Merge branch 'main' into copilot/fix-plugin-verification-checks

Author: swissspidy

.github/workflows/copilot-setup-steps.yml

@@ -9,23 +9,29 @@ on:
     paths:
       - .github/workflows/copilot-setup-steps.yml
 
+permissions:
+  contents: read
+
 jobs:
   copilot-setup-steps:
+    name: Setup environment
     runs-on: ubuntu-latest
     permissions:
       contents: read
 
     steps:
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
 
       - name: Check existence of composer.json file
         id: check_composer_file
         run: echo "files_exists=$(test -f composer.json && echo true || echo false)" >> "$GITHUB_OUTPUT"
 
       - name: Set up PHP environment
         if: steps.check_composer_file.outputs.files_exists == 'true'
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2
+        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
         with:
           php-version: 'latest'
           ini-values: zend.assertions=1, error_reporting=-1, display_errors=On
@@ -36,9 +42,6 @@ jobs:
 
       - name: Install Composer dependencies & cache dependencies
         if: steps.check_composer_file.outputs.files_exists == 'true'
-        uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # v3
+        uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # 4.0.0
         env:
           COMPOSER_ROOT_VERSION: dev-${{ github.event.repository.default_branch }}
-        with:
-          # Bust the cache at least once a month - output format: YYYY-MM.
-          custom-cache-suffix: $(date -u "+%Y-%m")

README.md

@@ -3,7 +3,7 @@ wp-cli/checksum-command
 
 Verifies file integrity by comparing to published checksums.
 
-[![Testing](https://github.com/wp-cli/checksum-command/actions/workflows/testing.yml/badge.svg)](https://github.com/wp-cli/checksum-command/actions/workflows/testing.yml)
+[![Testing](https://github.com/wp-cli/checksum-command/actions/workflows/testing.yml/badge.svg)](https://github.com/wp-cli/checksum-command/actions/workflows/testing.yml) [![Code Coverage](https://codecov.io/gh/wp-cli/checksum-command/branch/main/graph/badge.svg)](https://codecov.io/gh/wp-cli/checksum-command/tree/main)
 
 Quick links: [Using](#using) | [Installing](#installing) | [Contributing](#contributing) | [Support](#support)
 
@@ -175,6 +175,10 @@ Want to contribute a new feature? Please first [open a new issue](https://github
 
 Once you've decided to commit the time to seeing your pull request through, [please follow our guidelines for creating a pull request](https://make.wordpress.org/cli/handbook/pull-requests/) to make sure it's a pleasant experience. See "[Setting up](https://make.wordpress.org/cli/handbook/pull-requests/#setting-up)" for details specific to working on this package locally.
 
+### License
+
+This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.
+
 ## Support
 
 GitHub issues aren't for general support questions, but there are other venues you can try: https://wp-cli.org/#support

codecov.yml

@@ -55,36 +55,20 @@ Feature: Validate checksums for WordPress plugins
   Scenario: Soft changes are only reported in strict mode
     Given a WP install
 
-    When I run `wp plugin install release-notes --version=0.1`
+    When I run `wp plugin install voice-search --version=1.2.0`
     Then STDOUT should not be empty
     And STDERR should be empty
 
-    Given "Release Notes" replaced with "Different Name" in the wp-content/plugins/release-notes/readme.txt file
+    Given "Voice Search" replaced with "Different Name" in the wp-content/plugins/voice-search/readme.txt file
 
-    When I run `wp plugin verify-checksums release-notes`
+    When I run `wp plugin verify-checksums voice-search`
     Then STDOUT should be:
       """
       Success: Verified 1 of 1 plugins.
       """
     And STDERR should be empty
 
-    When I try `wp plugin verify-checksums release-notes --strict`
-    Then STDOUT should not be empty
-    And STDERR should contain:
-      """
-      Error: No plugins verified (1 failed).
-      """
-
-    Given "Release Notes" replaced with "Different Name" in the wp-content/plugins/release-notes/README.md file
-
-    When I run `wp plugin verify-checksums release-notes`
-    Then STDOUT should be:
-      """
-      Success: Verified 1 of 1 plugins.
-      """
-    And STDERR should be empty
-
-    When I try `wp plugin verify-checksums release-notes --strict`
+    When I try `wp plugin verify-checksums voice-search --strict`
     Then STDOUT should not be empty
     And STDERR should contain:
       """

features/checksum-plugin.feature

@@ -5,8 +5,8 @@
 	<!--
 	#############################################################################
 	COMMAND LINE ARGUMENTS
-	For help understanding this file: https://github.com/squizlabs/PHP_CodeSniffer/wiki/Annotated-ruleset.xml
-	For help using PHPCS: https://github.com/squizlabs/PHP_CodeSniffer/wiki/Usage
+	For help understanding this file: https://github.com/PHPCSStandards/PHP_CodeSniffer/wiki/Annotated-ruleset.xml
+	For help using PHPCS: https://github.com/PHPCSStandards/PHP_CodeSniffer/wiki/Usage
 	#############################################################################
 	-->