Skip to content

Internal: Add deploy scripts - #234

Merged
KingYes merged 5 commits into
masterfrom
tweak/deploy-ci
Aug 24, 2026
Merged

Internal: Add deploy scripts#234
KingYes merged 5 commits into
masterfrom
tweak/deploy-ci

Conversation

@KingYes

@KingYes KingYes commented Aug 23, 2026

Copy link
Copy Markdown
Member

✨ PR Description

1. Problem & Context

Adds CI/CD automation for automated releases to WordPress.org with version bumping, changelog validation, and build verification. Enables controlled deployments via workflow dispatch with dry-run support.

2. What Changed (Where)

File Purpose
scripts/validate-build-files.sh Verifies plugin structure and version consistency before packaging
scripts/next-version.js Computes semantic version bumps from package.json
scripts/sync-version.js Syncs version to plugin headers and readme
scripts/extract-changelog-section.js Extracts changelog for GitHub releases
scripts/validate-readme-changelog.js Enforces changelog entry exists with release notes
.github/workflows/release.yml Main release orchestration workflow
.github/workflows/php-coding-standards.yml Added workflow_call trigger
.github/workflows/phpunit.yml Added workflow_call trigger
package.json New npm scripts for versioning and validation
.build-rsync-exclude Excludes scripts/ from build package

3. How It Works

Triggered manually from master branch (KingYes/bainternet/arielk only). Runs phpcs/phpunit validation, computes next version, validates changelog exists with entries, bumps package.json/plugin headers, creates git tag, packages plugin, then deploys to WordPress.org. Dry-run mode skips git/WP.org operations for safety testing.

4. Risks

Hardcoded actor allowlist could block future maintainers—consider GitHub team-based auth. Version sync regex assumes specific file formats; fragile if headers change. No rollback mechanism if WP.org deploy fails mid-process.

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how

@wiz-9a149474ff

wiz-9a149474ff Bot commented Aug 23, 2026

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations 2 Low
SAST Finding SAST Findings 2 Medium
Software Management Finding Software Management Findings -
Total 2 Medium 2 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Comment thread .github/workflows/release.yml Fixed
Comment thread .github/workflows/release.yml Fixed
Comment thread .github/workflows/release.yml Fixed
Comment thread .github/workflows/release.yml Fixed
@KingYes
KingYes merged commit 4fc3613 into master Aug 24, 2026
52 of 53 checks passed
@KingYes
KingYes deleted the tweak/deploy-ci branch August 24, 2026 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants