Commit Graph

8 Commits

Author SHA1 Message Date
9fdfa7a8a9 fix: pin all GitHub Actions to full commit SHAs (resolves SonarCloud S7637) (#90)
Pin all floating version tags (@v1, @v2, @v3, @v4, @master) to full commit
SHAs across all workflow files to eliminate supply chain security risk.

Actions pinned:
- actions/checkout@v3 -> f43a0e5 (v3.6.0) in release.yml, sync-wiki.yml
- actions/checkout@v4 -> 34e1148 (v4) in tests.yml
- shivammathur/setup-php@v2 -> accd612 (v2) in all workflows
- actions/setup-node@v4 -> 49933ea (v4) in playground-tests*.yml, wordpress-tests.yml
- actions/upload-artifact@v4 -> ea165f8 (v4) in playground-tests*.yml, wordpress-tests.yml
- softprops/action-gh-release@v1 -> de2c0eb (v1) in release.yml
- codacy/codacy-analysis-cli-action@v4 -> 562ee3e (v4) in code-quality.yml
- github/codeql-action/upload-sarif@v3 -> 603b797 (v3) in code-quality.yml
- swissspidy/wp-performance-action@v2.0.3 -> b7e3ffc (v2.0.3) in playground-tests.yml
- SonarSource/sonarqube-scan-action@master -> 9598b8a in sonarcloud.yml

Closes #89
2026-03-18 04:58:57 +00:00
6684375ea3 Fix duplicate CI runs by removing feature/* from push triggers
Workflows were running twice for feature branches: once on push and once
on pull_request. Now push only triggers for main branch, while feature
branches get CI via the pull_request trigger when a PR exists.

This prevents duplicate workflow runs and the confusion of having
one run pass while another fails for the same commit.
2025-11-24 23:44:19 +00:00
1590be3ba6 Fix GitHub Actions workflow failures
- Add WP_PHPUNIT__DIR and WP_TESTS_DIR environment variables to PHPUnit workflow to fix 'WP_UnitTestCase not found' error
- Increase WordPress Playground server timeout from 60s to 180s with better progress logging to fix timeout failures
- Add conditional checks for SONAR_TOKEN and CODACY_PROJECT_TOKEN to gracefully skip analysis when tokens are not set
- Properly handle server process lifecycle in Playground tests (capture PID, kill on completion)
2025-11-24 19:35:03 +00:00
331307f8b0 Add debugging and error handling to PHPUnit workflow
- Add verbose logging to install-wp-tests.sh step
- Make mysqladmin create non-fatal (database may already exist)
- Add echo statements to track installation progress

This helps diagnose the "Install WordPress test suite" failure
and prevents failures when database already exists.

🤖 Generated with [Qoder][https://qoder.com]
2025-11-16 04:54:23 +00:00
57f2093adb Fix PHPUnit multisite test workflow parameters
Correct the parameter order in install-wp-tests.sh call:
- Parameter 6 should be skip-database-creation (false)
- Parameter 7 should be multisite flag

This fixes the multisite tests that were failing because the
multisite flag was being passed as parameter 6 instead of 7.

🤖 Generated with [Qoder][https://qoder.com]
2025-11-16 04:50:24 +00:00
53ac0ce696 Fix GitHub Actions by using stable action tags
Replace SHA-based action references with stable version tags:
- actions/setup-node@60edb5dd... → @v4
- shivammathur/setup-php@e6f75134... → @v2

This resolves "action could not be found at URI" errors caused by
GitHub API issues when resolving specific commit SHAs.

🤖 Generated with [Qoder][https://qoder.com]
2025-11-16 04:31:21 +00:00
b1966067ea Fix failing tests: Update install-wp-tests.sh, Cypress commands, and GitHub Actions workflows 2025-04-23 04:26:06 +01:00
5f598f0f7e Add PHPUnit testing framework and error checking documentation 2025-04-22 22:42:11 +01:00