,6 @@ jobs:
     needs: setup
     uses: newfold-labs/workflows/.github/workflows/module-plugin-test.yml@main
     with:
-      only-module-tests: true
       module-repo: ${{ github.repository }}
       module-branch: ${{ needs.setup.outputs.branch }}
       plugin-repo: "newfold-labs/wp-plugin-bluehost"
@@ -40,7 +39,6 @@ jobs:
     needs: setup
     uses: newfold-labs/workflows/.github/workflows/module-plugin-test.yml@main
     with:
-      only-module-tests: true
       module-repo: ${{ github.repository }}
       module-branch: ${{ needs.setup.outputs.branch }}
       plugin-repo: "newfold-labs/wp-plugin-hostgator"
@@ -51,7 +49,6 @@ jobs:
     needs: setup
     uses: newfold-labs/workflows/.github/workflows/module-plugin-test.yml@main
     with:
-      only-module-tests: true
       module-repo: ${{ github.repository }}
       module-branch: ${{ needs.setup.outputs.branch }}
       plugin-repo: "newfold-labs/wp-plugin-crazy-domains"

.github/workflows/lint-check-php.yml

@@ -22,17 +22,17 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       # User PHP 7.4 here for compatibility with the WordPress codesniffer rules.
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
         with:
           php-version: '7.3'
           coverage: none
           tools: composer, cs2pr
 
-      - uses: technote-space/get-diff-action@v6
+      - uses: technote-space/get-diff-action@f27caffdd0fb9b13f4fc191c016bb4e0632844af # v6.1.2
         with:
           PATTERNS: |
             **/*.php
@@ -44,7 +44,7 @@ jobs:
         if: "!! env.GIT_DIFF"
 
       - name: Cache Composer vendor directory
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}

.github/workflows/lint-check-spa.yml

@@ -21,35 +21,31 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       # Install Node and npm
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 16.x
           cache: 'npm'
 
       # Checks if node_modules exists in the cache.
       - name: Cache node_modules directory
         id: cache
-        uses: actions/cache@v4
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: node_modules
           key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
           restore-keys: ${{ runner.os }}-node-
 
-      - name: Setup Registry
-        run: printf "@newfold-labs:registry=https://npm.pkg.github.com/\n//npm.pkg.github.com/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
-        if: steps.cache.outputs.cache-hit != 'true'
-
       # Installs @wordpress/scripts for lint checks if it does not exist in the cache.
       - name: Install dependencies
-        run: npm i @wordpress/[email protected] @newfold-labs/js-utility-ui-analytics --legacy-peer-deps
+        run: npm i @wordpress/[email protected] --legacy-peer-deps
         if: steps.cache.outputs.cache-hit != 'true'
 
       # Gets the files changed wrt to trunk and filters out the js files.
-      - uses: technote-space/get-diff-action@v6
+      - uses: technote-space/get-diff-action@f27caffdd0fb9b13f4fc191c016bb4e0632844af # v6.1.2
         with:
           PATTERNS: |
             +(src)/**/*.js
@@ -61,7 +57,7 @@ jobs:
         if: "!! env.GIT_DIFF"
 
       # Gets the files changed wrt to trunk and filters out the SASS files.
-      - uses: technote-space/get-diff-action@v6
+      - uses: technote-space/get-diff-action@f27caffdd0fb9b13f4fc191c016bb4e0632844af # v6.1.2
         with:
           PATTERNS: |
             +(src)/**/*.scss

.github/workflows/newfold-prep-release.yml

@@ -0,0 +1,39 @@
+name: Newfold Prepare Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      level:
+        description: The level of release to be used.
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+        default: 'patch'
+        required: true
+
+jobs:
+
+  # This job is used to extract the branch name from the pull request or branch.
+  setup:
+    name: Setup
+    runs-on: ubuntu-latest
+    outputs:
+      branch: ${{ steps.extract_branch.outputs.branch }}
+    steps:
+      - name: Extract branch name
+        shell: bash
+        run: echo "branch=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
+        id: extract_branch
+
+  # This job runs the newfold module-prep-release workflow for this module.
+  prep-release:
+    name: Prepare Release
+    needs: setup
+    uses: newfold-labs/workflows/.github/workflows/module-prep-release.yml@add/preprelease
+    with:
+      module-repo: ${{ github.repository }}
+      module-branch: ${{ needs.setup.outputs.branch }}
+      level: ${{ inputs.level }}
+    secrets: inherit

.github/workflows/prep-release.yml

@@ -0,0 +1,98 @@
+name: Prepare Release
+# This workflow is manually dispatched. It:
+# - bumps the version as specified in the input
+# - prepares build artifacts
+# - creates a release branch
+# - commits the changes
+# - creates a pull request to the main branch
+# - TODO: consider skipping the PR, push to main, and create a release automatically
+
+on:
+  workflow_dispatch:
+    inputs:
+      level:
+        description: The level of release to be used.
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+        default: 'patch'
+        required: true
+
+jobs:
+  prep-release:
+    name: Prepare Release
+    runs-on: ubuntu-latest
+    permissions:
+      # Give the default token permission to commit, push the changed files, and open a pull request.
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
+        with:
+          php-version: '8.1'
+          coverage: none
+          tools: composer, cs2pr
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: 20.x
+          cache: 'npm'
+
+      - name: Get Composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache Composer vendor directory
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-composer-
+
+      - name: Show versions
+        run: |
+          php --version
+          composer --version
+          node --version
+          npm --version
+
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+
+      - name: Install Packages
+        run: npm install
+
+      - name: Run Update Version Script
+        id: version_bump
+        run: |
+          echo "Running version bump script..."
+          OUTPUT=$(node ./.github/scripts/set-version-bump.js ${{ inputs.level }})
+          echo ""
+          echo "====== Script Output ======"
+          echo "$OUTPUT"
+          echo "==========================="
+          echo ""
+          echo "new_version=$(echo "$OUTPUT" | jq -r '.newVersion')" >> $GITHUB_OUTPUT
+          echo "old_version=$(echo "$OUTPUT" | jq -r '.oldVersion')" >> $GITHUB_OUTPUT
+          echo "message=$(echo "$OUTPUT" | jq -r '.message')" >> $GITHUB_OUTPUT
+      
+      - name: Run Build and Update Language Files
+        run: npm run post-set-version
+
+      - name: Create Release Pull Request
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        with:
+          token: ${{ github.token }}
+          base: trunk
+          branch: release/${{ steps.version_bump.outputs.new_version }}
+          title: "Automated ${{ inputs.level }} Release ${{ steps.version_bump.outputs.new_version }} PR"
+          body: "This PR was created automatically by a GitHub Action."
+          commit-message: "🤖 prep release - ${{ steps.version_bump.outputs.message }}"

.github/workflows/prepare-release.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
 
     - name: Checkout trunk
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Create Release Branch
       run: |
@@ -42,20 +42,20 @@ jobs:
         git commit -m "Update boostrap.php to $new_version"
 
     - name: Setup PHP
-      uses: shivammathur/setup-php@v2
+      uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
       with:
         php-version: '8.1'
         coverage: none
         tools: composer, cs2pr
 
     - name: Setup Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: 16.x
 
     - name: Setup Registry
       run: printf "@newfold-labs:registry=https://npm.pkg.github.com/\n//npm.pkg.github.com/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
-    
+
     - name: Log Debug Information
       run: |
         php --version

.github/workflows/satis-update.yml

@@ -22,7 +22,7 @@ jobs:
         run: echo "VERSION=${GITHUB_REF##*/}" >> $GITHUB_OUTPUT
 
       - name: Repository Dispatch
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0
         with:
           token: ${{ secrets.WEBHOOK_TOKEN }}
           repository: newfold-labs/satis